question-mark
Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

Scan on Ubuntu 20.04.3 endless loop

See original GitHub issue

./log4j2-scan -f /dev/mapper/ubuntu--vg-ubuntu--lv/ --silent --scan-log4j1 --scan-logback

Results in a never ending scanning loop.

Issue Analytics

  • State:closed
  • Created 2 years ago
  • Comments:8 (3 by maintainers)

github_iconTop GitHub Comments

1reaction
latency0mscommented, Dec 18, 2021

@latency0ms -f arguement should be configuration file which contains file path list. It is not intended as scan target path itself. Use following command:

./log4j2-scan --trace --scan-log4j1 --scan-logback /opt/jedox/ps/

This works like a charm! Thanks!

0reactions
latency0mscommented, Dec 18, 2021

@latency0ms Remove --silent option and add --trace --debug option, then you can see where scanner visits. If scanner visits infinitely, comment some errornous output.

I am getting this output using --trace --debug:

�������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������\�`�\�`�\�`j�A��a�
                                                                                                                                                                                                    �a�
                                                                                                                                                                                                       �a
Skipping file: /tmp/�.$� L9dQ�*dQ�*��S�\�`��S�if'���@�\�`�\�`�\�`�3$ʏ ���\�`�� �\�`�\�`�\�`
Skipping file: /tmp/�������������Q� �$�\�`�R.�A@!�a�\�`�\�`
Skipping file: /tmp/�/$�� �,ؼ�\�`��Լa�\�`f8`usr/binI׻�5� 
                                                                  �<!�RG�\�`�<!��Լa�\�`f8`usr/lib�iW:s Ю�<!d�^F�\�`�<!��       (�a�\�`f8`usr/lib32�<3p�7 �E�<!�n���\�`�<!��       Լa�\�`f8`usr/lib64����� ��<!�RG�\�`�<!��
Skipping file: /tmp/(�a�\�`f8`usr/libx32��;�� ���<!�n���\�`�<!�-�a�\�`f8`usr/sbin_�=� ʂ�<!H�^M�\�`�<!�����`,]�`,]�`
Skipping file: /tmp/�3�x�H���0�V�M�cLK��LK��T|   �,]�`�<�
                                                                  .
                                                                      ..

Scanned 0 directories and 1312 files
Found 0 vulnerable files
Found 0 potentially vulnerable files
Found 0 mitigated files
Completed in 10.88 seconds
Error: null
Read more comments on GitHub >

github_iconTop Results From Across the Web

Ubuntu 20.04 infinite loop on reboot, with three services of ...
Ubuntu Mate 20.04 crashed and enters an infinite loop on reboot, trying and failing to start the following systemctl services:.
Read more >
Ubuntu Server Documentation
This chapter provides an overview of installing Ubuntu Server Edition. There is more detailed documentation on other installer topics. Preparing to Install.
Read more >
False positive for CVE-2021-24031 on Ubuntu 20.04 #912
When scanning the ubuntu:20.04 Docker image using trivy image , the image is reported as being vulnerable to CVE-2021-24031 despite version 1.4.
Read more >
How to Fix Ubuntu 20.04 Installer Stuck at Updates - Appuals
The installer offers an option to install all the latest updates for the system during the installation to save the user from having...
Read more >
Installation & Configuration of ClamAV Antivirus on Ubuntu ...
This is important as we don't want to end up in a potential endless loop situation where “clamonacc” running as root or “clamd”...
Read more >

github_iconTop Related Medium Post

No results found

github_iconTop Related StackOverflow Question

No results found

github_iconTroubleshoot Live Code

Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free

github_iconTop Related Reddit Thread

No results found

github_iconTop Related Hackernoon Post

No results found

github_iconTop Related Tweet

No results found

github_iconTop Related Dev.to Post

No results found

github_iconTop Related Hashnode Post

No results found