codyze icon indicating copy to clipboard operation
codyze copied to clipboard

The row number and column number information is missing in some finds

Open HTQianqian opened this issue 4 years ago • 0 comments

Test Code: `package WeakEncryption.InadequateRSAPadding;

import javax.crypto.Cipher;

public class CWE780_WeakEncryption_InadequateRSAPadding_01 { public void bad() throws Exception { /* POTENTIAL FLAW: Not OAEP */ Cipher.getInstance("RSA"); }

public void good() throws Exception {
    Cipher.getInstance("RSA/ECB/OAEPWithSHA-512AndMGF1Padding");
}

} ` Checking the fowllwing result of scanning the above code, the row number and column information is missing in some finds.

[{ "problem": false, "locations": [{ "region": { "endLine": 7, "endColumn": 32, "startColumn": 27, "startLine": 7 }, "artifactLocation": {"uri": "file:/xxx/InadequateRSAPadding/CWE780_WeakEncryption_InadequateRSAPadding_01.java"} }], "logMsg": "Rule ID_2_01 verified", "onfailIdentifier": "Invalid_TR21021_Cipher" },{ "problem": false, "locations": [{ "region": { "endLine": 11, "endColumn": 66, "startColumn": 27, "startLine": 11 }, "artifactLocation": {"uri": "file:/xxx/InadequateRSAPadding/CWE780_WeakEncryption_InadequateRSAPadding_01.java"} }], "logMsg": "Rule ID_2_01 verified", "onfailIdentifier": "Invalid_TR21021_Cipher" },{ "problem": true, "locations": [], "logMsg": "Rule BouncyCastleProvider_Cipher violated", "onfailIdentifier": "InvalidProvider_Cipher" },{ "problem": true, "locations": [{ "region": { "endLine": 11, "endColumn": 66, "startColumn": 27, "startLine": 11 }, "artifactLocation": {"uri": "file:/xxx/InadequateRSAPadding/CWE780_WeakEncryption_InadequateRSAPadding_01.java"} }], "logMsg": "Rule ID_3_5_01 violated", "onfailIdentifier": "InvalidRSAPadding" },{ "problem": true, "locations": [], "logMsg": "Rule ID_3_5_01 violated", "onfailIdentifier": "InvalidRSAPadding" }]

HTQianqian avatar Nov 04 '20 15:11 HTQianqian