Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

NowSecure static analysis: Not Using Built-in Binary Protection (Stack Smashing) Exposes App Components to Memory Corruption Attacks #6626

Closed
RGU5Android opened this issue Jan 16, 2025 · 7 comments

Comments

@RGU5Android
Copy link

NowSecure static analysis: Not Using Built-in Binary Protection (Stack Smashing) Exposes App Components to Memory Corruption Attacks for libcrashlytics-trampoline.so

Image
Image

@google-oss-bot
Copy link
Contributor

I couldn't figure out how to label this issue, so I've labeled it for a human to triage. Hang tight.

@lehcar09
Copy link
Contributor

Hi @RGU5Android, thank you for raising the issue. Can you share the Firebase BOM version you’re using? Thanks!

@MichaelVerdon MichaelVerdon added the type: feature request New feature or request label Jan 17, 2025
@google-oss-bot
Copy link
Contributor

Hey @RGU5Android. We need more information to resolve this issue but there hasn't been an update in 5 weekdays. I'm marking the issue as stale and if there are no new updates in the next 5 days I will close it automatically.

If you have more information that will help us get to the bottom of this, just add a comment!

@google-oss-bot
Copy link
Contributor

Since there haven't been any recent updates here, I am going to close this issue.

@RGU5Android if you're still experiencing this problem and want to continue the discussion just leave a comment here and we are happy to re-open this.

@RGU5Android
Copy link
Author

We are using following firebase libraries:

implementation "com.google.firebase:firebase-analytics"
implementation "com.google.firebase:firebase-config"
implementation "com.google.firebase:firebase-crashlytics"
implementation("com.google.firebase:firebase-crashlytics-ndk")
implementation "com.google.firebase:firebase-messaging"
implementation "com.google.firebase:firebase-perf"
implementation platform("com.google.firebase:firebase-bom:33.1.1")

The firebase-bom version that we are using is 33.1.1

@RGU5Android
Copy link
Author

Please re-open the issue.

@lehcar09 lehcar09 reopened this Feb 3, 2025
@google-oss-bot
Copy link
Contributor

Since there haven't been any recent updates here, I am going to close this issue.

@RGU5Android if you're still experiencing this problem and want to continue the discussion just leave a comment here and we are happy to re-open this.

@firebase firebase locked and limited conversation to collaborators Mar 6, 2025
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Projects
None yet
Development

No branches or pull requests

4 participants