crawl

Feb 23, 2022

Changes in this version

+ const CVE202144228

+ const CVE202144832

+ const CVE202145046

+ const CVE202145105

+ type CVEID string

+ type CVEResolver struct

+ IgnoreCVES []CVEID

+ func (r CVEResolver) CVEs(vs []Log4jVersion) []string

type Log4jVersion

+ Original string

+ func ParseLog4jVersions(versions Versions) ([]Log4jVersion, bool)

+ func (v Log4jVersion) Vulnerable() bool

type Reporter

+ CVEResolver CVEResolver

type Versions

+ func (vs Versions) SortedList() []string

Feb 4, 2022

Changes in this version

+ func AllFindingsSatisfiedBy(a, b Finding) bool

+ func SupportedVulnerableFindingValues() []string

type Finding

+ func FindingOf(v string) (Finding, error)

type Log4jIdentifier

+ Logger log.Logger

type Path

+ func (n Path) String() string

Jan 25, 2022

Changes in this version

+ func FileNameMatchesLog4jJar(filename string) (string, bool)

type Crawler

+ DirectoryEntriesPerListCall int

+ type HandleFindingFunc func(ctx context.Context, path Path, result Finding, version Versions)

type JavaCVEInstance

+ DetailedPath string

type Log4jIdentifier

+ HandleFinding HandleFindingFunc

+ type Path []string

+ func (n Path) Joined() string

type Reporter

+ func (r *Reporter) Report(ctx context.Context, path Path, result Finding, versionSet Versions)

+ func (r Reporter) FileCount() int64

+ func (r Reporter) FindingCount() int64

Jan 19, 2022

Changes in this version

type Log4jIdentifier

+ EnableTraceLogging bool

Jan 11, 2022

Changes in this version

type Stats

+ PathSkippedCount uint64

Jan 6, 2022

Changes in this version

type Reporter

+ DisableFlaggingUnknownVersions bool

+ OutputFilePathOnly bool

Jan 5, 2022

Changes in this version

+ var Log4jVersionRegex = regexp.MustCompile(`(?i)^(\d+)\.(\d+)\.?(\d+)?(?:[\./-].*)?$`)

+ func ParseLog4jVersion(version string) (int, int, int, bool)

+ type AffectedVersion struct

+ CVE string

+ FixedAfter Log4jVersion

+ PatchedVersions []Log4jVersion

type JavaCVEInstance

+ CVEsDetected []string

+ type Log4jVersion struct

+ Major int

+ Minor int

+ Patch int

type Reporter

+ DisableCVE44832 bool

Dec 21, 2021

Changes in this version

+ func BytecodeMatchesPartialSignatures(methodBytecodes [][]byte) (string, bool)

type Crawler

+ Limiter ratelimit.Limiter

type Finding

+ const ClassBytecodePartialMatch

+ const JarFileObfuscated

+ const JndiLookupClassName

+ const JndiLookupClassPackageAndName

+ const JndiManagerClassName

+ const JndiManagerClassPackageAndName

+ func LookForHashMatch(contents io.Reader, size int64) (Finding, string, bool)

type JavaCVEInstance

+ Findings []string

+ type Log4jIdentifier struct

+ ArchiveMaxDepth uint

+ ArchiveMaxSize uint

+ ArchiveWalkTimeout time.Duration

+ ArchiveWalkers func(archive.FormatType) (archive.WalkerProvider, bool)

+ DetailedOutputWriter io.Writer

+ ErrorWriter io.Writer

+ IdentifyObfuscation bool

+ Limiter ratelimit.Limiter

+ ObfuscatedClassNameAverageLength float32

+ ObfuscatedPackageNameAverageLength float32

+ OpenFile func(string) (*os.File, error)

+ ParseArchiveFormat func(string) (archive.FormatType, bool)

+ func (i *Log4jIdentifier) Identify(ctx context.Context, path string, d fs.DirEntry) (result Finding, versions Versions, err error)

type Reporter

+ DisableFlaggingJndiLookup bool

Dec 19, 2021

Changes in this version

type Crawler

+ ErrorWriter io.Writer

+ type JavaCVEInstance struct

+ ByteCodeInstructionMD5Matched bool

+ ClassFileMD5Matched bool

+ ClassNameMatched bool

+ ClassPackageAndNameMatch bool

+ FilePath string

+ JarNameInsideArchiveMatched bool

+ JarNameMatched bool

+ Log4JVersions []string

+ Message string

type Reporter

+ DisableCVE45105 bool

+ OutputJSON bool

+ OutputWriter io.Writer

+ type Stats struct

+ FilesScanned int64

+ PathErrorCount int64

+ PermissionDeniedCount int64

Dec 18, 2021

Changes in this version

+ const ClassBytecodeInstructionMd5

Dec 18, 2021

Changes in this version

type Reporter

+ DisableCve45105 bool

Dec 18, 2021

Changes in this version

+ const ClassFileMd5

type Finding

+ func (f Finding) String() string

+ type Versions map[string]struct

Dec 17, 2021

Changes in this version

+ const ClassName

+ const ClassPackageAndName

+ const JarName

+ const JarNameInsideArchive

+ const NothingDetected

+ const UnknownVersion

+ type ArchiveFileLister func(ctx context.Context, path string) ([]string, error)

+ type Crawler struct

+ IgnoreDirs []*regexp.Regexp

+ func (c Crawler) Crawl(ctx context.Context, root string, match MatchFunc, process ProcessFunc) error

+ type Finding int

+ type Identifier interface

+ Identify func(ctx context.Context, path string, d fs.DirEntry) (Finding, string, error)

+ func NewIdentifier(archiveListTimeout time.Duration, zipLister, tgzLister ArchiveFileLister) Identifier

+ type MatchFunc func(ctx context.Context, path string, d fs.DirEntry) (Finding, string, error)

+ type ProcessFunc func(ctx context.Context, path string, d fs.DirEntry, result Finding, ...)

+ type Reporter struct

+ func (r *Reporter) Collect(ctx context.Context, path string, d fs.DirEntry, result Finding, ...)

+ func (r Reporter) Count() int64