mirrors/fdroidserver
1
0
Fork 0
mirror of https://github.com/f-droid/fdroidserver.git synced 2025-11-05 23:10:29 +03:00
Code Issues Projects Releases Packages Wiki Activity Actions

Merge branch 'obfusk-master-patch-58664' into 'master'

Browse source 
has_known_vulnerability(): check .so files with version in filename

Closes #915

See merge request fdroid/fdroidserver!977
This commit is contained in:
Jochen Sprickerhof 2021-06-28 18:53:49 +00:00
commit 7101cc863a
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
fdroidserver/update.py
View file

@ -641,7 +641,7 @@ def has_known_vulnerability(filename):
files_in_apk = set() files_in_apk = set()
with zipfile.ZipFile(filename) as zf: with zipfile.ZipFile(filename) as zf:
for name in zf.namelist(): for name in zf.namelist():
if name.endswith('libcrypto.so') or name.endswith('libssl.so'): if name.endswith('.so') and ('libcrypto' in name or 'libssl' in name):
lib = zf.open(name) lib = zf.open(name)
while True: while True:
chunk = lib.read(4096) chunk = lib.read(4096)