secnotes
secnotes
Hi :) When I was decompiling the Lua script on openwrt, I found a `segmentation fault` error. I try to debug luadec to find the location of bug. Size of...
- [ ] 在最新的 Ubuntu 以及 Kali上，存在网络无法访问的问题。 - [ ] 在最新的 Ubuntu 以及 Kali上，高版本 binwalk 存在 bug，无法提取许多固件的根文件系统。
Hi, there are many out-of-bounds read leading to possible temporary denial of service in readelf. PoC [poc_elf_out_of_bounds.zip](https://github.com/klange/toaruos/files/8879458/poc_elf_out_of_bounds.zip) ```shell ./readelf -a poc_elf_out_of_bounds ELF Header: ... Program Headers: Type Offset VirtAddr PhysAddr...
Hi `stringtable` variable appears to be missing in readelf. ```diff git diff diff --git a/apps/readelf.c b/apps/readelf.c index ce25d5e1..7ccb8082 100644 --- a/apps/readelf.c +++ b/apps/readelf.c @@ -803,6 +803,7 @@ int main(int argc,...
Hi, readelf in ToaruOS 2.0.1 has a global overflow allowing RCE when parsing a crafted ELF file. Through elaborately constructed elf files, remote code execution can be realized. PoC ```shell...
Hi If we run weather-configurator with normal permissions, the program will crash due to null pointer.  Bug ```c FILE * f = fopen("/etc/weather.json", "w"); fprintf(f, "{\n"); ```
A GDPR Data Protection Impact Assessment (DPIA) tool to assist organisations to evaluate data protection risks with respect to the EU's General Data Protection Regulation. 🇪🇺
**[scenario]** 点击“点击头像登录”，此时并不登录；点击“看帖”，出发崩溃 **[Analysis]** 将要弹出的 dialog（登录）所要依附的 View 已经不存在导致的。 ```java //Ruisi-master/app/src/main/java/me/yluo/ruisiapp/activity/LoginActivity.java @Override public void onFailure(Throwable e) { AlertDialog dialog = new AlertDialog.Builder(LoginActivity.this) .setTitle("加载失败") .setMessage("是否重新加载") .setPositiveButton("重新加载", (dialogInterface, i) -> loadData()) .setNegativeButton("关闭", (dialogInterface, i)...
**[scenario]** 网络异常时，直接登录，触发崩溃 **[Analysis]** 没有对收到的http报文进行判空操作  **[Suggestions]**  199行代码之后，判断 `loginUrl` 是否为空，如果空，则弹窗或者直接报错，不进行后续的登录流程 **[Log]** ```shell beyond1q:/data/system/dropbox # cat [email protected] Process: me.yluo.ruisiapp Flags: 0x28c8be44 Package: me.yluo.ruisiapp v40 (2.9.8.2) Foreground: Yes Build: samsung/dream2qltezh/dream2qltechn:7.1/N2G48H/G9550ZHU1AQEE:user/release-keys java.lang.NullPointerException: Attempt...