search

rizinorg / cutter

Free and Open Source Reverse Engineering Platform powered by rizin
https://cutter.re
GNU General Public License v3.0
15.35k stars 1.14k forks source link

Update yara plugin due openssl issues #3293

Open wargio opened 4 months ago

wargio commented 4 months ago 
$ ./Cutter-v2.3.4-Linux-x86_64.AppImage 
qt.qpa.plugin: Could not find the Qt platform plugin "wayland" in ""
"0.7.1" "0.7.1"
Setting PYTHONHOME = "/tmp/.mount_Cutterv59kUY/usr"  for AppImage.
PYTHONHOME = "/tmp/.mount_Cutterv59kUY/usr"
ERROR: rz_sys_dlopen: error: /tmp/.mount_Cutterv59kUY/usr/lib/rizin/plugins/librz_yara.so (libcrypto.so.1.1: cannot open shared object file: No such file or directory)
Plugins are loaded from "/home/deroad/.local/share/rizin/cutter/plugins"
Native plugins are loaded from "/home/deroad/.local/share/rizin/cutter/plugins/native"
Python plugins are loaded from "/home/deroad/.local/share/rizin/cutter/plugins/python"
Loaded 0 plugin(s).
Plugins are loaded from "/tmp/.mount_Cutterv59kUY/usr/local/share/rizin/cutter/plugins"
Plugins are loaded from "/tmp/.mount_Cutterv59kUY/usr/share/rizin/cutter/plugins"
Native plugins are loaded from "/tmp/.mount_Cutterv59kUY/usr/share/rizin/cutter/plugins/native"
Load Error for plugin "libcutter_yara_plugin.so" : "Cannot load library /tmp/.mount_Cutterv59kUY/usr/share/rizin/cutter/plugins/native/libcutter_yara_plugin.so: (librz_yara.so: cannot open shared object file: No such file or directory)"
Loaded 1 plugin(s).
Only C and default locale supported with the posix collation implementation
Only C and default locale supported with the posix collation implementation
Case insensitive sorting unsupported in the posix collation implementation

(libcrypto.so.1.1: cannot open shared object file: No such file or directory

XVilka commented 4 months ago

@wargio it's unclear what is to be done here

wargio commented 4 months ago

i need to update the plugin. it's a reminder for myself.

eirnym commented 2 months ago

I'd like to add that on macOS (I've tested on version 2.3.4) when app is started from terminal I see message as shown below. This message means that yara is built using local openssl library, but can't be loaded. The solution for macOS is to provide bundled version of openssl.

ERROR: rz_sys_dlopen: error: /Volumes/Cutter/Cutter.app/Contents/Resources/lib/rizin/plugins/librz_yara.dylib (dlopen(/Volumes/Cutter/Cutter.app/Contents/Resources/lib/rizin/plugins/librz_yara.dylib, 0x0009): Library not loaded: '/opt/local/libexec/openssl3/lib/libcrypto.3.dylib'
  Referenced from: '/Volumes/Cutter/Cutter.app/Contents/Resources/lib/rizin/plugins/librz_yara.dylib'
  Reason: tried: '/opt/local/libexec/openssl3/lib/libcrypto.3.dylib' (code signature in <4137ACB3-****-****-****-************> '/opt/local/libexec/openssl3/lib/libcrypto.3.dylib' not valid for use in process: mapped file has no Team ID and is not a platform binary (signed with custom identity or adhoc?)), '/usr/lib/libcrypto.3.dylib' (no such file))
Plugins are loaded from "/Users/eirnym/Library/Application Support/rizin/cutter/plugins"
Native plugins are loaded from "/Users/eirnym/Library/Application Support/rizin/cutter/plugins/native"
Python plugins are loaded from "/Users/eirnym/Library/Application Support/rizin/cutter/plugins/python"
Loaded 0 plugin(s).
Plugins are loaded from "/Library/Application Support/rizin/cutter/plugins"
Plugins are loaded from "/Volumes/Cutter/Cutter.app/Contents/Resources/plugins"
Native plugins are loaded from "/Volumes/Cutter/Cutter.app/Contents/Resources/plugins/native"
Load Error for plugin "libcutter_yara_plugin.so" : "Cannot load library /Volumes/Cutter/Cutter.app/Contents/Resources/plugins/native/libcutter_yara_plugin.so: (dlopen(/Volumes/Cutter/Cutter.app/Contents/Resources/plugins/native/libcutter_yara_plugin.so, 0x0085): Library not loaded: '/opt/local/libexec/openssl3/lib/libcrypto.3.dylib'\n  Referenced from: '/Volumes/Cutter/Cutter.app/Contents/Resources/lib/rizin/plugins/librz_yara.dylib'\n  Reason: tried: '/opt/local/libexec/openssl3/lib/libcrypto.3.dylib' (code signature in <4137ACB3-****-****-****-************> '/opt/local/libexec/openssl3/lib/libcrypto.3.dylib' not valid for use in process: mapped file has no Team ID and is not a platform binary (signed with custom identity or adhoc?)), '/usr/lib/libcrypto.3.dylib' (no such file))"
Loaded 1 plugin(s).
qt.qpa.fonts: Populating font family aliases took 290 ms. Replace uses of missing font family "Helvetica, Arial, Sans-serif" with one that exists to avoid this cost.
wargio commented 2 months ago

if this is from the latest cutter, yes this is known. try to get the cutter dev version.