The Java base class jar package version is not recognized

[hatjwe]

hi,I am using this program to recognize Java language files. During the recognition process, I found that the version of the jar package of the basic Java library cannot be recognized, such as () US_export_policy.jar
charsets.jar
cldrdata.jar
dnsns.jar
icedtea-sound.jar jaccess.jar java-atk-wrapper.jar jce.jar jsse.jar 2 local_policy.jar localedata.jar management-agent.jar /usr/share/elasticsearch/lib/plugin-cli-5.6.12.jar 2 /usr/lib/jvm/java-8-openjdk-amd64/jre/lib/resources.jar /usr/lib/jvm/java-8-openjdk-amd64/jre/lib/ext/sunec.jar /usr/lib/jvm/java-8-openjdk-amd64/jre/lib/ext/sunjce_provider.jar /usr/lib/jvm/java-8-openjdk-amd64/jre/lib/ext/sunpkcs11.jar /usr/lib/jvm/java-8-openjdk-amd64/jre/lib/ext/zipfs.jar

[phoenixadb]

Same here, by analyzing a Docker image containing a Springboot applications. The JAR analyzer doesn't look inside the /BOOT-INF/lib directory for embedded JARs. This could be reproduce with any working Springboot JAR embedding JARs. Example of Springboot JAR structure: https://docs.spring.io/spring-boot/docs/current/reference/html/executable-jar.html The best way would be to inspect recursively the JAR contained inside. Another one would be to parse the classpath.idx which references the JARs. Example of classpath.idx content:

• "BOOT-INF/lib/swagger-models-1.5.20.jar"
• "BOOT-INF/lib/jackson-module-jaxb-annotations-2.13.4.jar"
• "BOOT-INF/lib/jackson-annotations-2.13.4.jar"
• "BOOT-INF/lib/jackson-datatype-jdk8-2.13.4.jar"
• "BOOT-INF/lib/jackson-module-parameter-names-2.13.4.jar"
• "BOOT-INF/lib/jackson-core-2.13.4.jar"
• "BOOT-INF/lib/jackson-datatype-joda-2.13.4.jar"