Review

Detector:

MuDetectOPAL_180330

Target:

project '

jmrtd

' version

51

Tags:

Potential Misuse

Anomaly identified by the detector. Please review whether this anomaly corresponds to a misuse.

Finding:	finding-9
In File:	/mubench/checkouts/jmrtd/51/build/src//sos/mrtd/sample/AAPanel.java
In Method:	performedAA(AAEvent)
Code with Finding:	`class AAPanel { public void performedAA(AAEvent ae) { area.append("pubkey = " + ae.getPubkey()); area.append("m1 = " + Hex.bytesToHexString(ae.getM1())); area.append("m2 = " + Hex.bytesToHexString(ae.getM2())); } }`

Metadata

Hit	Rank	Confidence	Confidence String	Pattern Examples	Pattern Support	Pattern Violation	Target Environment Mapping	Violation Types
?	9	0.037333333333333336	(pattern support = 23 / 23)(pattern violations = 1 / 25)(overlap = 14.00 / 15.00)	jmrtd/51/build/src//sos/mrtd/sample/AAPanel.java#performedAA(AAEvent) jmrtd/51/build/src//sos/util/Hex.java#bytesToSpacedHexString(byte[]) jmrtd/51/build/src//sos/util/Hex.java#bytesToHexString(byte[], int, int) jmrtd/51/build/src//sos/mrtd/SecureMessagingWrapper.java#readDO87(DataInputStream) jmrtd/51/build/src//sos/smartcards/JCOPEmulatorService.java#sendAPDU(Apdu)	23