You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
The text was updated successfully, but these errors were encountered:
Simon-Good
changed the title
facedetection包含的libmnnfacedetection.so存在编译选项相关安全风险,请关注
facedetection包含的libmnnfacedetection.so存在编译选项相关安全风险,请关注解决
Jul 27, 2021
facedetection-0.0.5.aar中的resources\jni\arm64-v8a\libmnnfacedetection.so,没有使用-fstack-protector-all或-fstack-protector-strong编译选项。可能导致缓冲区溢出攻击漏洞,导致应用程序被恶意劫持或崩溃。
按编译器不同:
1.GCC4.9版本及以上可使用-fstack-protector-strong进行加固
2.GCC4.9版本以下可使用-fstack-protector-all进行加固
请facedetection提供经过安全的编译选项加固后的so,谢谢
参考链接:https://android-developers.googleblog.com/2016/07/protecting-android-with-more-linux.html
The text was updated successfully, but these errors were encountered: