Facebook yakazarurwa mazuva mashoma apfuura akaburitsa iyo yakavhurwa sosi static analyzer, Mariana Trench, inoitirwa kuona kusagadzikana muzvirongwa zveApple uye zvirongwa zveJava.
At iko kugona kuongorora mapurojekiti pasina kodhi kodhi kunopihwa, Yekuti chete bytecode yemuchina weDalvik inowanikwa. Imwe mukana ndeyekumhanya kwazvo kwekumhanya (kuongororwa kwemamirioni akati wandei emakodhi anotora masekondi gumi), izvo zvinokutendera kuti ushandise Mariana Trench kutarisa shanduko dzese dzakatsanangurwa sezvavanounzwa.
Muongorori yakagadzirwa sechikamu cheprojekti yekugadzirisa maitiro ekuongorora kodhi kunobva mafoni mafomu yeFacebook, Instagram neWhatsapp.
Isu tinogovana ruzivo nezve Mariana Trench (MT), chishandiso chatinoshandisa kuona uye kudzivirira chengetedzo uye zvakavanzika zvikanganiso mune Android uye Java kunyorera. Sechikamu cheyedu kuedza kubatsira kuyera chengetedzo kuburikidza nekuvaka otomatiki, isu nguva pfupi yadarika takavhura MT kutsigira mainjiniya ekuchengetedza paFacebook uye mhiri kwemaindasitiri.
Iyi posvo ndeyechitatu mune yedu nhevedzano yekudzika kwakadzika kuita static uye ine simba yekuongorora maturusi atinovimba. MT ndiyo yazvino system, inotevera Zoncolan nePysa, yakavakirwa Hack uye Python kodhi zvakateerana.
Muhafu yekutanga ye2021, hafu yezvose zvinokuvadzwa muFacebook mobile application zvakaverengerwa vachishandisa otomatiki ekuongorora maturusi. Kodhi yaMariana Trench yakabatana zvakanyanya nemamwe maprojekiti epaFacebook, semuenzaniso, iyo Redex bytecode optimizer oparesheni inoshandiswa kuongorora bytecode uye raibhurari yeSpARTA inoshandiswa pakududzira kunoonekwa uye kudzidza kwemhedzisiro.
Zvinogona kukanganisika uye nyaya dzekuchengetedza zvinoonekwa nekuongorora kuyerera kwedata panguva yekuitwa kwechikumbiro, iyo inobvumira kuziva mamiriro ezvinhu mune iyo yakasvibirira yekunze data inogadziriswa mune zvine ngozi kuvaka, senge SQL mibvunzo, faira mashandiro, uye mafoni anotungamira mukutanga kwezvirongwa zvekunze.
MT yakagadzirirwa kuti igone kuongorora makuru mafoni kodhi mabhesi uye mureza matambudziko anogona kuve mukukwevera zvikumbiro vasati vaenda mukugadzirwa. Yakagadzirwa semhedzisiro yekubatana kwepedyo pakati pechengetedzo yeFacebook uye mainjiniya esoftware, avo vanodzidzisa MT kutarisa kodhi uye kuongorora kuti data rinoyerera sei kuburikidza naro. Kuongorora kuyerera kwedata kunobatsira nekuti nyaya zhinji dzekuchengetedza uye dzekuvanzika dzinogona kuteedzerwa sedata kuyerera kwarisingafanirwe.
Basa remuongorori rakaderedzwa kuti riwane masosi edata uye nhare dzine njodzi, uko iyo yekutanga data isingafanire kushandiswa: Mufundisi anotarisa kupfuurwa kwedata kuburikidza necheni yekufona kwemabasa uye inobatanidza iyo yekutanga data nenzvimbo dzinogona kuve nengozi mukodhi.
Sezvo muMT, kuyerera kwedata kunogona kutsanangurwa ne:
- Kwayaka: poindi yekubva. Iyi inogona kuve tambo inodzorwa nemushandisi kupinda muchishandiswa kuburikidza ne` Intent.getData`.
- Kunyura: kuenda. Pa Android, izvi zvinogona kuve kufona ku` Log.w` kana` Runtime.exec`. Semuenzaniso, data kubva kufona kuenda kuIntent.getData inoonekwa sosi yekutarisa, uye inodaidzira kuLog.w uye Runtime.exec inoonekwa semashandisirwo ane njodzi.
Nheyo huru yekodhi inogona kuva nemhando dzakasiyana dzezvinyorwa uye zvinogamuchirwa zvinogamuchira. Tinogona kutaurira MT kuti itiratidze chaiko kuyerera nekutsanangura mitemo.
Mutemo unogona kudoma, semuenzaniso, kuti isu tinoda kutsvaga chinangwa redirects (matambudziko anotendera varwisi kutora dhata yakajeka) nekutsanangura mutemo unoratidza isu tese matanho kubva ku "mushandisi-anodzorwa" masosi kudhibhi re "redirects yezvinangwa.
Finalmente kana iwe uchifarira kuziva zvakawanda nezvazvo, unogona kutarisa iyo ruzivo mune inotevera chinongedzo.