DependencyCheck: Could not execute GrokAssembly Premature end of file
Hi,
I’ve downloaded the latest version of Dependecy Check (3.3.1) and already tried also with one previous version (3.0.2) after tested with 3.3.1 and I’m getting the error related with GrokAssembly
Log: https://gist.github.com/razeitona/2b1d4d96d5f68b36756479d3e8aecd35
DEBUG - Initializing Assembly Analyzer
2018-08-28 10:07:55,534 org.owasp.dependencycheck.analyzer.AssemblyAnalyzer:223
DEBUG - Extracted GrokAssembly.exe to C:\Users\RICARD~1\AppData\Local\Temp\dctempaf03cfe4-0d44-4885-9f18-3d5515cb646a\GKA11409347276140118492.exe
2018-08-28 10:07:55,535 org.owasp.dependencycheck.analyzer.AssemblyAnalyzer:226
DEBUG - Extracted GrokAssembly.exe.config to C:\Users\RICARD~1\AppData\Local\Temp\dctempaf03cfe4-0d44-4885-9f18-3d5515cb646a\GKA11409347276140118492.exe.config
2018-08-28 10:07:55,676 org.owasp.dependencycheck.analyzer.AssemblyAnalyzer:273
WARN - An error occurred with the .NET AssemblyAnalyzer;
this can be ignored unless you are scanning .NET DLLs. Please see the log for more details.
2018-08-28 10:07:55,678 org.owasp.dependencycheck.analyzer.AssemblyAnalyzer:275
DEBUG - Could not execute GrokAssembly Premature end of file.
2018-08-28 10:07:55,678 org.owasp.dependencycheck.Engine:819
ERROR - Exception occurred initializing Assembly Analyzer.
2018-08-28 10:07:55,682 org.owasp.dependencycheck.Engine:820
DEBUG -
org.owasp.dependencycheck.exception.InitializationException: An error occurred with the .NET AssemblyAnalyzer
at org.owasp.dependencycheck.analyzer.AssemblyAnalyzer.prepareFileTypeAnalyzer(AssemblyAnalyzer.java:277)
at org.owasp.dependencycheck.analyzer.AbstractFileTypeAnalyzer.prepareAnalyzer(AbstractFileTypeAnalyzer.java:73)
at org.owasp.dependencycheck.analyzer.AbstractAnalyzer.prepare(AbstractAnalyzer.java:108)
at org.owasp.dependencycheck.Engine.initializeAnalyzer(Engine.java:817)
at org.owasp.dependencycheck.Engine.analyzeDependencies(Engine.java:662)
at org.owasp.dependencycheck.App.runScan(App.java:253)
at org.owasp.dependencycheck.App.run(App.java:184)
at org.owasp.dependencycheck.App.main(App.java:69)
Caused by: org.xml.sax.SAXParseException: Premature end of file.
at java.xml/com.sun.org.apache.xerces.internal.parsers.DOMParser.parse(Unknown Source)
at java.xml/com.sun.org.apache.xerces.internal.jaxp.DocumentBuilderImpl.parse(Unknown Source)
at java.xml/javax.xml.parsers.DocumentBuilder.parse(Unknown Source)
at org.owasp.dependencycheck.analyzer.AssemblyAnalyzer.prepareFileTypeAnalyzer(AssemblyAnalyzer.java:259)
... 7 common frames omitted
About this issue
- Original URL
- State: closed
- Created 6 years ago
- Comments: 15 (5 by maintainers)
Commits related to this issue
- upgrade to dotnet 3.1 per #1464 — committed to jeremylong/DependencyCheck by jeremylong 4 years ago
- Dotnet upgrade (#2574) * upgrade to dotnet 3.1 per #1464 — committed to jeremylong/DependencyCheck by jeremylong 4 years ago
It looks like DependencyCheck requires DotNet Core v2. I don’t think this is a bug but I do think that it should be made clearer. If you install the DotNet Core v2 run-time then the scanner should run successfully. I’ve tested this solution works in a DotNet Core v3 Docker image by installing the DotNet Core v2.2.7 run-time.