search

datatheorem / TrustKit

Easy SSL pinning validation and reporting for iOS, macOS, tvOS and watchOS.
MIT License
2.01k stars 362 forks source link

Remove usage of strlen, memcpy and malloc #262

Open HariIDPal opened 3 years ago

HariIDPal commented 3 years ago

Environment Xcode version: 12.5 TrustKit Pod version: 1.7.0 Language: Swift

Issue: We are using the trustKit for SSL Pinning in our application. Our penetration testing team have found out that some insecure source code functions are being used in the application(strlen, memcpy and malloc) which is from the Trustkit library's below functions: registry_search RSSwizzle trie_search

Could you remove these from the Trustkit library in your upcoming release or if it is required, could you let us know why it is required?