: 2007

generate

  if ($is_upload && $file = fopen($fname, 'w')) { 
    ...
  }

  if(!$foo = getenv('BAR')){
    ...
  }

  @include_once 'Var/Renderer/' . $mode . '.php'

  E "*" E -> E > E "+" E -> E

  <E -> <E -> E + E> * E>
  <E -> E * <E -> E + E>>

  E "?" E ":" E -> E <0,4> > E "=" E

  <E -> <E -> E = E> ? E : E>
  <E -> E ? E : <E -> E = E>>

  "!" E -> E   > E "+" E -> E
  E "+" E -> E > V "=" E -> E

  "!" E -> E >  V "=" E -> E

  "!" E -> E .> E "+" E -> E

  <E -> <E -> E + E> * E>
  <E -> E * <E -> E + E>>

  E * E -> E <0> .> E + E -> E
  E * E -> E <2> .> E + E -> E

struct CC_Node {
  struct CC_Node *next;
};

static struct CC_Node *free_nodes = NULL;

void add_node(CC_Class* c) {
  struct CC_Node *node = (struct CC_Node *) c;
  node->next = free_nodes;
  free_nodes = node;
}

union CC_Node {
  CC_Class *cc;
  CC_Class **next;
};

static union CC_Node free_node = {NULL};

void add_node(CC_Class* c) {
  node.cc = c;
  *(node.next) = free_node.cc;
  free_node.cc = node.cc;
}

  class A {
    protected int secret;
  }

  class B : A {
    public void f(A a) {
      a.secret = 5;
    }
  }

  A.cs(17,5): error CS1540: Cannot access protected 
  member  `A.secret' via a qualifier of type `A'. The 
  qualifier must be of type `B' or derived from it

  class A {
    protected int secret;
  }

  class B : A {
    public void f() {
      base.secret = 5;
    }
  }

  class B : A {
    public void f() {
      ((A) this).secret = 5;
    }
  }

  A.cs(13,7): error CS1540: Cannot access protected 
  member `A.secret' via a qualifier of type `A'. The 
  qualifier must be of type `B' or derived from it

  class S {
    int x = 1;
  }

  class C extends S {
    int x = 2;

    void print() {
      System.out.println("super.x = " + super.x + " and x = " + x);
    }

    public static void main(String[] ps) {
      new C().print(); 
    }
  }

  attributes:
    |[ super.x ]| -> <attributes> |[ ((reft) this).x ]|
    where
      reft is the superclass of the current class

  attributes:
    |[ cname.super.x ]| ->  <attributes> |[ ((reft) cname.this).x ]|
    where
      reft is the superclass of the class cname

  package a;
  public class A {
    protected int secret;
  }

  package b;
  public class B extends a.A {
    void f() {
      super.secret = 5;
    }
  }

  package b;

  public class B extends a.A {
    void f() {
      ((a.A) this).secret = 5;
    }
  }

b/B.java:5: secret has protected access in a.A
    ((a.A) this).secret = 5;
    ^
1 error

  package a;
  public class A {
    protected int secret;
    public void print() {
      System.out.println("secret = " + secret);
    }
  }

  package b;
  public class B extends a.A {
    void f() {
      ((a.A) this).secret = 5;
    }
    public static void main(String[] ps) {
      B b = new B();
      b.f();
      b.print();
    }
  }

  package b;
  public class B extends a.A {
    void f(a.A a) {
      a.secret = 5;
    }
    public static void main(String[] ps) {
      B b = new B();
      b.f(b);
      b.print();
    }
  }

  Exception in thread "main" java.lang.VerifyError:
    (class: b/B, method: f signature: (La/A;)V)
    Bad access to protected data

  String s = "'; DROP TABLE Users; --";
  String e = "username = \'" + s + "\'";
  String q = "SELECT password FROM Users WHERE " + e;
  System.out.println(q);

  String s = "'; DROP TABLE Users; --";
  SQL e = <| username = ${s} |>;
  SQL q = <| SELECT password FROM Users WHERE ${e} |>;
  System.out.println(q.toString());

  $s = "'; DROP TABLE Users; --";
  $e = <| username = ${$s} |>;
  $q = <| SELECT password FROM Users WHERE ${$e} |>;
  echo $q->toString(), "\n";

  String name = "Babs Jensen";
  LDAP q = (| (cn=$(name)) |);
  System.out.println(q.toString());

  Shell cmd = <| /bin/echo svn cat http://x -r <| s |> |>;
  System.out.println(cmd.toString());

  /bin/echo svn cat http://x -r bravo
  /bin/echo svn cat http://x -r foo\ bar
  /bin/echo svn cat http://x -r \*
  /bin/echo svn cat http://x -r \;\ echo\ pwn3d\!

  jsEngine.eval(
    "function printNames1(namesList) {" +
    "  var x;" +
    "  var names = namesList.toArray();" +
    "  for(x in names) {" +
    "    println(names[x]);" +
    "  }" +
    "}" +

    "function addName(namesList, name) {" +
    "  namesList.add(name);" +
    "}"
  );

  jsEngine.eval(|[
    function printNames1(namesList) {
      var x;
      var names = namesList.toArray();
      for(x in names) {
        println(names[x]);
      }
    }

    function addName(namesList, name) {
      namesList.add(name);
    }
  ]| );

2007-04-03

LDTA'07 slides on Grammar Engineering Tools

Migration of the YACC grammar for PHP to SDF

PHP precedence problems

Precedence rule recovery

Argument-specific priorities

Non-transitive priorities

Precedence rule migration

Future

2007-03-01

x86-64 support for Stratego/XT!

Some history

Some first steps

The final step .. uh, steps

Short version

2007-02-14

Base access in the C# specification

2007-02-10

Informal specifications are not so super

Super field access

Current specification

Oops

Java Virtual Machine

2007-02-06

Our take on injection attacks

Solutions?

Examples

SQL

LDAP

Shell

JavaScript

Generic, generic, generic

Future?

2007-02-04

Some random thoughts on the complexity of syntax

2007-01-25

Grammar Engineering, I'm loving it