Add more JndiLookup.class indicators

See #34
hillu · Jan 5, 2022 · 014886d · 014886d
1 parent cbee9c5
commit 014886d
Show file tree

Hide file tree

Showing 5 changed files with 680 additions and 1 deletion.
diff --git a/filter/filter.go b/filter/filter.go
@@ -130,6 +130,43 @@ var vulnVersions = map[string]FileInfo{
 	"fd6c63c11f7a6b52eff04be1de3477c9ddbbc925022f7216320e6db93f1b7d29": FileInfo{
 		"log4j 2.0", "JndiLookup.class",
 		CVE_2021_44228 | CVE_2021_45046 | CVE_2021_45105 | CVE_2021_44832},
+	"a768e5383990b512f9d4f97217eda94031c2fa4aea122585f5a475ab99dc7307": FileInfo{
+		"2.1-2.3", "JndiLookup.class",
+		CVE_2021_44228 | CVE_2021_45046 | CVE_2021_45105 | CVE_2021_44832},
+	"a534961bbfce93966496f86c9314f46939fd082bb89986b48b7430c3bea903f7": FileInfo{
+		"2.4-2.5", "JndiLookup.class",
+		CVE_2021_44228 | CVE_2021_45046 | CVE_2021_45105 | CVE_2021_44832},
+	"e8ffed196e04f81b015f847d4ec61f22f6731c11b5a21b1cfc45ccbc58b8ea45": FileInfo{
+		"2.6-2.6.2", "JndiLookup.class",
+		CVE_2021_44228 | CVE_2021_45046 | CVE_2021_45105 | CVE_2021_44832},
+	"cee2305065bb61d434cdb45cfdaa46e7da148e5c6a7678d56f3e3dc8d7073eae": FileInfo{
+		"2.7", "JndiLookup.class",
+		CVE_2021_44228 | CVE_2021_45046 | CVE_2021_45105 | CVE_2021_44832},
+	"66c89e2d5ae674641138858b571e65824df6873abb1677f7b2ef5c0dd4dbc442": FileInfo{
+		"2.8-2.8.1", "JndiLookup.class",
+		CVE_2021_44228 | CVE_2021_45046 | CVE_2021_45105 | CVE_2021_44832},
+	"d4ec57440cd6db6eaf6bcb6b197f1cbaf5a3e26253d59578d51db307357cbf15": FileInfo{
+		"2.8.2", "JndiLookup.class",
+		CVE_2021_44228 | CVE_2021_45046 | CVE_2021_45105 | CVE_2021_44832},
+	"0f038a1e0aa0aff76d66d1440c88a2b35a3d023ad8b2e3bac8e25a3208499f7e": FileInfo{
+		"2.9.0-2.11.2", "JndiLookup.class",
+		CVE_2021_44228 | CVE_2021_45046 | CVE_2021_45105 | CVE_2021_44832},
+	"5c104d16ff9831b456e4d7eaf66bcf531f086767782d08eece3fb37e40467279": FileInfo{
+		"2.12.0-2.12.1", "JndiLookup.class",
+		CVE_2021_44228 | CVE_2021_45046 | CVE_2021_45105 | CVE_2021_44832},
+	"2b32bfc0556ea59307b9b2fde75b6dfbb5bf4f1d008d1402bc9a2357d8a8c61f": FileInfo{
+		"2.13.0-2.13.3", "JndiLookup.class",
+		CVE_2021_44228 | CVE_2021_45046 | CVE_2021_45105 | CVE_2021_44832},
+	"ad5acfcbcb02f849ab695276285b6a5aef5f187b4d36b2159439084f4c732a4b": FileInfo{
+		"2.13.3 (debian)", "JndiLookup.class",
+		CVE_2021_44228 | CVE_2021_45046 | CVE_2021_45105 | CVE_2021_44832},
+	"84057480ba7da6fb6d9ea50c53a00848315833c1f34bf8f4a47f11a14499ae3f": FileInfo{
+		"2.14.0-2.15.0", "JndiLookup.class",
+		CVE_2021_45046 | CVE_2021_45105 | CVE_2021_44832},
+	"3ce98fd29cd9467cb97bd9819677ee3cdbb35205c4d15f0e3cf6182bb196ef7c": FileInfo{
+		"2.16.0", "JndiLookup.class", CVE_2021_45105 | CVE_2021_44832},
+	"e732b989d3ffcb718ca5476781f2941bbc36f41ed929fed915a24801b40f8052": FileInfo{
+		"2.17.0-2.17.1", "JndiLookup.class", 0},
 
 	"1584b839cfceb33a372bb9e6f704dcea9701fa810a9ba1ad3961615a5b998c32": FileInfo{
 		"log4j 2.7-2.8.1", "JndiManager.class",

diff --git a/filter/filter_test.go b/filter/filter_test.go
@@ -10,7 +10,7 @@ type v struct {
 	vulnerable bool
 }
 
-func TestFilterJndi(t *testing.T) {
+func TestFilterJndiManager(t *testing.T) {
 	for _, cand := range []v{
 		v{"2.1", true},
 		v{"2.2", true},
@@ -65,6 +65,65 @@ func TestFilterJndi(t *testing.T) {
 	}
 }
 
+func TestFilterJndiLookup(t *testing.T) {
+	for _, cand := range []v{
+		v{"2.0", true},
+		v{"2.0.1", true},
+		v{"2.0.2", true},
+		v{"2.0-beta9", true},
+		v{"2.0-rc1", true},
+		v{"2.0-rc2", true},
+		v{"2.1", true},
+		v{"2.2", true},
+		v{"2.3", true},
+		v{"2.4", true},
+		v{"2.4.1", true},
+		v{"2.5", true},
+		v{"2.6", true},
+		v{"2.6.1", true},
+		v{"2.6.2", true},
+		v{"2.7", true},
+		v{"2.8", true},
+		v{"2.8.1", true},
+		v{"2.8.2", true},
+		v{"2.9.0", true},
+		v{"2.9.1", true},
+		v{"2.10.0", true},
+		v{"2.11.0", true},
+		v{"2.11.1", true},
+		v{"2.11.2", true},
+		v{"2.12.0", true},
+		v{"2.12.1", true},
+		v{"2.13.0", true},
+		v{"2.13.1", true},
+		v{"2.13.2", true},
+		v{"2.13.3", true},
+		v{"2.13-3-debian", true},
+		v{"2.14.0", true},
+		v{"2.14.1", true},
+		v{"2.15.0", true},
+		v{"2.16.0", true},
+		v{"2.17.0", false}, // JndiLookup.class is equal to the one in 2.17.1
+		v{"2.17.1", false},
+	} {
+		file := "../testdata/JndiLookup.class-" + cand.version
+		buf, err := ioutil.ReadFile(file)
+		if err != nil {
+			t.Logf("can't open %s: %v", file, err)
+			continue
+		}
+		if verdict := IsVulnerableClass(buf, "jndilookup.class", CheckAllVulnerabilities); (verdict != nil) != cand.vulnerable {
+			if cand.vulnerable {
+				t.Errorf("found %s not to be vulnerable (but it is)", file)
+			} else {
+				t.Errorf("found %s to be vulnerable (but it is not)", file)
+			}
+		} else {
+			t.Logf("%s: %s", file, verdict)
+		}
+	}
+}
+
 func TestFilterSocketNode(t *testing.T) {
 	for _, cand := range []v{
 		v{"1.2.4", true},

diff --git a/testdata/JndiLookup.class-2.16.0 b/testdata/JndiLookup.class-2.16.0
@@ -0,0 +1,185 @@
+00000000  ca fe ba be 00 00 00 34  00 7e 0a 00 19 00 45 0a  |.......4.~....E.|
+00000010  00 0e 00 46 0a 00 47 00  48 0a 00 47 00 49 0a 00  |...F..G.H..G.I..|
+00000020  4a 00 4b 0a 00 47 00 4c  07 00 4d 0a 00 07 00 4e  |J.K..G.L..M....N|
+00000030  07 00 4f 09 00 0e 00 50  09 00 0e 00 51 08 00 52  |..O....P....Q..R|
+00000040  0b 00 53 00 54 07 00 55  08 00 56 0a 00 57 00 58  |..S.T..U..V..W.X|
+00000050  0a 00 57 00 59 07 00 5a  0a 00 12 00 45 0a 00 12  |..W.Y..Z....E...|
+00000060  00 5b 0a 00 12 00 5c 0a  00 5d 00 5e 08 00 1c 0a  |.[....\..].^....|
+00000070  00 5f 00 60 07 00 61 01  00 06 4c 4f 47 47 45 52  |._.`..a...LOGGER|
+00000080  01 00 21 4c 6f 72 67 2f  61 70 61 63 68 65 2f 6c  |..!Lorg/apache/l|
+00000090  6f 67 67 69 6e 67 2f 6c  6f 67 34 6a 2f 4c 6f 67  |ogging/log4j/Log|
+000000a0  67 65 72 3b 01 00 06 4c  4f 4f 4b 55 50 01 00 21  |ger;...LOOKUP..!|
+000000b0  4c 6f 72 67 2f 61 70 61  63 68 65 2f 6c 6f 67 67  |Lorg/apache/logg|
+000000c0  69 6e 67 2f 6c 6f 67 34  6a 2f 4d 61 72 6b 65 72  |ing/log4j/Marker|
+000000d0  3b 01 00 23 43 4f 4e 54  41 49 4e 45 52 5f 4a 4e  |;..#CONTAINER_JN|
+000000e0  44 49 5f 52 45 53 4f 55  52 43 45 5f 50 41 54 48  |DI_RESOURCE_PATH|
+000000f0  5f 50 52 45 46 49 58 01  00 12 4c 6a 61 76 61 2f  |_PREFIX...Ljava/|
+00000100  6c 61 6e 67 2f 53 74 72  69 6e 67 3b 01 00 0d 43  |lang/String;...C|
+00000110  6f 6e 73 74 61 6e 74 56  61 6c 75 65 01 00 06 3c  |onstantValue...<|
+00000120  69 6e 69 74 3e 01 00 03  28 29 56 01 00 04 43 6f  |init>...()V...Co|
+00000130  64 65 01 00 0f 4c 69 6e  65 4e 75 6d 62 65 72 54  |de...LineNumberT|
+00000140  61 62 6c 65 01 00 12 4c  6f 63 61 6c 56 61 72 69  |able...LocalVari|
+00000150  61 62 6c 65 54 61 62 6c  65 01 00 04 74 68 69 73  |ableTable...this|
+00000160  01 00 31 4c 6f 72 67 2f  61 70 61 63 68 65 2f 6c  |..1Lorg/apache/l|
+00000170  6f 67 67 69 6e 67 2f 6c  6f 67 34 6a 2f 63 6f 72  |ogging/log4j/cor|
+00000180  65 2f 6c 6f 6f 6b 75 70  2f 4a 6e 64 69 4c 6f 6f  |e/lookup/JndiLoo|
+00000190  6b 75 70 3b 01 00 06 6c  6f 6f 6b 75 70 01 00 4e  |kup;...lookup..N|
+000001a0  28 4c 6f 72 67 2f 61 70  61 63 68 65 2f 6c 6f 67  |(Lorg/apache/log|
+000001b0  67 69 6e 67 2f 6c 6f 67  34 6a 2f 63 6f 72 65 2f  |ging/log4j/core/|
+000001c0  4c 6f 67 45 76 65 6e 74  3b 4c 6a 61 76 61 2f 6c  |LogEvent;Ljava/l|
+000001d0  61 6e 67 2f 53 74 72 69  6e 67 3b 29 4c 6a 61 76  |ang/String;)Ljav|
+000001e0  61 2f 6c 61 6e 67 2f 53  74 72 69 6e 67 3b 01 00  |a/lang/String;..|
+000001f0  0b 6a 6e 64 69 4d 61 6e  61 67 65 72 01 00 2f 4c  |.jndiManager../L|
+00000200  6f 72 67 2f 61 70 61 63  68 65 2f 6c 6f 67 67 69  |org/apache/loggi|
+00000210  6e 67 2f 6c 6f 67 34 6a  2f 63 6f 72 65 2f 6e 65  |ng/log4j/core/ne|
+00000220  74 2f 4a 6e 64 69 4d 61  6e 61 67 65 72 3b 01 00  |t/JndiManager;..|
+00000230  01 65 01 00 1e 4c 6a 61  76 61 78 2f 6e 61 6d 69  |.e...Ljavax/nami|
+00000240  6e 67 2f 4e 61 6d 69 6e  67 45 78 63 65 70 74 69  |ng/NamingExcepti|
+00000250  6f 6e 3b 01 00 05 65 76  65 6e 74 01 00 28 4c 6f  |on;...event..(Lo|
+00000260  72 67 2f 61 70 61 63 68  65 2f 6c 6f 67 67 69 6e  |rg/apache/loggin|
+00000270  67 2f 6c 6f 67 34 6a 2f  63 6f 72 65 2f 4c 6f 67  |g/log4j/core/Log|
+00000280  45 76 65 6e 74 3b 01 00  03 6b 65 79 01 00 08 6a  |Event;...key...j|
+00000290  6e 64 69 4e 61 6d 65 01  00 0d 53 74 61 63 6b 4d  |ndiName...StackM|
+000002a0  61 70 54 61 62 6c 65 07  00 55 07 00 62 07 00 63  |apTable..U..b..c|
+000002b0  07 00 64 07 00 4d 07 00  4f 01 00 10 4d 65 74 68  |..d..M..O...Meth|
+000002c0  6f 64 50 61 72 61 6d 65  74 65 72 73 01 00 0f 63  |odParameters...c|
+000002d0  6f 6e 76 65 72 74 4a 6e  64 69 4e 61 6d 65 01 00  |onvertJndiName..|
+000002e0  26 28 4c 6a 61 76 61 2f  6c 61 6e 67 2f 53 74 72  |&(Ljava/lang/Str|
+000002f0  69 6e 67 3b 29 4c 6a 61  76 61 2f 6c 61 6e 67 2f  |ing;)Ljava/lang/|
+00000300  53 74 72 69 6e 67 3b 01  00 08 3c 63 6c 69 6e 69  |String;...<clini|
+00000310  74 3e 01 00 0a 53 6f 75  72 63 65 46 69 6c 65 01  |t>...SourceFile.|
+00000320  00 0f 4a 6e 64 69 4c 6f  6f 6b 75 70 2e 6a 61 76  |..JndiLookup.jav|
+00000330  61 01 00 19 52 75 6e 74  69 6d 65 56 69 73 69 62  |a...RuntimeVisib|
+00000340  6c 65 41 6e 6e 6f 74 61  74 69 6f 6e 73 01 00 35  |leAnnotations..5|
+00000350  4c 6f 72 67 2f 61 70 61  63 68 65 2f 6c 6f 67 67  |Lorg/apache/logg|
+00000360  69 6e 67 2f 6c 6f 67 34  6a 2f 63 6f 72 65 2f 63  |ing/log4j/core/c|
+00000370  6f 6e 66 69 67 2f 70 6c  75 67 69 6e 73 2f 50 6c  |onfig/plugins/Pl|
+00000380  75 67 69 6e 3b 01 00 04  6e 61 6d 65 01 00 04 6a  |ugin;...name...j|
+00000390  6e 64 69 01 00 08 63 61  74 65 67 6f 72 79 01 00  |ndi...category..|
+000003a0  06 4c 6f 6f 6b 75 70 0c  00 21 00 22 0c 00 3a 00  |.Lookup..!."..:.|
+000003b0  3b 07 00 64 0c 00 65 00  66 0c 00 28 00 67 07 00  |;..d..e.f..(.g..|
+000003c0  68 0c 00 69 00 6a 0c 00  6b 00 22 01 00 13 6a 61  |h..i.j..k."...ja|
+000003d0  76 61 2f 6c 61 6e 67 2f  54 68 72 6f 77 61 62 6c  |va/lang/Throwabl|
+000003e0  65 0c 00 6c 00 6d 01 00  1c 6a 61 76 61 78 2f 6e  |e..l.m...javax/n|
+000003f0  61 6d 69 6e 67 2f 4e 61  6d 69 6e 67 45 78 63 65  |aming/NamingExce|
+00000400  70 74 69 6f 6e 0c 00 1a  00 1b 0c 00 1c 00 1d 01  |ption...........|
+00000410  00 24 45 72 72 6f 72 20  6c 6f 6f 6b 69 6e 67 20  |.$Error looking |
+00000420  75 70 20 4a 4e 44 49 20  72 65 73 6f 75 72 63 65  |up JNDI resource|
+00000430  20 5b 7b 7d 5d 2e 07 00  6e 0c 00 6f 00 70 01 00  | [{}]...n..o.p..|
+00000440  2f 6f 72 67 2f 61 70 61  63 68 65 2f 6c 6f 67 67  |/org/apache/logg|
+00000450  69 6e 67 2f 6c 6f 67 34  6a 2f 63 6f 72 65 2f 6c  |ing/log4j/core/l|
+00000460  6f 6f 6b 75 70 2f 4a 6e  64 69 4c 6f 6f 6b 75 70  |ookup/JndiLookup|
+00000470  01 00 0e 6a 61 76 61 3a  63 6f 6d 70 2f 65 6e 76  |...java:comp/env|
+00000480  2f 07 00 63 0c 00 71 00  72 0c 00 73 00 74 01 00  |/..c..q.r..s.t..|
+00000490  17 6a 61 76 61 2f 6c 61  6e 67 2f 53 74 72 69 6e  |.java/lang/Strin|
+000004a0  67 42 75 69 6c 64 65 72  0c 00 75 00 76 0c 00 69  |gBuilder..u.v..i|
+000004b0  00 77 07 00 78 0c 00 79  00 7a 07 00 7b 0c 00 7c  |.w..x..y.z..{..||
+000004c0  00 7d 01 00 33 6f 72 67  2f 61 70 61 63 68 65 2f  |.}..3org/apache/|
+000004d0  6c 6f 67 67 69 6e 67 2f  6c 6f 67 34 6a 2f 63 6f  |logging/log4j/co|
+000004e0  72 65 2f 6c 6f 6f 6b 75  70 2f 41 62 73 74 72 61  |re/lookup/Abstra|
+000004f0  63 74 4c 6f 6f 6b 75 70  01 00 26 6f 72 67 2f 61  |ctLookup..&org/a|
+00000500  70 61 63 68 65 2f 6c 6f  67 67 69 6e 67 2f 6c 6f  |pache/logging/lo|
+00000510  67 34 6a 2f 63 6f 72 65  2f 4c 6f 67 45 76 65 6e  |g4j/core/LogEven|
+00000520  74 01 00 10 6a 61 76 61  2f 6c 61 6e 67 2f 53 74  |t...java/lang/St|
+00000530  72 69 6e 67 01 00 2d 6f  72 67 2f 61 70 61 63 68  |ring..-org/apach|
+00000540  65 2f 6c 6f 67 67 69 6e  67 2f 6c 6f 67 34 6a 2f  |e/logging/log4j/|
+00000550  63 6f 72 65 2f 6e 65 74  2f 4a 6e 64 69 4d 61 6e  |core/net/JndiMan|
+00000560  61 67 65 72 01 00 11 67  65 74 44 65 66 61 75 6c  |ager...getDefaul|
+00000570  74 4d 61 6e 61 67 65 72  01 00 31 28 29 4c 6f 72  |tManager..1()Lor|
+00000580  67 2f 61 70 61 63 68 65  2f 6c 6f 67 67 69 6e 67  |g/apache/logging|
+00000590  2f 6c 6f 67 34 6a 2f 63  6f 72 65 2f 6e 65 74 2f  |/log4j/core/net/|
+000005a0  4a 6e 64 69 4d 61 6e 61  67 65 72 3b 01 00 26 28  |JndiManager;..&(|
+000005b0  4c 6a 61 76 61 2f 6c 61  6e 67 2f 53 74 72 69 6e  |Ljava/lang/Strin|
+000005c0  67 3b 29 4c 6a 61 76 61  2f 6c 61 6e 67 2f 4f 62  |g;)Ljava/lang/Ob|
+000005d0  6a 65 63 74 3b 01 00 11  6a 61 76 61 2f 75 74 69  |ject;...java/uti|
+000005e0  6c 2f 4f 62 6a 65 63 74  73 01 00 08 74 6f 53 74  |l/Objects...toSt|
+000005f0  72 69 6e 67 01 00 38 28  4c 6a 61 76 61 2f 6c 61  |ring..8(Ljava/la|
+00000600  6e 67 2f 4f 62 6a 65 63  74 3b 4c 6a 61 76 61 2f  |ng/Object;Ljava/|
+00000610  6c 61 6e 67 2f 53 74 72  69 6e 67 3b 29 4c 6a 61  |lang/String;)Lja|
+00000620  76 61 2f 6c 61 6e 67 2f  53 74 72 69 6e 67 3b 01  |va/lang/String;.|
+00000630  00 05 63 6c 6f 73 65 01  00 0d 61 64 64 53 75 70  |..close...addSup|
+00000640  70 72 65 73 73 65 64 01  00 18 28 4c 6a 61 76 61  |pressed...(Ljava|
+00000650  2f 6c 61 6e 67 2f 54 68  72 6f 77 61 62 6c 65 3b  |/lang/Throwable;|
+00000660  29 56 01 00 1f 6f 72 67  2f 61 70 61 63 68 65 2f  |)V...org/apache/|
+00000670  6c 6f 67 67 69 6e 67 2f  6c 6f 67 34 6a 2f 4c 6f  |logging/log4j/Lo|
+00000680  67 67 65 72 01 00 04 77  61 72 6e 01 00 5a 28 4c  |gger...warn..Z(L|
+00000690  6f 72 67 2f 61 70 61 63  68 65 2f 6c 6f 67 67 69  |org/apache/loggi|
+000006a0  6e 67 2f 6c 6f 67 34 6a  2f 4d 61 72 6b 65 72 3b  |ng/log4j/Marker;|
+000006b0  4c 6a 61 76 61 2f 6c 61  6e 67 2f 53 74 72 69 6e  |Ljava/lang/Strin|
+000006c0  67 3b 4c 6a 61 76 61 2f  6c 61 6e 67 2f 4f 62 6a  |g;Ljava/lang/Obj|
+000006d0  65 63 74 3b 4c 6a 61 76  61 2f 6c 61 6e 67 2f 4f  |ect;Ljava/lang/O|
+000006e0  62 6a 65 63 74 3b 29 56  01 00 0a 73 74 61 72 74  |bject;)V...start|
+000006f0  73 57 69 74 68 01 00 15  28 4c 6a 61 76 61 2f 6c  |sWith...(Ljava/l|
+00000700  61 6e 67 2f 53 74 72 69  6e 67 3b 29 5a 01 00 07  |ang/String;)Z...|
+00000710  69 6e 64 65 78 4f 66 01  00 04 28 49 29 49 01 00  |indexOf...(I)I..|
+00000720  06 61 70 70 65 6e 64 01  00 2d 28 4c 6a 61 76 61  |.append..-(Ljava|
+00000730  2f 6c 61 6e 67 2f 53 74  72 69 6e 67 3b 29 4c 6a  |/lang/String;)Lj|
+00000740  61 76 61 2f 6c 61 6e 67  2f 53 74 72 69 6e 67 42  |ava/lang/StringB|
+00000750  75 69 6c 64 65 72 3b 01  00 14 28 29 4c 6a 61 76  |uilder;...()Ljav|
+00000760  61 2f 6c 61 6e 67 2f 53  74 72 69 6e 67 3b 01 00  |a/lang/String;..|
+00000770  2c 6f 72 67 2f 61 70 61  63 68 65 2f 6c 6f 67 67  |,org/apache/logg|
+00000780  69 6e 67 2f 6c 6f 67 34  6a 2f 73 74 61 74 75 73  |ing/log4j/status|
+00000790  2f 53 74 61 74 75 73 4c  6f 67 67 65 72 01 00 09  |/StatusLogger...|
+000007a0  67 65 74 4c 6f 67 67 65  72 01 00 30 28 29 4c 6f  |getLogger..0()Lo|
+000007b0  72 67 2f 61 70 61 63 68  65 2f 6c 6f 67 67 69 6e  |rg/apache/loggin|
+000007c0  67 2f 6c 6f 67 34 6a 2f  73 74 61 74 75 73 2f 53  |g/log4j/status/S|
+000007d0  74 61 74 75 73 4c 6f 67  67 65 72 3b 01 00 26 6f  |tatusLogger;..&o|
+000007e0  72 67 2f 61 70 61 63 68  65 2f 6c 6f 67 67 69 6e  |rg/apache/loggin|
+000007f0  67 2f 6c 6f 67 34 6a 2f  4d 61 72 6b 65 72 4d 61  |g/log4j/MarkerMa|
+00000800  6e 61 67 65 72 01 00 09  67 65 74 4d 61 72 6b 65  |nager...getMarke|
+00000810  72 01 00 35 28 4c 6a 61  76 61 2f 6c 61 6e 67 2f  |r..5(Ljava/lang/|
+00000820  53 74 72 69 6e 67 3b 29  4c 6f 72 67 2f 61 70 61  |String;)Lorg/apa|
+00000830  63 68 65 2f 6c 6f 67 67  69 6e 67 2f 6c 6f 67 34  |che/logging/log4|
+00000840  6a 2f 4d 61 72 6b 65 72  3b 00 21 00 0e 00 19 00  |j/Marker;.!.....|
+00000850  00 00 03 00 1a 00 1a 00  1b 00 00 00 1a 00 1c 00  |................|
+00000860  1d 00 00 00 18 00 1e 00  1f 00 01 00 20 00 00 00  |............ ...|
+00000870  02 00 0f 00 04 00 01 00  21 00 22 00 01 00 23 00  |........!."...#.|
+00000880  00 00 2f 00 01 00 01 00  00 00 05 2a b7 00 01 b1  |../........*....|
+00000890  00 00 00 02 00 24 00 00  00 06 00 01 00 00 00 23  |.....$.........#|
+000008a0  00 25 00 00 00 0c 00 01  00 00 00 05 00 26 00 27  |.%...........&.'|
+000008b0  00 00 00 01 00 28 00 29  00 02 00 23 00 00 01 ca  |.....(.)...#....|
+000008c0  00 05 00 0a 00 00 00 8b  2c c7 00 05 01 b0 2a 2c  |........,.....*,|
+000008d0  b7 00 02 4e b8 00 03 3a  04 01 3a 05 19 04 2d b6  |...N...:..:...-.|
+000008e0  00 04 01 b8 00 05 3a 06  19 04 c6 00 21 19 05 c6  |......:.....!...|
+000008f0  00 17 19 04 b6 00 06 a7  00 14 3a 07 19 05 19 07  |..........:.....|
+00000900  b6 00 08 a7 00 08 19 04  b6 00 06 19 06 b0 3a 06  |..............:.|
+00000910  19 06 3a 05 19 06 bf 3a  08 19 04 c6 00 21 19 05  |..:....:.....!..|
+00000920  c6 00 17 19 04 b6 00 06  a7 00 14 3a 09 19 05 19  |...........:....|
+00000930  09 b6 00 08 a7 00 08 19  04 b6 00 06 19 08 bf 3a  |...............:|
+00000940  04 b2 00 0a b2 00 0b 12  0c 2d 19 04 b9 00 0d 05  |.........-......|
+00000950  00 01 b0 00 07 00 2a 00  2f 00 32 00 07 00 14 00  |......*./.2.....|
+00000960  20 00 46 00 07 00 14 00  20 00 4f 00 00 00 5b 00  | .F..... .O...[.|
+00000970  60 00 63 00 07 00 46 00  51 00 4f 00 00 00 0c 00  |`.c...F.Q.O.....|
+00000980  43 00 77 00 09 00 46 00  77 00 77 00 09 00 03 00  |C.w...F.w.w.....|
+00000990  24 00 00 00 2e 00 0b 00  00 00 33 00 04 00 34 00  |$.........3...4.|
+000009a0  06 00 36 00 0c 00 37 00  14 00 38 00 20 00 39 00  |..6...7...8. .9.|
+000009b0  43 00 38 00 46 00 37 00  4f 00 39 00 79 00 3a 00  |C.8.F.7.O.9.y.:.|
+000009c0  89 00 3b 00 25 00 00 00  3e 00 06 00 11 00 66 00  |..;.%...>.....f.|
+000009d0  2a 00 2b 00 04 00 79 00  12 00 2c 00 2d 00 04 00  |*.+...y...,.-...|
+000009e0  00 00 8b 00 26 00 27 00  00 00 00 00 8b 00 2e 00  |....&.'.........|
+000009f0  2f 00 01 00 00 00 8b 00  30 00 1f 00 02 00 0c 00  |/.......0.......|
+00000a00  7f 00 31 00 1f 00 03 00  32 00 00 00 7d 00 0a 06  |..1.....2...}...|
+00000a10  ff 00 2b 00 07 07 00 33  07 00 34 07 00 35 07 00  |..+....3..4..5..|
+00000a20  35 07 00 36 07 00 37 07  00 35 00 01 07 00 37 0b  |5..6..7..5....7.|
+00000a30  04 ff 00 02 00 06 07 00  33 07 00 34 07 00 35 07  |........3..4..5.|
+00000a40  00 35 07 00 36 07 00 37  00 01 07 00 37 48 07 00  |.5..6..7....7H..|
+00000a50  37 ff 00 13 00 09 07 00  33 07 00 34 07 00 35 07  |7.......3..4..5.|
+00000a60  00 35 07 00 36 07 00 37  00 00 07 00 37 00 01 07  |.5..6..7....7...|
+00000a70  00 37 0b 04 ff 00 02 00  04 07 00 33 07 00 34 07  |.7.........3..4.|
+00000a80  00 35 07 00 35 00 01 07  00 38 00 39 00 00 00 09  |.5..5....8.9....|
+00000a90  02 00 2e 00 10 00 30 00  10 00 02 00 3a 00 3b 00  |......0.....:.;.|
+00000aa0  02 00 23 00 00 00 6e 00  02 00 02 00 00 00 29 2b  |..#...n.......)+|
+00000ab0  12 0f b6 00 10 9a 00 21  2b 10 3a b6 00 11 02 a0  |.......!+.:.....|
+00000ac0  00 17 bb 00 12 59 b7 00  13 12 0f b6 00 14 2b b6  |.....Y........+.|
+00000ad0  00 14 b6 00 15 b0 2b b0  00 00 00 03 00 24 00 00  |......+......$..|
+00000ae0  00 0e 00 03 00 00 00 47  00 13 00 48 00 27 00 4a  |.......G...H.'.J|
+00000af0  00 25 00 00 00 16 00 02  00 00 00 29 00 26 00 27  |.%.........).&.'|
+00000b00  00 00 00 00 00 29 00 31  00 1f 00 01 00 32 00 00  |.....).1.....2..|
+00000b10  00 03 00 01 27 00 39 00  00 00 05 01 00 31 00 10  |....'.9......1..|
+00000b20  00 08 00 3c 00 22 00 01  00 23 00 00 00 2b 00 01  |...<."...#...+..|
+00000b30  00 00 00 00 00 0f b8 00  16 b3 00 0a 12 17 b8 00  |................|
+00000b40  18 b3 00 0b b1 00 00 00  01 00 24 00 00 00 0a 00  |..........$.....|
+00000b50  02 00 00 00 25 00 06 00  26 00 02 00 3d 00 00 00  |....%...&...=...|
+00000b60  02 00 3e 00 3f 00 00 00  10 00 01 00 40 00 02 00  |..>.?.......@...|
+00000b70  41 73 00 42 00 43 73 00  44                       |As.B.Cs.D|
+00000b79