alterakey / trueseeing

Non-decompiling Android app vulnerability scanner (DC25 demo lab, CB17)
GNU General Public License v3.0
59 stars 14 forks source link

Crash case #515

Closed alterakey closed 6 months ago

alterakey commented 6 months ago
[-] fatal: unhandled exception
Traceback (most recent call last):
  File "/usr/local/lib/python3.9/site-packages/trueseeing/app/inspect.py", line 199, in run
    await self._run(s)
  File "/usr/local/lib/python3.9/site-packages/trueseeing/app/inspect.py", line 219, in _run
    if not await self._run_cmd(o, line=s):
  File "/usr/local/lib/python3.9/site-packages/trueseeing/app/inspect.py", line 257, in _run_cmd
    await self._as_cmd(ent['e'](args=tokens))
  File "/usr/local/lib/python3.9/site-packages/trueseeing/app/inspect.py", line 265, in _as_cmd
    await coro
  File "/usr/local/lib/python3.9/site-packages/trueseeing/app/cmd/scan.py", line 71, in _scan
    nr = await scanner.scan(q)
  File "/usr/local/lib/python3.9/site-packages/trueseeing/core/scan.py", line 53, in scan
    await asyncio.gather(*[_call(k, v) for k,v in self._sigs.items()])
  File "/usr/local/lib/python3.9/site-packages/trueseeing/core/scan.py", line 48, in _call
    await ent['e']()
  File "/usr/local/lib/python3.9/site-packages/trueseeing/sig/android/security.py", line 795, in detect
    target_val = DataFlow(q).solved_constant_data_in_invocation(cl, 0)
  File "/usr/local/lib/python3.9/site-packages/trueseeing/core/android/analysis/flow.py", line 148, in solved_constant_data_in_invocation
    raise self.UnsolvableValueError(graph=arg)
UnboundLocalError: local variable 'arg' referenced before assignment