mirror of
https://github.com/ysoftdevs/DependencyCheck.git
synced 2026-01-14 07:43:40 +01:00
removed unused collection
Former-commit-id: 5f3c6eab38eae99fef70909650a5eddf2a374a56
This commit is contained in:
@@ -459,8 +459,6 @@ public class CveDB {
|
||||
final List<Vulnerability> vulnerabilities = new ArrayList<Vulnerability>();
|
||||
|
||||
PreparedStatement ps;
|
||||
//TODO(code review): Looks like things are only added to this map, but never retrieved or checked
|
||||
final Set<String> cveEntries = new HashSet<String>();
|
||||
try {
|
||||
ps = getConnection().prepareStatement(SELECT_CVE_FROM_SOFTWARE);
|
||||
ps.setString(1, cpe.getVendor());
|
||||
@@ -474,7 +472,6 @@ public class CveDB {
|
||||
if (!currentCVE.equals(cveId)) { //check for match and add
|
||||
final Entry<String, Boolean> matchedCPE = getMatchingSoftware(vulnSoftware, cpe.getVendor(), cpe.getProduct(), detectedVersion);
|
||||
if (matchedCPE != null) {
|
||||
cveEntries.add(currentCVE);
|
||||
final Vulnerability v = getVulnerability(currentCVE);
|
||||
v.setMatchedCPE(matchedCPE.getKey(), matchedCPE.getValue() ? "Y" : null);
|
||||
vulnerabilities.add(v);
|
||||
@@ -491,7 +488,6 @@ public class CveDB {
|
||||
//remember to process the last set of CVE/CPE entries
|
||||
final Entry<String, Boolean> matchedCPE = getMatchingSoftware(vulnSoftware, cpe.getVendor(), cpe.getProduct(), detectedVersion);
|
||||
if (matchedCPE != null) {
|
||||
cveEntries.add(currentCVE);
|
||||
final Vulnerability v = getVulnerability(currentCVE);
|
||||
v.setMatchedCPE(matchedCPE.getKey(), matchedCPE.getValue() ? "Y" : null);
|
||||
vulnerabilities.add(v);
|
||||
|
||||
Reference in New Issue
Block a user