Review

Detector:

MuDetectOPAL_180320

Target:

project '

jmrtd

' version

51

Tags:

Potential Misuse

Anomaly identified by the detector. Please review whether this anomaly corresponds to a misuse.

Finding:	finding-0
In File:	/mubench/checkouts/jmrtd/51/build/src//sos/mrtd/PassportApduService.java
In Method:	createSelectFileAPDU(short)
Code with Finding:	`class PassportApduService { Apdu createSelectFileAPDU(short fid) { byte[] fiddle = { (byte) ((fid >> 8) & 0x000000FF), (byte) (fid & 0x000000FF) }; return createSelectFileAPDU(fiddle); } }`

Metadata

Hit	Rank	Confidence	Confidence String	Pattern Examples	Pattern Support	Pattern Violation	Target Environment Mapping	Violation Types
?	0	0.04824561403508772	(pattern support = 16 / 19)(pattern violations = 1 / 16)(overlap = 11.00 / 12.00)	jmrtd/51/build/src//sos/mrtd/PassportApduService.java#<clinit>() jmrtd/51/build/src//sos/util/Hex.java#bytesToSpacedHexStrings(byte[], int, int) jmrtd/51/build/src//sos/mrtd/Util.java#deriveKey(byte[], int) jmrtd/51/build/src//sos/mrtd/PassportService.java#readName() jmrtd/51/build/src//sos/mrtd/PassportApduService.java#createCreateFileAPDU(byte[], byte[])	16