fix: improve memory usage on NVD update (#6321)

Signed-off-by: Marcos Romero <marcos.romero@mercadoderecebiveis.com.br>
jeremylong · Dec 18, 2023 · 667fde1 · 667fde1
1 parent 8c6a97b
commit 667fde1
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 3 deletions.
diff --git a/...rc/main/java/org/owasp/dependencycheck/data/update/nvd/api/CveApiJson20CveItemSource.java b/...rc/main/java/org/owasp/dependencycheck/data/update/nvd/api/CveApiJson20CveItemSource.java
@@ -44,14 +44,14 @@ public CveApiJson20CveItemSource(File jsonFile) throws IOException {
         mapper = new ObjectMapper();
         mapper.registerModule(new JavaTimeModule());
         inputStream = jsonFile.getName().endsWith(".gz") ?
-                new GZIPInputStream(new BufferedInputStream(Files.newInputStream(jsonFile.toPath()))) :
+                new BufferedInputStream(new GZIPInputStream(Files.newInputStream(jsonFile.toPath()))) :
                 new BufferedInputStream(Files.newInputStream(jsonFile.toPath()));
         jsonParser = mapper.getFactory().createParser(inputStream);
 
         JsonToken token = null;
         do {
             token = jsonParser.nextToken();
-            if (token  == JsonToken.FIELD_NAME) {
+            if (token == JsonToken.FIELD_NAME) {
                 String fieldName = jsonParser.getCurrentName();
                 if (fieldName.equals("vulnerabilities") && (jsonParser.nextToken() == JsonToken.START_ARRAY)) {
                     nextItem = readItem(jsonParser);

diff --git a/core/src/main/java/org/owasp/dependencycheck/data/update/nvd/api/JsonArrayCveItemSource.java b/core/src/main/java/org/owasp/dependencycheck/data/update/nvd/api/JsonArrayCveItemSource.java
@@ -44,7 +44,7 @@ public JsonArrayCveItemSource(File jsonFile) throws IOException {
         mapper = new ObjectMapper();
         mapper.registerModule(new JavaTimeModule());
         inputStream = jsonFile.getName().endsWith(".gz") ?
-                new GZIPInputStream(new BufferedInputStream(Files.newInputStream(jsonFile.toPath()))) :
+                new BufferedInputStream(new GZIPInputStream(Files.newInputStream(jsonFile.toPath()))) :
                 new BufferedInputStream(Files.newInputStream(jsonFile.toPath()));
         jsonParser = mapper.getFactory().createParser(inputStream);