diff --git a/dependency-check-core/xref-test/org/owasp/dependencycheck/analyzer/package-frame.html b/dependency-check-core/xref-test/org/owasp/dependencycheck/analyzer/package-frame.html
index d4585187a..9bbd90458 100644
--- a/dependency-check-core/xref-test/org/owasp/dependencycheck/analyzer/package-frame.html
+++ b/dependency-check-core/xref-test/org/owasp/dependencycheck/analyzer/package-frame.html
@@ -3,7 +3,7 @@
Dependency-Check Core 1.0.3 Reference Package org.owasp.dependencycheck.analyzer
+ Dependency-Check Core 1.0.4 Reference Package org.owasp.dependencycheck.analyzer
Dependency-Check Core 1.0.3 Reference Package org.owasp.dependencycheck.analyzer
+ Dependency-Check Core 1.0.4 Reference Package org.owasp.dependencycheck.analyzer
Dependency-Check Core 1.0.3 Reference Package org.owasp.dependencycheck.concurrency
+ Dependency-Check Core 1.0.4 Reference Package org.owasp.dependencycheck.concurrency
Dependency-Check Core 1.0.3 Reference Package org.owasp.dependencycheck.concurrency
+ Dependency-Check Core 1.0.4 Reference Package org.owasp.dependencycheck.concurrency
Dependency-Check Core 1.0.3 Reference Package org.owasp.dependencycheck.data.cpe
+ Dependency-Check Core 1.0.4 Reference Package org.owasp.dependencycheck.data.cpe
Dependency-Check Core 1.0.3 Reference Package org.owasp.dependencycheck.data.cpe
+ Dependency-Check Core 1.0.4 Reference Package org.owasp.dependencycheck.data.cpe
Dependency-Check Core 1.0.3 Reference Package org.owasp.dependencycheck.data.cwe
+ Dependency-Check Core 1.0.4 Reference Package org.owasp.dependencycheck.data.cwe
Dependency-Check Core 1.0.3 Reference Package org.owasp.dependencycheck.data.cwe
+ Dependency-Check Core 1.0.4 Reference Package org.owasp.dependencycheck.data.cwe
Dependency-Check Core 1.0.3 Reference Package org.owasp.dependencycheck.data.lucene
+ Dependency-Check Core 1.0.4 Reference Package org.owasp.dependencycheck.data.lucene
Dependency-Check Core 1.0.3 Reference Package org.owasp.dependencycheck.data.lucene
+ Dependency-Check Core 1.0.4 Reference Package org.owasp.dependencycheck.data.lucene
Dependency-Check Core 1.0.3 Reference Package org.owasp.dependencycheck.data.nvdcve
+ Dependency-Check Core 1.0.4 Reference Package org.owasp.dependencycheck.data.nvdcve
Dependency-Check Core 1.0.3 Reference Package org.owasp.dependencycheck.data.nvdcve
+ Dependency-Check Core 1.0.4 Reference Package org.owasp.dependencycheck.data.nvdcve
Dependency-Check Core 1.0.3 Reference Package org.owasp.dependencycheck.data.update
+ Dependency-Check Core 1.0.4 Reference Package org.owasp.dependencycheck.data.update
Dependency-Check Core 1.0.3 Reference Package org.owasp.dependencycheck.data.update
+ Dependency-Check Core 1.0.4 Reference Package org.owasp.dependencycheck.data.update
Dependency-Check Core 1.0.3 Reference Package org.owasp.dependencycheck.dependency
+ Dependency-Check Core 1.0.4 Reference Package org.owasp.dependencycheck.dependency
Dependency-Check Core 1.0.3 Reference Package org.owasp.dependencycheck.dependency
+ Dependency-Check Core 1.0.4 Reference Package org.owasp.dependencycheck.dependency
Dependency-Check Core 1.0.3 Reference Package org.owasp.dependencycheck
+ Dependency-Check Core 1.0.4 Reference Package org.owasp.dependencycheck
Dependency-Check Core 1.0.3 Reference Package org.owasp.dependencycheck
+ Dependency-Check Core 1.0.4 Reference Package org.owasp.dependencycheck
Dependency-Check Core 1.0.3 Reference Package org.owasp.dependencycheck.reporting
+ Dependency-Check Core 1.0.4 Reference Package org.owasp.dependencycheck.reporting
Dependency-Check Core 1.0.3 Reference Package org.owasp.dependencycheck.reporting
+ Dependency-Check Core 1.0.4 Reference Package org.owasp.dependencycheck.reporting
Dependency-Check Core 1.0.3 Reference Package org.owasp.dependencycheck.utils
+ Dependency-Check Core 1.0.4 Reference Package org.owasp.dependencycheck.utils
Dependency-Check Core 1.0.3 Reference Package org.owasp.dependencycheck.utils
+ Dependency-Check Core 1.0.4 Reference Package org.owasp.dependencycheck.utils
Dependency-Check Core 1.0.3 Reference
+ Dependency-Check Core 1.0.4 Reference
Dependency-Check Core 1.0.3 Reference
+ Dependency-Check Core 1.0.4 Reference
Dependency-Check Core 1.0.3 Reference
+ Dependency-Check Core 1.0.4 Reference
diff --git a/dependency-check-core/xref/allclasses-frame.html b/dependency-check-core/xref/allclasses-frame.html
index c38c65ef0..ed35a5330 100644
--- a/dependency-check-core/xref/allclasses-frame.html
+++ b/dependency-check-core/xref/allclasses-frame.html
@@ -268,6 +268,12 @@
Licenses
+
+
+ LogFilter
+
+
+ LogUtils
LuceneUtils
diff --git a/dependency-check-core/xref/index.html b/dependency-check-core/xref/index.html
index 661cfcd9e..111f96d90 100644
--- a/dependency-check-core/xref/index.html
+++ b/dependency-check-core/xref/index.html
@@ -3,7 +3,7 @@
Dependency-Check Core 1.0.3 Reference
+ Dependency-Check Core 1.0.4 Reference
diff --git a/dependency-check-core/xref/org/owasp/dependencycheck/Engine.html b/dependency-check-core/xref/org/owasp/dependencycheck/Engine.html
index 05bd9e5df..a26a44a49 100644
--- a/dependency-check-core/xref/org/owasp/dependencycheck/Engine.html
+++ b/dependency-check-core/xref/org/owasp/dependencycheck/Engine.html
@@ -292,113 +292,121 @@
282 final List<Analyzer> analyzerList = analyzers.get(phase);
283 for (Analyzer a : analyzerList) {
284 try {
-285 a.initialize();
-286 } catch (Exception ex) {
-287 final String msg = String.format("\"Exception occurred initializing \"%s\".\"" , a.getName());
-288 Logger.getLogger(Engine.class .getName()).log(Level.SEVERE, msg);
-289 Logger.getLogger(Engine.class .getName()).log(Level.INFO, msg, ex);
-290 try {
-291 a.close();
-292 } catch (Exception ex1) {
-293 Logger.getLogger(Engine.class .getName()).log(Level.FINEST, null , ex1);
-294 }
-295 }
-296 }
-297 }
-298
-299
-300 for (AnalysisPhase phase : AnalysisPhase.values()) {
-301 final List<Analyzer> analyzerList = analyzers.get(phase);
-302
-303 for (Analyzer a : analyzerList) {
-304
-305
-306
-307
-308 final Set<Dependency> dependencySet = new HashSet<Dependency>();
-309 dependencySet.addAll(dependencies);
-310 for (Dependency d : dependencySet) {
-311 if (a.supportsExtension(d.getFileExtension())) {
-312 try {
-313 a.analyze(d, this );
-314 } catch (AnalysisException ex) {
-315 d.addAnalysisException(ex);
-316 }
-317 }
-318 }
-319 }
-320 }
-321
-322
-323 for (AnalysisPhase phase : AnalysisPhase.values()) {
-324 final List<Analyzer> analyzerList = analyzers.get(phase);
-325 for (Analyzer a : analyzerList) {
-326 try {
-327 a.close();
-328 } catch (Exception ex) {
-329 Logger.getLogger(Engine.class .getName()).log(Level.FINEST, null , ex);
-330 }
-331 }
-332 }
-333 }
-334
-335
-336
-337
-338
-339 private void doUpdates() {
-340 final UpdateService service = UpdateService.getInstance();
-341 final Iterator<CachedWebDataSource> iterator = service.getDataSources();
-342 while (iterator.hasNext()) {
-343 final CachedWebDataSource source = iterator.next();
-344 try {
-345 source.update();
-346 } catch (UpdateException ex) {
-347 Logger.getLogger(Engine.class .getName()).log(Level.WARNING,
-348 "Unable to update Cached Web DataSource, using local data instead. Results may not include recent vulnerabilities." );
-349 Logger.getLogger(Engine.class .getName()).log(Level.FINE,
-350 String.format("Unable to update details for %s" , source.getClass().getName()), ex);
-351 }
-352 }
-353 }
-354
-355
-356
-357
-358
-359
-360
-361 public List<Analyzer> getAnalyzers() {
-362 final List<Analyzer> ret = new ArrayList<Analyzer>();
-363 for (AnalysisPhase phase : AnalysisPhase.values()) {
-364 final List<Analyzer> analyzerList = analyzers.get(phase);
-365 ret.addAll(analyzerList);
-366 }
-367 return ret;
-368 }
-369
-370
-371
-372
-373
-374
-375
-376
-377 public boolean supportsExtension(String ext) {
-378 if (ext == null ) {
-379 return false;
-380 }
-381 for (AnalysisPhase phase : AnalysisPhase.values()) {
-382 final List<Analyzer> analyzerList = analyzers.get(phase);
-383 for (Analyzer a : analyzerList) {
-384 if (a.getSupportedExtensions() != null && a.supportsExtension(ext)) {
-385 return true ;
-386 }
-387 }
+285 final String msg = String.format("Initializing %s" , a.getName());
+286 Logger.getLogger(Engine.class .getName()).log(Level.FINE, msg);
+287 a.initialize();
+288 } catch (Exception ex) {
+289 final String msg = String.format("Exception occurred initializing %s." , a.getName());
+290 Logger.getLogger(Engine.class .getName()).log(Level.SEVERE, msg);
+291 Logger.getLogger(Engine.class .getName()).log(Level.INFO, null , ex);
+292 try {
+293 a.close();
+294 } catch (Exception ex1) {
+295 Logger.getLogger(Engine.class .getName()).log(Level.FINEST, null , ex1);
+296 }
+297 }
+298 }
+299 }
+300
+301
+302 for (AnalysisPhase phase : AnalysisPhase.values()) {
+303 final List<Analyzer> analyzerList = analyzers.get(phase);
+304
+305 for (Analyzer a : analyzerList) {
+306
+307
+308
+309
+310 final String msg = String.format("Begin Analyzer '%s'" , a.getName());
+311 Logger.getLogger(Engine.class .getName()).log(Level.FINE, msg);
+312 final Set<Dependency> dependencySet = new HashSet<Dependency>();
+313 dependencySet.addAll(dependencies);
+314 for (Dependency d : dependencySet) {
+315 final String msgFile = String.format("Begin Analysis of '%s'" , d.getActualFilePath());
+316 Logger.getLogger(Engine.class .getName()).log(Level.FINE, msgFile);
+317 if (a.supportsExtension(d.getFileExtension())) {
+318 try {
+319 a.analyze(d, this );
+320 } catch (AnalysisException ex) {
+321 d.addAnalysisException(ex);
+322 }
+323 }
+324 }
+325 }
+326 }
+327
+328
+329 for (AnalysisPhase phase : AnalysisPhase.values()) {
+330 final List<Analyzer> analyzerList = analyzers.get(phase);
+331 for (Analyzer a : analyzerList) {
+332 final String msg = String.format("Closing Analyzer '%s'" , a.getName());
+333 Logger.getLogger(Engine.class .getName()).log(Level.FINE, msg);
+334 try {
+335 a.close();
+336 } catch (Exception ex) {
+337 Logger.getLogger(Engine.class .getName()).log(Level.FINEST, null , ex);
+338 }
+339 }
+340 }
+341 }
+342
+343
+344
+345
+346
+347 private void doUpdates() {
+348 final UpdateService service = UpdateService.getInstance();
+349 final Iterator<CachedWebDataSource> iterator = service.getDataSources();
+350 while (iterator.hasNext()) {
+351 final CachedWebDataSource source = iterator.next();
+352 try {
+353 source.update();
+354 } catch (UpdateException ex) {
+355 Logger.getLogger(Engine.class .getName()).log(Level.WARNING,
+356 "Unable to update Cached Web DataSource, using local data instead. Results may not include recent vulnerabilities." );
+357 Logger.getLogger(Engine.class .getName()).log(Level.FINE,
+358 String.format("Unable to update details for %s" , source.getClass().getName()), ex);
+359 }
+360 }
+361 }
+362
+363
+364
+365
+366
+367
+368
+369 public List<Analyzer> getAnalyzers() {
+370 final List<Analyzer> ret = new ArrayList<Analyzer>();
+371 for (AnalysisPhase phase : AnalysisPhase.values()) {
+372 final List<Analyzer> analyzerList = analyzers.get(phase);
+373 ret.addAll(analyzerList);
+374 }
+375 return ret;
+376 }
+377
+378
+379
+380
+381
+382
+383
+384
+385 public boolean supportsExtension(String ext) {
+386 if (ext == null ) {
+387 return false;
388 }
-389 return false;
-390 }
-391 }
+389 for (AnalysisPhase phase : AnalysisPhase.values()) {
+390 final List<Analyzer> analyzerList = analyzers.get(phase);
+391 for (Analyzer a : analyzerList) {
+392 if (a.getSupportedExtensions() != null && a.supportsExtension(ext)) {
+393 return true ;
+394 }
+395 }
+396 }
+397 return false;
+398 }
+399 }
145 public void initialize() throws Exception {
146 final File baseDir = Settings.getTempDirectory();
147 if (!baseDir.exists()) {
-148 baseDir.mkdirs();
-149 }
-150 tempFileLocation = File.createTempFile("check" , "tmp" , baseDir);
-151 if (!tempFileLocation.delete()) {
-152 throw new AnalysisException ("Unable to delete temporary file '" + tempFileLocation.getAbsolutePath() + "'." );
-153 }
-154 if (!tempFileLocation.mkdirs()) {
-155 throw new AnalysisException ("Unable to create directory '" + tempFileLocation.getAbsolutePath() + "'." );
+148 if (!baseDir.mkdirs()) {
+149 final String msg = String.format("Unable to make a temporary folder '%s'" , baseDir.getPath());
+150 throw new AnalysisException (msg);
+151 }
+152 }
+153 tempFileLocation = File.createTempFile("check" , "tmp" , baseDir);
+154 if (!tempFileLocation.delete()) {
+155 throw new AnalysisException ("Unable to delete temporary file '" + tempFileLocation.getAbsolutePath() + "'." );
156 }
-157 }
-158
-159
-160
-161
-162
-163
-164
-165 @Override
-166 public void close() throws Exception {
-167 if (tempFileLocation != null && tempFileLocation.exists()) {
-168 FileUtils.deleteRecursive(tempFileLocation.getAbsolutePath(), true );
-169 }
-170 }
-171
-172
-173
-174
-175
-176
-177
-178
-179
-180
-181 @Override
-182 public void analyze(Dependency dependency, Engine engine) throws AnalysisException {
-183 final File f = new File(dependency.getActualFilePath());
-184 final File tmpDir = getNextTempDirectory();
-185 extractFiles(f, tmpDir, engine);
-186
-187
-188 final List<Dependency> dependencies = new ArrayList<Dependency>(engine.getDependencies());
-189 engine.scan(tmpDir);
-190 final List<Dependency> newDependencies = engine.getDependencies();
-191 if (dependencies.size() != newDependencies.size()) {
-192
-193 final Set<Dependency> dependencySet = new HashSet<Dependency>();
-194 dependencySet.addAll(newDependencies);
-195 dependencySet.removeAll(dependencies);
-196
-197 for (Dependency d : dependencySet) {
-198
-199 final String displayPath = String.format("%s%s" ,
-200 dependency.getFilePath(),
-201 d.getActualFilePath().substring(tmpDir.getAbsolutePath().length()));
-202 final String displayName = String.format("%s%s%s" ,
-203 dependency.getFileName(),
-204 File.separator,
-205 d.getFileName());
-206 d.setFilePath(displayPath);
-207 d.setFileName(displayName);
-208
-209
-210
-211
-212 if (this .supportsExtension(d.getFileExtension()) && scanDepth < MAX_SCAN_DEPTH) {
-213 scanDepth += 1;
-214 analyze(d, engine);
-215 scanDepth -= 1;
-216 }
-217 }
-218 }
-219 Collections.sort(engine.getDependencies());
-220 }
-221
-222
-223
-224
-225
-226
-227
-228 private File getNextTempDirectory() throws AnalysisException {
-229 dirCount += 1;
-230 final File directory = new File(tempFileLocation, String.valueOf(dirCount));
-231 if (!directory.mkdirs()) {
-232 throw new AnalysisException ("Unable to create temp directory '" + directory.getAbsolutePath() + "'." );
-233 }
-234 return directory;
-235 }
-236
-237
-238
-239
-240
-241
-242
-243
-244
-245 private void extractFiles(File archive, File extractTo, Engine engine) throws AnalysisException {
-246 if (archive == null || extractTo == null ) {
-247 return ;
-248 }
-249
-250 FileInputStream fis = null ;
-251
-252 ZipArchiveInputStream zis = null ;
-253
-254 try {
-255 fis = new FileInputStream(archive);
-256 } catch (FileNotFoundException ex) {
-257 Logger.getLogger(ArchiveAnalyzer.class .getName()).log(Level.INFO, null , ex);
-258 throw new AnalysisException ("Archive file was not found." , ex);
-259 }
-260 zis = new ZipArchiveInputStream(new BufferedInputStream(fis));
-261 ZipArchiveEntry entry;
-262
-263 try {
-264 while ((entry = zis.getNextZipEntry()) != null ) {
-265 if (entry.isDirectory()) {
-266 final File d = new File(extractTo, entry.getName());
-267 if (!d.mkdirs()) {
-268 throw new AnalysisException ("Unable to create '" + d.getAbsolutePath() + "'." );
-269 }
-270 } else {
-271 final File file = new File(extractTo, entry.getName());
-272 final String ext = org.owasp.dependencycheck.utils.FileUtils.getFileExtension(file.getName());
-273 if (engine.supportsExtension(ext)) {
-274 BufferedOutputStream bos = null ;
-275 FileOutputStream fos;
-276 try {
-277 fos = new FileOutputStream(file);
-278 bos = new BufferedOutputStream(fos, BUFFER_SIZE);
-279 int count;
-280 final byte data[] = new byte[BUFFER_SIZE];
-281 while ((count = zis.read(data, 0, BUFFER_SIZE)) != -1) {
-282 bos.write(data, 0, count);
-283 }
-284 bos.flush();
-285 } catch (FileNotFoundException ex) {
-286 Logger.getLogger(ArchiveAnalyzer.class .getName()).log(Level.FINE, null , ex);
-287 throw new AnalysisException ("Unable to find file '" + file.getName() + "'." , ex);
-288 } catch (IOException ex) {
+157 if (!tempFileLocation.mkdirs()) {
+158 throw new AnalysisException ("Unable to create directory '" + tempFileLocation.getAbsolutePath() + "'." );
+159 }
+160 }
+161
+162
+163
+164
+165
+166
+167
+168 @Override
+169 public void close() throws Exception {
+170 if (tempFileLocation != null && tempFileLocation.exists()) {
+171 FileUtils.deleteRecursive(tempFileLocation.getAbsolutePath(), true );
+172 }
+173 }
+174
+175
+176
+177
+178
+179
+180
+181
+182
+183
+184 @Override
+185 public void analyze(Dependency dependency, Engine engine) throws AnalysisException {
+186 final File f = new File(dependency.getActualFilePath());
+187 final File tmpDir = getNextTempDirectory();
+188 extractFiles(f, tmpDir, engine);
+189
+190
+191 final List<Dependency> dependencies = new ArrayList<Dependency>(engine.getDependencies());
+192 engine.scan(tmpDir);
+193 final List<Dependency> newDependencies = engine.getDependencies();
+194 if (dependencies.size() != newDependencies.size()) {
+195
+196 final Set<Dependency> dependencySet = new HashSet<Dependency>();
+197 dependencySet.addAll(newDependencies);
+198 dependencySet.removeAll(dependencies);
+199
+200 for (Dependency d : dependencySet) {
+201
+202 final String displayPath = String.format("%s%s" ,
+203 dependency.getFilePath(),
+204 d.getActualFilePath().substring(tmpDir.getAbsolutePath().length()));
+205 final String displayName = String.format("%s%s%s" ,
+206 dependency.getFileName(),
+207 File.separator,
+208 d.getFileName());
+209 d.setFilePath(displayPath);
+210 d.setFileName(displayName);
+211
+212
+213
+214
+215 if (this .supportsExtension(d.getFileExtension()) && scanDepth < MAX_SCAN_DEPTH) {
+216 scanDepth += 1;
+217 analyze(d, engine);
+218 scanDepth -= 1;
+219 }
+220 }
+221 }
+222 Collections.sort(engine.getDependencies());
+223 }
+224
+225
+226
+227
+228
+229
+230
+231 private File getNextTempDirectory() throws AnalysisException {
+232 dirCount += 1;
+233 final File directory = new File(tempFileLocation, String.valueOf(dirCount));
+234 if (!directory.mkdirs()) {
+235 throw new AnalysisException ("Unable to create temp directory '" + directory.getAbsolutePath() + "'." );
+236 }
+237 return directory;
+238 }
+239
+240
+241
+242
+243
+244
+245
+246
+247
+248 private void extractFiles(File archive, File extractTo, Engine engine) throws AnalysisException {
+249 if (archive == null || extractTo == null ) {
+250 return ;
+251 }
+252
+253 FileInputStream fis = null ;
+254
+255 ZipArchiveInputStream zis = null ;
+256
+257 try {
+258 fis = new FileInputStream(archive);
+259 } catch (FileNotFoundException ex) {
+260 Logger.getLogger(ArchiveAnalyzer.class .getName()).log(Level.INFO, null , ex);
+261 throw new AnalysisException ("Archive file was not found." , ex);
+262 }
+263 zis = new ZipArchiveInputStream(new BufferedInputStream(fis));
+264 ZipArchiveEntry entry;
+265
+266 try {
+267 while ((entry = zis.getNextZipEntry()) != null ) {
+268 if (entry.isDirectory()) {
+269 final File d = new File(extractTo, entry.getName());
+270 if (!d.mkdirs()) {
+271 throw new AnalysisException ("Unable to create '" + d.getAbsolutePath() + "'." );
+272 }
+273 } else {
+274 final File file = new File(extractTo, entry.getName());
+275 final String ext = org.owasp.dependencycheck.utils.FileUtils.getFileExtension(file.getName());
+276 if (engine.supportsExtension(ext)) {
+277 BufferedOutputStream bos = null ;
+278 FileOutputStream fos;
+279 try {
+280 fos = new FileOutputStream(file);
+281 bos = new BufferedOutputStream(fos, BUFFER_SIZE);
+282 int count;
+283 final byte data[] = new byte[BUFFER_SIZE];
+284 while ((count = zis.read(data, 0, BUFFER_SIZE)) != -1) {
+285 bos.write(data, 0, count);
+286 }
+287 bos.flush();
+288 } catch (FileNotFoundException ex) {
289 Logger.getLogger(ArchiveAnalyzer.class .getName()).log(Level.FINE, null , ex);
-290 throw new AnalysisException ("IO Exception while parsing file '" + file.getName() + "'." , ex);
-291 } finally {
-292 if (bos != null ) {
-293 try {
-294 bos.close();
-295 } catch (IOException ex) {
-296 Logger.getLogger(ArchiveAnalyzer.class .getName()).log(Level.FINEST, null , ex);
-297 }
-298 }
-299 }
-300 }
-301 }
-302 }
-303 } catch (IOException ex) {
-304 final String msg = String.format("Exception reading archive '%s'." , archive.getName());
-305 Logger.getLogger(ArchiveAnalyzer.class .getName()).log(Level.WARNING, msg);
-306 Logger.getLogger(ArchiveAnalyzer.class .getName()).log(Level.FINE, null , ex);
-307 throw new AnalysisException (msg, ex);
-308 } catch (Throwable ex) {
-309 final String msg = String.format("Exception reading archive '%s'." , archive.getName());
-310 Logger.getLogger(ArchiveAnalyzer.class .getName()).log(Level.WARNING, msg);
-311 Logger.getLogger(ArchiveAnalyzer.class .getName()).log(Level.WARNING, null , ex);
-312 throw new AnalysisException (msg, ex);
-313 } finally {
-314 try {
-315 zis.close();
-316 } catch (IOException ex) {
-317 Logger.getLogger(ArchiveAnalyzer.class .getName()).log(Level.FINEST, null , ex);
-318 }
-319 }
-320 }
-321 }
+290 throw new AnalysisException ("Unable to find file '" + file.getName() + "'." , ex);
+291 } catch (IOException ex) {
+292 Logger.getLogger(ArchiveAnalyzer.class .getName()).log(Level.FINE, null , ex);
+293 throw new AnalysisException ("IO Exception while parsing file '" + file.getName() + "'." , ex);
+294 } finally {
+295 if (bos != null ) {
+296 try {
+297 bos.close();
+298 } catch (IOException ex) {
+299 Logger.getLogger(ArchiveAnalyzer.class .getName()).log(Level.FINEST, null , ex);
+300 }
+301 }
+302 }
+303 }
+304 }
+305 }
+306 } catch (IOException ex) {
+307 final String msg = String.format("Exception reading archive '%s'." , archive.getName());
+308 Logger.getLogger(ArchiveAnalyzer.class .getName()).log(Level.WARNING, msg);
+309 Logger.getLogger(ArchiveAnalyzer.class .getName()).log(Level.FINE, null , ex);
+310 throw new AnalysisException (msg, ex);
+311 } catch (Throwable ex) {
+312 final String msg = String.format("Exception reading archive '%s'." , archive.getName());
+313 Logger.getLogger(ArchiveAnalyzer.class .getName()).log(Level.WARNING, msg);
+314 Logger.getLogger(ArchiveAnalyzer.class .getName()).log(Level.WARNING, null , ex);
+315 throw new AnalysisException (msg, ex);
+316 } finally {
+317 try {
+318 zis.close();
+319 } catch (IOException ex) {
+320 Logger.getLogger(ArchiveAnalyzer.class .getName()).log(Level.FINEST, null , ex);
+321 }
+322 }
+323 }
+324 }
444
445
446
-447 final String[] words = text.split("[\\s_-]" );
-448 final List<String> list = new ArrayList<String>();
-449 String tempWord = null ;
-450 for (String word : words) {
-451
-452
-453 if (tempWord != null ) {
-454 list.add(tempWord + word);
-455 tempWord = null ;
-456 } else if (word.length() <= 2) {
-457 tempWord = word;
-458 } else {
-459 list.add(word);
-460 }
-461 }
-462 if (tempWord != null && !list.isEmpty()) {
-463 final String tmp = list.get(list.size() - 1) + tempWord;
-464 list.add(tmp);
-465 }
-466 boolean contains = true ;
-467 for (String word : list) {
-468 contains &= ec.containsUsedString(word);
-469 }
-470 return contains;
-471 }
-472
-473
-474
-475
-476
-477
-478
-479
-480
-481
-482 @Override
-483 public void analyze(Dependency dependency, Engine engine) throws AnalysisException {
-484 try {
-485 determineCPE(dependency);
-486 } catch (CorruptIndexException ex) {
-487 throw new AnalysisException ("CPE Index is corrupt." , ex);
-488 } catch (IOException ex) {
-489 throw new AnalysisException ("Failure opening the CPE Index." , ex);
-490 } catch (ParseException ex) {
-491 throw new AnalysisException ("Unable to parse the generated Lucene query for this dependency." , ex);
-492 }
-493 }
-494
-495
-496
-497
-498
-499
-500 @Override
-501 public Set<String> getSupportedExtensions() {
-502 return null ;
-503 }
-504
-505
-506
-507
-508
-509
-510 @Override
-511 public String getName() {
-512 return "CPE Analyzer" ;
-513 }
-514
-515
-516
-517
-518
-519
-520
-521 @Override
-522 public boolean supportsExtension(String extension) {
-523 return true ;
-524 }
-525
-526
-527
-528
-529
-530
-531 @Override
-532 public AnalysisPhase getAnalysisPhase() {
-533 return AnalysisPhase.IDENTIFIER_ANALYSIS;
-534 }
-535
-536
-537
-538
-539
-540
-541 @Override
-542 public void initialize() throws Exception {
-543 this .open();
-544 }
-545
-546
-547
-548
-549
-550
-551
-552
-553
-554
-555
-556
-557
-558 private void determineIdentifiers(Dependency dependency, String vendor, String product) throws UnsupportedEncodingException {
-559 final Set<VulnerableSoftware> cpes = cve.getCPEs(vendor, product);
-560 DependencyVersion bestGuess = new DependencyVersion ("-" );
-561 Confidence bestGuessConf = null ;
-562 final List<IdentifierMatch> collected = new ArrayList<IdentifierMatch>();
-563 for (Confidence conf : Confidence.values()) {
-564 for (Evidence evidence : dependency.getVersionEvidence().iterator(conf)) {
-565 final DependencyVersion evVer = DependencyVersionUtil.parseVersion(evidence.getValue());
-566 if (evVer == null ) {
-567 continue ;
-568 }
-569 for (VulnerableSoftware vs : cpes) {
-570 DependencyVersion dbVer;
-571 if (vs.getRevision() != null && !vs.getRevision().isEmpty()) {
-572 dbVer = DependencyVersionUtil.parseVersion(vs.getVersion() + "." + vs.getRevision());
-573 } else {
-574 dbVer = DependencyVersionUtil.parseVersion(vs.getVersion());
-575 }
-576 if (dbVer == null
-577 || evVer.equals(dbVer)) {
-578 final String url = String.format("http://web.nvd.nist.gov/view/vuln/search?cpe=%s" , URLEncoder.encode(vs.getName(), "UTF-8" ));
-579 final IdentifierMatch match = new IdentifierMatch ("cpe" , vs.getName(), url, IdentifierConfidence.EXACT_MATCH, conf);
-580 collected.add(match);
-581 } else {
-582
-583 if (evVer.getVersionParts().size() <= dbVer.getVersionParts().size()
-584 && evVer.matchesAtLeastThreeLevels(dbVer)) {
-585 if (bestGuessConf == null || bestGuessConf.compareTo(conf) > 0) {
-586 if (bestGuess.getVersionParts().size() < dbVer.getVersionParts().size()) {
-587 bestGuess = dbVer;
-588 bestGuessConf = conf;
-589 }
-590 }
-591 }
-592 }
-593 }
-594 if (bestGuessConf == null || bestGuessConf.compareTo(conf) > 0) {
-595 if (bestGuess.getVersionParts().size() < evVer.getVersionParts().size()) {
-596 bestGuess = evVer;
-597 bestGuessConf = conf;
-598 }
-599 }
-600 }
-601 }
-602 final String cpeName = String.format("cpe:/a:%s:%s:%s" , vendor, product, bestGuess.toString());
-603 final String url = null ;
-604 if (bestGuessConf == null ) {
-605 bestGuessConf = Confidence.LOW;
-606 }
-607 final IdentifierMatch match = new IdentifierMatch ("cpe" , cpeName, url, IdentifierConfidence.BEST_GUESS, bestGuessConf);
-608 collected.add(match);
-609
-610 Collections.sort(collected);
-611 final IdentifierConfidence bestIdentifierQuality = collected.get(0).getConfidence();
-612 final Confidence bestEvidenceQuality = collected.get(0).getEvidenceConfidence();
-613 for (IdentifierMatch m : collected) {
-614 if (bestIdentifierQuality.equals(m.getConfidence())
-615 && bestEvidenceQuality.equals(m.getEvidenceConfidence())) {
-616 dependency.addIdentifier(m.getIdentifier());
-617 }
-618 }
-619 }
-620
-621
-622
-623
-624 private enum IdentifierConfidence {
-625
-626
-627
-628
-629 EXACT_MATCH,
-630
-631
-632
-633 BEST_GUESS
-634 }
-635
-636
-637
-638
-639
-640 private static class IdentifierMatch implements Comparable<IdentifierMatch> {
-641
-642
-643
-644
-645
-646
-647
-648
-649
-650
-651
-652
-653 IdentifierMatch (String type, String value, String url, IdentifierConfidence identifierConfidence, Confidence evidenceConfidence) {
-654 this .identifier = new Identifier (type, value, url);
-655 this .confidence = identifierConfidence;
-656 this .evidenceConfidence = evidenceConfidence;
-657 }
-658
-659
-660
-661
-662 private Confidence evidenceConfidence;
-663
-664
-665
-666
-667
-668
-669 public Confidence getEvidenceConfidence() {
-670 return evidenceConfidence;
-671 }
-672
-673
-674
-675
-676
-677
-678 public void setEvidenceConfidence(Confidence evidenceConfidence) {
-679 this .evidenceConfidence = evidenceConfidence;
-680 }
-681
-682
-683
-684 private IdentifierConfidence confidence;
-685
-686
-687
-688
-689
-690
-691 public IdentifierConfidence getConfidence() {
-692 return confidence;
-693 }
-694
-695
-696
-697
-698
-699
-700 public void setConfidence(IdentifierConfidence confidence) {
-701 this .confidence = confidence;
-702 }
-703
-704
-705
-706 private Identifier identifier;
-707
-708
-709
-710
-711
-712
-713 public Identifier getIdentifier() {
-714 return identifier;
-715 }
-716
-717
-718
-719
-720
-721
-722 public void setIdentifier(Identifier identifier) {
-723 this .identifier = identifier;
-724 }
-725
-726
-727
-728
-729
-730
-731
-732
-733 @Override
-734 public String toString() {
-735 return "IdentifierMatch{" + "evidenceConfidence=" + evidenceConfidence
-736 + ", confidence=" + confidence + ", identifier=" + identifier + '}';
-737 }
-738
-739
-740
-741
-742
-743
-744 @Override
-745 public int hashCode() {
-746 int hash = 5;
-747 hash = 97 * hash + (this .evidenceConfidence != null ? this .evidenceConfidence.hashCode() : 0);
-748 hash = 97 * hash + (this .confidence != null ? this .confidence.hashCode() : 0);
-749 hash = 97 * hash + (this .identifier != null ? this .identifier.hashCode() : 0);
-750 return hash;
-751 }
-752
-753
-754
-755
-756
-757
-758
-759 @Override
-760 public boolean equals(Object obj) {
-761 if (obj == null ) {
-762 return false;
-763 }
-764 if (getClass() != obj.getClass()) {
+447 if (text == null ) {
+448 return false;
+449 }
+450 final String[] words = text.split("[\\s_-]" );
+451 final List<String> list = new ArrayList<String>();
+452 String tempWord = null ;
+453 for (String word : words) {
+454
+455
+456 if (tempWord != null ) {
+457 list.add(tempWord + word);
+458 tempWord = null ;
+459 } else if (word.length() <= 2) {
+460 tempWord = word;
+461 } else {
+462 list.add(word);
+463 }
+464 }
+465 if (tempWord != null && !list.isEmpty()) {
+466 final String tmp = list.get(list.size() - 1) + tempWord;
+467 list.add(tmp);
+468 }
+469 boolean contains = true ;
+470 for (String word : list) {
+471 contains &= ec.containsUsedString(word);
+472 }
+473 return contains;
+474 }
+475
+476
+477
+478
+479
+480
+481
+482
+483
+484
+485 @Override
+486 public void analyze(Dependency dependency, Engine engine) throws AnalysisException {
+487 try {
+488 determineCPE(dependency);
+489 } catch (CorruptIndexException ex) {
+490 throw new AnalysisException ("CPE Index is corrupt." , ex);
+491 } catch (IOException ex) {
+492 throw new AnalysisException ("Failure opening the CPE Index." , ex);
+493 } catch (ParseException ex) {
+494 throw new AnalysisException ("Unable to parse the generated Lucene query for this dependency." , ex);
+495 }
+496 }
+497
+498
+499
+500
+501
+502
+503 @Override
+504 public Set<String> getSupportedExtensions() {
+505 return null ;
+506 }
+507
+508
+509
+510
+511
+512
+513 @Override
+514 public String getName() {
+515 return "CPE Analyzer" ;
+516 }
+517
+518
+519
+520
+521
+522
+523
+524 @Override
+525 public boolean supportsExtension(String extension) {
+526 return true ;
+527 }
+528
+529
+530
+531
+532
+533
+534 @Override
+535 public AnalysisPhase getAnalysisPhase() {
+536 return AnalysisPhase.IDENTIFIER_ANALYSIS;
+537 }
+538
+539
+540
+541
+542
+543
+544 @Override
+545 public void initialize() throws Exception {
+546 this .open();
+547 }
+548
+549
+550
+551
+552
+553
+554
+555
+556
+557
+558
+559
+560
+561 private void determineIdentifiers(Dependency dependency, String vendor, String product) throws UnsupportedEncodingException {
+562 final Set<VulnerableSoftware> cpes = cve.getCPEs(vendor, product);
+563 DependencyVersion bestGuess = new DependencyVersion ("-" );
+564 Confidence bestGuessConf = null ;
+565 final List<IdentifierMatch> collected = new ArrayList<IdentifierMatch>();
+566 for (Confidence conf : Confidence.values()) {
+567 for (Evidence evidence : dependency.getVersionEvidence().iterator(conf)) {
+568 final DependencyVersion evVer = DependencyVersionUtil.parseVersion(evidence.getValue());
+569 if (evVer == null ) {
+570 continue ;
+571 }
+572 for (VulnerableSoftware vs : cpes) {
+573 DependencyVersion dbVer;
+574 if (vs.getRevision() != null && !vs.getRevision().isEmpty()) {
+575 dbVer = DependencyVersionUtil.parseVersion(vs.getVersion() + "." + vs.getRevision());
+576 } else {
+577 dbVer = DependencyVersionUtil.parseVersion(vs.getVersion());
+578 }
+579 if (dbVer == null
+580 || evVer.equals(dbVer)) {
+581 final String url = String.format("http://web.nvd.nist.gov/view/vuln/search?cpe=%s" , URLEncoder.encode(vs.getName(), "UTF-8" ));
+582 final IdentifierMatch match = new IdentifierMatch ("cpe" , vs.getName(), url, IdentifierConfidence.EXACT_MATCH, conf);
+583 collected.add(match);
+584 } else {
+585
+586 if (evVer.getVersionParts().size() <= dbVer.getVersionParts().size()
+587 && evVer.matchesAtLeastThreeLevels(dbVer)) {
+588 if (bestGuessConf == null || bestGuessConf.compareTo(conf) > 0) {
+589 if (bestGuess.getVersionParts().size() < dbVer.getVersionParts().size()) {
+590 bestGuess = dbVer;
+591 bestGuessConf = conf;
+592 }
+593 }
+594 }
+595 }
+596 }
+597 if (bestGuessConf == null || bestGuessConf.compareTo(conf) > 0) {
+598 if (bestGuess.getVersionParts().size() < evVer.getVersionParts().size()) {
+599 bestGuess = evVer;
+600 bestGuessConf = conf;
+601 }
+602 }
+603 }
+604 }
+605 final String cpeName = String.format("cpe:/a:%s:%s:%s" , vendor, product, bestGuess.toString());
+606 final String url = null ;
+607 if (bestGuessConf == null ) {
+608 bestGuessConf = Confidence.LOW;
+609 }
+610 final IdentifierMatch match = new IdentifierMatch ("cpe" , cpeName, url, IdentifierConfidence.BEST_GUESS, bestGuessConf);
+611 collected.add(match);
+612
+613 Collections.sort(collected);
+614 final IdentifierConfidence bestIdentifierQuality = collected.get(0).getConfidence();
+615 final Confidence bestEvidenceQuality = collected.get(0).getEvidenceConfidence();
+616 for (IdentifierMatch m : collected) {
+617 if (bestIdentifierQuality.equals(m.getConfidence())
+618 && bestEvidenceQuality.equals(m.getEvidenceConfidence())) {
+619 dependency.addIdentifier(m.getIdentifier());
+620 }
+621 }
+622 }
+623
+624
+625
+626
+627 private enum IdentifierConfidence {
+628
+629
+630
+631
+632 EXACT_MATCH,
+633
+634
+635
+636 BEST_GUESS
+637 }
+638
+639
+640
+641
+642
+643 private static class IdentifierMatch implements Comparable<IdentifierMatch> {
+644
+645
+646
+647
+648
+649
+650
+651
+652
+653
+654
+655
+656 IdentifierMatch (String type, String value, String url, IdentifierConfidence identifierConfidence, Confidence evidenceConfidence) {
+657 this .identifier = new Identifier (type, value, url);
+658 this .confidence = identifierConfidence;
+659 this .evidenceConfidence = evidenceConfidence;
+660 }
+661
+662
+663
+664
+665 private Confidence evidenceConfidence;
+666
+667
+668
+669
+670
+671
+672 public Confidence getEvidenceConfidence() {
+673 return evidenceConfidence;
+674 }
+675
+676
+677
+678
+679
+680
+681 public void setEvidenceConfidence(Confidence evidenceConfidence) {
+682 this .evidenceConfidence = evidenceConfidence;
+683 }
+684
+685
+686
+687 private IdentifierConfidence confidence;
+688
+689
+690
+691
+692
+693
+694 public IdentifierConfidence getConfidence() {
+695 return confidence;
+696 }
+697
+698
+699
+700
+701
+702
+703 public void setConfidence(IdentifierConfidence confidence) {
+704 this .confidence = confidence;
+705 }
+706
+707
+708
+709 private Identifier identifier;
+710
+711
+712
+713
+714
+715
+716 public Identifier getIdentifier() {
+717 return identifier;
+718 }
+719
+720
+721
+722
+723
+724
+725 public void setIdentifier(Identifier identifier) {
+726 this .identifier = identifier;
+727 }
+728
+729
+730
+731
+732
+733
+734
+735
+736 @Override
+737 public String toString() {
+738 return "IdentifierMatch{" + "evidenceConfidence=" + evidenceConfidence
+739 + ", confidence=" + confidence + ", identifier=" + identifier + '}';
+740 }
+741
+742
+743
+744
+745
+746
+747 @Override
+748 public int hashCode() {
+749 int hash = 5;
+750 hash = 97 * hash + (this .evidenceConfidence != null ? this .evidenceConfidence.hashCode() : 0);
+751 hash = 97 * hash + (this .confidence != null ? this .confidence.hashCode() : 0);
+752 hash = 97 * hash + (this .identifier != null ? this .identifier.hashCode() : 0);
+753 return hash;
+754 }
+755
+756
+757
+758
+759
+760
+761
+762 @Override
+763 public boolean equals(Object obj) {
+764 if (obj == null ) {
765 return false;
766 }
-767 final IdentifierMatch other = (IdentifierMatch) obj;
-768 if (this .evidenceConfidence != other.evidenceConfidence) {
-769 return false;
-770 }
-771 if (this .confidence != other.confidence) {
+767 if (getClass() != obj.getClass()) {
+768 return false;
+769 }
+770 final IdentifierMatch other = (IdentifierMatch) obj;
+771 if (this .evidenceConfidence != other.evidenceConfidence) {
772 return false;
773 }
-774 if (this .identifier != other.identifier && (this .identifier == null || !this .identifier.equals(other.identifier))) {
+774 if (this .confidence != other.confidence) {
775 return false;
776 }
-777 return true ;
-778 }
-779
-780
-781
-782
-783
-784
-785
-786
-787
-788 @Override
-789 public int compareTo(IdentifierMatch o) {
-790 int conf = this .confidence.compareTo(o.confidence);
-791 if (conf == 0) {
-792 conf = this .evidenceConfidence.compareTo(o.evidenceConfidence);
-793 if (conf == 0) {
-794 conf = identifier.compareTo(o.identifier);
-795 }
-796 }
-797 return conf;
-798 }
-799 }
-800 }
+777 if (this .identifier != other.identifier && (this .identifier == null || !this .identifier.equals(other.identifier))) {
+778 return false;
+779 }
+780 return true ;
+781 }
+782
+783
+784
+785
+786
+787
+788
+789
+790
+791 @Override
+792 public int compareTo(IdentifierMatch o) {
+793 int conf = this .confidence.compareTo(o.confidence);
+794 if (conf == 0) {
+795 conf = this .evidenceConfidence.compareTo(o.evidenceConfidence);
+796 if (conf == 0) {
+797 conf = identifier.compareTo(o.identifier);
+798 }
+799 }
+800 return conf;
+801 }
+802 }
+803 }
Dependency-Check Core 1.0.3 Reference Package org.owasp.dependencycheck.analyzer
+ Dependency-Check Core 1.0.4 Reference Package org.owasp.dependencycheck.analyzer
Dependency-Check Core 1.0.3 Reference Package org.owasp.dependencycheck.analyzer
+ Dependency-Check Core 1.0.4 Reference Package org.owasp.dependencycheck.analyzer
Dependency-Check Core 1.0.3 Reference Package org.owasp.dependencycheck.concurrency
+ Dependency-Check Core 1.0.4 Reference Package org.owasp.dependencycheck.concurrency
Dependency-Check Core 1.0.3 Reference Package org.owasp.dependencycheck.concurrency
+ Dependency-Check Core 1.0.4 Reference Package org.owasp.dependencycheck.concurrency
Dependency-Check Core 1.0.3 Reference Package org.owasp.dependencycheck.data.cpe
+ Dependency-Check Core 1.0.4 Reference Package org.owasp.dependencycheck.data.cpe
Dependency-Check Core 1.0.3 Reference Package org.owasp.dependencycheck.data.cpe
+ Dependency-Check Core 1.0.4 Reference Package org.owasp.dependencycheck.data.cpe
Dependency-Check Core 1.0.3 Reference Package org.owasp.dependencycheck.data.cwe
+ Dependency-Check Core 1.0.4 Reference Package org.owasp.dependencycheck.data.cwe
Dependency-Check Core 1.0.3 Reference Package org.owasp.dependencycheck.data.cwe
+ Dependency-Check Core 1.0.4 Reference Package org.owasp.dependencycheck.data.cwe
Dependency-Check Core 1.0.3 Reference Package org.owasp.dependencycheck.data.lucene
+ Dependency-Check Core 1.0.4 Reference Package org.owasp.dependencycheck.data.lucene
Dependency-Check Core 1.0.3 Reference Package org.owasp.dependencycheck.data.lucene
+ Dependency-Check Core 1.0.4 Reference Package org.owasp.dependencycheck.data.lucene
Dependency-Check Core 1.0.3 Reference Package org.owasp.dependencycheck.data.nvdcve
+ Dependency-Check Core 1.0.4 Reference Package org.owasp.dependencycheck.data.nvdcve
Dependency-Check Core 1.0.3 Reference Package org.owasp.dependencycheck.data.nvdcve
+ Dependency-Check Core 1.0.4 Reference Package org.owasp.dependencycheck.data.nvdcve
Dependency-Check Core 1.0.3 Reference Package org.owasp.dependencycheck.data
+ Dependency-Check Core 1.0.4 Reference Package org.owasp.dependencycheck.data
Dependency-Check Core 1.0.3 Reference Package org.owasp.dependencycheck.data
+ Dependency-Check Core 1.0.4 Reference Package org.owasp.dependencycheck.data
Dependency-Check Core 1.0.3 Reference Package org.owasp.dependencycheck.data.update
+ Dependency-Check Core 1.0.4 Reference Package org.owasp.dependencycheck.data.update
Dependency-Check Core 1.0.3 Reference Package org.owasp.dependencycheck.data.update
+ Dependency-Check Core 1.0.4 Reference Package org.owasp.dependencycheck.data.update
Dependency-Check Core 1.0.3 Reference Package org.owasp.dependencycheck.dependency
+ Dependency-Check Core 1.0.4 Reference Package org.owasp.dependencycheck.dependency
Dependency-Check Core 1.0.3 Reference Package org.owasp.dependencycheck.dependency
+ Dependency-Check Core 1.0.4 Reference Package org.owasp.dependencycheck.dependency
Dependency-Check Core 1.0.3 Reference Package org.owasp.dependencycheck.jaxb.pom.generated
+ Dependency-Check Core 1.0.4 Reference Package org.owasp.dependencycheck.jaxb.pom.generated
Dependency-Check Core 1.0.3 Reference Package org.owasp.dependencycheck.jaxb.pom.generated
+ Dependency-Check Core 1.0.4 Reference Package org.owasp.dependencycheck.jaxb.pom.generated
Dependency-Check Core 1.0.3 Reference Package org.owasp.dependencycheck.jaxb.pom
+ Dependency-Check Core 1.0.4 Reference Package org.owasp.dependencycheck.jaxb.pom
Dependency-Check Core 1.0.3 Reference Package org.owasp.dependencycheck.jaxb.pom
+ Dependency-Check Core 1.0.4 Reference Package org.owasp.dependencycheck.jaxb.pom
Dependency-Check Core 1.0.3 Reference Package org.owasp.dependencycheck
+ Dependency-Check Core 1.0.4 Reference Package org.owasp.dependencycheck
Dependency-Check Core 1.0.3 Reference Package org.owasp.dependencycheck
+ Dependency-Check Core 1.0.4 Reference Package org.owasp.dependencycheck
Dependency-Check Core 1.0.3 Reference Package org.owasp.dependencycheck.reporting
+ Dependency-Check Core 1.0.4 Reference Package org.owasp.dependencycheck.reporting
Dependency-Check Core 1.0.3 Reference Package org.owasp.dependencycheck.reporting
+ Dependency-Check Core 1.0.4 Reference Package org.owasp.dependencycheck.reporting
LogFilter xref
+
+
+1
+2
+3
+4
+5
+6
+7
+8
+9
+10
+11
+12
+13
+14
+15
+16
+17
+18
+19 package org.owasp.dependencycheck.utils;
+20
+21 import java.util.logging.Filter;
+22 import java.util.logging.LogRecord;
+23
+24
+25
+26
+27
+28
+29
+30
+31 public class LogFilter implements Filter {
+32
+33
+34
+35
+36
+37
+38
+39 @Override
+40 public boolean isLoggable(LogRecord record) {
+41 final String name = record.getSourceClassName();
+42 return name.startsWith("org.owasp.dependencycheck" ) && !name.contains("generated" ) && !name.contains("VelocityLoggerRedirect" );
+43 }
+44 }
+
+LogUtils xref
+
+
+1
+2
+3
+4
+5
+6
+7
+8
+9
+10
+11
+12
+13
+14
+15
+16
+17
+18
+19 package org.owasp.dependencycheck.utils;
+20
+21 import java.io.IOException;
+22 import java.io.InputStream;
+23 import java.util.logging.FileHandler;
+24 import java.util.logging.Level;
+25 import java.util.logging.LogManager;
+26 import java.util.logging.Logger;
+27 import java.util.logging.SimpleFormatter;
+28
+29
+30
+31
+32
+33
+34 public final class LogUtils {
+35
+36
+37
+38
+39 private LogUtils () {
+40 }
+41
+42
+43
+44
+45
+46
+47
+48 public static void prepareLogger(InputStream in, String verboseLogFile) {
+49 try {
+50 LogManager.getLogManager().reset();
+51 LogManager.getLogManager().readConfiguration(in);
+52 if (verboseLogFile != null && !verboseLogFile.isEmpty()) {
+53 final Logger logger = Logger.getLogger("" );
+54 final FileHandler handler = new FileHandler(verboseLogFile, true );
+55 handler.setFormatter(new SimpleFormatter());
+56 handler.setLevel(Level.FINE);
+57 handler.setFilter(new LogFilter ());
+58 logger.addHandler(handler);
+59 logger.setLevel(Level.FINE);
+60 }
+61 } catch (IOException ex) {
+62 Logger.getLogger(LogUtils.class .getName()).log(Level.FINE, "IO Error preparing the logger" , ex);
+63 } catch (SecurityException ex) {
+64 Logger.getLogger(LogUtils.class .getName()).log(Level.FINE, "Error preparing the logger" , ex);
+65 } finally {
+66 if (in != null ) {
+67 try {
+68 in.close();
+69 } catch (Exception ex) {
+70 Logger.getLogger(LogUtils.class .getName()).log(Level.FINEST, "Error closing resource stream" , ex);
+71 }
+72 }
+73 }
+74 }
+75 }
+
+207
208
209
-210 public static void mergeProperties(String filePath) throws FileNotFoundException, IOException {
+210 public static void mergeProperties(File filePath) throws FileNotFoundException, IOException {
211 final FileInputStream fis = new FileInputStream(filePath);
212 mergeProperties(fis);
213 }
@@ -228,203 +228,220 @@
218
219
220
-221
-222
-223
-224
-225 public static void mergeProperties(InputStream stream) throws IOException {
-226 INSTANCE.props.load(stream);
-227 }
-228
-229
-230
-231
-232
-233
-234
-235
-236
+221
+222
+223
+224
+225
+226
+227 public static void mergeProperties(String filePath) throws FileNotFoundException, IOException {
+228 final FileInputStream fis = new FileInputStream(filePath);
+229 mergeProperties(fis);
+230 }
+231
+232
+233
+234
+235
+236
237
-238
-239
-240
-241 public static File getFile(String key) {
-242 final String file = getString(key);
-243 final String baseDir = getString(Settings.KEYS.DATA_DIRECTORY);
-244 if (baseDir != null ) {
-245 if (baseDir.startsWith("[JAR]/" )) {
-246 final File jarPath = getJarPath();
-247 final File newBase = new File(jarPath, baseDir.substring(6));
-248 if (Settings.KEYS.DATA_DIRECTORY.equals(key)) {
-249 return newBase;
-250 }
-251 return new File(newBase, file);
-252 }
-253 if (Settings.KEYS.DATA_DIRECTORY.equals(key)) {
-254 return new File(baseDir);
-255 }
-256 return new File(baseDir, file);
-257 }
-258 return new File(file);
-259 }
-260
-261
-262
-263
-264
-265
-266
-267 private static File getJarPath() {
-268 final String jarPath = Settings.class .getProtectionDomain().getCodeSource().getLocation().getPath();
-269 String decodedPath = "." ;
-270 try {
-271 decodedPath = URLDecoder.decode(jarPath, "UTF-8" );
-272 } catch (UnsupportedEncodingException ex) {
-273 Logger.getLogger(Settings.class .getName()).log(Level.FINEST, null , ex);
+238
+239
+240
+241
+242 public static void mergeProperties(InputStream stream) throws IOException {
+243 INSTANCE.props.load(stream);
+244 }
+245
+246
+247
+248
+249
+250
+251
+252
+253
+254
+255
+256
+257
+258 public static File getFile(String key) {
+259 final String file = getString(key);
+260 final String baseDir = getString(Settings.KEYS.DATA_DIRECTORY);
+261 if (baseDir != null ) {
+262 if (baseDir.startsWith("[JAR]/" )) {
+263 final File jarPath = getJarPath();
+264 final File newBase = new File(jarPath, baseDir.substring(6));
+265 if (Settings.KEYS.DATA_DIRECTORY.equals(key)) {
+266 return newBase;
+267 }
+268 return new File(newBase, file);
+269 }
+270 if (Settings.KEYS.DATA_DIRECTORY.equals(key)) {
+271 return new File(baseDir);
+272 }
+273 return new File(baseDir, file);
274 }
-275
-276 final File path = new File(decodedPath);
-277 if (path.getName().toLowerCase().endsWith(".jar" )) {
-278 return path.getParentFile();
-279 } else {
-280 return new File("." );
-281 }
-282 }
-283
-284
-285
-286
-287
-288
-289
-290
-291
-292
-293
-294 public static String getString(String key, String defaultValue) {
-295 final String str = System.getProperty(key, INSTANCE.props.getProperty(key, defaultValue));
-296 return str;
-297 }
-298
-299
-300
-301
-302
-303
-304 public static File getTempDirectory() {
-305 return new File(Settings.getString(Settings.KEYS.TEMP_DIRECTORY, System.getProperty("java.io.tmpdir" )));
-306 }
-307
-308
-309
-310
-311
-312
-313
-314
-315
-316
-317 public static String getString(String key) {
-318 return System.getProperty(key, INSTANCE.props.getProperty(key));
-319 }
-320
-321
-322
-323
-324
-325
-326
-327 public static void removeProperty(String key) {
-328 INSTANCE.props.remove(key);
-329 }
-330
-331
-332
-333
-334
-335
-336
-337
-338
-339
-340
-341
-342 public static int getInt(String key) throws InvalidSettingException {
-343 int value;
-344 try {
-345 value = Integer.parseInt(Settings.getString(key));
-346 } catch (NumberFormatException ex) {
-347 throw new InvalidSettingException ("Could not convert property '" + key + "' to an int." , ex);
-348 }
-349 return value;
-350 }
-351
-352
-353
-354
-355
-356
-357
-358
-359
-360
-361
-362
-363 public static int getInt(String key, int defaultValue) {
-364 int value;
-365 try {
-366 value = Integer.parseInt(Settings.getString(key));
-367 } catch (NumberFormatException ex) {
-368 final String msg = String.format("Could not convert property '%s' to an int." , key);
-369 Logger.getLogger(Settings.class .getName()).log(Level.FINEST, msg, ex);
-370 value = defaultValue;
-371 }
-372 return value;
-373 }
-374
-375
-376
-377
-378
-379
-380
-381
-382
-383
-384
-385
-386 public static long getLong(String key) throws InvalidSettingException {
-387 long value;
-388 try {
-389 value = Long.parseLong(Settings.getString(key));
-390 } catch (NumberFormatException ex) {
-391 throw new InvalidSettingException ("Could not convert property '" + key + "' to an int." , ex);
-392 }
-393 return value;
-394 }
-395
-396
-397
-398
-399
-400
-401
-402
-403
-404
-405
-406
-407
-408 public static boolean getBoolean(String key) throws InvalidSettingException {
-409 boolean value;
-410 try {
-411 value = Boolean.parseBoolean(Settings.getString(key));
-412 } catch (NumberFormatException ex) {
-413 throw new InvalidSettingException ("Could not convert property '" + key + "' to an int." , ex);
-414 }
-415 return value;
-416 }
-417 }
+275 return new File(file);
+276 }
+277
+278
+279
+280
+281
+282
+283
+284 private static File getJarPath() {
+285 final String jarPath = Settings.class .getProtectionDomain().getCodeSource().getLocation().getPath();
+286 String decodedPath = "." ;
+287 try {
+288 decodedPath = URLDecoder.decode(jarPath, "UTF-8" );
+289 } catch (UnsupportedEncodingException ex) {
+290 Logger.getLogger(Settings.class .getName()).log(Level.FINEST, null , ex);
+291 }
+292
+293 final File path = new File(decodedPath);
+294 if (path.getName().toLowerCase().endsWith(".jar" )) {
+295 return path.getParentFile();
+296 } else {
+297 return new File("." );
+298 }
+299 }
+300
+301
+302
+303
+304
+305
+306
+307
+308
+309
+310
+311 public static String getString(String key, String defaultValue) {
+312 final String str = System.getProperty(key, INSTANCE.props.getProperty(key, defaultValue));
+313 return str;
+314 }
+315
+316
+317
+318
+319
+320
+321 public static File getTempDirectory() {
+322 return new File(Settings.getString(Settings.KEYS.TEMP_DIRECTORY, System.getProperty("java.io.tmpdir" )));
+323 }
+324
+325
+326
+327
+328
+329
+330
+331
+332
+333
+334 public static String getString(String key) {
+335 return System.getProperty(key, INSTANCE.props.getProperty(key));
+336 }
+337
+338
+339
+340
+341
+342
+343
+344 public static void removeProperty(String key) {
+345 INSTANCE.props.remove(key);
+346 }
+347
+348
+349
+350
+351
+352
+353
+354
+355
+356
+357
+358
+359 public static int getInt(String key) throws InvalidSettingException {
+360 int value;
+361 try {
+362 value = Integer.parseInt(Settings.getString(key));
+363 } catch (NumberFormatException ex) {
+364 throw new InvalidSettingException ("Could not convert property '" + key + "' to an int." , ex);
+365 }
+366 return value;
+367 }
+368
+369
+370
+371
+372
+373
+374
+375
+376
+377
+378
+379
+380 public static int getInt(String key, int defaultValue) {
+381 int value;
+382 try {
+383 value = Integer.parseInt(Settings.getString(key));
+384 } catch (NumberFormatException ex) {
+385 final String msg = String.format("Could not convert property '%s' to an int." , key);
+386 Logger.getLogger(Settings.class .getName()).log(Level.FINEST, msg, ex);
+387 value = defaultValue;
+388 }
+389 return value;
+390 }
+391
+392
+393
+394
+395
+396
+397
+398
+399
+400
+401
+402
+403 public static long getLong(String key) throws InvalidSettingException {
+404 long value;
+405 try {
+406 value = Long.parseLong(Settings.getString(key));
+407 } catch (NumberFormatException ex) {
+408 throw new InvalidSettingException ("Could not convert property '" + key + "' to an int." , ex);
+409 }
+410 return value;
+411 }
+412
+413
+414
+415
+416
+417
+418
+419
+420
+421
+422
+423
+424
+425 public static boolean getBoolean(String key) throws InvalidSettingException {
+426 boolean value;
+427 try {
+428 value = Boolean.parseBoolean(Settings.getString(key));
+429 } catch (NumberFormatException ex) {
+430 throw new InvalidSettingException ("Could not convert property '" + key + "' to an int." , ex);
+431 }
+432 return value;
+433 }
+434 }
Dependency-Check Core 1.0.3 Reference Package org.owasp.dependencycheck.utils
+ Dependency-Check Core 1.0.4 Reference Package org.owasp.dependencycheck.utils
KEYS
+
+
+ LogFilter
+
+
+ LogUtils
NonClosingStream
diff --git a/dependency-check-core/xref/org/owasp/dependencycheck/utils/package-summary.html b/dependency-check-core/xref/org/owasp/dependencycheck/utils/package-summary.html
index a015f971a..8642d9d19 100644
--- a/dependency-check-core/xref/org/owasp/dependencycheck/utils/package-summary.html
+++ b/dependency-check-core/xref/org/owasp/dependencycheck/utils/package-summary.html
@@ -3,7 +3,7 @@
Dependency-Check Core 1.0.3 Reference Package org.owasp.dependencycheck.utils
+ Dependency-Check Core 1.0.4 Reference Package org.owasp.dependencycheck.utils
KEYS
+
+
+
+ LogFilter
+
+
+
+
+ LogUtils
+
diff --git a/dependency-check-core/xref/overview-frame.html b/dependency-check-core/xref/overview-frame.html
index 6917c976b..82d091fcb 100644
--- a/dependency-check-core/xref/overview-frame.html
+++ b/dependency-check-core/xref/overview-frame.html
@@ -3,7 +3,7 @@
Dependency-Check Core 1.0.3 Reference
+ Dependency-Check Core 1.0.4 Reference
Dependency-Check Core 1.0.3 Reference
+ Dependency-Check Core 1.0.4 Reference
Dependency-Check Core 1.0.3 Reference
+ Dependency-Check Core 1.0.4 Reference
diff --git a/dependency-check-jenkins/index.html b/dependency-check-jenkins/index.html
index 7c4db4a29..ee9aa5ae4 100644
--- a/dependency-check-jenkins/index.html
+++ b/dependency-check-jenkins/index.html
@@ -1,13 +1,13 @@
dependency-check-jenkins -
-
+
/
@@ -67,8 +67,8 @@
- Last Published: 2013-10-13 |
- Version: 1.0.3
+ Last Published: 2013-10-20 |
+ Version: 1.0.4
diff --git a/dependency-check-jenkins/license.html b/dependency-check-jenkins/license.html
index aa619db5d..e312292a9 100644
--- a/dependency-check-jenkins/license.html
+++ b/dependency-check-jenkins/license.html
@@ -1,13 +1,13 @@
dependency-check-jenkins - Project License
-
+
/
@@ -67,8 +67,8 @@
- Last Published: 2013-10-13 |
- Version: 1.0.3
+ Last Published: 2013-10-20 |
+ Version: 1.0.4
@@ -233,13 +233,6 @@
-
-
-
diff --git a/dependency-check-jenkins/project-info.html b/dependency-check-jenkins/project-info.html
index fa23414f7..ab9770612 100644
--- a/dependency-check-jenkins/project-info.html
+++ b/dependency-check-jenkins/project-info.html
@@ -1,13 +1,13 @@
dependency-check-jenkins - Project Information
-
+
/
@@ -67,8 +67,8 @@
- Last Published: 2013-10-13 |
- Version: 1.0.3
+ Last Published: 2013-10-20 |
+ Version: 1.0.4
diff --git a/dependency-check-jenkins/project-summary.html b/dependency-check-jenkins/project-summary.html
index 7ccf26c29..543b06bac 100644
--- a/dependency-check-jenkins/project-summary.html
+++ b/dependency-check-jenkins/project-summary.html
@@ -1,13 +1,13 @@
dependency-check-jenkins - Project Summary
-
+
/
@@ -67,8 +67,8 @@
- Last Published: 2013-10-13 |
- Version: 1.0.3
+ Last Published: 2013-10-20 |
+ Version: 1.0.4
@@ -181,7 +181,7 @@
dependency-check-jenkins
Version
-1.0.3
+1.0.4
Type
jar
diff --git a/dependency-check-maven/apidocs/allclasses-frame.html b/dependency-check-maven/apidocs/allclasses-frame.html
index 46d4c7f91..b31ab521b 100644
--- a/dependency-check-maven/apidocs/allclasses-frame.html
+++ b/dependency-check-maven/apidocs/allclasses-frame.html
@@ -2,13 +2,13 @@
-
+
-All Classes (Dependency-Check Maven Plugin 1.0.3 API)
+All Classes (Dependency-Check Maven Plugin 1.0.4 API)
-
-All Classes (Dependency-Check Maven Plugin 1.0.3 API)
+All Classes (Dependency-Check Maven Plugin 1.0.4 API)
-
-Constant Field Values (Dependency-Check Maven Plugin 1.0.3 API)
+Constant Field Values (Dependency-Check Maven Plugin 1.0.4 API)
-
-Deprecated List (Dependency-Check Maven Plugin 1.0.3 API)
+Deprecated List (Dependency-Check Maven Plugin 1.0.4 API)
-
-API Help (Dependency-Check Maven Plugin 1.0.3 API)
+API Help (Dependency-Check Maven Plugin 1.0.4 API)
-
-Index (Dependency-Check Maven Plugin 1.0.3 API)
+Index (Dependency-Check Maven Plugin 1.0.4 API)
-
-Dependency-Check Maven Plugin 1.0.3 API
+Dependency-Check Maven Plugin 1.0.4 API
diff --git a/dependency-check-maven/apidocs/org/owasp/dependencycheck/maven/HelpMojo.html b/dependency-check-maven/apidocs/org/owasp/dependencycheck/maven/HelpMojo.html
index ef193b8a1..69817c52e 100644
--- a/dependency-check-maven/apidocs/org/owasp/dependencycheck/maven/HelpMojo.html
+++ b/dependency-check-maven/apidocs/org/owasp/dependencycheck/maven/HelpMojo.html
@@ -2,13 +2,13 @@
-
+
-HelpMojo (Dependency-Check Maven Plugin 1.0.3 API)
+HelpMojo (Dependency-Check Maven Plugin 1.0.4 API)
-
-Uses of Class org.owasp.dependencycheck.maven.DependencyCheckMojo (Dependency-Check Maven Plugin 1.0.3 API)
+Uses of Class org.owasp.dependencycheck.maven.DependencyCheckMojo (Dependency-Check Maven Plugin 1.0.4 API)
-
-Uses of Class org.owasp.dependencycheck.maven.HelpMojo (Dependency-Check Maven Plugin 1.0.3 API)
+Uses of Class org.owasp.dependencycheck.maven.HelpMojo (Dependency-Check Maven Plugin 1.0.4 API)
-
-org.owasp.dependencycheck.maven (Dependency-Check Maven Plugin 1.0.3 API)
+org.owasp.dependencycheck.maven (Dependency-Check Maven Plugin 1.0.4 API)
-
-org.owasp.dependencycheck.maven (Dependency-Check Maven Plugin 1.0.3 API)
+org.owasp.dependencycheck.maven (Dependency-Check Maven Plugin 1.0.4 API)
-
-org.owasp.dependencycheck.maven Class Hierarchy (Dependency-Check Maven Plugin 1.0.3 API)
+org.owasp.dependencycheck.maven Class Hierarchy (Dependency-Check Maven Plugin 1.0.4 API)
-
-Uses of Package org.owasp.dependencycheck.maven (Dependency-Check Maven Plugin 1.0.3 API)
+Uses of Package org.owasp.dependencycheck.maven (Dependency-Check Maven Plugin 1.0.4 API)
-
-Class Hierarchy (Dependency-Check Maven Plugin 1.0.3 API)
+Class Hierarchy (Dependency-Check Maven Plugin 1.0.4 API)
-dependency-check-maven -
dependency-check:check
@@ -55,7 +55,7 @@
-
+
/
@@ -69,8 +69,8 @@
- Last Published: 2013-10-13 |
- Version: 1.0.3
+ Last Published: 2013-10-20 |
+ Version: 1.0.4
@@ -150,7 +150,7 @@
Full name :
-org.owasp:dependency-check-maven:1.0.3:check
+org.owasp:dependency-check-maven:1.0.4:check
Description :
@@ -303,6 +303,17 @@ the Maven Generated Reports pageDefault value is : A report prov
+logFile String - The path to the verbose logUser property is : logfile .
+
+
+
+
name String Default value is : A report prov
Reports pageDefault value is : Dependency-Check .User property is : name .
-
+
proxyPort Default value is : Dependency-Check .Us
The Proxy Port.User property is : proxyPort .
-
+
proxyUrl Default value is : Dependency-Check .Us
The Proxy URL.User property is : proxyUrl .
-
+
reportName Default : HTML logFile :
+
+The path to the verbose log
+
+
+
+Type : java.lang.String Required : No User Property : logfile name :
The name of the report to be displayed in the Maven Generated
diff --git a/dependency-check-maven/checkstyle.html b/dependency-check-maven/checkstyle.html
index a0e7e3e5e..df6f86256 100644
--- a/dependency-check-maven/checkstyle.html
+++ b/dependency-check-maven/checkstyle.html
@@ -1,13 +1,13 @@
-
+
dependency-check-maven - Checkstyle Results
@@ -54,7 +54,7 @@
-
+
/
@@ -67,8 +67,8 @@
-
Last Published: 2013-10-13 |
-
Version: 1.0.3
+
Last Published: 2013-10-20 |
+
Version: 1.0.4
'}' is not preceded with whitespace.
-129
+134
'}' is not preceded with whitespace.
-137
+142
'}' is not preceded with whitespace.
-143
+ 148
diff --git a/dependency-check-maven/cobertura/frame-summary-org.owasp.dependencycheck.maven.html b/dependency-check-maven/cobertura/frame-summary-org.owasp.dependencycheck.maven.html
index 7684cb73f..59015728a 100644
--- a/dependency-check-maven/cobertura/frame-summary-org.owasp.dependencycheck.maven.html
+++ b/dependency-check-maven/cobertura/frame-summary-org.owasp.dependencycheck.maven.html
@@ -16,7 +16,7 @@
-
+
diff --git a/dependency-check-maven/cobertura/frame-summary.html b/dependency-check-maven/cobertura/frame-summary.html
index d828c0f24..c70570abb 100644
--- a/dependency-check-maven/cobertura/frame-summary.html
+++ b/dependency-check-maven/cobertura/frame-summary.html
@@ -16,8 +16,8 @@
-
+
diff --git a/dependency-check-maven/cobertura/org.owasp.dependencycheck.maven.DependencyCheckMojo.html b/dependency-check-maven/cobertura/org.owasp.dependencycheck.maven.DependencyCheckMojo.html
index c2720a387..06b762a81 100644
--- a/dependency-check-maven/cobertura/org.owasp.dependencycheck.maven.DependencyCheckMojo.html
+++ b/dependency-check-maven/cobertura/org.owasp.dependencycheck.maven.DependencyCheckMojo.html
@@ -12,7 +12,7 @@
@@ -90,45 +90,45 @@
36
import java.util.Set;
37
- import java.util.logging.LogManager;
- 38
import org.apache.maven.artifact.Artifact;
- 39
+ 38
import org.apache.maven.plugins.annotations.Component;
- 40
+ 39
import org.apache.maven.plugins.annotations.LifecyclePhase;
- 41
+ 40
import org.apache.maven.plugins.annotations.Mojo;
- 42
+ 41
import org.apache.maven.plugins.annotations.Parameter;
- 43
+ 42
import org.apache.maven.plugins.annotations.ResolutionScope;
- 44
+ 43
import org.apache.maven.reporting.MavenMultiPageReport;
- 45
+ 44
import org.apache.maven.reporting.MavenReport;
- 46
+ 45
import org.apache.maven.reporting.MavenReportException;
- 47
+ 46
import org.apache.maven.doxia.sink.Sink;
- 48
+ 47
import org.apache.maven.plugin.MojoFailureException;
- 49
+ 48
import org.owasp.dependencycheck.Engine;
- 50
+ 49
import org.owasp.dependencycheck.dependency.Dependency;
- 51
+ 50
import org.owasp.dependencycheck.dependency.Evidence;
- 52
+ 51
import org.owasp.dependencycheck.dependency.Identifier;
- 53
+ 52
import org.owasp.dependencycheck.dependency.Reference;
- 54
+ 53
import org.owasp.dependencycheck.dependency.Vulnerability;
- 55
+ 54
import org.owasp.dependencycheck.dependency.VulnerableSoftware;
- 56
+ 55
import org.owasp.dependencycheck.reporting.ReportGenerator;
+ 56
+ import org.owasp.dependencycheck.utils.LogUtils;
57
import org.owasp.dependencycheck.utils.Settings;
58
@@ -203,1098 +203,1066 @@
93
94
-
+ 95
-
+ 96
-
+ @Parameter(property = "logfile" , defaultValue = "" ) 97
- @Parameter(property = "name" , defaultValue = "Dependency-Check" )
+ private String logFile; 98
- private String name;
+ 99
-
+ 100
-
+ 101
-
+ 102
-
+ @Parameter(property = "name" , defaultValue = "Dependency-Check" ) 103
- @Parameter(property = "description" , defaultValue = "A report providing details on any published "
+ private String name; 104
- + "vulnerabilities within project dependencies. This report is a best effort but may contain "
+ 105
- + "false positives and false negatives." )
+ 106
- private String description;
+ 107
-
+ 108
-
+ @Parameter(property = "description" , defaultValue = "A report providing details on any published " 109
-
+ + "vulnerabilities within project dependencies. This report is a best effort but may contain " 110
-
+ + "false positives and false negatives." ) 111
- @Parameter(property = "reportOutputDirectory" , defaultValue = "${project.reporting.outputDirectory}" , required = true )
+ private String description; 112
- private File reportOutputDirectory;
+ 113
-
+ 114
-
+ 115
-
- 116
-
- 117
- 118 0 @Parameter(property = "failBuildOnCVSS" , defaultValue = "11" , required = true )
- 119
- private float failBuildOnCVSS = 11;
- 120
+ 116
+ @Parameter(property = "reportOutputDirectory" , defaultValue = "${project.reporting.outputDirectory}" , required = true )
+ 117
+ private File reportOutputDirectory;
+ 118
+ 119
+
+ 120
+
121
-
+ 122
- 123
- @Parameter(defaultValue = "${project.build.directory}" , required = true )
+ 123 0 @Parameter(property = "failBuildOnCVSS" , defaultValue = "11" , required = true )
124
- private File outputDirectory;
+ private float failBuildOnCVSS = 11; 125
126
-
+ 127
-
+ 128
-
- 129 0 @SuppressWarnings({"CanBeFinal" , "FieldCanBeLocal" })
+ @Parameter(defaultValue = "${project.build.directory}" , required = true ) 129
+ private File outputDirectory;
130
- @Parameter(property = "autoupdate" , defaultValue = "true" , required = true )
+ 131
- private boolean autoUpdate = true ;
+ 132
-
+ 133
-
- 134
-
+ 134 0 @SuppressWarnings({"CanBeFinal" , "FieldCanBeLocal" })
135
-
+ @Parameter(property = "autoupdate" , defaultValue = "true" , required = true ) 136
-
- 137 0 @SuppressWarnings({"CanBeFinal" , "FieldCanBeLocal" })
+ private boolean autoUpdate = true ; 137
+
138
- @Parameter(property = "format" , defaultValue = "HTML" , required = true )
+ 139
- private String format = "HTML" ;
+ 140
-
+ 141
-
- 142
- 143 0 @SuppressWarnings({"CanBeFinal" , "FieldCanBeLocal" })
+ 142 0 @SuppressWarnings({"CanBeFinal" , "FieldCanBeLocal" })
+ 143
+ @Parameter(property = "format" , defaultValue = "HTML" , required = true )
144
- @Parameter(property = "externalReport" , defaultValue = "false" , required = true )
+ private String format = "HTML" ; 145
- private boolean externalReport = false ;
+ 146
-
+ 147
-
- 148
- 149 0 @SuppressWarnings("CanBeFinal" )
+ 148 0 @SuppressWarnings({"CanBeFinal" , "FieldCanBeLocal" })
+ 149
+ @Parameter(property = "externalReport" , defaultValue = "false" , required = true )
150
- @Parameter(property = "proxyUrl" , defaultValue = "" , required = false )
+ private boolean externalReport = false ; 151
- private String proxyUrl = null ;
+ 152
-
+ 153
-
- 154
- 155 0 @SuppressWarnings("CanBeFinal" )
+ 154 0 @SuppressWarnings("CanBeFinal" )
+ 155
+ @Parameter(property = "proxyUrl" , defaultValue = "" , required = false )
156
- @Parameter(property = "proxyPort" , defaultValue = "" , required = false )
+ private String proxyUrl = null ; 157
- private String proxyPort = null ;
+ 158
-
+ 159
-
- 160
- 161 0 @SuppressWarnings("CanBeFinal" )
+ 160 0 @SuppressWarnings("CanBeFinal" )
+ 161
+ @Parameter(property = "proxyPort" , defaultValue = "" , required = false )
162
- @Parameter(property = "connectionTimeout" , defaultValue = "" , required = false )
+ private String proxyPort = null ; 163
- private String connectionTimeout = null ;
+ 164
-
+ 165
-
- 166
-
+ 166 0 @SuppressWarnings("CanBeFinal" )
167
-
+ @Parameter(property = "connectionTimeout" , defaultValue = "" , required = false ) 168
-
+ private String connectionTimeout = null ; 169
- private static void prepareLogger() {
- 170 0 InputStream in = null ;
+ 170
+
171
- try {
- 172 0 in = DependencyCheckMojo.class .getClassLoader().getResourceAsStream(LOG_PROPERTIES_FILE);
- 173 0 LogManager.getLogManager().reset();
- 174 0 LogManager.getLogManager().readConfiguration(in);
- 175
-
- 176
-
- 177
-
- 178
-
- 179
-
- 180 0 } catch (IOException ex) {
- 181 0 System.err.println(ex.toString());
- 182 0 Logger.getLogger(DependencyCheckMojo.class .getName()).log(Level.SEVERE, null , ex);
- 183 0 } catch (SecurityException ex) {
- 184 0 Logger.getLogger(DependencyCheckMojo.class .getName()).log(Level.SEVERE, null , ex);
- 185
- } finally {
- 186 0 if (in != null ) {
- 187
- try {
- 188 0 in.close();
- 189 0 } catch (Exception ex) {
- 190
-
- 191 0 in = null ;
- 192 0 }
- 193
- }
- 194
- }
- 195 0 }
- 196
-
- 197
- 198
+ 172
- 199
+ 173
- 200
+ 174
- 201
+ 175
- 202
+ 176
private Engine executeDependencyCheck() {
- 203 0 prepareLogger();
- 204 0 populateSettings();
- 205 0 final Engine engine = new Engine();
- 206 0 final Set<Artifact> artifacts = project.getArtifacts();
- 207 0 for (Artifact a : artifacts) {
- 208 0 if (!TEST_SCOPE.equals(a.getScope())) {
- 209 0 engine.scan(a.getFile().getAbsolutePath());
- 210
+ 177
+
+ 178 0 final InputStream in = DependencyCheckMojo.class .getClassLoader().getResourceAsStream(LOG_PROPERTIES_FILE);
+ 179 0 LogUtils.prepareLogger(in, logFile);
+ 180
+
+ 181 0 populateSettings();
+ 182 0 final Engine engine = new Engine();
+ 183 0 final Set<Artifact> artifacts = project.getArtifacts();
+ 184 0 for (Artifact a : artifacts) {
+ 185 0 if (!TEST_SCOPE.equals(a.getScope())) {
+ 186 0 engine.scan(a.getFile().getAbsolutePath());
+ 187
}
- 211
+ 188
}
- 212 0 engine.analyzeDependencies();
- 213 0 return engine;
- 214
+ 189 0 engine.analyzeDependencies();
+ 190 0 return engine;
+ 191
}
- 215
+ 192
- 216
+ 193
- 217
+ 194
- 218
+ 195
- 219
+ 196
- 220
+ 197
- 221
+ 198
private void generateExternalReports(Engine engine) {
- 222 0 final ReportGenerator r = new ReportGenerator(project.getName(), engine.getDependencies(), engine.getAnalyzers());
- 223
+ 199 0 final ReportGenerator r = new ReportGenerator(project.getName(), engine.getDependencies(), engine.getAnalyzers());
+ 200
try {
- 224 0 r.generateReports(outputDirectory.getCanonicalPath(), format);
- 225 0 } catch (IOException ex) {
- 226 0 Logger.getLogger(DependencyCheckMojo.class .getName()).log(Level.SEVERE, null , ex);
- 227 0 } catch (Exception ex) {
- 228 0 Logger.getLogger(DependencyCheckMojo.class .getName()).log(Level.SEVERE, null , ex);
- 229 0 }
- 230 0 }
- 231
+ 201 0 r.generateReports(outputDirectory.getCanonicalPath(), format);
+ 202 0 } catch (IOException ex) {
+ 203 0 Logger.getLogger(DependencyCheckMojo.class .getName()).log(Level.SEVERE, null , ex);
+ 204 0 } catch (Exception ex) {
+ 205 0 Logger.getLogger(DependencyCheckMojo.class .getName()).log(Level.SEVERE, null , ex);
+ 206 0 }
+ 207 0 }
+ 208
- 232
+ 209
- 233
+ 210
- 234
+ 211
- 235
+ 212
- 236
+ 213
- 237
+ 214
- 238
+ 215
private void generateMavenSiteReport(final Engine engine, Sink sink) {
- 239 0 final List<Dependency> dependencies = engine.getDependencies();
- 240
+ 216 0 final List<Dependency> dependencies = engine.getDependencies();
+ 217
- 241 0 writeSiteReportHeader(sink, project.getName());
- 242 0 writeSiteReportTOC(sink, dependencies);
- 243
+ 218 0 writeSiteReportHeader(sink, project.getName());
+ 219 0 writeSiteReportTOC(sink, dependencies);
+ 220
- 244 0 int cnt = 0;
- 245 0 for (Dependency d : dependencies) {
- 246 0 writeSiteReportDependencyHeader(sink, d);
- 247 0 cnt = writeSiteReportDependencyAnalysisExceptions(d, cnt, sink);
- 248 0 cnt = writeSiteReportDependencyEvidenceUsed(d, cnt, sink);
- 249 0 cnt = writeSiteReportDependencyRelatedDependencies(d, cnt, sink);
- 250 0 writeSiteReportDependencyIdentifiers(d, sink);
- 251 0 writeSiteReportDependencyVulnerabilities(d, sink, cnt);
- 252
+ 221 0 int cnt = 0;
+ 222 0 for (Dependency d : dependencies) {
+ 223 0 writeSiteReportDependencyHeader(sink, d);
+ 224 0 cnt = writeSiteReportDependencyAnalysisExceptions(d, cnt, sink);
+ 225 0 cnt = writeSiteReportDependencyEvidenceUsed(d, cnt, sink);
+ 226 0 cnt = writeSiteReportDependencyRelatedDependencies(d, cnt, sink);
+ 227 0 writeSiteReportDependencyIdentifiers(d, sink);
+ 228 0 writeSiteReportDependencyVulnerabilities(d, sink, cnt);
+ 229
}
- 253 0 sink.body_();
- 254 0 }
- 255
+ 230 0 sink.body_();
+ 231 0 }
+ 232
- 256
+ 233
- 257
+ 234
- 258
+ 235
- 259
+ 236
- 260
+ 237
- 261
+ 238
- 262
+ 239
- 263
+ 240
- 264
+ 241
private void writeSiteReportDependencyVulnerabilities(Dependency d, Sink sink, int collapsibleHeaderCount) {
- 265 0 int cnt = collapsibleHeaderCount;
- 266 0 if (d.getVulnerabilities() != null && !d.getVulnerabilities().isEmpty()) {
- 267 0 for (Vulnerability v : d.getVulnerabilities()) {
- 268
+ 242 0 int cnt = collapsibleHeaderCount;
+ 243 0 if (d.getVulnerabilities() != null && !d.getVulnerabilities().isEmpty()) {
+ 244 0 for (Vulnerability v : d.getVulnerabilities()) {
+ 245
- 269 0 sink.paragraph();
- 270 0 sink.bold();
- 271
+ 246 0 sink.paragraph();
+ 247 0 sink.bold();
+ 248
try {
- 272 0 sink.link("http://web.nvd.nist.gov/view/vuln/detail?vulnId=" + URLEncoder.encode(v.getName(), "US-ASCII" ));
- 273 0 sink.text(v.getName());
- 274 0 sink.link_();
- 275 0 sink.bold_();
- 276 0 } catch (UnsupportedEncodingException ex) {
- 277 0 sink.text(v.getName());
- 278 0 sink.bold_();
- 279 0 sink.lineBreak();
- 280 0 sink.text("http://web.nvd.nist.gov/view/vuln/detail?vulnId=" + v.getName());
- 281 0 }
- 282 0 sink.paragraph_();
- 283 0 sink.paragraph();
- 284 0 sink.text("Severity: " );
- 285 0 if (v.getCvssScore() < 4.0) {
- 286 0 sink.text("Low" );
- 287
+ 249 0 sink.link("http://web.nvd.nist.gov/view/vuln/detail?vulnId=" + URLEncoder.encode(v.getName(), "US-ASCII" ));
+ 250 0 sink.text(v.getName());
+ 251 0 sink.link_();
+ 252 0 sink.bold_();
+ 253 0 } catch (UnsupportedEncodingException ex) {
+ 254 0 sink.text(v.getName());
+ 255 0 sink.bold_();
+ 256 0 sink.lineBreak();
+ 257 0 sink.text("http://web.nvd.nist.gov/view/vuln/detail?vulnId=" + v.getName());
+ 258 0 }
+ 259 0 sink.paragraph_();
+ 260 0 sink.paragraph();
+ 261 0 sink.text("Severity: " );
+ 262 0 if (v.getCvssScore() < 4.0) {
+ 263 0 sink.text("Low" );
+ 264
} else {
- 288 0 if (v.getCvssScore() >= 7.0) {
- 289 0 sink.text("High" );
- 290
+ 265 0 if (v.getCvssScore() >= 7.0) {
+ 266 0 sink.text("High" );
+ 267
} else {
- 291 0 sink.text("Medium" );
- 292
+ 268 0 sink.text("Medium" );
+ 269
}
+ 270
+ }
+ 271 0 sink.lineBreak();
+ 272 0 sink.text("CVSS Score: " + v.getCvssScore());
+ 273 0 if (v.getCwe() != null && !v.getCwe().isEmpty()) {
+ 274 0 sink.lineBreak();
+ 275 0 sink.text("CWE: " );
+ 276 0 sink.text(v.getCwe());
+ 277
+ }
+ 278 0 sink.paragraph_();
+ 279 0 sink.paragraph();
+ 280 0 sink.text(v.getDescription());
+ 281 0 if (v.getReferences() != null && !v.getReferences().isEmpty()) {
+ 282 0 sink.list();
+ 283 0 for (Reference ref : v.getReferences()) {
+ 284 0 sink.listItem();
+ 285 0 sink.text(ref.getSource());
+ 286 0 sink.text(" - " );
+ 287 0 sink.link(ref.getUrl());
+ 288 0 sink.text(ref.getName());
+ 289 0 sink.link_();
+ 290 0 sink.listItem_();
+ 291
+ }
+ 292 0 sink.list_();
293
}
- 294 0 sink.lineBreak();
- 295 0 sink.text("CVSS Score: " + v.getCvssScore());
- 296 0 if (v.getCwe() != null && !v.getCwe().isEmpty()) {
- 297 0 sink.lineBreak();
- 298 0 sink.text("CWE: " );
- 299 0 sink.text(v.getCwe());
- 300
- }
- 301 0 sink.paragraph_();
- 302 0 sink.paragraph();
- 303 0 sink.text(v.getDescription());
- 304 0 if (v.getReferences() != null && !v.getReferences().isEmpty()) {
- 305 0 sink.list();
- 306 0 for (Reference ref : v.getReferences()) {
- 307 0 sink.listItem();
- 308 0 sink.text(ref.getSource());
- 309 0 sink.text(" - " );
- 310 0 sink.link(ref.getUrl());
- 311 0 sink.text(ref.getName());
- 312 0 sink.link_();
- 313 0 sink.listItem_();
- 314
- }
- 315 0 sink.list_();
- 316
- }
- 317 0 sink.paragraph_();
- 318 0 if (v.getVulnerableSoftware() != null && !v.getVulnerableSoftware().isEmpty()) {
- 319 0 sink.paragraph();
- 320
+ 294 0 sink.paragraph_();
+ 295 0 if (v.getVulnerableSoftware() != null && !v.getVulnerableSoftware().isEmpty()) {
+ 296 0 sink.paragraph();
+ 297
- 321 0 cnt += 1;
- 322 0 sink.rawText("Vulnerable Software <a href=\"javascript:toggleElement(this, 'vulnSoft" + cnt + "')\">[-]</a>" );
- 323 0 sink.rawText("<div id=\"vulnSoft" + cnt + "\" style=\"display:block\">" );
- 324 0 sink.list();
- 325 0 for (VulnerableSoftware vs : v.getVulnerableSoftware()) {
- 326 0 sink.listItem();
- 327
+ 298 0 cnt += 1;
+ 299 0 sink.rawText("Vulnerable Software <a href=\"javascript:toggleElement(this, 'vulnSoft" + cnt + "')\">[-]</a>" );
+ 300 0 sink.rawText("<div id=\"vulnSoft" + cnt + "\" style=\"display:block\">" );
+ 301 0 sink.list();
+ 302 0 for (VulnerableSoftware vs : v.getVulnerableSoftware()) {
+ 303 0 sink.listItem();
+ 304
try {
- 328 0 sink.link("http://web.nvd.nist.gov/view/vuln/search-results?cpe=" + URLEncoder.encode(vs.getName(), "US-ASCII" ));
- 329 0 sink.text(vs.getName());
- 330 0 sink.link_();
- 331 0 if (vs.hasPreviousVersion()) {
- 332 0 sink.text(" and all previous versions." );
- 333
+ 305 0 sink.link("http://web.nvd.nist.gov/view/vuln/search-results?cpe=" + URLEncoder.encode(vs.getName(), "US-ASCII" ));
+ 306 0 sink.text(vs.getName());
+ 307 0 sink.link_();
+ 308 0 if (vs.hasPreviousVersion()) {
+ 309 0 sink.text(" and all previous versions." );
+ 310
}
- 334 0 } catch (UnsupportedEncodingException ex) {
- 335 0 sink.text(vs.getName());
- 336 0 if (vs.hasPreviousVersion()) {
- 337 0 sink.text(" and all previous versions." );
- 338
+ 311 0 } catch (UnsupportedEncodingException ex) {
+ 312 0 sink.text(vs.getName());
+ 313 0 if (vs.hasPreviousVersion()) {
+ 314 0 sink.text(" and all previous versions." );
+ 315
}
- 339 0 sink.text(" (http://web.nvd.nist.gov/view/vuln/search-results?cpe=" + vs.getName() + ")" );
- 340 0 }
- 341
+ 316 0 sink.text(" (http://web.nvd.nist.gov/view/vuln/search-results?cpe=" + vs.getName() + ")" );
+ 317 0 }
+ 318
- 342 0 sink.listItem_();
- 343
+ 319 0 sink.listItem_();
+ 320
}
- 344 0 sink.list_();
- 345 0 sink.rawText("</div>" );
- 346 0 sink.paragraph_();
- 347
+ 321 0 sink.list_();
+ 322 0 sink.rawText("</div>" );
+ 323 0 sink.paragraph_();
+ 324
}
- 348
+ 325
}
- 349
+ 326
}
- 350 0 }
- 351
+ 327 0 }
+ 328
- 352
+ 329
- 353
+ 330
- 354
+ 331
- 355
+ 332
- 356
+ 333
- 357
+ 334
- 358
+ 335
private void writeSiteReportDependencyIdentifiers(Dependency d, Sink sink) {
- 359 0 if (d.getIdentifiers() != null && !d.getIdentifiers().isEmpty()) {
- 360 0 sink.sectionTitle4();
- 361 0 sink.text("Identifiers" );
- 362 0 sink.sectionTitle4_();
- 363 0 sink.list();
- 364 0 for (Identifier i : d.getIdentifiers()) {
- 365 0 sink.listItem();
- 366 0 sink.text(i.getType());
- 367 0 sink.text(": " );
- 368 0 if (i.getUrl() != null && i.getUrl().length() > 0) {
- 369 0 sink.link(i.getUrl());
- 370 0 sink.text(i.getValue());
- 371 0 sink.link_();
- 372
+ 336 0 if (d.getIdentifiers() != null && !d.getIdentifiers().isEmpty()) {
+ 337 0 sink.sectionTitle4();
+ 338 0 sink.text("Identifiers" );
+ 339 0 sink.sectionTitle4_();
+ 340 0 sink.list();
+ 341 0 for (Identifier i : d.getIdentifiers()) {
+ 342 0 sink.listItem();
+ 343 0 sink.text(i.getType());
+ 344 0 sink.text(": " );
+ 345 0 if (i.getUrl() != null && i.getUrl().length() > 0) {
+ 346 0 sink.link(i.getUrl());
+ 347 0 sink.text(i.getValue());
+ 348 0 sink.link_();
+ 349
} else {
- 373 0 sink.text(i.getValue());
- 374
+ 350 0 sink.text(i.getValue());
+ 351
}
- 375 0 if (i.getDescription() != null && i.getDescription().length() > 0) {
- 376 0 sink.lineBreak();
- 377 0 sink.text(i.getDescription());
- 378
+ 352 0 if (i.getDescription() != null && i.getDescription().length() > 0) {
+ 353 0 sink.lineBreak();
+ 354 0 sink.text(i.getDescription());
+ 355
}
- 379 0 sink.listItem_();
- 380
+ 356 0 sink.listItem_();
+ 357
}
- 381 0 sink.list_();
- 382
+ 358 0 sink.list_();
+ 359
}
- 383 0 }
- 384
+ 360 0 }
+ 361
- 385
+ 362
- 386
+ 363
- 387
+ 364
- 388
+ 365
- 389
+ 366
- 390
+ 367
- 391
+ 368
- 392
+ 369
- 393
+ 370
private int writeSiteReportDependencyRelatedDependencies(Dependency d, int collapsibleHeaderCount, Sink sink) {
- 394 0 int cnt = collapsibleHeaderCount;
- 395 0 if (d.getRelatedDependencies() != null && !d.getRelatedDependencies().isEmpty()) {
- 396 0 cnt += 1;
- 397 0 sink.sectionTitle4();
- 398 0 sink.rawText("Related Dependencies <a href=\"javascript:toggleElement(this, 'related" + cnt + "')\">[+]</a>" );
- 399 0 sink.sectionTitle4_();
- 400 0 sink.rawText("<div id=\"related" + cnt + "\" style=\"display:none\">" );
- 401 0 sink.list();
- 402 0 for (Dependency r : d.getRelatedDependencies()) {
- 403 0 sink.listItem();
- 404 0 sink.text(r.getFileName());
- 405 0 sink.list();
- 406 0 writeListItem(sink, "File Path: " + r.getFilePath());
- 407 0 writeListItem(sink, "SHA1: " + r.getSha1sum());
- 408 0 writeListItem(sink, "MD5: " + r.getMd5sum());
- 409 0 sink.list_();
- 410 0 sink.listItem_();
- 411
+ 371 0 int cnt = collapsibleHeaderCount;
+ 372 0 if (d.getRelatedDependencies() != null && !d.getRelatedDependencies().isEmpty()) {
+ 373 0 cnt += 1;
+ 374 0 sink.sectionTitle4();
+ 375 0 sink.rawText("Related Dependencies <a href=\"javascript:toggleElement(this, 'related" + cnt + "')\">[+]</a>" );
+ 376 0 sink.sectionTitle4_();
+ 377 0 sink.rawText("<div id=\"related" + cnt + "\" style=\"display:none\">" );
+ 378 0 sink.list();
+ 379 0 for (Dependency r : d.getRelatedDependencies()) {
+ 380 0 sink.listItem();
+ 381 0 sink.text(r.getFileName());
+ 382 0 sink.list();
+ 383 0 writeListItem(sink, "File Path: " + r.getFilePath());
+ 384 0 writeListItem(sink, "SHA1: " + r.getSha1sum());
+ 385 0 writeListItem(sink, "MD5: " + r.getMd5sum());
+ 386 0 sink.list_();
+ 387 0 sink.listItem_();
+ 388
}
- 412 0 sink.list_();
- 413 0 sink.rawText("</div>" );
- 414
+ 389 0 sink.list_();
+ 390 0 sink.rawText("</div>" );
+ 391
}
- 415 0 return cnt;
- 416
+ 392 0 return cnt;
+ 393
}
- 417
+ 394
- 418
+ 395
- 419
+ 396
- 420
+ 397
- 421
+ 398
- 422
+ 399
- 423
+ 400
- 424
+ 401
- 425
+ 402
- 426
+ 403
private int writeSiteReportDependencyEvidenceUsed(Dependency d, int collapsibleHeaderCount, Sink sink) {
- 427 0 int cnt = collapsibleHeaderCount;
- 428 0 if (d.getEvidenceUsed() != null && d.getEvidenceUsed().size() > 0) {
- 429 0 cnt += 1;
- 430 0 sink.sectionTitle4();
- 431 0 sink.rawText("Evidence Collected <a href=\"javascript:toggleElement(this, 'evidence" + cnt + "')\">[+]</a>" );
- 432 0 sink.sectionTitle4_();
- 433 0 sink.rawText("<div id=\"evidence" + cnt + "\" style=\"display:none\">" );
- 434 0 sink.table();
- 435 0 sink.tableRow();
- 436 0 writeTableHeaderCell(sink, "Source" );
- 437 0 writeTableHeaderCell(sink, "Name" );
- 438 0 writeTableHeaderCell(sink, "Value" );
- 439 0 sink.tableRow_();
- 440 0 for (Evidence e : d.getEvidenceUsed()) {
- 441 0 sink.tableRow();
- 442 0 writeTableCell(sink, e.getSource());
- 443 0 writeTableCell(sink, e.getName());
- 444 0 writeTableCell(sink, e.getValue());
- 445 0 sink.tableRow_();
- 446
+ 404 0 int cnt = collapsibleHeaderCount;
+ 405 0 if (d.getEvidenceUsed() != null && d.getEvidenceUsed().size() > 0) {
+ 406 0 cnt += 1;
+ 407 0 sink.sectionTitle4();
+ 408 0 sink.rawText("Evidence Collected <a href=\"javascript:toggleElement(this, 'evidence" + cnt + "')\">[+]</a>" );
+ 409 0 sink.sectionTitle4_();
+ 410 0 sink.rawText("<div id=\"evidence" + cnt + "\" style=\"display:none\">" );
+ 411 0 sink.table();
+ 412 0 sink.tableRow();
+ 413 0 writeTableHeaderCell(sink, "Source" );
+ 414 0 writeTableHeaderCell(sink, "Name" );
+ 415 0 writeTableHeaderCell(sink, "Value" );
+ 416 0 sink.tableRow_();
+ 417 0 for (Evidence e : d.getEvidenceUsed()) {
+ 418 0 sink.tableRow();
+ 419 0 writeTableCell(sink, e.getSource());
+ 420 0 writeTableCell(sink, e.getName());
+ 421 0 writeTableCell(sink, e.getValue());
+ 422 0 sink.tableRow_();
+ 423
}
- 447 0 sink.table_();
- 448 0 sink.rawText("</div>" );
- 449
+ 424 0 sink.table_();
+ 425 0 sink.rawText("</div>" );
+ 426
}
- 450 0 return cnt;
- 451
+ 427 0 return cnt;
+ 428
}
- 452
+ 429
- 453
+ 430
- 454
+ 431
- 455
+ 432
- 456
+ 433
- 457
+ 434
- 458
+ 435
- 459
+ 436
- 460
+ 437
- 461
+ 438
- 462
+ 439
private int writeSiteReportDependencyAnalysisExceptions(Dependency d, int collapsibleHeaderCount, Sink sink) {
- 463 0 int cnt = collapsibleHeaderCount;
- 464 0 if (d.getAnalysisExceptions() != null && !d.getAnalysisExceptions().isEmpty()) {
- 465 0 cnt += 1;
- 466 0 sink.sectionTitle4();
- 467 0 sink.rawText("<font style=\"color:red\">Errors occurred during analysis:</font> <a href=\"javascript:toggleElement(this, 'errors"
- 468
+ 440 0 int cnt = collapsibleHeaderCount;
+ 441 0 if (d.getAnalysisExceptions() != null && !d.getAnalysisExceptions().isEmpty()) {
+ 442 0 cnt += 1;
+ 443 0 sink.sectionTitle4();
+ 444 0 sink.rawText("<font style=\"color:red\">Errors occurred during analysis:</font> <a href=\"javascript:toggleElement(this, 'errors"
+ 445
+ cnt + "')\">[+]</a>" );
- 469 0 sink.sectionTitle4_();
- 470 0 sink.rawText("<div id=\"errors" + cnt + "\">" );
- 471 0 sink.list();
- 472 0 for (Exception e : d.getAnalysisExceptions()) {
- 473 0 sink.listItem();
- 474 0 sink.text(e.getMessage());
- 475 0 sink.listItem_();
- 476
+ 446 0 sink.sectionTitle4_();
+ 447 0 sink.rawText("<div id=\"errors" + cnt + "\">" );
+ 448 0 sink.list();
+ 449 0 for (Exception e : d.getAnalysisExceptions()) {
+ 450 0 sink.listItem();
+ 451 0 sink.text(e.getMessage());
+ 452 0 sink.listItem_();
+ 453
}
- 477 0 sink.list_();
- 478 0 sink.rawText("</div>" );
+ 454 0 sink.list_();
+ 455 0 sink.rawText("</div>" );
+ 456
+ }
+ 457 0 return cnt;
+ 458
+ }
+ 459
+
+ 460
+
+ 461
+
+ 462
+
+ 463
+
+ 464
+
+ 465
+
+ 466
+ private void writeSiteReportDependencyHeader(Sink sink, Dependency d) {
+ 467 0 sink.sectionTitle2();
+ 468 0 sink.anchor("sha1" + d.getSha1sum());
+ 469 0 sink.text(d.getFileName());
+ 470 0 sink.anchor_();
+ 471 0 sink.sectionTitle2_();
+ 472 0 if (d.getDescription() != null && d.getDescription().length() > 0) {
+ 473 0 sink.paragraph();
+ 474 0 sink.bold();
+ 475 0 sink.text("Description: " );
+ 476 0 sink.bold_();
+ 477 0 sink.text(d.getDescription());
+ 478 0 sink.paragraph_();
479
}
- 480 0 return cnt;
- 481
- }
- 482
-
- 483
-
- 484
-
- 485
-
- 486
-
- 487
-
- 488
-
+ 480 0 if (d.getLicense() != null && d.getLicense().length() > 0) {
+ 481 0 sink.paragraph();
+ 482 0 sink.bold();
+ 483 0 sink.text("License: " );
+ 484 0 sink.bold_();
+ 485 0 if (d.getLicense().startsWith("http://" ) && !d.getLicense().contains(" " )) {
+ 486 0 sink.link(d.getLicense());
+ 487 0 sink.text(d.getLicense());
+ 488 0 sink.link_();
489
- private void writeSiteReportDependencyHeader(Sink sink, Dependency d) {
- 490 0 sink.sectionTitle2();
- 491 0 sink.anchor("sha1" + d.getSha1sum());
- 492 0 sink.text(d.getFileName());
- 493 0 sink.anchor_();
- 494 0 sink.sectionTitle2_();
- 495 0 if (d.getDescription() != null && d.getDescription().length() > 0) {
- 496 0 sink.paragraph();
- 497 0 sink.bold();
- 498 0 sink.text("Description: " );
- 499 0 sink.bold_();
- 500 0 sink.text(d.getDescription());
- 501 0 sink.paragraph_();
- 502
- }
- 503 0 if (d.getLicense() != null && d.getLicense().length() > 0) {
- 504 0 sink.paragraph();
- 505 0 sink.bold();
- 506 0 sink.text("License: " );
- 507 0 sink.bold_();
- 508 0 if (d.getLicense().startsWith("http://" ) && !d.getLicense().contains(" " )) {
- 509 0 sink.link(d.getLicense());
- 510 0 sink.text(d.getLicense());
- 511 0 sink.link_();
- 512
} else {
- 513 0 sink.text(d.getLicense());
- 514
+ 490 0 sink.text(d.getLicense());
+ 491
}
- 515 0 sink.paragraph_();
- 516
+ 492 0 sink.paragraph_();
+ 493
}
- 517 0 }
- 518
+ 494 0 }
+ 495
- 519
+ 496
- 520
+ 497
- 521
+ 498
- 522
+ 499
- 523
+ 500
- 524
+ 501
- 525
+ 502
private void writeListItem(Sink sink, String text) {
- 526 0 sink.listItem();
- 527 0 sink.text(text);
- 528 0 sink.listItem_();
- 529 0 }
- 530
+ 503 0 sink.listItem();
+ 504 0 sink.text(text);
+ 505 0 sink.listItem_();
+ 506 0 }
+ 507
- 531
+ 508
- 532
+ 509
- 533
+ 510
- 534
+ 511
- 535
+ 512
- 536
+ 513
- 537
+ 514
private void writeTableCell(Sink sink, String text) {
- 538 0 sink.tableCell();
- 539 0 sink.text(text);
- 540 0 sink.tableCell_();
- 541 0 }
- 542
+ 515 0 sink.tableCell();
+ 516 0 sink.text(text);
+ 517 0 sink.tableCell_();
+ 518 0 }
+ 519
- 543
+ 520
- 544
+ 521
- 545
+ 522
- 546
+ 523
- 547
+ 524
- 548
+ 525
- 549
+ 526
private void writeTableHeaderCell(Sink sink, String text) {
- 550 0 sink.tableHeaderCell();
- 551 0 sink.text(text);
- 552 0 sink.tableHeaderCell_();
- 553 0 }
- 554
+ 527 0 sink.tableHeaderCell();
+ 528 0 sink.text(text);
+ 529 0 sink.tableHeaderCell_();
+ 530 0 }
+ 531
- 555
+ 532
- 556
+ 533
- 557
+ 534
- 558
+ 535
- 559
+ 536
- 560
+ 537
- 561
+ 538
private void writeSiteReportTOC(Sink sink, final List<Dependency> dependencies) {
- 562 0 sink.list();
- 563 0 for (Dependency d : dependencies) {
- 564 0 sink.listItem();
- 565 0 sink.link("#sha1" + d.getSha1sum());
- 566 0 sink.text(d.getFileName());
- 567 0 sink.link_();
- 568 0 if (!d.getVulnerabilities().isEmpty()) {
- 569 0 sink.rawText(" <font style=\"color:red\">•</font>" );
- 570
+ 539 0 sink.list();
+ 540 0 for (Dependency d : dependencies) {
+ 541 0 sink.listItem();
+ 542 0 sink.link("#sha1" + d.getSha1sum());
+ 543 0 sink.text(d.getFileName());
+ 544 0 sink.link_();
+ 545 0 if (!d.getVulnerabilities().isEmpty()) {
+ 546 0 sink.rawText(" <font style=\"color:red\">•</font>" );
+ 547
}
- 571 0 if (!d.getRelatedDependencies().isEmpty()) {
- 572 0 sink.list();
- 573 0 for (Dependency r : d.getRelatedDependencies()) {
- 574 0 writeListItem(sink, r.getFileName());
- 575
+ 548 0 if (!d.getRelatedDependencies().isEmpty()) {
+ 549 0 sink.list();
+ 550 0 for (Dependency r : d.getRelatedDependencies()) {
+ 551 0 writeListItem(sink, r.getFileName());
+ 552
}
- 576 0 sink.list_();
- 577
+ 553 0 sink.list_();
+ 554
}
- 578 0 sink.listItem_();
- 579
+ 555 0 sink.listItem_();
+ 556
}
- 580 0 sink.list_();
- 581 0 }
+ 557 0 sink.list_();
+ 558 0 }
+ 559
+
+ 560
+
+ 561
+
+ 562
+
+ 563
+
+ 564
+
+ 565
+
+ 566
+ private void writeSiteReportHeader(Sink sink, String projectName) {
+ 567 0 sink.head();
+ 568 0 sink.title();
+ 569 0 sink.text("Dependency-Check Report: " + projectName);
+ 570 0 sink.title_();
+ 571 0 sink.head_();
+ 572 0 sink.body();
+ 573 0 sink.rawText("<script type=\"text/javascript\">" );
+ 574 0 sink.rawText("function toggleElement(el, targetId) {" );
+ 575 0 sink.rawText("if (el.innerText == '[+]') {" );
+ 576 0 sink.rawText(" el.innerText = '[-]';" );
+ 577 0 sink.rawText(" document.getElementById(targetId).style.display='block';" );
+ 578 0 sink.rawText("} else {" );
+ 579 0 sink.rawText(" el.innerText = '[+]';" );
+ 580 0 sink.rawText(" document.getElementById(targetId).style.display='none';" );
+ 581 0 sink.rawText("}" );
582
- 583
-
- 584
-
- 585
-
- 586
-
- 587
-
- 588
-
- 589
- private void writeSiteReportHeader(Sink sink, String projectName) {
- 590 0 sink.head();
- 591 0 sink.title();
- 592 0 sink.text("Dependency-Check Report: " + projectName);
- 593 0 sink.title_();
- 594 0 sink.head_();
- 595 0 sink.body();
- 596 0 sink.rawText("<script type=\"text/javascript\">" );
- 597 0 sink.rawText("function toggleElement(el, targetId) {" );
- 598 0 sink.rawText("if (el.innerText == '[+]') {" );
- 599 0 sink.rawText(" el.innerText = '[-]';" );
- 600 0 sink.rawText(" document.getElementById(targetId).style.display='block';" );
- 601 0 sink.rawText("} else {" );
- 602 0 sink.rawText(" el.innerText = '[+]';" );
- 603 0 sink.rawText(" document.getElementById(targetId).style.display='none';" );
- 604 0 sink.rawText("}" );
- 605
-
- 606 0 sink.rawText("}" );
- 607 0 sink.rawText("</script>" );
- 608 0 sink.section1();
- 609 0 sink.sectionTitle1();
- 610 0 sink.text("Project: " + projectName);
- 611 0 sink.sectionTitle1_();
- 612 0 sink.date();
- 613 0 final Date now = new Date();
- 614 0 sink.text(DateFormat.getDateTimeInstance().format(now));
- 615 0 sink.date_();
- 616 0 sink.section1_();
- 617 0 }
- 618
+ 583 0 sink.rawText("}" );
+ 584 0 sink.rawText("</script>" );
+ 585 0 sink.section1();
+ 586 0 sink.sectionTitle1();
+ 587 0 sink.text("Project: " + projectName);
+ 588 0 sink.sectionTitle1_();
+ 589 0 sink.date();
+ 590 0 final Date now = new Date();
+ 591 0 sink.text(DateFormat.getDateTimeInstance().format(now));
+ 592 0 sink.date_();
+ 593 0 sink.section1_();
+ 594 0 }
+ 595
+ 596
+
+ 597
+
+ 598
+
+ 599
+
+ 600
+
+ 601
+
+ 602
+ private void populateSettings() {
+ 603 0 InputStream mojoProperties = null ;
+ 604
+ try {
+ 605 0 mojoProperties = this .getClass().getClassLoader().getResourceAsStream(PROPERTIES_FILE);
+ 606 0 Settings.mergeProperties(mojoProperties);
+ 607 0 } catch (IOException ex) {
+ 608 0 Logger.getLogger(DependencyCheckMojo.class .getName()).log(Level.WARNING, "Unable to load the dependency-check ant task.properties file." );
+ 609 0 Logger.getLogger(DependencyCheckMojo.class .getName()).log(Level.FINE, null , ex);
+ 610
+ } finally {
+ 611 0 if (mojoProperties != null ) {
+ 612
+ try {
+ 613 0 mojoProperties.close();
+ 614 0 } catch (IOException ex) {
+ 615 0 Logger.getLogger(DependencyCheckMojo.class .getName()).log(Level.FINEST, null , ex);
+ 616 0 }
+ 617
+ }
+ 618
+ }
619
- 620
-
+ 620 0 Settings.setBoolean(Settings.KEYS.AUTO_UPDATE, autoUpdate);
621
-
- 622
-
- 623
-
+ 622 0 if (proxyUrl != null && !proxyUrl.isEmpty()) {
+ 623 0 Settings.setString(Settings.KEYS.PROXY_URL, proxyUrl);
624
-
- 625
- private void populateSettings() {
- 626 0 InputStream mojoProperties = null ;
+ } 625 0 if (proxyPort != null && !proxyPort.isEmpty()) {
+ 626 0 Settings.setString(Settings.KEYS.PROXY_PORT, proxyPort);
627
- try {
- 628 0 mojoProperties = this .getClass().getClassLoader().getResourceAsStream(PROPERTIES_FILE);
- 629 0 Settings.mergeProperties(mojoProperties);
- 630 0 } catch (IOException ex) {
- 631 0 Logger.getLogger(DependencyCheckMojo.class .getName()).log(Level.WARNING, "Unable to load the dependency-check ant task.properties file." );
- 632 0 Logger.getLogger(DependencyCheckMojo.class .getName()).log(Level.FINE, null , ex);
+ } 628 0 if (connectionTimeout != null && !connectionTimeout.isEmpty()) {
+ 629 0 Settings.setString(Settings.KEYS.CONNECTION_TIMEOUT, connectionTimeout);
+ 630
+ }
+ 631 0 }
+ 632
+
633
- } finally {
- 634 0 if (mojoProperties != null ) {
- 635
- try {
- 636 0 mojoProperties.close();
- 637 0 } catch (IOException ex) {
- 638 0 Logger.getLogger(DependencyCheckMojo.class .getName()).log(Level.FINEST, null , ex);
- 639 0 }
- 640
- }
- 641
- }
- 642
-
- 643 0 Settings.setBoolean(Settings.KEYS.AUTO_UPDATE, autoUpdate);
- 644
-
- 645 0 if (proxyUrl != null && !proxyUrl.isEmpty()) {
- 646 0 Settings.setString(Settings.KEYS.PROXY_URL, proxyUrl);
- 647
- }
- 648 0 if (proxyPort != null && !proxyPort.isEmpty()) {
- 649 0 Settings.setString(Settings.KEYS.PROXY_PORT, proxyPort);
- 650
- }
- 651 0 if (connectionTimeout != null && !connectionTimeout.isEmpty()) {
- 652 0 Settings.setString(Settings.KEYS.CONNECTION_TIMEOUT, connectionTimeout);
- 653
- }
- 654 0 }
- 655
-
- 656
- 657
+ 634
- 658
+ 635
- 659
+ 636
- 660
+ 637
- 661
+ 638
- 662
+ 639
- 663
+ 640
public void execute() throws MojoExecutionException, MojoFailureException {
- 664 0 final Engine engine = executeDependencyCheck();
- 665 0 generateExternalReports(engine);
- 666 0 if (this .failBuildOnCVSS <= 10) {
- 667 0 checkForFailure(engine.getDependencies());
- 668
+ 641 0 final Engine engine = executeDependencyCheck();
+ 642 0 generateExternalReports(engine);
+ 643 0 if (this .failBuildOnCVSS <= 10) {
+ 644 0 checkForFailure(engine.getDependencies());
+ 645
}
- 669 0 }
- 670
+ 646 0 }
+ 647
- 671
+ 648
- 672
+ 649
- 673
+ 650
- 674
+ 651
- 675
+ 652
- 676
+ 653
- 677
+ 654
- 678
+ 655
public void generate(@SuppressWarnings("deprecation" ) org.codehaus.doxia.sink.Sink sink,
- 679
+ 656
Locale locale) throws MavenReportException {
- 680 0 generate((Sink) sink, null , locale);
- 681 0 }
+ 657 0 generate((Sink) sink, null , locale);
+ 658 0 }
+ 659
+
+ 660
+
+ 661
+
+ 662
+
+ 663
+
+ 664
+
+ 665
+
+ 666
+
+ 667
+
+ 668
+ public void generate(Sink sink, SinkFactory sinkFactory, Locale locale) throws MavenReportException {
+ 669 0 final Engine engine = executeDependencyCheck();
+ 670 0 generateMavenSiteReport(engine, sink);
+ 671 0 }
+ 672
+
+ 673
+
+ 674
+
+ 675
+
+ 676
+
+ 677
+
+ 678
+
+ 679
+ public String getOutputName() {
+ 680 0 return reportName;
+ 681
+ }
682
683
684
-
+ 685
686
-
- 687
-
- 688
-
- 689
-
- 690
-
- 691
- public void generate(Sink sink, SinkFactory sinkFactory, Locale locale) throws MavenReportException {
- 692 0 final Engine engine = executeDependencyCheck();
- 693 0 generateMavenSiteReport(engine, sink);
- 694 0 }
- 695
-
- 696
-
- 697
-
- 698
-
- 699
-
- 700
-
- 701
-
- 702
- public String getOutputName() {
- 703 0 return reportName;
- 704
- }
- 705
-
- 706
-
- 707
-
- 708
-
- 709
- 710
+ 687
- 711
+ 688
public String getCategoryName() {
- 712 0 return MavenReport.CATEGORY_PROJECT_REPORTS;
- 713
+ 689 0 return MavenReport.CATEGORY_PROJECT_REPORTS;
+ 690
}
- 714
+ 691
- 715
+ 692
- 716
+ 693
- 717
+ 694
- 718
+ 695
- 719
+ 696
- 720
+ 697
- 721
+ 698
public String getName(Locale locale) {
- 722 0 return name;
- 723
+ 699 0 return name;
+ 700
}
- 724
+ 701
- 725
+ 702
- 726
+ 703
- 727
+ 704
- 728
+ 705
- 729
+ 706
- 730
+ 707
public void setReportOutputDirectory(File directory) {
- 731 0 reportOutputDirectory = directory;
- 732 0 }
- 733
+ 708 0 reportOutputDirectory = directory;
+ 709 0 }
+ 710
- 734
+ 711
- 735
+ 712
- 736
+ 713
- 737
+ 714
- 738
+ 715
- 739
+ 716
public File getReportOutputDirectory() {
- 740 0 return reportOutputDirectory;
- 741
+ 717 0 return reportOutputDirectory;
+ 718
}
- 742
+ 719
- 743
+ 720
- 744
+ 721
- 745
+ 722
- 746
+ 723
- 747
+ 724
- 748
+ 725
- 749
+ 726
- 750
+ 727
public String getDescription(Locale locale) {
- 751 0 return description;
- 752
+ 728 0 return description;
+ 729
}
- 753
+ 730
- 754
+ 731
- 755
+ 732
- 756
+ 733
- 757
+ 734
- 758
+ 735
- 759
+ 736
public boolean isExternalReport() {
- 760 0 return externalReport;
- 761
+ 737 0 return externalReport;
+ 738
}
- 762
+ 739
- 763
+ 740
- 764
+ 741
- 765
+ 742
- 766
+ 743
- 767
+ 744
- 768
+ 745
public boolean canGenerateReport() {
- 769 0 return true ;
- 770
+ 746 0 return true ;
+ 747
}
- 771
+ 748
- 772
+ 749
- 773
+ 750
- 774
+ 751
- 775
+ 752
- 776
+ 753
- 777
+ 754
- 778
+ 755
- 779
+ 756
- 780
+ 757
- 781
+ 758
private void checkForFailure(List<Dependency> dependencies) throws MojoFailureException {
- 782 0 final StringBuilder ids = new StringBuilder();
- 783 0 for (Dependency d : dependencies) {
- 784 0 for (Vulnerability v : d.getVulnerabilities()) {
- 785 0 if (v.getCvssScore() >= failBuildOnCVSS) {
- 786 0 if (ids.length() == 0) {
- 787 0 ids.append(v.getName());
- 788
+ 759 0 final StringBuilder ids = new StringBuilder();
+ 760 0 for (Dependency d : dependencies) {
+ 761 0 for (Vulnerability v : d.getVulnerabilities()) {
+ 762 0 if (v.getCvssScore() >= failBuildOnCVSS) {
+ 763 0 if (ids.length() == 0) {
+ 764 0 ids.append(v.getName());
+ 765
} else {
- 789 0 ids.append(", " ).append(v.getName());
- 790
+ 766 0 ids.append(", " ).append(v.getName());
+ 767
}
- 791
+ 768
}
- 792
+ 769
}
- 793
+ 770
}
- 794 0 if (ids.length() > 0) {
- 795 0 final String msg = String.format("%n%nDependency-Check Failure:%n"
- 796
+ 771 0 if (ids.length() > 0) {
+ 772 0 final String msg = String.format("%n%nDependency-Check Failure:%n"
+ 773
+ "One or more dependencies were identified with vulnerabilities that have a CVSS score greater then '%.1f': %s%n"
- 797
+ 774
+ "See the dependency-check report for more details.%n%n" , failBuildOnCVSS, ids.toString());
- 798 0 throw new MojoFailureException(msg);
- 799
+ 775 0 throw new MojoFailureException(msg);
+ 776
}
- 800 0 }
- 801
+ 777 0 }
+ 778
}
