Merge pull request #334 from acollign/feature/add-exts

add ear extensions to ease scanning
lunasec-io · Dec 16, 2021 · fb5deb3 · fb5deb3
2 parents cf60212 + 2ce1498
commit fb5deb3
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 2 deletions.
diff --git a/tools/log4shell/constants/fs.go b/tools/log4shell/constants/fs.go
@@ -18,5 +18,6 @@ const (
 	JarFileExt   = ".jar"
 	WarFileExt   = ".war"
 	ZipFileExt   = ".zip"
+	EarFileExt   = ".ear"
 	ClassFileExt = ".class"
 )
diff --git a/tools/log4shell/scan/scan.go b/tools/log4shell/scan/scan.go
@@ -113,7 +113,7 @@ func scanFile(path string, file *zip.File, onlyScanArchives bool) (findings []ty
 			findings = []types.Finding{*finding}
 		}
 		return
-	case constants.JarFileExt, constants.WarFileExt, constants.ZipFileExt:
+	case constants.JarFileExt, constants.WarFileExt, constants.ZipFileExt, constants.EarFileExt:
 		if onlyScanArchives {
 			finding := scanArchiveFile(path, file)
 			if finding != nil {
@@ -186,7 +186,7 @@ func SearchDirsForVulnerableClassFiles(searchDirs []string, onlyScanArchives boo
 
 		fileExt := util.FileExt(path)
 		switch fileExt {
-		case constants.JarFileExt, constants.WarFileExt, constants.ZipFileExt:
+		case constants.JarFileExt, constants.WarFileExt, constants.ZipFileExt, constants.EarFileExt:
 			log.Debug().
 				Str("path", path).
 				Msg("scanning archive")