Skip to content

6.2.6

Latest
Latest

Choose a tag to compare

View all tags
@github-actions github-actions released this 06 Nov 00:07
6.2.6
6f9091e

Release Notes

Version: 6.2.6
Previous: 6.2.4
Commits: 23
Contributors: 4

Related versions

  • radare2 6.2.6
  • Frida 17.26.0

Highlights

More details

Authors

Aleksandr Tynianov Kirby Kuehl pancake renovate[bot]

Changes

  • Release 6.2.6
  • Update Frida again
  • Use r2 6.2.6
  • Remove the build-fridatools CI job
  • Workaround Frida 17.25 package manager failing on missing packages
  • Frida 17.25 probes node_modules//package.json before installing each
  • package but no longer catches the file-not-found error, making every fresh
  • install fail. Seed placeholder manifests from package-lock.json, and again
  • for nested packages from the install-progress signal, so the probe treats
  • them as missing and replaces them with the real package.
  • Fix swapped ternary in dl2 breaking the build
  • Update to Frida 17.25.2
  • Update eslint
  • io_frida: skip resume for device-only sessions
  • Closing a device-only session ('frida://0' on Windows) logs a spurious
  • 'frida_device_resume_sync: Invalid PID' error: __close() calls resume()
  • unconditionally, and with nothing spawned or attached rf->pid is 0, so
  • resuming PID 0 can only fail.
    • resume() returns early when pid < 1 (also covers the -1 sentinel)
    • __close() only resumes when the target is actually suspended, so
  • detaching from a regular attached process no longer resumes it
    • :dl2 refuses to inject when there is no target pid
  • Add r2plugin machinery to link r2frida statically inside radare2
    • Hook into libr/xps like r2hermes and r2flutter, for both make and meson
    • Link io_frida into libr_core with a core plugin that registers frida://
    • Add r2plugin/Makefile to fetch the frida devkit and agent without r2
    • Meson needs r_core_additional_deps and -Duse_sys_zip=true (zlib clash)
    • Add CI jobs building radare2 git with r2frida inside
  • Run make fmt and default R2V to 6.2.4
    • Reformat package.json, the debug agent modules and io_frida.c
    • Fix the swapped ternary branches the formatter left in the dl2 command
  • Fix minimatch vulnerability, pin typescript 6 and fix lint errors
    • Override minimatch@^10 to ^11.0.1 (GHSA-g3hv-75wg-m249), which dependabot can't resolve on its own
    • Pin typescript to 6.0.3 since typescript-eslint doesn't support TS 7 yet
    • Fix the eslint errors that were hidden while eslint was crashing
  • Fix CI test failures and test meson builds
    • Add the missing quoted script.js fixture
    • Allocate two pages in the search boundary test (4K pages on Linux)
    • Resolve relative entrypoints against cwd when using -r in r2frida-compile
    • Pin frida in the fridatools job, newer frida-pm fails to install deps
    • Add meson build jobs for Linux and macOS
  • Add frida and r2frida version scripts for maintainance
  • Add meson build support
  • Add more missing tests
  • Add handy src/Makefile
  • Replace r_cons_gprintf with r_cons_printf using rf->r2core->cons
  • Update actions/setup-python action to v7.1.0
  • Do not trust the agent-provided file.log path
  • The log-file filename came from the agent, which runs inside the target,
  • so a hostile process could run commands, append to files or open
  • connections on the host. Track file.log on the host side instead and
  • feed '|cmd' messages to the program stdin rather than through the shell.
  • Supersedes #898
  • Reject entry names that escape the extraction dir
  • Fix build and 32bit crash
  • Pin and update github actions

Assets 6
Loading