thepalbi / soot-dataflow-analysis Goto Github PK

检测到 thepalbi/soot-dataflow-analysis 一共引入了78个开源组件，存在32个漏洞

漏洞标题：SnakeYAML 安全漏洞
缺陷组件：org.yaml:[email protected]
漏洞编号：CVE-2017-18640
漏洞描述：SnakeYAML是一款基于Java的YAML解析器。
SnakeYAML 1.18版本中的Alias功能存在安全漏洞。攻击者可利用该漏洞造成拒绝服务。
国家漏洞库信息：https://www.cnvd.org.cn/flaw/show/CNVD-2020-22682
影响范围：(∞, 1.26)
最小修复版本：1.26
缺陷组件引入路径：app:[email protected]>org.yaml:[email protected]

另外还有32个漏洞，详细报告：https://mofeisec.com/jr?p=i155c9

Hello! I am very interested in this project. I cloned the project to my local, but when running the command $mvn clean install, I encountered some problems in building this project, so I really hope to get your help.

My operating environment is：
(1)linux:
Ubuntu18
(2)java:
java version "1.8.0_261"
Java(TM) SE Runtime Environment (build 1.8.0_261-b12)
Java HotSpot(TM) 64-Bit Server VM (build 25.261-b12, mixed mode)
(3)mvn:
Apache Maven 3.8.3 (ff8e977a158738155dc465c6a97ffaf31982d739)
Maven home: /usr/local/apache-maven-3.8.3
Java version: 1.8.0_261, vendor: Oracle Corporation, runtime: /opt/jdk1.8.0_261/jre
Default locale: zh_CN, platform encoding: UTF-8
OS name: "linux", version: "5.4.0-89-generic", arch: "amd64", family: "unix"

The problems I encountered are described below:
(1)The first time i run the command, prompted with a path error
Error: The path '/Users/thepalbi/Facultad/aap/souffle-points-to-analysis/ModuleUnderTest/target/classes' does not exist.

So I changed the path to the location of the project was cloned in the file of ~/souffle-points-to-analysis/src/test/java/wtf/thepalbi/PointsToAnalysisTests.java(:39)

(2)The second time i run the command, prompted with a ‘File or directory not found’error.

(3)I guess it's a lack of files like PointToAnalysis.java, I copied PointToAnalysis.java to PointsToAnalysisTests.java directory，but it didn't solve the error.

So I want to know what files or directories are missing, and What caused this error?

I sincerely hope to get your reply as soon as possible. Thanks!!!