Back to library list
org.tukaani__xz
Column Insecure: Icon 
indicates the version is insecure, otherwise 
Column CryptoMisuse: Icon indicates the version has cryptographic API misuse, otherwise
indicates the version is insecure, otherwise
Column CryptoMisuse: Icon
indicates the version has cryptographic API misuse, otherwise
| Version | Insecure | CryptoMisuse | Rule name | Method | Statement | Details |
|---|---|---|---|---|---|---|
| 1.0 |
|
|
MessageDigest | org.tukaani.xz.XZInputStream.read([BII)I | i7 = virtualinvoke $r5.<org.tukaani.xz.SingleXZInputStream: int read(byte[],int,int)>(r1, i3, i4) | Operation on object of type java.security.MessageDigest object not completed. Expected call to digest, update |
| - | - |
|
MessageDigest | org.tukaani.xz.index.IndexBase.add(JJ)V | $l20 = virtualinvoke r0.<org.tukaani.xz.index.IndexBase: long getIndexSize()>() | Operation on object of type java.security.MessageDigest object not completed. Expected call to digest, update |
| - | - |
|
MessageDigest | org.tukaani.xz.index.IndexBase.add(JJ)V | $l22 = virtualinvoke r0.<org.tukaani.xz.index.IndexBase: long getStreamSize()>() | Operation on object of type java.security.MessageDigest object not completed. Expected call to digest, update |
| - | - |
|
MessageDigest | org.tukaani.xz.index.IndexHash.add(JJ)V | virtualinvoke $r4.<org.tukaani.xz.check.Check: void update(byte[])>($r5) | Operation on object of type java.security.MessageDigest object not completed. Expected call to <java.security.MessageDigest: void update(byte[])>, <java.security.MessageDigest: void update(byte[],int,int)>, digest, <java.security.MessageDigest: void update(java.nio.ByteBuffer)>, <java.security.MessageDigest: void update(byte)> |
| 1.1 |
|
|
MessageDigest | org.tukaani.xz.BlockInputStream.<init>(Ljava/io/InputStream;Lorg/tukaani/xz/check/Check;IJJ)V | $i57 = virtualinvoke r6.<java.io.ByteArrayInputStream: int read()>() | Operation on object of type java.security.MessageDigest object not completed. Expected call to digest, update |
| - | - |
|
MessageDigest | org.tukaani.xz.BlockInputStream.<init>(Ljava/io/InputStream;Lorg/tukaani/xz/check/Check;IJJ)V | $i59 = virtualinvoke r6.<java.io.ByteArrayInputStream: int available()>() | Operation on object of type java.security.MessageDigest object not completed. Expected call to digest, update |
| - | - |
|
MessageDigest | org.tukaani.xz.BlockInputStream.<init>(Ljava/io/InputStream;Lorg/tukaani/xz/check/Check;IJJ)V | $l65 = staticinvoke <org.tukaani.xz.common.DecoderUtil: long decodeVLI(java.io.InputStream)>(r6) | Operation on object of type java.security.MessageDigest object not completed. Expected call to digest, update |
| - | - |
|
MessageDigest | org.tukaani.xz.BlockInputStream.<init>(Ljava/io/InputStream;Lorg/tukaani/xz/check/Check;IJJ)V | i74 = virtualinvoke r6.<java.io.ByteArrayInputStream: int available()>() | Operation on object of type java.security.MessageDigest object not completed. Expected call to digest, update |
| - | - |
|
MessageDigest | org.tukaani.xz.BlockInputStream.read([BII)I | $i14 = virtualinvoke $r5.<java.io.InputStream: int read()>() | Operation on object of type java.security.MessageDigest object not completed. Expected call to digest, update |
| - | - |
|
MessageDigest | org.tukaani.xz.BlockInputStream.read([BII)I | i2 = virtualinvoke $r2.<java.io.InputStream: int read(byte[],int,int)>(r1, i0, i1) | Operation on object of type java.security.MessageDigest object not completed. Expected call to digest, update |
| - | - |
|
MessageDigest | org.tukaani.xz.CountingInputStream.read([BII)I | i2 = virtualinvoke $r2.<java.io.InputStream: int read(byte[],int,int)>(r1, i0, i1) | Operation on object of type java.security.MessageDigest object not completed. Expected call to digest, update |
| - | - |
|
MessageDigest | org.tukaani.xz.LZMA2InputStream.read([BII)I | specialinvoke r0.<org.tukaani.xz.LZMA2InputStream: void decodeChunkHeader()>() | Operation on object of type java.security.MessageDigest object not completed. Expected call to digest, update |
| - | - |
|
MessageDigest | org.tukaani.xz.SeekableXZInputStream.<init>(Lorg/tukaani/xz/SeekableInputStream;)V | specialinvoke r0.<org.tukaani.xz.SeekableXZInputStream: void <init>(org.tukaani.xz.SeekableInputStream,int)>(r1, varReplacer214) | Operation on object of type java.security.MessageDigest object not completed. Expected call to digest, update |
| - | - |
|
MessageDigest | org.tukaani.xz.SeekableXZInputStream.<init>(Lorg/tukaani/xz/SeekableInputStream;I)V | specialinvoke r0.<org.tukaani.xz.SeekableInputStream: void <init>()>() | Operation on object of type java.security.MessageDigest object not completed. Expected call to digest, update |
| - | - |
|
MessageDigest | org.tukaani.xz.SeekableXZInputStream.read([BII)I | specialinvoke r0.<org.tukaani.xz.SeekableXZInputStream: void initBlockDecoder(org.tukaani.xz.index.BlockInfo)>(r1) | Operation on object of type java.security.MessageDigest object not completed. Expected call to digest, update |
| - | - |
|
MessageDigest | org.tukaani.xz.SimpleInputStream.read([BII)I | i46 = virtualinvoke $r6.<java.io.InputStream: int read(byte[],int,int)>($r5, $i24, i45) | Operation on object of type java.security.MessageDigest object not completed. Expected call to digest, update |
| - | - |
|
MessageDigest | org.tukaani.xz.XZOutputStream.<init>(Ljava/io/OutputStream;Lorg/tukaani/xz/FilterOptions;)V | specialinvoke r0.<org.tukaani.xz.XZOutputStream: void <init>(java.io.OutputStream,org.tukaani.xz.FilterOptions,int)>(r1, r2, varReplacer346) | Operation on object of type java.security.MessageDigest object not completed. Expected call to digest, update |
| - | - |
|
MessageDigest | org.tukaani.xz.XZOutputStream.<init>(Ljava/io/OutputStream;[Lorg/tukaani/xz/FilterOptions;)V | specialinvoke r0.<org.tukaani.xz.XZOutputStream: void <init>(java.io.OutputStream,org.tukaani.xz.FilterOptions[],int)>(r1, r2, varReplacer347) | Operation on object of type java.security.MessageDigest object not completed. Expected call to digest, update |
| - | - |
|
MessageDigest | org.tukaani.xz.common.DecoderUtil.decodeVLI(Ljava/io/InputStream;)J | i6 = virtualinvoke r0.<java.io.InputStream: int read()>() | Operation on object of type java.security.MessageDigest object not completed. Expected call to digest, update |
| - | - |
|
MessageDigest | org.tukaani.xz.index.IndexDecoder.<init>(Lorg/tukaani/xz/SeekableInputStream;Lorg/tukaani/xz/common/StreamFlags;JI)V | $i32 = virtualinvoke r4.<java.util.zip.CheckedInputStream: int read()>() | Operation on object of type java.security.MessageDigest object not completed. Expected call to digest, update |
| - | - |
|
MessageDigest | org.tukaani.xz.index.IndexDecoder.<init>(Lorg/tukaani/xz/SeekableInputStream;Lorg/tukaani/xz/common/StreamFlags;JI)V | l46 = staticinvoke <org.tukaani.xz.common.DecoderUtil: long decodeVLI(java.io.InputStream)>(r4) | Operation on object of type java.security.MessageDigest object not completed. Expected call to digest, update |
| - | - |
|
MessageDigest | org.tukaani.xz.index.IndexDecoder.<init>(Lorg/tukaani/xz/SeekableInputStream;Lorg/tukaani/xz/common/StreamFlags;JI)V | l5 = staticinvoke <org.tukaani.xz.common.DecoderUtil: long decodeVLI(java.io.InputStream)>(r4) | Operation on object of type java.security.MessageDigest object not completed. Expected call to digest, update |
| - | - |
|
MessageDigest | org.tukaani.xz.index.IndexHash.validate(Ljava/io/InputStream;)V | l0 = staticinvoke <org.tukaani.xz.common.DecoderUtil: long decodeVLI(java.io.InputStream)>(r3) | Operation on object of type java.security.MessageDigest object not completed. Expected call to digest, update |
| - | - |
|
MessageDigest | org.tukaani.xz.index.IndexHash.validate(Ljava/io/InputStream;)V | l2 = staticinvoke <org.tukaani.xz.common.DecoderUtil: long decodeVLI(java.io.InputStream)>(r3) | Operation on object of type java.security.MessageDigest object not completed. Expected call to digest, update |
| - | - |
|
MessageDigest | org.tukaani.xz.index.IndexHash.validate(Ljava/io/InputStream;)V | specialinvoke $r13.<java.io.DataInputStream: void <init>(java.io.InputStream)>(r3) | Operation on object of type java.security.MessageDigest object not completed. Expected call to digest, update |
| 1.2 |
|
|
||||
| 1.3 |
|
|
||||
| 1.4 |
|
|
MessageDigest | org.tukaani.xz.SingleXZInputStream.<init>(Ljava/io/InputStream;)V | specialinvoke r0.<org.tukaani.xz.SingleXZInputStream: void initialize(java.io.InputStream,int)>(r1, varReplacer320) | Operation on object of type java.security.MessageDigest object not completed. Expected call to digest, update |
| - | - |
|
MessageDigest | org.tukaani.xz.XZInputStream.<init>(Ljava/io/InputStream;)V | specialinvoke r0.<org.tukaani.xz.XZInputStream: void <init>(java.io.InputStream,int)>(r1, varReplacer361) | Operation on object of type java.security.MessageDigest object not completed. Expected call to digest, update |
| - | - |
|
MessageDigest | org.tukaani.xz.XZInputStream.read([BII)I | i7 = virtualinvoke $r5.<org.tukaani.xz.SingleXZInputStream: int read(byte[],int,int)>(r1, i3, i4) | Operation on object of type java.security.MessageDigest object not completed. Expected call to digest, update |
| 1.5 |
|
|
MessageDigest | org.tukaani.xz.BlockInputStream.<init>(Ljava/io/InputStream;Lorg/tukaani/xz/check/Check;IJJ)V | specialinvoke r0.<java.io.InputStream: void <init>()>() | Operation on object of type java.security.MessageDigest object not completed. Expected call to digest, update |
| - | - |
|
MessageDigest | org.tukaani.xz.BlockInputStream.read([BII)I | $r11 = virtualinvoke $r10.<org.tukaani.xz.check.Check: java.lang.String getName()>() | Operation on object of type java.security.MessageDigest object not completed. Expected call to digest, update |
| - | - |
|
MessageDigest | org.tukaani.xz.SingleXZInputStream.<init>(Ljava/io/InputStream;)V | specialinvoke r0.<org.tukaani.xz.SingleXZInputStream: void initialize(java.io.InputStream,int)>(r1, varReplacer318) | Operation on object of type java.security.MessageDigest object not completed. Expected call to digest, update |
| - | - |
|
MessageDigest | org.tukaani.xz.XZInputStream.<init>(Ljava/io/InputStream;)V | specialinvoke r0.<org.tukaani.xz.XZInputStream: void <init>(java.io.InputStream,int)>(r1, varReplacer361) | Operation on object of type java.security.MessageDigest object not completed. Expected call to digest, update |
| - | - |
|
MessageDigest | org.tukaani.xz.XZInputStream.read([BII)I | i7 = virtualinvoke $r5.<org.tukaani.xz.SingleXZInputStream: int read(byte[],int,int)>(r1, i3, i4) | Operation on object of type java.security.MessageDigest object not completed. Expected call to digest, update |
| - | - |
|
MessageDigest | org.tukaani.xz.XZOutputStream.<init>(Ljava/io/OutputStream;Lorg/tukaani/xz/FilterOptions;)V | specialinvoke r0.<org.tukaani.xz.XZOutputStream: void <init>(java.io.OutputStream,org.tukaani.xz.FilterOptions,int)>(r1, r2, varReplacer381) | Operation on object of type java.security.MessageDigest object not completed. Expected call to digest, update |
| - | - |
|
MessageDigest | org.tukaani.xz.XZOutputStream.<init>(Ljava/io/OutputStream;[Lorg/tukaani/xz/FilterOptions;)V | specialinvoke r0.<org.tukaani.xz.XZOutputStream: void <init>(java.io.OutputStream,org.tukaani.xz.FilterOptions[],int)>(r1, r2, varReplacer382) | Operation on object of type java.security.MessageDigest object not completed. Expected call to digest, update |
| 1.6 |
|
|
||||
| 1.8 |
|
|