darvincisec / DetectFrida

Detect Frida for Android
MIT License
665 stars 138 forks source link

native crash #15

Closed IceDcap closed 2 years ago

IceDcap commented 3 years ago

image image image image

darvincisec commented 3 years ago

Are you able to reproduce this issue with the apk provided in this repo? If yes, can you share the logs specific for this application

IceDcap commented 3 years ago

Are you able to reproduce this issue with the apk provided in this repo? If yes, can you share the logs specific for this application

It's hard to reproduce, but i will try it. Do you think about that reading buffer from the address provided in maps will out of bounds by the length from origin elf's segment.

darvincisec commented 3 years ago

From Android 10 onwards, maps contains libc addresses in segmented fashion. Changes are made in a generic fashion to address this. Looks like there is a need to put some more protection before calculating the checksum.

darvincisec commented 3 years ago

are you able to reproduce with this project?

IceDcap commented 3 years ago

are you able to reproduce with this project?

Sorry, I can't reproduce it from my devices.