{"action":"created","issue":{"url":"https://api.github.com/repos/h3xstream/find-sec-bugs/issues/24","labels_url":"https://api.github.com/repos/h3xstream/find-sec-bugs/issues/24/labels{/name}","comments_url":"https://api.github.com/repos/h3xstream/find-sec-bugs/issues/24/comments","events_url":"https://api.github.com/repos/h3xstream/find-sec-bugs/issues/24/events","html_url":"https://github.com/h3xstream/find-sec-bugs/issues/24","id":52614485,"number":24,"title":"CipherWithNoIntegrityDetector throws exception on algorithm-only cipher lookups","user":{"login":"ThrawnCA","id":3080440,"avatar_url":"https://avatars.githubusercontent.com/u/3080440?v=3","gravatar_id":"","url":"https://api.github.com/users/ThrawnCA","html_url":"https://github.com/ThrawnCA","followers_url":"https://api.github.com/users/ThrawnCA/followers","following_url":"https://api.github.com/users/ThrawnCA/following{/other_user}","gists_url":"https://api.github.com/users/ThrawnCA/gists{/gist_id}","starred_url":"https://api.github.com/users/ThrawnCA/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ThrawnCA/subscriptions","organizations_url":"https://api.github.com/users/ThrawnCA/orgs","repos_url":"https://api.github.com/users/ThrawnCA/repos","events_url":"https://api.github.com/users/ThrawnCA/events{/privacy}","received_events_url":"https://api.github.com/users/ThrawnCA/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/h3xstream/find-sec-bugs/labels/bug","name":"bug","color":"fc2929"}],"state":"open","locked":false,"assignee":{"login":"h3xstream","id":593130,"avatar_url":"https://avatars.githubusercontent.com/u/593130?v=3","gravatar_id":"","url":"https://api.github.com/users/h3xstream","html_url":"https://github.com/h3xstream","followers_url":"https://api.github.com/users/h3xstream/followers","following_url":"https://api.github.com/users/h3xstream/following{/other_user}","gists_url":"https://api.github.com/users/h3xstream/gists{/gist_id}","starred_url":"https://api.github.com/users/h3xstream/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/h3xstream/subscriptions","organizations_url":"https://api.github.com/users/h3xstream/orgs","repos_url":"https://api.github.com/users/h3xstream/repos","events_url":"https://api.github.com/users/h3xstream/events{/privacy}","received_events_url":"https://api.github.com/users/h3xstream/received_events","type":"User","site_admin":false},"milestone":null,"comments":3,"created_at":"2014-12-22T02:17:45Z","updated_at":"2015-01-09T04:44:36Z","closed_at":null,"body":"javax.crypto.Cipher.getInstance permits lookups using only the algorithm name; however, CipherWithNoIntegrityDetector expects a slash to be present in the argument, leading to an ArrayIndexOutOfBoundsException at line 94 when code like the following is used:\r\n\r\nCipher cipher = Cipher.getInstance(\"RSA\");\r\n\r\n     [java]   Exception analyzing TokenEncryptor using detector com.h3xstream.findsecbugs.crypto.CipherWithNoIntegrityDetector\r\n     [java]     java.lang.ArrayIndexOutOfBoundsException: 1\r\n     [java]       At com.h3xstream.findsecbugs.crypto.CipherWithNoIntegrityDetector.sawOpcode(CipherWithNoIntegrityDetector.java:94)\r\n     [java]       At edu.umd.cs.findbugs.visitclass.DismantleBytecode.visit(DismantleBytecode.java:883)\r\n     [java]       At edu.umd.cs.findbugs.visitclass.BetterVisitor.visitCode(BetterVisitor.java:218)\r\n     [java]       At edu.umd.cs.findbugs.visitclass.PreorderVisitor.visitCode(PreorderVisitor.java:229)\r\n     [java]       At edu.umd.cs.findbugs.bcel.OpcodeStackDetector.visitCode(OpcodeStackDetector.java:63)\r\n     [java]       At org.apache.bcel.classfile.Code.accept(Code.java:135)\r\n     [java]       At edu.umd.cs.findbugs.visitclass.PreorderVisitor.doVisitMethod(PreorderVisitor.java:301)\r\n     [java]       At edu.umd.cs.findbugs.visitclass.PreorderVisitor.visitJavaClass(PreorderVisitor.java:389)\r\n     [java]       At org.apache.bcel.classfile.JavaClass.accept(JavaClass.java:215)\r\n     [java]       At edu.umd.cs.findbugs.BytecodeScanningDetector.visitClassContext(BytecodeScanningDetector.java:38)\r\n     [java]       At edu.umd.cs.findbugs.DetectorToDetector2Adapter.visitClass(DetectorToDetector2Adapter.java:76)\r\n     [java]       At edu.umd.cs.findbugs.FindBugs2.analyzeApplication(FindBugs2.java:1089)\r\n     [java]       At edu.umd.cs.findbugs.FindBugs2.execute(FindBugs2.java:283)\r\n     [java]       At edu.umd.cs.findbugs.FindBugs.runMain(FindBugs.java:402)\r\n     [java]       At edu.umd.cs.findbugs.FindBugs2.main(FindBugs2.java:1200)\r\n"},"comment":{"url":"https://api.github.com/repos/h3xstream/find-sec-bugs/issues/comments/69292598","html_url":"https://github.com/h3xstream/find-sec-bugs/issues/24#issuecomment-69292598","issue_url":"https://api.github.com/repos/h3xstream/find-sec-bugs/issues/24","id":69292598,"user":{"login":"h3xstream","id":593130,"avatar_url":"https://avatars.githubusercontent.com/u/593130?v=3","gravatar_id":"","url":"https://api.github.com/users/h3xstream","html_url":"https://github.com/h3xstream","followers_url":"https://api.github.com/users/h3xstream/followers","following_url":"https://api.github.com/users/h3xstream/following{/other_user}","gists_url":"https://api.github.com/users/h3xstream/gists{/gist_id}","starred_url":"https://api.github.com/users/h3xstream/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/h3xstream/subscriptions","organizations_url":"https://api.github.com/users/h3xstream/orgs","repos_url":"https://api.github.com/users/h3xstream/repos","events_url":"https://api.github.com/users/h3xstream/events{/privacy}","received_events_url":"https://api.github.com/users/h3xstream/received_events","type":"User","site_admin":false},"created_at":"2015-01-09T04:44:36Z","updated_at":"2015-01-09T04:44:36Z","body":"This means there is a bug and a test case is missing.\r\nI'll look at it."}}