OpticFusion1/MCAntiMalware

[False Positive] Spigot.MALWARE.Antieffects.A in com/sun/tools/sjavac/server/PortFile

baviereteam opened this issue · 1 comments

Resource URL
URL: https://ci.opencollab.dev/job/GeyserMC/job/Floodgate/job/master/
Tested JAR: https://ci.opencollab.dev/job/GeyserMC/job/Floodgate/job/master/lastSuccessfulBuild/artifact/spigot/build/libs/floodgate-spigot.jar

AntiMalware Version
Version: 15.5

Additional context
[AntiMalware] [13:46:56] [DETECTED]: plugins/floodgate-spigot.jar MIGHT be infected with Spigot.MALWARE.Antieffects.A Class Path: com/sun/tools/sjavac/server/PortFile ; SourceFile/Line PortFile.java/87

This is a false positive, due to the use of a file named ".stop" in a SJavaC, a tool that allows parallel / incremental compilation. See source: https://github.com/openjdk/jdk/blob/739769c8fc4b496f08a92225a12d07414537b6c0/src/jdk.compiler/share/classes/com/sun/tools/sjavac/server/PortFile.java#L87

Thanks!

Currently there is no whitelist for this version of the Anti-malware.
I am however in the process of working on a paper fork which on top of better security will also include the ability to whitelist local jars. More information about the fork can be found in my support server's announcements channel: https://discord.gg/jMEsq4zHVA