Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

SEVERE: Region [POM] Problem loading keys for file POM #2166

Closed
MMirabito opened this issue Aug 25, 2019 · 4 comments
Closed

SEVERE: Region [POM] Problem loading keys for file POM #2166

MMirabito opened this issue Aug 25, 2019 · 4 comments
Labels
bug
Milestone
5.3.2

Comments

@MMirabito
Copy link

Dear all,

We just noticed that ant-dependency-check CVE 5.2.1 is throwing an exception.

I tried searching but I was not able to land on a possible solution. So I am wondering if this is an issue that is only affecting me or if other have encountered it as well. Below is the exception.

I am running Ant 1.10.6 and the output below is directly from the command line on my machine. The dependency check finishes and and outputs an analysis but it's not clear to me if we can safely ignore the exception or what I might be doing wrong on my side.

Thanks in advance for any guidance,
max

dependency-check] SEVERE: Region [POM] Problem loading keys for file POM

dependency-check-cve:
[dependency-check] SLF4J: Class path contains multiple SLF4J bindings.
[dependency-check] SLF4J: Found binding in [jar:file:/D:/MyPrograms/dependency-check-ant/dependency-check-ant.jar!/org/slf4j/impl/StaticLoggerBinder.class]
[dependency-check] SLF4J: Found binding in [jar:file:/D:/MyPrograms/dependency-check-ant/lib/dependency-check-ant-5.2.1.jar!/org/slf4j/impl/StaticLoggerBinder.class]
[dependency-check] SLF4J: See http://www.slf4j.org/codes.html#multiple_bindings for an explanation.
[dependency-check] SLF4J: Actual binding is of type [org.owasp.dependencycheck.ant.logging.AntLoggerFactory]
[dependency-check] Aug 25, 2019 10:31:04 AM org.apache.commons.jcs.engine.control.CompositeCacheManager getUnconfiguredInstance
[dependency-check] INFO: Instance is null, returning unconfigured instance
[dependency-check] Aug 25, 2019 10:31:04 AM org.apache.commons.jcs.utils.threadpool.ThreadPoolManager loadConfig
[dependency-check] INFO: thread_pool.default PoolConfiguration = useBoundary = [false] boundarySize = [2000] maximumPoolSize = [150] minimumPoolSize = [4] keepAliveTime = [300000] whenBlockedPolicy = [RUN] startUpSize = [4]
[dependency-check] Aug 25, 2019 10:31:04 AM org.apache.commons.jcs.engine.control.CompositeCacheManager doConfigure
[dependency-check] INFO: Setting default auxiliaries to ODC
[dependency-check] Aug 25, 2019 10:31:04 AM org.apache.commons.jcs.engine.control.CompositeCacheManager doConfigure
[dependency-check] INFO: setting defaultCompositeCacheAttributes to [ useLateral = true, useRemote = true, useDisk = true, maxObjs = 0, maxSpoolPerRun = -1, diskUsagePattern = UPDATE, spoolChunkSize = 2 ]
[dependency-check] Aug 25, 2019 10:31:04 AM org.apache.commons.jcs.engine.control.CompositeCacheManager doConfigure
[dependency-check] INFO: setting defaultElementAttributes to [ IS_LATERAL = false, IS_SPOOL = true, IS_REMOTE = false, IS_ETERNAL = false, MaxLifeSeconds = 86400, IdleTime = 1800, CreateTime = 1566743464277, LastAccessTime = 1566743464277, getTimeToLiveSeconds() = 86399, createTime = 1566743464277 ]
[dependency-check] Aug 25, 2019 10:31:04 AM org.apache.commons.jcs.engine.memory.AbstractDoubleLinkedListMemoryCache initialize
[dependency-check] INFO: initialized MemoryCache for POM
[dependency-check] Aug 25, 2019 10:31:04 AM org.apache.commons.jcs.engine.control.CompositeCache <init>
[dependency-check] INFO: Constructed cache with name [POM] and cache attributes [ useLateral = true, useRemote = true, useDisk = true, maxObjs = 0, maxSpoolPerRun = -1, diskUsagePattern = UPDATE, spoolChunkSize = 2 ]
[dependency-check] Aug 25, 2019 10:31:04 AM org.apache.commons.jcs.auxiliary.AuxiliaryCacheConfigurator parseCacheEventLogger
[dependency-check] INFO: No cache event logger defined for auxiliary [jcs.auxiliary.ODC]
[dependency-check] Aug 25, 2019 10:31:04 AM org.apache.commons.jcs.auxiliary.AuxiliaryCacheConfigurator parseElementSerializer
[dependency-check] INFO: Using standard serializer [org.apache.commons.jcs.utils.serialization.StandardSerializer@6d387e9b] for auxiliary [jcs.auxiliary.ODC]
[dependency-check] Aug 25, 2019 10:31:04 AM org.apache.commons.jcs.utils.threadpool.ThreadPoolManager loadConfig
[dependency-check] INFO: thread_pool.disk_cache_event_queue PoolConfiguration = useBoundary = [false] boundarySize = [2000] maximumPoolSize = [150] minimumPoolSize = [4] keepAliveTime = [300000] whenBlockedPolicy = [RUN] startUpSize = [4]
[dependency-check] Aug 25, 2019 10:31:04 AM org.apache.commons.jcs.auxiliary.disk.indexed.IndexedDiskCache initializeFileSystem
[dependency-check] INFO: Region [POM] Cache file root directory: D:\MyPrograms\dependency-check-ant\data\4.0\cache
[dependency-check] Aug 25, 2019 10:31:04 AM org.apache.commons.jcs.auxiliary.disk.indexed.IndexedDiskCache initializeKeyMap
[dependency-check] INFO: Region [POM] Set maxKeySize to: '1000000'
[dependency-check] Aug 25, 2019 10:31:04 AM org.apache.commons.jcs.auxiliary.disk.indexed.IndexedDiskCache loadKeys
[dependency-check] SEVERE: Region [POM] Problem loading keys for file POM
[dependency-check] java.lang.ClassNotFoundException: org.apache.commons.jcs.auxiliary.disk.indexed.IndexedDiskElementDescriptor
[dependency-check]      at java.net.URLClassLoader.findClass(URLClassLoader.java:382)
[dependency-check]      at java.lang.ClassLoader.loadClass(ClassLoader.java:424)
[dependency-check]      at java.lang.ClassLoader.loadClass(ClassLoader.java:357)
[dependency-check]      at java.lang.Class.forName0(Native Method)
[dependency-check]      at java.lang.Class.forName(Class.java:348)
[dependency-check]      at org.apache.commons.jcs.io.ObjectInputStreamClassLoaderAware.resolveClass(ObjectInputStreamClassLoaderAware.java:37)
[dependency-check]      at java.io.ObjectInputStream.readNonProxyDesc(ObjectInputStream.java:1868)
[dependency-check]      at java.io.ObjectInputStream.readClassDesc(ObjectInputStream.java:1751)
[dependency-check]      at java.io.ObjectInputStream.readOrdinaryObject(ObjectInputStream.java:2042)
[dependency-check]      at java.io.ObjectInputStream.readObject0(ObjectInputStream.java:1573)
[dependency-check]      at java.io.ObjectInputStream.readObject(ObjectInputStream.java:431)
[dependency-check]      at java.util.HashMap.readObject(HashMap.java:1412)
[dependency-check]      at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
[dependency-check]      at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
[dependency-check]      at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
[dependency-check]      at java.lang.reflect.Method.invoke(Method.java:498)
[dependency-check]      at java.io.ObjectStreamClass.invokeReadObject(ObjectStreamClass.java:1170)
[dependency-check]      at java.io.ObjectInputStream.readSerialData(ObjectInputStream.java:2178)
[dependency-check]      at java.io.ObjectInputStream.readOrdinaryObject(ObjectInputStream.java:2069)
[dependency-check]      at java.io.ObjectInputStream.readObject0(ObjectInputStream.java:1573)
[dependency-check]      at java.io.ObjectInputStream.readObject(ObjectInputStream.java:431)
[dependency-check]      at org.apache.commons.jcs.utils.serialization.StandardSerializer.deSerialize(StandardSerializer.java:83)
[dependency-check]      at org.apache.commons.jcs.auxiliary.disk.indexed.IndexedDisk.readObject(IndexedDisk.java:118)
[dependency-check]      at org.apache.commons.jcs.auxiliary.disk.indexed.IndexedDiskCache.loadKeys(IndexedDiskCache.java:329)
[dependency-check]      at org.apache.commons.jcs.auxiliary.disk.indexed.IndexedDiskCache.initializeStoreFromPersistedData(IndexedDiskCache.java:285)
[dependency-check]      at org.apache.commons.jcs.auxiliary.disk.indexed.IndexedDiskCache.initializeKeysAndData(IndexedDiskCache.java:250)
[dependency-check]      at org.apache.commons.jcs.auxiliary.disk.indexed.IndexedDiskCache.<init>(IndexedDiskCache.java:183)
[dependency-check]      at org.apache.commons.jcs.auxiliary.disk.indexed.IndexedDiskCacheFactory.createCache(IndexedDiskCacheFactory.java:60)
[dependency-check]      at org.apache.commons.jcs.auxiliary.disk.indexed.IndexedDiskCacheFactory.createCache(IndexedDiskCacheFactory.java:33)
[dependency-check]      at org.apache.commons.jcs.engine.control.CompositeCacheConfigurator.parseAuxiliary(CompositeCacheConfigurator.java:506)
[dependency-check]      at org.apache.commons.jcs.engine.control.CompositeCacheConfigurator.parseRegion(CompositeCacheConfigurator.java:261)
[dependency-check]      at org.apache.commons.jcs.engine.control.CompositeCacheConfigurator.parseRegion(CompositeCacheConfigurator.java:161)
[dependency-check]      at org.apache.commons.jcs.engine.control.CompositeCacheConfigurator.parseRegions(CompositeCacheConfigurator.java:136)
[dependency-check]      at org.apache.commons.jcs.engine.control.CompositeCacheManager.doConfigure(CompositeCacheManager.java:490)
[dependency-check]      at org.apache.commons.jcs.engine.control.CompositeCacheManager.configure(CompositeCacheManager.java:441)
[dependency-check]      at org.apache.commons.jcs.engine.control.CompositeCacheManager.configure(CompositeCacheManager.java:391)
[dependency-check]      at org.apache.commons.jcs.engine.control.CompositeCacheManager.configure(CompositeCacheManager.java:373)
[dependency-check]      at org.apache.commons.jcs.JCS.getCacheManager(JCS.java:163)
[dependency-check]      at org.apache.commons.jcs.JCS.getInstance(JCS.java:205)
[dependency-check]      at org.owasp.dependencycheck.data.cache.DataCacheFactory.getPomCache(DataCacheFactory.java:139)
[dependency-check]      at org.owasp.dependencycheck.analyzer.CentralAnalyzer.initialize(CentralAnalyzer.java:122)
[dependency-check]      at org.owasp.dependencycheck.Engine.lambda$loadAnalyzers$1(Engine.java:291)
[dependency-check]      at java.util.ArrayList.forEach(ArrayList.java:1257)
[dependency-check]      at org.owasp.dependencycheck.Engine.loadAnalyzers(Engine.java:290)
[dependency-check]      at org.owasp.dependencycheck.Engine.initializeEngine(Engine.java:262)
[dependency-check]      at org.owasp.dependencycheck.Engine.<init>(Engine.java:251)
[dependency-check]      at org.owasp.dependencycheck.Engine.<init>(Engine.java:237)
[dependency-check]      at org.owasp.dependencycheck.taskdefs.Check.execute(Check.java:1530)
[dependency-check]      at org.apache.tools.ant.UnknownElement.execute(UnknownElement.java:292)
[dependency-check]      at sun.reflect.GeneratedMethodAccessor4.invoke(Unknown Source)
[dependency-check]      at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
[dependency-check]      at java.lang.reflect.Method.invoke(Method.java:498)
[dependency-check]      at org.apache.tools.ant.dispatch.DispatchUtils.execute(DispatchUtils.java:99)
[dependency-check]      at org.apache.tools.ant.Task.perform(Task.java:350)
[dependency-check]      at org.apache.tools.ant.Target.execute(Target.java:449)
[dependency-check]      at org.apache.tools.ant.Target.performTasks(Target.java:470)
[dependency-check]      at org.apache.tools.ant.Project.executeSortedTargets(Project.java:1391)
[dependency-check]      at org.apache.tools.ant.Project.executeTarget(Project.java:1364)
[dependency-check]      at org.apache.tools.ant.helper.DefaultExecutor.executeTargets(DefaultExecutor.java:41)
[dependency-check]      at org.apache.tools.ant.Project.executeTargets(Project.java:1254)
[dependency-check]      at org.apache.tools.ant.Main.runBuild(Main.java:830)
[dependency-check]      at org.apache.tools.ant.Main.startAnt(Main.java:223)
[dependency-check]      at org.apache.tools.ant.launch.Launcher.run(Launcher.java:284)
[dependency-check]      at org.apache.tools.ant.launch.Launcher.main(Launcher.java:101)
[dependency-check]
[dependency-check] Aug 25, 2019 10:31:04 AM org.apache.commons.jcs.auxiliary.disk.indexed.IndexedDiskCache <init>
[dependency-check] INFO: Region [POM] Indexed Disk Cache is alive.
[dependency-check] Aug 25, 2019 10:31:04 AM org.apache.commons.jcs.engine.memory.AbstractDoubleLinkedListMemoryCache initialize
[dependency-check] INFO: initialized MemoryCache for NODEAUDIT
[dependency-check] Aug 25, 2019 10:31:04 AM org.apache.commons.jcs.engine.control.CompositeCache <init>
[dependency-check] INFO: Constructed cache with name [NODEAUDIT] and cache attributes [ useLateral = true, useRemote = true, useDisk = true, maxObjs = 0, maxSpoolPerRun = -1, diskUsagePattern = UPDATE, spoolChunkSize = 2 ]
[dependency-check] Aug 25, 2019 10:31:04 AM org.apache.commons.jcs.auxiliary.AuxiliaryCacheConfigurator parseCacheEventLogger
[dependency-check] INFO: No cache event logger defined for auxiliary [jcs.auxiliary.ODC]
[dependency-check] Aug 25, 2019 10:31:04 AM org.apache.commons.jcs.auxiliary.AuxiliaryCacheConfigurator parseElementSerializer
[dependency-check] INFO: Using standard serializer [org.apache.commons.jcs.utils.serialization.StandardSerializer@3d8b9dee] for auxiliary [jcs.auxiliary.ODC]
[dependency-check] Aug 25, 2019 10:31:04 AM org.apache.commons.jcs.auxiliary.disk.indexed.IndexedDiskCache initializeFileSystem
[dependency-check] INFO: Region [NODEAUDIT] Cache file root directory: D:\MyPrograms\dependency-check-ant\data\4.0\cache
[dependency-check] Aug 25, 2019 10:31:04 AM org.apache.commons.jcs.auxiliary.disk.indexed.IndexedDiskCache initializeKeyMap
[dependency-check] INFO: Region [NODEAUDIT] Set maxKeySize to: '1000000'
[dependency-check] Aug 25, 2019 10:31:04 AM org.apache.commons.jcs.auxiliary.disk.indexed.IndexedDiskCache <init>
[dependency-check] INFO: Region [NODEAUDIT] Indexed Disk Cache is alive.
[dependency-check] Aug 25, 2019 10:31:04 AM org.apache.commons.jcs.engine.memory.AbstractDoubleLinkedListMemoryCache initialize
[dependency-check] INFO: initialized MemoryCache for CENTRAL
[dependency-check] Aug 25, 2019 10:31:04 AM org.apache.commons.jcs.engine.control.CompositeCache <init>
[dependency-check] INFO: Constructed cache with name [CENTRAL] and cache attributes [ useLateral = true, useRemote = true, useDisk = true, maxObjs = 0, maxSpoolPerRun = -1, diskUsagePattern = UPDATE, spoolChunkSize = 2 ]
[dependency-check] Aug 25, 2019 10:31:04 AM org.apache.commons.jcs.auxiliary.AuxiliaryCacheConfigurator parseCacheEventLogger
[dependency-check] INFO: No cache event logger defined for auxiliary [jcs.auxiliary.ODC]
[dependency-check] Aug 25, 2019 10:31:04 AM org.apache.commons.jcs.auxiliary.AuxiliaryCacheConfigurator parseElementSerializer
[dependency-check] INFO: Using standard serializer [org.apache.commons.jcs.utils.serialization.StandardSerializer@45cddfd3] for auxiliary [jcs.auxiliary.ODC]
[dependency-check] Aug 25, 2019 10:31:04 AM org.apache.commons.jcs.auxiliary.disk.indexed.IndexedDiskCache initializeFileSystem
[dependency-check] INFO: Region [CENTRAL] Cache file root directory: D:\MyPrograms\dependency-check-ant\data\4.0\cache
[dependency-check] Aug 25, 2019 10:31:04 AM org.apache.commons.jcs.auxiliary.disk.indexed.IndexedDiskCache initializeKeyMap
[dependency-check] INFO: Region [CENTRAL] Set maxKeySize to: '1000000'
[dependency-check] Aug 25, 2019 10:31:04 AM org.apache.commons.jcs.auxiliary.disk.indexed.IndexedDiskCache loadKeys
[dependency-check] SEVERE: Region [CENTRAL] Problem loading keys for file CENTRAL
[dependency-check] java.lang.ClassNotFoundException: org.apache.commons.jcs.auxiliary.disk.indexed.IndexedDiskElementDescriptor
[dependency-check]      at java.net.URLClassLoader.findClass(URLClassLoader.java:382)
[dependency-check]      at java.lang.ClassLoader.loadClass(ClassLoader.java:424)
[dependency-check]      at java.lang.ClassLoader.loadClass(ClassLoader.java:357)
[dependency-check]      at java.lang.Class.forName0(Native Method)
[dependency-check]      at java.lang.Class.forName(Class.java:348)
[dependency-check]      at org.apache.commons.jcs.io.ObjectInputStreamClassLoaderAware.resolveClass(ObjectInputStreamClassLoaderAware.java:37)
[dependency-check]      at java.io.ObjectInputStream.readNonProxyDesc(ObjectInputStream.java:1868)
[dependency-check]      at java.io.ObjectInputStream.readClassDesc(ObjectInputStream.java:1751)
[dependency-check]      at java.io.ObjectInputStream.readOrdinaryObject(ObjectInputStream.java:2042)
[dependency-check]      at java.io.ObjectInputStream.readObject0(ObjectInputStream.java:1573)
[dependency-check]      at java.io.ObjectInputStream.readObject(ObjectInputStream.java:431)
[dependency-check]      at java.util.HashMap.readObject(HashMap.java:1412)
[dependency-check]      at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
[dependency-check]      at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
[dependency-check]      at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
[dependency-check]      at java.lang.reflect.Method.invoke(Method.java:498)
[dependency-check]      at java.io.ObjectStreamClass.invokeReadObject(ObjectStreamClass.java:1170)
[dependency-check]      at java.io.ObjectInputStream.readSerialData(ObjectInputStream.java:2178)
[dependency-check]      at java.io.ObjectInputStream.readOrdinaryObject(ObjectInputStream.java:2069)
[dependency-check]      at java.io.ObjectInputStream.readObject0(ObjectInputStream.java:1573)
[dependency-check]      at java.io.ObjectInputStream.readObject(ObjectInputStream.java:431)
[dependency-check]      at org.apache.commons.jcs.utils.serialization.StandardSerializer.deSerialize(StandardSerializer.java:83)
[dependency-check]      at org.apache.commons.jcs.auxiliary.disk.indexed.IndexedDisk.readObject(IndexedDisk.java:118)
[dependency-check]      at org.apache.commons.jcs.auxiliary.disk.indexed.IndexedDiskCache.loadKeys(IndexedDiskCache.java:329)
[dependency-check]      at org.apache.commons.jcs.auxiliary.disk.indexed.IndexedDiskCache.initializeStoreFromPersistedData(IndexedDiskCache.java:285)
[dependency-check]      at org.apache.commons.jcs.auxiliary.disk.indexed.IndexedDiskCache.initializeKeysAndData(IndexedDiskCache.java:250)
[dependency-check]      at org.apache.commons.jcs.auxiliary.disk.indexed.IndexedDiskCache.<init>(IndexedDiskCache.java:183)
[dependency-check]      at org.apache.commons.jcs.auxiliary.disk.indexed.IndexedDiskCacheFactory.createCache(IndexedDiskCacheFactory.java:60)
[dependency-check]      at org.apache.commons.jcs.auxiliary.disk.indexed.IndexedDiskCacheFactory.createCache(IndexedDiskCacheFactory.java:33)
[dependency-check]      at org.apache.commons.jcs.engine.control.CompositeCacheConfigurator.parseAuxiliary(CompositeCacheConfigurator.java:506)
[dependency-check]      at org.apache.commons.jcs.engine.control.CompositeCacheConfigurator.parseRegion(CompositeCacheConfigurator.java:261)
[dependency-check]      at org.apache.commons.jcs.engine.control.CompositeCacheConfigurator.parseRegion(CompositeCacheConfigurator.java:161)
[dependency-check]      at org.apache.commons.jcs.engine.control.CompositeCacheConfigurator.parseRegions(CompositeCacheConfigurator.java:136)
[dependency-check]      at org.apache.commons.jcs.engine.control.CompositeCacheManager.doConfigure(CompositeCacheManager.java:490)
[dependency-check]      at org.apache.commons.jcs.engine.control.CompositeCacheManager.configure(CompositeCacheManager.java:441)
[dependency-check]      at org.apache.commons.jcs.engine.control.CompositeCacheManager.configure(CompositeCacheManager.java:391)
[dependency-check]      at org.apache.commons.jcs.engine.control.CompositeCacheManager.configure(CompositeCacheManager.java:373)
[dependency-check]      at org.apache.commons.jcs.JCS.getCacheManager(JCS.java:163)
[dependency-check]      at org.apache.commons.jcs.JCS.getInstance(JCS.java:205)
[dependency-check]      at org.owasp.dependencycheck.data.cache.DataCacheFactory.getPomCache(DataCacheFactory.java:139)
[dependency-check]      at org.owasp.dependencycheck.analyzer.CentralAnalyzer.initialize(CentralAnalyzer.java:122)
[dependency-check]      at org.owasp.dependencycheck.Engine.lambda$loadAnalyzers$1(Engine.java:291)
[dependency-check]      at java.util.ArrayList.forEach(ArrayList.java:1257)
[dependency-check]      at org.owasp.dependencycheck.Engine.loadAnalyzers(Engine.java:290)
[dependency-check]      at org.owasp.dependencycheck.Engine.initializeEngine(Engine.java:262)
[dependency-check]      at org.owasp.dependencycheck.Engine.<init>(Engine.java:251)
[dependency-check]      at org.owasp.dependencycheck.Engine.<init>(Engine.java:237)
[dependency-check]      at org.owasp.dependencycheck.taskdefs.Check.execute(Check.java:1530)
[dependency-check]      at org.apache.tools.ant.UnknownElement.execute(UnknownElement.java:292)
[dependency-check]      at sun.reflect.GeneratedMethodAccessor4.invoke(Unknown Source)
[dependency-check]      at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
[dependency-check]      at java.lang.reflect.Method.invoke(Method.java:498)
[dependency-check]      at org.apache.tools.ant.dispatch.DispatchUtils.execute(DispatchUtils.java:99)
[dependency-check]      at org.apache.tools.ant.Task.perform(Task.java:350)
[dependency-check]      at org.apache.tools.ant.Target.execute(Target.java:449)
[dependency-check]      at org.apache.tools.ant.Target.performTasks(Target.java:470)
[dependency-check]      at org.apache.tools.ant.Project.executeSortedTargets(Project.java:1391)
[dependency-check]      at org.apache.tools.ant.Project.executeTarget(Project.java:1364)
[dependency-check]      at org.apache.tools.ant.helper.DefaultExecutor.executeTargets(DefaultExecutor.java:41)
[dependency-check]      at org.apache.tools.ant.Project.executeTargets(Project.java:1254)
[dependency-check]      at org.apache.tools.ant.Main.runBuild(Main.java:830)
[dependency-check]      at org.apache.tools.ant.Main.startAnt(Main.java:223)
[dependency-check]      at org.apache.tools.ant.launch.Launcher.run(Launcher.java:284)
[dependency-check]      at org.apache.tools.ant.launch.Launcher.main(Launcher.java:101)
[dependency-check]
[dependency-check] Aug 25, 2019 10:31:04 AM org.apache.commons.jcs.auxiliary.disk.indexed.IndexedDiskCache <init>
[dependency-check] INFO: Region [CENTRAL] Indexed Disk Cache is alive.
[dependency-check] Aug 25, 2019 10:31:04 AM org.apache.commons.jcs.engine.control.CompositeCacheConfigurator parseRegions
[dependency-check] INFO: Parsed regions [POM, NODEAUDIT, CENTRAL]
[dependency-check] Aug 25, 2019 10:31:04 AM org.apache.commons.jcs.engine.control.CompositeCacheManager doConfigure
[dependency-check] INFO: Finished configuration in 311 ms.
[dependency-check] Checking for updates
[dependency-check] Skipping NVD check since last check was within 4 hours.
[dependency-check] Skipping RetireJS update since last update was within 24 hours.
[dependency-check] Check for updates complete (9 ms)
[dependency-check]
[dependency-check]
[dependency-check] Dependency-Check is an open source tool performing a best effort analysis of 3rd party dependencies; false positives and false negatives may exist in the analysis performed by the tool. Use of the tool and the reporting provided constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to the analysis or its use. Any use of the tool and the reporting provided is at the userÆs risk. In no event shall the copyright holder or OWASP be held liable for any damages whatsoever arising out of or in connection with the use of this tool, the analysis performed, or the resulting report.
[dependency-check]
[dependency-check] Analysis Started
[dependency-check] Finished Archive Analyzer (0 seconds)
[dependency-check] Finished File Name Analyzer (0 seconds)
[dependency-check] Finished Jar Analyzer (0 seconds)
[dependency-check] Finished Central Analyzer (23 seconds)
[dependency-check] ----------------------------------------------------
[dependency-check] .NET Assembly Analyzer could not be initialized and at least one 'exe' or 'dll' was scanned. The 'dotnet' executable could not be found on the path; either disable the Assembly Analyzer or configure the path dotnet core.
[dependency-check] ----------------------------------------------------
[dependency-check] Finished Dependency Merging Analyzer (0 seconds)
[dependency-check] Finished Version Filter Analyzer (0 seconds)
[dependency-check] Finished Hint Analyzer (0 seconds)
[dependency-check] Created CPE Index (1 seconds)
[dependency-check] Finished CPE Analyzer (2 seconds)
[dependency-check] Finished False Positive Analyzer (0 seconds)
[dependency-check] Finished NVD CVE Analyzer (0 seconds)
[dependency-check] 00:00  INFO: Vulnerability found: jquery below 3.0.0-beta1
[dependency-check] 00:00  INFO: Vulnerability found: jquery below 2.2.0
[dependency-check] 00:00  INFO: Vulnerability found: jquery below 3.0.0-beta1
[dependency-check] 00:00  INFO: Vulnerability found: jquery below 3.4.0
[dependency-check] 00:00  INFO: Vulnerability found: jquery-ui-dialog below 1.12.0
[dependency-check] 00:00  INFO: Vulnerability found: jquery below 2.2.0
[dependency-check] 00:00  INFO: Vulnerability found: jquery below 3.4.0
[dependency-check] 00:00  INFO: Vulnerability found: jquery-ui-dialog below 1.12.0
[dependency-check] Finished RetireJS Analyzer (1 seconds)
[dependency-check] Finished Sonatype OSS Index Analyzer (0 seconds)
[dependency-check] Finished Vulnerability Suppression Analyzer (0 seconds)
[dependency-check] Finished Dependency Bundling Analyzer (0 seconds)
[dependency-check] Analysis Complete (29 seconds)
[dependency-check]
[dependency-check]
[dependency-check] One or more dependencies were identified with known vulnerabilities:
[dependency-check]
[dependency-check] jquery-1.12.3.js (pkg:javascript/jquery@1.12.3) : CVE-2015-9251, CVE-2019-11358
[dependency-check] jquery-1.12.3.min.js (pkg:javascript/jquery@1.12.3.min) : CVE-2015-9251, CVE-2019-11358
[dependency-check] jquery-ui-1.11.1.js (pkg:javascript/jquery-ui-dialog@1.11.1) : CVE-2016-7103
[dependency-check] jquery-ui-1.11.1.min.js (pkg:javascript/jquery-ui-dialog@1.11.1) : CVE-2016-7103
[dependency-check]
[dependency-check]
[dependency-check] See the dependency-check report for more details.
[dependency-check]
[dependency-check] Aug 25, 2019 10:31:36 AM org.apache.commons.jcs.engine.control.event.ElementEventQueue dispose
[dependency-check] INFO: Element event queue destroyed: org.apache.commons.jcs.engine.control.event.ElementEventQueue@783a35d8
[dependency-check] Aug 25, 2019 10:31:36 AM org.apache.commons.jcs.engine.control.CompositeCache dispose
[dependency-check] INFO: In DISPOSE, [NODEAUDIT] fromRemote [false]
[dependency-check] Aug 25, 2019 10:31:36 AM org.apache.commons.jcs.engine.control.CompositeCache dispose
[dependency-check] INFO: In DISPOSE, [NODEAUDIT] auxiliary [NODEAUDIT]
[dependency-check] Aug 25, 2019 10:31:36 AM org.apache.commons.jcs.engine.control.CompositeCache dispose
[dependency-check] INFO: In DISPOSE, [NODEAUDIT] put 0 into auxiliary NODEAUDIT
[dependency-check] Aug 25, 2019 10:31:36 AM org.apache.commons.jcs.auxiliary.disk.AbstractDiskCache run
[dependency-check] INFO: No longer waiting for event queue to finish: Pooled Cache Event Queue
[dependency-check] Working = true
[dependency-check] Alive = false
[dependency-check] Empty = true
[dependency-check] Queue Size = 0
[dependency-check] Queue Capacity = 2147483647
[dependency-check] Pool Size = 0
[dependency-check] Maximum Pool Size = 150
[dependency-check] Aug 25, 2019 10:31:36 AM org.apache.commons.jcs.auxiliary.disk.AbstractDiskCache dispose
[dependency-check] INFO: In dispose, destroying event queue.
[dependency-check] Aug 25, 2019 10:31:36 AM org.apache.commons.jcs.auxiliary.disk.indexed.IndexedDiskCache saveKeys
[dependency-check] INFO: Region [NODEAUDIT] Saving keys to: NODEAUDIT, key count: 0
[dependency-check] Aug 25, 2019 10:31:36 AM org.apache.commons.jcs.auxiliary.disk.indexed.IndexedDiskCache saveKeys
[dependency-check] INFO: Region [NODEAUDIT] Finished saving keys.
[dependency-check] Aug 25, 2019 10:31:36 AM org.apache.commons.jcs.auxiliary.disk.indexed.IndexedDiskCache disposeInternal
[dependency-check] INFO: Region [NODEAUDIT] Shutdown complete.
[dependency-check] Aug 25, 2019 10:31:36 AM org.apache.commons.jcs.engine.control.CompositeCache dispose
[dependency-check] INFO: In DISPOSE, [NODEAUDIT] disposing of memory cache.
[dependency-check] Aug 25, 2019 10:31:36 AM org.apache.commons.jcs.engine.memory.AbstractMemoryCache dispose
[dependency-check] INFO: Memory Cache dispose called.
[dependency-check] Aug 25, 2019 10:31:36 AM org.apache.commons.jcs.engine.control.CompositeCache dispose
[dependency-check] INFO: In DISPOSE, [CENTRAL] fromRemote [false]
[dependency-check] Aug 25, 2019 10:31:36 AM org.apache.commons.jcs.engine.control.CompositeCache dispose
[dependency-check] INFO: In DISPOSE, [CENTRAL] auxiliary [CENTRAL]
[dependency-check] Aug 25, 2019 10:31:36 AM org.apache.commons.jcs.engine.control.CompositeCache dispose
[dependency-check] INFO: In DISPOSE, [CENTRAL] put 0 into auxiliary CENTRAL
[dependency-check] Aug 25, 2019 10:31:36 AM org.apache.commons.jcs.auxiliary.disk.AbstractDiskCache run
[dependency-check] INFO: No longer waiting for event queue to finish: Pooled Cache Event Queue
[dependency-check] Working = true
[dependency-check] Alive = false
[dependency-check] Empty = true
[dependency-check] Queue Size = 0
[dependency-check] Queue Capacity = 2147483647
[dependency-check] Pool Size = 0
[dependency-check] Maximum Pool Size = 150
[dependency-check] Aug 25, 2019 10:31:36 AM org.apache.commons.jcs.auxiliary.disk.AbstractDiskCache dispose
[dependency-check] INFO: In dispose, destroying event queue.
[dependency-check] Aug 25, 2019 10:31:36 AM org.apache.commons.jcs.auxiliary.disk.indexed.IndexedDiskCache saveKeys
[dependency-check] INFO: Region [CENTRAL] Saving keys to: CENTRAL, key count: 24
[dependency-check] Aug 25, 2019 10:31:36 AM org.apache.commons.jcs.auxiliary.disk.indexed.IndexedDiskCache saveKeys
[dependency-check] INFO: Region [CENTRAL] Finished saving keys.
[dependency-check] Aug 25, 2019 10:31:36 AM org.apache.commons.jcs.auxiliary.disk.indexed.IndexedDiskCache disposeInternal
[dependency-check] INFO: Region [CENTRAL] Shutdown complete.
[dependency-check] Aug 25, 2019 10:31:36 AM org.apache.commons.jcs.engine.control.CompositeCache dispose
[dependency-check] INFO: In DISPOSE, [CENTRAL] disposing of memory cache.
[dependency-check] Aug 25, 2019 10:31:36 AM org.apache.commons.jcs.engine.memory.AbstractMemoryCache dispose
[dependency-check] INFO: Memory Cache dispose called.
[dependency-check] Aug 25, 2019 10:31:36 AM org.apache.commons.jcs.engine.control.CompositeCache dispose
[dependency-check] INFO: In DISPOSE, [POM] fromRemote [false]
[dependency-check] Aug 25, 2019 10:31:36 AM org.apache.commons.jcs.engine.control.CompositeCache dispose
[dependency-check] INFO: In DISPOSE, [POM] auxiliary [POM]
[dependency-check] Aug 25, 2019 10:31:36 AM org.apache.commons.jcs.engine.control.CompositeCache dispose
[dependency-check] INFO: In DISPOSE, [POM] put 0 into auxiliary POM
[dependency-check] Aug 25, 2019 10:31:36 AM org.apache.commons.jcs.auxiliary.disk.AbstractDiskCache run
[dependency-check] INFO: No longer waiting for event queue to finish: Pooled Cache Event Queue
[dependency-check] Working = true
[dependency-check] Alive = false
[dependency-check] Empty = true
[dependency-check] Queue Size = 0
[dependency-check] Queue Capacity = 2147483647
[dependency-check] Pool Size = 0
[dependency-check] Maximum Pool Size = 150
[dependency-check] Aug 25, 2019 10:31:36 AM org.apache.commons.jcs.auxiliary.disk.AbstractDiskCache dispose
[dependency-check] INFO: In dispose, destroying event queue.
[dependency-check] Aug 25, 2019 10:31:36 AM org.apache.commons.jcs.auxiliary.disk.indexed.IndexedDiskCache saveKeys
[dependency-check] INFO: Region [POM] Saving keys to: POM, key count: 26
[dependency-check] Aug 25, 2019 10:31:36 AM org.apache.commons.jcs.auxiliary.disk.indexed.IndexedDiskCache saveKeys
[dependency-check] INFO: Region [POM] Finished saving keys.
[dependency-check] Aug 25, 2019 10:31:36 AM org.apache.commons.jcs.auxiliary.disk.indexed.IndexedDiskCache disposeInternal
[dependency-check] INFO: Region [POM] Shutdown complete.
[dependency-check] Aug 25, 2019 10:31:36 AM org.apache.commons.jcs.engine.control.CompositeCache dispose
[dependency-check] INFO: In DISPOSE, [POM] disposing of memory cache.
[dependency-check] Aug 25, 2019 10:31:36 AM org.apache.commons.jcs.engine.memory.AbstractMemoryCache dispose
[dependency-check] INFO: Memory Cache dispose called.

build:

war:
     [echo] Creating distribution file and SHA-256 checksum
      [war] Building war: D:\MyProjects\Git\XOXO\build\XOXO.war
     [copy] Copying 1 file to D:\MyProjects\Git\XOXO\build

BUILD SUCCESSFUL
Total time: 40 seconds
@scrain
Copy link

scrain commented Sep 13, 2019

Seeing the same thing, also with ant dependency-check 5.2.1

@ickzon
Copy link

ickzon commented Oct 10, 2019 •
edited

Same here with dependency-check 5.2.2. The error affects the result! In my case, the report is missing the vulnerabilities for jetty-client-9.3.11.v20160721.jar (CVE-2018-12545, CVE-2019-1024, and CVE-2019-10247).

Workaround: Removing the local copy of the NVD (directly from file system or via dependency-check-purge) avoids the error for the next run of the dependency-check.

@jeremylong
Copy link
Owner

For now - try disabling these two caches: centralAnalyzerUseCache=false and nodeAuditAnalyzerUseCache=false. In ant you would do something like:

        <dependency-check
            centralAnalyzerUseCache="false"
            nodeAuditAnalyzerUseCache="false">
        </dependency-check>

@jeremylong jeremylong added bug and removed question labels Mar 25, 2020
jeremylong added a commit that referenced this issue Mar 25, 2020
@jeremylong
add overly broad error handling per #2166
e1ab315
@jeremylong jeremylong added this to the 5.3.2 milestone Mar 25, 2020
@jeremylong
Copy link
Owner

So I'm not sure what is going on with the classpath in this scenario - but we've added fairly broad error handling that should more gracefully handle this scenario.

@lock lock bot locked and limited conversation to collaborators Apr 25, 2020
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Assignees
No one assigned
Labels
bug
Projects
None yet
Milestone
5.3.2
Development

No branches or pull requests
4 participants
@jeremylong @scrain @MMirabito @ickzon