当前位置： 首页 > news >正文

damn the jvm again(2)

news 2025/8/13 5:45:29

都想看jvm是吧

class_monitor_agent.c

#include <jni.h>
#include <jvmti.h>
#include <stdio.h>
#include <string.h>// JVM TI环境指针
static jvmtiEnv* jvmti = NULL;// 类加载事件回调函数
void JNICALL ClassFileLoadHook(jvmtiEnv* jvmti, JNIEnv* jni,jclass class_being_redefined, jobject loader,const char* name, jobject protection_domain,jint class_data_len, const unsigned char* class_data,jint* new_class_data_len, unsigned char** new_class_data) {if (name != NULL) {printf("类加载: %s\n", name);} else {printf("类加载: 匿名类\n");}
}// 代理初始化函数 - 修正参数和调用方式
JNIEXPORT jint JNICALL Agent_OnLoad(JavaVM* vm, char* options, void* reserved) {jint result;jvmtiCapabilities capabilities;jvmtiEventCallbacks callbacks;// 修正GetEnv调用参数和类型转换result = (*vm)->GetEnv(vm, (void**)&jvmti, JVMTI_VERSION_1_2);if (result != JNI_OK || jvmti == NULL) {printf("无法获取JVM TI环境，错误码: %d\n", result);return JNI_ERR;}// 初始化能力结构体memset(&capabilities, 0, sizeof(capabilities));capabilities.can_retransform_classes = 1;// 修正能力字段名称capabilities.can_generate_all_class_hook_events = 1;// 设置能力result = (*jvmti)->AddCapabilities(jvmti, &capabilities);if (result != JVMTI_ERROR_NONE) {printf("无法设置JVM TI能力，错误码: %d\n", result);return JNI_ERR;}// 初始化回调结构体memset(&callbacks, 0, sizeof(callbacks));callbacks.ClassFileLoadHook = &ClassFileLoadHook;// 设置回调result = (*jvmti)->SetEventCallbacks(jvmti, &callbacks, sizeof(callbacks));if (result != JVMTI_ERROR_NONE) {printf("无法设置JVM TI回调，错误码: %d\n", result);return JNI_ERR;}// 启用类加载事件监控result = (*jvmti)->SetEventNotificationMode(jvmti, JVMTI_ENABLE, JVMTI_EVENT_CLASS_FILE_LOAD_HOOK, NULL);if (result != JVMTI_ERROR_NONE) {printf("无法启用类加载事件，错误码: %d\n", result);return JNI_ERR;}printf("JVM TI代理初始化成功\n");return JNI_OK;
}// JVM退出时的处理
JNIEXPORT void JNICALL Agent_OnUnload(JavaVM* vm) {if (jvmti != NULL) {// 禁用事件监控(*jvmti)->SetEventNotificationMode(jvmti, JVMTI_DISABLE,JVMTI_EVENT_CLASS_FILE_LOAD_HOOK, NULL);}printf("JVM TI代理卸载\n");
}

thread_trace_agent.c

#include <jni.h>
#include <jvmti.h>
#include <stdio.h>
#include <string.h>static jvmtiEnv* jvmti = NULL;// 线程启动回调
void JNICALL ThreadStart(jvmtiEnv* jvmti, JNIEnv* jni, jthread thread) {// 尝试通过JNI获取线程名称（不依赖JVM TI特定能力）jclass thread_class = (*jni)->FindClass(jni, "java/lang/Thread");jmethodID get_name = (*jni)->GetMethodID(jni, thread_class, "getName", "()Ljava/lang/String;");jstring name_str = (jstring)(*jni)->CallObjectMethod(jni, thread, get_name);const char* name = name_str ? (*jni)->GetStringUTFChars(jni, name_str, NULL) : "无名线程";printf("[THREAD START] 名称: %s, 地址: %p\n", name, (void*)thread);// 释放资源if (name_str) {(*jni)->ReleaseStringUTFChars(jni, name_str, name);}
}// 线程结束回调
void JNICALL ThreadEnd(jvmtiEnv* jvmti, JNIEnv* jni, jthread thread) {// 尝试通过JNI获取线程名称jclass thread_class = (*jni)->FindClass(jni, "java/lang/Thread");jmethodID get_name = (*jni)->GetMethodID(jni, thread_class, "getName", "()Ljava/lang/String;");jstring name_str = (jstring)(*jni)->CallObjectMethod(jni, thread, get_name);const char* name = name_str ? (*jni)->GetStringUTFChars(jni, name_str, NULL) : "无名线程";printf("[THREAD END] 名称: %s, 地址: %p\n", name, (void*)thread);// 释放资源if (name_str) {(*jni)->ReleaseStringUTFChars(jni, name_str, name);}
}// 代理初始化函数
JNIEXPORT jint JNICALL Agent_OnLoad(JavaVM* vm, char* options, void* reserved) {jint result;jvmtiCapabilities capabilities;jvmtiEventCallbacks callbacks;// 获取JVM TI环境result = (*vm)->GetEnv(vm, (void**)&jvmti, JVMTI_VERSION_1_2);if (result != JNI_OK || jvmti == NULL) {printf("无法获取JVM TI环境，错误码: %d\n", result);return JNI_ERR;}// 初始化能力结构体（移除Java SDK 24不支持的字段）memset(&capabilities, 0, sizeof(capabilities));// 注意：不设置can_get_thread_info和can_generate_thread_events（SDK 24无这些字段）// 尝试设置能力（忽略不支持字段导致的错误）result = (*jvmti)->AddCapabilities(jvmti, &capabilities);if (result != JVMTI_ERROR_NONE) {printf("警告: 能力设置部分失败，错误码: %d\n", result);}// 设置线程事件回调memset(&callbacks, 0, sizeof(callbacks));callbacks.ThreadStart = &ThreadStart;callbacks.ThreadEnd = &ThreadEnd;result = (*jvmti)->SetEventCallbacks(jvmti, &callbacks, sizeof(callbacks));if (result != JVMTI_ERROR_NONE) {printf("无法设置回调，错误码: %d\n", result);return JNI_ERR;}// 启用线程启动事件result = (*jvmti)->SetEventNotificationMode(jvmti, JVMTI_ENABLE, JVMTI_EVENT_THREAD_START, NULL);if (result != JVMTI_ERROR_NONE) {printf("无法启用线程启动事件，错误码: %d\n", result);return JNI_ERR;}// 启用线程结束事件result = (*jvmti)->SetEventNotificationMode(jvmti, JVMTI_ENABLE, JVMTI_EVENT_THREAD_END, NULL);if (result != JVMTI_ERROR_NONE) {printf("无法启用线程结束事件，错误码: %d\n", result);return JNI_ERR;}printf("线程跟踪代理初始化成功\n");return JNI_OK;
}// 代理卸载函数
JNIEXPORT void JNICALL Agent_OnUnload(JavaVM* vm) {if (jvmti != NULL) {(*jvmti)->SetEventNotificationMode(jvmti, JVMTI_DISABLE, JVMTI_EVENT_THREAD_START, NULL);(*jvmti)->SetEventNotificationMode(jvmti, JVMTI_DISABLE, JVMTI_EVENT_THREAD_END, NULL);}
}

exception_trace_agent.c

#include <jni.h>
#include <jvmti.h>
#include <stdio.h>
#include <string.h>static jvmtiEnv* jvmti = NULL;// 异常捕获回调（适配Java SDK 24的事件类型）
void JNICALL ExceptionCatch(jvmtiEnv* jvmti, JNIEnv* jni, jthread thread, jmethodID method, jlocation location, jthrowable exception) {jclass ex_class = (*jni)->GetObjectClass(jni, exception);char* ex_class_name;// 获取异常类名(*jvmti)->GetClassSignature(jvmti, ex_class, &ex_class_name, NULL);// 获取异常消息jmethodID get_message = (*jni)->GetMethodID(jni, ex_class, "getMessage", "()Ljava/lang/String;");jstring message_str = (jstring)(*jni)->CallObjectMethod(jni, exception, get_message);const char* message = message_str ? (*jni)->GetStringUTFChars(jni, message_str, NULL) : "无消息";printf("[EXCEPTION CAUGHT] 类型: %s, 消息: %s\n", ex_class_name, message);// 释放资源(*jvmti)->Deallocate(jvmti, (unsigned char*)ex_class_name);if (message_str) {(*jni)->ReleaseStringUTFChars(jni, message_str, message);}
}// 初始化代理
JNIEXPORT jint JNICALL Agent_OnLoad(JavaVM* vm, char* options, void* reserved) {jint result;jvmtiCapabilities capabilities;jvmtiEventCallbacks callbacks;result = (*vm)->GetEnv(vm, (void**)&jvmti, JVMTI_VERSION_1_2);if (result != JNI_OK || jvmti == NULL) return JNI_ERR;// 启用异常监控能力memset(&capabilities, 0, sizeof(capabilities));capabilities.can_generate_exception_events = 1;result = (*jvmti)->AddCapabilities(jvmti, &capabilities);if (result != JVMTI_ERROR_NONE) {printf("无法设置异常监控能力，错误码: %d\n", result);return JNI_ERR;}// 设置异常回调（使用ExceptionCatch而非ExceptionThrown）memset(&callbacks, 0, sizeof(callbacks));callbacks.ExceptionCatch = &ExceptionCatch;result = (*jvmti)->SetEventCallbacks(jvmti, &callbacks, sizeof(callbacks));if (result != JVMTI_ERROR_NONE) return JNI_ERR;// 启用异常捕获事件（适配Java SDK 24）(*jvmti)->SetEventNotificationMode(jvmti, JVMTI_ENABLE, JVMTI_EVENT_EXCEPTION_CATCH, NULL);printf("异常跟踪代理初始化成功\n");return JNI_OK;
}JNIEXPORT void JNICALL Agent_OnUnload(JavaVM* vm) {if (jvmti != NULL) {(*jvmti)->SetEventNotificationMode(jvmti, JVMTI_DISABLE, JVMTI_EVENT_EXCEPTION_CATCH, NULL);}
}

object_trace_agent.c

#include <jni.h>
#include <jvmti.h>
#include <stdio.h>
#include <string.h>static jvmtiEnv* jvmti = NULL;// 对象分配事件回调
void JNICALL VMObjectAlloc(jvmtiEnv* jvmti, JNIEnv* jni, jthread thread,jobject obj, jclass cls, jlong size) {char* class_name;// 获取类名(*jvmti)->GetClassSignature(jvmti, cls, &class_name, NULL);if (class_name) {printf("[ALLOC] 类: %s, 大小: %ld bytes\n", class_name, size);// 释放字符串（JVM TI分配的内存需手动释放）(*jvmti)->Deallocate(jvmti, (unsigned char*)class_name);}
}// 代理初始化
JNIEXPORT jint JNICALL Agent_OnLoad(JavaVM* vm, char* options, void* reserved) {jint result;jvmtiCapabilities capabilities;jvmtiEventCallbacks callbacks;// 获取JVM TI环境result = (*vm)->GetEnv(vm, (void**)&jvmti, JVMTI_VERSION_1_2);if (result != JNI_OK || jvmti == NULL) {printf("无法获取JVM TI环境\n");return JNI_ERR;}// 启用对象分配监控能力memset(&capabilities, 0, sizeof(capabilities));capabilities.can_generate_vm_object_alloc_events = 1;result = (*jvmti)->AddCapabilities(jvmti, &capabilities);if (result != JVMTI_ERROR_NONE) {printf("无法设置能力\n");return JNI_ERR;}// 设置回调memset(&callbacks, 0, sizeof(callbacks));callbacks.VMObjectAlloc = &VMObjectAlloc;result = (*jvmti)->SetEventCallbacks(jvmti, &callbacks, sizeof(callbacks));if (result != JVMTI_ERROR_NONE) {printf("无法设置回调\n");return JNI_ERR;}// 启用对象分配事件result = (*jvmti)->SetEventNotificationMode(jvmti, JVMTI_ENABLE,JVMTI_EVENT_VM_OBJECT_ALLOC, NULL);if (result != JVMTI_ERROR_NONE) {printf("无法启用事件\n");return JNI_ERR;}printf("对象跟踪代理初始化成功\n");return JNI_OK;
}JNIEXPORT void JNICALL Agent_OnUnload(JavaVM* vm) {if (jvmti != NULL) {(*jvmti)->SetEventNotificationMode(jvmti, JVMTI_DISABLE,JVMTI_EVENT_VM_OBJECT_ALLOC, NULL);}
}

gbuild.sh

# Usage: bash gbuild.sh what.c Jxxx.java
set -xeexport JAVA_INCLUDE_DIR=/etc/alternatives/java_sdk_24gcc -shared -fPIC -shared -I$JAVA_INCLUDE_DIR/include -I$JAVA_INCLUDE_DIR/include/linux $1 -o lib$1.sojava -agentpath:./lib$1.so $2

usage

bash gbuild.sh <what agent.c> <what test java>

JVMTITest.java

public class JVMTITest {// 内部类，用于展示更多类加载情况static class InnerClass {public void doSomething() {System.out.println("内部类方法被调用");}}public static void main(String[] args) {System.out.println("主程序开始运行");// 创建对象，触发类加载InnerClass inner = new InnerClass();inner.doSomething();// 尝试加载一个标准库类try {Class<?> stringClass = Class.forName("java.lang.String");System.out.println("加载了标准类: " + stringClass.getName());} catch (ClassNotFoundException e) {e.printStackTrace();}System.out.println("主程序运行结束");try {throw new Exception("damn");} catch (Exception e) {System.out.println(e.getMessage());}}
}

sample.log

  • https://gitee.com/EEPPEE_admin/jvm-backend-example/blob/jni-and-hack-jvm/hackjvm_example/sample.log
http://www.xdnf.cn/news/1285147.html

相关文章：

  • 《Qwen2.5-VL 》论文精读笔记
  • 【测试】Bug+设计测试用例
  • 【Bug经验分享】由jsonObject-TypeReference引发的序列化问题
  • 无人机在环保监测中的应用：低空经济发展的智能监测与高效治理
  • 从0开始的中后台管理系统-5（菜单的路径绑定以及角色页面的实现）
  • Javase 之 字符串String类
  • 《飞算Java AI：从安装到需求转实战项目详细教学》
  • 机器学习算法篇(十)：TF-IDF算法详解与应用实战
  • 线性代数 · 矩阵 | 最小多项式
  • IoTDB与传统数据库的核心区别
  • Spring Boot项目使用WebClient调用第三方接口详细教程
  • Elasticsearch Node.js 客户端连接指南（Connecting）
  • 一起来聊聊GPT-5
  • 面试经典150题[001]：合并两个有序数组（LeetCode 88）
  • 从零开始手搓一个GPT大语言模型：从理论到实践的完整指南（一）
  • 安全合规5--终端安全检测和防御技术
  • MySQL基础面试
  • MySQL 索引优化实战：从执行计划分析到优化策略落地
  • 【狂热算法篇】探寻图论幽径之SPFA算法：图论迷宫里的闪电寻径者(通俗易懂版)
  • 【Unity笔记】视频播放控制器全攻略：支持延迟播放、事件回调与多视频管理的完整实现
  • 数据结构：图
  • 【力扣494】目标和
  • 【代码随想录day 17】 力扣 98.验证二叉搜索树
  • 网站测评-利用缓存机制实现XSS的分步测试方法
  • 正向传播与反向传播（神经网络思维的逻辑回归）
  • 动态规划----1.爬楼梯
  • VUE的8个生命周期
  • 将黑客拒之物联网网络之外的竞赛
  • Openlayers基础教程|从前端框架到GIS开发系列课程（24）openlayers结合canva绘制矩形绘制线
  • Etcd客户端工具Etcd Workbench更新了1.2.0版本！多语言支持了中文，新增了许多快捷功能使用体验再次提升