Github Security Lib - 校验图片DOS攻击 - 《CodeQL 学习笔记》

width和heiht是否可控

java的kaptcha库，javax的ImageIO

image,picture,captcha

kaptcha.image.width


<dependency>
    <groupId>com.google.code.kaptcha</groupId>
    <artifactId>kaptcha</artifactId>
    <version>2.3</version>
</dependency>

https://github.com/yanghaibing/kcss-us
https://github.com/color-key/no-contract-pay

https://blog.csdn.net/qq_28096687/article/details/79364788

mvn install:install-file -DgroupId=com.google.code -DartifactId=kaptcha -Dversion=2.3 -Dfile=../../../kaptcha-2.3.jar -Dpackaging=jar -DgeneratePom=true

下载源码包：
http://code.google.com/p/kaptcha/downloads/list

java.awt.image.BufferedImage
使用BufferedImage用于在内存中存储生成的验证码图片

BufferedImage image = new BufferedImage(w, h, BufferedImage.TYPE_INT_RGB);

javax.imageio.ImageIO
通过ImageIO将生成的图片进行输出

ImageIO.write(image, "jpg", os);

漏洞项目
https://github.com/SyuuTou/wlspacecraft
https://github.com/Noverish/Spring-FileServer
https://github.com/giaynhap/btl_server_securechat
https://github.com/giaynhap/btl_server_securechat/blob/cd19cde9b0c76c8f33e621403bf917174e216582/src/main/java/com/giaynhap/controller/FileController.java#L69
[

](https://github.com/SyuuTou/bluewave_tstzzs)

BufferedImage(ColorModel cm, WritableRaster raster, boolean isRasterPremultiplied, Hashtable<?,?> properties)
BufferedImage(int width, int height, int imageType)
BufferedImage(int width, int height, int imageType, IndexColorModel cm)