MobSF/Mobile-Security-Framework-MobSF
1
0
Fork 0
mirror of https://github.com/MobSF/Mobile-Security-Framework-MobSF.git synced 2026-10-11 22:50:09 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix(rules): match the literal mode argument in getSharedPreferences (#2638)

Browse Source 
The world readable/writable patterns matched any argument list ending with 1 or 2, so decompiled identifiers such as var1, var2 or mode2 were reported as world permissions.

Signed-off-by: Eljees <[email protected]>
Co-authored-by: Ajin Abraham <[email protected]>
This commit is contained in:
Eljees
2026-08-09 16:57:21 -07:00
committed by GitHub
co-authored by Ajin Abraham
parent 4d85257b01
commit 3eadf6cc0a
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
mobsf/StaticAnalyzer/views/android/rules/android_rules.yaml
+2 -2
View File
@@ -612,7 +612,7 @@
type: RegexOr
pattern:
- MODE_WORLD_WRITABLE
- \.getSharedPreferences\(.{0,50}?2\)
- \.getSharedPreferences\([^)]{0,50}?,\s*2\s*\)
- 'openFileOutput\(\s*".{1,48}"\s*,\s*2\s*\)'
severity: high
input_case: exact
@@ -627,7 +627,7 @@
type: RegexOr
pattern:
- MODE_WORLD_READABLE
- \.getSharedPreferences\(.{0,50}?1\)
- \.getSharedPreferences\([^)]{0,50}?,\s*1\s*\)
- 'openFileOutput\(\s*".{1,48}"\s*,\s*1\s*\)'
severity: high
input_case: exact