12 results about "Javascript engine" patented technology

The invention provides a data transmission method, electronic equipment, a chip system and a storage medium, and the method comprises the steps: obtaining first to-be-transmitted data through a JavaScript engine, writing the first to-be-transmitted data into a target shared memory space through the JavaScript engine, the target shared memory space is used for storing first type data, and the first to-be-transmitted data is stored in the target shared memory space through the JavaScript engine. The type of the first to-be-transmitted data belongs to a first type; reading the first to-be-transmitted data from the target shared memory space through an NAPI component of the operating system, and converting the type of the first to-be-transmitted data into a corresponding second type to obtain target data; and transmitting the target data to the Native end through the NAPI component. According to the method, the time consumed in the data transmission process can be shortened, and the data transmission efficiency is improved.

The present invention discloses a browser rendering method, device and system. The method comprises: first obtaining original code corresponding to web page data of a configuration tag keyword, preprocessing the original code according to the introduction order and the priority of the original code, determining the preprocessed target code, and then using the target code as the input of the JavaScript engine and the browser rendering task, monitoring the blank time available for each frame of browser data, when the available blank time is monitored, reading the browser rendering task queue, and judging whether to trigger a browser rendering task scheduling request, and finally responding to the request to execute the browser rendering task scheduling, utilizing the dynamic task scheduling rules of the preset priority strategy to execute the browser rendering task. The method can fully utilize the browser rendering time through code preprocessing and blank time monitoring, reduce the blocking problem in the browser rendering process, and improve rendering efficiency and user experience.

The application provides a kind of fuzzy testing system and method for WASM module in JavaScript engine, the system is cooperatively constituted by seed generation module, target engine adaptation module and fuzzy testing module, seed generation module combines the new features of WASM, seed generation algorithm is designed.This algorithm not only strengthens the coverage of WASM and JavaScript interaction, but also ensures the semantic correctness of the test sample generated by dynamic parameter adjustment and syntax constraint.Target engine adaptation module adopts weighted coverage feedback and additional correctness checking mechanism to accurately identify potential boundary access and type confusion vulnerabilities.Fuzzy testing module efficiently discovers and reproduces security issues in the engine.The application can quickly locate the vulnerabilities such as memory corruption and boundary access in WASM module of JavaScript engine, providing key protection for web security, helping JavaScript engine developers and security researchers quickly identify security risks, improving testing efficiency and the number of vulnerability discovery, and enhancing the security of JavaScript engine.

The application discloses a JavaScript engine oriented fuzz testing method and system based on natural language processing, which extracts JavaScript language syntax and semantic information through a BERT language model by using a natural language processing technology, performs fine-tuning by combining a residual network and a mask language model, and performs oriented fuzz testing on a JavaScript engine in combination with an AFLGO oriented fuzz testing technology. The bidirectional sequence processing capability of the BERT language model improves the precision of feature extraction, and the residual network further improves the accuracy of the language model. The oriented fuzz testing utilizes coverage information, and improves the speed of vulnerability discovery and the code coverage rate of the fuzz testing. The application takes into account the test case generation efficiency and the utilization of coverage information, greatly improves the effective test case generation rate, and also improves the code coverage rate of the fuzz testing.

The application provides a probe-based JavaScript engine type confusion exploit generation method and device, which comprises the following steps: obtaining a proof of concept, inputting the JavaScript engine of a networking device after inserting a data probe in the proof of concept, obtaining a log file of the running of the JavaScript engine, and the log file comprising an actual type and an expected type of given data; selecting given data with a different actual type and expected type as type confusion vulnerability data; reading a type confusion knowledge base to find an exploit statement matching the type of the type confusion vulnerability data, inserting the exploit statement into a type misuse point and a read-write freedom point, and converting the proof of concept after inserting the data probe into an exploit primitive; taking the exploit primitive as a basic exploit primitive, combining it with a supplementary exploit primitive in an expert knowledge base, and generating an exploit as a type confusion vulnerability detection result of the networking device.

The invention provides a probe-based JavaScript engine type confusion vulnerability utilization generation method and device, and the method comprises the steps: obtaining a concept proof, inserting a data probe into the concept proof, inputting the data probe into a JavaScript engine of a networking device, obtaining a log file for the operation of the JavaScript engine, the log file comprising an actual type and an expected type of given data; selecting given data of which the actual type is different from the expected type as type confusion vulnerability data; by reading the type confusion knowledge base, searching for a utilization statement matched with the type confusion vulnerability data type, inserting the utilization statement into a type misuse point and a read-write free point, and converting the concept proof inserted with the data probe into a utilization primitive; and taking the primitive as a basic primitive, combining the basic primitive with a complementary primitive in the expert knowledge base, and generating and utilizing the basic primitive as a type confusion vulnerability detection result of the networked equipment.

The application discloses an HTTP request scheduling method and system. The scheduling method establishes a global request dispatcher independent of a page instance in a JavaScript engine of an embedded device to centrally manage the HTTP request life cycle. A request description block carrying a page handle is generated in response to a script layer request and is added to a message queue for processing according to a scheduling strategy. When the request is completed, the native layer checks the validity of the page handle, and the callback is executed only when the page handle is valid, thereby avoiding wild pointers and system crashes caused by data transmission to a released page. For a download request, the dispatcher calls a power-off resume transmission interface, and the device automatically resumes the download progress according to a temporary file after resetting, thereby ensuring the reliability of large data transmission. The method decouples the request from the page life cycle, solves the problem of interrupt loss caused by page closing, and significantly improves the system stability and efficiency.

The invention discloses a code processing method and device, computing equipment and a storage medium. The method comprises the steps that JavaScript source codes needing to be protected are acquired; generating an instruction mapping table, wherein the instruction mapping table generated each time has uniqueness; according to the current instruction mapping table, the source code is compiled into a target code containing a virtual instruction, and the virtual instruction is an instruction which does not have the actual operation meaning and is only used for mapping; an interpreter is generated, the interpreter is matched with the current instruction mapping table and used for analyzing the target code generated through current compiling and analyzing a virtual instruction in the target code into a virtual machine instruction, and the virtual machine instruction is an instruction capable of being recognized and executed by a JavaScript engine; outputting the interpreter and the target code; therefore, dynamic instruction obfuscation is realized, a code structure which is difficult to predict through historical codes is constructed, the difficulty of code reverse cracking is improved, static decompilation analysis is effectively prevented, and the code security is improved.

This invention provides a method, apparatus, device, and readable storage medium for supporting new ES features. The method includes: when an exception is detected thrown by the JavaScript engine, obtaining the error object, error type, and execution context of the exception; searching for new feature code in a pre-built database based on the error object and the error type; and if found, compiling and running the new feature code in the execution context. This invention solves the problem of exceptions thrown by the JavaScript engine that cause it to not support code written using new ES features, and enables rapid support for new ES features without updating the browser's kernel version.

The invention discloses a zero-code operation database system and method based on a JavaScript non-compiled language, and relates to the technical field of software development and database management. The system comprises a configuration input module, a storage module, a scheduling engine module and a database operation controller module. According to the method, a visual configuration interface is provided, complex associated query, view construction, aggregation query and user-defined algorithm operation are supported, and the limitation that an existing zero-code platform only supports simple CRUD is broken through; input and output parameters are described by adopting a JSON Schema standard, and open type decoupling with a third-party platform is realized; the dynamic characteristics of the JavaScript engine are utilized to realize the hot update of the database operation configuration, and the hot update can take effect without restarting the service. The method is suitable for various zero code development scenes, the development cost can be remarkably reduced, and the flexibility and safety of database operation are improved.

The present application provides a data transmission method, an electronic device, a chip system, and a storage medium. The method comprises: by means of a JavaScript engine, acquiring first data to be transmitted; by means of the JavaScript engine, writing said first data into a target shared memory space, wherein the target shared memory space is used for storing data of a first type, and the type of said first data is the first type; by means of an NAPI component of an operating system, reading said first data from the target shared memory space, and converting the type of said first data into a corresponding second type, so as to obtain target data; and transmitting the target data to a Native end by mean of the NAPI component. The method can reduce the time consumed in a data transmission process and improve data transmission efficiency.

The application discloses a kind of dynamically expanding browser Javascript engine function method, device and electronic equipment, wherein method includes the following steps: customizing browser, make the Javascript engine of browser and extension library binding, and provide interface to customer;Customer customizes extension library according to demand, and make extension library and browser dynamically connect, for browser loading;Customize Web page, make Web page show the data obtained from system platform, and call the function of customer customization in extension library.The application provides a kind of dynamically expanding browser Javascript engine function method, device and electronic equipment, without using plug-in, avoid the dependence on DOM tree, and can be executed in the first time after Javascript engine completes initialization, and do not need to know the specific function name that television manufacturer wishes to expand and do not need to recompile entire browser.