jensdietrich / xshady

vulnerabilities found in shaded projects
Apache License 2.0
5 stars 2 forks source link

Record JDK version in metadata #29

Closed wtwhite closed 11 months ago

wtwhite commented 11 months ago

Add an optional jdkVersion field, with a constrained set of permitted values, to use for building and testing PoVs. shadedetector will use this to generate a suitable JAVA_HOME environment variable setting. Set this field for CVE-2016-2510.

Why not just add an optional environment field instead, which is more flexible? Because that would mean hardcoding JAVA_HOME=/some/path, and the right path can vary across platforms.