kamp/fdroidserver
1
0
Fork 0
mirror of https://gitlab.com/fdroid/fdroidserver.git synced 2024-11-20 13:50:12 +01:00
Code Activity

has_known_vulnerability(): check .so files with version in filename

Browse Source
This commit is contained in:
Felix C. Stegerman 2021-06-27 00:29:50 +00:00 committed by Jochen Sprickerhof
parent e90212fb3a
commit 28740ee036
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
fdroidserver/update.py
View File

@ -641,7 +641,7 @@ def has_known_vulnerability(filename):
files_in_apk = set() files_in_apk = set()
with zipfile.ZipFile(filename) as zf: with zipfile.ZipFile(filename) as zf:
for name in zf.namelist(): for name in zf.namelist():
if name.endswith('libcrypto.so') or name.endswith('libssl.so'): if name.endswith('.so') and ('libcrypto' in name or 'libssl' in name):
lib = zf.open(name) lib = zf.open(name)
while True: while True:
chunk = lib.read(4096) chunk = lib.read(4096)