chainguard-dev / bincapz

detect malicious program behaviors
Apache License 2.0
380 stars 24 forks source link

diff rename heuristics didn't work for glib 2.80.0 -> 2.80.1 update #206

Open tstromberg opened 2 months ago

tstromberg commented 2 months ago

bincapz's diff rename heuristics did not work in this PR: https://github.com/wolfi-dev/os/pull/18752

Added: /usr/lib/libgio-2.0.so.0.8000.1 Added: /usr/lib/libgirepository-2.0.so.0.8000.1 Added: /usr/lib/libglib-2.0.so.0.8000.1 Added: /usr/lib/libgmodule-2.0.so.0.8000.1 Added: /usr/lib/libgobject-2.0.so.0.8000.1 Added: /usr/lib/libgthread-2.0.so.0.8000.1 Modified: /usr/bin/gapplication Modified: /usr/bin/gdbus Modified: /usr/bin/gi-compile-repository Modified: /usr/bin/gi-decompile-typelib Modified: /usr/bin/gi-inspect-typelib Modified: /usr/bin/gio Modified: /usr/bin/gio-querymodules Modified: /usr/bin/glib-compile-schemas Modified: /usr/bin/gsettings Modified: /usr/libexec/gio-launch-desktop Modified: /usr/share/man/man1/gapplication.1 Modified: /usr/share/man/man1/gdbus-codegen.1 Modified: /usr/share/man/man1/gdbus.1 Modified: /usr/share/man/man1/gi-compile-repository.1 Modified: /usr/share/man/man1/gi-decompile-typelib.1 Modified: /usr/share/man/man1/gi-inspect-typelib.1 Modified: /usr/share/man/man1/gio-querymodules.1 Modified: /usr/share/man/man1/gio.1 Modified: /usr/share/man/man1/glib-compile-resources.1 Modified: /usr/share/man/man1/glib-compile-schemas.1 Modified: /usr/share/man/man1/glib-genmarshal.1 Modified: /usr/share/man/man1/glib-gettextize.1 Modified: /usr/share/man/man1/glib-mkenums.1 Modified: /usr/share/man/man1/gobject-query.1 Modified: /usr/share/man/man1/gresource.1 Modified: /usr/share/man/man1/gsettings.1 Modified: /usr/share/man/man1/gtester-report.1 Modified: /usr/share/man/man1/gtester.1 Deleted: /usr/lib/libgio-2.0.so.0.8000.0 Deleted: /usr/lib/libgirepository-2.0.so.0.8000.0 Deleted: /usr/lib/libglib-2.0.so.0.8000.0 Deleted: /usr/lib/libgmodule-2.0.so.0.8000.0 Deleted: /usr/lib/libgobject-2.0.so.0.8000.0 Deleted: /usr/lib/libgthread-2.0.so.0.8000.0

I'm really not sure why either, since it seems exactly like the case it was designed for. Either way, this is a great unit test case.