sassoftware / loguccino

Scan and patch tool for CVE-2021-44228 and related log4j concerns.
Apache License 2.0
34 stars 5 forks source link

Error reading tar.gz files #4

Open pchegoor opened 2 years ago

pchegoor commented 2 years ago

While using the latest version of the loguccino utility (v3.1.0) i am noticing that the tar.gz files are not being read. The log shows following Error

14:23:09.880 ERROR: Could not scan file: /app/SAS/9.4_config/meta/Lev1/Web/SASEnvironmentManager/agent-5.8.0-EE/bundles/agent-5.8.0/product_connectors/rt-1.0.2.tar.gz. The exception was java.nio.charset.MalformedInputException: Input length = 1

14:23:09.880 ERROR: Could not scan file: /app/SAS/9.4_config/meta/Lev1/Web/SASEnvironmentManager/agent-5.8.0-EE/bundles/agent-5.8.0/product_connectors/snmp-1.0.2.tar.gz. The exception was java.nio.charset.MalformedInputException: Input length = 1

FriedEgg commented 2 years ago

Hi @pchegoor, This issue is document (maybe not as clearly as possible) in our known issues: https://github.com/sassoftware/loguccino/tree/v3.1.0#traversal-of-corrupted-archives

We are actively working to resolve this issue.