codyze
codyze copied to clipboard
The row number and column number information is missing in some finds
Test Code: `package WeakEncryption.InadequateRSAPadding;
import javax.crypto.Cipher;
public class CWE780_WeakEncryption_InadequateRSAPadding_01 { public void bad() throws Exception { /* POTENTIAL FLAW: Not OAEP */ Cipher.getInstance("RSA"); }
public void good() throws Exception {
Cipher.getInstance("RSA/ECB/OAEPWithSHA-512AndMGF1Padding");
}
} ` Checking the fowllwing result of scanning the above code, the row number and column information is missing in some finds.
[{ "problem": false, "locations": [{ "region": { "endLine": 7, "endColumn": 32, "startColumn": 27, "startLine": 7 }, "artifactLocation": {"uri": "file:/xxx/InadequateRSAPadding/CWE780_WeakEncryption_InadequateRSAPadding_01.java"} }], "logMsg": "Rule ID_2_01 verified", "onfailIdentifier": "Invalid_TR21021_Cipher" },{ "problem": false, "locations": [{ "region": { "endLine": 11, "endColumn": 66, "startColumn": 27, "startLine": 11 }, "artifactLocation": {"uri": "file:/xxx/InadequateRSAPadding/CWE780_WeakEncryption_InadequateRSAPadding_01.java"} }], "logMsg": "Rule ID_2_01 verified", "onfailIdentifier": "Invalid_TR21021_Cipher" },{ "problem": true, "locations": [], "logMsg": "Rule BouncyCastleProvider_Cipher violated", "onfailIdentifier": "InvalidProvider_Cipher" },{ "problem": true, "locations": [{ "region": { "endLine": 11, "endColumn": 66, "startColumn": 27, "startLine": 11 }, "artifactLocation": {"uri": "file:/xxx/InadequateRSAPadding/CWE780_WeakEncryption_InadequateRSAPadding_01.java"} }], "logMsg": "Rule ID_3_5_01 violated", "onfailIdentifier": "InvalidRSAPadding" },{ "problem": true, "locations": [], "logMsg": "Rule ID_3_5_01 violated", "onfailIdentifier": "InvalidRSAPadding" }]