atlas

atlas copied to clipboard

请问该项目还维护吗？

3

如题

chenyunecjtu

[atlas-update] Avoid Zip Slip Vulnerability

1

`atlas` is vulnerable to Zip Slip attacks using [unzip](https://github.com/alibaba/atlas/blob/c20c5b83f67b9a14fb597d59a287ec7a3e5bdbac/atlas-update/src/main/java/com/taobao/atlas/update/util/ZipUtils.java#L20). Reported in [huntr](https://www.huntr.dev/bounties/7f0f0f66-34db-4a83-a248-6e20c0f5d551/). ``` ZipUtils.unzip("C:\evil.zip", "D:\test\test\test"); //input evil.zip contains ../../evil.exe which will be extracted in D:\test ```

ready-research

NaN comparison always returns false

1

Using == with NaN doesn't work as expected. See https://www.baeldung.com/java-not-a-number for details.

thomasleplus

Inefficient Usage of Collections

1

Hi, We find that there are several inefficient usages of Java Collections: 1. The contains method is invoked upon a list object. We recommend replacing it with a HashSet. 2....

FastAtlas

升级Mac 10.15后，编译失败，aapt报错

2

升级后编译，提示 Caused by: java.io.IOException: error=86, Bad CPU type in executable

forest606

有armv8a 的 libdalvikpatch.so 吗

kfrepo

[demo]: 加载远程bundle异常

1

运行环境： ``` windows 10 Android studio 3.4.1 gradleVersion:4.5 androidPluginVersion:3.0.1 buildToolsVersion:26.0.2 compileSdkVersion:android-26 atlasPluginVersion:3.0.1-rc88 手机型号 letv x500 android版本 5.0.2 ``` 加载远程bundle失败 ``` 09-23 17:38:22.070 29694-29694/com.taobao.demo E/AndroidRuntime: FATAL EXCEPTION: main Process: com.taobao.demo, PID:...

ZhangKuixun

请按照下面的规则提交您的issue，符合标准的issue会被优先处理, 请先查看有没有同类型的issue已经存在. 1. demo问题的issue格式： mac AndroidStudio4.2 AtlasDemo classpath "com.taobao.android:atlasplugin:3.0.1-rc88" build报错 A problem occurred configuring project ':firstbundle'. Caused by: java.lang.NullPointerException at com.taobao.android.builder.dependency.parser.helper.DependencyResolver.resolveDependency(DependencyResolver.java:375) 2. 容器功能接入或者如何使用的答疑：[use]:title 3. 提新需求的格式：[feature]:title

ewgcat

适配android gradle plugin 3.6.+ 和r8

haizhiyun

[demo]:运行时remotebundle的RemoteBundleActivity无法打开，报ClassNotFoundException

1

tBuildConfig配置中添加：outOfApkBundles = ['remotebundle'] 使用gradlew clean assembleDebug命令可以正常编译出so和apk 按照 说明拷贝libcom_taobao_remotebunle.so到 /sdcard/Android/data/com.taobao.demo/cache/libcom_taobao_remotebunle.so 然后给app sd卡权限，运行远程组件模拟app崩溃： 2019-12-26 15:45:31.090 8636-8636/com.taobao.demo E/AndroidRuntime: FATAL EXCEPTION: main Process: com.taobao.demo, PID: 8636 java.lang.RuntimeException: Unable to instantiate activity ComponentInfo{com.taobao.demo/com.taobao.remotebunle.RemoteBundleActivity}: java.lang.ClassNotFoundException: Didn't...

zhaonanrc