-
Notifications
You must be signed in to change notification settings - Fork 97
Open
Description
Hi,
I'm not sure whether that's the right way to go, I'm sorry if I did not understand your code properly.
If you set the empirical condition variables based on version detected via pom.properties, this may actually lead to false positives.
Take for instance: https://www.apache.org/dyn/closer.lua/logging/log4j/2.17.0/apache-log4j-2.17.0-bin.zip
False positives ((I mean non-compiled, harmless code) ) might be reported on
apache-log4j-2.17.0-bin.zip:apache-log4j-2.17.0-bin/log4j-core-2.17.0-sources.jar- apache-log4j-2.17.0-bin.zip:apache-log4j-2.17.0-bin/log4j-core-2.17.0-tests.jar
Problematic code:
| boolean isLog4j2 = compare("2", version) <= 0; |
Metadata
Metadata
Assignees
Labels
No labels