[False Positive] Spigot.MALWARE.Antieffects.A in com/sun/tools/sjavac/server/PortFile
baviereteam opened this issue · 1 comments
Resource URL
URL: https://ci.opencollab.dev/job/GeyserMC/job/Floodgate/job/master/
Tested JAR: https://ci.opencollab.dev/job/GeyserMC/job/Floodgate/job/master/lastSuccessfulBuild/artifact/spigot/build/libs/floodgate-spigot.jar
AntiMalware Version
Version: 15.5
Additional context
[AntiMalware] [13:46:56] [DETECTED]: plugins/floodgate-spigot.jar MIGHT be infected with Spigot.MALWARE.Antieffects.A Class Path: com/sun/tools/sjavac/server/PortFile ; SourceFile/Line PortFile.java/87
This is a false positive, due to the use of a file named ".stop" in a SJavaC, a tool that allows parallel / incremental compilation. See source: https://github.com/openjdk/jdk/blob/739769c8fc4b496f08a92225a12d07414537b6c0/src/jdk.compiler/share/classes/com/sun/tools/sjavac/server/PortFile.java#L87
Thanks!
Currently there is no whitelist for this version of the Anti-malware.
I am however in the process of working on a paper fork which on top of better security will also include the ability to whitelist local jars. More information about the fork can be found in my support server's announcements channel: https://discord.gg/jMEsq4zHVA