public abstract class org.owasp.dependencycheck.maven.BaseDependencyCheckMojo extends org.apache.maven.plugin.AbstractMojo implements org.apache.maven.reporting.MavenReport { private static final java.lang.String PROPERTIES_FILE; private static final java.lang.String NEW_LINE; private static final java.lang.String INCLUDE_ALL; private boolean generatingSite; private org.owasp.dependencycheck.utils.Settings settings; private final java.util.List scannedFiles; private boolean failOnError; private org.apache.maven.project.MavenProject project; private java.util.List reactorProjects; private org.apache.maven.shared.transfer.artifact.resolve.ArtifactResolver artifactResolver; private org.apache.maven.shared.transfer.dependencies.resolve.DependencyResolver dependencyResolver; private org.apache.maven.execution.MavenSession session; private org.apache.maven.shared.dependency.graph.DependencyGraphBuilder dependencyGraphBuilder; private java.io.File outputDirectory; private java.io.File reportOutputDirectory; private float failBuildOnCVSS; private float junitFailOnCVSS; private boolean failBuildOnAnyVulnerability; private java.lang.Boolean autoUpdate; private java.lang.Boolean enableExperimental; private java.lang.Boolean enableRetired; private java.lang.Boolean golangDepEnabled; private java.lang.Boolean golangModEnabled; private java.lang.String pathToGo; private java.lang.String pathToYarn; private java.lang.String pathToPnpm; private java.lang.Boolean virtualSnapshotsFromReactor; private java.lang.String format; private java.lang.Boolean prettyPrint; private java.lang.String[] formats; private org.apache.maven.settings.Settings mavenSettings; private java.lang.String mavenSettingsProxyId; private java.lang.String connectionTimeout; private java.lang.String readTimeout; private boolean versionCheckEnabled; private java.lang.String[] suppressionFiles; private java.lang.String suppressionFile; private java.lang.String suppressionFileUser; private java.lang.String suppressionFilePassword; private java.lang.String suppressionFileServerId; private java.lang.String hintsFile; private boolean showSummary; private java.lang.Boolean jarAnalyzerEnabled; private java.lang.Boolean archiveAnalyzerEnabled; private java.lang.Boolean pyDistributionAnalyzerEnabled; private java.lang.Boolean pyPackageAnalyzerEnabled; private java.lang.Boolean rubygemsAnalyzerEnabled; private java.lang.Boolean opensslAnalyzerEnabled; private java.lang.Boolean cmakeAnalyzerEnabled; private java.lang.Boolean autoconfAnalyzerEnabled; private java.lang.Boolean pipAnalyzerEnabled; private java.lang.Boolean pipfileAnalyzerEnabled; private java.lang.Boolean composerAnalyzerEnabled; private java.lang.Boolean cpanfileAnalyzerEnabled; private java.lang.Boolean nodeAnalyzerEnabled; private java.lang.Boolean nodeAuditAnalyzerEnabled; private java.lang.Boolean yarnAuditAnalyzerEnabled; private java.lang.Boolean pnpmAuditAnalyzerEnabled; private java.lang.Boolean nodeAuditAnalyzerUseCache; private java.lang.Boolean nodeAuditSkipDevDependencies; private java.lang.Boolean nodePackageSkipDevDependencies; private java.lang.Boolean retireJsAnalyzerEnabled; private java.lang.String retireJsUrl; private java.lang.Boolean retireJsForceUpdate; private java.lang.Boolean assemblyAnalyzerEnabled; private java.lang.Boolean msbuildAnalyzerEnabled; private java.lang.Boolean nuspecAnalyzerEnabled; private java.lang.Boolean nugetconfAnalyzerEnabled; private java.lang.Boolean centralAnalyzerEnabled; private java.lang.Boolean centralAnalyzerUseCache; private java.lang.Boolean artifactoryAnalyzerEnabled; private java.lang.String artifactoryAnalyzerServerId; private java.lang.String artifactoryAnalyzerUsername; private java.lang.String artifactoryAnalyzerApiToken; private java.lang.String artifactoryAnalyzerBearerToken; private java.lang.String artifactoryAnalyzerUrl; private java.lang.Boolean artifactoryAnalyzerUseProxy; private java.lang.Boolean artifactoryAnalyzerParallelAnalysis; private java.lang.Boolean nexusAnalyzerEnabled; private java.lang.Boolean ossindexAnalyzerEnabled; private java.lang.Boolean ossindexAnalyzerUseCache; private java.lang.String ossindexAnalyzerUrl; private java.lang.String ossIndexServerId; private java.lang.Boolean ossIndexWarnOnlyOnRemoteErrors; private java.lang.Boolean mixAuditAnalyzerEnabled; private java.lang.String mixAuditPath; private java.lang.Boolean bundleAuditAnalyzerEnabled; private java.lang.String bundleAuditPath; private java.lang.String bundleAuditWorkingDirectory; private java.lang.Boolean cocoapodsAnalyzerEnabled; private java.lang.Boolean swiftPackageManagerAnalyzerEnabled; private java.lang.Boolean swiftPackageResolvedAnalyzerEnabled; private java.lang.String nexusUrl; private java.lang.String nexusServerId; private java.lang.Boolean nexusUsesProxy; private java.lang.String connectionString; private java.lang.String databaseDriverName; private java.lang.String databaseDriverPath; private java.lang.String serverId; private org.apache.maven.settings.Settings settingsXml; private org.sonatype.plexus.components.sec.dispatcher.SecDispatcher securityDispatcher; private java.lang.String databaseUser; private java.lang.String databasePassword; private java.lang.String zipExtensions; private boolean skip; private boolean skipTestScope; private boolean skipRuntimeScope; private boolean skipProvidedScope; private boolean skipSystemScope; private boolean skipDependencyManagement; private java.lang.String skipArtifactType; private java.lang.String dataDirectory; private java.lang.String dbFilename; private java.lang.String cveUrlModified; private java.lang.String cveUrlBase; private java.lang.String cveWaitTime; private java.lang.String cveUser; private java.lang.String cvePassword; private java.lang.String cveServerId; private java.lang.Integer cveValidForHours; private java.lang.Integer cveStartYear; private java.lang.String pathToCore; private org.owasp.dependencycheck.maven.Retirejs retirejs; private java.util.List excludes; private org.owasp.dependencycheck.utils.Filter artifactScopeExcluded; private org.owasp.dependencycheck.utils.Filter artifactTypeExcluded; private java.util.List scanSet; private java.util.List scanDirectory; public void () { org.owasp.dependencycheck.maven.BaseDependencyCheckMojo v; java.util.ArrayList v; v := @this: org.owasp.dependencycheck.maven.BaseDependencyCheckMojo; specialinvoke v.()>(); v. = 0; v. = null; v = new java.util.ArrayList; specialinvoke v.()>(); v. = v; v. = 11.0F; v. = 0.0F; v. = 0; v. = "HTML"; v. = 1; v. = 0; v. = 1; v. = 0; v. = 0; v. = 0; v. = 1; return; } private static boolean artifactsMatch(org.apache.maven.model.Dependency, org.apache.maven.artifact.Artifact) { org.apache.maven.model.Dependency v; org.apache.maven.artifact.Artifact v; java.lang.String v, v, v, v, v, v; boolean v, v, v, v; v := @parameter: org.apache.maven.model.Dependency; v := @parameter: org.apache.maven.artifact.Artifact; v = interfaceinvoke v.(); v = virtualinvoke v.(); v = staticinvoke (v, v); if v == 0 goto label; v = interfaceinvoke v.(); v = virtualinvoke v.(); v = staticinvoke (v, v); if v == 0 goto label; v = interfaceinvoke v.(); v = virtualinvoke v.(); v = staticinvoke (v, v); if v == 0 goto label; v = 1; goto label; label: v = 0; label: return v; } private static boolean isEqualOrNull(java.lang.String, java.lang.String) { java.lang.String v, v; boolean v, v; v := @parameter: java.lang.String; v := @parameter: java.lang.String; if v == null goto label; v = virtualinvoke v.(v); if v != 0 goto label; label: if v != null goto label; if v != null goto label; label: v = 1; goto label; label: v = 0; label: return v; } public void execute() throws org.apache.maven.plugin.MojoExecutionException, org.apache.maven.plugin.MojoFailureException { org.owasp.dependencycheck.maven.BaseDependencyCheckMojo v; org.apache.maven.plugin.logging.Log v; java.io.File v; org.apache.maven.project.MavenProject v; java.util.Locale v; java.lang.String v, v, v, v; boolean v, v; v := @this: org.owasp.dependencycheck.maven.BaseDependencyCheckMojo; v. = 0; v = v.; v = staticinvoke (v); v = staticinvoke ("dependency-check.skip", v); v = staticinvoke (v); if v == 0 goto label; v = virtualinvoke v.(); v = ; v = virtualinvoke v.(v); v = dynamicinvoke "makeConcatWithConstants" (v) ("Skipping \u0001"); interfaceinvoke v.(v); goto label; label: v = v.; v = v.; virtualinvoke v.("dependency-check-output-dir", v); virtualinvoke v.(); label: return; } public final void generate(org.codehaus.doxia.sink.Sink, java.util.Locale) throws org.apache.maven.reporting.MavenReportException { org.owasp.dependencycheck.maven.BaseDependencyCheckMojo v; org.codehaus.doxia.sink.Sink v; java.util.Locale v; v := @this: org.owasp.dependencycheck.maven.BaseDependencyCheckMojo; v := @parameter: org.codehaus.doxia.sink.Sink; v := @parameter: java.util.Locale; virtualinvoke v.(v, v); return; } protected boolean isGeneratingSite() { org.owasp.dependencycheck.maven.BaseDependencyCheckMojo v; boolean v; v := @this: org.owasp.dependencycheck.maven.BaseDependencyCheckMojo; v = v.; return v; } protected java.lang.String getConnectionString() { org.owasp.dependencycheck.maven.BaseDependencyCheckMojo v; java.lang.String v; v := @this: org.owasp.dependencycheck.maven.BaseDependencyCheckMojo; v = v.; return v; } protected boolean isFailOnError() { org.owasp.dependencycheck.maven.BaseDependencyCheckMojo v; boolean v; v := @this: org.owasp.dependencycheck.maven.BaseDependencyCheckMojo; v = v.; return v; } public void generate(org.apache.maven.doxia.sink.Sink, java.util.Locale) throws org.apache.maven.reporting.MavenReportException { java.lang.Throwable v, v; org.apache.maven.doxia.sink.Sink v; org.apache.maven.project.MavenProject v; java.util.Locale v, v; java.lang.String v, v, v, v, v; boolean v, v; org.apache.maven.reporting.MavenReportException v; org.owasp.dependencycheck.maven.BaseDependencyCheckMojo v; org.apache.maven.plugin.logging.Log v, v; java.io.File v; v := @this: org.owasp.dependencycheck.maven.BaseDependencyCheckMojo; v := @parameter: org.apache.maven.doxia.sink.Sink; v := @parameter: java.util.Locale; v = v.; v = staticinvoke (v); v = staticinvoke ("dependency-check.skip", v); v = staticinvoke (v); if v == 0 goto label; v = virtualinvoke v.(); v = ; v = virtualinvoke v.(v); v = dynamicinvoke "makeConcatWithConstants" (v) ("Skipping report generation \u0001"); interfaceinvoke v.(v); return; label: v. = 1; v = v.; v = virtualinvoke v.(); virtualinvoke v.("dependency-check-output-dir", v); label: virtualinvoke v.(); label: goto label; label: v := @caughtexception; v = new org.apache.maven.reporting.MavenReportException; v = virtualinvoke v.(); specialinvoke v.(java.lang.String,java.lang.Exception)>(v, v); throw v; label: v := @caughtexception; v = virtualinvoke v.(); interfaceinvoke v.("Vulnerabilities were identifies that exceed the CVSS threshold for failing the build"); label: return; catch org.apache.maven.plugin.MojoExecutionException from label to label with label; catch org.apache.maven.plugin.MojoFailureException from label to label with label; } protected java.io.File getCorrectOutputDirectory() throws org.apache.maven.plugin.MojoExecutionException { org.owasp.dependencycheck.maven.BaseDependencyCheckMojo v; org.apache.maven.project.MavenProject v; java.io.File v; v := @this: org.owasp.dependencycheck.maven.BaseDependencyCheckMojo; v = v.; v = virtualinvoke v.(v); return v; } protected java.io.File getCorrectOutputDirectory(org.apache.maven.project.MavenProject) { org.owasp.dependencycheck.maven.BaseDependencyCheckMojo v; org.apache.maven.model.Build v; java.io.File v, v, v, v; org.apache.maven.project.MavenProject v; java.lang.Object v; java.lang.String v, v, v; boolean v, v; v := @this: org.owasp.dependencycheck.maven.BaseDependencyCheckMojo; v := @parameter: org.apache.maven.project.MavenProject; v = virtualinvoke v.("dependency-check-output-dir"); if v == null goto label; v = v instanceof java.io.File; if v == 0 goto label; return v; label: v = new java.io.File; v = virtualinvoke v.(); v = virtualinvoke v.(); specialinvoke v.(java.lang.String)>(v); v = v; v = virtualinvoke v.(); if v == null goto label; v = "target"; v = virtualinvoke v.(); v = virtualinvoke v.(); v = virtualinvoke v.(v); if v == 0 goto label; v = virtualinvoke v.(); label: return v; } protected org.owasp.dependencycheck.exception.ExceptionCollection scanArtifacts(org.apache.maven.project.MavenProject, org.owasp.dependencycheck.Engine) { org.apache.maven.project.MavenProject v; org.owasp.dependencycheck.maven.BaseDependencyCheckMojo v; org.owasp.dependencycheck.Engine v; org.owasp.dependencycheck.exception.ExceptionCollection v; v := @this: org.owasp.dependencycheck.maven.BaseDependencyCheckMojo; v := @parameter: org.apache.maven.project.MavenProject; v := @parameter: org.owasp.dependencycheck.Engine; v = virtualinvoke v.(v, v, 0); return v; } protected org.owasp.dependencycheck.exception.ExceptionCollection scanArtifacts(org.apache.maven.project.MavenProject, org.owasp.dependencycheck.Engine, boolean) { java.lang.Throwable v; java.lang.Object[] v, v; org.apache.maven.shared.dependency.graph.traversal.FilteringDependencyNodeVisitor v; org.apache.maven.shared.artifact.filter.PatternExcludesArtifactFilter v; java.util.ArrayList v; org.apache.maven.project.MavenProject v; org.apache.maven.shared.dependency.graph.DependencyGraphBuilder v; java.lang.String v, v, v, v, v; org.apache.maven.shared.dependency.graph.traversal.CollectingDependencyNodeVisitor v; boolean v; org.apache.maven.artifact.resolver.filter.ExcludesArtifactFilter v; org.owasp.dependencycheck.maven.BaseDependencyCheckMojo v; org.apache.maven.shared.dependency.graph.filter.ArtifactDependencyNodeFilter v, v; org.apache.maven.plugin.logging.Log v; java.util.List v, v, v; org.apache.maven.shared.dependency.graph.DependencyNode v; org.apache.maven.project.ProjectBuildingRequest v; org.owasp.dependencycheck.maven.FilteringDependencyTransitiveNodeVisitor v; org.owasp.dependencycheck.Engine v; org.owasp.dependencycheck.exception.ExceptionCollection v, v; v := @this: org.owasp.dependencycheck.maven.BaseDependencyCheckMojo; v := @parameter: org.apache.maven.project.MavenProject; v := @parameter: org.owasp.dependencycheck.Engine; v := @parameter: boolean; label: v = newarray (java.lang.Object)[2]; v = virtualinvoke v.(); v[0] = v; v = virtualinvoke v.(); v[1] = v; v = staticinvoke ("%s:%s", v); v = staticinvoke (v); v = virtualinvoke v.(v); v = v.; v = interfaceinvoke v.(v, null); v = new org.apache.maven.shared.dependency.graph.traversal.CollectingDependencyNodeVisitor; specialinvoke v.()>(); v = new org.owasp.dependencycheck.maven.FilteringDependencyTransitiveNodeVisitor; v = new org.apache.maven.shared.dependency.graph.filter.ArtifactDependencyNodeFilter; v = new org.apache.maven.shared.artifact.filter.PatternExcludesArtifactFilter; v = virtualinvoke v.(); specialinvoke v.(java.util.Collection)>(v); specialinvoke v.(org.apache.maven.artifact.resolver.filter.ArtifactFilter)>(v); specialinvoke v.(org.apache.maven.shared.dependency.graph.traversal.DependencyNodeVisitor,org.apache.maven.shared.dependency.graph.filter.DependencyNodeFilter)>(v, v); v = new org.apache.maven.shared.dependency.graph.traversal.FilteringDependencyNodeVisitor; v = new org.apache.maven.shared.dependency.graph.filter.ArtifactDependencyNodeFilter; v = new org.apache.maven.artifact.resolver.filter.ExcludesArtifactFilter; specialinvoke v.(java.util.List)>(v); specialinvoke v.(org.apache.maven.artifact.resolver.filter.ArtifactFilter)>(v); specialinvoke v.(org.apache.maven.shared.dependency.graph.traversal.DependencyNodeVisitor,org.apache.maven.shared.dependency.graph.filter.DependencyNodeFilter)>(v, v); interfaceinvoke v.(v); v = new java.util.ArrayList; v = virtualinvoke v.(); specialinvoke v.(java.util.Collection)>(v); v = specialinvoke v.(v, v, v, v, v); label: return v; label: v := @caughtexception; v = newarray (java.lang.Object)[1]; v = virtualinvoke v.(); v[0] = v; v = staticinvoke ("Unable to build dependency graph on project %s", v); v = virtualinvoke v.(); interfaceinvoke v.(v, v); v = new org.owasp.dependencycheck.exception.ExceptionCollection; specialinvoke v.(java.lang.Throwable)>(v); return v; catch org.apache.maven.shared.dependency.graph.DependencyGraphBuilderException from label to label with label; } private org.apache.maven.shared.dependency.graph.DependencyNode toDependencyNode(java.util.List, org.apache.maven.project.ProjectBuildingRequest, org.apache.maven.shared.dependency.graph.DependencyNode, org.apache.maven.model.Dependency) throws org.apache.maven.shared.transfer.artifact.resolve.ArtifactResolverException { org.eclipse.aether.artifact.ArtifactTypeRegistry v; org.apache.maven.artifact.Artifact v; org.apache.maven.shared.transfer.artifact.DefaultArtifactCoordinate v; boolean v, v, v, v; org.apache.maven.artifact.versioning.ArtifactVersion v, v, v, v, v, v; java.util.List v, v; org.apache.maven.shared.dependency.graph.DependencyNode v; org.apache.maven.shared.transfer.artifact.resolve.ArtifactResolverException v; org.apache.maven.shared.transfer.artifact.resolve.ArtifactResolver v; java.lang.Throwable v; org.apache.maven.model.Dependency v; org.apache.maven.shared.transfer.artifact.resolve.ArtifactResult v; org.eclipse.aether.RepositorySystemSession v; org.eclipse.aether.artifact.ArtifactType v; java.lang.String v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v; org.apache.maven.execution.MavenSession v; java.util.Iterator v; org.owasp.dependencycheck.maven.BaseDependencyCheckMojo v; org.apache.maven.project.ProjectBuildingRequest v; org.apache.maven.shared.dependency.graph.internal.DefaultDependencyNode v; java.lang.Object v; org.apache.maven.artifact.versioning.VersionRange v; v := @this: org.owasp.dependencycheck.maven.BaseDependencyCheckMojo; v := @parameter: java.util.List; v := @parameter: org.apache.maven.project.ProjectBuildingRequest; v := @parameter: org.apache.maven.shared.dependency.graph.DependencyNode; v := @parameter: org.apache.maven.model.Dependency; v = new org.apache.maven.shared.transfer.artifact.DefaultArtifactCoordinate; specialinvoke v.()>(); v = virtualinvoke v.(); virtualinvoke v.(v); v = virtualinvoke v.(); virtualinvoke v.(v); v = null; label: v = virtualinvoke v.(); v = staticinvoke (v); label: goto label; label: v := @caughtexception; v = new org.apache.maven.shared.transfer.artifact.resolve.ArtifactResolverException; v = virtualinvoke v.(); v = virtualinvoke v.(); v = virtualinvoke v.(); v = dynamicinvoke "makeConcatWithConstants" (v, v, v) ("Invalid version specification: \u0001:\u0001:\u0001"); specialinvoke v.(java.lang.String,java.lang.Exception)>(v, v); throw v; label: v = virtualinvoke v.(); if v == 0 goto label; v = virtualinvoke v.(); v = virtualinvoke v.(); v = specialinvoke v.(v, v, v); if v != null goto label; v = virtualinvoke v.(); if v == null goto label; v = virtualinvoke v.(); v = virtualinvoke v.(); goto label; label: v = virtualinvoke v.(); if v == 0 goto label; v = virtualinvoke v.(); v = interfaceinvoke v.(); label: v = interfaceinvoke v.(); if v == 0 goto label; v = interfaceinvoke v.(); v = virtualinvoke v.(); if v == null goto label; v = virtualinvoke v.(); v = virtualinvoke v.(); label: v = virtualinvoke v.(); if v == null goto label; v = virtualinvoke v.(); v = virtualinvoke v.(); goto label; label: v = virtualinvoke v.(); label: if v != null goto label; v = virtualinvoke v.(); label: virtualinvoke v.(v); v = v.; v = virtualinvoke v.(); v = interfaceinvoke v.(); v = virtualinvoke v.(); v = interfaceinvoke v.(v); v = interfaceinvoke v.(); virtualinvoke v.(v); v = virtualinvoke v.(); if null == v goto label; v = virtualinvoke v.(); v = virtualinvoke v.(); if v == 0 goto label; label: v = interfaceinvoke v.(); goto label; label: v = virtualinvoke v.(); label: virtualinvoke v.(v); v = v.; v = interfaceinvoke v.(v, v); v = interfaceinvoke v.(); v = virtualinvoke v.(); interfaceinvoke v.(v); v = new org.apache.maven.shared.dependency.graph.internal.DefaultDependencyNode; v = virtualinvoke v.(); v = virtualinvoke v.(); specialinvoke v.(org.apache.maven.shared.dependency.graph.DependencyNode,org.apache.maven.artifact.Artifact,java.lang.String,java.lang.String,java.lang.String)>(v, v, v, v, null); return v; catch org.apache.maven.artifact.versioning.InvalidVersionSpecificationException from label to label with label; } private java.lang.String findVersion(java.util.List, java.lang.String, java.lang.String) { java.util.function.Predicate v; org.owasp.dependencycheck.maven.BaseDependencyCheckMojo v; java.util.List v; java.util.stream.Stream v, v; java.util.Optional v; java.lang.Object v; org.apache.maven.artifact.Artifact v; java.lang.String v, v, v; boolean v; v := @this: org.owasp.dependencycheck.maven.BaseDependencyCheckMojo; v := @parameter: java.util.List; v := @parameter: java.lang.String; v := @parameter: java.lang.String; v = interfaceinvoke v.(); v = staticinvoke (v, v); v = interfaceinvoke v.(v); v = interfaceinvoke v.(); v = virtualinvoke v.(); if v == 0 goto label; v = virtualinvoke v.(); v = interfaceinvoke v.(); v = interfaceinvoke v.(); return v; label: return null; } private org.owasp.dependencycheck.exception.ExceptionCollection collectDependencyManagementDependencies(org.owasp.dependencycheck.Engine, org.apache.maven.project.ProjectBuildingRequest, org.apache.maven.project.MavenProject, java.util.List, boolean) { java.lang.Throwable v; java.lang.Object[] v; org.apache.maven.model.DependencyManagement v, v; org.apache.maven.project.MavenProject v; java.lang.Boolean v; java.lang.String v, v, v, v, v, v, v; boolean v, v, v, v, v; org.apache.maven.artifact.DefaultArtifact v; org.apache.maven.artifact.handler.DefaultArtifactHandler v; java.util.Iterator v; org.owasp.dependencycheck.maven.BaseDependencyCheckMojo v; org.apache.maven.plugin.logging.Log v; java.util.List v, v; org.apache.maven.shared.dependency.graph.DependencyNode v; org.apache.maven.project.ProjectBuildingRequest v; java.lang.Object v; org.owasp.dependencycheck.Engine v; org.owasp.dependencycheck.exception.ExceptionCollection v, v; v := @this: org.owasp.dependencycheck.maven.BaseDependencyCheckMojo; v := @parameter: org.owasp.dependencycheck.Engine; v := @parameter: org.apache.maven.project.ProjectBuildingRequest; v := @parameter: org.apache.maven.project.MavenProject; v := @parameter: java.util.List; v := @parameter: boolean; v = v.; if v != 0 goto label; v = virtualinvoke v.(); if v != null goto label; label: return null; label: v = null; v = virtualinvoke v.(); v = virtualinvoke v.(); v = interfaceinvoke v.(); label: v = interfaceinvoke v.(); if v == 0 goto label; v = interfaceinvoke v.(); label: v = specialinvoke v.(v, v, null, v); interfaceinvoke v.(v); label: goto label; label: v := @caughtexception; v = virtualinvoke v.(); v = newarray (java.lang.Object)[1]; v = staticinvoke (v); v[0] = v; v = staticinvoke ("Aggregate : %s", v); interfaceinvoke v.(v); v = 1; if v == 0 goto label; v = new org.apache.maven.artifact.DefaultArtifact; v = virtualinvoke v.(); v = virtualinvoke v.(); v = virtualinvoke v.(); v = virtualinvoke v.(); v = virtualinvoke v.(); v = virtualinvoke v.(); v = new org.apache.maven.artifact.handler.DefaultArtifactHandler; specialinvoke v.()>(); specialinvoke v.(java.lang.String,java.lang.String,java.lang.String,java.lang.String,java.lang.String,java.lang.String,org.apache.maven.artifact.handler.ArtifactHandler)>(v, v, v, v, v, v, v); v = specialinvoke v.(v, v, v); if v == 0 goto label; v = 0; label: if v == 0 goto label; if v != null goto label; v = new org.owasp.dependencycheck.exception.ExceptionCollection; specialinvoke v.()>(); v = v; label: virtualinvoke v.(v); goto label; label: return v; catch org.apache.maven.shared.transfer.artifact.resolve.ArtifactResolverException from label to label with label; } private org.owasp.dependencycheck.exception.ExceptionCollection collectMavenDependencies(org.owasp.dependencycheck.Engine, org.apache.maven.project.MavenProject, java.util.List, org.apache.maven.project.ProjectBuildingRequest, boolean) { org.apache.maven.model.DependencyManagement v, v; org.apache.maven.project.MavenProject v; org.owasp.dependencycheck.xml.pom.Model v; org.owasp.dependencycheck.utils.Filter v, v; java.lang.Object[] v, v, v, v, v, v, v; org.apache.maven.artifact.Artifact v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v; int v; org.owasp.dependencycheck.dependency.Confidence v; java.lang.Boolean v, v; org.owasp.dependencycheck.exception.DependencyNotFoundException v; org.owasp.dependencycheck.maven.BaseDependencyCheckMojo v; org.apache.maven.plugin.logging.Log v, v, v, v, v, v, v, v, v, v; java.util.function.Consumer v; org.apache.maven.project.ProjectBuildingRequest v; java.lang.Object v, v, v, v, v; org.owasp.dependencycheck.exception.ExceptionCollection v, v, v, v, v; org.apache.maven.shared.transfer.dependencies.resolve.DependencyResolver v; org.owasp.dependencycheck.dependency.Dependency v; java.lang.Throwable v, v, v, v, v; java.util.ArrayList v; java.lang.String v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v; java.io.File v, v, v, v, v, v, v, v, v; org.owasp.dependencycheck.data.nexus.MavenArtifact v; boolean v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v; java.util.List v, v, v, v, v, v, v, v, v; java.lang.Iterable v; java.util.Iterator v, v, v, v; org.owasp.dependencycheck.Engine v; v := @this: org.owasp.dependencycheck.maven.BaseDependencyCheckMojo; v := @parameter: org.owasp.dependencycheck.Engine; v := @parameter: org.apache.maven.project.MavenProject; v := @parameter: java.util.List; v := @parameter: org.apache.maven.project.ProjectBuildingRequest; v := @parameter: boolean; v = specialinvoke v.(v, v, v, v, v); v = new java.util.ArrayList; specialinvoke v.()>(); v = interfaceinvoke v.(); label: v = interfaceinvoke v.(); if v == 0 goto label; v = interfaceinvoke v.(); v = v.; v = interfaceinvoke v.(); v = interfaceinvoke v.(); v = virtualinvoke v.(v); if v != 0 goto label; v = v.; v = interfaceinvoke v.(); v = interfaceinvoke v.(); v = virtualinvoke v.(v); if v != 0 goto label; v = 0; v = null; v = null; v = null; v = null; v = null; v = "system"; v = interfaceinvoke v.(); v = interfaceinvoke v.(); v = virtualinvoke v.(v); if v == 0 goto label; v = interfaceinvoke v.(); v = interfaceinvoke v.(); if v == 0 goto label; v = interfaceinvoke v.(); v = virtualinvoke v.(); if v == 0 goto label; v = interfaceinvoke v.(); v = virtualinvoke v.(); v = interfaceinvoke v.(); v = interfaceinvoke v.(); v = interfaceinvoke v.(); v = interfaceinvoke v.(); goto label; label: v = virtualinvoke v.(); v = interfaceinvoke v.(); label: v = interfaceinvoke v.(); if v == 0 goto label; v = interfaceinvoke v.(); v = virtualinvoke v.(); if v == null goto label; v = staticinvoke (v, v); if v == 0 goto label; v = new java.io.File; v = virtualinvoke v.(); specialinvoke v.(java.lang.String)>(v); v = v; v = virtualinvoke v.(); v = interfaceinvoke v.(); v = interfaceinvoke v.(); v = interfaceinvoke v.(); v = interfaceinvoke v.(); label: if v != 0 goto label; v = virtualinvoke v.(); v = interfaceinvoke v.(); v = dynamicinvoke "makeConcatWithConstants" (v) ("Unable to resolve system scoped dependency: \u0001"); interfaceinvoke v.(v); if v != null goto label; v = new org.owasp.dependencycheck.exception.ExceptionCollection; specialinvoke v.()>(); v = v; label: v = new org.owasp.dependencycheck.exception.DependencyNotFoundException; v = interfaceinvoke v.(); v = dynamicinvoke "makeConcatWithConstants" (v) ("Unable to resolve system scoped dependency: \u0001"); specialinvoke v.(java.lang.String)>(v); virtualinvoke v.(v); goto label; label: v = interfaceinvoke v.(); v = interfaceinvoke v.(); if v == 0 goto label; v = virtualinvoke v.(); v = newarray (java.lang.Object)[1]; v = interfaceinvoke v.(); v[0] = v; v = staticinvoke ("Skipping artifact %s, already resolved", v); interfaceinvoke v.(v); v = v; goto label; label: v = interfaceinvoke v.(); if v == 0 goto label; label: v = virtualinvoke v.(); v = virtualinvoke v.(); if v != null goto label; v = null; goto label; label: v = virtualinvoke v.(); v = virtualinvoke v.(); label: v = v.; v = interfaceinvoke v.(v, v, v, null); virtualinvoke v.(); v = staticinvoke (v); interfaceinvoke v.(v); label: goto label; label: v := @caughtexception; v = virtualinvoke v.(); v = v instanceof org.eclipse.aether.resolution.DependencyResolutionException; if v == 0 goto label; v = virtualinvoke v.(); v = staticinvoke (v); interfaceinvoke v.(v); goto label; label: throw v; label: v = interfaceinvoke v.(); v = specialinvoke v.(v, v, v); label: goto label; label: v := @caughtexception; v = virtualinvoke v.(); v = newarray (java.lang.Object)[1]; v = staticinvoke (v); v[0] = v; v = staticinvoke ("Aggregate : %s", v); interfaceinvoke v.(v); v = 1; if v == 0 goto label; v = interfaceinvoke v.(); v = specialinvoke v.(v, v, v); if v == 0 goto label; v = 0; label: if v == 0 goto label; if v != null goto label; v = new org.owasp.dependencycheck.exception.ExceptionCollection; specialinvoke v.()>(); v = v; label: virtualinvoke v.(v); goto label; label: if v == 0 goto label; v = v.; v = virtualinvoke v.(); if v == 0 goto label; v = interfaceinvoke v.(); v = interfaceinvoke v.(); if v == 0 goto label; v = interfaceinvoke v.(); v = specialinvoke v.(v, v, v); if v != 0 goto label; label: v = interfaceinvoke v.(); v = interfaceinvoke v.(); v = interfaceinvoke v.(); v = interfaceinvoke v.(); v = interfaceinvoke v.(); v = interfaceinvoke v.(); label: if v == 0 goto label; if v == null goto label; v = virtualinvoke v.(); v = virtualinvoke v.(v, v); v = virtualinvoke v.(v, v); if v == null goto label; v = v.; interfaceinvoke v.(v); v = interfaceinvoke v.(); if v != 1 goto label; v = interfaceinvoke v.(0); goto label; label: v = interfaceinvoke v.(); label: v = interfaceinvoke v.(); if v == 0 goto label; v = interfaceinvoke v.(); v = virtualinvoke v.(); v = virtualinvoke v.(); v = virtualinvoke v.(v); if v == 0 goto label; v = v; label: if v == null goto label; v = new org.owasp.dependencycheck.data.nexus.MavenArtifact; specialinvoke v.(java.lang.String,java.lang.String,java.lang.String)>(v, v, v); v = ; virtualinvoke v.("pom", v, v); if v == null goto label; v = interfaceinvoke v.(); label: v = interfaceinvoke v.(); if v == 0 goto label; v = interfaceinvoke v.(); v = virtualinvoke v.(); virtualinvoke v.(v); goto label; label: v = virtualinvoke v.(); v = newarray (java.lang.Object)[2]; v = virtualinvoke v.(); v[0] = v; v = virtualinvoke v.(); v[1] = v; v = staticinvoke ("Adding project reference %s on dependency %s", v); interfaceinvoke v.(v); goto label; label: v = virtualinvoke v.(); v = interfaceinvoke v.(); if v == 0 goto label; v = newarray (java.lang.Object)[2]; v = interfaceinvoke v.(); v = interfaceinvoke v.(); v[0] = v; v = virtualinvoke v.(); v[1] = v; v = staticinvoke ("More than 1 dependency was identified in first pass scan of \'%s\' in project %s", v); v = virtualinvoke v.(); interfaceinvoke v.(v); goto label; label: v = "import"; v = interfaceinvoke v.(); v = interfaceinvoke v.(); v = virtualinvoke v.(v); if v == 0 goto label; v = newarray (java.lang.Object)[3]; v = interfaceinvoke v.(); v = interfaceinvoke v.(); v[0] = v; v = interfaceinvoke v.(); v = interfaceinvoke v.(); v[1] = v; v = virtualinvoke v.(); v[2] = v; v = staticinvoke ("Skipping \'%s:%s\' in project %s as it uses an `import` scope", v); v = virtualinvoke v.(); interfaceinvoke v.(v); goto label; label: v = "pom"; v = interfaceinvoke v.(); v = interfaceinvoke v.(); v = virtualinvoke v.(v); if v == 0 goto label; label: v = new org.owasp.dependencycheck.dependency.Dependency; v = virtualinvoke v.(); specialinvoke v.(java.io.File)>(v); v = virtualinvoke v.(); v = staticinvoke (v); staticinvoke (v, v, null, 1); virtualinvoke v.(v); label: goto label; label: v := @caughtexception; if v != null goto label; v = new org.owasp.dependencycheck.exception.ExceptionCollection; specialinvoke v.()>(); v = v; label: virtualinvoke v.(v); v = virtualinvoke v.(); v = virtualinvoke v.(); v = dynamicinvoke "makeConcatWithConstants" (v) ("Error reading pom \u0001"); interfaceinvoke v.(v, v); goto label; label: v = v.; v = interfaceinvoke v.(v); if v != 0 goto label; v = newarray (java.lang.Object)[3]; v = interfaceinvoke v.(); v = interfaceinvoke v.(); v[0] = v; v = interfaceinvoke v.(); v = interfaceinvoke v.(); v[1] = v; v = virtualinvoke v.(); v[2] = v; v = staticinvoke ("No analyzer could be found or the artifact has been scanned twice for \'%s:%s\' in project %s", v); v = virtualinvoke v.(); interfaceinvoke v.(v); goto label; label: v = newarray (java.lang.Object)[2]; v = interfaceinvoke v.(); v = interfaceinvoke v.(); v[0] = v; v = virtualinvoke v.(); v[1] = v; v = staticinvoke ("Unable to resolve \'%s\' in project %s", v); v = virtualinvoke v.(); interfaceinvoke v.(v); if v != null goto label; v = new org.owasp.dependencycheck.exception.ExceptionCollection; specialinvoke v.()>(); v = v; goto label; label: return v; catch org.apache.maven.shared.transfer.dependencies.resolve.DependencyResolverException from label to label with label; catch org.owasp.dependencycheck.exception.DependencyNotFoundException from label to label with label; catch org.apache.maven.shared.transfer.dependencies.resolve.DependencyResolverException from label to label with label; catch org.owasp.dependencycheck.analyzer.exception.AnalysisException from label to label with label; } private org.apache.maven.artifact.Artifact findInAllDeps(java.util.List, org.apache.maven.artifact.Artifact, org.apache.maven.project.MavenProject) throws org.owasp.dependencycheck.exception.DependencyNotFoundException { java.lang.Object[] v; java.util.Iterator v; org.owasp.dependencycheck.exception.DependencyNotFoundException v; org.owasp.dependencycheck.maven.BaseDependencyCheckMojo v; java.util.List v; org.apache.maven.project.MavenProject v; java.lang.Object v; org.apache.maven.artifact.Artifact v, v; java.lang.String v, v; boolean v, v; v := @this: org.owasp.dependencycheck.maven.BaseDependencyCheckMojo; v := @parameter: java.util.List; v := @parameter: org.apache.maven.artifact.Artifact; v := @parameter: org.apache.maven.project.MavenProject; v = null; v = interfaceinvoke v.(); label: v = interfaceinvoke v.(); if v == 0 goto label; v = interfaceinvoke v.(); v = specialinvoke v.(v, v); if v == 0 goto label; v = interfaceinvoke v.(); label: if v != null goto label; v = new org.owasp.dependencycheck.exception.DependencyNotFoundException; v = newarray (java.lang.Object)[2]; v[0] = v; v = virtualinvoke v.(); v[1] = v; v = staticinvoke ("Expected dependency not found in resolved artifacts for dependency %s of project-artifact %s", v); specialinvoke v.(java.lang.String)>(v); throw v; label: return v; } private boolean sameArtifact(org.apache.maven.shared.transfer.artifact.resolve.ArtifactResult, org.apache.maven.artifact.Artifact) { org.apache.maven.shared.transfer.artifact.resolve.ArtifactResult v; org.apache.maven.artifact.Artifact v, v, v, v, v, v, v; java.lang.String v, v, v, v, v, v, v, v, v, v; boolean v, v, v, v, v, v, v, v, v; org.owasp.dependencycheck.maven.BaseDependencyCheckMojo v; v := @this: org.owasp.dependencycheck.maven.BaseDependencyCheckMojo; v := @parameter: org.apache.maven.shared.transfer.artifact.resolve.ArtifactResult; v := @parameter: org.apache.maven.artifact.Artifact; if v == null goto label; v = interfaceinvoke v.(); if v == null goto label; if v != null goto label; label: return 0; label: v = interfaceinvoke v.(); v = interfaceinvoke v.(); v = interfaceinvoke v.(); v = staticinvoke (v, v); v = interfaceinvoke v.(); v = interfaceinvoke v.(); v = interfaceinvoke v.(); v = staticinvoke (v, v); v = v & v; v = interfaceinvoke v.(); v = interfaceinvoke v.(); v = interfaceinvoke v.(); v = staticinvoke (v, v); v = v & v; v = interfaceinvoke v.(); v = interfaceinvoke v.(); v = interfaceinvoke v.(); v = staticinvoke (v, v); v = v & v; v = interfaceinvoke v.(); v = interfaceinvoke v.(); v = interfaceinvoke v.(); v = staticinvoke (v, v); v = v & v; return v; } protected java.lang.String createProjectReferenceName(org.apache.maven.project.MavenProject, org.apache.maven.shared.dependency.graph.DependencyNode) { org.apache.maven.shared.dependency.graph.DependencyNode v; org.apache.maven.project.MavenProject v; org.owasp.dependencycheck.maven.BaseDependencyCheckMojo v; org.apache.maven.artifact.Artifact v; java.lang.String v, v, v; v := @this: org.owasp.dependencycheck.maven.BaseDependencyCheckMojo; v := @parameter: org.apache.maven.project.MavenProject; v := @parameter: org.apache.maven.shared.dependency.graph.DependencyNode; v = virtualinvoke v.(); v = interfaceinvoke v.(); v = interfaceinvoke v.(); v = dynamicinvoke "makeConcatWithConstants" (v, v) ("\u0001:\u0001"); return v; } private org.owasp.dependencycheck.exception.ExceptionCollection collectDependencies(org.owasp.dependencycheck.Engine, org.apache.maven.project.MavenProject, java.util.List, org.apache.maven.project.ProjectBuildingRequest, boolean) { org.apache.maven.project.MavenProject v; org.apache.maven.shared.model.fileset.FileSet v, v, v, v, v; java.util.ArrayList v, v, v; java.lang.String v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v; java.io.IOException v, v; java.io.File v, v, v, v, v, v, v, v, v, v, v, v; org.apache.maven.shared.model.fileset.util.FileSetManager v; boolean v, v, v, v, v, v, v, v, v; org.apache.maven.shared.model.fileset.Mapper v; java.util.List v, v, v, v, v, v, v, v, v, v, v; java.lang.String[] v; int v, v; java.util.Iterator v, v; org.owasp.dependencycheck.maven.BaseDependencyCheckMojo v; org.apache.maven.plugin.logging.Log v; java.util.function.Consumer v; org.apache.maven.project.ProjectBuildingRequest v; java.lang.Object v, v; org.owasp.dependencycheck.Engine v; org.owasp.dependencycheck.exception.ExceptionCollection v, v, v; v := @this: org.owasp.dependencycheck.maven.BaseDependencyCheckMojo; v := @parameter: org.owasp.dependencycheck.Engine; v := @parameter: org.apache.maven.project.MavenProject; v := @parameter: java.util.List; v := @parameter: org.apache.maven.project.ProjectBuildingRequest; v := @parameter: boolean; v = specialinvoke v.(v, v, v, v, v); v = v.; if v == null goto label; v = v.; v = interfaceinvoke v.(); if v != 0 goto label; v = v.; if v != null goto label; v = new java.util.ArrayList; specialinvoke v.()>(); v. = v; label: v = v.; v = staticinvoke (v); interfaceinvoke v.(v); label: v = v.; if v == null goto label; v = v.; v = interfaceinvoke v.(); if v == 0 goto label; label: v = new org.apache.maven.shared.model.fileset.FileSet; specialinvoke v.()>(); v = new org.apache.maven.shared.model.fileset.FileSet; specialinvoke v.()>(); v = new org.apache.maven.shared.model.fileset.FileSet; specialinvoke v.()>(); v = new org.apache.maven.shared.model.fileset.FileSet; specialinvoke v.()>(); label: v = new java.io.File; v = virtualinvoke v.(); specialinvoke v.(java.io.File,java.lang.String)>(v, "src/main/resources"); v = virtualinvoke v.(); virtualinvoke v.(v); virtualinvoke v.("**/*"); v = new java.io.File; v = virtualinvoke v.(); specialinvoke v.(java.io.File,java.lang.String)>(v, "src/main/filters"); v = virtualinvoke v.(); virtualinvoke v.(v); virtualinvoke v.("**/*"); v = new java.io.File; v = virtualinvoke v.(); specialinvoke v.(java.io.File,java.lang.String)>(v, "src/main/webapp"); v = virtualinvoke v.(); virtualinvoke v.(v); virtualinvoke v.("**/*"); v = virtualinvoke v.(); v = virtualinvoke v.(); virtualinvoke v.(v); virtualinvoke v.("package.json"); virtualinvoke v.("package-lock.json"); virtualinvoke v.("npm-shrinkwrap.json"); virtualinvoke v.("Gopkg.lock"); virtualinvoke v.("go.mod"); virtualinvoke v.("yarn.lock"); virtualinvoke v.("pnpm-lock.yaml"); label: goto label; label: v := @caughtexception; if v != null goto label; v = new org.owasp.dependencycheck.exception.ExceptionCollection; specialinvoke v.()>(); v = v; label: virtualinvoke v.(v); label: v = new java.util.ArrayList; specialinvoke v.()>(); v = v; interfaceinvoke v.(v); interfaceinvoke v.(v); interfaceinvoke v.(v); interfaceinvoke v.(v); goto label; label: if v == 0 goto label; v = new java.util.ArrayList; specialinvoke v.()>(); v = v; v = v.; v = interfaceinvoke v.(); label: v = interfaceinvoke v.(); if v == 0 goto label; v = interfaceinvoke v.(); v = new org.apache.maven.shared.model.fileset.FileSet; specialinvoke v.()>(); v = new java.io.File; v = virtualinvoke v.(); specialinvoke v.(java.lang.String)>(v); v = virtualinvoke v.(); if v == 0 goto label; v = virtualinvoke v.(); virtualinvoke v.(v); goto label; label: v = new java.io.File; v = virtualinvoke v.(); v = virtualinvoke v.(); specialinvoke v.(java.io.File,java.lang.String)>(v, v); v = virtualinvoke v.(); virtualinvoke v.(v); label: goto label; label: v := @caughtexception; if v != null goto label; v = new org.owasp.dependencycheck.exception.ExceptionCollection; specialinvoke v.()>(); v = v; label: virtualinvoke v.(v); v = virtualinvoke v.(); virtualinvoke v.(v); label: v = virtualinvoke v.(); virtualinvoke v.(v); v = virtualinvoke v.(); virtualinvoke v.(v); v = virtualinvoke v.(); virtualinvoke v.(v); v = virtualinvoke v.(); virtualinvoke v.(v); v = virtualinvoke v.(); virtualinvoke v.(v); v = virtualinvoke v.(); virtualinvoke v.(v); v = virtualinvoke v.(); virtualinvoke v.(v); v = virtualinvoke v.(); virtualinvoke v.(v); v = virtualinvoke v.(); virtualinvoke v.(v); v = virtualinvoke v.(); virtualinvoke v.(v); interfaceinvoke v.(v); goto label; label: v = v.; label: v = new org.apache.maven.shared.model.fileset.util.FileSetManager; specialinvoke v.()>(); v = interfaceinvoke v.(); label: v = interfaceinvoke v.(); if v == 0 goto label; v = interfaceinvoke v.(); v = virtualinvoke v.(); v = virtualinvoke v.(); v = dynamicinvoke "makeConcatWithConstants" (v) ("Scanning fileSet: \u0001"); interfaceinvoke v.(v); v = virtualinvoke v.(v); v = lengthof v; v = 0; label: if v >= v goto label; v = v[v]; v = new java.io.File; v = virtualinvoke v.(); specialinvoke v.(java.lang.String,java.lang.String)>(v, v); v = virtualinvoke v.(); v = virtualinvoke v.(); if v == 0 goto label; v = virtualinvoke v.(); virtualinvoke v.(v, v); label: v = v + 1; goto label; label: return v; catch java.io.IOException from label to label with label; catch java.io.IOException from label to label with label; } private boolean addReactorDependency(org.owasp.dependencycheck.Engine, org.apache.maven.artifact.Artifact, org.apache.maven.project.MavenProject) { org.apache.maven.project.MavenProject v; org.owasp.dependencycheck.maven.BaseDependencyCheckMojo v; org.apache.maven.artifact.Artifact v; org.owasp.dependencycheck.Engine v; boolean v; v := @this: org.owasp.dependencycheck.maven.BaseDependencyCheckMojo; v := @parameter: org.owasp.dependencycheck.Engine; v := @parameter: org.apache.maven.artifact.Artifact; v := @parameter: org.apache.maven.project.MavenProject; v = specialinvoke v.(v, v, v, "Unable to resolve %s as it has not been built yet - creating a virtual dependency instead."); return v; } private boolean addVirtualDependencyFromReactor(org.owasp.dependencycheck.Engine, org.apache.maven.artifact.Artifact, org.apache.maven.project.MavenProject, java.lang.String) { java.lang.Integer v; org.apache.maven.project.MavenProject v; org.owasp.dependencycheck.dependency.Dependency v; java.lang.StringBuilder v, v; java.lang.Throwable v; java.lang.Object[] v, v, v, v, v, v, v; java.lang.String v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v; org.owasp.dependencycheck.dependency.naming.PurlIdentifier v; org.apache.maven.artifact.Artifact v; boolean v, v, v, v, v, v; java.util.List v, v, v; int v; org.owasp.dependencycheck.dependency.Confidence v, v, v, v, v, v; java.util.Iterator v, v; org.owasp.dependencycheck.dependency.naming.GenericIdentifier v; org.owasp.dependencycheck.maven.BaseDependencyCheckMojo v; org.apache.maven.plugin.logging.Log v, v, v, v; org.owasp.dependencycheck.dependency.EvidenceType v, v, v, v; java.lang.Object v, v, v; org.owasp.dependencycheck.Engine v; v := @this: org.owasp.dependencycheck.maven.BaseDependencyCheckMojo; v := @parameter: org.owasp.dependencycheck.Engine; v := @parameter: org.apache.maven.artifact.Artifact; v := @parameter: org.apache.maven.project.MavenProject; v := @parameter: java.lang.String; v = virtualinvoke v.(); v = newarray (java.lang.Object)[4]; v = v.; v = interfaceinvoke v.(); v = staticinvoke (v); v[0] = v; v = interfaceinvoke v.(); v[1] = v; v = interfaceinvoke v.(); v[2] = v; v = interfaceinvoke v.(); v[3] = v; v = staticinvoke ("Checking the reactor projects (%d) for %s:%s:%s", v); interfaceinvoke v.(v); v = v.; v = interfaceinvoke v.(); label: v = interfaceinvoke v.(); if v == 0 goto label; v = interfaceinvoke v.(); v = virtualinvoke v.(); v = newarray (java.lang.Object)[6]; v = interfaceinvoke v.(); v[0] = v; v = interfaceinvoke v.(); v[1] = v; v = interfaceinvoke v.(); v[2] = v; v = virtualinvoke v.(); v[3] = v; v = virtualinvoke v.(); v[4] = v; v = virtualinvoke v.(); v[5] = v; v = staticinvoke ("Comparing %s:%s:%s to %s:%s:%s", v); interfaceinvoke v.(v); v = virtualinvoke v.(); v = interfaceinvoke v.(); v = virtualinvoke v.(v); if v == 0 goto label; v = virtualinvoke v.(); v = interfaceinvoke v.(); v = virtualinvoke v.(v); if v == 0 goto label; v = virtualinvoke v.(); v = interfaceinvoke v.(); v = virtualinvoke v.(v); if v == 0 goto label; v = newarray (java.lang.Object)[3]; v = virtualinvoke v.(); v[0] = v; v = virtualinvoke v.(); v[1] = v; v = virtualinvoke v.(); v[2] = v; v = staticinvoke ("%s:%s:%s", v); v = virtualinvoke v.(); v = newarray (java.lang.Object)[1]; v[0] = v; v = staticinvoke (v, v); interfaceinvoke v.(v); v = virtualinvoke v.(v); v = newarray (java.lang.Object)[3]; v = virtualinvoke v.(); v[0] = v; v = virtualinvoke v.(); v[1] = v; v = virtualinvoke v.(); v[2] = v; v = staticinvoke ("%s:%s:%s", v); v = staticinvoke (v); virtualinvoke v.(v); v = staticinvoke (v); virtualinvoke v.(v); v = staticinvoke (v); virtualinvoke v.(v); virtualinvoke v.("java"); virtualinvoke v.(v); v = virtualinvoke v.(); virtualinvoke v.(v); v = ; v = virtualinvoke v.(); v = ; virtualinvoke v.(v, "project", "artifactid", v, v); v = ; v = virtualinvoke v.(); v = ; virtualinvoke v.(v, "project", "artifactid", v, v); v = ; v = virtualinvoke v.(); v = ; virtualinvoke v.(v, "project", "groupid", v, v); v = ; v = virtualinvoke v.(); v = ; virtualinvoke v.(v, "project", "groupid", v, v); virtualinvoke v.("java"); label: v = new org.owasp.dependencycheck.dependency.naming.PurlIdentifier; v = interfaceinvoke v.(); v = interfaceinvoke v.(); v = interfaceinvoke v.(); v = ; specialinvoke v.(java.lang.String,java.lang.String,java.lang.String,java.lang.String,org.owasp.dependencycheck.dependency.Confidence)>("maven", v, v, v, v); v = v; label: goto label; label: v := @caughtexception; v = virtualinvoke v.(); v = dynamicinvoke "makeConcatWithConstants" (v) ("Unable to create PackageURL object:\u0001"); interfaceinvoke v.(v); v = new org.owasp.dependencycheck.dependency.naming.GenericIdentifier; v = dynamicinvoke "makeConcatWithConstants" (v) ("maven:\u0001"); v = ; specialinvoke v.(java.lang.String,org.owasp.dependencycheck.dependency.Confidence)>(v, v); v = v; label: virtualinvoke v.(v); v = newarray (java.lang.Object)[2]; v = virtualinvoke v.(); v[0] = v; v = virtualinvoke v.(); v[1] = v; v = staticinvoke ("%s:%s", v); virtualinvoke v.(v); v = virtualinvoke v.(); virtualinvoke v.(v); virtualinvoke v.(v); v = virtualinvoke v.(); if v == null goto label; v = virtualinvoke v.(); staticinvoke (v, v, "project", "description"); label: v = virtualinvoke v.(); v = interfaceinvoke v.(); label: v = interfaceinvoke v.(); if v == 0 goto label; v = interfaceinvoke v.(); v = new java.lang.StringBuilder; specialinvoke v.()>(); v = virtualinvoke v.(); if v == null goto label; v = virtualinvoke v.(); virtualinvoke v.(v); label: v = virtualinvoke v.(); if v == null goto label; v = virtualinvoke v.(" "); v = virtualinvoke v.(); virtualinvoke v.(v); label: v = virtualinvoke v.(); if v != null goto label; v = virtualinvoke v.(); virtualinvoke v.(v); goto label; label: v = virtualinvoke v.(); v = virtualinvoke v.(v); if v != 0 goto label; v = newarray (java.lang.Object)[2]; v = virtualinvoke v.(); v[0] = v; v[1] = v; v = staticinvoke ("%s%n%s", v); virtualinvoke v.(v); goto label; label: virtualinvoke v.(v); return 1; label: return 0; catch com.github.packageurl.MalformedPackageURLException from label to label with label; } org.owasp.dependencycheck.dependency.Dependency newDependency(org.apache.maven.project.MavenProject) { org.owasp.dependencycheck.maven.BaseDependencyCheckMojo v; org.apache.maven.plugin.logging.Log v, v; java.io.File v, v, v, v; org.apache.maven.project.MavenProject v; org.owasp.dependencycheck.dependency.Dependency v, v, v; boolean v, v; v := @this: org.owasp.dependencycheck.maven.BaseDependencyCheckMojo; v := @parameter: org.apache.maven.project.MavenProject; v = new java.io.File; v = virtualinvoke v.(); specialinvoke v.(java.io.File,java.lang.String)>(v, "pom.xml"); v = virtualinvoke v.(); if v == 0 goto label; v = virtualinvoke v.(); interfaceinvoke v.("Adding virtual dependency from pom.xml"); v = new org.owasp.dependencycheck.dependency.Dependency; specialinvoke v.(java.io.File,boolean)>(v, 1); return v; label: v = virtualinvoke v.(); v = virtualinvoke v.(); if v == 0 goto label; v = virtualinvoke v.(); interfaceinvoke v.("Adding virtual dependency from file"); v = new org.owasp.dependencycheck.dependency.Dependency; v = virtualinvoke v.(); specialinvoke v.(java.io.File,boolean)>(v, 1); return v; label: v = new org.owasp.dependencycheck.dependency.Dependency; specialinvoke v.(boolean)>(1); return v; } private boolean addSnapshotReactorDependency(org.owasp.dependencycheck.Engine, org.apache.maven.artifact.Artifact, org.apache.maven.project.MavenProject) { org.apache.maven.project.MavenProject v; org.owasp.dependencycheck.maven.BaseDependencyCheckMojo v; org.apache.maven.artifact.Artifact v; org.owasp.dependencycheck.Engine v; boolean v, v; v := @this: org.owasp.dependencycheck.maven.BaseDependencyCheckMojo; v := @parameter: org.owasp.dependencycheck.Engine; v := @parameter: org.apache.maven.artifact.Artifact; v := @parameter: org.apache.maven.project.MavenProject; v = interfaceinvoke v.(); if v != 0 goto label; return 0; label: v = specialinvoke v.(v, v, v, "Found snapshot reactor project in aggregate for %s - creating a virtual dependency as the snapshot found in the repository may contain outdated dependencies."); return v; } public org.apache.maven.project.ProjectBuildingRequest newResolveArtifactProjectBuildingRequest(org.apache.maven.project.MavenProject) { java.util.List v; org.apache.maven.execution.MavenSession v; org.apache.maven.project.ProjectBuildingRequest v; org.apache.maven.project.MavenProject v; org.apache.maven.project.DefaultProjectBuildingRequest v; org.owasp.dependencycheck.maven.BaseDependencyCheckMojo v; java.util.ArrayList v; v := @this: org.owasp.dependencycheck.maven.BaseDependencyCheckMojo; v := @parameter: org.apache.maven.project.MavenProject; v = new org.apache.maven.project.DefaultProjectBuildingRequest; v = v.; v = virtualinvoke v.(); specialinvoke v.(org.apache.maven.project.ProjectBuildingRequest)>(v); v = new java.util.ArrayList; v = virtualinvoke v.(); specialinvoke v.(java.util.Collection)>(v); interfaceinvoke v.(v); interfaceinvoke v.(v); return v; } protected void runCheck() throws org.apache.maven.plugin.MojoExecutionException, org.apache.maven.plugin.MojoFailureException { org.apache.maven.project.MavenProject v, v, v, v; boolean v, v, v, v, v, v; java.util.Set v; org.owasp.dependencycheck.dependency.Dependency[] v, v; java.lang.Throwable v, v, v, v, v; org.apache.maven.model.Build v; java.lang.String v, v, v, v, v; java.util.Iterator v; org.owasp.dependencycheck.maven.BaseDependencyCheckMojo v; org.apache.maven.plugin.MojoExecutionException v, v, v; org.apache.maven.plugin.logging.Log v, v, v, v; org.owasp.dependencycheck.utils.Settings v, v, v; java.io.File v, v; java.lang.Object v; org.owasp.dependencycheck.Engine v; org.owasp.dependencycheck.exception.ExceptionCollection v, v; v := @this: org.owasp.dependencycheck.maven.BaseDependencyCheckMojo; specialinvoke v.(); label: v = virtualinvoke v.(); label: v = virtualinvoke v.(v); label: virtualinvoke v.(); label: goto label; label: v := @caughtexception; v = specialinvoke v.(v, v); label: if v == null goto label; v = virtualinvoke v.(); if v != 0 goto label; label: v = virtualinvoke v.(); v = virtualinvoke v.(v); if v != null goto label; v = new java.io.File; v = virtualinvoke v.(); v = virtualinvoke v.(); v = virtualinvoke v.(); specialinvoke v.(java.lang.String)>(v); v = v; label: v = virtualinvoke v.(); v = specialinvoke v.(); v = interfaceinvoke v.(); label: v = interfaceinvoke v.(); if v == 0 goto label; v = interfaceinvoke v.(); v = virtualinvoke v.(); v = virtualinvoke v.(); v = virtualinvoke v.(); v = virtualinvoke v.(); virtualinvoke v.(v, v, v, v, v, v, v); goto label; label: v := @caughtexception; if v != null goto label; v = new org.owasp.dependencycheck.exception.ExceptionCollection; specialinvoke v.(java.lang.Throwable)>(v); v = v; goto label; label: virtualinvoke v.(v); label: v = virtualinvoke v.(); if v == 0 goto label; v = new org.apache.maven.plugin.MojoExecutionException; specialinvoke v.(java.lang.String,java.lang.Exception)>("One or more exceptions occurred during dependency-check analysis", v); throw v; label: v = virtualinvoke v.(); interfaceinvoke v.("Error writing the report", v); label: v = virtualinvoke v.(); v = virtualinvoke v.(); virtualinvoke v.(v, v); v = virtualinvoke v.(); virtualinvoke v.(v); if v == null goto label; v = virtualinvoke v.(); if v == 0 goto label; v = new org.apache.maven.plugin.MojoExecutionException; specialinvoke v.(java.lang.String,java.lang.Exception)>("One or more exceptions occurred during dependency-check analysis", v); throw v; label: virtualinvoke v.(); goto label; label: v := @caughtexception; throw v; label: v = virtualinvoke v.(); virtualinvoke v.(); goto label; label: v := @caughtexception; v = virtualinvoke v.(); v = interfaceinvoke v.(); if v == 0 goto label; v = virtualinvoke v.(); interfaceinvoke v.("Database connection error", v); label: v = virtualinvoke v.(); if v == 0 goto label; v = new org.apache.maven.plugin.MojoExecutionException; specialinvoke v.(java.lang.String,java.lang.Exception)>("An exception occurred connecting to the local database. Please see the log file for more details.", v); throw v; label: v = virtualinvoke v.(); interfaceinvoke v.("An exception occurred connecting to the local database. Please see the log file for more details.", v); label: v = virtualinvoke v.(); virtualinvoke v.(); goto label; label: v := @caughtexception; v = virtualinvoke v.(); virtualinvoke v.(); throw v; label: return; catch org.owasp.dependencycheck.exception.ExceptionCollection from label to label with label; catch org.owasp.dependencycheck.exception.ReportException from label to label with label; catch java.lang.Throwable from label to label with label; catch org.owasp.dependencycheck.data.nvdcve.DatabaseException from label to label with label; catch java.lang.Throwable from label to label with label; catch java.lang.Throwable from label to label with label; } private org.owasp.dependencycheck.exception.ExceptionCollection handleAnalysisExceptions(org.owasp.dependencycheck.exception.ExceptionCollection, org.owasp.dependencycheck.exception.ExceptionCollection) throws org.apache.maven.plugin.MojoExecutionException { java.lang.Object[] v, v; org.apache.maven.project.MavenProject v, v; java.lang.String v, v, v, v; boolean v, v, v, v, v; org.owasp.dependencycheck.maven.BaseDependencyCheckMojo v; org.apache.maven.plugin.MojoExecutionException v; org.apache.maven.plugin.logging.Log v, v, v, v, v; java.util.List v, v; org.owasp.dependencycheck.exception.ExceptionCollection v, v, v; v := @this: org.owasp.dependencycheck.maven.BaseDependencyCheckMojo; v := @parameter: org.owasp.dependencycheck.exception.ExceptionCollection; v := @parameter: org.owasp.dependencycheck.exception.ExceptionCollection; v = v; if v != null goto label; v = v; goto label; label: v = virtualinvoke v.(); v = virtualinvoke v.(); interfaceinvoke v.(v); v = virtualinvoke v.(); if v == 0 goto label; virtualinvoke v.(1); label: v = virtualinvoke v.(); if v == 0 goto label; v = newarray (java.lang.Object)[1]; v = virtualinvoke v.(); v = virtualinvoke v.(); v[0] = v; v = staticinvoke ("Fatal exception(s) analyzing %s", v); v = virtualinvoke v.(); if v == 0 goto label; v = new org.apache.maven.plugin.MojoExecutionException; specialinvoke v.(java.lang.String,java.lang.Exception)>(v, v); throw v; label: v = virtualinvoke v.(); interfaceinvoke v.(v); v = virtualinvoke v.(); v = interfaceinvoke v.(); if v == 0 goto label; v = virtualinvoke v.(); interfaceinvoke v.(v); goto label; label: v = newarray (java.lang.Object)[1]; v = virtualinvoke v.(); v = virtualinvoke v.(); v[0] = v; v = staticinvoke ("Exception(s) analyzing %s", v); v = virtualinvoke v.(); v = interfaceinvoke v.(); if v == 0 goto label; v = virtualinvoke v.(); interfaceinvoke v.(v, v); label: return v; } protected abstract org.owasp.dependencycheck.exception.ExceptionCollection scanDependencies(org.owasp.dependencycheck.Engine) throws org.apache.maven.plugin.MojoExecutionException; public java.io.File getReportOutputDirectory() { org.owasp.dependencycheck.maven.BaseDependencyCheckMojo v; java.io.File v; v := @this: org.owasp.dependencycheck.maven.BaseDependencyCheckMojo; v = v.; return v; } public void setReportOutputDirectory(java.io.File) { org.owasp.dependencycheck.maven.BaseDependencyCheckMojo v; java.io.File v; v := @this: org.owasp.dependencycheck.maven.BaseDependencyCheckMojo; v := @parameter: java.io.File; v. = v; return; } public java.io.File getOutputDirectory() { org.owasp.dependencycheck.maven.BaseDependencyCheckMojo v; java.io.File v; v := @this: org.owasp.dependencycheck.maven.BaseDependencyCheckMojo; v = v.; return v; } public final boolean isExternalReport() { org.owasp.dependencycheck.maven.BaseDependencyCheckMojo v; v := @this: org.owasp.dependencycheck.maven.BaseDependencyCheckMojo; return 1; } public java.lang.String getOutputName() { org.owasp.dependencycheck.maven.BaseDependencyCheckMojo v; java.util.Set v; org.apache.maven.plugin.logging.Log v; int v; boolean v, v, v, v, v, v; v := @this: org.owasp.dependencycheck.maven.BaseDependencyCheckMojo; v = specialinvoke v.(); v = interfaceinvoke v.("HTML"); if v != 0 goto label; v = interfaceinvoke v.("ALL"); if v != 0 goto label; v = interfaceinvoke v.(); if v <= 1 goto label; label: return "dependency-check-report"; label: v = interfaceinvoke v.("XML"); if v == 0 goto label; return "dependency-check-report.xml"; label: v = interfaceinvoke v.("JUNIT"); if v == 0 goto label; return "dependency-check-junit.xml"; label: v = interfaceinvoke v.("JSON"); if v == 0 goto label; return "dependency-check-report.json"; label: v = interfaceinvoke v.("CSV"); if v == 0 goto label; return "dependency-check-report.csv"; label: v = virtualinvoke v.(); interfaceinvoke v.("Unknown report format used during site generation."); return "dependency-check-report"; } public java.lang.String getCategoryName() { org.owasp.dependencycheck.maven.BaseDependencyCheckMojo v; v := @this: org.owasp.dependencycheck.maven.BaseDependencyCheckMojo; return "Project Reports"; } protected org.owasp.dependencycheck.Engine initializeEngine() throws org.owasp.dependencycheck.data.nvdcve.DatabaseException { org.owasp.dependencycheck.maven.BaseDependencyCheckMojo v; org.owasp.dependencycheck.Engine v; org.owasp.dependencycheck.utils.Settings v; v := @this: org.owasp.dependencycheck.maven.BaseDependencyCheckMojo; virtualinvoke v.(); v = new org.owasp.dependencycheck.Engine; v = v.; specialinvoke v.(org.owasp.dependencycheck.utils.Settings)>(v); return v; } protected void populateSettings() { org.apache.maven.settings.Settings v; java.lang.Integer v, v, v, v, v; java.lang.ClassLoader v; java.util.function.Supplier v; java.io.IOException v; org.apache.maven.settings.Proxy v; int v, v; java.lang.Boolean v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v; org.owasp.dependencycheck.maven.BaseDependencyCheckMojo v; org.apache.maven.plugin.logging.Log v, v, v, v; org.owasp.dependencycheck.maven.ArtifactScopeExcluded v; java.lang.Class v; java.lang.Object v; java.lang.Throwable v, v; java.lang.String v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v; org.owasp.dependencycheck.maven.Retirejs v, v, v; boolean v, v, v, v, v, v, v, v, v; java.util.function.Predicate v; org.owasp.dependencycheck.maven.ArtifactTypeExcluded v; float v; java.util.Optional v, v; java.lang.String[] v, v; org.owasp.dependencycheck.utils.Settings v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v; java.io.InputStream v; v := @this: org.owasp.dependencycheck.maven.BaseDependencyCheckMojo; v = new org.owasp.dependencycheck.utils.Settings; specialinvoke v.()>(); v. = v; label: v = virtualinvoke v.(); v = virtualinvoke v.(); v = virtualinvoke v.("mojo.properties"); v = v.; virtualinvoke v.(v); label: goto label; label: v := @caughtexception; v = virtualinvoke v.(); interfaceinvoke v.("Unable to load the dependency-check maven mojo.properties file."); v = virtualinvoke v.(); v = interfaceinvoke v.(); if v == 0 goto label; v = virtualinvoke v.(); interfaceinvoke v.("", v); label: goto label; label: v := @caughtexception; throw v; label: v = v.; v = v.; v = virtualinvoke v.(); virtualinvoke v.("odc.maven.local.repo", v); v = v.; v = v.; virtualinvoke v.("odc.autoupdate", v); v = v.; v = v.; virtualinvoke v.("analyzer.experimental.enabled", v); v = v.; v = v.; virtualinvoke v.("analyzer.retired.enabled", v); v = v.; v = v.; virtualinvoke v.("analyzer.golang.dep.enabled", v); v = v.; v = v.; virtualinvoke v.("analyzer.golang.mod.enabled", v); v = v.; v = v.; virtualinvoke v.("analyzer.golang.path", v); v = v.; v = v.; virtualinvoke v.("analyzer.yarn.path", v); v = v.; v = v.; virtualinvoke v.("analyzer.pnpm.path", v); v = specialinvoke v.(); if v == null goto label; v = v.; v = virtualinvoke v.(); virtualinvoke v.("proxy.server", v); v = v.; v = virtualinvoke v.(); v = staticinvoke (v); virtualinvoke v.("proxy.port", v); v = virtualinvoke v.(); v = virtualinvoke v.(); if v == null goto label; v = virtualinvoke v.(); if v != 0 goto label; v = v.; v = virtualinvoke v.("proxy.disableSchemas", 1); if v == 0 goto label; staticinvoke ("jdk.http.auth.tunneling.disabledSchemes", ""); label: v = specialinvoke v.(v); label: goto label; label: v := @caughtexception; v = virtualinvoke v.(); v = specialinvoke v.("proxy", v, v, v); label: v = v.; virtualinvoke v.("proxy.username", v); v = v.; virtualinvoke v.("proxy.password", v); v = v.; v = virtualinvoke v.(); virtualinvoke v.("proxy.nonproxyhosts", v); label: v = specialinvoke v.(); v = v.; virtualinvoke v.("suppression.file", v); v = v.; v = v.; v = staticinvoke (v); virtualinvoke v.("updater.versioncheck.enabled", v); v = v.; v = v.; virtualinvoke v.("connection.timeout", v); v = v.; v = v.; virtualinvoke v.("connection.read.timeout", v); v = v.; v = v.; virtualinvoke v.("hints.file", v); v = v.; v = v.; virtualinvoke v.("junit.fail.on.cvss", v); v = v.; v = v.; virtualinvoke v.("analyzer.jar.enabled", v); v = v.; v = v.; virtualinvoke v.("analyzer.nuspec.enabled", v); v = v.; v = v.; virtualinvoke v.("analyzer.nugetconf.enabled", v); v = v.; v = v.; virtualinvoke v.("analyzer.central.enabled", v); v = v.; v = v.; virtualinvoke v.("analyzer.central.use.cache", v); v = v.; v = v.; virtualinvoke v.("analyzer.artifactory.enabled", v); v = v.; v = v.; virtualinvoke v.("analyzer.nexus.enabled", v); v = v.; v = v.; virtualinvoke v.("analyzer.assembly.enabled", v); v = v.; v = v.; virtualinvoke v.("analyzer.msbuildproject.enabled", v); v = v.; v = v.; virtualinvoke v.("analyzer.archive.enabled", v); v = v.; v = v.; virtualinvoke v.("extensions.zip", v); v = v.; v = v.; virtualinvoke v.("analyzer.assembly.dotnet.path", v); v = v.; v = v.; virtualinvoke v.("analyzer.nexus.url", v); v = v.; specialinvoke v.(v, "analyzer.nexus.username", "analyzer.nexus.password"); v = v.; v = v.; virtualinvoke v.("analyzer.nexus.proxy", v); v = v.; v = v.; virtualinvoke v.("analyzer.artifactory.url", v); v = v.; v = v.; virtualinvoke v.("analyzer.artifactory.proxy", v); v = v.; v = v.; virtualinvoke v.("analyzer.artifactory.parallel.analysis", v); v = ; v = v.; v = virtualinvoke v.(v); if v == 0 goto label; v = v.; if v == null goto label; v = v.; specialinvoke v.(v, "analyzer.artifactory.api.username", "analyzer.artifactory.api.token"); goto label; label: v = v.; v = v.; virtualinvoke v.("analyzer.artifactory.api.username", v); v = v.; v = v.; virtualinvoke v.("analyzer.artifactory.api.token", v); label: v = v.; v = v.; virtualinvoke v.("analyzer.artifactory.bearer.token", v); label: v = v.; v = v.; virtualinvoke v.("analyzer.python.distribution.enabled", v); v = v.; v = v.; virtualinvoke v.("analyzer.python.package.enabled", v); v = v.; v = v.; virtualinvoke v.("analyzer.ruby.gemspec.enabled", v); v = v.; v = v.; virtualinvoke v.("analyzer.openssl.enabled", v); v = v.; v = v.; virtualinvoke v.("analyzer.cmake.enabled", v); v = v.; v = v.; virtualinvoke v.("analyzer.autoconf.enabled", v); v = v.; v = v.; virtualinvoke v.("analyzer.pip.enabled", v); v = v.; v = v.; virtualinvoke v.("analyzer.pipfile.enabled", v); v = v.; v = v.; virtualinvoke v.("analyzer.composer.lock.enabled", v); v = v.; v = v.; virtualinvoke v.("analyzer.cpanfile.enabled", v); v = v.; v = v.; virtualinvoke v.("analyzer.node.package.enabled", v); v = v.; v = v.; virtualinvoke v.("analyzer.node.audit.enabled", v); v = v.; v = v.; virtualinvoke v.("analyzer.node.audit.use.cache", v); v = v.; v = v.; virtualinvoke v.("analyzer.node.package.skipdev", v); v = v.; v = v.; virtualinvoke v.("analyzer.node.audit.skipdev", v); v = v.; v = v.; virtualinvoke v.("analyzer.yarn.audit.enabled", v); v = v.; v = v.; virtualinvoke v.("analyzer.pnpm.audit.enabled", v); v = v.; v = v.; virtualinvoke v.("analyzer.retirejs.enabled", v); v = v.; v = v.; virtualinvoke v.("analyzer.retirejs.repo.js.url", v); v = v.; v = v.; virtualinvoke v.("analyzer.retirejs.forceupdate", v); v = v.; v = v.; virtualinvoke v.("analyzer.mix.audit.enabled", v); v = v.; v = v.; virtualinvoke v.("analyzer.mix.audit.path", v); v = v.; v = v.; virtualinvoke v.("analyzer.bundle.audit.enabled", v); v = v.; v = v.; virtualinvoke v.("analyzer.bundle.audit.path", v); v = v.; v = v.; virtualinvoke v.("analyzer.bundle.audit.working.directory", v); v = v.; v = v.; virtualinvoke v.("analyzer.cocoapods.enabled", v); v = v.; v = v.; virtualinvoke v.("analyzer.swift.package.manager.enabled", v); v = v.; v = v.; virtualinvoke v.("analyzer.swift.package.resolved.enabled", v); v = v.; v = v.; virtualinvoke v.("analyzer.ossindex.enabled", v); v = v.; v = v.; virtualinvoke v.("analyzer.ossindex.url", v); v = v.; specialinvoke v.(v, "analyzer.ossindex.user", "analyzer.ossindex.password"); v = v.; v = v.; virtualinvoke v.("analyzer.ossindex.use.cache", v); v = v.; v = v.; virtualinvoke v.("analyzer.ossindex.remote-error.warn-only", v); v = v.; if v == null goto label; v = v.; v = v.; v = virtualinvoke v.(); virtualinvoke v.("analyzer.retirejs.filternonvulnerable", v); v = v.; v = v.; v = virtualinvoke v.(); virtualinvoke v.("analyzer.retirejs.filters", v); label: v = v.; v = v.; virtualinvoke v.("data.driver_name", v); v = v.; v = v.; virtualinvoke v.("data.driver_path", v); v = v.; v = v.; virtualinvoke v.("data.connection_string", v); v = v.; if v != null goto label; v = v.; if v != null goto label; v = v.; if v == null goto label; v = v.; specialinvoke v.(v, "data.user", "data.password"); goto label; label: v = v.; v = v.; virtualinvoke v.("data.user", v); v = v.; v = v.; virtualinvoke v.("data.password", v); label: v = v.; v = v.; virtualinvoke v.("data.directory", v); v = v.; v = v.; virtualinvoke v.("data.file_name", v); v = v.; v = staticinvoke (v); v = staticinvoke (); v = virtualinvoke v.(v); v = staticinvoke (v); v = virtualinvoke v.(v); v = v.; virtualinvoke v.("cve.url.modified", v); v = v.; v = v.; virtualinvoke v.("cve.url.base", v); v = v.; v = v.; virtualinvoke v.("cve.download.waittime", v); v = v.; v = v.; virtualinvoke v.("cve.check.validforhours", v); v = v.; if v == null goto label; v = v.; v = virtualinvoke v.(); if v >= 2002 goto label; v = virtualinvoke v.(); interfaceinvoke v.("Invalid configuration: cveStartYear must be 2002 or greater"); v = staticinvoke (2002); v. = v; label: v = v.; v = v.; virtualinvoke v.("cve.startyear", v); v = v.; v = v.; virtualinvoke v.("odc.reports.pretty.print", v); v = new org.owasp.dependencycheck.maven.ArtifactScopeExcluded; v = v.; v = v.; v = v.; v = v.; specialinvoke v.(boolean,boolean,boolean,boolean)>(v, v, v, v); v. = v; v = new org.owasp.dependencycheck.maven.ArtifactTypeExcluded; v = v.; specialinvoke v.(java.lang.String)>(v); v. = v; v = v.; if v != null goto label; v = v.; if v != null goto label; v = v.; if v == null goto label; v = v.; specialinvoke v.(v, "cve.user", "cve.password"); goto label; label: v = v.; v = v.; virtualinvoke v.("cve.user", v); v = v.; v = v.; virtualinvoke v.("cve.password", v); label: v = v.; if v != null goto label; v = v.; if v != null goto label; v = v.; if v == null goto label; v = v.; specialinvoke v.(v, "suppression.file.user", "suppression.file.password"); goto label; label: v = v.; v = v.; virtualinvoke v.("suppression.file.user", v); v = v.; v = v.; virtualinvoke v.("suppression.file.password", v); label: return; catch java.io.IOException from label to label with label; catch java.lang.Throwable from label to label with label; catch java.lang.Throwable from label to label with label; catch org.sonatype.plexus.components.sec.dispatcher.SecDispatcherException from label to label with label; } private void configureServerCredentials(java.lang.String, java.lang.String, java.lang.String) { java.lang.Throwable v; java.lang.Object[] v; org.apache.maven.settings.Server v; org.apache.maven.settings.Settings v; java.lang.String v, v, v, v, v, v, v, v; org.owasp.dependencycheck.maven.BaseDependencyCheckMojo v; org.apache.maven.plugin.logging.Log v; org.owasp.dependencycheck.utils.Settings v, v; v := @this: org.owasp.dependencycheck.maven.BaseDependencyCheckMojo; v := @parameter: java.lang.String; v := @parameter: java.lang.String; v := @parameter: java.lang.String; if v == null goto label; v = v.; v = virtualinvoke v.(v); if v == null goto label; v = virtualinvoke v.(); label: v = virtualinvoke v.(); v = specialinvoke v.(v); label: goto label; label: v := @caughtexception; v = virtualinvoke v.(); v = specialinvoke v.("server", v, v, v); label: v = v.; virtualinvoke v.(v, v); v = v.; virtualinvoke v.(v, v); goto label; label: v = virtualinvoke v.(); v = newarray (java.lang.Object)[1]; v[0] = v; v = staticinvoke ("Server \'%s\' not found in the settings.xml file", v); interfaceinvoke v.(v); label: return; catch org.sonatype.plexus.components.sec.dispatcher.SecDispatcherException from label to label with label; } private java.lang.String decryptPasswordFromSettings(java.lang.String) throws org.sonatype.plexus.components.sec.dispatcher.SecDispatcherException { org.sonatype.plexus.components.sec.dispatcher.SecDispatcher v, v, v; org.owasp.dependencycheck.maven.BaseDependencyCheckMojo v; java.lang.String v, v; boolean v; v := @this: org.owasp.dependencycheck.maven.BaseDependencyCheckMojo; v := @parameter: java.lang.String; v = v.; v = v instanceof org.sonatype.plexus.components.sec.dispatcher.DefaultSecDispatcher; if v == 0 goto label; v = v.; virtualinvoke v.("~/.m2/settings-security.xml"); label: v = v.; v = interfaceinvoke v.(v); return v; } private java.lang.String handleSecDispatcherException(java.lang.String, java.lang.String, java.lang.String, org.sonatype.plexus.components.sec.dispatcher.SecDispatcherException) { java.lang.Throwable v, v, v, v; java.lang.Object[] v, v; org.sonatype.plexus.components.sec.dispatcher.SecDispatcherException v; java.lang.String v, v, v, v, v, v, v, v; boolean v, v, v, v; org.owasp.dependencycheck.maven.BaseDependencyCheckMojo v; org.apache.maven.plugin.logging.Log v, v; v := @this: org.owasp.dependencycheck.maven.BaseDependencyCheckMojo; v := @parameter: java.lang.String; v := @parameter: java.lang.String; v := @parameter: java.lang.String; v := @parameter: org.sonatype.plexus.components.sec.dispatcher.SecDispatcherException; v = v; v = virtualinvoke v.(); v = v instanceof java.io.FileNotFoundException; if v != 0 goto label; v = virtualinvoke v.(); if v == null goto label; v = virtualinvoke v.(); v = virtualinvoke v.(); v = v instanceof java.io.FileNotFoundException; if v == 0 goto label; label: v = virtualinvoke v.("{"); if v == 0 goto label; v = virtualinvoke v.("}"); if v == 0 goto label; v = virtualinvoke v.(); v = newarray (java.lang.Object)[4]; v[0] = v; v[1] = v; v[2] = v; v = virtualinvoke v.(); v[3] = v; v = staticinvoke ("Unable to decrypt the %s password for %s id \'%s\' in settings.xml%n\tCause: %s", v); interfaceinvoke v.(v); goto label; label: v = v; goto label; label: v = virtualinvoke v.(); v = newarray (java.lang.Object)[4]; v[0] = v; v[1] = v; v[2] = v; v = virtualinvoke v.(); v[3] = v; v = staticinvoke ("Unable to decrypt the %s password for %s id \'%s\' in settings.xml%n\tCause: %s", v); interfaceinvoke v.(v); label: return v; } private java.lang.String[] determineSuppressions() { java.lang.Object[] v; org.owasp.dependencycheck.maven.BaseDependencyCheckMojo v; java.lang.String[] v, v; int v, v, v, v; java.lang.String v, v, v; v := @this: org.owasp.dependencycheck.maven.BaseDependencyCheckMojo; v = v.; v = v.; if v == null goto label; if v != null goto label; v = newarray (java.lang.String)[1]; v = v.; v[0] = v; goto label; label: v = lengthof v; v = v + 1; v = staticinvoke (v, v); v = lengthof v; v = v - 1; v = v.; v[v] = v; label: return v; } private void muteJCS() { org.slf4j.Logger v; org.owasp.dependencycheck.maven.BaseDependencyCheckMojo v; java.lang.String[] v; java.lang.reflect.Field v; org.apache.maven.plugin.logging.Log v; java.lang.Integer v; java.lang.Exception v; int v, v; java.lang.Class v, v; java.lang.String v, v; v := @this: org.owasp.dependencycheck.maven.BaseDependencyCheckMojo; v = newarray (java.lang.String)[12]; v[0] = "org.apache.commons.jcs.auxiliary.disk.AbstractDiskCache"; v[1] = "org.apache.commons.jcs.engine.memory.AbstractMemoryCache"; v[2] = "org.apache.commons.jcs.engine.control.CompositeCache"; v[3] = "org.apache.commons.jcs.auxiliary.disk.indexed.IndexedDiskCache"; v[4] = "org.apache.commons.jcs.engine.control.CompositeCache"; v[5] = "org.apache.commons.jcs.engine.memory.AbstractMemoryCache"; v[6] = "org.apache.commons.jcs.engine.control.event.ElementEventQueue"; v[7] = "org.apache.commons.jcs.engine.memory.AbstractDoubleLinkedListMemoryCache"; v[8] = "org.apache.commons.jcs.auxiliary.AuxiliaryCacheConfigurator"; v[9] = "org.apache.commons.jcs.engine.control.CompositeCacheManager"; v[10] = "org.apache.commons.jcs.utils.threadpool.ThreadPoolManager"; v[11] = "org.apache.commons.jcs.engine.control.CompositeCacheConfigurator"; v = lengthof v; v = 0; label: if v >= v goto label; v = v[v]; label: v = staticinvoke (v); v = virtualinvoke v.(); v = virtualinvoke v.(); v = virtualinvoke v.("currentLogLevel"); virtualinvoke v.(1); v = staticinvoke (40); virtualinvoke v.(v, v); label: goto label; label: v := @caughtexception; v = virtualinvoke v.(); v = dynamicinvoke "makeConcatWithConstants" (v) ("Failed to reset the log level of \u, it will continue being noisy."); interfaceinvoke v.(v); label: v = v + 1; goto label; label: return; catch java.lang.IllegalAccessException from label to label with label; catch java.lang.IllegalArgumentException from label to label with label; catch java.lang.NoSuchFieldException from label to label with label; catch java.lang.SecurityException from label to label with label; } private org.apache.maven.settings.Proxy getMavenProxy() { org.apache.maven.settings.Settings v, v; java.lang.String v, v, v; boolean v, v, v, v, v; java.util.Iterator v, v; org.owasp.dependencycheck.maven.BaseDependencyCheckMojo v; java.util.List v; java.lang.Object v, v; v := @this: org.owasp.dependencycheck.maven.BaseDependencyCheckMojo; v = v.; if v == null goto label; v = v.; v = virtualinvoke v.(); if v == null goto label; v = interfaceinvoke v.(); if v != 0 goto label; v = v.; if v == null goto label; v = interfaceinvoke v.(); label: v = interfaceinvoke v.(); if v == 0 goto label; v = interfaceinvoke v.(); v = v.; v = virtualinvoke v.(); v = virtualinvoke v.(v); if v == 0 goto label; return v; label: v = interfaceinvoke v.(); label: v = interfaceinvoke v.(); if v == 0 goto label; v = interfaceinvoke v.(); v = virtualinvoke v.(); if v == 0 goto label; return v; label: return null; } protected org.apache.maven.project.MavenProject getProject() { org.owasp.dependencycheck.maven.BaseDependencyCheckMojo v; org.apache.maven.project.MavenProject v; v := @this: org.owasp.dependencycheck.maven.BaseDependencyCheckMojo; v = v.; return v; } protected java.util.List getReactorProjects() { org.owasp.dependencycheck.maven.BaseDependencyCheckMojo v; java.util.List v; v := @this: org.owasp.dependencycheck.maven.BaseDependencyCheckMojo; v = v.; return v; } private java.util.Set getFormats() { org.owasp.dependencycheck.maven.BaseDependencyCheckMojo v; java.lang.String[] v, v, v; java.util.HashSet v, v, v; java.util.function.Consumer v, v; java.util.List v; int v; java.lang.String v, v; boolean v, v; v := @this: org.owasp.dependencycheck.maven.BaseDependencyCheckMojo; v = new java.util.HashSet; specialinvoke v.()>(); v = v.; if v == null goto label; v = v.; v = lengthof v; if v != 0 goto label; label: v = new java.util.HashSet; specialinvoke v.()>(); goto label; label: v = new java.util.HashSet; v = v.; v = staticinvoke (v); specialinvoke v.(java.util.Collection)>(v); label: v = v; v = staticinvoke (v); interfaceinvoke v.(v); v = staticinvoke (v); interfaceinvoke v.(v); v = interfaceinvoke v.("true"); if v == 0 goto label; interfaceinvoke v.("true"); label: v = v.; if v == null goto label; v = interfaceinvoke v.(); if v == 0 goto label; v = v.; interfaceinvoke v.(v); label: return v; } public java.util.List getExcludes() { java.util.List v, v; org.owasp.dependencycheck.maven.BaseDependencyCheckMojo v; java.util.ArrayList v; v := @this: org.owasp.dependencycheck.maven.BaseDependencyCheckMojo; v = v.; if v != null goto label; v = new java.util.ArrayList; specialinvoke v.()>(); v. = v; label: v = v.; return v; } protected org.owasp.dependencycheck.utils.Filter getArtifactScopeExcluded() { org.owasp.dependencycheck.maven.BaseDependencyCheckMojo v; org.owasp.dependencycheck.utils.Filter v; v := @this: org.owasp.dependencycheck.maven.BaseDependencyCheckMojo; v = v.; return v; } protected org.owasp.dependencycheck.utils.Settings getSettings() { org.owasp.dependencycheck.maven.BaseDependencyCheckMojo v; org.owasp.dependencycheck.utils.Settings v; v := @this: org.owasp.dependencycheck.maven.BaseDependencyCheckMojo; v = v.; return v; } protected void checkForFailure(org.owasp.dependencycheck.dependency.Dependency[]) throws org.apache.maven.plugin.MojoFailureException { java.lang.Float v; org.owasp.dependencycheck.dependency.CvssV3 v, v; byte v, v, v, v, v, v, v; org.owasp.dependencycheck.dependency.Dependency v; boolean v, v, v, v, v; java.util.Set v; org.owasp.dependencycheck.dependency.Dependency[] v; org.owasp.dependencycheck.dependency.CvssV2 v, v; float v, v, v, v, v, v, v, v, v, v, v; java.lang.StringBuilder v, v, v, v; java.lang.Object[] v, v, v; int v, v, v; java.lang.String v, v, v, v, v, v; java.util.Iterator v; org.owasp.dependencycheck.maven.BaseDependencyCheckMojo v; org.apache.maven.plugin.MojoFailureException v; java.lang.Object v; v := @this: org.owasp.dependencycheck.maven.BaseDependencyCheckMojo; v := @parameter: org.owasp.dependencycheck.dependency.Dependency[]; v = new java.lang.StringBuilder; specialinvoke v.()>(); v = lengthof v; v = 0; label: if v >= v goto label; v = v[v]; v = 1; v = virtualinvoke v.(); v = interfaceinvoke v.(); label: v = interfaceinvoke v.(); if v == 0 goto label; v = interfaceinvoke v.(); v = virtualinvoke v.(); if v == null goto label; v = virtualinvoke v.(); v = virtualinvoke v.(); goto label; label: v = -1.0F; label: v = v; v = virtualinvoke v.(); if v == null goto label; v = virtualinvoke v.(); v = virtualinvoke v.(); goto label; label: v = -1.0F; label: v = v; v = virtualinvoke v.(); if v == null goto label; v = virtualinvoke v.(); v = staticinvoke (v); goto label; label: v = -1.0F; label: v = v; v = v.; if v != 0 goto label; v = v.; v = v cmpl v; if v >= 0 goto label; v = v.; v = v cmpl v; if v >= 0 goto label; v = v.; v = v cmpl v; if v >= 0 goto label; v = v.; v = v cmpg 0.0F; if v > 0 goto label; label: v = virtualinvoke v.(); v = v cmpl 0.0F; if v < 0 goto label; v = dynamicinvoke "makeConcatWithConstants" (v, v) ("\u0001(\u)"); goto label; label: v = v cmpl 0.0F; if v < 0 goto label; v = dynamicinvoke "makeConcatWithConstants" (v, v) ("\u0001(\u)"); goto label; label: v = v cmpl 0.0F; if v < 0 goto label; v = dynamicinvoke "makeConcatWithConstants" (v, v) ("\u0001(\u)"); label: if v == 0 goto label; v = 0; v = ; v = virtualinvoke v.(v); v = virtualinvoke v.(); v = virtualinvoke v.(v); virtualinvoke v.(": "); virtualinvoke v.(v); goto label; label: v = virtualinvoke v.(", "); virtualinvoke v.(v); goto label; label: v = v + 1; goto label; label: v = virtualinvoke v.(); if v <= 0 goto label; v = v.; if v == 0 goto label; v = v.; if v == 0 goto label; v = newarray (java.lang.Object)[1]; v[0] = v; v = staticinvoke ("%n%nOne or more dependencies were identified with vulnerabilities: %n%s%n%nSee the dependency-check report for more details.%n%n", v); goto label; label: v = newarray (java.lang.Object)[2]; v = v.; v = staticinvoke (v); v[0] = v; v[1] = v; v = staticinvoke ("%n%nOne or more dependencies were identified with vulnerabilities that have a CVSS score greater than or equal to \'%.1f\': %n%s%n%nSee the dependency-check report for more details.%n%n", v); goto label; label: v = newarray (java.lang.Object)[0]; v = staticinvoke ("%n%nOne or more dependencies were identified with vulnerabilities.%n%nSee the dependency-check report for more details.%n%n", v); label: v = new org.apache.maven.plugin.MojoFailureException; specialinvoke v.(java.lang.String)>(v); throw v; label: return; } protected void showSummary(org.apache.maven.project.MavenProject, org.owasp.dependencycheck.dependency.Dependency[]) { org.apache.maven.project.MavenProject v; org.owasp.dependencycheck.maven.BaseDependencyCheckMojo v; java.lang.String v; org.owasp.dependencycheck.dependency.Dependency[] v; boolean v; v := @this: org.owasp.dependencycheck.maven.BaseDependencyCheckMojo; v := @parameter: org.apache.maven.project.MavenProject; v := @parameter: org.owasp.dependencycheck.dependency.Dependency[]; v = v.; if v == 0 goto label; v = virtualinvoke v.(); staticinvoke (v, v); label: return; } public java.lang.String getDefaultCveUrlModified() { org.owasp.dependencycheck.maven.BaseDependencyCheckMojo v; java.lang.String v, v; org.owasp.dependencycheck.utils.Settings v; org.owasp.dependencycheck.utils.CveUrlParser v; v := @this: org.owasp.dependencycheck.maven.BaseDependencyCheckMojo; v = virtualinvoke v.(); v = staticinvoke (v); v = v.; v = interfaceinvoke v.(v); return v; } static void () { java.lang.String v, v; v = staticinvoke ("line.separator", "\n"); v = virtualinvoke v.(); = v; return; } }