Protect self-attach from execution as source file.

raphw · Dec 22, 2024 · 94f0e35 · 94f0e35
1 parent b559499
commit 94f0e35
Showing 1 changed file with 4 additions and 7 deletions.
diff --git a/byte-buddy-agent/src/main/java/net/bytebuddy/agent/ByteBuddyAgent.java b/byte-buddy-agent/src/main/java/net/bytebuddy/agent/ByteBuddyAgent.java
@@ -137,11 +137,6 @@ public class ByteBuddyAgent {
      */
     private static final String OS_NAME = "os.name";
 
-    /**
-     * Represents the {@code file} URL protocol.
-     */
-    private static final String FILE_PROTOCOL = "file";
-
     /**
      * The attachment type evaluator to be used for determining if an attachment requires an external process.
      */
@@ -705,7 +700,7 @@ private static File trySelfResolve() {
                 return null;
             }
             URL location = codeSource.getLocation();
-            if (!location.getProtocol().equals(FILE_PROTOCOL)) {
+            if (!location.getProtocol().equals("file")) {
                 return null;
             }
             try {
@@ -1451,7 +1446,9 @@ private static File trySelfResolve(Class<?> installer) throws IOException {
                     return null;
                 }
                 URL location = codeSource.getLocation();
-                if (!location.getProtocol().equals(FILE_PROTOCOL)) {
+                if (!location.getProtocol().equals("file")
+                        || location.getPath() == null
+                        || !location.getPath().endsWith(".class")) {
                     return null;
                 }
                 File agentJar;