search

lief-project / LIEF

LIEF - Library to Instrument Executable Formats (C++, Python, Rust)
https://lief.re
Apache License 2.0
4.48k stars 621 forks source link

Shared Library Binary Analysis are wrong #557

Closed anda5 closed 3 years ago

anda5 commented 3 years ago

Based on this issue: https://github.com/MobSF/Mobile-Security-Framework-MobSF/issues/1676#issuecomment-792367940 it looks like there are some binary analysis that is wrong ->Regarding binary analysis, MobSF uses LIEF project for Binary Analysis.

romainthomas commented 3 years ago

What is wrong exactly ?

romainthomas commented 3 years ago

Feel free to re-open with a clear description of your problem.

anda5 commented 3 years ago

I have this analysis from MOBSF app_scan (2).pdf with warning about FORTIFY_SOURCE=2 - this flag is added automatically by Android NDK when building: (comment from xamarin: https://github.com/xamarin/xamarin-android/issues/5592#issuecomment-778315966 )

romainthomas commented 3 years ago

LIEF doesn't not assert and does not expose an API whether the library/binary has been compiled with FORTIFY_SOURCE. This assertion is handled by MobSF

anda5 commented 3 years ago

Ok, thank you

abdi191188 commented 2 years ago

I have this analysis from MOBSF app_scan (2).pdf with warning about FORTIFY_SOURCE=2 - this flag is added automatically by Android NDK when building: (comment from xamarin: xamarin/xamarin-android#5592 (comment) )

Hello, I have the same problem when they performed the pentest on my mobile application

abdi191188 commented 2 years ago

Ok, thank you

@anda5 were you able to resolve this issue?