Skip to content

xmlbeans-5.1.1.jar causes NullPointerException in setGAVFromPomDotProperties in 8.1.1 #5511

@adam-siklosi

Description

@adam-siklosi

Describe the bug
Dependency check fails on xmlbeans-5.1.1.jar. I can also reproduce it with some internal artifacts.

Version of dependency-check used
Issue appeared after upgrading to 8.1.1. using the command line version. I assume it is caused by #5473.

Log file

[WARN] An unexpected error occurred during analysis of '/tmp/dctemp0837e096-b355-48c9-95a1-163f1d9d837e/check3825733863783876208tmp/94/WEB-INF/lib/xmlbeans-5.1.1.jar' (Jar Analyzer): Cannot invoke "java.util.Properties.containsKey(Object)" because "pomProperties" is null
[ERROR] 
java.lang.NullPointerException: Cannot invoke "java.util.Properties.containsKey(Object)" because "pomProperties" is null
        at org.owasp.dependencycheck.xml.pom.Model.setGAVFromPomDotProperties(Model.java:399)
        at org.owasp.dependencycheck.analyzer.JarAnalyzer.analyzePOM(JarAnalyzer.java:450)
        at org.owasp.dependencycheck.analyzer.JarAnalyzer.analyzeDependency(JarAnalyzer.java:330)
        at org.owasp.dependencycheck.analyzer.AbstractAnalyzer.analyze(AbstractAnalyzer.java:131)
        at org.owasp.dependencycheck.AnalysisTask.call(AnalysisTask.java:88)
        at org.owasp.dependencycheck.AnalysisTask.call(AnalysisTask.java:37)
        at java.base/java.util.concurrent.FutureTask.run(FutureTask.java:264)
        at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1136)
        at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:635)
        at java.base/java.lang.Thread.run(Thread.java:833)

Metadata

Metadata

Assignees

Labels

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions