Magic-Mirror/radare2
1
0
Fork 0
mirror of https://github.com/radareorg/radare2.git synced 2024-12-27 07:55:14 +00:00
Code Issues Actions 2 Packages Projects Releases Wiki Activity

Fix command injection vulnerability in dex methods

Browse Source
This commit is contained in:
pancake 2017-06-08 04:15:38 +02:00
parent 8c80c2a9bb
commit 4be4af58fd
1 changed files with 4 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
libr/core/cbin.c
View File

@ -2338,8 +2338,11 @@ static int bin_classes(RCore *r, int mode) {
}
r_list_foreach (c->methods, iter2, sym) {
char *mflags = r_core_bin_method_flags_str (sym, mode);
r_cons_printf ("\"f method%s.%s.%s = 0x%"PFMT64x"\"\n", mflags, c->name, sym->name, sym->vaddr);
char *cmd = r_str_newf ("\"f method%s.%s.%s = 0x%"PFMT64x"\"\n", mflags, c->name, sym->name, sym->vaddr);
r_str_replace_char (cmd, '\n', 0);
r_cons_printf ("%s\n", cmd);
R_FREE (mflags);
free (cmd);
}
} else if (IS_MODE_JSON (mode)) {
if (c->super) {