1
0
mirror of https://gitlab.com/fdroid/fdroidserver.git synced 2024-11-04 22:40:12 +01:00

has_known_vulnerability(): check .so files with version in filename

This commit is contained in:
Felix C. Stegerman 2021-06-27 00:29:50 +00:00 committed by Jochen Sprickerhof
parent e90212fb3a
commit 28740ee036

View File

@ -641,7 +641,7 @@ def has_known_vulnerability(filename):
files_in_apk = set()
with zipfile.ZipFile(filename) as zf:
for name in zf.namelist():
if name.endswith('libcrypto.so') or name.endswith('libssl.so'):
if name.endswith('.so') and ('libcrypto' in name or 'libssl' in name):
lib = zf.open(name)
while True:
chunk = lib.read(4096)