Review

Detector:	MuDetectXP
Target:	project ' saavn ' version e576758
Misuse:	misuse ' 2 '
Tags:

Misuse Details

Details about the known misuse from the MUBench dataset.

Description:	Uses static key.
Fix Description:
Violation Types:	missing/condition/value_or_state
In File:	SaavnFileRunner.java
In Method:	decryptPlay(String)
Code with Misuse:	`class SaavnFileRunner { private String decryptPlay(final String str) throws Exception { final Cipher cipher = Cipher.getInstance("DES/ECB/PKCS5Padding"); cipher.init(Cipher.DECRYPT_MODE, new SecretKeySpec(SECRET_KEY, "DES")); return new String(cipher.doFinal(Base64.decodeBase64(str)), "UTF-8"); } }`

Potential Hits

Findings of the detector that identify an anomaly in the same file and method as the known misuse.

Hit	Rank	Confidence	Confidence String	Pattern Examples	Pattern Support	Pattern Violation	Target Environment Mapping
?	0	0.7954545454545455	(pattern support = 5 / 6)(pattern violations = 1 / 1)(overlap = 21.00 / 22.00)	_examples/Commortel/ProjetCryptographie/latest/checkout/ProjetCryptographie/src/tools/CryptoTools.java#decrypt3DES(byte[], String) _examples/Commortel/ProjetCryptographie/latest/checkout/ProjetCryptographie/src/tools/CryptoTools.java#encrypt3DES(byte[], String) _examples/Sankore/Editeur_Sankore---LENUOS-/latest/checkout/sources/lenuos/editor/src/com/paraschool/editor/server/URLPublicationNotifier.java#encrypt(String) _examples/freewind/webtend/latest/checkout/webtend/webtend/utils/Crypto.java#decryptAES(String, String) _examples/luiskcs89/thesiskunagi/latest/checkout/ilarkesto/src/main/java/ilarkesto/base/Crypt.java#decrypt(byte[], byte[])	5