Back to library list

org.apache.logging.log4j__log4j-core

Column Insecure: Icon yes indicates the version is insecure, otherwise no
Column CryptoMisuse: Icon yes indicates the version has cryptographic API misuse, otherwise no
Version Insecure CryptoMisuse Rule name Method Statement Details
2.0 no       yes KeyManagerFactory org.apache.logging.log4j.core.net.ssl.KeyStoreConfiguration.initKeyManagerFactory()Ljavax/net/ssl/KeyManagerFactory; virtualinvoke r1.<javax.net.ssl.KeyManagerFactory: void init(java.security.KeyStore,char[])>($r3, $r4) First parameter was not properly generated as generated Key Store
- - yes SSLContext org.apache.logging.log4j.core.net.ssl.SslConfiguration.createSSLConfiguration(Ljava/lang/String;Lorg/apache/logging/log4j/core/net/ssl/KeyStoreConfiguration;Lorg/apache/logging/log4j/core/net/ssl/TrustStoreConfiguration;)Lorg/apache/logging/log4j/core/net/ssl/SslConfiguration; $r2 = staticinvoke <javax.net.ssl.SSLContext: javax.net.ssl.SSLContext getDefault()>() Detected call to forbidden method javax.net.ssl.SSLContext getDefault() of class javax.net.ssl.SSLContext. Instead, call method <javax.net.ssl.SSLContext: javax.net.ssl.SSLContext getInstance(java.lang.String,java.lang.String)>, <javax.net.ssl.SSLContext: javax.net.ssl.SSLContext getInstance(java.lang.String,java.security.Provider)>, <javax.net.ssl.SSLContext: javax.net.ssl.SSLContext getInstance(java.lang.String)>.
- - yes SSLContext org.apache.logging.log4j.core.net.ssl.SslConfiguration.createSSLConfiguration(Ljava/lang/String;Lorg/apache/logging/log4j/core/net/ssl/KeyStoreConfiguration;Lorg/apache/logging/log4j/core/net/ssl/TrustStoreConfiguration;)Lorg/apache/logging/log4j/core/net/ssl/SslConfiguration; r1 = staticinvoke <javax.net.ssl.SSLContext: javax.net.ssl.SSLContext getInstance(java.lang.String)>($r2) First parameter (with value "SSL") should be any of {TLSv1, TLSv1.1, TLSv1.2}
- - yes SSLContext org.apache.logging.log4j.core.net.ssl.SslConfiguration.createSSLConfiguration(Ljava/lang/String;Lorg/apache/logging/log4j/core/net/ssl/KeyStoreConfiguration;Lorg/apache/logging/log4j/core/net/ssl/TrustStoreConfiguration;)Lorg/apache/logging/log4j/core/net/ssl/SslConfiguration; virtualinvoke r1.<javax.net.ssl.SSLContext: void init(javax.net.ssl.KeyManager[],javax.net.ssl.TrustManager[],java.security.SecureRandom)>(r10, r11, varReplacer2508) First parameter was not properly generated as generated Key Manager
- - yes SSLContext org.apache.logging.log4j.core.net.ssl.SslConfiguration.createSSLConfiguration(Ljava/lang/String;Lorg/apache/logging/log4j/core/net/ssl/KeyStoreConfiguration;Lorg/apache/logging/log4j/core/net/ssl/TrustStoreConfiguration;)Lorg/apache/logging/log4j/core/net/ssl/SslConfiguration; virtualinvoke r1.<javax.net.ssl.SSLContext: void init(javax.net.ssl.KeyManager[],javax.net.ssl.TrustManager[],java.security.SecureRandom)>(r10, r11, varReplacer2508) Second parameter was not properly generated as generated Trust Manager
- - yes TrustManagerFactory org.apache.logging.log4j.core.net.ssl.TrustStoreConfiguration.initTrustManagerFactory()Ljavax/net/ssl/TrustManagerFactory; virtualinvoke r1.<javax.net.ssl.TrustManagerFactory: void init(java.security.KeyStore)>($r3) First parameter was not properly generated as generated Key Store
- - yes MessageDigest org.apache.logging.log4j.core.util.NameUtil.md5(Ljava/lang/String;)Ljava/lang/String; r11 = staticinvoke <java.security.MessageDigest: java.security.MessageDigest getInstance(java.lang.String)>(varReplacer3119) First parameter (with value "MD5") should be any of {SHA-256, SHA-384, SHA-512}
2.0.1 no       yes KeyStore org.apache.logging.log4j.core.net.ssl.AbstractKeyStoreConfiguration.<init>(Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;)V virtualinvoke r42.<java.security.KeyStore: void load(java.io.InputStream,char[])>(r41, $r12) Second parameter should never be of type java.lang.String.
- - yes KeyManagerFactory org.apache.logging.log4j.core.net.ssl.KeyStoreConfiguration.initKeyManagerFactory()Ljavax/net/ssl/KeyManagerFactory; virtualinvoke r1.<javax.net.ssl.KeyManagerFactory: void init(java.security.KeyStore,char[])>($r3, $r4) First parameter was not properly generated as generated Key Store
- - yes KeyManagerFactory org.apache.logging.log4j.core.net.ssl.KeyStoreConfiguration.initKeyManagerFactory()Ljavax/net/ssl/KeyManagerFactory; virtualinvoke r1.<javax.net.ssl.KeyManagerFactory: void init(java.security.KeyStore,char[])>($r3, $r4) Second parameter should never be of type java.lang.String.
- - yes SSLContext org.apache.logging.log4j.core.net.ssl.SslConfiguration.createSSLConfiguration(Ljava/lang/String;Lorg/apache/logging/log4j/core/net/ssl/KeyStoreConfiguration;Lorg/apache/logging/log4j/core/net/ssl/TrustStoreConfiguration;)Lorg/apache/logging/log4j/core/net/ssl/SslConfiguration; $r2 = staticinvoke <javax.net.ssl.SSLContext: javax.net.ssl.SSLContext getDefault()>() Detected call to forbidden method javax.net.ssl.SSLContext getDefault() of class javax.net.ssl.SSLContext. Instead, call method <javax.net.ssl.SSLContext: javax.net.ssl.SSLContext getInstance(java.lang.String)>, <javax.net.ssl.SSLContext: javax.net.ssl.SSLContext getInstance(java.lang.String,java.lang.String)>, <javax.net.ssl.SSLContext: javax.net.ssl.SSLContext getInstance(java.lang.String,java.security.Provider)>.
- - yes SSLContext org.apache.logging.log4j.core.net.ssl.SslConfiguration.createSSLConfiguration(Ljava/lang/String;Lorg/apache/logging/log4j/core/net/ssl/KeyStoreConfiguration;Lorg/apache/logging/log4j/core/net/ssl/TrustStoreConfiguration;)Lorg/apache/logging/log4j/core/net/ssl/SslConfiguration; r1 = staticinvoke <javax.net.ssl.SSLContext: javax.net.ssl.SSLContext getInstance(java.lang.String)>($r2) First parameter (with value "SSL") should be any of {TLSv1, TLSv1.1, TLSv1.2}
- - yes SSLContext org.apache.logging.log4j.core.net.ssl.SslConfiguration.createSSLConfiguration(Ljava/lang/String;Lorg/apache/logging/log4j/core/net/ssl/KeyStoreConfiguration;Lorg/apache/logging/log4j/core/net/ssl/TrustStoreConfiguration;)Lorg/apache/logging/log4j/core/net/ssl/SslConfiguration; virtualinvoke r1.<javax.net.ssl.SSLContext: void init(javax.net.ssl.KeyManager[],javax.net.ssl.TrustManager[],java.security.SecureRandom)>(r10, r11, varReplacer2530) First parameter was not properly generated as generated Key Manager
- - yes SSLContext org.apache.logging.log4j.core.net.ssl.SslConfiguration.createSSLConfiguration(Ljava/lang/String;Lorg/apache/logging/log4j/core/net/ssl/KeyStoreConfiguration;Lorg/apache/logging/log4j/core/net/ssl/TrustStoreConfiguration;)Lorg/apache/logging/log4j/core/net/ssl/SslConfiguration; virtualinvoke r1.<javax.net.ssl.SSLContext: void init(javax.net.ssl.KeyManager[],javax.net.ssl.TrustManager[],java.security.SecureRandom)>(r10, r11, varReplacer2530) Second parameter was not properly generated as generated Trust Manager
- - yes TrustManagerFactory org.apache.logging.log4j.core.net.ssl.TrustStoreConfiguration.initTrustManagerFactory()Ljavax/net/ssl/TrustManagerFactory; virtualinvoke r1.<javax.net.ssl.TrustManagerFactory: void init(java.security.KeyStore)>($r3) First parameter was not properly generated as generated Key Store
- - yes MessageDigest org.apache.logging.log4j.core.util.NameUtil.md5(Ljava/lang/String;)Ljava/lang/String; r11 = staticinvoke <java.security.MessageDigest: java.security.MessageDigest getInstance(java.lang.String)>(varReplacer3138) First parameter (with value "MD5") should be any of {SHA-256, SHA-384, SHA-512}
2.0.2 no       yes KeyStore org.apache.logging.log4j.core.net.ssl.AbstractKeyStoreConfiguration.<init>(Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;)V virtualinvoke r42.<java.security.KeyStore: void load(java.io.InputStream,char[])>(r41, $r12) Second parameter should never be of type java.lang.String.
- - yes KeyManagerFactory org.apache.logging.log4j.core.net.ssl.KeyStoreConfiguration.initKeyManagerFactory()Ljavax/net/ssl/KeyManagerFactory; virtualinvoke r1.<javax.net.ssl.KeyManagerFactory: void init(java.security.KeyStore,char[])>($r3, $r4) First parameter was not properly generated as generated Key Store
- - yes KeyManagerFactory org.apache.logging.log4j.core.net.ssl.KeyStoreConfiguration.initKeyManagerFactory()Ljavax/net/ssl/KeyManagerFactory; virtualinvoke r1.<javax.net.ssl.KeyManagerFactory: void init(java.security.KeyStore,char[])>($r3, $r4) Second parameter should never be of type java.lang.String.
- - yes SSLContext org.apache.logging.log4j.core.net.ssl.SslConfiguration.createSSLConfiguration(Ljava/lang/String;Lorg/apache/logging/log4j/core/net/ssl/KeyStoreConfiguration;Lorg/apache/logging/log4j/core/net/ssl/TrustStoreConfiguration;)Lorg/apache/logging/log4j/core/net/ssl/SslConfiguration; $r2 = staticinvoke <javax.net.ssl.SSLContext: javax.net.ssl.SSLContext getDefault()>() Detected call to forbidden method javax.net.ssl.SSLContext getDefault() of class javax.net.ssl.SSLContext. Instead, call method <javax.net.ssl.SSLContext: javax.net.ssl.SSLContext getInstance(java.lang.String,java.security.Provider)>, <javax.net.ssl.SSLContext: javax.net.ssl.SSLContext getInstance(java.lang.String,java.lang.String)>, <javax.net.ssl.SSLContext: javax.net.ssl.SSLContext getInstance(java.lang.String)>.
- - yes SSLContext org.apache.logging.log4j.core.net.ssl.SslConfiguration.createSSLConfiguration(Ljava/lang/String;Lorg/apache/logging/log4j/core/net/ssl/KeyStoreConfiguration;Lorg/apache/logging/log4j/core/net/ssl/TrustStoreConfiguration;)Lorg/apache/logging/log4j/core/net/ssl/SslConfiguration; r1 = staticinvoke <javax.net.ssl.SSLContext: javax.net.ssl.SSLContext getInstance(java.lang.String)>($r2) First parameter (with value "SSL") should be any of {TLSv1, TLSv1.1, TLSv1.2}
- - yes SSLContext org.apache.logging.log4j.core.net.ssl.SslConfiguration.createSSLConfiguration(Ljava/lang/String;Lorg/apache/logging/log4j/core/net/ssl/KeyStoreConfiguration;Lorg/apache/logging/log4j/core/net/ssl/TrustStoreConfiguration;)Lorg/apache/logging/log4j/core/net/ssl/SslConfiguration; virtualinvoke r1.<javax.net.ssl.SSLContext: void init(javax.net.ssl.KeyManager[],javax.net.ssl.TrustManager[],java.security.SecureRandom)>(r10, r11, varReplacer2519) First parameter was not properly generated as generated Key Manager
- - yes SSLContext org.apache.logging.log4j.core.net.ssl.SslConfiguration.createSSLConfiguration(Ljava/lang/String;Lorg/apache/logging/log4j/core/net/ssl/KeyStoreConfiguration;Lorg/apache/logging/log4j/core/net/ssl/TrustStoreConfiguration;)Lorg/apache/logging/log4j/core/net/ssl/SslConfiguration; virtualinvoke r1.<javax.net.ssl.SSLContext: void init(javax.net.ssl.KeyManager[],javax.net.ssl.TrustManager[],java.security.SecureRandom)>(r10, r11, varReplacer2519) Second parameter was not properly generated as generated Trust Manager
- - yes TrustManagerFactory org.apache.logging.log4j.core.net.ssl.TrustStoreConfiguration.initTrustManagerFactory()Ljavax/net/ssl/TrustManagerFactory; virtualinvoke r1.<javax.net.ssl.TrustManagerFactory: void init(java.security.KeyStore)>($r3) First parameter was not properly generated as generated Key Store
- - yes MessageDigest org.apache.logging.log4j.core.util.NameUtil.md5(Ljava/lang/String;)Ljava/lang/String; r11 = staticinvoke <java.security.MessageDigest: java.security.MessageDigest getInstance(java.lang.String)>(varReplacer3135) First parameter (with value "MD5") should be any of {SHA-256, SHA-384, SHA-512}
2.1 no       yes KeyManagerFactory org.apache.logging.log4j.core.net.ssl.KeyStoreConfiguration.initKeyManagerFactory()Ljavax/net/ssl/KeyManagerFactory; virtualinvoke r1.<javax.net.ssl.KeyManagerFactory: void init(java.security.KeyStore,char[])>($r3, $r4) First parameter was not properly generated as generated Key Store
- - yes SSLContext org.apache.logging.log4j.core.net.ssl.SslConfiguration.createSSLConfiguration(Ljava/lang/String;Lorg/apache/logging/log4j/core/net/ssl/KeyStoreConfiguration;Lorg/apache/logging/log4j/core/net/ssl/TrustStoreConfiguration;)Lorg/apache/logging/log4j/core/net/ssl/SslConfiguration; $r2 = staticinvoke <javax.net.ssl.SSLContext: javax.net.ssl.SSLContext getDefault()>() Detected call to forbidden method javax.net.ssl.SSLContext getDefault() of class javax.net.ssl.SSLContext. Instead, call method <javax.net.ssl.SSLContext: javax.net.ssl.SSLContext getInstance(java.lang.String,java.security.Provider)>, <javax.net.ssl.SSLContext: javax.net.ssl.SSLContext getInstance(java.lang.String)>, <javax.net.ssl.SSLContext: javax.net.ssl.SSLContext getInstance(java.lang.String,java.lang.String)>.
- - yes SSLContext org.apache.logging.log4j.core.net.ssl.SslConfiguration.createSSLConfiguration(Ljava/lang/String;Lorg/apache/logging/log4j/core/net/ssl/KeyStoreConfiguration;Lorg/apache/logging/log4j/core/net/ssl/TrustStoreConfiguration;)Lorg/apache/logging/log4j/core/net/ssl/SslConfiguration; r1 = staticinvoke <javax.net.ssl.SSLContext: javax.net.ssl.SSLContext getInstance(java.lang.String)>($r2) First parameter (with value "SSL") should be any of {TLSv1, TLSv1.1, TLSv1.2}
- - yes SSLContext org.apache.logging.log4j.core.net.ssl.SslConfiguration.createSSLConfiguration(Ljava/lang/String;Lorg/apache/logging/log4j/core/net/ssl/KeyStoreConfiguration;Lorg/apache/logging/log4j/core/net/ssl/TrustStoreConfiguration;)Lorg/apache/logging/log4j/core/net/ssl/SslConfiguration; virtualinvoke r1.<javax.net.ssl.SSLContext: void init(javax.net.ssl.KeyManager[],javax.net.ssl.TrustManager[],java.security.SecureRandom)>(r10, r11, varReplacer2604) First parameter was not properly generated as generated Key Manager
- - yes SSLContext org.apache.logging.log4j.core.net.ssl.SslConfiguration.createSSLConfiguration(Ljava/lang/String;Lorg/apache/logging/log4j/core/net/ssl/KeyStoreConfiguration;Lorg/apache/logging/log4j/core/net/ssl/TrustStoreConfiguration;)Lorg/apache/logging/log4j/core/net/ssl/SslConfiguration; virtualinvoke r1.<javax.net.ssl.SSLContext: void init(javax.net.ssl.KeyManager[],javax.net.ssl.TrustManager[],java.security.SecureRandom)>(r10, r11, varReplacer2604) Second parameter was not properly generated as generated Trust Manager
- - yes TrustManagerFactory org.apache.logging.log4j.core.net.ssl.TrustStoreConfiguration.initTrustManagerFactory()Ljavax/net/ssl/TrustManagerFactory; virtualinvoke r1.<javax.net.ssl.TrustManagerFactory: void init(java.security.KeyStore)>($r3) First parameter was not properly generated as generated Key Store
- - yes MessageDigest org.apache.logging.log4j.core.util.NameUtil.md5(Ljava/lang/String;)Ljava/lang/String; r11 = staticinvoke <java.security.MessageDigest: java.security.MessageDigest getInstance(java.lang.String)>(varReplacer3223) First parameter (with value "MD5") should be any of {SHA-256, SHA-384, SHA-512}
2.2 no       yes KeyStore org.apache.logging.log4j.core.net.ssl.AbstractKeyStoreConfiguration.<init>(Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;)V virtualinvoke r42.<java.security.KeyStore: void load(java.io.InputStream,char[])>(r41, $r12) Second parameter should never be of type java.lang.String.
- - yes KeyManagerFactory org.apache.logging.log4j.core.net.ssl.KeyStoreConfiguration.initKeyManagerFactory()Ljavax/net/ssl/KeyManagerFactory; virtualinvoke r1.<javax.net.ssl.KeyManagerFactory: void init(java.security.KeyStore,char[])>($r3, $r4) First parameter was not properly generated as generated Key Store
- - yes KeyManagerFactory org.apache.logging.log4j.core.net.ssl.KeyStoreConfiguration.initKeyManagerFactory()Ljavax/net/ssl/KeyManagerFactory; virtualinvoke r1.<javax.net.ssl.KeyManagerFactory: void init(java.security.KeyStore,char[])>($r3, $r4) Second parameter should never be of type java.lang.String.
- - yes SSLContext org.apache.logging.log4j.core.net.ssl.SslConfiguration.createSSLConfiguration(Ljava/lang/String;Lorg/apache/logging/log4j/core/net/ssl/KeyStoreConfiguration;Lorg/apache/logging/log4j/core/net/ssl/TrustStoreConfiguration;)Lorg/apache/logging/log4j/core/net/ssl/SslConfiguration; $r2 = staticinvoke <javax.net.ssl.SSLContext: javax.net.ssl.SSLContext getDefault()>() Detected call to forbidden method javax.net.ssl.SSLContext getDefault() of class javax.net.ssl.SSLContext. Instead, call method <javax.net.ssl.SSLContext: javax.net.ssl.SSLContext getInstance(java.lang.String,java.security.Provider)>, <javax.net.ssl.SSLContext: javax.net.ssl.SSLContext getInstance(java.lang.String)>, <javax.net.ssl.SSLContext: javax.net.ssl.SSLContext getInstance(java.lang.String,java.lang.String)>.
- - yes SSLContext org.apache.logging.log4j.core.net.ssl.SslConfiguration.createSSLConfiguration(Ljava/lang/String;Lorg/apache/logging/log4j/core/net/ssl/KeyStoreConfiguration;Lorg/apache/logging/log4j/core/net/ssl/TrustStoreConfiguration;)Lorg/apache/logging/log4j/core/net/ssl/SslConfiguration; r1 = staticinvoke <javax.net.ssl.SSLContext: javax.net.ssl.SSLContext getInstance(java.lang.String)>($r2) First parameter (with value "SSL") should be any of {TLSv1, TLSv1.1, TLSv1.2}
- - yes SSLContext org.apache.logging.log4j.core.net.ssl.SslConfiguration.createSSLConfiguration(Ljava/lang/String;Lorg/apache/logging/log4j/core/net/ssl/KeyStoreConfiguration;Lorg/apache/logging/log4j/core/net/ssl/TrustStoreConfiguration;)Lorg/apache/logging/log4j/core/net/ssl/SslConfiguration; virtualinvoke r1.<javax.net.ssl.SSLContext: void init(javax.net.ssl.KeyManager[],javax.net.ssl.TrustManager[],java.security.SecureRandom)>(r10, r11, varReplacer2621) First parameter was not properly generated as generated Key Manager
- - yes SSLContext org.apache.logging.log4j.core.net.ssl.SslConfiguration.createSSLConfiguration(Ljava/lang/String;Lorg/apache/logging/log4j/core/net/ssl/KeyStoreConfiguration;Lorg/apache/logging/log4j/core/net/ssl/TrustStoreConfiguration;)Lorg/apache/logging/log4j/core/net/ssl/SslConfiguration; virtualinvoke r1.<javax.net.ssl.SSLContext: void init(javax.net.ssl.KeyManager[],javax.net.ssl.TrustManager[],java.security.SecureRandom)>(r10, r11, varReplacer2621) Second parameter was not properly generated as generated Trust Manager
- - yes TrustManagerFactory org.apache.logging.log4j.core.net.ssl.TrustStoreConfiguration.initTrustManagerFactory()Ljavax/net/ssl/TrustManagerFactory; virtualinvoke r1.<javax.net.ssl.TrustManagerFactory: void init(java.security.KeyStore)>($r3) First parameter was not properly generated as generated Key Store
- - yes MessageDigest org.apache.logging.log4j.core.util.NameUtil.md5(Ljava/lang/String;)Ljava/lang/String; r11 = staticinvoke <java.security.MessageDigest: java.security.MessageDigest getInstance(java.lang.String)>(varReplacer3236) First parameter (with value "MD5") should be any of {SHA-256, SHA-384, SHA-512}
2.3 no       yes KeyManagerFactory org.apache.logging.log4j.core.net.ssl.KeyStoreConfiguration.initKeyManagerFactory()Ljavax/net/ssl/KeyManagerFactory; virtualinvoke r1.<javax.net.ssl.KeyManagerFactory: void init(java.security.KeyStore,char[])>($r3, $r4) First parameter was not properly generated as generated Key Store
- - yes SSLContext org.apache.logging.log4j.core.net.ssl.SslConfiguration.createSSLConfiguration(Ljava/lang/String;Lorg/apache/logging/log4j/core/net/ssl/KeyStoreConfiguration;Lorg/apache/logging/log4j/core/net/ssl/TrustStoreConfiguration;)Lorg/apache/logging/log4j/core/net/ssl/SslConfiguration; $r2 = staticinvoke <javax.net.ssl.SSLContext: javax.net.ssl.SSLContext getDefault()>() Detected call to forbidden method javax.net.ssl.SSLContext getDefault() of class javax.net.ssl.SSLContext. Instead, call method <javax.net.ssl.SSLContext: javax.net.ssl.SSLContext getInstance(java.lang.String)>, <javax.net.ssl.SSLContext: javax.net.ssl.SSLContext getInstance(java.lang.String,java.lang.String)>, <javax.net.ssl.SSLContext: javax.net.ssl.SSLContext getInstance(java.lang.String,java.security.Provider)>.
- - yes SSLContext org.apache.logging.log4j.core.net.ssl.SslConfiguration.createSSLConfiguration(Ljava/lang/String;Lorg/apache/logging/log4j/core/net/ssl/KeyStoreConfiguration;Lorg/apache/logging/log4j/core/net/ssl/TrustStoreConfiguration;)Lorg/apache/logging/log4j/core/net/ssl/SslConfiguration; r1 = staticinvoke <javax.net.ssl.SSLContext: javax.net.ssl.SSLContext getInstance(java.lang.String)>($r2) First parameter (with value "SSL") should be any of {TLSv1, TLSv1.1, TLSv1.2}
- - yes SSLContext org.apache.logging.log4j.core.net.ssl.SslConfiguration.createSSLConfiguration(Ljava/lang/String;Lorg/apache/logging/log4j/core/net/ssl/KeyStoreConfiguration;Lorg/apache/logging/log4j/core/net/ssl/TrustStoreConfiguration;)Lorg/apache/logging/log4j/core/net/ssl/SslConfiguration; virtualinvoke r1.<javax.net.ssl.SSLContext: void init(javax.net.ssl.KeyManager[],javax.net.ssl.TrustManager[],java.security.SecureRandom)>(r10, r11, varReplacer2612) First parameter was not properly generated as generated Key Manager
- - yes SSLContext org.apache.logging.log4j.core.net.ssl.SslConfiguration.createSSLConfiguration(Ljava/lang/String;Lorg/apache/logging/log4j/core/net/ssl/KeyStoreConfiguration;Lorg/apache/logging/log4j/core/net/ssl/TrustStoreConfiguration;)Lorg/apache/logging/log4j/core/net/ssl/SslConfiguration; virtualinvoke r1.<javax.net.ssl.SSLContext: void init(javax.net.ssl.KeyManager[],javax.net.ssl.TrustManager[],java.security.SecureRandom)>(r10, r11, varReplacer2612) Second parameter was not properly generated as generated Trust Manager
- - yes TrustManagerFactory org.apache.logging.log4j.core.net.ssl.TrustStoreConfiguration.initTrustManagerFactory()Ljavax/net/ssl/TrustManagerFactory; virtualinvoke r1.<javax.net.ssl.TrustManagerFactory: void init(java.security.KeyStore)>($r3) First parameter was not properly generated as generated Key Store
- - yes MessageDigest org.apache.logging.log4j.core.util.NameUtil.md5(Ljava/lang/String;)Ljava/lang/String; r11 = staticinvoke <java.security.MessageDigest: java.security.MessageDigest getInstance(java.lang.String)>(varReplacer3225) First parameter (with value "MD5") should be any of {SHA-256, SHA-384, SHA-512}
2.4 no       yes KeyStore org.apache.logging.log4j.core.net.ssl.AbstractKeyStoreConfiguration.<init>(Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;)V virtualinvoke r42.<java.security.KeyStore: void load(java.io.InputStream,char[])>(r40, $r12) Second parameter should never be of type java.lang.String.
- - yes KeyManagerFactory org.apache.logging.log4j.core.net.ssl.KeyStoreConfiguration.initKeyManagerFactory()Ljavax/net/ssl/KeyManagerFactory; virtualinvoke r1.<javax.net.ssl.KeyManagerFactory: void init(java.security.KeyStore,char[])>($r3, $r4) First parameter was not properly generated as generated Key Store
- - yes KeyManagerFactory org.apache.logging.log4j.core.net.ssl.KeyStoreConfiguration.initKeyManagerFactory()Ljavax/net/ssl/KeyManagerFactory; virtualinvoke r1.<javax.net.ssl.KeyManagerFactory: void init(java.security.KeyStore,char[])>($r3, $r4) Second parameter should never be of type java.lang.String.
- - yes SSLContext org.apache.logging.log4j.core.net.ssl.SslConfiguration.createSSLConfiguration(Ljava/lang/String;Lorg/apache/logging/log4j/core/net/ssl/KeyStoreConfiguration;Lorg/apache/logging/log4j/core/net/ssl/TrustStoreConfiguration;)Lorg/apache/logging/log4j/core/net/ssl/SslConfiguration; $r2 = staticinvoke <javax.net.ssl.SSLContext: javax.net.ssl.SSLContext getDefault()>() Detected call to forbidden method javax.net.ssl.SSLContext getDefault() of class javax.net.ssl.SSLContext. Instead, call method <javax.net.ssl.SSLContext: javax.net.ssl.SSLContext getInstance(java.lang.String)>, <javax.net.ssl.SSLContext: javax.net.ssl.SSLContext getInstance(java.lang.String,java.lang.String)>, <javax.net.ssl.SSLContext: javax.net.ssl.SSLContext getInstance(java.lang.String,java.security.Provider)>.
- - yes SSLContext org.apache.logging.log4j.core.net.ssl.SslConfiguration.createSSLConfiguration(Ljava/lang/String;Lorg/apache/logging/log4j/core/net/ssl/KeyStoreConfiguration;Lorg/apache/logging/log4j/core/net/ssl/TrustStoreConfiguration;)Lorg/apache/logging/log4j/core/net/ssl/SslConfiguration; r1 = staticinvoke <javax.net.ssl.SSLContext: javax.net.ssl.SSLContext getInstance(java.lang.String)>($r2) First parameter (with value "SSL") should be any of {TLSv1, TLSv1.1, TLSv1.2}
- - yes SSLContext org.apache.logging.log4j.core.net.ssl.SslConfiguration.createSSLConfiguration(Ljava/lang/String;Lorg/apache/logging/log4j/core/net/ssl/KeyStoreConfiguration;Lorg/apache/logging/log4j/core/net/ssl/TrustStoreConfiguration;)Lorg/apache/logging/log4j/core/net/ssl/SslConfiguration; virtualinvoke r1.<javax.net.ssl.SSLContext: void init(javax.net.ssl.KeyManager[],javax.net.ssl.TrustManager[],java.security.SecureRandom)>(r10, r11, varReplacer2988) First parameter was not properly generated as generated Key Manager
- - yes SSLContext org.apache.logging.log4j.core.net.ssl.SslConfiguration.createSSLConfiguration(Ljava/lang/String;Lorg/apache/logging/log4j/core/net/ssl/KeyStoreConfiguration;Lorg/apache/logging/log4j/core/net/ssl/TrustStoreConfiguration;)Lorg/apache/logging/log4j/core/net/ssl/SslConfiguration; virtualinvoke r1.<javax.net.ssl.SSLContext: void init(javax.net.ssl.KeyManager[],javax.net.ssl.TrustManager[],java.security.SecureRandom)>(r10, r11, varReplacer2988) Second parameter was not properly generated as generated Trust Manager
- - yes TrustManagerFactory org.apache.logging.log4j.core.net.ssl.TrustStoreConfiguration.initTrustManagerFactory()Ljavax/net/ssl/TrustManagerFactory; virtualinvoke r1.<javax.net.ssl.TrustManagerFactory: void init(java.security.KeyStore)>($r3) First parameter was not properly generated as generated Key Store
- - yes MessageDigest org.apache.logging.log4j.core.util.NameUtil.md5(Ljava/lang/String;)Ljava/lang/String; r11 = staticinvoke <java.security.MessageDigest: java.security.MessageDigest getInstance(java.lang.String)>(varReplacer3914) First parameter (with value "MD5") should be any of {SHA-256, SHA-384, SHA-512}
2.4.1 no       yes KeyManagerFactory org.apache.logging.log4j.core.net.ssl.KeyStoreConfiguration.initKeyManagerFactory()Ljavax/net/ssl/KeyManagerFactory; virtualinvoke r1.<javax.net.ssl.KeyManagerFactory: void init(java.security.KeyStore,char[])>($r3, $r4) First parameter was not properly generated as generated Key Store
- - yes SSLContext org.apache.logging.log4j.core.net.ssl.SslConfiguration.createSSLConfiguration(Ljava/lang/String;Lorg/apache/logging/log4j/core/net/ssl/KeyStoreConfiguration;Lorg/apache/logging/log4j/core/net/ssl/TrustStoreConfiguration;)Lorg/apache/logging/log4j/core/net/ssl/SslConfiguration; $r2 = staticinvoke <javax.net.ssl.SSLContext: javax.net.ssl.SSLContext getDefault()>() Detected call to forbidden method javax.net.ssl.SSLContext getDefault() of class javax.net.ssl.SSLContext. Instead, call method <javax.net.ssl.SSLContext: javax.net.ssl.SSLContext getInstance(java.lang.String,java.security.Provider)>, <javax.net.ssl.SSLContext: javax.net.ssl.SSLContext getInstance(java.lang.String)>, <javax.net.ssl.SSLContext: javax.net.ssl.SSLContext getInstance(java.lang.String,java.lang.String)>.
- - yes SSLContext org.apache.logging.log4j.core.net.ssl.SslConfiguration.createSSLConfiguration(Ljava/lang/String;Lorg/apache/logging/log4j/core/net/ssl/KeyStoreConfiguration;Lorg/apache/logging/log4j/core/net/ssl/TrustStoreConfiguration;)Lorg/apache/logging/log4j/core/net/ssl/SslConfiguration; r1 = staticinvoke <javax.net.ssl.SSLContext: javax.net.ssl.SSLContext getInstance(java.lang.String)>($r2) First parameter (with value "SSL") should be any of {TLSv1, TLSv1.1, TLSv1.2}
- - yes SSLContext org.apache.logging.log4j.core.net.ssl.SslConfiguration.createSSLConfiguration(Ljava/lang/String;Lorg/apache/logging/log4j/core/net/ssl/KeyStoreConfiguration;Lorg/apache/logging/log4j/core/net/ssl/TrustStoreConfiguration;)Lorg/apache/logging/log4j/core/net/ssl/SslConfiguration; virtualinvoke r1.<javax.net.ssl.SSLContext: void init(javax.net.ssl.KeyManager[],javax.net.ssl.TrustManager[],java.security.SecureRandom)>(r10, r11, varReplacer3024) First parameter was not properly generated as generated Key Manager
- - yes SSLContext org.apache.logging.log4j.core.net.ssl.SslConfiguration.createSSLConfiguration(Ljava/lang/String;Lorg/apache/logging/log4j/core/net/ssl/KeyStoreConfiguration;Lorg/apache/logging/log4j/core/net/ssl/TrustStoreConfiguration;)Lorg/apache/logging/log4j/core/net/ssl/SslConfiguration; virtualinvoke r1.<javax.net.ssl.SSLContext: void init(javax.net.ssl.KeyManager[],javax.net.ssl.TrustManager[],java.security.SecureRandom)>(r10, r11, varReplacer3024) Second parameter was not properly generated as generated Trust Manager
- - yes TrustManagerFactory org.apache.logging.log4j.core.net.ssl.TrustStoreConfiguration.initTrustManagerFactory()Ljavax/net/ssl/TrustManagerFactory; virtualinvoke r1.<javax.net.ssl.TrustManagerFactory: void init(java.security.KeyStore)>($r3) First parameter was not properly generated as generated Key Store
- - yes MessageDigest org.apache.logging.log4j.core.util.NameUtil.md5(Ljava/lang/String;)Ljava/lang/String; r11 = staticinvoke <java.security.MessageDigest: java.security.MessageDigest getInstance(java.lang.String)>(varReplacer3984) First parameter (with value "MD5") should be any of {SHA-256, SHA-384, SHA-512}
2.5 no       yes KeyStore org.apache.logging.log4j.core.net.ssl.AbstractKeyStoreConfiguration.<init>(Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;)V virtualinvoke r42.<java.security.KeyStore: void load(java.io.InputStream,char[])>(r40, $r12) Second parameter should never be of type java.lang.String.
- - yes KeyManagerFactory org.apache.logging.log4j.core.net.ssl.KeyStoreConfiguration.initKeyManagerFactory()Ljavax/net/ssl/KeyManagerFactory; virtualinvoke r1.<javax.net.ssl.KeyManagerFactory: void init(java.security.KeyStore,char[])>($r3, $r4) First parameter was not properly generated as generated Key Store
- - yes KeyManagerFactory org.apache.logging.log4j.core.net.ssl.KeyStoreConfiguration.initKeyManagerFactory()Ljavax/net/ssl/KeyManagerFactory; virtualinvoke r1.<javax.net.ssl.KeyManagerFactory: void init(java.security.KeyStore,char[])>($r3, $r4) Second parameter should never be of type java.lang.String.
- - yes SSLContext org.apache.logging.log4j.core.net.ssl.SslConfiguration.createSSLConfiguration(Ljava/lang/String;Lorg/apache/logging/log4j/core/net/ssl/KeyStoreConfiguration;Lorg/apache/logging/log4j/core/net/ssl/TrustStoreConfiguration;)Lorg/apache/logging/log4j/core/net/ssl/SslConfiguration; $r2 = staticinvoke <javax.net.ssl.SSLContext: javax.net.ssl.SSLContext getDefault()>() Detected call to forbidden method javax.net.ssl.SSLContext getDefault() of class javax.net.ssl.SSLContext. Instead, call method <javax.net.ssl.SSLContext: javax.net.ssl.SSLContext getInstance(java.lang.String)>, <javax.net.ssl.SSLContext: javax.net.ssl.SSLContext getInstance(java.lang.String,java.security.Provider)>, <javax.net.ssl.SSLContext: javax.net.ssl.SSLContext getInstance(java.lang.String,java.lang.String)>.
- - yes SSLContext org.apache.logging.log4j.core.net.ssl.SslConfiguration.createSSLConfiguration(Ljava/lang/String;Lorg/apache/logging/log4j/core/net/ssl/KeyStoreConfiguration;Lorg/apache/logging/log4j/core/net/ssl/TrustStoreConfiguration;)Lorg/apache/logging/log4j/core/net/ssl/SslConfiguration; r1 = staticinvoke <javax.net.ssl.SSLContext: javax.net.ssl.SSLContext getInstance(java.lang.String)>($r2) First parameter (with value "SSL") should be any of {TLSv1, TLSv1.1, TLSv1.2}
- - yes SSLContext org.apache.logging.log4j.core.net.ssl.SslConfiguration.createSSLConfiguration(Ljava/lang/String;Lorg/apache/logging/log4j/core/net/ssl/KeyStoreConfiguration;Lorg/apache/logging/log4j/core/net/ssl/TrustStoreConfiguration;)Lorg/apache/logging/log4j/core/net/ssl/SslConfiguration; virtualinvoke r1.<javax.net.ssl.SSLContext: void init(javax.net.ssl.KeyManager[],javax.net.ssl.TrustManager[],java.security.SecureRandom)>(r10, r11, varReplacer3280) First parameter was not properly generated as generated Key Manager
- - yes SSLContext org.apache.logging.log4j.core.net.ssl.SslConfiguration.createSSLConfiguration(Ljava/lang/String;Lorg/apache/logging/log4j/core/net/ssl/KeyStoreConfiguration;Lorg/apache/logging/log4j/core/net/ssl/TrustStoreConfiguration;)Lorg/apache/logging/log4j/core/net/ssl/SslConfiguration; virtualinvoke r1.<javax.net.ssl.SSLContext: void init(javax.net.ssl.KeyManager[],javax.net.ssl.TrustManager[],java.security.SecureRandom)>(r10, r11, varReplacer3280) Second parameter was not properly generated as generated Trust Manager
- - yes TrustManagerFactory org.apache.logging.log4j.core.net.ssl.TrustStoreConfiguration.initTrustManagerFactory()Ljavax/net/ssl/TrustManagerFactory; virtualinvoke r1.<javax.net.ssl.TrustManagerFactory: void init(java.security.KeyStore)>($r3) First parameter was not properly generated as generated Key Store
- - yes MessageDigest org.apache.logging.log4j.core.util.NameUtil.md5(Ljava/lang/String;)Ljava/lang/String; r11 = staticinvoke <java.security.MessageDigest: java.security.MessageDigest getInstance(java.lang.String)>(varReplacer4767) First parameter (with value "MD5") should be any of {SHA-256, SHA-384, SHA-512}
2.6 no       yes KeyStore org.apache.logging.log4j.core.net.ssl.AbstractKeyStoreConfiguration.<init>(Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;)V virtualinvoke r47.<java.security.KeyStore: void load(java.io.InputStream,char[])>(r45, $r11) Second parameter should never be of type java.lang.String.
- - yes KeyManagerFactory org.apache.logging.log4j.core.net.ssl.KeyStoreConfiguration.initKeyManagerFactory()Ljavax/net/ssl/KeyManagerFactory; virtualinvoke r1.<javax.net.ssl.KeyManagerFactory: void init(java.security.KeyStore,char[])>($r3, $r4) First parameter was not properly generated as generated Key Store
- - yes KeyManagerFactory org.apache.logging.log4j.core.net.ssl.KeyStoreConfiguration.initKeyManagerFactory()Ljavax/net/ssl/KeyManagerFactory; virtualinvoke r1.<javax.net.ssl.KeyManagerFactory: void init(java.security.KeyStore,char[])>($r3, $r4) Second parameter should never be of type java.lang.String.
- - yes SSLContext org.apache.logging.log4j.core.net.ssl.SslConfiguration.createSSLConfiguration(Ljava/lang/String;Lorg/apache/logging/log4j/core/net/ssl/KeyStoreConfiguration;Lorg/apache/logging/log4j/core/net/ssl/TrustStoreConfiguration;)Lorg/apache/logging/log4j/core/net/ssl/SslConfiguration; $r2 = staticinvoke <javax.net.ssl.SSLContext: javax.net.ssl.SSLContext getDefault()>() Detected call to forbidden method javax.net.ssl.SSLContext getDefault() of class javax.net.ssl.SSLContext. Instead, call method <javax.net.ssl.SSLContext: javax.net.ssl.SSLContext getInstance(java.lang.String,java.security.Provider)>, <javax.net.ssl.SSLContext: javax.net.ssl.SSLContext getInstance(java.lang.String)>, <javax.net.ssl.SSLContext: javax.net.ssl.SSLContext getInstance(java.lang.String,java.lang.String)>.
- - yes SSLContext org.apache.logging.log4j.core.net.ssl.SslConfiguration.createSSLConfiguration(Ljava/lang/String;Lorg/apache/logging/log4j/core/net/ssl/KeyStoreConfiguration;Lorg/apache/logging/log4j/core/net/ssl/TrustStoreConfiguration;)Lorg/apache/logging/log4j/core/net/ssl/SslConfiguration; r1 = staticinvoke <javax.net.ssl.SSLContext: javax.net.ssl.SSLContext getInstance(java.lang.String)>($r2) First parameter (with value "SSL") should be any of {TLSv1, TLSv1.1, TLSv1.2}
- - yes SSLContext org.apache.logging.log4j.core.net.ssl.SslConfiguration.createSSLConfiguration(Ljava/lang/String;Lorg/apache/logging/log4j/core/net/ssl/KeyStoreConfiguration;Lorg/apache/logging/log4j/core/net/ssl/TrustStoreConfiguration;)Lorg/apache/logging/log4j/core/net/ssl/SslConfiguration; virtualinvoke r1.<javax.net.ssl.SSLContext: void init(javax.net.ssl.KeyManager[],javax.net.ssl.TrustManager[],java.security.SecureRandom)>(r10, r11, varReplacer3521) First parameter was not properly generated as generated Key Manager
- - yes SSLContext org.apache.logging.log4j.core.net.ssl.SslConfiguration.createSSLConfiguration(Ljava/lang/String;Lorg/apache/logging/log4j/core/net/ssl/KeyStoreConfiguration;Lorg/apache/logging/log4j/core/net/ssl/TrustStoreConfiguration;)Lorg/apache/logging/log4j/core/net/ssl/SslConfiguration; virtualinvoke r1.<javax.net.ssl.SSLContext: void init(javax.net.ssl.KeyManager[],javax.net.ssl.TrustManager[],java.security.SecureRandom)>(r10, r11, varReplacer3521) Second parameter was not properly generated as generated Trust Manager
- - yes TrustManagerFactory org.apache.logging.log4j.core.net.ssl.TrustStoreConfiguration.initTrustManagerFactory()Ljavax/net/ssl/TrustManagerFactory; virtualinvoke r1.<javax.net.ssl.TrustManagerFactory: void init(java.security.KeyStore)>($r3) First parameter was not properly generated as generated Key Store
- - yes MessageDigest org.apache.logging.log4j.core.util.NameUtil.md5(Ljava/lang/String;)Ljava/lang/String; r11 = staticinvoke <java.security.MessageDigest: java.security.MessageDigest getInstance(java.lang.String)>(varReplacer5060) First parameter (with value "MD5") should be any of {SHA-256, SHA-384, SHA-512}
2.6.1 no       yes KeyManagerFactory org.apache.logging.log4j.core.net.ssl.KeyStoreConfiguration.initKeyManagerFactory()Ljavax/net/ssl/KeyManagerFactory; virtualinvoke r1.<javax.net.ssl.KeyManagerFactory: void init(java.security.KeyStore,char[])>($r3, $r4) First parameter was not properly generated as generated Key Store
- - yes SSLContext org.apache.logging.log4j.core.net.ssl.SslConfiguration.createSSLConfiguration(Ljava/lang/String;Lorg/apache/logging/log4j/core/net/ssl/KeyStoreConfiguration;Lorg/apache/logging/log4j/core/net/ssl/TrustStoreConfiguration;)Lorg/apache/logging/log4j/core/net/ssl/SslConfiguration; $r2 = staticinvoke <javax.net.ssl.SSLContext: javax.net.ssl.SSLContext getDefault()>() Detected call to forbidden method javax.net.ssl.SSLContext getDefault() of class javax.net.ssl.SSLContext. Instead, call method <javax.net.ssl.SSLContext: javax.net.ssl.SSLContext getInstance(java.lang.String)>, <javax.net.ssl.SSLContext: javax.net.ssl.SSLContext getInstance(java.lang.String,java.security.Provider)>, <javax.net.ssl.SSLContext: javax.net.ssl.SSLContext getInstance(java.lang.String,java.lang.String)>.
- - yes SSLContext org.apache.logging.log4j.core.net.ssl.SslConfiguration.createSSLConfiguration(Ljava/lang/String;Lorg/apache/logging/log4j/core/net/ssl/KeyStoreConfiguration;Lorg/apache/logging/log4j/core/net/ssl/TrustStoreConfiguration;)Lorg/apache/logging/log4j/core/net/ssl/SslConfiguration; r1 = staticinvoke <javax.net.ssl.SSLContext: javax.net.ssl.SSLContext getInstance(java.lang.String)>($r2) First parameter (with value "SSL") should be any of {TLSv1, TLSv1.1, TLSv1.2}
- - yes SSLContext org.apache.logging.log4j.core.net.ssl.SslConfiguration.createSSLConfiguration(Ljava/lang/String;Lorg/apache/logging/log4j/core/net/ssl/KeyStoreConfiguration;Lorg/apache/logging/log4j/core/net/ssl/TrustStoreConfiguration;)Lorg/apache/logging/log4j/core/net/ssl/SslConfiguration; virtualinvoke r1.<javax.net.ssl.SSLContext: void init(javax.net.ssl.KeyManager[],javax.net.ssl.TrustManager[],java.security.SecureRandom)>(r10, r11, varReplacer3539) First parameter was not properly generated as generated Key Manager
- - yes SSLContext org.apache.logging.log4j.core.net.ssl.SslConfiguration.createSSLConfiguration(Ljava/lang/String;Lorg/apache/logging/log4j/core/net/ssl/KeyStoreConfiguration;Lorg/apache/logging/log4j/core/net/ssl/TrustStoreConfiguration;)Lorg/apache/logging/log4j/core/net/ssl/SslConfiguration; virtualinvoke r1.<javax.net.ssl.SSLContext: void init(javax.net.ssl.KeyManager[],javax.net.ssl.TrustManager[],java.security.SecureRandom)>(r10, r11, varReplacer3539) Second parameter was not properly generated as generated Trust Manager
- - yes TrustManagerFactory org.apache.logging.log4j.core.net.ssl.TrustStoreConfiguration.initTrustManagerFactory()Ljavax/net/ssl/TrustManagerFactory; virtualinvoke r1.<javax.net.ssl.TrustManagerFactory: void init(java.security.KeyStore)>($r3) First parameter was not properly generated as generated Key Store
- - yes MessageDigest org.apache.logging.log4j.core.util.NameUtil.md5(Ljava/lang/String;)Ljava/lang/String; r11 = staticinvoke <java.security.MessageDigest: java.security.MessageDigest getInstance(java.lang.String)>(varReplacer5079) First parameter (with value "MD5") should be any of {SHA-256, SHA-384, SHA-512}
2.6.2 no       yes KeyStore org.apache.logging.log4j.core.net.ssl.AbstractKeyStoreConfiguration.<init>(Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;)V virtualinvoke r47.<java.security.KeyStore: void load(java.io.InputStream,char[])>(r45, $r11) Second parameter should never be of type java.lang.String.
- - yes KeyManagerFactory org.apache.logging.log4j.core.net.ssl.KeyStoreConfiguration.initKeyManagerFactory()Ljavax/net/ssl/KeyManagerFactory; virtualinvoke r1.<javax.net.ssl.KeyManagerFactory: void init(java.security.KeyStore,char[])>($r3, $r4) First parameter was not properly generated as generated Key Store
- - yes KeyManagerFactory org.apache.logging.log4j.core.net.ssl.KeyStoreConfiguration.initKeyManagerFactory()Ljavax/net/ssl/KeyManagerFactory; virtualinvoke r1.<javax.net.ssl.KeyManagerFactory: void init(java.security.KeyStore,char[])>($r3, $r4) Second parameter should never be of type java.lang.String.
- - yes SSLContext org.apache.logging.log4j.core.net.ssl.SslConfiguration.createSSLConfiguration(Ljava/lang/String;Lorg/apache/logging/log4j/core/net/ssl/KeyStoreConfiguration;Lorg/apache/logging/log4j/core/net/ssl/TrustStoreConfiguration;)Lorg/apache/logging/log4j/core/net/ssl/SslConfiguration; $r2 = staticinvoke <javax.net.ssl.SSLContext: javax.net.ssl.SSLContext getDefault()>() Detected call to forbidden method javax.net.ssl.SSLContext getDefault() of class javax.net.ssl.SSLContext. Instead, call method <javax.net.ssl.SSLContext: javax.net.ssl.SSLContext getInstance(java.lang.String)>, <javax.net.ssl.SSLContext: javax.net.ssl.SSLContext getInstance(java.lang.String,java.lang.String)>, <javax.net.ssl.SSLContext: javax.net.ssl.SSLContext getInstance(java.lang.String,java.security.Provider)>.
- - yes SSLContext org.apache.logging.log4j.core.net.ssl.SslConfiguration.createSSLConfiguration(Ljava/lang/String;Lorg/apache/logging/log4j/core/net/ssl/KeyStoreConfiguration;Lorg/apache/logging/log4j/core/net/ssl/TrustStoreConfiguration;)Lorg/apache/logging/log4j/core/net/ssl/SslConfiguration; r1 = staticinvoke <javax.net.ssl.SSLContext: javax.net.ssl.SSLContext getInstance(java.lang.String)>($r2) First parameter (with value "SSL") should be any of {TLSv1, TLSv1.1, TLSv1.2}
- - yes SSLContext org.apache.logging.log4j.core.net.ssl.SslConfiguration.createSSLConfiguration(Ljava/lang/String;Lorg/apache/logging/log4j/core/net/ssl/KeyStoreConfiguration;Lorg/apache/logging/log4j/core/net/ssl/TrustStoreConfiguration;)Lorg/apache/logging/log4j/core/net/ssl/SslConfiguration; virtualinvoke r1.<javax.net.ssl.SSLContext: void init(javax.net.ssl.KeyManager[],javax.net.ssl.TrustManager[],java.security.SecureRandom)>(r10, r11, varReplacer3571) First parameter was not properly generated as generated Key Manager
- - yes SSLContext org.apache.logging.log4j.core.net.ssl.SslConfiguration.createSSLConfiguration(Ljava/lang/String;Lorg/apache/logging/log4j/core/net/ssl/KeyStoreConfiguration;Lorg/apache/logging/log4j/core/net/ssl/TrustStoreConfiguration;)Lorg/apache/logging/log4j/core/net/ssl/SslConfiguration; virtualinvoke r1.<javax.net.ssl.SSLContext: void init(javax.net.ssl.KeyManager[],javax.net.ssl.TrustManager[],java.security.SecureRandom)>(r10, r11, varReplacer3571) Second parameter was not properly generated as generated Trust Manager
- - yes TrustManagerFactory org.apache.logging.log4j.core.net.ssl.TrustStoreConfiguration.initTrustManagerFactory()Ljavax/net/ssl/TrustManagerFactory; virtualinvoke r1.<javax.net.ssl.TrustManagerFactory: void init(java.security.KeyStore)>($r3) First parameter was not properly generated as generated Key Store
- - yes MessageDigest org.apache.logging.log4j.core.util.NameUtil.md5(Ljava/lang/String;)Ljava/lang/String; r11 = staticinvoke <java.security.MessageDigest: java.security.MessageDigest getInstance(java.lang.String)>(varReplacer5109) First parameter (with value "MD5") should be any of {SHA-256, SHA-384, SHA-512}
2.7 no       yes KeyManagerFactory org.apache.logging.log4j.core.net.ssl.KeyStoreConfiguration.initKeyManagerFactory()Ljavax/net/ssl/KeyManagerFactory; virtualinvoke r1.<javax.net.ssl.KeyManagerFactory: void init(java.security.KeyStore,char[])>($r3, $r4) First parameter was not properly generated as generated Key Store
- - yes SSLContext org.apache.logging.log4j.core.net.ssl.SslConfiguration.createSSLConfiguration(Ljava/lang/String;Lorg/apache/logging/log4j/core/net/ssl/KeyStoreConfiguration;Lorg/apache/logging/log4j/core/net/ssl/TrustStoreConfiguration;)Lorg/apache/logging/log4j/core/net/ssl/SslConfiguration; $r2 = staticinvoke <javax.net.ssl.SSLContext: javax.net.ssl.SSLContext getDefault()>() Detected call to forbidden method javax.net.ssl.SSLContext getDefault() of class javax.net.ssl.SSLContext. Instead, call method <javax.net.ssl.SSLContext: javax.net.ssl.SSLContext getInstance(java.lang.String)>, <javax.net.ssl.SSLContext: javax.net.ssl.SSLContext getInstance(java.lang.String,java.lang.String)>, <javax.net.ssl.SSLContext: javax.net.ssl.SSLContext getInstance(java.lang.String,java.security.Provider)>.
- - yes SSLContext org.apache.logging.log4j.core.net.ssl.SslConfiguration.createSSLConfiguration(Ljava/lang/String;Lorg/apache/logging/log4j/core/net/ssl/KeyStoreConfiguration;Lorg/apache/logging/log4j/core/net/ssl/TrustStoreConfiguration;)Lorg/apache/logging/log4j/core/net/ssl/SslConfiguration; r1 = staticinvoke <javax.net.ssl.SSLContext: javax.net.ssl.SSLContext getInstance(java.lang.String)>($r2) First parameter (with value "SSL") should be any of {TLSv1, TLSv1.1, TLSv1.2}
- - yes SSLContext org.apache.logging.log4j.core.net.ssl.SslConfiguration.createSSLConfiguration(Ljava/lang/String;Lorg/apache/logging/log4j/core/net/ssl/KeyStoreConfiguration;Lorg/apache/logging/log4j/core/net/ssl/TrustStoreConfiguration;)Lorg/apache/logging/log4j/core/net/ssl/SslConfiguration; virtualinvoke r1.<javax.net.ssl.SSLContext: void init(javax.net.ssl.KeyManager[],javax.net.ssl.TrustManager[],java.security.SecureRandom)>(r10, r11, varReplacer3864) First parameter was not properly generated as generated Key Manager
- - yes SSLContext org.apache.logging.log4j.core.net.ssl.SslConfiguration.createSSLConfiguration(Ljava/lang/String;Lorg/apache/logging/log4j/core/net/ssl/KeyStoreConfiguration;Lorg/apache/logging/log4j/core/net/ssl/TrustStoreConfiguration;)Lorg/apache/logging/log4j/core/net/ssl/SslConfiguration; virtualinvoke r1.<javax.net.ssl.SSLContext: void init(javax.net.ssl.KeyManager[],javax.net.ssl.TrustManager[],java.security.SecureRandom)>(r10, r11, varReplacer3864) Second parameter was not properly generated as generated Trust Manager
- - yes TrustManagerFactory org.apache.logging.log4j.core.net.ssl.TrustStoreConfiguration.initTrustManagerFactory()Ljavax/net/ssl/TrustManagerFactory; virtualinvoke r1.<javax.net.ssl.TrustManagerFactory: void init(java.security.KeyStore)>($r3) First parameter was not properly generated as generated Key Store
- - yes MessageDigest org.apache.logging.log4j.core.util.NameUtil.md5(Ljava/lang/String;)Ljava/lang/String; r11 = staticinvoke <java.security.MessageDigest: java.security.MessageDigest getInstance(java.lang.String)>(varReplacer5543) First parameter (with value "MD5") should be any of {SHA-256, SHA-384, SHA-512}
2.8 no       yes KeyStore org.apache.logging.log4j.core.net.ssl.AbstractKeyStoreConfiguration.<init>(Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;)V virtualinvoke r47.<java.security.KeyStore: void load(java.io.InputStream,char[])>(r45, $r11) Second parameter should never be of type java.lang.String.
- - yes KeyManagerFactory org.apache.logging.log4j.core.net.ssl.KeyStoreConfiguration.initKeyManagerFactory()Ljavax/net/ssl/KeyManagerFactory; virtualinvoke r1.<javax.net.ssl.KeyManagerFactory: void init(java.security.KeyStore,char[])>($r3, $r4) First parameter was not properly generated as generated Key Store
- - yes KeyManagerFactory org.apache.logging.log4j.core.net.ssl.KeyStoreConfiguration.initKeyManagerFactory()Ljavax/net/ssl/KeyManagerFactory; virtualinvoke r1.<javax.net.ssl.KeyManagerFactory: void init(java.security.KeyStore,char[])>($r3, $r4) Second parameter should never be of type java.lang.String.
- - yes SSLContext org.apache.logging.log4j.core.net.ssl.SslConfiguration.createSSLConfiguration(Ljava/lang/String;Lorg/apache/logging/log4j/core/net/ssl/KeyStoreConfiguration;Lorg/apache/logging/log4j/core/net/ssl/TrustStoreConfiguration;)Lorg/apache/logging/log4j/core/net/ssl/SslConfiguration; $r2 = staticinvoke <javax.net.ssl.SSLContext: javax.net.ssl.SSLContext getDefault()>() Detected call to forbidden method javax.net.ssl.SSLContext getDefault() of class javax.net.ssl.SSLContext. Instead, call method <javax.net.ssl.SSLContext: javax.net.ssl.SSLContext getInstance(java.lang.String,java.security.Provider)>, <javax.net.ssl.SSLContext: javax.net.ssl.SSLContext getInstance(java.lang.String)>, <javax.net.ssl.SSLContext: javax.net.ssl.SSLContext getInstance(java.lang.String,java.lang.String)>.
- - yes SSLContext org.apache.logging.log4j.core.net.ssl.SslConfiguration.createSSLConfiguration(Ljava/lang/String;Lorg/apache/logging/log4j/core/net/ssl/KeyStoreConfiguration;Lorg/apache/logging/log4j/core/net/ssl/TrustStoreConfiguration;)Lorg/apache/logging/log4j/core/net/ssl/SslConfiguration; r1 = staticinvoke <javax.net.ssl.SSLContext: javax.net.ssl.SSLContext getInstance(java.lang.String)>($r2) First parameter (with value "SSL") should be any of {TLSv1, TLSv1.1, TLSv1.2}
- - yes SSLContext org.apache.logging.log4j.core.net.ssl.SslConfiguration.createSSLConfiguration(Ljava/lang/String;Lorg/apache/logging/log4j/core/net/ssl/KeyStoreConfiguration;Lorg/apache/logging/log4j/core/net/ssl/TrustStoreConfiguration;)Lorg/apache/logging/log4j/core/net/ssl/SslConfiguration; virtualinvoke r1.<javax.net.ssl.SSLContext: void init(javax.net.ssl.KeyManager[],javax.net.ssl.TrustManager[],java.security.SecureRandom)>(r10, r11, varReplacer4029) First parameter was not properly generated as generated Key Manager
- - yes SSLContext org.apache.logging.log4j.core.net.ssl.SslConfiguration.createSSLConfiguration(Ljava/lang/String;Lorg/apache/logging/log4j/core/net/ssl/KeyStoreConfiguration;Lorg/apache/logging/log4j/core/net/ssl/TrustStoreConfiguration;)Lorg/apache/logging/log4j/core/net/ssl/SslConfiguration; virtualinvoke r1.<javax.net.ssl.SSLContext: void init(javax.net.ssl.KeyManager[],javax.net.ssl.TrustManager[],java.security.SecureRandom)>(r10, r11, varReplacer4029) Second parameter was not properly generated as generated Trust Manager
- - yes TrustManagerFactory org.apache.logging.log4j.core.net.ssl.TrustStoreConfiguration.initTrustManagerFactory()Ljavax/net/ssl/TrustManagerFactory; virtualinvoke r1.<javax.net.ssl.TrustManagerFactory: void init(java.security.KeyStore)>($r3) First parameter was not properly generated as generated Key Store
- - yes MessageDigest org.apache.logging.log4j.core.util.NameUtil.md5(Ljava/lang/String;)Ljava/lang/String; r11 = staticinvoke <java.security.MessageDigest: java.security.MessageDigest getInstance(java.lang.String)>(varReplacer5734) First parameter (with value "MD5") should be any of {SHA-256, SHA-384, SHA-512}
2.8.1 no       yes KeyManagerFactory org.apache.logging.log4j.core.net.ssl.KeyStoreConfiguration.initKeyManagerFactory()Ljavax/net/ssl/KeyManagerFactory; virtualinvoke r1.<javax.net.ssl.KeyManagerFactory: void init(java.security.KeyStore,char[])>($r3, $r4) First parameter was not properly generated as generated Key Store
- - yes SSLContext org.apache.logging.log4j.core.net.ssl.SslConfiguration.createSSLConfiguration(Ljava/lang/String;Lorg/apache/logging/log4j/core/net/ssl/KeyStoreConfiguration;Lorg/apache/logging/log4j/core/net/ssl/TrustStoreConfiguration;)Lorg/apache/logging/log4j/core/net/ssl/SslConfiguration; $r2 = staticinvoke <javax.net.ssl.SSLContext: javax.net.ssl.SSLContext getDefault()>() Detected call to forbidden method javax.net.ssl.SSLContext getDefault() of class javax.net.ssl.SSLContext. Instead, call method <javax.net.ssl.SSLContext: javax.net.ssl.SSLContext getInstance(java.lang.String)>, <javax.net.ssl.SSLContext: javax.net.ssl.SSLContext getInstance(java.lang.String,java.security.Provider)>, <javax.net.ssl.SSLContext: javax.net.ssl.SSLContext getInstance(java.lang.String,java.lang.String)>.
- - yes SSLContext org.apache.logging.log4j.core.net.ssl.SslConfiguration.createSSLConfiguration(Ljava/lang/String;Lorg/apache/logging/log4j/core/net/ssl/KeyStoreConfiguration;Lorg/apache/logging/log4j/core/net/ssl/TrustStoreConfiguration;)Lorg/apache/logging/log4j/core/net/ssl/SslConfiguration; r1 = staticinvoke <javax.net.ssl.SSLContext: javax.net.ssl.SSLContext getInstance(java.lang.String)>($r2) First parameter (with value "SSL") should be any of {TLSv1, TLSv1.1, TLSv1.2}
- - yes SSLContext org.apache.logging.log4j.core.net.ssl.SslConfiguration.createSSLConfiguration(Ljava/lang/String;Lorg/apache/logging/log4j/core/net/ssl/KeyStoreConfiguration;Lorg/apache/logging/log4j/core/net/ssl/TrustStoreConfiguration;)Lorg/apache/logging/log4j/core/net/ssl/SslConfiguration; virtualinvoke r1.<javax.net.ssl.SSLContext: void init(javax.net.ssl.KeyManager[],javax.net.ssl.TrustManager[],java.security.SecureRandom)>(r10, r11, varReplacer3461) First parameter was not properly generated as generated Key Manager
- - yes SSLContext org.apache.logging.log4j.core.net.ssl.SslConfiguration.createSSLConfiguration(Ljava/lang/String;Lorg/apache/logging/log4j/core/net/ssl/KeyStoreConfiguration;Lorg/apache/logging/log4j/core/net/ssl/TrustStoreConfiguration;)Lorg/apache/logging/log4j/core/net/ssl/SslConfiguration; virtualinvoke r1.<javax.net.ssl.SSLContext: void init(javax.net.ssl.KeyManager[],javax.net.ssl.TrustManager[],java.security.SecureRandom)>(r10, r11, varReplacer3461) Second parameter was not properly generated as generated Trust Manager
- - yes TrustManagerFactory org.apache.logging.log4j.core.net.ssl.TrustStoreConfiguration.initTrustManagerFactory()Ljavax/net/ssl/TrustManagerFactory; virtualinvoke r1.<javax.net.ssl.TrustManagerFactory: void init(java.security.KeyStore)>($r3) First parameter was not properly generated as generated Key Store
- - yes MessageDigest org.apache.logging.log4j.core.util.NameUtil.md5(Ljava/lang/String;)Ljava/lang/String; r11 = staticinvoke <java.security.MessageDigest: java.security.MessageDigest getInstance(java.lang.String)>(varReplacer3661) First parameter (with value "MD5") should be any of {SHA-256, SHA-384, SHA-512}
2.8.2 no       yes KeyManagerFactory org.apache.logging.log4j.core.net.ssl.KeyStoreConfiguration.initKeyManagerFactory()Ljavax/net/ssl/KeyManagerFactory; virtualinvoke r1.<javax.net.ssl.KeyManagerFactory: void init(java.security.KeyStore,char[])>($r3, $r4) First parameter was not properly generated as generated Key Store
- - yes SSLContext org.apache.logging.log4j.core.net.ssl.SslConfiguration.createSSLConfiguration(Ljava/lang/String;Lorg/apache/logging/log4j/core/net/ssl/KeyStoreConfiguration;Lorg/apache/logging/log4j/core/net/ssl/TrustStoreConfiguration;)Lorg/apache/logging/log4j/core/net/ssl/SslConfiguration; $r2 = staticinvoke <javax.net.ssl.SSLContext: javax.net.ssl.SSLContext getDefault()>() Detected call to forbidden method javax.net.ssl.SSLContext getDefault() of class javax.net.ssl.SSLContext. Instead, call method <javax.net.ssl.SSLContext: javax.net.ssl.SSLContext getInstance(java.lang.String,java.security.Provider)>, <javax.net.ssl.SSLContext: javax.net.ssl.SSLContext getInstance(java.lang.String)>, <javax.net.ssl.SSLContext: javax.net.ssl.SSLContext getInstance(java.lang.String,java.lang.String)>.
- - yes SSLContext org.apache.logging.log4j.core.net.ssl.SslConfiguration.createSSLConfiguration(Ljava/lang/String;Lorg/apache/logging/log4j/core/net/ssl/KeyStoreConfiguration;Lorg/apache/logging/log4j/core/net/ssl/TrustStoreConfiguration;)Lorg/apache/logging/log4j/core/net/ssl/SslConfiguration; r1 = staticinvoke <javax.net.ssl.SSLContext: javax.net.ssl.SSLContext getInstance(java.lang.String)>($r2) First parameter (with value "SSL") should be any of {TLSv1, TLSv1.1, TLSv1.2}
- - yes SSLContext org.apache.logging.log4j.core.net.ssl.SslConfiguration.createSSLConfiguration(Ljava/lang/String;Lorg/apache/logging/log4j/core/net/ssl/KeyStoreConfiguration;Lorg/apache/logging/log4j/core/net/ssl/TrustStoreConfiguration;)Lorg/apache/logging/log4j/core/net/ssl/SslConfiguration; virtualinvoke r1.<javax.net.ssl.SSLContext: void init(javax.net.ssl.KeyManager[],javax.net.ssl.TrustManager[],java.security.SecureRandom)>(r10, r11, varReplacer2789) First parameter was not properly generated as generated Key Manager
- - yes SSLContext org.apache.logging.log4j.core.net.ssl.SslConfiguration.createSSLConfiguration(Ljava/lang/String;Lorg/apache/logging/log4j/core/net/ssl/KeyStoreConfiguration;Lorg/apache/logging/log4j/core/net/ssl/TrustStoreConfiguration;)Lorg/apache/logging/log4j/core/net/ssl/SslConfiguration; virtualinvoke r1.<javax.net.ssl.SSLContext: void init(javax.net.ssl.KeyManager[],javax.net.ssl.TrustManager[],java.security.SecureRandom)>(r10, r11, varReplacer2789) Second parameter was not properly generated as generated Trust Manager
- - yes TrustManagerFactory org.apache.logging.log4j.core.net.ssl.TrustStoreConfiguration.initTrustManagerFactory()Ljavax/net/ssl/TrustManagerFactory; virtualinvoke r1.<javax.net.ssl.TrustManagerFactory: void init(java.security.KeyStore)>($r3) First parameter was not properly generated as generated Key Store
- - yes MessageDigest org.apache.logging.log4j.core.util.NameUtil.md5(Ljava/lang/String;)Ljava/lang/String; r11 = staticinvoke <java.security.MessageDigest: java.security.MessageDigest getInstance(java.lang.String)>(varReplacer1707) First parameter (with value "MD5") should be any of {SHA-256, SHA-384, SHA-512}
2.9.0 no       yes KeyStore org.apache.logging.log4j.core.net.ssl.AbstractKeyStoreConfiguration.<init>(Ljava/lang/String;[CLjava/lang/String;)V virtualinvoke r33.<java.security.KeyStore: void load(java.io.InputStream,char[])>(r31, $r8) Second parameter should never be of type java.lang.String.
- - yes KeyManagerFactory org.apache.logging.log4j.core.net.ssl.KeyStoreConfiguration.initKeyManagerFactory()Ljavax/net/ssl/KeyManagerFactory; virtualinvoke r1.<javax.net.ssl.KeyManagerFactory: void init(java.security.KeyStore,char[])>($r3, $r4) First parameter was not properly generated as generated Key Store
- - yes KeyManagerFactory org.apache.logging.log4j.core.net.ssl.KeyStoreConfiguration.initKeyManagerFactory()Ljavax/net/ssl/KeyManagerFactory; virtualinvoke r1.<javax.net.ssl.KeyManagerFactory: void init(java.security.KeyStore,char[])>($r3, $r4) Second parameter should never be of type java.lang.String.
- - yes SSLContext org.apache.logging.log4j.core.net.ssl.SslConfiguration.createSSLConfiguration(Ljava/lang/String;Lorg/apache/logging/log4j/core/net/ssl/KeyStoreConfiguration;Lorg/apache/logging/log4j/core/net/ssl/TrustStoreConfiguration;)Lorg/apache/logging/log4j/core/net/ssl/SslConfiguration; $r2 = staticinvoke <javax.net.ssl.SSLContext: javax.net.ssl.SSLContext getDefault()>() Detected call to forbidden method javax.net.ssl.SSLContext getDefault() of class javax.net.ssl.SSLContext. Instead, call method <javax.net.ssl.SSLContext: javax.net.ssl.SSLContext getInstance(java.lang.String,java.lang.String)>, <javax.net.ssl.SSLContext: javax.net.ssl.SSLContext getInstance(java.lang.String,java.security.Provider)>, <javax.net.ssl.SSLContext: javax.net.ssl.SSLContext getInstance(java.lang.String)>.
- - yes SSLContext org.apache.logging.log4j.core.net.ssl.SslConfiguration.createSSLConfiguration(Ljava/lang/String;Lorg/apache/logging/log4j/core/net/ssl/KeyStoreConfiguration;Lorg/apache/logging/log4j/core/net/ssl/TrustStoreConfiguration;)Lorg/apache/logging/log4j/core/net/ssl/SslConfiguration; r1 = staticinvoke <javax.net.ssl.SSLContext: javax.net.ssl.SSLContext getInstance(java.lang.String)>($r2) First parameter (with value "SSL") should be any of {TLSv1, TLSv1.1, TLSv1.2}
- - yes SSLContext org.apache.logging.log4j.core.net.ssl.SslConfiguration.createSSLConfiguration(Ljava/lang/String;Lorg/apache/logging/log4j/core/net/ssl/KeyStoreConfiguration;Lorg/apache/logging/log4j/core/net/ssl/TrustStoreConfiguration;)Lorg/apache/logging/log4j/core/net/ssl/SslConfiguration; virtualinvoke r1.<javax.net.ssl.SSLContext: void init(javax.net.ssl.KeyManager[],javax.net.ssl.TrustManager[],java.security.SecureRandom)>(r10, r11, varReplacer321) First parameter was not properly generated as generated Key Manager
- - yes SSLContext org.apache.logging.log4j.core.net.ssl.SslConfiguration.createSSLConfiguration(Ljava/lang/String;Lorg/apache/logging/log4j/core/net/ssl/KeyStoreConfiguration;Lorg/apache/logging/log4j/core/net/ssl/TrustStoreConfiguration;)Lorg/apache/logging/log4j/core/net/ssl/SslConfiguration; virtualinvoke r1.<javax.net.ssl.SSLContext: void init(javax.net.ssl.KeyManager[],javax.net.ssl.TrustManager[],java.security.SecureRandom)>(r10, r11, varReplacer321) Second parameter was not properly generated as generated Trust Manager
- - yes TrustManagerFactory org.apache.logging.log4j.core.net.ssl.TrustStoreConfiguration.initTrustManagerFactory()Ljavax/net/ssl/TrustManagerFactory; virtualinvoke r1.<javax.net.ssl.TrustManagerFactory: void init(java.security.KeyStore)>($r3) First parameter was not properly generated as generated Key Store
- - yes MessageDigest org.apache.logging.log4j.core.util.NameUtil.md5(Ljava/lang/String;)Ljava/lang/String; r11 = staticinvoke <java.security.MessageDigest: java.security.MessageDigest getInstance(java.lang.String)>(varReplacer3665) First parameter (with value "MD5") should be any of {SHA-256, SHA-384, SHA-512}
2.9.1 no       yes KeyStore org.apache.logging.log4j.core.net.ssl.AbstractKeyStoreConfiguration.<init>(Ljava/lang/String;[CLjava/lang/String;)V virtualinvoke r33.<java.security.KeyStore: void load(java.io.InputStream,char[])>(r31, $r8) Second parameter should never be of type java.lang.String.
- - yes KeyManagerFactory org.apache.logging.log4j.core.net.ssl.KeyStoreConfiguration.initKeyManagerFactory()Ljavax/net/ssl/KeyManagerFactory; virtualinvoke r1.<javax.net.ssl.KeyManagerFactory: void init(java.security.KeyStore,char[])>($r3, $r4) First parameter was not properly generated as generated Key Store
- - yes KeyManagerFactory org.apache.logging.log4j.core.net.ssl.KeyStoreConfiguration.initKeyManagerFactory()Ljavax/net/ssl/KeyManagerFactory; virtualinvoke r1.<javax.net.ssl.KeyManagerFactory: void init(java.security.KeyStore,char[])>($r3, $r4) Second parameter should never be of type java.lang.String.
- - yes SSLContext org.apache.logging.log4j.core.net.ssl.SslConfiguration.createSSLConfiguration(Ljava/lang/String;Lorg/apache/logging/log4j/core/net/ssl/KeyStoreConfiguration;Lorg/apache/logging/log4j/core/net/ssl/TrustStoreConfiguration;)Lorg/apache/logging/log4j/core/net/ssl/SslConfiguration; $r2 = staticinvoke <javax.net.ssl.SSLContext: javax.net.ssl.SSLContext getDefault()>() Detected call to forbidden method javax.net.ssl.SSLContext getDefault() of class javax.net.ssl.SSLContext. Instead, call method <javax.net.ssl.SSLContext: javax.net.ssl.SSLContext getInstance(java.lang.String,java.security.Provider)>, <javax.net.ssl.SSLContext: javax.net.ssl.SSLContext getInstance(java.lang.String)>, <javax.net.ssl.SSLContext: javax.net.ssl.SSLContext getInstance(java.lang.String,java.lang.String)>.
- - yes SSLContext org.apache.logging.log4j.core.net.ssl.SslConfiguration.createSSLConfiguration(Ljava/lang/String;Lorg/apache/logging/log4j/core/net/ssl/KeyStoreConfiguration;Lorg/apache/logging/log4j/core/net/ssl/TrustStoreConfiguration;)Lorg/apache/logging/log4j/core/net/ssl/SslConfiguration; r1 = staticinvoke <javax.net.ssl.SSLContext: javax.net.ssl.SSLContext getInstance(java.lang.String)>($r2) First parameter (with value "SSL") should be any of {TLSv1, TLSv1.1, TLSv1.2}
- - yes SSLContext org.apache.logging.log4j.core.net.ssl.SslConfiguration.createSSLConfiguration(Ljava/lang/String;Lorg/apache/logging/log4j/core/net/ssl/KeyStoreConfiguration;Lorg/apache/logging/log4j/core/net/ssl/TrustStoreConfiguration;)Lorg/apache/logging/log4j/core/net/ssl/SslConfiguration; virtualinvoke r1.<javax.net.ssl.SSLContext: void init(javax.net.ssl.KeyManager[],javax.net.ssl.TrustManager[],java.security.SecureRandom)>(r10, r11, varReplacer5107) First parameter was not properly generated as generated Key Manager
- - yes SSLContext org.apache.logging.log4j.core.net.ssl.SslConfiguration.createSSLConfiguration(Ljava/lang/String;Lorg/apache/logging/log4j/core/net/ssl/KeyStoreConfiguration;Lorg/apache/logging/log4j/core/net/ssl/TrustStoreConfiguration;)Lorg/apache/logging/log4j/core/net/ssl/SslConfiguration; virtualinvoke r1.<javax.net.ssl.SSLContext: void init(javax.net.ssl.KeyManager[],javax.net.ssl.TrustManager[],java.security.SecureRandom)>(r10, r11, varReplacer5107) Second parameter was not properly generated as generated Trust Manager
- - yes TrustManagerFactory org.apache.logging.log4j.core.net.ssl.TrustStoreConfiguration.initTrustManagerFactory()Ljavax/net/ssl/TrustManagerFactory; virtualinvoke r1.<javax.net.ssl.TrustManagerFactory: void init(java.security.KeyStore)>($r3) First parameter was not properly generated as generated Key Store
- - yes MessageDigest org.apache.logging.log4j.core.util.NameUtil.md5(Ljava/lang/String;)Ljava/lang/String; r11 = staticinvoke <java.security.MessageDigest: java.security.MessageDigest getInstance(java.lang.String)>(varReplacer6562) First parameter (with value "MD5") should be any of {SHA-256, SHA-384, SHA-512}
2.10.0 no       yes KeyStore org.apache.logging.log4j.core.net.ssl.AbstractKeyStoreConfiguration.<init>(Ljava/lang/String;Lorg/apache/logging/log4j/core/net/ssl/PasswordProvider;Ljava/lang/String;)V virtualinvoke r33.<java.security.KeyStore: void load(java.io.InputStream,char[])>(r31, r2) Second parameter should never be of type java.lang.String.
- - yes KeyManagerFactory org.apache.logging.log4j.core.net.ssl.KeyStoreConfiguration.initKeyManagerFactory()Ljavax/net/ssl/KeyManagerFactory; virtualinvoke r1.<javax.net.ssl.KeyManagerFactory: void init(java.security.KeyStore,char[])>($r5, r2) First parameter was not properly generated as generated Key Store
- - yes KeyManagerFactory org.apache.logging.log4j.core.net.ssl.KeyStoreConfiguration.initKeyManagerFactory()Ljavax/net/ssl/KeyManagerFactory; virtualinvoke r1.<javax.net.ssl.KeyManagerFactory: void init(java.security.KeyStore,char[])>($r5, r2) Second parameter should never be of type java.lang.String.
- - yes SSLContext org.apache.logging.log4j.core.net.ssl.SslConfiguration.createSSLConfiguration(Ljava/lang/String;Lorg/apache/logging/log4j/core/net/ssl/KeyStoreConfiguration;Lorg/apache/logging/log4j/core/net/ssl/TrustStoreConfiguration;)Lorg/apache/logging/log4j/core/net/ssl/SslConfiguration; $r2 = staticinvoke <javax.net.ssl.SSLContext: javax.net.ssl.SSLContext getDefault()>() Detected call to forbidden method javax.net.ssl.SSLContext getDefault() of class javax.net.ssl.SSLContext. Instead, call method <javax.net.ssl.SSLContext: javax.net.ssl.SSLContext getInstance(java.lang.String)>, <javax.net.ssl.SSLContext: javax.net.ssl.SSLContext getInstance(java.lang.String,java.security.Provider)>, <javax.net.ssl.SSLContext: javax.net.ssl.SSLContext getInstance(java.lang.String,java.lang.String)>.
- - yes SSLContext org.apache.logging.log4j.core.net.ssl.SslConfiguration.createSSLConfiguration(Ljava/lang/String;Lorg/apache/logging/log4j/core/net/ssl/KeyStoreConfiguration;Lorg/apache/logging/log4j/core/net/ssl/TrustStoreConfiguration;)Lorg/apache/logging/log4j/core/net/ssl/SslConfiguration; r1 = staticinvoke <javax.net.ssl.SSLContext: javax.net.ssl.SSLContext getInstance(java.lang.String)>($r2) First parameter (with value "SSL") should be any of {TLSv1, TLSv1.1, TLSv1.2}
- - yes SSLContext org.apache.logging.log4j.core.net.ssl.SslConfiguration.createSSLConfiguration(Ljava/lang/String;Lorg/apache/logging/log4j/core/net/ssl/KeyStoreConfiguration;Lorg/apache/logging/log4j/core/net/ssl/TrustStoreConfiguration;)Lorg/apache/logging/log4j/core/net/ssl/SslConfiguration; virtualinvoke r1.<javax.net.ssl.SSLContext: void init(javax.net.ssl.KeyManager[],javax.net.ssl.TrustManager[],java.security.SecureRandom)>(r10, r11, varReplacer1165) First parameter was not properly generated as generated Key Manager
- - yes SSLContext org.apache.logging.log4j.core.net.ssl.SslConfiguration.createSSLConfiguration(Ljava/lang/String;Lorg/apache/logging/log4j/core/net/ssl/KeyStoreConfiguration;Lorg/apache/logging/log4j/core/net/ssl/TrustStoreConfiguration;)Lorg/apache/logging/log4j/core/net/ssl/SslConfiguration; virtualinvoke r1.<javax.net.ssl.SSLContext: void init(javax.net.ssl.KeyManager[],javax.net.ssl.TrustManager[],java.security.SecureRandom)>(r10, r11, varReplacer1165) Second parameter was not properly generated as generated Trust Manager
- - yes TrustManagerFactory org.apache.logging.log4j.core.net.ssl.TrustStoreConfiguration.initTrustManagerFactory()Ljavax/net/ssl/TrustManagerFactory; virtualinvoke r1.<javax.net.ssl.TrustManagerFactory: void init(java.security.KeyStore)>($r3) First parameter was not properly generated as generated Key Store
- - yes MessageDigest org.apache.logging.log4j.core.util.NameUtil.md5(Ljava/lang/String;)Ljava/lang/String; r11 = staticinvoke <java.security.MessageDigest: java.security.MessageDigest getInstance(java.lang.String)>(varReplacer2755) First parameter (with value "MD5") should be any of {SHA-256, SHA-384, SHA-512}
2.11.0 no       no
2.11.1 no       no