Review

Detector:	MuDetectOPAL_180330
Target:	project ' itext ' version 5091
Misuse:	misuse ' jadet-9 '
Tags:

Misuse Details

Details about the known misuse from the MUBench dataset.

Description:	PdfArray.getPdfObject() is invoked without checking that the array contains sufficiently many objects. Is also jadet-10.
Fix Description:
Violation Types:	missing/condition/value_or_state
In File:	com/itextpdf/text/pdf/fonts/cmaps/AbstractCMap.java
In Method:	addRange(PdfString, PdfString, PdfObject)
Code with Misuse:	class AbstractCMap { void addRange(PdfString from, PdfString to, PdfObject code) { byte[] a1 = decodeStringToByte(from); byte[] a2 = decodeStringToByte(to); if (a1.length != a2.length \|\| a1.length == 0) throw new IllegalArgumentException("Invalid map."); byte[] sout = null; if (code instanceof PdfString) sout = decodeStringToByte((PdfString)code); int start = a1[a1.length - 1] & 0xff; int end = a2[a2.length - 1] & 0xff; for (int k = start; k <= end; ++k) { a1[a1.length - 1] = (byte)k; PdfString s = new PdfString(a1); s.setHexWriting(true); if (code instanceof PdfArray) { addChar(s, ((PdfArray)code).getPdfObject(k - start)); } else if (code instanceof PdfNumber) { int nn = ((PdfNumber)code).intValue() + k - start; addChar(s, new PdfNumber(nn)); } else if (code instanceof PdfString) { PdfString s1 = new PdfString(sout); s1.setHexWriting(true); ++sout[sout.length - 1]; addChar(s, s1); } } } }

Potential Hits

Findings of the detector that identify an anomaly in the same file and method as the known misuse.

Hit	Rank	Confidence	Confidence String	Pattern Examples	Pattern Support	Pattern Violation	Target Environment Mapping
?	2944	0.0010714285714285715	(pattern support = 11 / 35)(pattern violations = 1 / 220)(overlap = 9.00 / 12.00)	itext/5091/build/src/main/java//com/itextpdf/text/pdf/PdfEncryption.java#computeUserPassword(byte[]) itext/5091/build/src/main/java//com/itextpdf/text/pdf/PdfEncryption.java#setupByOwnerPad(byte[], byte[], byte[], byte[], int) itext/5091/build/src/main/java//com/itextpdf/text/pdf/PdfEncryption.java#setupUserKey() itext/5091/build/src/main/java//com/itextpdf/text/pdf/PdfEncryption.java#setupByUserPad(byte[], byte[], byte[], int) itext/5091/build/src/main/java//com/itextpdf/text/pdf/PdfEncryption.java#computeOwnerKey(byte[], byte[])	11
?	2945	0.0010714285714285715	(pattern support = 11 / 35)(pattern violations = 1 / 220)(overlap = 9.00 / 12.00)	itext/5091/build/src/main/java//com/itextpdf/text/pdf/PdfEncryption.java#computeUserPassword(byte[]) itext/5091/build/src/main/java//com/itextpdf/text/pdf/PdfEncryption.java#setupByOwnerPad(byte[], byte[], byte[], byte[], int) itext/5091/build/src/main/java//com/itextpdf/text/pdf/PdfEncryption.java#setupUserKey() itext/5091/build/src/main/java//com/itextpdf/text/pdf/PdfEncryption.java#setupByUserPad(byte[], byte[], byte[], int) itext/5091/build/src/main/java//com/itextpdf/text/pdf/PdfEncryption.java#computeOwnerKey(byte[], byte[])	11
?	5586	0.000482897384305835	(pattern support = 12 / 35)(pattern violations = 1 / 355)(overlap = 5.00 / 10.00)	itext/5091/build/src/main/java//com/itextpdf/text/pdf/AcroFields.java#getFieldPositions(String) itext/5091/build/src/main/java//com/itextpdf/text/pdf/AcroFields.java#getAppearance(PdfDictionary, String[], String) itext/5091/build/src/main/java//com/itextpdf/text/pdf/PdfReader.java#getNormalizedRectangle(PdfArray)	12
?	9107	0.00018792047205622576	(pattern support = 10 / 35)(pattern violations = 1 / 362)(overlap = 5.00 / 21.00)	itext/5091/build/src/main/java//com/itextpdf/text/pdf/PdfFormField.java#createTextField(PdfWriter, boolean, boolean, int) itext/5091/build/src/main/java//com/itextpdf/text/pdf/PdfFormField.java#createList(PdfWriter, String[], int) itext/5091/build/src/main/java//com/itextpdf/text/pdf/PdfFormField.java#createCombo(PdfWriter, boolean, String[], int) itext/5091/build/src/main/java//com/itextpdf/text/pdf/PdfFormField.java#createChoice(PdfWriter, int, PdfArray, int)	10
?	10373	0.00005435964340073929	(pattern support = 15 / 35)(pattern violations = 1 / 5256)(overlap = 12.00 / 18.00)	itext/5091/build/src/main/java//com/itextpdf/text/pdf/FdfWriter.java#<clinit>() itext/5091/build/src/main/java//com/itextpdf/text/pdf/PdfIndirectObject.java#<clinit>() itext/5091/build/src/main/java//com/itextpdf/text/DocWriter.java#getISOBytes(String) itext/5091/build/src/main/java//com/itextpdf/text/pdf/codec/PngWriter.java#<clinit>() itext/5091/build/src/main/java//com/itextpdf/text/pdf/ByteBuffer.java#append(String)	15
?	10850	0.00004545652050389889	(pattern support = 17 / 35)(pattern violations = 1 / 1583)(overlap = 8.00 / 54.00)	itext/5091/build/src/main/java//com/itextpdf/text/pdf/PdfName.java#<init>(String, boolean) itext/5091/build/src/main/java//com/itextpdf/text/pdf/IntHashtable.java#<init>(int, float) itext/5091/build/src/main/java//com/itextpdf/text/pdf/PdfShading.java#setBBox(float[]) itext/5091/build/src/main/java//com/itextpdf/text/pdf/codec/TIFFDirectory.java#<init>(RandomAccessFileOrArray, int) itext/5091/build/src/main/java//com/itextpdf/text/pdf/codec/TIFFDirectory.java#<init>(RandomAccessFileOrArray, long, int)	17	The graph contained more than 40 nodes (50) and is likely unreadable. Skipping generation.