mergebase / log4j-detector

A public open sourced tool. Log4J scanner that detects vulnerable Log4J versions (CVE-2021-44228, CVE-2021-45046, etc) on your file-system within any application. It is able to even find Log4J instances that are hidden several layers deep. Works on Linux, Windows, and Mac, and everywhere else Java runs, too! TAG_OS_TOOL, OWNER_KELLY, DC_PUBLIC
Other
638 stars 98 forks source link

-- Problem - java.io.EOFException: Unexpected end of ZLIB input stream #32

Closed linlo68 closed 2 years ago

linlo68 commented 2 years ago

Getting this on a bunch of files. Is this expected behavior?

thorag76 commented 2 years ago

I'm getting this, too, it seems to be related to corrupt nested JAR files. Redhat products of certain versions seem to be affected preferredly. Found 906 of 900 lines resulting in an EOFException for a .eclipse/org.eclipse.platform4.17.0... folder in my home directory.

juliusmusseau commented 2 years ago

Fixed in latest version (v2021.12.16). Was a problem in my code (the nested jars were fine).