fix: handle missing props in control flow objects

with dead code injection, there may be references that access arbitrary properties that shouldn't be attempted to be inlined
j4k0xb · Jan 29, 2024 · 9e8d53f · 9e8d53f
1 parent 5c35af8
commit 9e8d53f
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/packages/webcrack/src/deobfuscate/control-flow-object.ts b/packages/webcrack/src/deobfuscate/control-flow-object.ts
@@ -135,7 +135,11 @@ export default {
         [...binding.referencePaths].reverse().forEach((ref) => {
           const memberPath = ref.parentPath as NodePath<t.MemberExpression>;
           const propName = getPropName(memberPath.node.property)!;
-          const value = props.get(propName)!;
+          const value = props.get(propName);
+          if (!value) {
+            ref.addComment('leading', 'webcrack:control_flow_missing_prop');
+            return;
+          }
 
           if (t.isStringLiteral(value)) {
             memberPath.replaceWith(value);