ayecue / greybel-vs

VSCode extension for GreyScript.
https://marketplace.visualstudio.com/items?itemName=ayecue.greybel-vs
MIT License
16 stars 7 forks source link

Output of scan_address is different from the game #101

Closed Olipro closed 1 year ago

Olipro commented 1 year ago

The string returned from scan_address in GreyHack places a \n\n after each vulnerability. Greybel does not.

This is significant because the existence of the double newline allows you to easily split the string into a list of separate attacks.

For example, GreyHack produces the following:

decompiling source...
searching unsecure values...
Unsafe check: loop in array objectotalbytebu. Buffer overflow.
* Checking root active user.
* Using namespace kernel_module.so compiled at version >= 1.0.0

Unsafe check: string copy in true. Buffer overflow.
* Checking an active user.
* Using namespace kernel_module.so compiled at version >= 1.0.0

Unsafe check: loop in array s_h. Buffer overflow.
* Checking root active user.
* Using namespace kernel_module.so compiled at version >= 1.0.0

Unsafe check: string copy in gotoa. Buffer overflow.
* Checking registered users equal to 4.

Unsafe check: loop in array headdr. Buffer overflow.
* Using namespace kernel_module.so compiled at version >= 1.0.0
* Checking an active user.
* Checking registered users equal to 2.

Greybel produces this:

decompiling source...
searching unsecure values...
Unsafe check: loop in array send_bitscount. Buffer overflow.
Unsafe check: string copy in thisCanvasGroupalpha. Buffer overflow.
* Checking registered users equal to 2.
* Checking an active user.
Unsafe check: string copy in var. Buffer overflow.
* Using namespace kernel_module.so compiled at version >= 1.0.0.0
* Checking registered users equal to 5.
* Checking an active user.
* Checking root active user.
ayecue commented 1 year ago

Thanks for reporting. Should be fixed as soon https://github.com/ayecue/greybel-vs/pull/102 is merged.

ayecue commented 1 year ago

Okay fix should be available now.

Olipro commented 1 year ago

All good. Parsing working correctly, happy days.