Back to library list

com.caucho__hessian

Column Insecure: Icon yes indicates the version is insecure, otherwise no
Column CryptoMisuse: Icon yes indicates the version has cryptographic API misuse, otherwise no
Version Insecure CryptoMisuse Rule name Method Statement Details
2.1.12 no       no
3.0.8 no       no
3.1.3 no       yes Cipher com.caucho.hessian.security.X509Encryption.wrap(Lcom/caucho/hessian/io/Hessian2Output;)Lcom/caucho/hessian/io/Hessian2Output; virtualinvoke r3.<com.caucho.hessian.io.Hessian2Output: void setCloseStreamOnClose(boolean)>(varReplacer1763) Operation on object of type javax.crypto.Cipher object not completed. Expected call to update, doFinal
- - yes CipherOutputStream com.caucho.hessian.security.X509Encryption.wrap(Lcom/caucho/hessian/io/Hessian2Output;)Lcom/caucho/hessian/io/Hessian2Output; virtualinvoke r3.<com.caucho.hessian.io.Hessian2Output: void setCloseStreamOnClose(boolean)>(varReplacer1763) Operation on object of type javax.crypto.CipherOutputStream object not completed. Expected call to write
- - yes Cipher com.caucho.hessian.security.X509Encryption$EncryptInputStream.<init>(Lcom/caucho/hessian/security/X509Encryption;Lcom/caucho/hessian/io/Hessian2Input;)V r30 = virtualinvoke r29.<javax.crypto.Cipher: java.security.Key unwrap(byte[],java.lang.String,int)>(r27, r26, varReplacer1743) Operation on object of type javax.crypto.Cipher object not completed. Expected call to update, doFinal
- - yes Cipher com.caucho.hessian.security.X509Encryption$EncryptInputStream.<init>(Lcom/caucho/hessian/security/X509Encryption;Lcom/caucho/hessian/io/Hessian2Input;)V virtualinvoke $r7.<javax.crypto.Cipher: void init(int,java.security.Key)>(varReplacer1744, r30) Detected call to forbidden method void init(int,java.security.Key) of class javax.crypto.Cipher. Instead, call method <javax.crypto.Cipher: void init(int,java.security.Key)>.
- - yes Cipher com.caucho.hessian.security.X509Encryption$EncryptInputStream.<init>(Lcom/caucho/hessian/security/X509Encryption;Lcom/caucho/hessian/io/Hessian2Input;)V virtualinvoke r29.<javax.crypto.Cipher: void init(int,java.security.Key)>(varReplacer1745, $r3) Detected call to forbidden method void init(int,java.security.Key) of class javax.crypto.Cipher. Instead, call method <javax.crypto.Cipher: void init(int,java.security.Key)>.
- - yes Cipher com.caucho.hessian.security.X509Encryption$EncryptOutputStream.<init>(Lcom/caucho/hessian/security/X509Encryption;Lcom/caucho/hessian/io/Hessian2Output;)V r10 = virtualinvoke r9.<javax.crypto.Cipher: byte[] wrap(java.security.Key)>(r3) Operation on object of type javax.crypto.Cipher object not completed. Expected call to update, doFinal
- - yes KeyGenerator com.caucho.hessian.security.X509Encryption$EncryptOutputStream.<init>(Lcom/caucho/hessian/security/X509Encryption;Lcom/caucho/hessian/io/Hessian2Output;)V virtualinvoke r47.<javax.crypto.KeyGenerator: void init(java.security.SecureRandom)>($r42) First parameter was not properly generated as randomized
- - yes MessageDigest com.caucho.hessian.security.X509Encryption$EncryptOutputStream.<init>(Lcom/caucho/hessian/security/X509Encryption;Lcom/caucho/hessian/io/Hessian2Output;)V r6 = staticinvoke <java.security.MessageDigest: java.security.MessageDigest getInstance(java.lang.String)>(varReplacer1755) First parameter (with value "SHA1") should be any of {SHA-256, SHA-384, SHA-512}
- - yes Mac com.caucho.hessian.security.X509Signature.wrap(Lcom/caucho/hessian/io/Hessian2Output;)Lcom/caucho/hessian/io/Hessian2Output; virtualinvoke r3.<com.caucho.hessian.io.Hessian2Output: void setCloseStreamOnClose(boolean)>(varReplacer1792) Operation on object of type javax.crypto.Mac object not completed. Expected call to update, doFinal
- - yes Cipher com.caucho.hessian.security.X509Signature$SignatureInputStream.<init>(Lcom/caucho/hessian/security/X509Signature;Lcom/caucho/hessian/io/Hessian2Input;)V r26 = staticinvoke <javax.crypto.Cipher: javax.crypto.Cipher getInstance(java.lang.String)>(r22) First parameter (with value "true") should be any of {AES, PBEWithHmacSHA224AndAES_128, PBEWithHmacSHA256AndAES_128, PBEWithHmacSHA384AndAES_128, PBEWithHmacSHA512AndAES_128, PBEWithHmacSHA224AndAES_256, PBEWithHmacSHA256AndAES_256, PBEWithHmacSHA384AndAES_256, PBEWithHmacSHA512AndAES_256, RSA}
- - yes Cipher com.caucho.hessian.security.X509Signature$SignatureInputStream.<init>(Lcom/caucho/hessian/security/X509Signature;Lcom/caucho/hessian/io/Hessian2Input;)V r27 = virtualinvoke r26.<javax.crypto.Cipher: java.security.Key unwrap(byte[],java.lang.String,int)>(r24, r23, varReplacer1774) Operation on object of type javax.crypto.Cipher object not completed. Expected call to update, doFinal
- - yes Cipher com.caucho.hessian.security.X509Signature$SignatureOutputStream.<init>(Lcom/caucho/hessian/security/X509Signature;Lcom/caucho/hessian/io/Hessian2Output;)V r10 = virtualinvoke r9.<javax.crypto.Cipher: byte[] wrap(java.security.Key)>(r3) Operation on object of type javax.crypto.Cipher object not completed. Expected call to update, doFinal
- - yes KeyGenerator com.caucho.hessian.security.X509Signature$SignatureOutputStream.<init>(Lcom/caucho/hessian/security/X509Signature;Lcom/caucho/hessian/io/Hessian2Output;)V virtualinvoke r39.<javax.crypto.KeyGenerator: void init(java.security.SecureRandom)>($r34) First parameter was not properly generated as randomized
- - yes MessageDigest com.caucho.hessian.security.X509Signature$SignatureOutputStream.<init>(Lcom/caucho/hessian/security/X509Signature;Lcom/caucho/hessian/io/Hessian2Output;)V r6 = staticinvoke <java.security.MessageDigest: java.security.MessageDigest getInstance(java.lang.String)>(varReplacer1781) First parameter (with value "SHA1") should be any of {SHA-256, SHA-384, SHA-512}
3.1.5 no       yes Cipher com.caucho.hessian.security.X509Encryption.wrap(Lcom/caucho/hessian/io/Hessian2Output;)Lcom/caucho/hessian/io/Hessian2Output; virtualinvoke r3.<com.caucho.hessian.io.Hessian2Output: void setCloseStreamOnClose(boolean)>(varReplacer1748) Operation on object of type javax.crypto.Cipher object not completed. Expected call to update, doFinal
- - yes CipherOutputStream com.caucho.hessian.security.X509Encryption.wrap(Lcom/caucho/hessian/io/Hessian2Output;)Lcom/caucho/hessian/io/Hessian2Output; virtualinvoke r3.<com.caucho.hessian.io.Hessian2Output: void setCloseStreamOnClose(boolean)>(varReplacer1748) Operation on object of type javax.crypto.CipherOutputStream object not completed. Expected call to write
- - yes Cipher com.caucho.hessian.security.X509Encryption$EncryptInputStream.<init>(Lcom/caucho/hessian/security/X509Encryption;Lcom/caucho/hessian/io/Hessian2Input;)V r30 = virtualinvoke r29.<javax.crypto.Cipher: java.security.Key unwrap(byte[],java.lang.String,int)>(r27, r26, varReplacer1732) Operation on object of type javax.crypto.Cipher object not completed. Expected call to update, doFinal
- - yes Cipher com.caucho.hessian.security.X509Encryption$EncryptInputStream.<init>(Lcom/caucho/hessian/security/X509Encryption;Lcom/caucho/hessian/io/Hessian2Input;)V virtualinvoke $r7.<javax.crypto.Cipher: void init(int,java.security.Key)>(varReplacer1729, r30) Detected call to forbidden method void init(int,java.security.Key) of class javax.crypto.Cipher. Instead, call method <javax.crypto.Cipher: void init(int,java.security.Key)>.
- - yes Cipher com.caucho.hessian.security.X509Encryption$EncryptInputStream.<init>(Lcom/caucho/hessian/security/X509Encryption;Lcom/caucho/hessian/io/Hessian2Input;)V virtualinvoke r29.<javax.crypto.Cipher: void init(int,java.security.Key)>(varReplacer1730, $r3) Detected call to forbidden method void init(int,java.security.Key) of class javax.crypto.Cipher. Instead, call method <javax.crypto.Cipher: void init(int,java.security.Key)>.
- - yes Cipher com.caucho.hessian.security.X509Encryption$EncryptOutputStream.<init>(Lcom/caucho/hessian/security/X509Encryption;Lcom/caucho/hessian/io/Hessian2Output;)V r10 = virtualinvoke r9.<javax.crypto.Cipher: byte[] wrap(java.security.Key)>(r3) Operation on object of type javax.crypto.Cipher object not completed. Expected call to update, doFinal
- - yes KeyGenerator com.caucho.hessian.security.X509Encryption$EncryptOutputStream.<init>(Lcom/caucho/hessian/security/X509Encryption;Lcom/caucho/hessian/io/Hessian2Output;)V virtualinvoke r47.<javax.crypto.KeyGenerator: void init(java.security.SecureRandom)>($r42) First parameter was not properly generated as randomized
- - yes MessageDigest com.caucho.hessian.security.X509Encryption$EncryptOutputStream.<init>(Lcom/caucho/hessian/security/X509Encryption;Lcom/caucho/hessian/io/Hessian2Output;)V r6 = staticinvoke <java.security.MessageDigest: java.security.MessageDigest getInstance(java.lang.String)>(varReplacer1739) First parameter (with value "SHA1") should be any of {SHA-256, SHA-384, SHA-512}
- - yes Mac com.caucho.hessian.security.X509Signature.wrap(Lcom/caucho/hessian/io/Hessian2Output;)Lcom/caucho/hessian/io/Hessian2Output; virtualinvoke r3.<com.caucho.hessian.io.Hessian2Output: void setCloseStreamOnClose(boolean)>(varReplacer1779) Operation on object of type javax.crypto.Mac object not completed. Expected call to update, doFinal
- - yes Cipher com.caucho.hessian.security.X509Signature$SignatureInputStream.<init>(Lcom/caucho/hessian/security/X509Signature;Lcom/caucho/hessian/io/Hessian2Input;)V r27 = virtualinvoke r26.<javax.crypto.Cipher: java.security.Key unwrap(byte[],java.lang.String,int)>(r24, r23, varReplacer1761) Operation on object of type javax.crypto.Cipher object not completed. Expected call to update, doFinal
- - yes Cipher com.caucho.hessian.security.X509Signature$SignatureInputStream.<init>(Lcom/caucho/hessian/security/X509Signature;Lcom/caucho/hessian/io/Hessian2Input;)V virtualinvoke r26.<javax.crypto.Cipher: void init(int,java.security.cert.Certificate)>(varReplacer1759, $r3) Detected call to forbidden method void init(int,java.security.cert.Certificate) of class javax.crypto.Cipher. Instead, call method <javax.crypto.Cipher: void init(int,java.security.cert.Certificate)>.
- - yes Cipher com.caucho.hessian.security.X509Signature$SignatureOutputStream.<init>(Lcom/caucho/hessian/security/X509Signature;Lcom/caucho/hessian/io/Hessian2Output;)V r10 = virtualinvoke r9.<javax.crypto.Cipher: byte[] wrap(java.security.Key)>(r3) Operation on object of type javax.crypto.Cipher object not completed. Expected call to update, doFinal
- - yes KeyGenerator com.caucho.hessian.security.X509Signature$SignatureOutputStream.<init>(Lcom/caucho/hessian/security/X509Signature;Lcom/caucho/hessian/io/Hessian2Output;)V virtualinvoke r39.<javax.crypto.KeyGenerator: void init(java.security.SecureRandom)>($r34) First parameter was not properly generated as randomized
- - yes MessageDigest com.caucho.hessian.security.X509Signature$SignatureOutputStream.<init>(Lcom/caucho/hessian/security/X509Signature;Lcom/caucho/hessian/io/Hessian2Output;)V r6 = staticinvoke <java.security.MessageDigest: java.security.MessageDigest getInstance(java.lang.String)>(varReplacer1771) First parameter (with value "SHA1") should be any of {SHA-256, SHA-384, SHA-512}
4.0.7 no       yes Cipher com.caucho.hessian.security.X509Encryption.wrap(Lcom/caucho/hessian/io/Hessian2Output;)Lcom/caucho/hessian/io/Hessian2Output; virtualinvoke r3.<com.caucho.hessian.io.Hessian2Output: void setCloseStreamOnClose(boolean)>(varReplacer2170) Operation on object of type javax.crypto.Cipher object not completed. Expected call to update, doFinal
- - yes CipherOutputStream com.caucho.hessian.security.X509Encryption.wrap(Lcom/caucho/hessian/io/Hessian2Output;)Lcom/caucho/hessian/io/Hessian2Output; virtualinvoke r3.<com.caucho.hessian.io.Hessian2Output: void setCloseStreamOnClose(boolean)>(varReplacer2170) Operation on object of type javax.crypto.CipherOutputStream object not completed. Expected call to write
- - yes Cipher com.caucho.hessian.security.X509Encryption$EncryptInputStream.<init>(Lcom/caucho/hessian/security/X509Encryption;Lcom/caucho/hessian/io/Hessian2Input;)V r30 = virtualinvoke r29.<javax.crypto.Cipher: java.security.Key unwrap(byte[],java.lang.String,int)>(r27, r26, varReplacer2152) Operation on object of type javax.crypto.Cipher object not completed. Expected call to update, doFinal
- - yes Cipher com.caucho.hessian.security.X509Encryption$EncryptInputStream.<init>(Lcom/caucho/hessian/security/X509Encryption;Lcom/caucho/hessian/io/Hessian2Input;)V virtualinvoke $r7.<javax.crypto.Cipher: void init(int,java.security.Key)>(varReplacer2150, r30) Detected call to forbidden method void init(int,java.security.Key) of class javax.crypto.Cipher. Instead, call method <javax.crypto.Cipher: void init(int,java.security.Key)>.
- - yes Cipher com.caucho.hessian.security.X509Encryption$EncryptInputStream.<init>(Lcom/caucho/hessian/security/X509Encryption;Lcom/caucho/hessian/io/Hessian2Input;)V virtualinvoke r29.<javax.crypto.Cipher: void init(int,java.security.Key)>(varReplacer2153, $r3) Detected call to forbidden method void init(int,java.security.Key) of class javax.crypto.Cipher. Instead, call method <javax.crypto.Cipher: void init(int,java.security.Key)>.
- - yes Cipher com.caucho.hessian.security.X509Encryption$EncryptOutputStream.<init>(Lcom/caucho/hessian/security/X509Encryption;Lcom/caucho/hessian/io/Hessian2Output;)V r10 = virtualinvoke r9.<javax.crypto.Cipher: byte[] wrap(java.security.Key)>(r3) Operation on object of type javax.crypto.Cipher object not completed. Expected call to update, doFinal
- - yes KeyGenerator com.caucho.hessian.security.X509Encryption$EncryptOutputStream.<init>(Lcom/caucho/hessian/security/X509Encryption;Lcom/caucho/hessian/io/Hessian2Output;)V virtualinvoke r47.<javax.crypto.KeyGenerator: void init(java.security.SecureRandom)>($r42) First parameter was not properly generated as randomized
- - yes MessageDigest com.caucho.hessian.security.X509Encryption$EncryptOutputStream.<init>(Lcom/caucho/hessian/security/X509Encryption;Lcom/caucho/hessian/io/Hessian2Output;)V r6 = staticinvoke <java.security.MessageDigest: java.security.MessageDigest getInstance(java.lang.String)>(varReplacer2165) First parameter (with value "SHA1") should be any of {SHA-256, SHA-384, SHA-512}
- - yes Mac com.caucho.hessian.security.X509Signature.wrap(Lcom/caucho/hessian/io/Hessian2Output;)Lcom/caucho/hessian/io/Hessian2Output; virtualinvoke r3.<com.caucho.hessian.io.Hessian2Output: void setCloseStreamOnClose(boolean)>(varReplacer2200) Operation on object of type javax.crypto.Mac object not completed. Expected call to update, doFinal
- - yes Cipher com.caucho.hessian.security.X509Signature$SignatureInputStream.<init>(Lcom/caucho/hessian/security/X509Signature;Lcom/caucho/hessian/io/Hessian2Input;)V r27 = virtualinvoke r26.<javax.crypto.Cipher: java.security.Key unwrap(byte[],java.lang.String,int)>(r24, r23, varReplacer2181) Operation on object of type javax.crypto.Cipher object not completed. Expected call to update, doFinal
- - yes Cipher com.caucho.hessian.security.X509Signature$SignatureInputStream.<init>(Lcom/caucho/hessian/security/X509Signature;Lcom/caucho/hessian/io/Hessian2Input;)V virtualinvoke r26.<javax.crypto.Cipher: void init(int,java.security.cert.Certificate)>(varReplacer2180, $r3) Detected call to forbidden method void init(int,java.security.cert.Certificate) of class javax.crypto.Cipher. Instead, call method <javax.crypto.Cipher: void init(int,java.security.cert.Certificate)>.
- - yes Cipher com.caucho.hessian.security.X509Signature$SignatureOutputStream.<init>(Lcom/caucho/hessian/security/X509Signature;Lcom/caucho/hessian/io/Hessian2Output;)V r10 = virtualinvoke r9.<javax.crypto.Cipher: byte[] wrap(java.security.Key)>(r3) Operation on object of type javax.crypto.Cipher object not completed. Expected call to update, doFinal
- - yes KeyGenerator com.caucho.hessian.security.X509Signature$SignatureOutputStream.<init>(Lcom/caucho/hessian/security/X509Signature;Lcom/caucho/hessian/io/Hessian2Output;)V virtualinvoke r39.<javax.crypto.KeyGenerator: void init(java.security.SecureRandom)>($r34) First parameter was not properly generated as randomized
- - yes MessageDigest com.caucho.hessian.security.X509Signature$SignatureOutputStream.<init>(Lcom/caucho/hessian/security/X509Signature;Lcom/caucho/hessian/io/Hessian2Output;)V r6 = staticinvoke <java.security.MessageDigest: java.security.MessageDigest getInstance(java.lang.String)>(varReplacer2193) First parameter (with value "SHA1") should be any of {SHA-256, SHA-384, SHA-512}
4.0.33 no       yes Cipher com.caucho.hessian.security.X509Encryption.unwrapHeaders(Lcom/caucho/hessian/io/Hessian2Input;)Lcom/caucho/hessian/io/Hessian2Input; specialinvoke $r7.<com.caucho.hessian.io.Hessian2Input: void <init>(java.io.InputStream)>(r2) Operation on object of type javax.crypto.Cipher object not completed. Expected call to init
- - yes Cipher com.caucho.hessian.security.X509Encryption.wrap(Lcom/caucho/hessian/io/Hessian2Output;)Lcom/caucho/hessian/io/Hessian2Output; virtualinvoke r3.<com.caucho.hessian.io.Hessian2Output: void setCloseStreamOnClose(boolean)>(varReplacer2227) Operation on object of type javax.crypto.Cipher object not completed. Expected call to update, doFinal
- - yes CipherOutputStream com.caucho.hessian.security.X509Encryption.wrap(Lcom/caucho/hessian/io/Hessian2Output;)Lcom/caucho/hessian/io/Hessian2Output; virtualinvoke r3.<com.caucho.hessian.io.Hessian2Output: void setCloseStreamOnClose(boolean)>(varReplacer2227) Operation on object of type javax.crypto.CipherOutputStream object not completed. Expected call to write
- - yes Cipher com.caucho.hessian.security.X509Encryption$EncryptInputStream.<init>(Lcom/caucho/hessian/security/X509Encryption;Lcom/caucho/hessian/io/Hessian2Input;)V r30 = virtualinvoke r29.<javax.crypto.Cipher: java.security.Key unwrap(byte[],java.lang.String,int)>(r27, r26, varReplacer2207) Operation on object of type javax.crypto.Cipher object not completed. Expected call to update, doFinal
- - yes Cipher com.caucho.hessian.security.X509Encryption$EncryptInputStream.<init>(Lcom/caucho/hessian/security/X509Encryption;Lcom/caucho/hessian/io/Hessian2Input;)V virtualinvoke r29.<javax.crypto.Cipher: void init(int,java.security.Key)>(varReplacer2206, $r3) Detected call to forbidden method void init(int,java.security.Key) of class javax.crypto.Cipher. Instead, call method <javax.crypto.Cipher: void init(int,java.security.Key)>.
- - yes Cipher com.caucho.hessian.security.X509Encryption$EncryptOutputStream.<init>(Lcom/caucho/hessian/security/X509Encryption;Lcom/caucho/hessian/io/Hessian2Output;)V r10 = virtualinvoke r9.<javax.crypto.Cipher: byte[] wrap(java.security.Key)>(r3) Operation on object of type javax.crypto.Cipher object not completed. Expected call to update, doFinal
- - yes KeyGenerator com.caucho.hessian.security.X509Encryption$EncryptOutputStream.<init>(Lcom/caucho/hessian/security/X509Encryption;Lcom/caucho/hessian/io/Hessian2Output;)V virtualinvoke r47.<javax.crypto.KeyGenerator: void init(java.security.SecureRandom)>($r42) First parameter was not properly generated as randomized
- - yes MessageDigest com.caucho.hessian.security.X509Encryption$EncryptOutputStream.<init>(Lcom/caucho/hessian/security/X509Encryption;Lcom/caucho/hessian/io/Hessian2Output;)V r6 = staticinvoke <java.security.MessageDigest: java.security.MessageDigest getInstance(java.lang.String)>(varReplacer2213) First parameter (with value "SHA1") should be any of {SHA-256, SHA-384, SHA-512}
- - yes Mac com.caucho.hessian.security.X509Signature.wrap(Lcom/caucho/hessian/io/Hessian2Output;)Lcom/caucho/hessian/io/Hessian2Output; virtualinvoke r3.<com.caucho.hessian.io.Hessian2Output: void setCloseStreamOnClose(boolean)>(varReplacer2257) Operation on object of type javax.crypto.Mac object not completed. Expected call to update, doFinal
- - yes Cipher com.caucho.hessian.security.X509Signature$SignatureInputStream.<init>(Lcom/caucho/hessian/security/X509Signature;Lcom/caucho/hessian/io/Hessian2Input;)V r27 = virtualinvoke r26.<javax.crypto.Cipher: java.security.Key unwrap(byte[],java.lang.String,int)>(r24, r23, varReplacer2236) Operation on object of type javax.crypto.Cipher object not completed. Expected call to update, doFinal
- - yes Cipher com.caucho.hessian.security.X509Signature$SignatureInputStream.<init>(Lcom/caucho/hessian/security/X509Signature;Lcom/caucho/hessian/io/Hessian2Input;)V virtualinvoke r26.<javax.crypto.Cipher: void init(int,java.security.cert.Certificate)>(varReplacer2237, $r3) Detected call to forbidden method void init(int,java.security.cert.Certificate) of class javax.crypto.Cipher. Instead, call method <javax.crypto.Cipher: void init(int,java.security.cert.Certificate)>.
- - yes Cipher com.caucho.hessian.security.X509Signature$SignatureOutputStream.<init>(Lcom/caucho/hessian/security/X509Signature;Lcom/caucho/hessian/io/Hessian2Output;)V r10 = virtualinvoke r9.<javax.crypto.Cipher: byte[] wrap(java.security.Key)>(r3) Operation on object of type javax.crypto.Cipher object not completed. Expected call to update, doFinal
- - yes KeyGenerator com.caucho.hessian.security.X509Signature$SignatureOutputStream.<init>(Lcom/caucho/hessian/security/X509Signature;Lcom/caucho/hessian/io/Hessian2Output;)V virtualinvoke r39.<javax.crypto.KeyGenerator: void init(java.security.SecureRandom)>($r34) First parameter was not properly generated as randomized
- - yes MessageDigest com.caucho.hessian.security.X509Signature$SignatureOutputStream.<init>(Lcom/caucho/hessian/security/X509Signature;Lcom/caucho/hessian/io/Hessian2Output;)V r6 = staticinvoke <java.security.MessageDigest: java.security.MessageDigest getInstance(java.lang.String)>(varReplacer2245) First parameter (with value "SHA1") should be any of {SHA-256, SHA-384, SHA-512}
4.0.38 no       yes Cipher com.caucho.hessian.security.X509Encryption.wrap(Lcom/caucho/hessian/io/Hessian2Output;)Lcom/caucho/hessian/io/Hessian2Output; virtualinvoke r3.<com.caucho.hessian.io.Hessian2Output: void setCloseStreamOnClose(boolean)>(varReplacer2228) Operation on object of type javax.crypto.Cipher object not completed. Expected call to update, doFinal
- - yes CipherOutputStream com.caucho.hessian.security.X509Encryption.wrap(Lcom/caucho/hessian/io/Hessian2Output;)Lcom/caucho/hessian/io/Hessian2Output; virtualinvoke r3.<com.caucho.hessian.io.Hessian2Output: void setCloseStreamOnClose(boolean)>(varReplacer2228) Operation on object of type javax.crypto.CipherOutputStream object not completed. Expected call to write
- - yes Cipher com.caucho.hessian.security.X509Encryption$EncryptInputStream.<init>(Lcom/caucho/hessian/security/X509Encryption;Lcom/caucho/hessian/io/Hessian2Input;)V r30 = virtualinvoke r29.<javax.crypto.Cipher: java.security.Key unwrap(byte[],java.lang.String,int)>(r27, r26, varReplacer2208) Operation on object of type javax.crypto.Cipher object not completed. Expected call to update, doFinal
- - yes Cipher com.caucho.hessian.security.X509Encryption$EncryptInputStream.<init>(Lcom/caucho/hessian/security/X509Encryption;Lcom/caucho/hessian/io/Hessian2Input;)V virtualinvoke r29.<javax.crypto.Cipher: void init(int,java.security.Key)>(varReplacer2210, $r3) Detected call to forbidden method void init(int,java.security.Key) of class javax.crypto.Cipher. Instead, call method <javax.crypto.Cipher: void init(int,java.security.Key)>.
- - yes Cipher com.caucho.hessian.security.X509Encryption$EncryptOutputStream.<init>(Lcom/caucho/hessian/security/X509Encryption;Lcom/caucho/hessian/io/Hessian2Output;)V r10 = virtualinvoke r9.<javax.crypto.Cipher: byte[] wrap(java.security.Key)>(r3) Operation on object of type javax.crypto.Cipher object not completed. Expected call to update, doFinal
- - yes KeyGenerator com.caucho.hessian.security.X509Encryption$EncryptOutputStream.<init>(Lcom/caucho/hessian/security/X509Encryption;Lcom/caucho/hessian/io/Hessian2Output;)V virtualinvoke r47.<javax.crypto.KeyGenerator: void init(java.security.SecureRandom)>($r42) First parameter was not properly generated as randomized
- - yes MessageDigest com.caucho.hessian.security.X509Encryption$EncryptOutputStream.<init>(Lcom/caucho/hessian/security/X509Encryption;Lcom/caucho/hessian/io/Hessian2Output;)V r6 = staticinvoke <java.security.MessageDigest: java.security.MessageDigest getInstance(java.lang.String)>(varReplacer2216) First parameter (with value "SHA1") should be any of {SHA-256, SHA-384, SHA-512}
- - yes Mac com.caucho.hessian.security.X509Signature.wrap(Lcom/caucho/hessian/io/Hessian2Output;)Lcom/caucho/hessian/io/Hessian2Output; virtualinvoke r3.<com.caucho.hessian.io.Hessian2Output: void setCloseStreamOnClose(boolean)>(varReplacer2256) Operation on object of type javax.crypto.Mac object not completed. Expected call to update, doFinal
- - yes Cipher com.caucho.hessian.security.X509Signature$SignatureInputStream.<init>(Lcom/caucho/hessian/security/X509Signature;Lcom/caucho/hessian/io/Hessian2Input;)V r27 = virtualinvoke r26.<javax.crypto.Cipher: java.security.Key unwrap(byte[],java.lang.String,int)>(r24, r23, varReplacer2237) Operation on object of type javax.crypto.Cipher object not completed. Expected call to update, doFinal
- - yes Cipher com.caucho.hessian.security.X509Signature$SignatureInputStream.<init>(Lcom/caucho/hessian/security/X509Signature;Lcom/caucho/hessian/io/Hessian2Input;)V virtualinvoke r26.<javax.crypto.Cipher: void init(int,java.security.cert.Certificate)>(varReplacer2238, $r3) Detected call to forbidden method void init(int,java.security.cert.Certificate) of class javax.crypto.Cipher. Instead, call method <javax.crypto.Cipher: void init(int,java.security.cert.Certificate)>.
- - yes Cipher com.caucho.hessian.security.X509Signature$SignatureOutputStream.<init>(Lcom/caucho/hessian/security/X509Signature;Lcom/caucho/hessian/io/Hessian2Output;)V r10 = virtualinvoke r9.<javax.crypto.Cipher: byte[] wrap(java.security.Key)>(r3) Operation on object of type javax.crypto.Cipher object not completed. Expected call to update, doFinal
- - yes KeyGenerator com.caucho.hessian.security.X509Signature$SignatureOutputStream.<init>(Lcom/caucho/hessian/security/X509Signature;Lcom/caucho/hessian/io/Hessian2Output;)V virtualinvoke r39.<javax.crypto.KeyGenerator: void init(java.security.SecureRandom)>($r34) First parameter was not properly generated as randomized
- - yes MessageDigest com.caucho.hessian.security.X509Signature$SignatureOutputStream.<init>(Lcom/caucho/hessian/security/X509Signature;Lcom/caucho/hessian/io/Hessian2Output;)V r6 = staticinvoke <java.security.MessageDigest: java.security.MessageDigest getInstance(java.lang.String)>(varReplacer2246) First parameter (with value "SHA1") should be any of {SHA-256, SHA-384, SHA-512}
4.0.51 no       yes Cipher com.caucho.hessian.security.X509Encryption.wrap(Lcom/caucho/hessian/io/Hessian2Output;)Lcom/caucho/hessian/io/Hessian2Output; virtualinvoke r3.<com.caucho.hessian.io.Hessian2Output: void setCloseStreamOnClose(boolean)>(varReplacer2240) Operation on object of type javax.crypto.Cipher object not completed. Expected call to update, doFinal
- - yes CipherOutputStream com.caucho.hessian.security.X509Encryption.wrap(Lcom/caucho/hessian/io/Hessian2Output;)Lcom/caucho/hessian/io/Hessian2Output; virtualinvoke r3.<com.caucho.hessian.io.Hessian2Output: void setCloseStreamOnClose(boolean)>(varReplacer2240) Operation on object of type javax.crypto.CipherOutputStream object not completed. Expected call to write
- - yes Cipher com.caucho.hessian.security.X509Encryption$EncryptInputStream.<init>(Lcom/caucho/hessian/security/X509Encryption;Lcom/caucho/hessian/io/Hessian2Input;)V r30 = virtualinvoke r29.<javax.crypto.Cipher: java.security.Key unwrap(byte[],java.lang.String,int)>(r27, r26, varReplacer2223) Operation on object of type javax.crypto.Cipher object not completed. Expected call to update, doFinal
- - yes Cipher com.caucho.hessian.security.X509Encryption$EncryptOutputStream.<init>(Lcom/caucho/hessian/security/X509Encryption;Lcom/caucho/hessian/io/Hessian2Output;)V r10 = virtualinvoke r9.<javax.crypto.Cipher: byte[] wrap(java.security.Key)>(r3) Operation on object of type javax.crypto.Cipher object not completed. Expected call to update, doFinal
- - yes KeyGenerator com.caucho.hessian.security.X509Encryption$EncryptOutputStream.<init>(Lcom/caucho/hessian/security/X509Encryption;Lcom/caucho/hessian/io/Hessian2Output;)V virtualinvoke r47.<javax.crypto.KeyGenerator: void init(java.security.SecureRandom)>($r42) First parameter was not properly generated as randomized
- - yes MessageDigest com.caucho.hessian.security.X509Encryption$EncryptOutputStream.<init>(Lcom/caucho/hessian/security/X509Encryption;Lcom/caucho/hessian/io/Hessian2Output;)V r6 = staticinvoke <java.security.MessageDigest: java.security.MessageDigest getInstance(java.lang.String)>(varReplacer2227) First parameter (with value "SHA1") should be any of {SHA-256, SHA-384, SHA-512}
- - yes Mac com.caucho.hessian.security.X509Signature.wrap(Lcom/caucho/hessian/io/Hessian2Output;)Lcom/caucho/hessian/io/Hessian2Output; virtualinvoke r3.<com.caucho.hessian.io.Hessian2Output: void setCloseStreamOnClose(boolean)>(varReplacer2271) Operation on object of type javax.crypto.Mac object not completed. Expected call to update, doFinal
- - yes Cipher com.caucho.hessian.security.X509Signature$SignatureInputStream.<init>(Lcom/caucho/hessian/security/X509Signature;Lcom/caucho/hessian/io/Hessian2Input;)V r27 = virtualinvoke r26.<javax.crypto.Cipher: java.security.Key unwrap(byte[],java.lang.String,int)>(r24, r23, varReplacer2253) Operation on object of type javax.crypto.Cipher object not completed. Expected call to update, doFinal
- - yes Cipher com.caucho.hessian.security.X509Signature$SignatureOutputStream.<init>(Lcom/caucho/hessian/security/X509Signature;Lcom/caucho/hessian/io/Hessian2Output;)V r10 = virtualinvoke r9.<javax.crypto.Cipher: byte[] wrap(java.security.Key)>(r3) Operation on object of type javax.crypto.Cipher object not completed. Expected call to update, doFinal
- - yes KeyGenerator com.caucho.hessian.security.X509Signature$SignatureOutputStream.<init>(Lcom/caucho/hessian/security/X509Signature;Lcom/caucho/hessian/io/Hessian2Output;)V virtualinvoke r39.<javax.crypto.KeyGenerator: void init(java.security.SecureRandom)>($r34) First parameter was not properly generated as randomized
- - yes MessageDigest com.caucho.hessian.security.X509Signature$SignatureOutputStream.<init>(Lcom/caucho/hessian/security/X509Signature;Lcom/caucho/hessian/io/Hessian2Output;)V r6 = staticinvoke <java.security.MessageDigest: java.security.MessageDigest getInstance(java.lang.String)>(varReplacer2259) First parameter (with value "SHA1") should be any of {SHA-256, SHA-384, SHA-512}