AltStore icon indicating copy to clipboard operation
AltStore copied to clipboard

iPhone name causes error (update: potential security vulnerability)

Open jackmio32 opened this issue 3 years ago • 1 comments

setting the name of your iPhone to " " (yes that actually works), it causes installing altstore to fail with the error: image

jackmio32 avatar Mar 15 '22 02:03 jackmio32

vulnerability: iOS device names are likely not sanitized tested version/OS's: Windows 10, last and latest version of AltStore testing method: (note: device names will be surrounded by backslashes due to the device names themself using the other common characters in order to avoid confusion) installing altstore on my iPhone using device name \ , (just one space), failed installation with the error "No value was provided for the parameter "name". (35)", and using the name ')">\ caused the program to get stuck using 11-12% of my CPU and made it unresponsive. trying to install altstore again after restarting the program caused the same or a very similar thing to happen again. (this may be code injection in a program that altstore depends on)

jackmio32 avatar May 04 '22 04:05 jackmio32