search

rollbar / rollbar-ios

Objective-C library for crash reporting and logging with Rollbar.
https://docs.rollbar.com/docs/ios
MIT License
65 stars 61 forks source link

Getting warning in penetration testing due to KSKRash of Rollbar #351

Closed Gautam-zodape closed 1 year ago

Gautam-zodape commented 2 years ago

We are getting error in PEN Test for iOS application which used rollbar. PEN Test check for the security performance of app. We used mobSF (https://mobsf.github.io/Mobile-Security-Framework-MobSF/) tool for the PEN Test.

We get following error in Security PEN Test-

Insecure malloc function is used instead of calloc :- malloc is insecure to use and we have calloc as safe alternative of it which should be used.

ghost commented 1 year ago

We released the Rollbar Apple SDK v3.0.0, which deprecates the Rollbar iOS SDK. The Apple SDK is a modernized approach to collecting errors from Apple devices and fixes many iOS SDK problems and pain points. Please, consider migrating over to the Apple SDK. You can find its documentation here. Please open an issue or contact our support if you encounter problems.