Jar files are not getting extracted to Temp location

[KappaSign]

Description

Running the tool against a folder with jar files do not extract the files to temp location.

To reproduce

Steps to reproduce the behavior:

1. Run the tool against a folder with jar files/ eg.. C:\Users\sabar>cve-bin-tool C:\apache-tomcat-9.0.97

2. Console has warnings listed as below.

       INFO     cve_bin_tool.VersionScanner - Language Checkers: dart, env, go, java, javascript, perl, php, python, r, ruby, rust, swift                                              version_scanner.py:143
       [06:52:01] WARNING  cve_bin_tool.VersionScanner - Failure extracting C:\apache-tomcat-9.0.97\apache-tomcat-9.0.97\bin\bootstrap.jar                                                              extractor.py:451
   

Expected behaviour:
The files are extracted to the temp locations properly.
Actual behaviour:
Temp locations are empty after processed by extractor.py

Version/platform info

Windows 11

Version of CVE-bin-tool( e.g. output of cve-bin-tool --version):

C:\Users\sabar>cve-bin-tool --version
3.4

Installed from pypi or github?
github

Operating system: Linux/Windows (other platforms are unsupported but feel free to report issues anyhow)

• On Linux (or Windows Subsystem for Linux) you can run uname -a
• On Windows you can run systeminfo | findstr /B /C:"OS Name" /C:"OS Version"

C:\Users\sabar>systeminfo | findstr /B /C:"OS Name" /C:"OS Version
OS Name: Microsoft Windows 11 Home Single Language
OS Version: 10.0.22631 N/A Build 22631

Python version (e.g. python3 --version):
C:\Users\sabar>python --version
Python 3.13.0

Running in any particular CI environment we should know about? (e.g. Github Actions)
N/A

Anything else?

7Zip is installed at "C:\Program Files\7-Zip\7zFM.exe"
I can manually unzip these jars with 7Zip. So that tool is working I believe.

Feel free to add any other context here.

[terriko]

Hm, I'm not sure what's going on here. It should be trying to call 7z to do the extraction, and it's not complaining that it's not installed so that part is likely working. Do you get anything more detailed if you try turning the debug longs using --log debug ? It may be throwing an error that we're aborting on but I can't think of what that would be.

We don't currently test windows with python 3.13 but I don't think that should matter in this case. I'm not sure I'll be much help in figuring this out since I primarily use linux for cve-bin-tool development, but maybe someone else here can spot something I can't.