From 94ccd022c478450c1a1285d3ac95defea1fe0b1e Mon Sep 17 00:00:00 2001 From: Jochen Sprickerhof Date: Fri, 29 Apr 2022 14:35:36 +0200 Subject: [PATCH] Add apk.embedded_1.apk test --- MANIFEST.in | 1 + tests/apk.embedded_1.apk | Bin 0 -> 16876 bytes tests/scanner.TestCase | 6 ++++++ 3 files changed, 7 insertions(+) create mode 100644 tests/apk.embedded_1.apk diff --git a/MANIFEST.in b/MANIFEST.in index 87b82802..9ea77a1b 100644 --- a/MANIFEST.in +++ b/MANIFEST.in @@ -42,6 +42,7 @@ include locale/zh_Hant/LC_MESSAGES/fdroidserver.po include makebuildserver include README.md include tests/androguard_test.py +include tests/apk.embedded_1.apk include tests/bad-unicode-*.apk include tests/build.TestCase include tests/build-tools/17.0.0/aapt-output-com.moez.QKSMS_182.txt diff --git a/tests/apk.embedded_1.apk b/tests/apk.embedded_1.apk new file mode 100644 index 0000000000000000000000000000000000000000..f0dd47f099809d41be8fbd2219a6cbc3f583db43 GIT binary patch literal 16876 zcmeHvbx^-RcRpfyvW_G?O-%~e#cDjtuV3Th z-(calkh7_WeGG**Hr@qDNx^q?cLo4D+<^8{gle5LquY1EZ-w#_nH~U6tqQ1z9rQg;*QpNDrQBqwfR3YJyIUuxOb-oH> z?kuUAH40^OAA}z5AUYxSh7talhrYXp&FYWzVNJ*#T0anNjq(Q87b@!;kytw$D`aoG zhgumW{M#I;piS*o5uP0gIFavlBxlQz1qrXpwHu8he|brR6t_spPqXCiQm0Zg8gs7) zct2FH#tGzy->5&65xeDtlFNO4rP%rmaREX1r5Gz8n|Iq?;S%yPa`eZq$cvkAY=ZTs zrnCaphQHWl&u7hRrueImnu47NbR5G!sR6sF1QRkfo8*4vBs2%?+VS!v6m2J#m`~Gr z43t?kQ?H(eTg_fPVxt^lnYd@^#XVu&-_RV^n-LgN76|uk%eNG1$SJT?E~vXya%+?u zwqc`e$s`&(6)Ms31s7~m>8NMrS*8PB=aOSC>%Ek_&!!SbM@CMMElWLc-@!akiPzBnntsWDDm}K&oOlTW2BKMvs&4Ci?!I%DUNz2vn(5`>gii z2!fF78X_~zOVmH@{v#%y$Bl1JpE&ahnznBD$#MQwxP{)zD0|3t2w}0`>c@c_Ti-a7 z6&>$&fskW0KL{mRICxlZEc-G@0N@ui0H6dO*07(n|62WS5x^1lQyhXj}atX|5HP&LR+yssPKs)oFrdkw2RL?=tv*T^V?QLA_{tIrhsn{dK)B3QPViW$Vp!C|*vy?%&=SlF~OX`QIo!YSl+~PA>sfc z;^Hu>1#O=?r@OCKLZSS1Q!oJla)zQ;-Bi>xBa94GG}O#RWsvbWjRer|9-tj{(A>vx zeWIi>5W~dGJaABB89x_-oUvZHWMay1xF%!VfNXl%X`-7qzN6jb(9FYfTnI-Xiy9cx zyr0Z$3B$yuf2>%KDpUdJZQt>d9g+nmci2FBilDpw%;i@Xw~4o+PK~~o`GhP8YiE0w z>iD=jsSt7>k^V3ug5uExy5xd|Q&Qb6imJV#<}U>i{h;ZnaA;RNs3mmZZ{FNtLC}QnDf`qAh2IOl!hqVPu7I?JW(9343ef)$v4>E{7Zq zNY-GRJ!x9^7rU2yCU6B3#eDdkI#F(jCdq_~DkxzxZuVJUH~UqiSHs=d>UTJ`4c%CI zcbp-`?iP{S+SarA=r`KNK4Yo4#XDXlF+BiVg`DD0eIts=kMT&NZ!KLXtGvRrGb_Xp zg0sjn=rc`~e$5QO1f3X+M8SeseGf} z8|1?f61@UcQ9uCJ$xI3g7`s0hb=y_3KRxvSbgDX@G&K8AwFfV^3L_aUh73aX4s`gQ zU)wmFa~bv4&Gy4dEkO!%0qnJVNA=IiwT;00@BK8!&AuMKl_MJasOBWNvp>8rhOM66 z*IzU8{LmIdd@h9b0VurD+>Uvt$bZar=f(tOJq`Z23L z738;@-mMmod!Un?v_%xVrSlrMOARw4DG67a7)qjfsJBz(FbTt7-GqZbH>9fH+sQxEl^Rge4(`!r-0OVrCv$#rVs^r zJY6&%%3x=6gMjPut+#Ht#m@;V=6a89=BSl#KCHi*S}#X@PZ!=H8ARE4J&bMiTsHC! zLb)c3g?nP-^rrboh&eWyL9ogWE#ZR#aqk@IN3CnW>=v(=Y^M5Gbkgw0yOCp)N*6%WXPciRNgS>#u*iDdU7^kT8a~gHMAk7YsEMH4}|TpqBPZHE*!poW*_YkOS@H zm`lvBzqe6uIc!$psO|`+u+DClXEalj@*=|Tl8G*uXEwX~VIv#bL#GZ@T<-zTB0+7esR z(h12RYEDm5!`mO?`n8HU(+wfO(W4@&MEjLY9U+6dRqL<63|?dIE{=uV$ln|w=hl88 zv_jRdcvEToMZ&eBLxVR{bav^~E$a=*x3q6ZXv4AQ`z$*Gl;vYd{PsTxSqJVWUXf+Q za93}IUw=g47Ad|Ng==T7{c!wY8nwUPqaCHJ0Fz?C1Ka5Ci{Hqd+)h|ZK-o@ zq`tU0Z?RX_4f~2Kk*RWmMONHH2vq@r0T{}Q7c)1vR6{^KB&1p05`FR&an|itZ(B;2 z#MymRJp%@rL>3Eo|B7rVTskNS6r+UDWArprCb zM#M2GF?{^(rKM0yNtxLZL&9c#A;;;K1$%mBD4NaE!8p|30E{Xg7sCc_=RjUQ_CK#LoO!Qqnd}!J>Jl5&c=TlW82f=IrjmK6 zh4$&@ctUHVpVsA;E|awQxp4;(WgUV#>t!Yx#^AigHFk4z-rQs7?x4>EF6Ll)eX>rO zAMwt)gm2~DuyrjWNqh~(!o}-6`EaokGeq`jO^fu$y|Rj{kzJ1v1O>-v&&SJ{O}GLr z6t$gvm|2PDp1p*QIhga}j;zq994TAM9qa5uC4m{JQM*q*=G>=l9{ua^WU9!Z)f(iZ zkHj@}Ip%?l)pnorb1IBOeB*H?XWx(4YbC{;oqf z0QmW|xp$26rYN>d!*V3V_RWZ4R{lF-7~VEk+Y^PJhws4LS|O&InzD3@_K{Z zl7e!!wQV0wKN0g8FI4(a>(F4eG~C*ZS8`jN)~ZXZ^9_xi*xBhcs*nT_rYU*qT3U}S z$6*gSpHKFn0)E9oh(%{XTN%gX_C2maVcikafTWUGTMtlWYtaZ_W#x9zF>v|$5{t}h z8a3*S*YWu??6YZ9*n;JHaPKZ#^EQgzt6>}o93+DU?>m>`?#U7jtm~Y0SyYtK3Ugq2 zVg`xI)J*DI8oX&x7haW?K(to2eR!2#H};}kyz|#N#jzvRw1OtGMH`x?Gjk0%E=DDV zUKwxeO1jz>hhxGZ&J=TwOrQO+$2lK-t(Az>%pNy&*TjM2vvMn8*Luqgm!tkXx^iuC zuG=-DU^QO)al&_WEGanldj+hgKe)G?B17Vyu`CZiUd|dn;Yco0yZ#&=1;y|P2*ujj z!7)w3x5u4lHpi$@9W)04BMNP4_1)2gNGDxz9cV2l(|;9aTxhwS-#Dp87$rinaaSKb z9u154vjy>uGh*DI+H^iqF(}u18F6$UK%Bs;gm^V>N6&|hS|szSHgpopGu>1 z2&MXW9~m(h?em(sgUQ5=F+|}=dj(*0*sqnN6S%jCLv_@7K`Jm(F$9z#vgjhi{VEnL z9AyQ1xun$%0Z%`VLM&{$!Jpd03e6*;%>-UiE1y5k8spU&a+Z;}F6}d2aqAxJ0Xp=H z(enp_$`FT((Snf`4UPn!(i?6HS#b)PY^7S+GW^JbF`IT_Gs(=j z;+wvZ=xY;CZ_K=jTordPLhu+**$qPanvi_uo$Gf_>E<^wwzwn?2T%o61#dFvsa)WZ z%q8mdz^>Wt6L$}+%uPX{0L(pC;3^aK_r2eJ3E$Wr8CbIWFitz3~yMwI>uKpC7zkGXitu- zg9Uj2%yMyY&*22f7u+?hO7HmjeRSRtsc1H>Ir>F@y!RTheRkD=c}_q>%|eR39q2=v zg!{f^wdbc3)?OKKrx*da#uDlzJ9*x?&%SwP{^B<(`j{T_yhiy1@hsf-%pmlzdeeAV z`ANzg>U#;w`3gOO&C+uklSoxS1~l#)1e-Vh)YNn((AL>YduY)IOttp!k7Pd~ewA`1 zI(LPS$H!kzcaOLKG7)#LjlmEomLYg>D=3cX?~id*-O3~+?@S0PYSo^h@gCv*%3zvYCisc?+IiS|?d`ZpF)&NkPK$M6cgHt* zO1GFpnzJ>-rO^!YFuF7%&igj>_KEc@WLvbBo*V7+gP58_Fpy6A!Ev10#3?u!s^(Zg zQbw{^IT0H>FHd4w^nD&`Zp#A4ibr7fsVO$QW+PkQMvYD*8!z5*UxlFhcJGeZ`|Wy2 zjFXi)SAhlEC6~i{<*gnqCrCYEt91?7(y^k^NLCa#(gSp{@cMUOL)0eUf8qXO_3Egm zkYD@&;d{}ZzwEJzG#bqGY6*|&@EkPZ={Hj?vkkOCP934k$c*GOb-r7K7|MWd?6uof%G5?aMvD3M-S)ov zuZ@^T3CCWCl&wE`Ub&linap*{ZV1@`S;QA$w^STi4e03sG2U!KIME^{ zGncUnHTRiM_wI+rSA1dzlKc-Nmv- z>dG2|_OT$(s7hz`DxU&RjP^B{=-_alp51X;P)4qk6KT6VOVshq5ahVY2`-))shlFc zLodi7W_PAPFNZb8MQDOH3<2Lw&4Yy_PcpYMOujHE=X`;^OvkQ;(lT1Y!pS|@P4AQ= z@DxQb?Bv`q>B5X;D-1m>q?|{Vwo1Vq-(Ce!hdaD)JeAUU>72=Y1asYoqHc8i*y4yZ zf&B>&QnQ{!E(^E|tXEaQvvHJoW6#*O8qrnq+0P9j-9}$0g<`_vizXdfmWK@?VONUP znIPMq7fplaF{CIOrwI4LI>#ZGjCn-i)MmGGQ$gxo&)ob|-YUwe;7FN*+i>~UIEn%< zF1}1{Z5`^5Jc?a}pCjW_6+XPNd)uHAKG->%6wxNZ&Z#E*t{`BjgyihtTajaEz@Vg1 zYBK(`i(9I+XCEybj@2e=;%Fdv{<`!V4bsiJUEW=l6uZ?vtBBF-ckFE zeON!k@38`hiW+Fb?<q zb>Rxj(Kjk0YiOgGS8KU5U&ZbDaqUz+rrpIh97-j*bxO|G8P-47*t>9U>di;dothc0 zat3`Z>y-WZD>zZr8_E7@ahLYK`is;0X3>(Of)>ck;|kbWX??k&u$DO3k@V(vbD)BV zv0G~**jHd?xtKZ5Y%5z->}Vp;l2n308I_F8w5Nl|!^80W)Ab&mp46q-Ywsb^>QVIu zD1H?k(0+QVo6duhs~%jud6tmpoZh?Ftc%s!U%n?8@;IcVdaFmrg07q2HaZQte)v9- z4>Cya4e*kbb^E5(;XH-WrE6YteE~Y-FZ~c12cl}($7I4zZKa5P18P+xw=K0g9=#nl zLCekYwr!p3Jw!|5L(H4~=+>oKnrTUJy#&9+lE5!Ctb|W6y&KJ=Eopx`JGe@@Y?l8; z0arq&a>mL_fHzYm3xv7Brw)}=O1jsK^i)L&lp`mK1~v@&MAZ8YcV&P`h{Tge-Z2>kUaif@RkFTg`I?R<^^N&Tl?pc~Qs*gekvhb$26 zd>oa;{1A}`a)!OFtwAv^MJ~CO8bU{BY9V}PNaPQm*7G$cq>uRa$5-#pK1w}7V~86Q zrdJ&=UqK&8+WANpi$Phg9};eyEydgAr%5}%>Gr-5lZxxASI)1CQAuh}5ecBMnpC$o zMAu|6u&FgZaHOj7j^%_Ys7s$*sUPw+>H!C&I?IQT{?fQPFnbG1T|8|#; zo3CwrVi~S@{QDSkoElRe;cy2ikl8IZ@RU3wmegxfWlMHyE?k{ktlHP5LSf8o2Lz-V zVUq$;<%If*VC^<Q}5`{~u9F#4fF6NdOJ zr^rxwX?%KDLCIW;gfrd1>Ldx#C%L_*xYw?h_gH0!zAYbR(4J5<h=8OJ&C`|HiW*(AhzNFdP|mhhLmTv702IrYZ2iGqiWN(FyOaMq?Ea|0|87 z_SWOmY7u%LO4|(BQ())0a1erix~Y#498c$<2_0cW!EsuAe8)RzNKBcv+vjC@M$(}X zk>5>Bi@z+#;56A%JbCfm*(la){lWRovF%x#{M2kkV~t>jIO3qrPw#V;$+U3n9%mF} z(BNo9-o+$u>D(M&EhZMc!0M*0oOMNtL4rqymMy6Uu^wv;ZBHAcx%&vc-bA@X<8_>& zZ63E?XrN(~RkkrkamldB55qotpfRs_RxnF1H~OGHF|T>z!r8dl0R3Uw;rg!DL48mP zVO@Tmw6i=JP~8A#LC=$^Iw^qfUIu1CV~@JI0pC1ChVMQstEsGrM(qY+_=-D*H^Q%G z){OZS{@hGgVzg(P8b{vIfP+im6lw5qepbH^XLy^74amDG6wf2o=vA4mp@eA2>khfL zDtz`p?|1j>oWJupoAn6;t4Y{z?1p6h8tN(=w+#N-Y3YfhI~#TA34?4-;+H}6h%emj zBla#Coyg-x>I4(u&56Cve0C2p){U*n{r!@G#;Wj;5bDYIiXOl3QLA`Ao~6i-ScWWM zSTWBG7Qy}|EL;%I&&8ELosv8{D<;Kw000c}pH4}zgX&+N_xz_pE*7w7pbDH`+*b19 zs-jHN3KA?_?BZgaZ`s(HRV4JHhwK7GutTn?zCjIfJEJqXQ#gK1E)hR@t7JHd%o^_q zJ@{j-P|?8H_QUc6A0OZ9H5pzp-!B|-!$8_DaXTq_ahzZZ@z{K5Waio63)3wGCWkXd z#G@&j01O3;jrI_}mFYkV>dfKD!i&0NIT99eu!p3? z=bS?cXYmvPvyR#taw}Z;%~CF|s_MLHrjBj`ie!R3RC}NugEvxidCT4nuol8R4#X5e z3J(PO<+#wq*%`@hbsup}!E&tTa(Kx1b!2A0Qdi}y5Dxm>gBG6mW+AKP3RkV6Zs5o2 zVBEoctCD?XMY#Q+Ubnvh9y`5$zyiBn9Ki|aKLV_*BFbTDJYcpl_2Jy|eq^YBq%P+Z z^$0kHe~KHAUGz_gQcI6Xl@3qr@F&U*a}>pzR0(`t6bdUJNrT7A!N$&3-3?cHXV#9S z(bbPKm1jw7*xuJmJlM(f9qSK9?vDtizW@kk*~V2&}bqQ$3ExjNva zPH~AZA@V7^>~^Z`(X9Gb{782s`N2ufO`Svz*yJf{pTE-r`e6ouA*VRVQMgnacC2mj#XN zBQ954(Y1ZvP<`mn(c)s(f*_<)vahsryT%Qxd@@J3;@eM@vz3(_jJr)O1+Z-708H z8Cr)0&%5pAo;cAgejLR`7gB=bdOKN;RSG4Ctebg)LDmxqp4FccPJ>8I zvP#Qb=RPG5St~C;=^En>Cmanm>CAi0%&+%;i2L;D>Pr8!(Sn|UFKL_Rn_wf|Eb}y9 z$gu70>9mB-)}`a2b_U&HdtbQ$Mi0+^^}B|f(@A~V`Eu`Y{`CdrE4tq#SE3O9J~`f8C3XuvK@?uE7if#(!Q#nZ!Ip?EMdj18ph zHpa++*HmPNcC2Gmuh`z6Lnt?h%BM2QMQ7!trLL_)1lS*Z~ZubuV_wGTl%e&BdhOsJ0?{$1vD>vlA6x*7B+ZN4>c zR(i!Jbi?MiJE~EH@J1a}>bYV@5B%0danoKmY8-vSn1p+dqwJQ6WNI^L3VC(J?Ckud zX?LA%eSH8g+eaaSS?egli1ep#$@9IyQS+I1@U5;g(yXG6e(v=Qk1%D2YS*KpTLf?= zxbX?k!qyvSUUR4Q;;d*BS&{0yO>23x{?ntJf#i9qyyOG@qpdk(d3ycB&q!$%q0;Gw z?X2Ziwkq-fII;Ho~)wPF~ZYFuX(WD-M_l=vwrvfTWQ?ZyUdnB5Y_g_6q8&7}8 zqVBRie>oJ=^5F4ec5*1%TlyJ5n?uX&85{z@!3l_1eQ<^-iHIW;zb~FvfJOLvHy1&c z-ZMnJKY>KzyMgq|gW=?a0uwU^-W^WSj>p2WrP`pLzg7#F<54tIyo`2=0!HFD{YKz7 z0>2UXjlgdNek1T3f!_%HKZU>z+MlQE1@k8-3`KARf@OPfVgm=WGJ>mLLZG3*54_}H ze(d#i^4ickC}$4uN=?R|a0V1M*jvv=ckJZ%;IMT-whNAV-2^Ar0LXRL0EmGcC`brM zNN59xuSOoeIsgP?F2nZw?04oI>Ix8wHlo~V=7Mui=*h>s78wxAZOAQnjG|=AF zh?Nu%g`J(1lbx3h{C3U7qm75c$;Zma#__M>|3pOq#H+s_7y`OWr|?v>Ii)%A`r`u+9Kg=5HXqKu=h)^Km9w|3UJl+1Csy=@bZ`i*JqD(JY0 zf+kE<*156$fRo~yCl14eiuS9iX=*D+Z;AnJQ=y@Hb4E!mlT&SQi5)vhXRaL>t)>JW zf!H+Ejj@He4jSfXNH+28&ja3PfeaVU<|5N$%+)vz13V-;3S5mb z4j)Ed84Z1u)sppWU{z0s|M;ALxImu(w;n4d-gdGnz*GZ^rrX`2S&aMpJ8jbK@pm!Zv$GWl&SBF9F0GK@ zI}4Fd!AizT0!E$$6&e>BTaWUG>UYKW7Lav$=?m4Q_5R&rZ!?L92`C&pqG-!ykEr2yB6FqKaWO(dRCtT2uh>Q1>~*JVW`w&Yt8iJ&5}xND=PZHQRo^$p1s7NIgx7C4mjkrdMMNQrjv?Kju96m9vM z>2Y`RhphHa_Fs)Hx$0xx0m8P%F5{gMO4%E0c*MIoy!D;P;0Xba`39hz z9Jl=u_zjkk!4m}@oL(l(OYk{n=fVfC+Q$)>h;g1S@@(RuReltl~7&-cu8U6LQ(ic8M)_efeQUc?vqU%KyU<>Y0?n zXFM-NyGTZ9vEI*_IYCkgfpw*{zNK$VhaRhn=W_{z<0}vILyP5uWN`1h9-hmdSB|)k z-ZLSvNpr6)*9o$2b9N!T{czcXQ7YB>!}RrWL5Eba2);C#_2(*#u~$f~0t|90a01Dt zc)nw!c*CDlD&8D&GN{wEuR6un$u^t6C3bq=&Sd#Ki_9U_vBlQ3HFcC{y(o9yDv}(H zJ0{q0h!-l=QQU1ihJ2~DfbW;rDg2&(&;_~TEl(Jujf_^S1|%0ACV5!5S^emjI)y#b z5M}Nlm`V?B!-=MMzfJJ}^f_n(>>PR_H#4WVe@ege-w6Ch;5P#QuOsl+d%mcWEV+u6 z1^HVWdlPGNPIe_(2uN&j#KB*G0Qmc|>6bqM{8#$h{{UWgLvdEVevHvDB@Mnnsus-&m3jQ8f@v?gI-{cARf3%kJFU5cP`~Df0@i)a}|2atG zpBnxdckpiwi{$@F12_udpDO<8bo{pp3hKY9_?rt-Nfrk7r57A{n|XN=6?rNBFT3an A;Q#;t literal 0 HcmV?d00001 diff --git a/tests/scanner.TestCase b/tests/scanner.TestCase index d1a0f63b..c40fc6a1 100755 --- a/tests/scanner.TestCase +++ b/tests/scanner.TestCase @@ -224,6 +224,12 @@ class ScannerTest(unittest.TestCase): fdroidserver.scanner.scan_binary(apkfile), 'Did not find bad code signature in binary', ) + apkfile = os.path.join(self.basedir, 'apk.embedded_1.apk') + self.assertEqual( + 1, + fdroidserver.scanner.scan_binary(apkfile), + 'Did not find bad code signature in binary', + ) def test_build_local_scanner(self): """`fdroid build` calls scanner functions, test them here"""