mirror of
https://github.com/ysoftdevs/DependencyCheck.git
synced 2026-03-20 08:14:44 +01:00
version 1.2.2 of project documentation
This commit is contained in:
Jeremy Long
@@ -12,7 +12,7 @@
|
||||
<div class="separator"> </div>
|
||||
<table class="report">
|
||||
<thead><tr> <td class="heading">Classes in this File</td> <td class="heading"><a class="dfn" href="help.html" onclick="popupwindow('help.html'); return false;">Line Coverage</a></td> <td class="heading"><a class="dfn" href="help.html" onclick="popupwindow('help.html'); return false;">Branch Coverage</a></td> <td class="heading"><a class="dfn" href="help.html" onclick="popupwindow('help.html'); return false;">Complexity</a></td></tr></thead>
|
||||
<tr><td><a href="org.owasp.dependencycheck.analyzer.FalsePositiveAnalyzer.html">FalsePositiveAnalyzer</a></td><td><table cellpadding="0px" cellspacing="0px" class="percentgraph"><tr class="percentgraph"><td align="right" class="percentgraph" width="40">48%</td><td class="percentgraph"><div class="percentgraph"><div class="greenbar" style="width:48px"><span class="text">73/149</span></div></div></td></tr></table></td><td><table cellpadding="0px" cellspacing="0px" class="percentgraph"><tr class="percentgraph"><td align="right" class="percentgraph" width="40">27%</td><td class="percentgraph"><div class="percentgraph"><div class="greenbar" style="width:27px"><span class="text">48/172</span></div></div></td></tr></table></td><td class="value"><span class="hidden">8.75;</span>8.75</td></tr>
|
||||
<tr><td><a href="org.owasp.dependencycheck.analyzer.FalsePositiveAnalyzer.html">FalsePositiveAnalyzer</a></td><td><table cellpadding="0px" cellspacing="0px" class="percentgraph"><tr class="percentgraph"><td align="right" class="percentgraph" width="40">50%</td><td class="percentgraph"><div class="percentgraph"><div class="greenbar" style="width:50px"><span class="text">79/157</span></div></div></td></tr></table></td><td><table cellpadding="0px" cellspacing="0px" class="percentgraph"><tr class="percentgraph"><td align="right" class="percentgraph" width="40">28%</td><td class="percentgraph"><div class="percentgraph"><div class="greenbar" style="width:28px"><span class="text">54/190</span></div></div></td></tr></table></td><td class="value"><span class="hidden">9.5;</span>9.5</td></tr>
|
||||
|
||||
</table>
|
||||
<div class="separator"> </div>
|
||||
@@ -111,7 +111,7 @@
|
||||
<td class="src"><pre class="src"> <span class="comment"> * The Logger.</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 47</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment"> */</span></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 48</td> <td class="nbHitsCovered"> 1</td> <td class="src"><pre class="src"> <span class="keyword">private</span> <span class="keyword">static</span> <span class="keyword">final</span> Logger LOGGER = Logger.getLogger(FalsePositiveAnalyzer.<span class="keyword">class</span>.getName());</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 48</td> <td class="nbHitsCovered"> 2</td> <td class="src"><pre class="src"> <span class="keyword">private</span> <span class="keyword">static</span> <span class="keyword">final</span> Logger LOGGER = Logger.getLogger(FalsePositiveAnalyzer.<span class="keyword">class</span>.getName());</pre></td></tr>
|
||||
<tr> <td class="numLine"> 49</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment">//<editor-fold defaultstate="collapsed" desc="All standard implementation details of Analyzer"></span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 50</td> <td class="nbHits"> </td>
|
||||
@@ -128,7 +128,7 @@
|
||||
<td class="src"><pre class="src"> <span class="comment"> * The phase that this analyzer is intended to run in.</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 56</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment"> */</span></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 57</td> <td class="nbHitsCovered"> 1</td> <td class="src"><pre class="src"> <span class="keyword">private</span> <span class="keyword">static</span> <span class="keyword">final</span> AnalysisPhase ANALYSIS_PHASE = AnalysisPhase.POST_IDENTIFIER_ANALYSIS;</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 57</td> <td class="nbHitsCovered"> 2</td> <td class="src"><pre class="src"> <span class="keyword">private</span> <span class="keyword">static</span> <span class="keyword">final</span> AnalysisPhase ANALYSIS_PHASE = AnalysisPhase.POST_IDENTIFIER_ANALYSIS;</pre></td></tr>
|
||||
<tr> <td class="numLine"> 58</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> </pre></td></tr>
|
||||
<tr> <td class="numLine"> 59</td> <td class="nbHits"> </td>
|
||||
@@ -143,7 +143,7 @@
|
||||
<td class="src"><pre class="src"> <span class="comment"> */</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 64</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="keyword">public</span> String getName() {</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 65</td> <td class="nbHitsCovered"> 5</td> <td class="src"><pre class="src"> <span class="keyword">return</span> ANALYZER_NAME;</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 65</td> <td class="nbHitsCovered"> 10</td> <td class="src"><pre class="src"> <span class="keyword">return</span> ANALYZER_NAME;</pre></td></tr>
|
||||
<tr> <td class="numLine"> 66</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> }</pre></td></tr>
|
||||
<tr> <td class="numLine"> 67</td> <td class="nbHits"> </td>
|
||||
@@ -160,7 +160,7 @@
|
||||
<td class="src"><pre class="src"> <span class="comment"> */</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 73</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="keyword">public</span> AnalysisPhase getAnalysisPhase() {</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 74</td> <td class="nbHitsCovered"> 2</td> <td class="src"><pre class="src"> <span class="keyword">return</span> ANALYSIS_PHASE;</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 74</td> <td class="nbHitsCovered"> 4</td> <td class="src"><pre class="src"> <span class="keyword">return</span> ANALYSIS_PHASE;</pre></td></tr>
|
||||
<tr> <td class="numLine"> 75</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> }</pre></td></tr>
|
||||
<tr> <td class="numLine"> 76</td> <td class="nbHits"> </td>
|
||||
@@ -185,13 +185,13 @@
|
||||
<td class="src"><pre class="src"> @Override</pre></td></tr>
|
||||
<tr> <td class="numLine"> 86</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="keyword">public</span> <span class="keyword">void</span> analyze(Dependency dependency, Engine engine) <span class="keyword">throws</span> AnalysisException {</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 87</td> <td class="nbHitsCovered"> 3</td> <td class="src"><pre class="src"> removeJreEntries(dependency);</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 88</td> <td class="nbHitsCovered"> 3</td> <td class="src"><pre class="src"> removeBadMatches(dependency);</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 89</td> <td class="nbHitsCovered"> 3</td> <td class="src"><pre class="src"> removeWrongVersionMatches(dependency);</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 90</td> <td class="nbHitsCovered"> 3</td> <td class="src"><pre class="src"> removeSpuriousCPE(dependency);</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 91</td> <td class="nbHitsCovered"> 3</td> <td class="src"><pre class="src"> removeDuplicativeEntriesFromJar(dependency, engine);</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 92</td> <td class="nbHitsCovered"> 3</td> <td class="src"><pre class="src"> addFalseNegativeCPEs(dependency);</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 93</td> <td class="nbHitsCovered"> 3</td> <td class="src"><pre class="src"> }</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 87</td> <td class="nbHitsCovered"> 6</td> <td class="src"><pre class="src"> removeJreEntries(dependency);</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 88</td> <td class="nbHitsCovered"> 6</td> <td class="src"><pre class="src"> removeBadMatches(dependency);</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 89</td> <td class="nbHitsCovered"> 6</td> <td class="src"><pre class="src"> removeWrongVersionMatches(dependency);</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 90</td> <td class="nbHitsCovered"> 6</td> <td class="src"><pre class="src"> removeSpuriousCPE(dependency);</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 91</td> <td class="nbHitsCovered"> 6</td> <td class="src"><pre class="src"> removeDuplicativeEntriesFromJar(dependency, engine);</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 92</td> <td class="nbHitsCovered"> 6</td> <td class="src"><pre class="src"> addFalseNegativeCPEs(dependency);</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 93</td> <td class="nbHitsCovered"> 6</td> <td class="src"><pre class="src"> }</pre></td></tr>
|
||||
<tr> <td class="numLine"> 94</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> </pre></td></tr>
|
||||
<tr> <td class="numLine"> 95</td> <td class="nbHits"> </td>
|
||||
@@ -234,28 +234,28 @@
|
||||
<td class="src"><pre class="src"> @SuppressWarnings(<span class="string">"null"</span>)</pre></td></tr>
|
||||
<tr> <td class="numLine"> 114</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="keyword">private</span> <span class="keyword">void</span> removeSpuriousCPE(Dependency dependency) {</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 115</td> <td class="nbHitsCovered"> 3</td> <td class="src"><pre class="src"> <span class="keyword">final</span> List<Identifier> ids = <span class="keyword">new</span> ArrayList<Identifier>();</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 116</td> <td class="nbHitsCovered"> 3</td> <td class="src"><pre class="src"> ids.addAll(dependency.getIdentifiers());</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 117</td> <td class="nbHitsCovered"> 3</td> <td class="src"><pre class="src"> Collections.sort(ids);</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 118</td> <td class="nbHitsCovered"> 3</td> <td class="src"><pre class="src"> <span class="keyword">final</span> ListIterator<Identifier> mainItr = ids.listIterator();</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 119</td> <td class="nbHitsCovered"><a title="Line 119: Conditional coverage 100% (2/2)."> 5</a></td> <td class="src"><pre class="src"> <a title="Line 119: Conditional coverage 100% (2/2)."> <span class="keyword">while</span> (mainItr.hasNext()) {</a></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 120</td> <td class="nbHitsCovered"> 2</td> <td class="src"><pre class="src"> <span class="keyword">final</span> Identifier currentId = mainItr.next();</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 121</td> <td class="nbHitsCovered"> 2</td> <td class="src"><pre class="src"> <span class="keyword">final</span> VulnerableSoftware currentCpe = parseCpe(currentId.getType(), currentId.getValue());</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 122</td> <td class="nbHitsUncovered"><a title="Line 122: Conditional coverage 50% (1/2)."> 2</a></td> <td class="src"><pre class="src"><span class="srcUncovered"> <a title="Line 122: Conditional coverage 50% (1/2)."> <span class="keyword">if</span> (currentCpe == <span class="keyword">null</span>) {</a></span></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 115</td> <td class="nbHitsCovered"> 6</td> <td class="src"><pre class="src"> <span class="keyword">final</span> List<Identifier> ids = <span class="keyword">new</span> ArrayList<Identifier>();</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 116</td> <td class="nbHitsCovered"> 6</td> <td class="src"><pre class="src"> ids.addAll(dependency.getIdentifiers());</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 117</td> <td class="nbHitsCovered"> 6</td> <td class="src"><pre class="src"> Collections.sort(ids);</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 118</td> <td class="nbHitsCovered"> 6</td> <td class="src"><pre class="src"> <span class="keyword">final</span> ListIterator<Identifier> mainItr = ids.listIterator();</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 119</td> <td class="nbHitsCovered"><a title="Line 119: Conditional coverage 100% (2/2)."> 10</a></td> <td class="src"><pre class="src"> <a title="Line 119: Conditional coverage 100% (2/2)."> <span class="keyword">while</span> (mainItr.hasNext()) {</a></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 120</td> <td class="nbHitsCovered"> 4</td> <td class="src"><pre class="src"> <span class="keyword">final</span> Identifier currentId = mainItr.next();</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 121</td> <td class="nbHitsCovered"> 4</td> <td class="src"><pre class="src"> <span class="keyword">final</span> VulnerableSoftware currentCpe = parseCpe(currentId.getType(), currentId.getValue());</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 122</td> <td class="nbHitsUncovered"><a title="Line 122: Conditional coverage 50% (1/2)."> 4</a></td> <td class="src"><pre class="src"><span class="srcUncovered"> <a title="Line 122: Conditional coverage 50% (1/2)."> <span class="keyword">if</span> (currentCpe == <span class="keyword">null</span>) {</a></span></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 123</td> <td class="nbHitsUncovered"> 0</td> <td class="src"><pre class="src"><span class="srcUncovered"> <span class="keyword">continue</span>;</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 124</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> }</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 125</td> <td class="nbHitsCovered"> 2</td> <td class="src"><pre class="src"> <span class="keyword">final</span> ListIterator<Identifier> subItr = ids.listIterator(mainItr.nextIndex());</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 126</td> <td class="nbHitsCovered"><a title="Line 126: Conditional coverage 100% (2/2)."> 3</a></td> <td class="src"><pre class="src"> <a title="Line 126: Conditional coverage 100% (2/2)."> <span class="keyword">while</span> (subItr.hasNext()) {</a></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 127</td> <td class="nbHitsCovered"> 1</td> <td class="src"><pre class="src"> <span class="keyword">final</span> Identifier nextId = subItr.next();</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 128</td> <td class="nbHitsCovered"> 1</td> <td class="src"><pre class="src"> <span class="keyword">final</span> VulnerableSoftware nextCpe = parseCpe(nextId.getType(), nextId.getValue());</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 129</td> <td class="nbHitsUncovered"><a title="Line 129: Conditional coverage 50% (1/2)."> 1</a></td> <td class="src"><pre class="src"><span class="srcUncovered"> <a title="Line 129: Conditional coverage 50% (1/2)."> <span class="keyword">if</span> (nextCpe == <span class="keyword">null</span>) {</a></span></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 125</td> <td class="nbHitsCovered"> 4</td> <td class="src"><pre class="src"> <span class="keyword">final</span> ListIterator<Identifier> subItr = ids.listIterator(mainItr.nextIndex());</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 126</td> <td class="nbHitsCovered"><a title="Line 126: Conditional coverage 100% (2/2)."> 6</a></td> <td class="src"><pre class="src"> <a title="Line 126: Conditional coverage 100% (2/2)."> <span class="keyword">while</span> (subItr.hasNext()) {</a></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 127</td> <td class="nbHitsCovered"> 2</td> <td class="src"><pre class="src"> <span class="keyword">final</span> Identifier nextId = subItr.next();</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 128</td> <td class="nbHitsCovered"> 2</td> <td class="src"><pre class="src"> <span class="keyword">final</span> VulnerableSoftware nextCpe = parseCpe(nextId.getType(), nextId.getValue());</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 129</td> <td class="nbHitsUncovered"><a title="Line 129: Conditional coverage 50% (1/2)."> 2</a></td> <td class="src"><pre class="src"><span class="srcUncovered"> <a title="Line 129: Conditional coverage 50% (1/2)."> <span class="keyword">if</span> (nextCpe == <span class="keyword">null</span>) {</a></span></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 130</td> <td class="nbHitsUncovered"> 0</td> <td class="src"><pre class="src"><span class="srcUncovered"> <span class="keyword">continue</span>;</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 131</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> }</pre></td></tr>
|
||||
<tr> <td class="numLine"> 132</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment">//TODO fix the version problem below</span></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 133</td> <td class="nbHitsUncovered"><a title="Line 133: Conditional coverage 50% (1/2)."> 1</a></td> <td class="src"><pre class="src"><span class="srcUncovered"> <a title="Line 133: Conditional coverage 50% (1/2)."> <span class="keyword">if</span> (currentCpe.getVendor().equals(nextCpe.getVendor())) {</a></span></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 133</td> <td class="nbHitsUncovered"><a title="Line 133: Conditional coverage 50% (1/2)."> 2</a></td> <td class="src"><pre class="src"><span class="srcUncovered"> <a title="Line 133: Conditional coverage 50% (1/2)."> <span class="keyword">if</span> (currentCpe.getVendor().equals(nextCpe.getVendor())) {</a></span></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 134</td> <td class="nbHitsUncovered"><a title="Line 134: Conditional coverage 0% (0/2)."> 0</a></td> <td class="src"><pre class="src"><span class="srcUncovered"> <a title="Line 134: Conditional coverage 0% (0/2)."> <span class="keyword">if</span> (currentCpe.getProduct().equals(nextCpe.getProduct())) {</a></span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 135</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment">// see if one is contained in the other.. remove the contained one from dependency.getIdentifier</span></pre></td></tr>
|
||||
@@ -286,414 +286,450 @@
|
||||
<td class="src"><pre class="src"> }</pre></td></tr>
|
||||
<tr> <td class="numLine"> 155</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> }</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 156</td> <td class="nbHitsCovered"> 1</td> <td class="src"><pre class="src"> }</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 157</td> <td class="nbHitsCovered"> 2</td> <td class="src"><pre class="src"> }</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 158</td> <td class="nbHitsCovered"> 3</td> <td class="src"><pre class="src"> }</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 156</td> <td class="nbHitsCovered"> 2</td> <td class="src"><pre class="src"> }</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 157</td> <td class="nbHitsCovered"> 4</td> <td class="src"><pre class="src"> }</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 158</td> <td class="nbHitsCovered"> 6</td> <td class="src"><pre class="src"> }</pre></td></tr>
|
||||
<tr> <td class="numLine"> 159</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment">/**</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 160</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment"> * Regex to identify core java libraries and a few other commonly misidentified ones.</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 161</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment"> */</span></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 162</td> <td class="nbHitsCovered"> 1</td> <td class="src"><pre class="src"> <span class="keyword">public</span> <span class="keyword">static</span> <span class="keyword">final</span> Pattern CORE_JAVA = Pattern.compile(<span class="string">"^cpe:/a:(sun|oracle|ibm):(j2[ems]e|"</span></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 162</td> <td class="nbHitsCovered"> 2</td> <td class="src"><pre class="src"> <span class="keyword">public</span> <span class="keyword">static</span> <span class="keyword">final</span> Pattern CORE_JAVA = Pattern.compile(<span class="string">"^cpe:/a:(sun|oracle|ibm):(j2[ems]e|"</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 163</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> + <span class="string">"java(_platform_micro_edition|_runtime_environment|_se|virtual_machine|se_development_kit|fx)?|"</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 164</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> + <span class="string">"jdk|jre|jsf|jsse)($|:.*)"</span>);</pre></td></tr>
|
||||
<td class="src"><pre class="src"> + <span class="string">"jdk|jre|jsse)($|:.*)"</span>);</pre></td></tr>
|
||||
<tr> <td class="numLine"> 165</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment">/**</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 166</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment"> * Regex to identify core java library files. This is currently incomplete.</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 167</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment"> */</span></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 168</td> <td class="nbHitsCovered"> 1</td> <td class="src"><pre class="src"> <span class="keyword">public</span> <span class="keyword">static</span> <span class="keyword">final</span> Pattern CORE_FILES = Pattern.compile(<span class="string">"^((alt[-])?rt|jsf[-].*|jsse|jfxrt|jfr|jce|javaws|deploy|charsets)\\.jar$"</span>);</pre></td></tr>
|
||||
<tr> <td class="numLine"> 169</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> </pre></td></tr>
|
||||
<tr> <td class="numLine"> 166</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment">/**</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 167</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment"> * Regex to identify core jsf libraries.</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 168</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment"> */</span></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 169</td> <td class="nbHitsCovered"> 2</td> <td class="src"><pre class="src"> <span class="keyword">public</span> <span class="keyword">static</span> <span class="keyword">final</span> Pattern CORE_JAVA_JSF = Pattern.compile(<span class="string">"^cpe:/a:(sun|oracle|ibm):jsf($|:.*)"</span>);</pre></td></tr>
|
||||
<tr> <td class="numLine"> 170</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment">/**</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 171</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment"> * Removes any CPE entries for the JDK/JRE unless the filename ends with rt.jar</span></pre></td></tr>
|
||||
<td class="src"><pre class="src"> <span class="comment"> * Regex to identify core java library files. This is currently incomplete.</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 172</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment"> *</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 173</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment"> * @param dependency the dependency to remove JRE CPEs from</span></pre></td></tr>
|
||||
<td class="src"><pre class="src"> <span class="comment"> */</span></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 173</td> <td class="nbHitsCovered"> 2</td> <td class="src"><pre class="src"> <span class="keyword">public</span> <span class="keyword">static</span> <span class="keyword">final</span> Pattern CORE_FILES = Pattern.compile(<span class="string">"(^|/)((alt[-])?rt|jsse|jfxrt|jfr|jce|javaws|deploy|charsets)\\.jar$"</span>);</pre></td></tr>
|
||||
<tr> <td class="numLine"> 174</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment"> */</span></pre></td></tr>
|
||||
<td class="src"><pre class="src"> <span class="comment">/**</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 175</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="keyword">private</span> <span class="keyword">void</span> removeJreEntries(Dependency dependency) {</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 176</td> <td class="nbHitsCovered"> 3</td> <td class="src"><pre class="src"> <span class="keyword">final</span> Set<Identifier> identifiers = dependency.getIdentifiers();</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 177</td> <td class="nbHitsCovered"> 3</td> <td class="src"><pre class="src"> <span class="keyword">final</span> Iterator<Identifier> itr = identifiers.iterator();</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 178</td> <td class="nbHitsCovered"><a title="Line 178: Conditional coverage 100% (2/2)."> 6</a></td> <td class="src"><pre class="src"> <a title="Line 178: Conditional coverage 100% (2/2)."> <span class="keyword">while</span> (itr.hasNext()) {</a></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 179</td> <td class="nbHitsCovered"> 3</td> <td class="src"><pre class="src"> <span class="keyword">final</span> Identifier i = itr.next();</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 180</td> <td class="nbHitsCovered"> 3</td> <td class="src"><pre class="src"> <span class="keyword">final</span> Matcher coreCPE = CORE_JAVA.matcher(i.getValue());</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 181</td> <td class="nbHitsCovered"> 3</td> <td class="src"><pre class="src"> <span class="keyword">final</span> Matcher coreFiles = CORE_FILES.matcher(dependency.getFileName());</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 182</td> <td class="nbHitsUncovered"><a title="Line 182: Conditional coverage 25% (1/4) [each condition: 50%, 0%]."> 3</a></td> <td class="src"><pre class="src"><span class="srcUncovered"> <a title="Line 182: Conditional coverage 25% (1/4) [each condition: 50%, 0%]."> <span class="keyword">if</span> (coreCPE.matches() && !coreFiles.matches()) {</a></span></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 183</td> <td class="nbHitsUncovered"> 0</td> <td class="src"><pre class="src"><span class="srcUncovered"> itr.remove();</span></pre></td></tr>
|
||||
<td class="src"><pre class="src"> <span class="comment"> * Regex to identify core jsf java library files. This is currently incomplete.</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 176</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment"> */</span></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 177</td> <td class="nbHitsCovered"> 2</td> <td class="src"><pre class="src"> <span class="keyword">public</span> <span class="keyword">static</span> <span class="keyword">final</span> Pattern CORE_JSF_FILES = Pattern.compile(<span class="string">"(^|/)jsf[-][^/]*\\.jar$"</span>);</pre></td></tr>
|
||||
<tr> <td class="numLine"> 178</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> </pre></td></tr>
|
||||
<tr> <td class="numLine"> 179</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment">/**</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 180</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment"> * Removes any CPE entries for the JDK/JRE unless the filename ends with rt.jar</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 181</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment"> *</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 182</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment"> * @param dependency the dependency to remove JRE CPEs from</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 183</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment"> */</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 184</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> }</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 185</td> <td class="nbHitsCovered"> 3</td> <td class="src"><pre class="src"> }</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 186</td> <td class="nbHitsCovered"> 3</td> <td class="src"><pre class="src"> }</pre></td></tr>
|
||||
<tr> <td class="numLine"> 187</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> </pre></td></tr>
|
||||
<tr> <td class="numLine"> 188</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment">/**</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 189</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment"> * Parses a CPE string into an IndexEntry.</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 190</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment"> *</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 191</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment"> * @param type the type of identifier</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 192</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment"> * @param value the cpe identifier to parse</span></pre></td></tr>
|
||||
<td class="src"><pre class="src"> <span class="keyword">private</span> <span class="keyword">void</span> removeJreEntries(Dependency dependency) {</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 185</td> <td class="nbHitsCovered"> 6</td> <td class="src"><pre class="src"> <span class="keyword">final</span> Set<Identifier> identifiers = dependency.getIdentifiers();</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 186</td> <td class="nbHitsCovered"> 6</td> <td class="src"><pre class="src"> <span class="keyword">final</span> Iterator<Identifier> itr = identifiers.iterator();</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 187</td> <td class="nbHitsCovered"><a title="Line 187: Conditional coverage 100% (2/2)."> 12</a></td> <td class="src"><pre class="src"> <a title="Line 187: Conditional coverage 100% (2/2)."> <span class="keyword">while</span> (itr.hasNext()) {</a></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 188</td> <td class="nbHitsCovered"> 6</td> <td class="src"><pre class="src"> <span class="keyword">final</span> Identifier i = itr.next();</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 189</td> <td class="nbHitsCovered"> 6</td> <td class="src"><pre class="src"> <span class="keyword">final</span> Matcher coreCPE = CORE_JAVA.matcher(i.getValue());</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 190</td> <td class="nbHitsCovered"> 6</td> <td class="src"><pre class="src"> <span class="keyword">final</span> Matcher coreFiles = CORE_FILES.matcher(dependency.getFileName());</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 191</td> <td class="nbHitsUncovered"><a title="Line 191: Conditional coverage 25% (1/4) [each condition: 50%, 0%]."> 6</a></td> <td class="src"><pre class="src"><span class="srcUncovered"> <a title="Line 191: Conditional coverage 25% (1/4) [each condition: 50%, 0%]."> <span class="keyword">if</span> (coreCPE.matches() && !coreFiles.matches()) {</a></span></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 192</td> <td class="nbHitsUncovered"> 0</td> <td class="src"><pre class="src"><span class="srcUncovered"> itr.remove();</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 193</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment"> * @return an VulnerableSoftware object constructed from the identifier</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 194</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment"> */</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 195</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="keyword">private</span> VulnerableSoftware parseCpe(String type, String value) {</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 196</td> <td class="nbHitsUncovered"><a title="Line 196: Conditional coverage 50% (1/2)."> 3</a></td> <td class="src"><pre class="src"><span class="srcUncovered"> <a title="Line 196: Conditional coverage 50% (1/2)."> <span class="keyword">if</span> (!<span class="string">"cpe"</span>.equals(type)) {</a></span></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 197</td> <td class="nbHitsUncovered"> 0</td> <td class="src"><pre class="src"><span class="srcUncovered"> <span class="keyword">return</span> <span class="keyword">null</span>;</span></pre></td></tr>
|
||||
<td class="src"><pre class="src"> }</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 194</td> <td class="nbHitsCovered"> 6</td> <td class="src"><pre class="src"> <span class="keyword">final</span> Matcher coreJsfCPE = CORE_JAVA_JSF.matcher(i.getValue());</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 195</td> <td class="nbHitsCovered"> 6</td> <td class="src"><pre class="src"> <span class="keyword">final</span> Matcher coreJsfFiles = CORE_JSF_FILES.matcher(dependency.getFileName());</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 196</td> <td class="nbHitsUncovered"><a title="Line 196: Conditional coverage 25% (1/4) [each condition: 50%, 0%]."> 6</a></td> <td class="src"><pre class="src"><span class="srcUncovered"> <a title="Line 196: Conditional coverage 25% (1/4) [each condition: 50%, 0%]."> <span class="keyword">if</span> (coreJsfCPE.matches() && !coreJsfFiles.matches()) {</a></span></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 197</td> <td class="nbHitsUncovered"> 0</td> <td class="src"><pre class="src"><span class="srcUncovered"> itr.remove();</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 198</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> }</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 199</td> <td class="nbHitsCovered"> 3</td> <td class="src"><pre class="src"> <span class="keyword">final</span> VulnerableSoftware cpe = <span class="keyword">new</span> VulnerableSoftware();</pre></td></tr>
|
||||
<tr> <td class="numLine"> 200</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="keyword">try</span> {</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 201</td> <td class="nbHitsCovered"> 3</td> <td class="src"><pre class="src"> cpe.parseName(value);</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 202</td> <td class="nbHitsUncovered"> 0</td> <td class="src"><pre class="src"><span class="srcUncovered"> } <span class="keyword">catch</span> (UnsupportedEncodingException ex) {</span></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 203</td> <td class="nbHitsUncovered"> 0</td> <td class="src"><pre class="src"><span class="srcUncovered"> LOGGER.log(Level.FINEST, <span class="keyword">null</span>, ex);</span></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 204</td> <td class="nbHitsUncovered"> 0</td> <td class="src"><pre class="src"><span class="srcUncovered"> <span class="keyword">return</span> <span class="keyword">null</span>;</span></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 205</td> <td class="nbHitsCovered"> 3</td> <td class="src"><pre class="src"> }</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 206</td> <td class="nbHitsCovered"> 3</td> <td class="src"><pre class="src"> <span class="keyword">return</span> cpe;</pre></td></tr>
|
||||
<td class="src"><pre class="src"> }</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 199</td> <td class="nbHitsCovered"> 6</td> <td class="src"><pre class="src"> }</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 200</td> <td class="nbHitsCovered"> 6</td> <td class="src"><pre class="src"> }</pre></td></tr>
|
||||
<tr> <td class="numLine"> 201</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> </pre></td></tr>
|
||||
<tr> <td class="numLine"> 202</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment">/**</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 203</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment"> * Parses a CPE string into an IndexEntry.</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 204</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment"> *</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 205</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment"> * @param type the type of identifier</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 206</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment"> * @param value the cpe identifier to parse</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 207</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> }</pre></td></tr>
|
||||
<td class="src"><pre class="src"> <span class="comment"> * @return an VulnerableSoftware object constructed from the identifier</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 208</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> </pre></td></tr>
|
||||
<td class="src"><pre class="src"> <span class="comment"> */</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 209</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment">/**</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 210</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment"> * Removes bad CPE matches for a dependency. Unfortunately, right now these are hard-coded patches for specific</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 211</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment"> * problems identified when testing this on a LARGE volume of jar files.</span></pre></td></tr>
|
||||
<td class="src"><pre class="src"> <span class="keyword">private</span> VulnerableSoftware parseCpe(String type, String value) {</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 210</td> <td class="nbHitsUncovered"><a title="Line 210: Conditional coverage 50% (1/2)."> 6</a></td> <td class="src"><pre class="src"><span class="srcUncovered"> <a title="Line 210: Conditional coverage 50% (1/2)."> <span class="keyword">if</span> (!<span class="string">"cpe"</span>.equals(type)) {</a></span></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 211</td> <td class="nbHitsUncovered"> 0</td> <td class="src"><pre class="src"><span class="srcUncovered"> <span class="keyword">return</span> <span class="keyword">null</span>;</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 212</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment"> *</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 213</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment"> * @param dependency the dependency to analyze</span></pre></td></tr>
|
||||
<td class="src"><pre class="src"> }</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 213</td> <td class="nbHitsCovered"> 6</td> <td class="src"><pre class="src"> <span class="keyword">final</span> VulnerableSoftware cpe = <span class="keyword">new</span> VulnerableSoftware();</pre></td></tr>
|
||||
<tr> <td class="numLine"> 214</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment"> */</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 215</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="keyword">private</span> <span class="keyword">void</span> removeBadMatches(Dependency dependency) {</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 216</td> <td class="nbHitsCovered"> 3</td> <td class="src"><pre class="src"> <span class="keyword">final</span> Set<Identifier> identifiers = dependency.getIdentifiers();</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 217</td> <td class="nbHitsCovered"> 3</td> <td class="src"><pre class="src"> <span class="keyword">final</span> Iterator<Identifier> itr = identifiers.iterator();</pre></td></tr>
|
||||
<tr> <td class="numLine"> 218</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> </pre></td></tr>
|
||||
<tr> <td class="numLine"> 219</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment">/* TODO - can we utilize the pom's groupid and artifactId to filter??? most of</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 220</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment"> * these are due to low quality data. Other idea would be to say any CPE</span></pre></td></tr>
|
||||
<td class="src"><pre class="src"> <span class="keyword">try</span> {</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 215</td> <td class="nbHitsCovered"> 6</td> <td class="src"><pre class="src"> cpe.parseName(value);</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 216</td> <td class="nbHitsUncovered"> 0</td> <td class="src"><pre class="src"><span class="srcUncovered"> } <span class="keyword">catch</span> (UnsupportedEncodingException ex) {</span></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 217</td> <td class="nbHitsUncovered"> 0</td> <td class="src"><pre class="src"><span class="srcUncovered"> LOGGER.log(Level.FINEST, <span class="keyword">null</span>, ex);</span></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 218</td> <td class="nbHitsUncovered"> 0</td> <td class="src"><pre class="src"><span class="srcUncovered"> <span class="keyword">return</span> <span class="keyword">null</span>;</span></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 219</td> <td class="nbHitsCovered"> 6</td> <td class="src"><pre class="src"> }</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 220</td> <td class="nbHitsCovered"> 6</td> <td class="src"><pre class="src"> <span class="keyword">return</span> cpe;</pre></td></tr>
|
||||
<tr> <td class="numLine"> 221</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment"> * found based on LOW confidence evidence should have a different CPE type? (this</span></pre></td></tr>
|
||||
<td class="src"><pre class="src"> }</pre></td></tr>
|
||||
<tr> <td class="numLine"> 222</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment"> * might be a better solution then just removing the URL for "best-guess" matches).</span></pre></td></tr>
|
||||
<td class="src"><pre class="src"> </pre></td></tr>
|
||||
<tr> <td class="numLine"> 223</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment"> */</span></pre></td></tr>
|
||||
<td class="src"><pre class="src"> <span class="comment">/**</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 224</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment">//Set<Evidence> groupId = dependency.getVendorEvidence().getEvidence("pom", "groupid");</span></pre></td></tr>
|
||||
<td class="src"><pre class="src"> <span class="comment"> * Removes bad CPE matches for a dependency. Unfortunately, right now these are hard-coded patches for specific</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 225</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment">//Set<Evidence> artifactId = dependency.getVendorEvidence().getEvidence("pom", "artifactid");</span></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 226</td> <td class="nbHitsCovered"><a title="Line 226: Conditional coverage 100% (2/2)."> 6</a></td> <td class="src"><pre class="src"> <a title="Line 226: Conditional coverage 100% (2/2)."> <span class="keyword">while</span> (itr.hasNext()) {</a></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 227</td> <td class="nbHitsCovered"> 3</td> <td class="src"><pre class="src"> <span class="keyword">final</span> Identifier i = itr.next();</pre></td></tr>
|
||||
<tr> <td class="numLine"> 228</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment">//TODO move this startsWith expression to a configuration file?</span></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 229</td> <td class="nbHitsUncovered"><a title="Line 229: Conditional coverage 50% (1/2)."> 3</a></td> <td class="src"><pre class="src"><span class="srcUncovered"> <a title="Line 229: Conditional coverage 50% (1/2)."> <span class="keyword">if</span> (<span class="string">"cpe"</span>.equals(i.getType())) {</a></span></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 230</td> <td class="nbHitsUncovered"><a title="Line 230: Conditional coverage 39% (11/28) [each condition: 50%, 100%, 50%, 50%, 50%, 50%, 50%, 50%, 50%, 50%, 0%, 0%, 0%, 0%]."> 3</a></td> <td class="src"><pre class="src"><span class="srcUncovered"> <a title="Line 230: Conditional coverage 39% (11/28) [each condition: 50%, 100%, 50%, 50%, 50%, 50%, 50%, 50%, 50%, 50%, 0%, 0%, 0%, 0%]."> <span class="keyword">if</span> ((i.getValue().matches(<span class="string">".*c\\+\\+.*"</span>)</a></span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 231</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> || i.getValue().startsWith(<span class="string">"cpe:/a:file:file"</span>)</pre></td></tr>
|
||||
<tr> <td class="numLine"> 232</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> || i.getValue().startsWith(<span class="string">"cpe:/a:mozilla:mozilla"</span>)</pre></td></tr>
|
||||
<tr> <td class="numLine"> 233</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> || i.getValue().startsWith(<span class="string">"cpe:/a:cvs:cvs"</span>)</pre></td></tr>
|
||||
<tr> <td class="numLine"> 234</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> || i.getValue().startsWith(<span class="string">"cpe:/a:ftp:ftp"</span>)</pre></td></tr>
|
||||
<tr> <td class="numLine"> 235</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> || i.getValue().startsWith(<span class="string">"cpe:/a:tcp:tcp"</span>)</pre></td></tr>
|
||||
<tr> <td class="numLine"> 236</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> || i.getValue().startsWith(<span class="string">"cpe:/a:ssh:ssh"</span>)</pre></td></tr>
|
||||
<tr> <td class="numLine"> 237</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> || i.getValue().startsWith(<span class="string">"cpe:/a:lookup:lookup"</span>))</pre></td></tr>
|
||||
<tr> <td class="numLine"> 238</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> && (dependency.getFileName().toLowerCase().endsWith(<span class="string">".jar"</span>)</pre></td></tr>
|
||||
<tr> <td class="numLine"> 239</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> || dependency.getFileName().toLowerCase().endsWith(<span class="string">"pom.xml"</span>)</pre></td></tr>
|
||||
<tr> <td class="numLine"> 240</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> || dependency.getFileName().toLowerCase().endsWith(<span class="string">".dll"</span>)</pre></td></tr>
|
||||
<tr> <td class="numLine"> 241</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> || dependency.getFileName().toLowerCase().endsWith(<span class="string">".exe"</span>)</pre></td></tr>
|
||||
<tr> <td class="numLine"> 242</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> || dependency.getFileName().toLowerCase().endsWith(<span class="string">".nuspec"</span>)</pre></td></tr>
|
||||
<tr> <td class="numLine"> 243</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> || dependency.getFileName().toLowerCase().endsWith(<span class="string">".nupkg"</span>))) {</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 244</td> <td class="nbHitsCovered"> 1</td> <td class="src"><pre class="src"> itr.remove();</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 245</td> <td class="nbHitsUncovered"><a title="Line 245: Conditional coverage 21% (3/14) [each condition: 50%, 50%, 50%, 0%, 0%, 0%, 0%]."> 2</a></td> <td class="src"><pre class="src"><span class="srcUncovered"> <a title="Line 245: Conditional coverage 21% (3/14) [each condition: 50%, 50%, 50%, 0%, 0%, 0%, 0%]."> } <span class="keyword">else</span> <span class="keyword">if</span> ((i.getValue().startsWith(<span class="string">"cpe:/a:jquery:jquery"</span>)</a></span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 246</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> || i.getValue().startsWith(<span class="string">"cpe:/a:prototypejs:prototype"</span>)</pre></td></tr>
|
||||
<tr> <td class="numLine"> 247</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> || i.getValue().startsWith(<span class="string">"cpe:/a:yahoo:yui"</span>))</pre></td></tr>
|
||||
<tr> <td class="numLine"> 248</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> && (dependency.getFileName().toLowerCase().endsWith(<span class="string">".jar"</span>)</pre></td></tr>
|
||||
<tr> <td class="numLine"> 249</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> || dependency.getFileName().toLowerCase().endsWith(<span class="string">"pom.xml"</span>)</pre></td></tr>
|
||||
<tr> <td class="numLine"> 250</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> || dependency.getFileName().toLowerCase().endsWith(<span class="string">".dll"</span>)</pre></td></tr>
|
||||
<tr> <td class="numLine"> 251</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> || dependency.getFileName().toLowerCase().endsWith(<span class="string">".exe"</span>))) {</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 252</td> <td class="nbHitsUncovered"> 0</td> <td class="src"><pre class="src"><span class="srcUncovered"> itr.remove();</span></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 253</td> <td class="nbHitsUncovered"><a title="Line 253: Conditional coverage 25% (1/4) [each condition: 50%, 0%]."> 2</a></td> <td class="src"><pre class="src"><span class="srcUncovered"> <a title="Line 253: Conditional coverage 25% (1/4) [each condition: 50%, 0%]."> } <span class="keyword">else</span> <span class="keyword">if</span> (i.getValue().startsWith(<span class="string">"cpe:/a:apache:maven"</span>)</a></span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 254</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> && !dependency.getFileName().toLowerCase().matches(<span class="string">"maven-core-[\\d\\.]+\\.jar"</span>)) {</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 255</td> <td class="nbHitsUncovered"> 0</td> <td class="src"><pre class="src"><span class="srcUncovered"> itr.remove();</span></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 256</td> <td class="nbHitsUncovered"><a title="Line 256: Conditional coverage 25% (1/4) [each condition: 50%, 0%]."> 2</a></td> <td class="src"><pre class="src"><span class="srcUncovered"> <a title="Line 256: Conditional coverage 25% (1/4) [each condition: 50%, 0%]."> } <span class="keyword">else</span> <span class="keyword">if</span> (i.getValue().startsWith(<span class="string">"cpe:/a:m-core:m-core"</span>)</a></span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 257</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> && !dependency.getEvidenceUsed().containsUsedString(<span class="string">"m-core"</span>)) {</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 258</td> <td class="nbHitsUncovered"> 0</td> <td class="src"><pre class="src"><span class="srcUncovered"> itr.remove();</span></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 259</td> <td class="nbHitsUncovered"><a title="Line 259: Conditional coverage 25% (1/4) [each condition: 50%, 0%]."> 2</a></td> <td class="src"><pre class="src"><span class="srcUncovered"> <a title="Line 259: Conditional coverage 25% (1/4) [each condition: 50%, 0%]."> } <span class="keyword">else</span> <span class="keyword">if</span> (i.getValue().startsWith(<span class="string">"cpe:/a:jboss:jboss"</span>)</a></span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 260</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> && !dependency.getFileName().toLowerCase().matches(<span class="string">"jboss-?[\\d\\.-]+(GA)?\\.jar"</span>)) {</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 261</td> <td class="nbHitsUncovered"> 0</td> <td class="src"><pre class="src"><span class="srcUncovered"> itr.remove();</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 262</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> }</pre></td></tr>
|
||||
<tr> <td class="numLine"> 263</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> }</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 264</td> <td class="nbHitsCovered"> 3</td> <td class="src"><pre class="src"> }</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 265</td> <td class="nbHitsCovered"> 3</td> <td class="src"><pre class="src"> }</pre></td></tr>
|
||||
<tr> <td class="numLine"> 266</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> </pre></td></tr>
|
||||
<tr> <td class="numLine"> 267</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment">/**</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 268</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment"> * Removes CPE matches for the wrong version of a dependency. Currently, this only covers Axis 1 & 2.</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 269</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment"> * problems identified when testing this on a LARGE volume of jar files.</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 226</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment"> *</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 270</td> <td class="nbHits"> </td>
|
||||
<tr> <td class="numLine"> 227</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment"> * @param dependency the dependency to analyze</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 228</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment"> */</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 229</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="keyword">private</span> <span class="keyword">void</span> removeBadMatches(Dependency dependency) {</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 230</td> <td class="nbHitsCovered"> 6</td> <td class="src"><pre class="src"> <span class="keyword">final</span> Set<Identifier> identifiers = dependency.getIdentifiers();</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 231</td> <td class="nbHitsCovered"> 6</td> <td class="src"><pre class="src"> <span class="keyword">final</span> Iterator<Identifier> itr = identifiers.iterator();</pre></td></tr>
|
||||
<tr> <td class="numLine"> 232</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> </pre></td></tr>
|
||||
<tr> <td class="numLine"> 233</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment">/* TODO - can we utilize the pom's groupid and artifactId to filter??? most of</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 234</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment"> * these are due to low quality data. Other idea would be to say any CPE</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 235</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment"> * found based on LOW confidence evidence should have a different CPE type? (this</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 236</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment"> * might be a better solution then just removing the URL for "best-guess" matches).</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 237</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment"> */</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 238</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment">//Set<Evidence> groupId = dependency.getVendorEvidence().getEvidence("pom", "groupid");</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 239</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment">//Set<Evidence> artifactId = dependency.getVendorEvidence().getEvidence("pom", "artifactid");</span></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 240</td> <td class="nbHitsCovered"><a title="Line 240: Conditional coverage 100% (2/2)."> 12</a></td> <td class="src"><pre class="src"> <a title="Line 240: Conditional coverage 100% (2/2)."> <span class="keyword">while</span> (itr.hasNext()) {</a></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 241</td> <td class="nbHitsCovered"> 6</td> <td class="src"><pre class="src"> <span class="keyword">final</span> Identifier i = itr.next();</pre></td></tr>
|
||||
<tr> <td class="numLine"> 242</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment">//TODO move this startsWith expression to a configuration file?</span></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 243</td> <td class="nbHitsUncovered"><a title="Line 243: Conditional coverage 50% (1/2)."> 6</a></td> <td class="src"><pre class="src"><span class="srcUncovered"> <a title="Line 243: Conditional coverage 50% (1/2)."> <span class="keyword">if</span> (<span class="string">"cpe"</span>.equals(i.getType())) {</a></span></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 244</td> <td class="nbHitsUncovered"><a title="Line 244: Conditional coverage 39% (11/28) [each condition: 50%, 100%, 50%, 50%, 50%, 50%, 50%, 50%, 50%, 50%, 0%, 0%, 0%, 0%]."> 6</a></td> <td class="src"><pre class="src"><span class="srcUncovered"> <a title="Line 244: Conditional coverage 39% (11/28) [each condition: 50%, 100%, 50%, 50%, 50%, 50%, 50%, 50%, 50%, 50%, 0%, 0%, 0%, 0%]."> <span class="keyword">if</span> ((i.getValue().matches(<span class="string">".*c\\+\\+.*"</span>)</a></span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 245</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> || i.getValue().startsWith(<span class="string">"cpe:/a:file:file"</span>)</pre></td></tr>
|
||||
<tr> <td class="numLine"> 246</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> || i.getValue().startsWith(<span class="string">"cpe:/a:mozilla:mozilla"</span>)</pre></td></tr>
|
||||
<tr> <td class="numLine"> 247</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> || i.getValue().startsWith(<span class="string">"cpe:/a:cvs:cvs"</span>)</pre></td></tr>
|
||||
<tr> <td class="numLine"> 248</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> || i.getValue().startsWith(<span class="string">"cpe:/a:ftp:ftp"</span>)</pre></td></tr>
|
||||
<tr> <td class="numLine"> 249</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> || i.getValue().startsWith(<span class="string">"cpe:/a:tcp:tcp"</span>)</pre></td></tr>
|
||||
<tr> <td class="numLine"> 250</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> || i.getValue().startsWith(<span class="string">"cpe:/a:ssh:ssh"</span>)</pre></td></tr>
|
||||
<tr> <td class="numLine"> 251</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> || i.getValue().startsWith(<span class="string">"cpe:/a:lookup:lookup"</span>))</pre></td></tr>
|
||||
<tr> <td class="numLine"> 252</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> && (dependency.getFileName().toLowerCase().endsWith(<span class="string">".jar"</span>)</pre></td></tr>
|
||||
<tr> <td class="numLine"> 253</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> || dependency.getFileName().toLowerCase().endsWith(<span class="string">"pom.xml"</span>)</pre></td></tr>
|
||||
<tr> <td class="numLine"> 254</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> || dependency.getFileName().toLowerCase().endsWith(<span class="string">".dll"</span>)</pre></td></tr>
|
||||
<tr> <td class="numLine"> 255</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> || dependency.getFileName().toLowerCase().endsWith(<span class="string">".exe"</span>)</pre></td></tr>
|
||||
<tr> <td class="numLine"> 256</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> || dependency.getFileName().toLowerCase().endsWith(<span class="string">".nuspec"</span>)</pre></td></tr>
|
||||
<tr> <td class="numLine"> 257</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> || dependency.getFileName().toLowerCase().endsWith(<span class="string">".nupkg"</span>))) {</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 258</td> <td class="nbHitsCovered"> 2</td> <td class="src"><pre class="src"> itr.remove();</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 259</td> <td class="nbHitsUncovered"><a title="Line 259: Conditional coverage 21% (3/14) [each condition: 50%, 50%, 50%, 0%, 0%, 0%, 0%]."> 4</a></td> <td class="src"><pre class="src"><span class="srcUncovered"> <a title="Line 259: Conditional coverage 21% (3/14) [each condition: 50%, 50%, 50%, 0%, 0%, 0%, 0%]."> } <span class="keyword">else</span> <span class="keyword">if</span> ((i.getValue().startsWith(<span class="string">"cpe:/a:jquery:jquery"</span>)</a></span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 260</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> || i.getValue().startsWith(<span class="string">"cpe:/a:prototypejs:prototype"</span>)</pre></td></tr>
|
||||
<tr> <td class="numLine"> 261</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> || i.getValue().startsWith(<span class="string">"cpe:/a:yahoo:yui"</span>))</pre></td></tr>
|
||||
<tr> <td class="numLine"> 262</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> && (dependency.getFileName().toLowerCase().endsWith(<span class="string">".jar"</span>)</pre></td></tr>
|
||||
<tr> <td class="numLine"> 263</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> || dependency.getFileName().toLowerCase().endsWith(<span class="string">"pom.xml"</span>)</pre></td></tr>
|
||||
<tr> <td class="numLine"> 264</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> || dependency.getFileName().toLowerCase().endsWith(<span class="string">".dll"</span>)</pre></td></tr>
|
||||
<tr> <td class="numLine"> 265</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> || dependency.getFileName().toLowerCase().endsWith(<span class="string">".exe"</span>))) {</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 266</td> <td class="nbHitsUncovered"> 0</td> <td class="src"><pre class="src"><span class="srcUncovered"> itr.remove();</span></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 267</td> <td class="nbHitsUncovered"><a title="Line 267: Conditional coverage 35% (5/14) [each condition: 50%, 50%, 50%, 50%, 50%, 0%, 0%]."> 4</a></td> <td class="src"><pre class="src"><span class="srcUncovered"> <a title="Line 267: Conditional coverage 35% (5/14) [each condition: 50%, 50%, 50%, 50%, 50%, 0%, 0%]."> } <span class="keyword">else</span> <span class="keyword">if</span> ((i.getValue().startsWith(<span class="string">"cpe:/a:microsoft:excel"</span>)</a></span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 268</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> || i.getValue().startsWith(<span class="string">"cpe:/a:microsoft:word"</span>)</pre></td></tr>
|
||||
<tr> <td class="numLine"> 269</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> || i.getValue().startsWith(<span class="string">"cpe:/a:microsoft:visio"</span>)</pre></td></tr>
|
||||
<tr> <td class="numLine"> 270</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> || i.getValue().startsWith(<span class="string">"cpe:/a:microsoft:powerpoint"</span>)</pre></td></tr>
|
||||
<tr> <td class="numLine"> 271</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment"> */</span></pre></td></tr>
|
||||
<td class="src"><pre class="src"> || i.getValue().startsWith(<span class="string">"cpe:/a:microsoft:office"</span>))</pre></td></tr>
|
||||
<tr> <td class="numLine"> 272</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="keyword">private</span> <span class="keyword">void</span> removeWrongVersionMatches(Dependency dependency) {</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 273</td> <td class="nbHitsCovered"> 3</td> <td class="src"><pre class="src"> <span class="keyword">final</span> Set<Identifier> identifiers = dependency.getIdentifiers();</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 274</td> <td class="nbHitsCovered"> 3</td> <td class="src"><pre class="src"> <span class="keyword">final</span> Iterator<Identifier> itr = identifiers.iterator();</pre></td></tr>
|
||||
<tr> <td class="numLine"> 275</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> </pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 276</td> <td class="nbHitsCovered"> 3</td> <td class="src"><pre class="src"> <span class="keyword">final</span> String fileName = dependency.getFileName();</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 277</td> <td class="nbHitsUncovered"><a title="Line 277: Conditional coverage 50% (2/4) [each condition: 50%, 50%]."> 3</a></td> <td class="src"><pre class="src"><span class="srcUncovered"> <a title="Line 277: Conditional coverage 50% (2/4) [each condition: 50%, 50%]."> <span class="keyword">if</span> (fileName != <span class="keyword">null</span> && fileName.contains(<span class="string">"axis2"</span>)) {</a></span></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 278</td> <td class="nbHitsUncovered"><a title="Line 278: Conditional coverage 0% (0/2)."> 0</a></td> <td class="src"><pre class="src"><span class="srcUncovered"> <a title="Line 278: Conditional coverage 0% (0/2)."> <span class="keyword">while</span> (itr.hasNext()) {</a></span></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 279</td> <td class="nbHitsUncovered"> 0</td> <td class="src"><pre class="src"><span class="srcUncovered"> <span class="keyword">final</span> Identifier i = itr.next();</span></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 280</td> <td class="nbHitsUncovered"><a title="Line 280: Conditional coverage 0% (0/2)."> 0</a></td> <td class="src"><pre class="src"><span class="srcUncovered"> <a title="Line 280: Conditional coverage 0% (0/2)."> <span class="keyword">if</span> (<span class="string">"cpe"</span>.equals(i.getType())) {</a></span></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 281</td> <td class="nbHitsUncovered"> 0</td> <td class="src"><pre class="src"><span class="srcUncovered"> <span class="keyword">final</span> String cpe = i.getValue();</span></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 282</td> <td class="nbHitsUncovered"><a title="Line 282: Conditional coverage 0% (0/6) [each condition: 0%, 0%, 0%]."> 0</a></td> <td class="src"><pre class="src"><span class="srcUncovered"> <a title="Line 282: Conditional coverage 0% (0/6) [each condition: 0%, 0%, 0%]."> <span class="keyword">if</span> (cpe != <span class="keyword">null</span> && (cpe.startsWith(<span class="string">"cpe:/a:apache:axis:"</span>) || <span class="string">"cpe:/a:apache:axis"</span>.equals(cpe))) {</a></span></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 283</td> <td class="nbHitsUncovered"> 0</td> <td class="src"><pre class="src"><span class="srcUncovered"> itr.remove();</span></pre></td></tr>
|
||||
<td class="src"><pre class="src"> && (dependency.getFileName().toLowerCase().endsWith(<span class="string">".jar"</span>)</pre></td></tr>
|
||||
<tr> <td class="numLine"> 273</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> || dependency.getFileName().toLowerCase().endsWith(<span class="string">"pom.xml"</span>))) {</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 274</td> <td class="nbHitsUncovered"> 0</td> <td class="src"><pre class="src"><span class="srcUncovered"> itr.remove();</span></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 275</td> <td class="nbHitsUncovered"><a title="Line 275: Conditional coverage 25% (1/4) [each condition: 50%, 0%]."> 4</a></td> <td class="src"><pre class="src"><span class="srcUncovered"> <a title="Line 275: Conditional coverage 25% (1/4) [each condition: 50%, 0%]."> } <span class="keyword">else</span> <span class="keyword">if</span> (i.getValue().startsWith(<span class="string">"cpe:/a:apache:maven"</span>)</a></span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 276</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> && !dependency.getFileName().toLowerCase().matches(<span class="string">"maven-core-[\\d\\.]+\\.jar"</span>)) {</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 277</td> <td class="nbHitsUncovered"> 0</td> <td class="src"><pre class="src"><span class="srcUncovered"> itr.remove();</span></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 278</td> <td class="nbHitsUncovered"><a title="Line 278: Conditional coverage 25% (1/4) [each condition: 50%, 0%]."> 4</a></td> <td class="src"><pre class="src"><span class="srcUncovered"> <a title="Line 278: Conditional coverage 25% (1/4) [each condition: 50%, 0%]."> } <span class="keyword">else</span> <span class="keyword">if</span> (i.getValue().startsWith(<span class="string">"cpe:/a:m-core:m-core"</span>)</a></span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 279</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> && !dependency.getEvidenceUsed().containsUsedString(<span class="string">"m-core"</span>)) {</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 280</td> <td class="nbHitsUncovered"> 0</td> <td class="src"><pre class="src"><span class="srcUncovered"> itr.remove();</span></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 281</td> <td class="nbHitsUncovered"><a title="Line 281: Conditional coverage 25% (1/4) [each condition: 50%, 0%]."> 4</a></td> <td class="src"><pre class="src"><span class="srcUncovered"> <a title="Line 281: Conditional coverage 25% (1/4) [each condition: 50%, 0%]."> } <span class="keyword">else</span> <span class="keyword">if</span> (i.getValue().startsWith(<span class="string">"cpe:/a:jboss:jboss"</span>)</a></span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 282</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> && !dependency.getFileName().toLowerCase().matches(<span class="string">"jboss-?[\\d\\.-]+(GA)?\\.jar"</span>)) {</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 283</td> <td class="nbHitsUncovered"> 0</td> <td class="src"><pre class="src"><span class="srcUncovered"> itr.remove();</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 284</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> }</pre></td></tr>
|
||||
<td class="src"><pre class="src"> }</pre></td></tr>
|
||||
<tr> <td class="numLine"> 285</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> }</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 286</td> <td class="nbHitsUncovered"> 0</td> <td class="src"><pre class="src"><span class="srcUncovered"> }</span></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 287</td> <td class="nbHitsUncovered"><a title="Line 287: Conditional coverage 50% (2/4) [each condition: 50%, 50%]."> 3</a></td> <td class="src"><pre class="src"><span class="srcUncovered"> <a title="Line 287: Conditional coverage 50% (2/4) [each condition: 50%, 50%]."> } <span class="keyword">else</span> <span class="keyword">if</span> (fileName != <span class="keyword">null</span> && fileName.contains(<span class="string">"axis"</span>)) {</a></span></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 288</td> <td class="nbHitsUncovered"><a title="Line 288: Conditional coverage 0% (0/2)."> 0</a></td> <td class="src"><pre class="src"><span class="srcUncovered"> <a title="Line 288: Conditional coverage 0% (0/2)."> <span class="keyword">while</span> (itr.hasNext()) {</a></span></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 289</td> <td class="nbHitsUncovered"> 0</td> <td class="src"><pre class="src"><span class="srcUncovered"> <span class="keyword">final</span> Identifier i = itr.next();</span></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 290</td> <td class="nbHitsUncovered"><a title="Line 290: Conditional coverage 0% (0/2)."> 0</a></td> <td class="src"><pre class="src"><span class="srcUncovered"> <a title="Line 290: Conditional coverage 0% (0/2)."> <span class="keyword">if</span> (<span class="string">"cpe"</span>.equals(i.getType())) {</a></span></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 291</td> <td class="nbHitsUncovered"> 0</td> <td class="src"><pre class="src"><span class="srcUncovered"> <span class="keyword">final</span> String cpe = i.getValue();</span></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 292</td> <td class="nbHitsUncovered"><a title="Line 292: Conditional coverage 0% (0/6) [each condition: 0%, 0%, 0%]."> 0</a></td> <td class="src"><pre class="src"><span class="srcUncovered"> <a title="Line 292: Conditional coverage 0% (0/6) [each condition: 0%, 0%, 0%]."> <span class="keyword">if</span> (cpe != <span class="keyword">null</span> && (cpe.startsWith(<span class="string">"cpe:/a:apache:axis2:"</span>) || <span class="string">"cpe:/a:apache:axis2"</span>.equals(cpe))) {</a></span></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 293</td> <td class="nbHitsUncovered"> 0</td> <td class="src"><pre class="src"><span class="srcUncovered"> itr.remove();</span></pre></td></tr>
|
||||
<td class="src"><pre class="src"> }</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 286</td> <td class="nbHitsCovered"> 6</td> <td class="src"><pre class="src"> }</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 287</td> <td class="nbHitsCovered"> 6</td> <td class="src"><pre class="src"> }</pre></td></tr>
|
||||
<tr> <td class="numLine"> 288</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> </pre></td></tr>
|
||||
<tr> <td class="numLine"> 289</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment">/**</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 290</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment"> * Removes CPE matches for the wrong version of a dependency. Currently, this only covers Axis 1 & 2.</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 291</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment"> *</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 292</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment"> * @param dependency the dependency to analyze</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 293</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment"> */</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 294</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> }</pre></td></tr>
|
||||
<tr> <td class="numLine"> 295</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> }</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 296</td> <td class="nbHitsUncovered"> 0</td> <td class="src"><pre class="src"><span class="srcUncovered"> }</span></pre></td></tr>
|
||||
<td class="src"><pre class="src"> <span class="keyword">private</span> <span class="keyword">void</span> removeWrongVersionMatches(Dependency dependency) {</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 295</td> <td class="nbHitsCovered"> 6</td> <td class="src"><pre class="src"> <span class="keyword">final</span> Set<Identifier> identifiers = dependency.getIdentifiers();</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 296</td> <td class="nbHitsCovered"> 6</td> <td class="src"><pre class="src"> <span class="keyword">final</span> Iterator<Identifier> itr = identifiers.iterator();</pre></td></tr>
|
||||
<tr> <td class="numLine"> 297</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> }</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 298</td> <td class="nbHitsCovered"> 3</td> <td class="src"><pre class="src"> }</pre></td></tr>
|
||||
<tr> <td class="numLine"> 299</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> </pre></td></tr>
|
||||
<tr> <td class="numLine"> 300</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment">/**</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 301</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment"> * There are some known CPE entries, specifically regarding sun and oracle products due to the acquisition and</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 302</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment"> * changes in product names, that based on given evidence we can add the related CPE entries to ensure a complete</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 303</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment"> * list of CVE entries.</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 304</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment"> *</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 305</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment"> * @param dependency the dependency being analyzed</span></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 298</td> <td class="nbHitsCovered"> 6</td> <td class="src"><pre class="src"> <span class="keyword">final</span> String fileName = dependency.getFileName();</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 299</td> <td class="nbHitsUncovered"><a title="Line 299: Conditional coverage 50% (2/4) [each condition: 50%, 50%]."> 6</a></td> <td class="src"><pre class="src"><span class="srcUncovered"> <a title="Line 299: Conditional coverage 50% (2/4) [each condition: 50%, 50%]."> <span class="keyword">if</span> (fileName != <span class="keyword">null</span> && fileName.contains(<span class="string">"axis2"</span>)) {</a></span></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 300</td> <td class="nbHitsUncovered"><a title="Line 300: Conditional coverage 0% (0/2)."> 0</a></td> <td class="src"><pre class="src"><span class="srcUncovered"> <a title="Line 300: Conditional coverage 0% (0/2)."> <span class="keyword">while</span> (itr.hasNext()) {</a></span></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 301</td> <td class="nbHitsUncovered"> 0</td> <td class="src"><pre class="src"><span class="srcUncovered"> <span class="keyword">final</span> Identifier i = itr.next();</span></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 302</td> <td class="nbHitsUncovered"><a title="Line 302: Conditional coverage 0% (0/2)."> 0</a></td> <td class="src"><pre class="src"><span class="srcUncovered"> <a title="Line 302: Conditional coverage 0% (0/2)."> <span class="keyword">if</span> (<span class="string">"cpe"</span>.equals(i.getType())) {</a></span></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 303</td> <td class="nbHitsUncovered"> 0</td> <td class="src"><pre class="src"><span class="srcUncovered"> <span class="keyword">final</span> String cpe = i.getValue();</span></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 304</td> <td class="nbHitsUncovered"><a title="Line 304: Conditional coverage 0% (0/6) [each condition: 0%, 0%, 0%]."> 0</a></td> <td class="src"><pre class="src"><span class="srcUncovered"> <a title="Line 304: Conditional coverage 0% (0/6) [each condition: 0%, 0%, 0%]."> <span class="keyword">if</span> (cpe != <span class="keyword">null</span> && (cpe.startsWith(<span class="string">"cpe:/a:apache:axis:"</span>) || <span class="string">"cpe:/a:apache:axis"</span>.equals(cpe))) {</a></span></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 305</td> <td class="nbHitsUncovered"> 0</td> <td class="src"><pre class="src"><span class="srcUncovered"> itr.remove();</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 306</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment"> */</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 307</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="keyword">private</span> <span class="keyword">void</span> addFalseNegativeCPEs(Dependency dependency) {</pre></td></tr>
|
||||
<tr> <td class="numLine"> 308</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment">//TODO move this to the hint analyzer</span></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 309</td> <td class="nbHitsCovered"> 3</td> <td class="src"><pre class="src"> <span class="keyword">final</span> Iterator<Identifier> itr = dependency.getIdentifiers().iterator();</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 310</td> <td class="nbHitsCovered"><a title="Line 310: Conditional coverage 100% (2/2)."> 5</a></td> <td class="src"><pre class="src"> <a title="Line 310: Conditional coverage 100% (2/2)."> <span class="keyword">while</span> (itr.hasNext()) {</a></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 311</td> <td class="nbHitsCovered"> 2</td> <td class="src"><pre class="src"> <span class="keyword">final</span> Identifier i = itr.next();</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 312</td> <td class="nbHitsUncovered"><a title="Line 312: Conditional coverage 50% (6/12) [each condition: 50%, 50%, 50%, 50%, 50%, 50%]."> 2</a></td> <td class="src"><pre class="src"><span class="srcUncovered"> <a title="Line 312: Conditional coverage 50% (6/12) [each condition: 50%, 50%, 50%, 50%, 50%, 50%]."> <span class="keyword">if</span> (<span class="string">"cpe"</span>.equals(i.getType()) && i.getValue() != <span class="keyword">null</span></a></span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 313</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> && (i.getValue().startsWith(<span class="string">"cpe:/a:oracle:opensso:"</span>)</pre></td></tr>
|
||||
<tr> <td class="numLine"> 314</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> || i.getValue().startsWith(<span class="string">"cpe:/a:oracle:opensso_enterprise:"</span>)</pre></td></tr>
|
||||
<tr> <td class="numLine"> 315</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> || i.getValue().startsWith(<span class="string">"cpe:/a:sun:opensso_enterprise:"</span>)</pre></td></tr>
|
||||
<tr> <td class="numLine"> 316</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> || i.getValue().startsWith(<span class="string">"cpe:/a:sun:opensso:"</span>))) {</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 317</td> <td class="nbHitsUncovered"> 0</td> <td class="src"><pre class="src"><span class="srcUncovered"> <span class="keyword">final</span> String newCpe = String.format(<span class="string">"cpe:/a:sun:opensso_enterprise:%s"</span>, i.getValue().substring(22));</span></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 318</td> <td class="nbHitsUncovered"> 0</td> <td class="src"><pre class="src"><span class="srcUncovered"> <span class="keyword">final</span> String newCpe2 = String.format(<span class="string">"cpe:/a:oracle:opensso_enterprise:%s"</span>, i.getValue().substring(22));</span></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 319</td> <td class="nbHitsUncovered"> 0</td> <td class="src"><pre class="src"><span class="srcUncovered"> <span class="keyword">final</span> String newCpe3 = String.format(<span class="string">"cpe:/a:sun:opensso:%s"</span>, i.getValue().substring(22));</span></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 320</td> <td class="nbHitsUncovered"> 0</td> <td class="src"><pre class="src"><span class="srcUncovered"> <span class="keyword">final</span> String newCpe4 = String.format(<span class="string">"cpe:/a:oracle:opensso:%s"</span>, i.getValue().substring(22));</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 321</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="keyword">try</span> {</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 322</td> <td class="nbHitsUncovered"> 0</td> <td class="src"><pre class="src"><span class="srcUncovered"> dependency.addIdentifier(<span class="string">"cpe"</span>,</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 323</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> newCpe,</pre></td></tr>
|
||||
<tr> <td class="numLine"> 324</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> String.format(CPEAnalyzer.NVD_SEARCH_URL, URLEncoder.encode(newCpe, <span class="string">"UTF-8"</span>)));</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 325</td> <td class="nbHitsUncovered"> 0</td> <td class="src"><pre class="src"><span class="srcUncovered"> dependency.addIdentifier(<span class="string">"cpe"</span>,</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 326</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> newCpe2,</pre></td></tr>
|
||||
<tr> <td class="numLine"> 327</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> String.format(CPEAnalyzer.NVD_SEARCH_URL, URLEncoder.encode(newCpe2, <span class="string">"UTF-8"</span>)));</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 328</td> <td class="nbHitsUncovered"> 0</td> <td class="src"><pre class="src"><span class="srcUncovered"> dependency.addIdentifier(<span class="string">"cpe"</span>,</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 329</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> newCpe3,</pre></td></tr>
|
||||
<tr> <td class="numLine"> 330</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> String.format(CPEAnalyzer.NVD_SEARCH_URL, URLEncoder.encode(newCpe3, <span class="string">"UTF-8"</span>)));</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 331</td> <td class="nbHitsUncovered"> 0</td> <td class="src"><pre class="src"><span class="srcUncovered"> dependency.addIdentifier(<span class="string">"cpe"</span>,</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 332</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> newCpe4,</pre></td></tr>
|
||||
<tr> <td class="numLine"> 333</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> String.format(CPEAnalyzer.NVD_SEARCH_URL, URLEncoder.encode(newCpe4, <span class="string">"UTF-8"</span>)));</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 334</td> <td class="nbHitsUncovered"> 0</td> <td class="src"><pre class="src"><span class="srcUncovered"> } <span class="keyword">catch</span> (UnsupportedEncodingException ex) {</span></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 335</td> <td class="nbHitsUncovered"> 0</td> <td class="src"><pre class="src"><span class="srcUncovered"> LOGGER.log(Level.FINE, <span class="keyword">null</span>, ex);</span></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 336</td> <td class="nbHitsUncovered"> 0</td> <td class="src"><pre class="src"><span class="srcUncovered"> }</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 337</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> }</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 338</td> <td class="nbHitsCovered"> 2</td> <td class="src"><pre class="src"> }</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 339</td> <td class="nbHitsCovered"> 3</td> <td class="src"><pre class="src"> }</pre></td></tr>
|
||||
<tr> <td class="numLine"> 340</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> </pre></td></tr>
|
||||
<tr> <td class="numLine"> 341</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment">/**</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 342</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment"> * Removes duplicate entries identified that are contained within JAR files. These occasionally crop up due to POM</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 343</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment"> * entries or other types of files (such as DLLs and EXEs) being contained within the JAR.</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 344</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment"> *</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 345</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment"> * @param dependency the dependency that might be a duplicate</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 346</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment"> * @param engine the engine used to scan all dependencies</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 347</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment"> */</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 348</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="keyword">private</span> <span class="keyword">void</span> removeDuplicativeEntriesFromJar(Dependency dependency, Engine engine) {</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 349</td> <td class="nbHitsUncovered"><a title="Line 349: Conditional coverage 66% (4/6) [each condition: 100%, 50%, 50%]."> 3</a></td> <td class="src"><pre class="src"><span class="srcUncovered"> <a title="Line 349: Conditional coverage 66% (4/6) [each condition: 100%, 50%, 50%]."> <span class="keyword">if</span> (dependency.getFileName().toLowerCase().endsWith(<span class="string">"pom.xml"</span>)</a></span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 350</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> || <span class="string">"dll"</span>.equals(dependency.getFileExtension())</pre></td></tr>
|
||||
<tr> <td class="numLine"> 351</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> || <span class="string">"exe"</span>.equals(dependency.getFileExtension())) {</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 352</td> <td class="nbHitsCovered"> 1</td> <td class="src"><pre class="src"> String parentPath = dependency.getFilePath().toLowerCase();</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 353</td> <td class="nbHitsUncovered"><a title="Line 353: Conditional coverage 50% (1/2)."> 1</a></td> <td class="src"><pre class="src"><span class="srcUncovered"> <a title="Line 353: Conditional coverage 50% (1/2)."> <span class="keyword">if</span> (parentPath.contains(<span class="string">".jar"</span>)) {</a></span></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 354</td> <td class="nbHitsUncovered"> 0</td> <td class="src"><pre class="src"><span class="srcUncovered"> parentPath = parentPath.substring(0, parentPath.indexOf(<span class="string">".jar"</span>) + 4);</span></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 355</td> <td class="nbHitsUncovered"> 0</td> <td class="src"><pre class="src"><span class="srcUncovered"> <span class="keyword">final</span> Dependency parent = findDependency(parentPath, engine.getDependencies());</span></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 356</td> <td class="nbHitsUncovered"><a title="Line 356: Conditional coverage 0% (0/2)."> 0</a></td> <td class="src"><pre class="src"><span class="srcUncovered"> <a title="Line 356: Conditional coverage 0% (0/2)."> <span class="keyword">if</span> (parent != <span class="keyword">null</span>) {</a></span></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 357</td> <td class="nbHitsUncovered"> 0</td> <td class="src"><pre class="src"><span class="srcUncovered"> <span class="keyword">boolean</span> remove = <span class="keyword">false</span>;</span></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 358</td> <td class="nbHitsUncovered"><a title="Line 358: Conditional coverage 0% (0/2)."> 0</a></td> <td class="src"><pre class="src"><span class="srcUncovered"> <a title="Line 358: Conditional coverage 0% (0/2)."> <span class="keyword">for</span> (Identifier i : dependency.getIdentifiers()) {</a></span></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 359</td> <td class="nbHitsUncovered"><a title="Line 359: Conditional coverage 0% (0/2)."> 0</a></td> <td class="src"><pre class="src"><span class="srcUncovered"> <a title="Line 359: Conditional coverage 0% (0/2)."> <span class="keyword">if</span> (<span class="string">"cpe"</span>.equals(i.getType())) {</a></span></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 360</td> <td class="nbHitsUncovered"> 0</td> <td class="src"><pre class="src"><span class="srcUncovered"> <span class="keyword">final</span> String trimmedCPE = trimCpeToVendor(i.getValue());</span></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 361</td> <td class="nbHitsUncovered"><a title="Line 361: Conditional coverage 0% (0/2)."> 0</a></td> <td class="src"><pre class="src"><span class="srcUncovered"> <a title="Line 361: Conditional coverage 0% (0/2)."> <span class="keyword">for</span> (Identifier parentId : parent.getIdentifiers()) {</a></span></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 362</td> <td class="nbHitsUncovered"><a title="Line 362: Conditional coverage 0% (0/4) [each condition: 0%, 0%]."> 0</a></td> <td class="src"><pre class="src"><span class="srcUncovered"> <a title="Line 362: Conditional coverage 0% (0/4) [each condition: 0%, 0%]."> <span class="keyword">if</span> (<span class="string">"cpe"</span>.equals(parentId.getType()) && parentId.getValue().startsWith(trimmedCPE)) {</a></span></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 363</td> <td class="nbHitsUncovered"> 0</td> <td class="src"><pre class="src"><span class="srcUncovered"> remove |= <span class="keyword">true</span>;</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 364</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> }</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 365</td> <td class="nbHitsUncovered"> 0</td> <td class="src"><pre class="src"><span class="srcUncovered"> }</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 366</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> }</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 367</td> <td class="nbHitsUncovered"><a title="Line 367: Conditional coverage 0% (0/2)."> 0</a></td> <td class="src"><pre class="src"><span class="srcUncovered"> <a title="Line 367: Conditional coverage 0% (0/2)."> <span class="keyword">if</span> (!remove) { <span class="comment">//we can escape early</span></a></span></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 368</td> <td class="nbHitsUncovered"> 0</td> <td class="src"><pre class="src"><span class="srcUncovered"> <span class="keyword">return</span>;</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 369</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> }</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 370</td> <td class="nbHitsUncovered"> 0</td> <td class="src"><pre class="src"><span class="srcUncovered"> }</span></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 371</td> <td class="nbHitsUncovered"><a title="Line 371: Conditional coverage 0% (0/2)."> 0</a></td> <td class="src"><pre class="src"><span class="srcUncovered"> <a title="Line 371: Conditional coverage 0% (0/2)."> <span class="keyword">if</span> (remove) {</a></span></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 372</td> <td class="nbHitsUncovered"> 0</td> <td class="src"><pre class="src"><span class="srcUncovered"> engine.getDependencies().remove(dependency);</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 373</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> }</pre></td></tr>
|
||||
<tr> <td class="numLine"> 374</td> <td class="nbHits"> </td>
|
||||
<tr> <td class="numLine"> 307</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> }</pre></td></tr>
|
||||
<tr> <td class="numLine"> 375</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> }</pre></td></tr>
|
||||
<tr> <td class="numLine"> 376</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> </pre></td></tr>
|
||||
<tr> <td class="numLine"> 377</td> <td class="nbHits"> </td>
|
||||
<tr> <td class="numLineCover"> 308</td> <td class="nbHitsUncovered"> 0</td> <td class="src"><pre class="src"><span class="srcUncovered"> }</span></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 309</td> <td class="nbHitsUncovered"><a title="Line 309: Conditional coverage 50% (2/4) [each condition: 50%, 50%]."> 6</a></td> <td class="src"><pre class="src"><span class="srcUncovered"> <a title="Line 309: Conditional coverage 50% (2/4) [each condition: 50%, 50%]."> } <span class="keyword">else</span> <span class="keyword">if</span> (fileName != <span class="keyword">null</span> && fileName.contains(<span class="string">"axis"</span>)) {</a></span></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 310</td> <td class="nbHitsUncovered"><a title="Line 310: Conditional coverage 0% (0/2)."> 0</a></td> <td class="src"><pre class="src"><span class="srcUncovered"> <a title="Line 310: Conditional coverage 0% (0/2)."> <span class="keyword">while</span> (itr.hasNext()) {</a></span></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 311</td> <td class="nbHitsUncovered"> 0</td> <td class="src"><pre class="src"><span class="srcUncovered"> <span class="keyword">final</span> Identifier i = itr.next();</span></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 312</td> <td class="nbHitsUncovered"><a title="Line 312: Conditional coverage 0% (0/2)."> 0</a></td> <td class="src"><pre class="src"><span class="srcUncovered"> <a title="Line 312: Conditional coverage 0% (0/2)."> <span class="keyword">if</span> (<span class="string">"cpe"</span>.equals(i.getType())) {</a></span></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 313</td> <td class="nbHitsUncovered"> 0</td> <td class="src"><pre class="src"><span class="srcUncovered"> <span class="keyword">final</span> String cpe = i.getValue();</span></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 314</td> <td class="nbHitsUncovered"><a title="Line 314: Conditional coverage 0% (0/6) [each condition: 0%, 0%, 0%]."> 0</a></td> <td class="src"><pre class="src"><span class="srcUncovered"> <a title="Line 314: Conditional coverage 0% (0/6) [each condition: 0%, 0%, 0%]."> <span class="keyword">if</span> (cpe != <span class="keyword">null</span> && (cpe.startsWith(<span class="string">"cpe:/a:apache:axis2:"</span>) || <span class="string">"cpe:/a:apache:axis2"</span>.equals(cpe))) {</a></span></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 315</td> <td class="nbHitsUncovered"> 0</td> <td class="src"><pre class="src"><span class="srcUncovered"> itr.remove();</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 316</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> }</pre></td></tr>
|
||||
<tr> <td class="numLine"> 317</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> }</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 318</td> <td class="nbHitsUncovered"> 0</td> <td class="src"><pre class="src"><span class="srcUncovered"> }</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 319</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> }</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 378</td> <td class="nbHitsCovered"> 3</td> <td class="src"><pre class="src"> }</pre></td></tr>
|
||||
<tr> <td class="numLine"> 379</td> <td class="nbHits"> </td>
|
||||
<tr> <td class="numLineCover"> 320</td> <td class="nbHitsCovered"> 6</td> <td class="src"><pre class="src"> }</pre></td></tr>
|
||||
<tr> <td class="numLine"> 321</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> </pre></td></tr>
|
||||
<tr> <td class="numLine"> 380</td> <td class="nbHits"> </td>
|
||||
<tr> <td class="numLine"> 322</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment">/**</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 381</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment"> * Retrieves a given dependency, based on a given path, from a list of dependencies.</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 382</td> <td class="nbHits"> </td>
|
||||
<tr> <td class="numLine"> 323</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment"> * There are some known CPE entries, specifically regarding sun and oracle products due to the acquisition and</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 324</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment"> * changes in product names, that based on given evidence we can add the related CPE entries to ensure a complete</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 325</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment"> * list of CVE entries.</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 326</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment"> *</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 383</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment"> * @param dependencyPath the path of the dependency to return</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 384</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment"> * @param dependencies the collection of dependencies to search</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 385</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment"> * @return the dependency object for the given path, otherwise null</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 327</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment"> * @param dependency the dependency being analyzed</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 328</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment"> */</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 329</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="keyword">private</span> <span class="keyword">void</span> addFalseNegativeCPEs(Dependency dependency) {</pre></td></tr>
|
||||
<tr> <td class="numLine"> 330</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment">//TODO move this to the hint analyzer</span></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 331</td> <td class="nbHitsCovered"> 6</td> <td class="src"><pre class="src"> <span class="keyword">final</span> Iterator<Identifier> itr = dependency.getIdentifiers().iterator();</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 332</td> <td class="nbHitsCovered"><a title="Line 332: Conditional coverage 100% (2/2)."> 10</a></td> <td class="src"><pre class="src"> <a title="Line 332: Conditional coverage 100% (2/2)."> <span class="keyword">while</span> (itr.hasNext()) {</a></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 333</td> <td class="nbHitsCovered"> 4</td> <td class="src"><pre class="src"> <span class="keyword">final</span> Identifier i = itr.next();</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 334</td> <td class="nbHitsUncovered"><a title="Line 334: Conditional coverage 50% (6/12) [each condition: 50%, 50%, 50%, 50%, 50%, 50%]."> 4</a></td> <td class="src"><pre class="src"><span class="srcUncovered"> <a title="Line 334: Conditional coverage 50% (6/12) [each condition: 50%, 50%, 50%, 50%, 50%, 50%]."> <span class="keyword">if</span> (<span class="string">"cpe"</span>.equals(i.getType()) && i.getValue() != <span class="keyword">null</span></a></span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 335</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> && (i.getValue().startsWith(<span class="string">"cpe:/a:oracle:opensso:"</span>)</pre></td></tr>
|
||||
<tr> <td class="numLine"> 336</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> || i.getValue().startsWith(<span class="string">"cpe:/a:oracle:opensso_enterprise:"</span>)</pre></td></tr>
|
||||
<tr> <td class="numLine"> 337</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> || i.getValue().startsWith(<span class="string">"cpe:/a:sun:opensso_enterprise:"</span>)</pre></td></tr>
|
||||
<tr> <td class="numLine"> 338</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> || i.getValue().startsWith(<span class="string">"cpe:/a:sun:opensso:"</span>))) {</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 339</td> <td class="nbHitsUncovered"> 0</td> <td class="src"><pre class="src"><span class="srcUncovered"> <span class="keyword">final</span> String newCpe = String.format(<span class="string">"cpe:/a:sun:opensso_enterprise:%s"</span>, i.getValue().substring(22));</span></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 340</td> <td class="nbHitsUncovered"> 0</td> <td class="src"><pre class="src"><span class="srcUncovered"> <span class="keyword">final</span> String newCpe2 = String.format(<span class="string">"cpe:/a:oracle:opensso_enterprise:%s"</span>, i.getValue().substring(22));</span></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 341</td> <td class="nbHitsUncovered"> 0</td> <td class="src"><pre class="src"><span class="srcUncovered"> <span class="keyword">final</span> String newCpe3 = String.format(<span class="string">"cpe:/a:sun:opensso:%s"</span>, i.getValue().substring(22));</span></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 342</td> <td class="nbHitsUncovered"> 0</td> <td class="src"><pre class="src"><span class="srcUncovered"> <span class="keyword">final</span> String newCpe4 = String.format(<span class="string">"cpe:/a:oracle:opensso:%s"</span>, i.getValue().substring(22));</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 343</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="keyword">try</span> {</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 344</td> <td class="nbHitsUncovered"> 0</td> <td class="src"><pre class="src"><span class="srcUncovered"> dependency.addIdentifier(<span class="string">"cpe"</span>,</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 345</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> newCpe,</pre></td></tr>
|
||||
<tr> <td class="numLine"> 346</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> String.format(CPEAnalyzer.NVD_SEARCH_URL, URLEncoder.encode(newCpe, <span class="string">"UTF-8"</span>)));</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 347</td> <td class="nbHitsUncovered"> 0</td> <td class="src"><pre class="src"><span class="srcUncovered"> dependency.addIdentifier(<span class="string">"cpe"</span>,</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 348</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> newCpe2,</pre></td></tr>
|
||||
<tr> <td class="numLine"> 349</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> String.format(CPEAnalyzer.NVD_SEARCH_URL, URLEncoder.encode(newCpe2, <span class="string">"UTF-8"</span>)));</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 350</td> <td class="nbHitsUncovered"> 0</td> <td class="src"><pre class="src"><span class="srcUncovered"> dependency.addIdentifier(<span class="string">"cpe"</span>,</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 351</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> newCpe3,</pre></td></tr>
|
||||
<tr> <td class="numLine"> 352</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> String.format(CPEAnalyzer.NVD_SEARCH_URL, URLEncoder.encode(newCpe3, <span class="string">"UTF-8"</span>)));</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 353</td> <td class="nbHitsUncovered"> 0</td> <td class="src"><pre class="src"><span class="srcUncovered"> dependency.addIdentifier(<span class="string">"cpe"</span>,</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 354</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> newCpe4,</pre></td></tr>
|
||||
<tr> <td class="numLine"> 355</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> String.format(CPEAnalyzer.NVD_SEARCH_URL, URLEncoder.encode(newCpe4, <span class="string">"UTF-8"</span>)));</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 356</td> <td class="nbHitsUncovered"> 0</td> <td class="src"><pre class="src"><span class="srcUncovered"> } <span class="keyword">catch</span> (UnsupportedEncodingException ex) {</span></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 357</td> <td class="nbHitsUncovered"> 0</td> <td class="src"><pre class="src"><span class="srcUncovered"> LOGGER.log(Level.FINE, <span class="keyword">null</span>, ex);</span></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 358</td> <td class="nbHitsUncovered"> 0</td> <td class="src"><pre class="src"><span class="srcUncovered"> }</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 359</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> }</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 360</td> <td class="nbHitsCovered"> 4</td> <td class="src"><pre class="src"> }</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 361</td> <td class="nbHitsCovered"> 6</td> <td class="src"><pre class="src"> }</pre></td></tr>
|
||||
<tr> <td class="numLine"> 362</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> </pre></td></tr>
|
||||
<tr> <td class="numLine"> 363</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment">/**</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 364</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment"> * Removes duplicate entries identified that are contained within JAR files. These occasionally crop up due to POM</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 365</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment"> * entries or other types of files (such as DLLs and EXEs) being contained within the JAR.</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 366</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment"> *</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 367</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment"> * @param dependency the dependency that might be a duplicate</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 368</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment"> * @param engine the engine used to scan all dependencies</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 369</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment"> */</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 370</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="keyword">private</span> <span class="keyword">void</span> removeDuplicativeEntriesFromJar(Dependency dependency, Engine engine) {</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 371</td> <td class="nbHitsUncovered"><a title="Line 371: Conditional coverage 66% (4/6) [each condition: 100%, 50%, 50%]."> 6</a></td> <td class="src"><pre class="src"><span class="srcUncovered"> <a title="Line 371: Conditional coverage 66% (4/6) [each condition: 100%, 50%, 50%]."> <span class="keyword">if</span> (dependency.getFileName().toLowerCase().endsWith(<span class="string">"pom.xml"</span>)</a></span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 372</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> || <span class="string">"dll"</span>.equals(dependency.getFileExtension())</pre></td></tr>
|
||||
<tr> <td class="numLine"> 373</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> || <span class="string">"exe"</span>.equals(dependency.getFileExtension())) {</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 374</td> <td class="nbHitsCovered"> 2</td> <td class="src"><pre class="src"> String parentPath = dependency.getFilePath().toLowerCase();</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 375</td> <td class="nbHitsUncovered"><a title="Line 375: Conditional coverage 50% (1/2)."> 2</a></td> <td class="src"><pre class="src"><span class="srcUncovered"> <a title="Line 375: Conditional coverage 50% (1/2)."> <span class="keyword">if</span> (parentPath.contains(<span class="string">".jar"</span>)) {</a></span></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 376</td> <td class="nbHitsUncovered"> 0</td> <td class="src"><pre class="src"><span class="srcUncovered"> parentPath = parentPath.substring(0, parentPath.indexOf(<span class="string">".jar"</span>) + 4);</span></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 377</td> <td class="nbHitsUncovered"> 0</td> <td class="src"><pre class="src"><span class="srcUncovered"> <span class="keyword">final</span> Dependency parent = findDependency(parentPath, engine.getDependencies());</span></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 378</td> <td class="nbHitsUncovered"><a title="Line 378: Conditional coverage 0% (0/2)."> 0</a></td> <td class="src"><pre class="src"><span class="srcUncovered"> <a title="Line 378: Conditional coverage 0% (0/2)."> <span class="keyword">if</span> (parent != <span class="keyword">null</span>) {</a></span></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 379</td> <td class="nbHitsUncovered"> 0</td> <td class="src"><pre class="src"><span class="srcUncovered"> <span class="keyword">boolean</span> remove = <span class="keyword">false</span>;</span></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 380</td> <td class="nbHitsUncovered"><a title="Line 380: Conditional coverage 0% (0/2)."> 0</a></td> <td class="src"><pre class="src"><span class="srcUncovered"> <a title="Line 380: Conditional coverage 0% (0/2)."> <span class="keyword">for</span> (Identifier i : dependency.getIdentifiers()) {</a></span></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 381</td> <td class="nbHitsUncovered"><a title="Line 381: Conditional coverage 0% (0/2)."> 0</a></td> <td class="src"><pre class="src"><span class="srcUncovered"> <a title="Line 381: Conditional coverage 0% (0/2)."> <span class="keyword">if</span> (<span class="string">"cpe"</span>.equals(i.getType())) {</a></span></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 382</td> <td class="nbHitsUncovered"> 0</td> <td class="src"><pre class="src"><span class="srcUncovered"> <span class="keyword">final</span> String trimmedCPE = trimCpeToVendor(i.getValue());</span></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 383</td> <td class="nbHitsUncovered"><a title="Line 383: Conditional coverage 0% (0/2)."> 0</a></td> <td class="src"><pre class="src"><span class="srcUncovered"> <a title="Line 383: Conditional coverage 0% (0/2)."> <span class="keyword">for</span> (Identifier parentId : parent.getIdentifiers()) {</a></span></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 384</td> <td class="nbHitsUncovered"><a title="Line 384: Conditional coverage 0% (0/4) [each condition: 0%, 0%]."> 0</a></td> <td class="src"><pre class="src"><span class="srcUncovered"> <a title="Line 384: Conditional coverage 0% (0/4) [each condition: 0%, 0%]."> <span class="keyword">if</span> (<span class="string">"cpe"</span>.equals(parentId.getType()) && parentId.getValue().startsWith(trimmedCPE)) {</a></span></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 385</td> <td class="nbHitsUncovered"> 0</td> <td class="src"><pre class="src"><span class="srcUncovered"> remove |= <span class="keyword">true</span>;</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 386</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment"> */</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 387</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="keyword">private</span> Dependency findDependency(String dependencyPath, List<Dependency> dependencies) {</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 388</td> <td class="nbHitsUncovered"><a title="Line 388: Conditional coverage 0% (0/2)."> 0</a></td> <td class="src"><pre class="src"><span class="srcUncovered"> <a title="Line 388: Conditional coverage 0% (0/2)."> <span class="keyword">for</span> (Dependency d : dependencies) {</a></span></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 389</td> <td class="nbHitsUncovered"><a title="Line 389: Conditional coverage 0% (0/2)."> 0</a></td> <td class="src"><pre class="src"><span class="srcUncovered"> <a title="Line 389: Conditional coverage 0% (0/2)."> <span class="keyword">if</span> (d.getFilePath().equalsIgnoreCase(dependencyPath)) {</a></span></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 390</td> <td class="nbHitsUncovered"> 0</td> <td class="src"><pre class="src"><span class="srcUncovered"> <span class="keyword">return</span> d;</span></pre></td></tr>
|
||||
<td class="src"><pre class="src"> }</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 387</td> <td class="nbHitsUncovered"> 0</td> <td class="src"><pre class="src"><span class="srcUncovered"> }</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 388</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> }</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 389</td> <td class="nbHitsUncovered"><a title="Line 389: Conditional coverage 0% (0/2)."> 0</a></td> <td class="src"><pre class="src"><span class="srcUncovered"> <a title="Line 389: Conditional coverage 0% (0/2)."> <span class="keyword">if</span> (!remove) { <span class="comment">//we can escape early</span></a></span></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 390</td> <td class="nbHitsUncovered"> 0</td> <td class="src"><pre class="src"><span class="srcUncovered"> <span class="keyword">return</span>;</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 391</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> }</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 392</td> <td class="nbHitsUncovered"> 0</td> <td class="src"><pre class="src"><span class="srcUncovered"> }</span></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 393</td> <td class="nbHitsUncovered"> 0</td> <td class="src"><pre class="src"><span class="srcUncovered"> <span class="keyword">return</span> <span class="keyword">null</span>;</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 394</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> }</pre></td></tr>
|
||||
<td class="src"><pre class="src"> }</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 392</td> <td class="nbHitsUncovered"> 0</td> <td class="src"><pre class="src"><span class="srcUncovered"> }</span></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 393</td> <td class="nbHitsUncovered"><a title="Line 393: Conditional coverage 0% (0/2)."> 0</a></td> <td class="src"><pre class="src"><span class="srcUncovered"> <a title="Line 393: Conditional coverage 0% (0/2)."> <span class="keyword">if</span> (remove) {</a></span></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 394</td> <td class="nbHitsUncovered"> 0</td> <td class="src"><pre class="src"><span class="srcUncovered"> engine.getDependencies().remove(dependency);</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 395</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> </pre></td></tr>
|
||||
<td class="src"><pre class="src"> }</pre></td></tr>
|
||||
<tr> <td class="numLine"> 396</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment">/**</span></pre></td></tr>
|
||||
<td class="src"><pre class="src"> }</pre></td></tr>
|
||||
<tr> <td class="numLine"> 397</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment"> * Takes a full CPE and returns the CPE trimmed to include only vendor and product.</span></pre></td></tr>
|
||||
<td class="src"><pre class="src"> }</pre></td></tr>
|
||||
<tr> <td class="numLine"> 398</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment"> *</span></pre></td></tr>
|
||||
<td class="src"><pre class="src"> </pre></td></tr>
|
||||
<tr> <td class="numLine"> 399</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment"> * @param value the CPE value to trim</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 400</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment"> * @return a CPE value that only includes the vendor and product</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 401</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment"> */</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 402</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="keyword">private</span> String trimCpeToVendor(String value) {</pre></td></tr>
|
||||
<tr> <td class="numLine"> 403</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment">//cpe:/a:jruby:jruby:1.0.8</span></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 404</td> <td class="nbHitsUncovered"> 0</td> <td class="src"><pre class="src"><span class="srcUncovered"> <span class="keyword">final</span> <span class="keyword">int</span> pos1 = value.indexOf(<span class="string">":"</span>, 7); <span class="comment">//right of vendor</span></span></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 405</td> <td class="nbHitsUncovered"> 0</td> <td class="src"><pre class="src"><span class="srcUncovered"> <span class="keyword">final</span> <span class="keyword">int</span> pos2 = value.indexOf(<span class="string">":"</span>, pos1 + 1); <span class="comment">//right of product</span></span></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 406</td> <td class="nbHitsUncovered"><a title="Line 406: Conditional coverage 0% (0/2)."> 0</a></td> <td class="src"><pre class="src"><span class="srcUncovered"> <a title="Line 406: Conditional coverage 0% (0/2)."> <span class="keyword">if</span> (pos2 < 0) {</a></span></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 407</td> <td class="nbHitsUncovered"> 0</td> <td class="src"><pre class="src"><span class="srcUncovered"> <span class="keyword">return</span> value;</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 408</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> } <span class="keyword">else</span> {</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 409</td> <td class="nbHitsUncovered"> 0</td> <td class="src"><pre class="src"><span class="srcUncovered"> <span class="keyword">return</span> value.substring(0, pos2);</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 410</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> }</pre></td></tr>
|
||||
<tr> <td class="numLine"> 411</td> <td class="nbHits"> </td>
|
||||
<tr> <td class="numLineCover"> 400</td> <td class="nbHitsCovered"> 6</td> <td class="src"><pre class="src"> }</pre></td></tr>
|
||||
<tr> <td class="numLine"> 401</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> </pre></td></tr>
|
||||
<tr> <td class="numLine"> 402</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment">/**</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 403</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment"> * Retrieves a given dependency, based on a given path, from a list of dependencies.</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 404</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment"> *</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 405</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment"> * @param dependencyPath the path of the dependency to return</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 406</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment"> * @param dependencies the collection of dependencies to search</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 407</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment"> * @return the dependency object for the given path, otherwise null</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 408</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment"> */</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 409</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="keyword">private</span> Dependency findDependency(String dependencyPath, List<Dependency> dependencies) {</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 410</td> <td class="nbHitsUncovered"><a title="Line 410: Conditional coverage 0% (0/2)."> 0</a></td> <td class="src"><pre class="src"><span class="srcUncovered"> <a title="Line 410: Conditional coverage 0% (0/2)."> <span class="keyword">for</span> (Dependency d : dependencies) {</a></span></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 411</td> <td class="nbHitsUncovered"><a title="Line 411: Conditional coverage 0% (0/2)."> 0</a></td> <td class="src"><pre class="src"><span class="srcUncovered"> <a title="Line 411: Conditional coverage 0% (0/2)."> <span class="keyword">if</span> (d.getFilePath().equalsIgnoreCase(dependencyPath)) {</a></span></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 412</td> <td class="nbHitsUncovered"> 0</td> <td class="src"><pre class="src"><span class="srcUncovered"> <span class="keyword">return</span> d;</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 413</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> }</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 414</td> <td class="nbHitsUncovered"> 0</td> <td class="src"><pre class="src"><span class="srcUncovered"> }</span></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 415</td> <td class="nbHitsUncovered"> 0</td> <td class="src"><pre class="src"><span class="srcUncovered"> <span class="keyword">return</span> <span class="keyword">null</span>;</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 416</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> }</pre></td></tr>
|
||||
<tr> <td class="numLine"> 412</td> <td class="nbHits"> </td>
|
||||
<tr> <td class="numLine"> 417</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> </pre></td></tr>
|
||||
<tr> <td class="numLine"> 418</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment">/**</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 419</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment"> * Takes a full CPE and returns the CPE trimmed to include only vendor and product.</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 420</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment"> *</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 421</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment"> * @param value the CPE value to trim</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 422</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment"> * @return a CPE value that only includes the vendor and product</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 423</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment"> */</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 424</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="keyword">private</span> String trimCpeToVendor(String value) {</pre></td></tr>
|
||||
<tr> <td class="numLine"> 425</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> <span class="comment">//cpe:/a:jruby:jruby:1.0.8</span></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 426</td> <td class="nbHitsUncovered"> 0</td> <td class="src"><pre class="src"><span class="srcUncovered"> <span class="keyword">final</span> <span class="keyword">int</span> pos1 = value.indexOf(<span class="string">":"</span>, 7); <span class="comment">//right of vendor</span></span></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 427</td> <td class="nbHitsUncovered"> 0</td> <td class="src"><pre class="src"><span class="srcUncovered"> <span class="keyword">final</span> <span class="keyword">int</span> pos2 = value.indexOf(<span class="string">":"</span>, pos1 + 1); <span class="comment">//right of product</span></span></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 428</td> <td class="nbHitsUncovered"><a title="Line 428: Conditional coverage 0% (0/2)."> 0</a></td> <td class="src"><pre class="src"><span class="srcUncovered"> <a title="Line 428: Conditional coverage 0% (0/2)."> <span class="keyword">if</span> (pos2 < 0) {</a></span></pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 429</td> <td class="nbHitsUncovered"> 0</td> <td class="src"><pre class="src"><span class="srcUncovered"> <span class="keyword">return</span> value;</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 430</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> } <span class="keyword">else</span> {</pre></td></tr>
|
||||
<tr> <td class="numLineCover"> 431</td> <td class="nbHitsUncovered"> 0</td> <td class="src"><pre class="src"><span class="srcUncovered"> <span class="keyword">return</span> value.substring(0, pos2);</span></pre></td></tr>
|
||||
<tr> <td class="numLine"> 432</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> }</pre></td></tr>
|
||||
<tr> <td class="numLine"> 433</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> }</pre></td></tr>
|
||||
<tr> <td class="numLine"> 434</td> <td class="nbHits"> </td>
|
||||
<td class="src"><pre class="src"> }</pre></td></tr>
|
||||
</table>
|
||||
|
||||
<div class="footer">Report generated by <a href="http://cobertura.sourceforge.net/" target="_top">Cobertura</a> 2.0.3 on 5/10/14 8:03 AM.</div>
|
||||
<div class="footer">Report generated by <a href="http://cobertura.sourceforge.net/" target="_top">Cobertura</a> 2.0.3 on 6/22/14 8:56 PM.</div>
|
||||
</body>
|
||||
</html>
|
||||
|
||||
Reference in New Issue
Block a user