ɔɹɐWSchoenefeld

icon location Blackhat 2002,2003,2006,2012,2013 HITB 2018,2019 CanSecWest 2009,2011,2018,2020,2024 Chrome Hall of Fame 2010 RSA Security Award 2003 3rd place

Results 3 issues of ɔɹɐWSchoenefeld

Improve stability of primitive array lifecycle

https://github.com/signalapp/curve25519-java/blob/70fae57d6dccff7e78a46203c534314b07dfdd98/android/jni/curve25519-jni.c#L27 According to https://developer.android.com/training/articles/perf-jni , releasing an array requires a prior check to prevent releasing a Null pointer. There are multiple instances of this issue throughout the file.

Improve bytearray handling

6 comment

NewByteArray can fail and return null, consider checking before using the returned value as array https://github.com/facebook/fresco/blob/2ae15501ad3fc132528f100990b9c06de4846e3a/imagepipeline/src/main/jni/imagepipeline/jpeg/jpeg_stream_wrappers.cpp#L135

help wanted
good first issue

When building the tlstesttool an old and vulnerable openssl 3.0.1 is included

``` [ 62%] Creating directories for 'EP_OPENSSL' [ 65%] Performing download step (download, verify and extract) for 'EP_OPENSSL' -- Downloading... dst='/home/user/gits/TaSK/tlstesttool/build/EP_OPENSSL-prefix/src/openssl-3.0.1.tar.gz' timeout='none' inactivity timeout='none' -- Using src='https://www.openssl.org/source/openssl-3.0.1.tar.gz' ^^^^^ ```