Review

Detector:	MuDetectXPOn
Target:	project ' alibaba-druid ' version e10f28
Misuse:	misuse ' 1 '
Tags:

Misuse Details

Details about the known misuse from the MUBench dataset.

Description:	An instance of Cipher is used twice (the init() method is called again), which is an invalid operation.
Fix Description:	creates a new instance of Cipher before the second init(). (see diff)
Violation Types:	missing/call
In File:	com/alibaba/druid/filter/config/ConfigTools.java
In Method:	decrypt(PublicKey, String)
Code with Misuse:	class ConfigTools { public static String decrypt(PublicKey publicKey, String cipherText) throws Exception { Cipher cipher = Cipher.getInstance("RSA"); try { cipher.init(Cipher.DECRYPT_MODE, publicKey); } catch (InvalidKeyException e) { // for ibm jdk RSAPublicKey rsaPublicKey = (RSAPublicKey) publicKey; RSAPrivateKeySpec spec = new RSAPrivateKeySpec(rsaPublicKey.getModulus(), rsaPublicKey.getPublicExponent()); Key fakePublicKey = KeyFactory.getInstance("RSA").generatePrivate(spec); cipher.init(Cipher.DECRYPT_MODE, fakePublicKey); } if (cipherText == null \|\| cipherText.length() == 0) { return cipherText; } byte[] cipherBytes = Base64.base64ToByteArray(cipherText); byte[] plainBytes = cipher.doFinal(cipherBytes); return new String(plainBytes); } }

Potential Hits

Findings of the detector that identify an anomaly in the same file and method as the known misuse.

Hit	Rank	Confidence	Confidence String	Pattern Examples	Pattern Support	Pattern Violation	Target Environment Mapping
?	0	0.261437908497	(pattern support = 5 / 6)(pattern violations = 1 / 3)(overlap = 16.00 / 17.00)	_examples/xiedantibu/chinimei/latest/checkout/src/com/xlm/meishichina/util/CyptoUtils.java#encode(String, String);_examples/xiedantibu/chinimei/latest/checkout/src/com/xlm/meishichina/util/CyptoUtils.java#decode(String, String);_examples/Sankore/Editeur_Sankore---LENUOS-/latest/checkout/sources/lenuos/editor/src/com/paraschool/editor/server/URLPublicationNotifier.java#encrypt(String);_examples/headsupdev/license/latest/checkout/src/main/java/org/headsupdev/license/LicenseEncoder.java#encode(byte[]);_examples/dlitvinov/FastEMFStore.core/latest/checkout/org.eclipse.emf.emfstore.client/src/org/eclipse/emf/emfstore/client/model/connectionmanager/KeyStoreManager.java#encrypt(String, ServerInfo)	5
?	1	0.261437908497	(pattern support = 5 / 6)(pattern violations = 1 / 3)(overlap = 16.00 / 17.00)	_examples/xiedantibu/chinimei/latest/checkout/src/com/xlm/meishichina/util/CyptoUtils.java#encode(String, String);_examples/xiedantibu/chinimei/latest/checkout/src/com/xlm/meishichina/util/CyptoUtils.java#decode(String, String);_examples/CloudSide/VdiskSDK-Android/latest/checkout/VDiskSdk/src/com/vdisk/utils/DesEncrypt.java#getEncCode(byte[]);_examples/Sankore/Editeur_Sankore---LENUOS-/latest/checkout/sources/lenuos/editor/src/com/paraschool/editor/server/URLPublicationNotifier.java#encrypt(String);_examples/dlitvinov/FastEMFStore.core/latest/checkout/org.eclipse.emf.emfstore.client/src/org/eclipse/emf/emfstore/client/model/connectionmanager/KeyStoreManager.java#encrypt(String, ServerInfo)	5