17 results about "Javascript engine" patented technology

The invention provides a data transmission method, electronic equipment, a chip system and a storage medium, and the method comprises the steps: obtaining first to-be-transmitted data through a JavaScript engine, writing the first to-be-transmitted data into a target shared memory space through the JavaScript engine, the target shared memory space is used for storing first type data, and the first to-be-transmitted data is stored in the target shared memory space through the JavaScript engine. The type of the first to-be-transmitted data belongs to a first type; reading the first to-be-transmitted data from the target shared memory space through an NAPI component of the operating system, and converting the type of the first to-be-transmitted data into a corresponding second type to obtain target data; and transmitting the target data to the Native end through the NAPI component. According to the method, the time consumed in the data transmission process can be shortened, and the data transmission efficiency is improved.

The invention discloses a function calculation mechanism for document generation, which belongs to the technical field of complex logic content generation and comprises the following steps of: introducing a JavaScript engine: utilizing the JavaScript engine as a core processing unit for function calculation, providing strong script execution capability and wide library support by the JavaScript engine, and generating a function by using the JavaScript engine; various complex logic calculation and data processing can be efficiently executed; a Word template engine is used, a POI-TL is used as a template engine for document generation, the POI-TL is based on an Apache POI library, and a Word document can be conveniently read and written in; according to the method, efficient calculation is carried out, namely, the JavaScript engine can quickly execute complex logical operation and data processing, so that the document generation time is shortened, for example, all calculation and document generation tasks can be completed within several seconds when a contract containing complex calculation and logical judgment is generated; and automatic processing: high automation is realized in the whole process from data input to document generation, manual intervention is reduced, and the overall working efficiency is improved.

The present invention discloses an adaptive floating-point to integer optimization method and device for a JavaScript engine. The method includes obtaining floating-point to integer conversion information; reading processor hardware information, and by comparing the processor information, determining the strong / weak support of the processor for the truncation mode. Strong support of the processor for the truncation mode means that the target value obtained when the floating-point to integer instruction overflows is the truncated value of the target format, and weak support of the processor for the truncation mode means that the target value obtained when the floating-point to integer instruction overflows is the maximum finite value of the target format; under the strong / weak support of the processor for the truncation mode, respectively judge and match the floating-point to integer conversion information to the bitwise operation Double to Int32 conversion module and the conventional floating-point to integer conversion module, and adaptively generate different floating-point to integer instructions. The conversion method of the present invention covers all processing situations of floating-point to integer conversion information, and the code can be generated adaptively, which can improve the conversion efficiency and stability.

The present invention discloses a browser rendering method, device and system. The method comprises: first obtaining original code corresponding to web page data of a configuration tag keyword, preprocessing the original code according to the introduction order and the priority of the original code, determining the preprocessed target code, and then using the target code as the input of the JavaScript engine and the browser rendering task, monitoring the blank time available for each frame of browser data, when the available blank time is monitored, reading the browser rendering task queue, and judging whether to trigger a browser rendering task scheduling request, and finally responding to the request to execute the browser rendering task scheduling, utilizing the dynamic task scheduling rules of the preset priority strategy to execute the browser rendering task. The method can fully utilize the browser rendering time through code preprocessing and blank time monitoring, reduce the blocking problem in the browser rendering process, and improve rendering efficiency and user experience.

The application provides a kind of fuzzy testing system and method for WASM module in JavaScript engine, the system is cooperatively constituted by seed generation module, target engine adaptation module and fuzzy testing module, seed generation module combines the new features of WASM, seed generation algorithm is designed.This algorithm not only strengthens the coverage of WASM and JavaScript interaction, but also ensures the semantic correctness of the test sample generated by dynamic parameter adjustment and syntax constraint.Target engine adaptation module adopts weighted coverage feedback and additional correctness checking mechanism to accurately identify potential boundary access and type confusion vulnerabilities.Fuzzy testing module efficiently discovers and reproduces security issues in the engine.The application can quickly locate the vulnerabilities such as memory corruption and boundary access in WASM module of JavaScript engine, providing key protection for web security, helping JavaScript engine developers and security researchers quickly identify security risks, improving testing efficiency and the number of vulnerability discovery, and enhancing the security of JavaScript engine.

The application discloses a JavaScript engine oriented fuzz testing method and system based on natural language processing, which extracts JavaScript language syntax and semantic information through a BERT language model by using a natural language processing technology, performs fine-tuning by combining a residual network and a mask language model, and performs oriented fuzz testing on a JavaScript engine in combination with an AFLGO oriented fuzz testing technology. The bidirectional sequence processing capability of the BERT language model improves the precision of feature extraction, and the residual network further improves the accuracy of the language model. The oriented fuzz testing utilizes coverage information, and improves the speed of vulnerability discovery and the code coverage rate of the fuzz testing. The application takes into account the test case generation efficiency and the utilization of coverage information, greatly improves the effective test case generation rate, and also improves the code coverage rate of the fuzz testing.

The application provides a probe-based JavaScript engine type confusion exploit generation method and device, which comprises the following steps: obtaining a proof of concept, inputting the JavaScript engine of a networking device after inserting a data probe in the proof of concept, obtaining a log file of the running of the JavaScript engine, and the log file comprising an actual type and an expected type of given data; selecting given data with a different actual type and expected type as type confusion vulnerability data; reading a type confusion knowledge base to find an exploit statement matching the type of the type confusion vulnerability data, inserting the exploit statement into a type misuse point and a read-write freedom point, and converting the proof of concept after inserting the data probe into an exploit primitive; taking the exploit primitive as a basic exploit primitive, combining it with a supplementary exploit primitive in an expert knowledge base, and generating an exploit as a type confusion vulnerability detection result of the networking device.

The invention provides a probe-based JavaScript engine type confusion vulnerability utilization generation method and device, and the method comprises the steps: obtaining a concept proof, inserting a data probe into the concept proof, inputting the data probe into a JavaScript engine of a networking device, obtaining a log file for the operation of the JavaScript engine, the log file comprising an actual type and an expected type of given data; selecting given data of which the actual type is different from the expected type as type confusion vulnerability data; by reading the type confusion knowledge base, searching for a utilization statement matched with the type confusion vulnerability data type, inserting the utilization statement into a type misuse point and a read-write free point, and converting the concept proof inserted with the data probe into a utilization primitive; and taking the primitive as a basic primitive, combining the basic primitive with a complementary primitive in the expert knowledge base, and generating and utilizing the basic primitive as a type confusion vulnerability detection result of the networked equipment.

The application discloses an HTTP request scheduling method and system. The scheduling method establishes a global request dispatcher independent of a page instance in a JavaScript engine of an embedded device to centrally manage the HTTP request life cycle. A request description block carrying a page handle is generated in response to a script layer request and is added to a message queue for processing according to a scheduling strategy. When the request is completed, the native layer checks the validity of the page handle, and the callback is executed only when the page handle is valid, thereby avoiding wild pointers and system crashes caused by data transmission to a released page. For a download request, the dispatcher calls a power-off resume transmission interface, and the device automatically resumes the download progress according to a temporary file after resetting, thereby ensuring the reliability of large data transmission. The method decouples the request from the page life cycle, solves the problem of interrupt loss caused by page closing, and significantly improves the system stability and efficiency.

The invention discloses a code processing method and device, computing equipment and a storage medium. The method comprises the steps that JavaScript source codes needing to be protected are acquired; generating an instruction mapping table, wherein the instruction mapping table generated each time has uniqueness; according to the current instruction mapping table, the source code is compiled into a target code containing a virtual instruction, and the virtual instruction is an instruction which does not have the actual operation meaning and is only used for mapping; an interpreter is generated, the interpreter is matched with the current instruction mapping table and used for analyzing the target code generated through current compiling and analyzing a virtual instruction in the target code into a virtual machine instruction, and the virtual machine instruction is an instruction capable of being recognized and executed by a JavaScript engine; outputting the interpreter and the target code; therefore, dynamic instruction obfuscation is realized, a code structure which is difficult to predict through historical codes is constructed, the difficulty of code reverse cracking is improved, static decompilation analysis is effectively prevented, and the code security is improved.

A method and apparatus for data collection to facilitate bot detection. According to this approach, and in lieu of conventional user agent-based fingerprinting, a client script is executed to attempt to identify one or more Javascript “landmark” features. In one embodiment, a landmark Javascript feature is a Javascript implementation that exists in a first browser type but not a second browser type distinct from the first browser type, and that also exists in one or more releases of the first browser type, but not in one or more other releases of the first browser type. By testing against landmark Javascript features as opposed to an unconstrained set of API calls and the like, the technique herein provides for much more computationally-efficient client-side operation.

The invention provides a fuzzy test system and method for a WASM module in a JavaScript engine, the system is composed of a seed generation module, a target engine adaptation module and a fuzzy test module cooperatively, and the seed generation module designs a seed generation algorithm in combination with the new characteristics of the WASM. The algorithm not only strengthens the coverage range of WASM and JavaScript interaction, but also ensures that a test sample generated by variation has semantic correctness through dynamic parameter adjustment and grammar constraint. And the target engine adaptation module accurately identifies potential cross-border access and type confusion vulnerabilities by adopting weighted coverage rate feedback and an additional correctness check mechanism. The fuzz test module efficiently finds and reproduces security problems in the engine. According to the method, vulnerabilities such as memory destruction and cross-border access existing in the WASM module in the JavaScript engine can be quickly positioned, key guarantee is provided for Web security, JavaScript engine developers and security researchers are helped to quickly troubleshoot potential safety hazards, the test efficiency and the vulnerability discovery number are increased, and the security of the JavaScript engine is enhanced.

The invention provides a method and a device for uploading a container mirror image. The method comprises the steps that a JavaScript engine of a browser is used for executing the following operations that a container mirror image file is decompressed, a mirror image file list is obtained, and the mirror image file list comprises a mirror image list and a plurality of mirror image layered files; aiming at each mirror image layered file in the plurality of mirror image layered files, checking whether the mirror image layered file exists in the mirror image warehouse or not; if the mirror image hierarchical file does not exist in the mirror image warehouse, uploading the mirror image hierarchical file to the mirror image warehouse; and uploading the mirror image list to a mirror image warehouse.

This invention provides a method, apparatus, device, and readable storage medium for supporting new ES features. The method includes: when an exception is detected thrown by the JavaScript engine, obtaining the error object, error type, and execution context of the exception; searching for new feature code in a pre-built database based on the error object and the error type; and if found, compiling and running the new feature code in the execution context. This invention solves the problem of exceptions thrown by the JavaScript engine that cause it to not support code written using new ES features, and enables rapid support for new ES features without updating the browser's kernel version.

The invention discloses a zero-code operation database system and method based on a JavaScript non-compiled language, and relates to the technical field of software development and database management. The system comprises a configuration input module, a storage module, a scheduling engine module and a database operation controller module. According to the method, a visual configuration interface is provided, complex associated query, view construction, aggregation query and user-defined algorithm operation are supported, and the limitation that an existing zero-code platform only supports simple CRUD is broken through; input and output parameters are described by adopting a JSON Schema standard, and open type decoupling with a third-party platform is realized; the dynamic characteristics of the JavaScript engine are utilized to realize the hot update of the database operation configuration, and the hot update can take effect without restarting the service. The method is suitable for various zero code development scenes, the development cost can be remarkably reduced, and the flexibility and safety of database operation are improved.

The present application provides a data transmission method, an electronic device, a chip system, and a storage medium. The method comprises: by means of a JavaScript engine, acquiring first data to be transmitted; by means of the JavaScript engine, writing said first data into a target shared memory space, wherein the target shared memory space is used for storing data of a first type, and the type of said first data is the first type; by means of an NAPI component of an operating system, reading said first data from the target shared memory space, and converting the type of said first data into a corresponding second type, so as to obtain target data; and transmitting the target data to a Native end by mean of the NAPI component. The method can reduce the time consumed in a data transmission process and improve data transmission efficiency.

The application discloses a kind of dynamically expanding browser Javascript engine function method, device and electronic equipment, wherein method includes the following steps: customizing browser, make the Javascript engine of browser and extension library binding, and provide interface to customer;Customer customizes extension library according to demand, and make extension library and browser dynamically connect, for browser loading;Customize Web page, make Web page show the data obtained from system platform, and call the function of customer customization in extension library.The application provides a kind of dynamically expanding browser Javascript engine function method, device and electronic equipment, without using plug-in, avoid the dependence on DOM tree, and can be executed in the first time after Javascript engine completes initialization, and do not need to know the specific function name that television manufacturer wishes to expand and do not need to recompile entire browser.