Commit Graph

1121 Commits

Author SHA1 Message Date
Jeremy Long
2e24eda00d fixed false positives related to Apache POI and MS Office CPE/CVE per issue #126
Former-commit-id: 8cc26dc25ef613dd308388452c08a9f5852843ad
2014-05-14 19:17:47 -04:00
Jeremy Long
7a653abf22 Update JarAnalyze to resolve issue #127
Updated JarAnalyzer to resolve issue #127 - duplicate package and package name evidence in the report.

Former-commit-id: ed40398c0b00e5fd5065705772ad15afaf5c7e0c
2014-05-14 18:01:12 -04:00
Jeremy Long
ae09229107 updated version to 1.2.2-SNAPSHOT
Former-commit-id: affbbe1f04a1e3de600e7498faa4f11c0d6d93c1
2014-05-10 08:41:37 -04:00
Jeremy Long
be35f48bdd updated to release version 1.2.1
Former-commit-id: 1564da513f47b9256cb2e79918fcd2d6dd0091bb
2014-05-10 08:32:34 -04:00
Jeremy Long
846173844e updated sample report
Former-commit-id: 35d6cb454ad1c6440d60c4717f33cf1eed733c2b
2014-05-10 07:25:42 -04:00
Jeremy Long
59c28d8e51 fixed typo in log statement
Former-commit-id: 9109a644f1360571d83ff39d4ff5b05898c791ac
2014-05-10 07:23:18 -04:00
Jeremy Long
abdfa3ccf6 pmd correction to logger
Former-commit-id: 500aa687bfa3dd9c126898e79121425e5e7e2e9d
2014-05-10 07:16:50 -04:00
Jeremy Long
99ad6634c4 checkstyle corrections
Former-commit-id: f0470062a3123825041e4db04fa128398a35994d
2014-05-10 07:13:07 -04:00
Jeremy Long
84556fb055 updated version of presentation
Former-commit-id: 9660d3fb6b20e43c9b677f97f8756e2c341ae66d
2014-05-10 07:12:56 -04:00
Jeremy Long
26e14e0151 added additional test file
Former-commit-id: e3a9aee97727ad8e60fc1a2a7c9a8abd7dc71e88
2014-05-10 07:01:24 -04:00
Jeremy Long
3df2daa5cb updated to remove archive files from the list of dependencies - additionally, if a zip file appears to be a jar it will now make a copy of the zip and scan it as a jar
Former-commit-id: e3b30cc5eaee14aa4ee7626adf2411972b26376a
2014-05-10 07:00:43 -04:00
Jeremy Long
c55efddc81 patch to remove additional false positives due to SCM entries in the pom
Former-commit-id: 7f889606bf9ece29121a14167b01ad6f5b93df76
2014-05-10 06:59:34 -04:00
Jeremy Long
a59c8908f0 updated to use displayFileName field instead of FileName when writing information about dependencies
Former-commit-id: 1ee4a19dda8de0678329c6d43a759696b16d363c
2014-05-10 06:58:51 -04:00
Jeremy Long
a421c5f952 added displayFileName field to the dependency class
Former-commit-id: 0b4af6346a1bfd1034a3b65e766c11a42dfcdf65
2014-05-10 06:57:44 -04:00
Jeremy Long
37b0612d45 removed additional false positives as part of patch for issue #93 and #119
Former-commit-id: 1d9275cc6f466beaa18a362515be98bafe9608b3
2014-05-10 06:56:53 -04:00
Jeremy Long
07bc94f9f6 fixed spelling error
Former-commit-id: 0bc1ec7d8a265a37751c23aa00733a9f002e6231
2014-05-07 19:33:59 -04:00
Jeremy Long
82511880ac Merge pull request #122 from colezlaw/master
Fixed logging order of GrokAssembly for bad assemblies. Using resources ...

Former-commit-id: 78c484c7803b80bcb21b15351989805a627d38fd
2014-05-07 19:31:59 -04:00
Jeremy Long
2f5cc6a8a4 added checks before warning that a file could not be deleted
Former-commit-id: b98d25e875e7523288df2cb0fed0b4518e4b52f4
2014-05-07 19:31:21 -04:00
Jeremy Long
f9a0f5e7a1 fixed display bug when only one CPE exists for a given CVE
Former-commit-id: c1a96d619ce9bcbf78d91322d95168333a76fea9
2014-05-07 19:30:45 -04:00
Jeremy Long
47b083eaca fixed display bug when only one CPE exists for a given CVE
Former-commit-id: 970b24e3f4d3203f17dc1269cec4156c98479d3a
2014-05-07 19:29:52 -04:00
Jeremy Long
8fcf5ee760 fixed bug causing vulnerabilities to be missed
Former-commit-id: e625225c6be3be1b471fab48c6eda0a616febfb9
2014-05-07 07:05:37 -04:00
Jeremy Long
f2006206d3 moved duplicated code to a method
Former-commit-id: ad0575ad74b7b5b3f420e466ca9a79f0ee2a2d69
2014-05-07 07:03:38 -04:00
Jeremy Long
c32361a428 fixed off by one string truncation issue
Former-commit-id: deead918832638cf9c7aadec194dad38f976946b
2014-05-07 07:03:02 -04:00
Will Stranathan
ac83c2bc3c Fixed logging order of GrokAssembly for bad assemblies. Using resources for logging
Former-commit-id: f2f833e67e20468ded70394ab71b481708c63d2a
2014-05-03 19:12:39 -04:00
Jeremy Long
32808c16e7 updates to help resolve issue 119
Former-commit-id: 89dd3034c595b658693a3cde0dac7259403bcf14
2014-05-03 14:46:48 -04:00
Jeremy Long
e4e2433396 updated test case and related data
Former-commit-id: ef8350d1502f69dd7c677fd688e76855f7d9985a
2014-05-03 12:30:29 -04:00
Jeremy Long
8196b6e69e updated to begin fixes for issue #90 and #119
Former-commit-id: 36248efb48af1a7cfc174b8d23be673fe7ca93e8
2014-05-03 12:30:07 -04:00
Jeremy Long
8dd49b6156 added local copies of the NVD CVE data to speed up some of the test cases
Former-commit-id: 04f220ef62303f672afb10ba44fdb4c44af35a09
2014-05-03 11:02:23 -04:00
Jeremy Long
c4ab83a801 updated to use local copy of data files to speedup the test case
Former-commit-id: 896363f35802484057cfcb3cefe8b6cd1782a02c
2014-05-03 11:01:31 -04:00
Jeremy Long
2c51b7b835 removed duplicative test
Former-commit-id: 6b8ccf6c0e94827b165d6cabc935086905858675
2014-05-03 11:00:48 -04:00
Jeremy Long
bab49d04b7 added additional informational log statements
Former-commit-id: 25218345994ffef6506f38f8aa517abd78ceec2c
2014-05-03 11:00:21 -04:00
Jeremy Long
6963d66240 updated settings cleanup to prevent issue with the update process
Former-commit-id: deba93c236f7f441df73e44ec57a4fc52260f965
2014-05-03 10:59:47 -04:00
Jeremy Long
8cbf3ffc6b updated the URL for the NVD CVE external link
Former-commit-id: 7bb12ada0d54613f4067b96fb94a47e874384183
2014-05-03 10:58:41 -04:00
Jeremy Long
2a4693f6ed updated the URL for the NVD CVE external link
Former-commit-id: 506296925066d0ea1def5035b45dfb21302e9559
2014-05-03 10:58:16 -04:00
Jeremy Long
217256746c updated the URL for the NVD CVE external link
Former-commit-id: e44b70462275d0f0ab71c56b24d60dba8ea84a42
2014-05-03 10:57:44 -04:00
Jeremy Long
6c90225024 updated settings cleanup to prevent issue with the update process
Former-commit-id: eed7771b12afdf7e7bdb506dee5798062b326cab
2014-05-03 10:55:56 -04:00
Jeremy Long
92d8a894e3 updated settings cleanup to prevent issue with the update process
Former-commit-id: 7b290d8aacb8f78c1064fd210b1e100da5cb86b8
2014-05-03 10:55:15 -04:00
Jeremy Long
c89d619808 applied part of PR for issue #121 - classpath issue with some invocations of the ant client
Former-commit-id: 7c0a0531c753e2ccfb0bdb15a1b179697b9f8905
2014-05-03 09:54:11 -04:00
Jeremy Long
31dd4f6305 added additional dependencies for testing
Former-commit-id: 9d15401c471ff20d1bac1e46073c79fac435e335
2014-05-03 09:52:57 -04:00
Jeremy Long
ff9715ede7 patched for issue #120 - duplicate evidence listed in reports
Former-commit-id: 172fe4eff369938d904ed5af871e96c281cc2b04
2014-05-03 08:52:45 -04:00
Jeremy Long
ffd1e383c2 Merge branch 'bkimminich-master'
Former-commit-id: 5f2abec6e7aa3a88dcd9c6882b039d0d5d70b165
2014-04-30 19:23:23 -04:00
Jeremy Long
2cc4f8c2fe Merge branch 'master' of github.com:bkimminich/DependencyCheck into bkimminich-master
Former-commit-id: a514663f23bf03a247afd3e4edc54e32334a2249
2014-04-30 19:23:13 -04:00
Jeremy Long
6f513eb359 version 1.2.1-SNAPSHOT
Former-commit-id: d5b3c6acf6a66d2577385a24c76f7b2a47ec350d
2014-04-30 18:30:46 -04:00
Jeremy Long
b235a5bb49 fixed issue #118
Former-commit-id: 2c9775a966f153a1cd0de5690547f0392899b744
2014-04-30 18:13:04 -04:00
Jeremy Long
25f1912573 fixed issue #118
Former-commit-id: 7866ad2b3a62c0dfeff69172657e16efa18827ae
2014-04-30 18:10:56 -04:00
Björn Kimminich
d24d6f6b52 Update AbstractSuppressionAnalyzerTest.java
Former-commit-id: 717f9e605912ff42843a8b150db191eb4bb79c90
2014-04-29 14:37:52 +02:00
Björn Kimminich
afdb156c84 simplified exception testing
Former-commit-id: cf543a3ec397e593e7de2249820bd48159132413
2014-04-29 14:29:46 +02:00
Björn Kimminich
643d3600b8 added test case for classpath suppression file and missing file
Former-commit-id: a423b1289f39757645adf4dae0122bc4cee2d1b6
2014-04-29 11:48:07 +02:00
Jeremy Long
9c51bff55b version 1.2.0
Former-commit-id: 328c54a365a210bfe9e664f4ae292af4666cbf8e
2014-04-28 08:58:09 -04:00
Jeremy Long
81c91b3877 excluded HelpMojo from PMD
Former-commit-id: dbd8aa2995ca6f652cb2bef522a5e74d995e87a0
2014-04-28 08:20:11 -04:00