mik3y / usb-serial-for-android

Android USB host serial driver library for CDC, FTDI, Arduino and other devices.
MIT License
4.81k stars 1.58k forks source link

Need Support for security fix #493

Closed madhuri3195 closed 1 year ago

madhuri3195 commented 1 year ago

Hi,

I use the dependency for my Android project and build the apk. when I share the apk with the help of Gmail, it is detect it is a virus so I scan that, 3 antiviruses detect it detects a virus. and I was scan particular usb_serial_for_android .zip file through a virus and here is the link https://www.virustotal.com/gui/file/1cc763c7a18f82c994e17735d1a04e955922fd36c6687a626bebcc0b70be7512/detection

kai-morich commented 1 year ago

only 1 of 61 tools marked this as virus, so more likely is a false positive.

where do you got the usb_serial_for_android.zip from? I am not aware that this library / jitpack provides zip files.

madhuri3195 commented 1 year ago

The version i have used is { groupId 'com.github.mik3y' artifactId 'usb-serial-for-android' version 'v3.5.0beta' } and used this code(https://github.com/mik3y/usb-serial-for-android/archive/refs/tags/v3.5.0.zip. ) and facing the same issue.

kai-morich commented 1 year ago

If there would an explanation what the virus report complains about, it could be adressed. Please contact McAfee support to get more details.

Not clear what is scanned at VirusTotal. The usb-serial-for-android sources zip you mentioned is 190KB, but VirusTotal reports a file size of 600KB including compilation results, so either you compiled or downloaded from somewhere else.

Nevertheless I asume it is a false positive as only 1 of 61 tools marks this code.

Jai-GAY commented 1 year ago

the Window Defender and Symantec 14.3 RU5 scan both downloaded https://github.com/mik3y/usb-serial-for-android/archive/refs/heads/master.zip and https://github.com/mik3y/usb-serial-for-android/archive/refs/tags/v3.5.1.zip, do not detect any issue.