Back to library list

org.xerial.snappy__snappy-java

Column Insecure: Icon yes indicates the version is insecure, otherwise no
Column CryptoMisuse: Icon yes indicates the version has cryptographic API misuse, otherwise no
Version Insecure CryptoMisuse Rule name Method Statement Details
1.0.3 no       yes MessageDigest org.xerial.snappy.SnappyLoader.md5sum(Ljava/io/InputStream;)Ljava/lang/String; $r9 = virtualinvoke r17.<java.security.MessageDigest: byte[] digest()>() Unexpected call to method <java.security.MessageDigest: byte[] digest()> on object of type java.security.MessageDigest. Expect a call to one of the following methods <java.security.MessageDigest: void update(byte[])>,<java.security.MessageDigest: void update(byte[],int,int)>,<java.security.MessageDigest: byte[] digest(byte[])>,<java.security.MessageDigest: void update(java.nio.ByteBuffer)>,<java.security.MessageDigest: void update(byte)>
- - yes MessageDigest org.xerial.snappy.SnappyLoader.md5sum(Ljava/io/InputStream;)Ljava/lang/String; r17 = staticinvoke <java.security.MessageDigest: java.security.MessageDigest getInstance(java.lang.String)>(varReplacer159) First parameter (with value "MD5") should be any of {SHA-256, SHA-384, SHA-512}
1.0.3.1 no       yes MessageDigest org.xerial.snappy.SnappyLoader.md5sum(Ljava/io/InputStream;)Ljava/lang/String; $r9 = virtualinvoke r17.<java.security.MessageDigest: byte[] digest()>() Unexpected call to method <java.security.MessageDigest: byte[] digest()> on object of type java.security.MessageDigest. Expect a call to one of the following methods <java.security.MessageDigest: void update(byte[])>,<java.security.MessageDigest: void update(byte[],int,int)>,<java.security.MessageDigest: byte[] digest(byte[])>,<java.security.MessageDigest: void update(java.nio.ByteBuffer)>,<java.security.MessageDigest: void update(byte)>
- - yes MessageDigest org.xerial.snappy.SnappyLoader.md5sum(Ljava/io/InputStream;)Ljava/lang/String; r17 = staticinvoke <java.security.MessageDigest: java.security.MessageDigest getInstance(java.lang.String)>(varReplacer158) First parameter (with value "MD5") should be any of {SHA-256, SHA-384, SHA-512}
1.0.3.2 no       yes MessageDigest org.xerial.snappy.SnappyLoader.md5sum(Ljava/io/InputStream;)Ljava/lang/String; $r9 = virtualinvoke r17.<java.security.MessageDigest: byte[] digest()>() Unexpected call to method <java.security.MessageDigest: byte[] digest()> on object of type java.security.MessageDigest. Expect a call to one of the following methods <java.security.MessageDigest: void update(byte[])>,<java.security.MessageDigest: void update(byte[],int,int)>,<java.security.MessageDigest: byte[] digest(byte[])>,<java.security.MessageDigest: void update(java.nio.ByteBuffer)>,<java.security.MessageDigest: void update(byte)>
- - yes MessageDigest org.xerial.snappy.SnappyLoader.md5sum(Ljava/io/InputStream;)Ljava/lang/String; r17 = staticinvoke <java.security.MessageDigest: java.security.MessageDigest getInstance(java.lang.String)>(varReplacer165) First parameter (with value "MD5") should be any of {SHA-256, SHA-384, SHA-512}
1.0.3.3 no       yes MessageDigest org.xerial.snappy.SnappyLoader.md5sum(Ljava/io/InputStream;)Ljava/lang/String; $r9 = virtualinvoke r17.<java.security.MessageDigest: byte[] digest()>() Unexpected call to method <java.security.MessageDigest: byte[] digest()> on object of type java.security.MessageDigest. Expect a call to one of the following methods <java.security.MessageDigest: void update(byte[])>,<java.security.MessageDigest: void update(byte[],int,int)>,<java.security.MessageDigest: byte[] digest(byte[])>,<java.security.MessageDigest: void update(java.nio.ByteBuffer)>,<java.security.MessageDigest: void update(byte)>
- - yes MessageDigest org.xerial.snappy.SnappyLoader.md5sum(Ljava/io/InputStream;)Ljava/lang/String; r17 = staticinvoke <java.security.MessageDigest: java.security.MessageDigest getInstance(java.lang.String)>(varReplacer166) First parameter (with value "MD5") should be any of {SHA-256, SHA-384, SHA-512}
1.0.4 no       yes MessageDigest org.xerial.snappy.SnappyLoader.md5sum(Ljava/io/InputStream;)Ljava/lang/String; $r9 = virtualinvoke r17.<java.security.MessageDigest: byte[] digest()>() Unexpected call to method <java.security.MessageDigest: byte[] digest()> on object of type java.security.MessageDigest. Expect a call to one of the following methods <java.security.MessageDigest: void update(byte[])>,<java.security.MessageDigest: void update(byte[],int,int)>,<java.security.MessageDigest: byte[] digest(byte[])>,<java.security.MessageDigest: void update(java.nio.ByteBuffer)>,<java.security.MessageDigest: void update(byte)>
- - yes MessageDigest org.xerial.snappy.SnappyLoader.md5sum(Ljava/io/InputStream;)Ljava/lang/String; r17 = staticinvoke <java.security.MessageDigest: java.security.MessageDigest getInstance(java.lang.String)>(varReplacer166) First parameter (with value "MD5") should be any of {SHA-256, SHA-384, SHA-512}
1.0.4.1 no       yes MessageDigest org.xerial.snappy.SnappyLoader.md5sum(Ljava/io/InputStream;)Ljava/lang/String; $r9 = virtualinvoke r17.<java.security.MessageDigest: byte[] digest()>() Unexpected call to method <java.security.MessageDigest: byte[] digest()> on object of type java.security.MessageDigest. Expect a call to one of the following methods <java.security.MessageDigest: void update(byte[])>,<java.security.MessageDigest: void update(byte[],int,int)>,<java.security.MessageDigest: byte[] digest(byte[])>,<java.security.MessageDigest: void update(java.nio.ByteBuffer)>,<java.security.MessageDigest: void update(byte)>
- - yes MessageDigest org.xerial.snappy.SnappyLoader.md5sum(Ljava/io/InputStream;)Ljava/lang/String; r17 = staticinvoke <java.security.MessageDigest: java.security.MessageDigest getInstance(java.lang.String)>(varReplacer170) First parameter (with value "MD5") should be any of {SHA-256, SHA-384, SHA-512}
1.0.5 no       yes MessageDigest org.xerial.snappy.SnappyLoader.md5sum(Ljava/io/InputStream;)Ljava/lang/String; $r9 = virtualinvoke r17.<java.security.MessageDigest: byte[] digest()>() Unexpected call to method <java.security.MessageDigest: byte[] digest()> on object of type java.security.MessageDigest. Expect a call to one of the following methods <java.security.MessageDigest: void update(byte[])>,<java.security.MessageDigest: void update(byte[],int,int)>,<java.security.MessageDigest: byte[] digest(byte[])>,<java.security.MessageDigest: void update(java.nio.ByteBuffer)>,<java.security.MessageDigest: void update(byte)>
- - yes MessageDigest org.xerial.snappy.SnappyLoader.md5sum(Ljava/io/InputStream;)Ljava/lang/String; r17 = staticinvoke <java.security.MessageDigest: java.security.MessageDigest getInstance(java.lang.String)>(varReplacer185) First parameter (with value "MD5") should be any of {SHA-256, SHA-384, SHA-512}
1.0.5.1 no       yes MessageDigest org.xerial.snappy.SnappyLoader.md5sum(Ljava/io/InputStream;)Ljava/lang/String; $r9 = virtualinvoke r17.<java.security.MessageDigest: byte[] digest()>() Unexpected call to method <java.security.MessageDigest: byte[] digest()> on object of type java.security.MessageDigest. Expect a call to one of the following methods <java.security.MessageDigest: void update(byte[])>,<java.security.MessageDigest: void update(byte[],int,int)>,<java.security.MessageDigest: byte[] digest(byte[])>,<java.security.MessageDigest: void update(java.nio.ByteBuffer)>,<java.security.MessageDigest: void update(byte)>
- - yes MessageDigest org.xerial.snappy.SnappyLoader.md5sum(Ljava/io/InputStream;)Ljava/lang/String; r17 = staticinvoke <java.security.MessageDigest: java.security.MessageDigest getInstance(java.lang.String)>(varReplacer186) First parameter (with value "MD5") should be any of {SHA-256, SHA-384, SHA-512}
1.0.5.2 no       yes MessageDigest org.xerial.snappy.SnappyLoader.md5sum(Ljava/io/InputStream;)Ljava/lang/String; $r9 = virtualinvoke r17.<java.security.MessageDigest: byte[] digest()>() Unexpected call to method <java.security.MessageDigest: byte[] digest()> on object of type java.security.MessageDigest. Expect a call to one of the following methods <java.security.MessageDigest: void update(byte[])>,<java.security.MessageDigest: void update(byte[],int,int)>,<java.security.MessageDigest: byte[] digest(byte[])>,<java.security.MessageDigest: void update(java.nio.ByteBuffer)>,<java.security.MessageDigest: void update(byte)>
- - yes MessageDigest org.xerial.snappy.SnappyLoader.md5sum(Ljava/io/InputStream;)Ljava/lang/String; r17 = staticinvoke <java.security.MessageDigest: java.security.MessageDigest getInstance(java.lang.String)>(varReplacer261) First parameter (with value "MD5") should be any of {SHA-256, SHA-384, SHA-512}
1.0.5.3 no       yes MessageDigest org.xerial.snappy.SnappyLoader.md5sum(Ljava/io/InputStream;)Ljava/lang/String; $r9 = virtualinvoke r17.<java.security.MessageDigest: byte[] digest()>() Unexpected call to method <java.security.MessageDigest: byte[] digest()> on object of type java.security.MessageDigest. Expect a call to one of the following methods <java.security.MessageDigest: void update(byte[])>,<java.security.MessageDigest: void update(byte[],int,int)>,<java.security.MessageDigest: byte[] digest(byte[])>,<java.security.MessageDigest: void update(java.nio.ByteBuffer)>,<java.security.MessageDigest: void update(byte)>
- - yes MessageDigest org.xerial.snappy.SnappyLoader.md5sum(Ljava/io/InputStream;)Ljava/lang/String; r17 = staticinvoke <java.security.MessageDigest: java.security.MessageDigest getInstance(java.lang.String)>(varReplacer185) First parameter (with value "MD5") should be any of {SHA-256, SHA-384, SHA-512}
1.0.5.4 no       yes MessageDigest org.xerial.snappy.SnappyLoader.md5sum(Ljava/io/InputStream;)Ljava/lang/String; $r9 = virtualinvoke r17.<java.security.MessageDigest: byte[] digest()>() Unexpected call to method <java.security.MessageDigest: byte[] digest()> on object of type java.security.MessageDigest. Expect a call to one of the following methods <java.security.MessageDigest: void update(byte[])>,<java.security.MessageDigest: void update(byte[],int,int)>,<java.security.MessageDigest: byte[] digest(byte[])>,<java.security.MessageDigest: void update(java.nio.ByteBuffer)>,<java.security.MessageDigest: void update(byte)>
- - yes MessageDigest org.xerial.snappy.SnappyLoader.md5sum(Ljava/io/InputStream;)Ljava/lang/String; r17 = staticinvoke <java.security.MessageDigest: java.security.MessageDigest getInstance(java.lang.String)>(varReplacer185) First parameter (with value "MD5") should be any of {SHA-256, SHA-384, SHA-512}
1.1.0 no       no
1.1.0.1 no       no
1.1.1 no       no
1.1.1.1 no       no
1.1.1.2 no       no
1.1.1.3 no       no
1.1.1.4 no       no
1.1.1.5 no       no
1.1.1.6 no       no
1.1.1.7 no       no
1.1.2 no       no
1.1.2.1 no       no
1.1.2.2 no       no
1.1.2.3 no       no
1.1.2.4 no       no
1.1.2.5 no       no
1.1.2.6 no       no
1.1.4 no       no
1.1.7 no       no
1.1.7.1 no       no
1.1.7.2 no       no