Re: [eclemma-dev] Is the AV detection on the Eclemma docs plugin on the

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] [List Home]

Re: [eclemma-dev] Is the AV detection on the Eclemma docs plugin on the 2023-12 release of JDT a FP?

From: Al T <simp1y@xxxxxxxxxxxxx>
Date: Tue, 26 Dec 2023 06:53:46 -0500
Arc-authentication-results: i=1; mx.microsoft.com 1; spf=none; dmarc=none; dkim=none; arc=none
Arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=5bN3wI97w3rbIx3YiGBkK4G5wDizCvQB3RREtDcTeDY=; b=dyDAzZsZn9AomXiE1qf7irn5wFzSUcFqUFLHvF6CC/auZQPQgF40fTtq4a9jp+6aN6csU6YmnHk9n1y111UpB4bh42NNRo2ulVR+atBEOc01Bks2geBsNPXAe4vs/mioM3Xx5etyzTGLamrWT+WRtr6JDNpcs8Md/2iNlRUx75HH3fHX47MEkiWzRCWeRl5K35Giw6/MifWhagv+AXy+QS+kfbANWNfhT7+ngAV37wMB+buNOq/ngwzN+2mrGu6+IcSbpI1vGPZdpDTn6wonoQ3TH7LpNpl6ruU9aDMK5a0WClFfZdH/TRiHU4MiGCqRLS7vJ/sl0gnmbDuZeZoY0g==
Arc-seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=enXFMIs7lsN3vGurcG9Rd7sHZApCA3yX67oIkzGJL13LtrVsDjRkp1oqrDsFydUq3ut5jgJQRFmBM+wTKXULDUUpfpe3WIHVoZrp5X35srRXnkDRguuHHSZFiVYgbDDOwXe/Flfo/93FDw8kmbixCfkfoLWttmTg5b7LkJ+cl5hvpppGyESno6E+Tw0ezU11zl47LjG/ki8DVHL2m9SNl6+IOThJzNNGH16vO0PLnkZisSHFzGLCUaSeqXdepCImxrGKF9pLUFJhjC0CgagW6Q52FDTAe+JKKj21HziUolZaLrA2WBaO7yhM5v2Pv+aGa8mjvbf3d0qsIXPmMwvNjw==
Delivered-to: eclemma-dev@xxxxxxxxxxx
List-archive: <https://www.eclipse.org/mailman/private/eclemma-dev/>
List-help: <mailto:eclemma-dev-request@eclipse.org?subject=help>
List-subscribe: <https://www.eclipse.org/mailman/listinfo/eclemma-dev>, <mailto:eclemma-dev-request@eclipse.org?subject=subscribe>
List-unsubscribe: <https://www.eclipse.org/mailman/options/eclemma-dev>, <mailto:eclemma-dev-request@eclipse.org?subject=unsubscribe>
User-agent: Mozilla Thunderbird

I've reported it as a false positive to the AV vendors. Hopefully they'll remove the signatures.

Thanks,
Alan

On 2023-12-26 5:41 a.m., Marc Hoffmann wrote:

Hi Alan,

thanks for raising this issue! For me it looks like a false positive:

1) Eclipse distro build is a different bild than on GitHub. Therefore the different signature.
2) Distro jar (org.eclipse.eclemma.doc_3.1.8.202311140945.jar) triggers several warnings (see below), GitHub release jar (org.eclipse.eclemma.doc_3.1.8.202312121452.jar) is green.
3) I compared both JARs: No differences beside the Meta information about build timestamp und release commit.

Is there anything we can do about it?

Best regards,
-marc

> On 26. Dec 2023, at 09:03, Al T via eclemma-dev <eclemma-dev@xxxxxxxxxxx> wrote:
>
> Sorry if this isn't the correct place to ask this.
>
> The plugin named "org.eclipse.eclemma.doc_3.1.8.202311140945.jar" with SHA256 E5F6C8694784E7DC01B69621885DCF848DD266357C5B250FF2058E63278C3AC4 in the 2023-12 release of Eclipse IDE is detected by multiple AV engines on VirusTotal. It's included in both the Eclipse IDE JDT and JEE 2023-12 releases. It doesn't match the 3.1.8 build on the Eclemma website and Github. Is this a false positive?
>
> Thanks,
> Alan
>
> _______________________________________________
> eclemma-dev mailing list
> eclemma-dev@xxxxxxxxxxx
> To unsubscribe from this list, visit https://www.eclipse.org/mailman/listinfo/eclemma-dev

References:
- [eclemma-dev] Is the AV detection on the Eclemma docs plugin on the 2023-12 release of JDT a FP?
  - From: Al T
- Re: [eclemma-dev] Is the AV detection on the Eclemma docs plugin on the 2023-12 release of JDT a FP?
  - From: Marc Hoffmann

Prev by Date: Re: [eclemma-dev] Is the AV detection on the Eclemma docs plugin on the 2023-12 release of JDT a FP?
Previous by thread: Re: [eclemma-dev] Is the AV detection on the Eclemma docs plugin on the 2023-12 release of JDT a FP?
Index(es):
- Date
- Thread

Breadcrumbs