Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

安全检测漏洞：格式化字符串漏洞、日志数据泄露风险 #452

Open
Masterxiechengxun opened this issue Nov 17, 2022 · 0 comments
Open

安全检测漏洞：格式化字符串漏洞、日志数据泄露风险 #452

Masterxiechengxun opened this issue Nov 17, 2022 · 0 comments

Comments

@Masterxiechengxun
Copy link

iOS APP下用到的 jcore-ios-3.2.5.a 链接库被第三方安全公司扫描以下安全漏洞（链接库我又无法自行修改）：

  • 代码中使用到了sscanf，被提示存在 格式化字符串漏洞。
    cordova-plugin-jcore/jcore-ios-3.2.5.a JCommonOperationRequest.o sscanf

  • release环境下使用了NSLog打印日志，被提示存在 日志数据泄露风险。是否可以宏定义一下NSLog函数？在release环境就不打印任何运行日志数据了。
    cordova-plugin-jcore/jcore-ios-3.2.5.a JCommonOperationRequest.o NSLog
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@Masterxiechengxun