search

google / log4jscanner

A log4j vulnerability filesystem scanner and Go package for analyzing JAR files.
Apache License 2.0
1.57k stars 120 forks source link

Error scanning - negative offset #42

Closed pannemra closed 2 years ago

pannemra commented 2 years ago

Getting the error below when scanned on Cloudera cluster edge node on RedHat 7 Linux VM.

One of the zip file it scanned has name like .¶i84ianid.xetntwmu¶.com-a-00000583-c-00134550__0_2021-01-17_02-00-02.tgz. Not sure special character in the file name caused the error.

2022/01/06 19:45:31 log4jscanner.go:120: Error: scanning /var/lib/smartsense/hst-agent/data/tmp//.¶i84ianid.x etntwmu¶.com-a-00000583-c-00134550__0_2021-01-1702-00-02/services/HBASE/components/Client/DEFAULT/conf/hbase-site.jar: opennig file as a ZIP archive: readat //var/lib/smartsense/hst-agent/data/tmp//.¶i84ianid.xetntwmu¶.com-a-00000583-c-0013 4550_0_2021-01-17_02-00-02/services/HBASE/components/Client/DEFAULT/conf/hbase-site.jar: negative offset

davidsonff commented 2 years ago

P.S. - The .tgz file unzips properly on the OS.

ericchiang commented 2 years ago

Unfortunately it's going to be really hard for us to debug this without a replication case. Is this OSS you can provide?

davidsonff commented 2 years ago

The problem was that our .zip file was corrupted, apparently. This can be closed.