Replacing --jython-standalone-2.7.0/jython-standalone-2.7.1 with Dependencies Identified by the Tool

Symptom

Replace --jython-standalone-2.7.0/jython-standalone-2.7.1 with dependencies identified by the tool.

Key Process and Cause Analysis

None

Conclusion and Solution

Replace related JAR packages before compilation. This section uses jython-standalone-2.7.0 as an example, and can also be reference for jython-standalone-2.7.1.

1. Use the jline-2.12.1.jar file compiled on an ARM-based server to replace the jline-2.12.1.jar file in the extlibs directory of Jython.
   

   For jython-standalone-2.7.1, use the compiled jline-2.14.3.jar file to replace the jline-2.14.3.jar file in the extlibs directory of Jython.

2. Use jffi-aarch64-Linux.jar in the dist directory of jffi-1.2.19 to replace the jffi-arm-Linux.jar file in the jython-2.7.0/extlibs directory.
   

   For jython-standalone-2.7.1, use jffi-aarch64-Linux.jar to replace the jffi-arm-Linux.jar file in the jython-2.7.1/extlibs directory.

3. After the replacement, run the compile command twice.

   1	ant jar-standalone

4. After the JAR packages are replaced, perform the scan again. The result is as follows (the jffi packages for other CPU architectures are not replaced):

   1 2 3 4 5 6

   jffi-i386-Linux.jar libjiffi-1.2.so jffi-i386-SunOS.jar libjiffi-1.2.so jffi-sparcv9-SunOS.jar libjiffi-1.2.so jffi-x86_64-FreeBSD.jar libjiffi-1.2.so jffi-x86_64-Linux.jar libjiffi-1.2.so jffi-x86_64-SunOS.jar libjiffi-1.2.so