Sunyard/sydapi
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix:key漏洞

Browse Source
This commit is contained in:
waner 2025-07-31 11:57:05 +08:00
parent 6df9d978d5
commit 1df1e64783
1 changed files with 6 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
src/main/java/racal/sunyard/main/SydApi4j.java
View File

@ -9053,7 +9053,7 @@ public class SydApi4j implements SydApi {
keyTpye = "008"; keyTpye = "008";
} }
String key = "XK"; String xkkey = "XK";
// 机构号扩展到 16 位 // 机构号扩展到 16 位
// 前补 0 // 前补 0
@ -9062,10 +9062,10 @@ public class SydApi4j implements SydApi {
String kid = "00000"; String kid = "00000";
String v = String.format("%03d", Version); String v = String.format("%03d", Version);
key += gid + keyTpye + kid + v; xkkey += gid + keyTpye + kid + v;
data.put("MACData", Util.bytes2HexString(Data).getBytes()); data.put("MACData", Util.bytes2HexString(Data).getBytes());
data.put("key", key); data.put("key", xkkey);
data.put("full", fullFlag); data.put("full", fullFlag);
data.put("macLen", macLenFlag); data.put("macLen", macLenFlag);
@ -9131,7 +9131,7 @@ public class SydApi4j implements SydApi {
keyTpye = "008"; keyTpye = "008";
} }
String key = "XK"; String xkkey = "XK";
// 机构号扩展到 16 位 // 机构号扩展到 16 位
// 前补 0 // 前补 0
@ -9140,12 +9140,12 @@ public class SydApi4j implements SydApi {
String kid = "00000"; String kid = "00000";
String v = String.format("%03d", Version); String v = String.format("%03d", Version);
key += gid + keyTpye + kid + v; xkkey += gid + keyTpye + kid + v;
data.put("MAC", mac); data.put("MAC", mac);
data.put("MACData", Util.bytes2HexString(Data).getBytes()); data.put("MACData", Util.bytes2HexString(Data).getBytes());
data.put("key", key); data.put("key", xkkey);
data.put("full", fullFlag); data.put("full", fullFlag);
data.put("macLen", macLenFlag); data.put("macLen", macLenFlag);