UMariana Trench, umhlaziyi ovulekile we-static code analyzer ka-Facebook

Facebook yethulwe ezinsukwini ezimbalwa ezedlule wakhulula isihlaziyi somthombo ovulekile, uMariana Trench, okuhloswe ngalo ukukhomba ukuba sengozini kuzinhlelo zokusebenza ze-Android nezinhlelo zeJava.

Ngo- kunikezwa amandla okuhlaziya amaphrojekthi ngaphandle kwamakhodi womthombo, okutholakala kuphela i-bytecode yomshini obonakalayo we-Dalvik. Enye inzuzo ukushesha kakhulu kokubulawa (ukuhlaziywa kwemigqa eyizigidi eziningana zekhodi kuthatha cishe imizuzwana eyi-10), okukuvumela ukuthi usebenzise iMariana Trench ukubheka zonke izinguquko ezihlongozwayo njengoba zilethwa.

Isihlaziyi yathuthukiswa njengengxenye yephrojekthi yokwenza inqubo yokubuyekeza ikhodi isebenze umthombo wezinhlelo zokusebenza zeselula kusuka ku-Facebook, Instagram nakuWhatsapp.

Sabelana ngemininingwane mayelana neMariana Trench (MT), ithuluzi esilisebenzisayo ukuthola nokuvikela amaphutha ezokuphepha nobumfihlo kuzinhlelo zokusebenza ze-Android nezeJava. Njengengxenye yemizamo yethu yokusiza ukukala ukuphepha ngokwakha i-automation, sisanda kuvula i-MT ukuxhasa onjiniyela bezokuphepha ku-Facebook nakuyo yonke imboni.

Lokhu okuthunyelwe kungokwesithathu ochungechungeni lwethu lokuntywila okujulile kumathuluzi wokuhlaziya amile futhi ashukumisayo esiwathembayo. I-MT uhlelo lwakamuva, olulandela iZoncolan nePysa, olwakhelwe ikhodi yeHack nePython ngokulandelana.

Engxenyeni yokuqala ka-2021, uhhafu wabo bonke ubungozi kuzinhlelo zokusebenza zeselula ze-Facebook bukhonjwe kusetshenziswa amathuluzi wokuhlaziya azenzakalelayo. Ikhodi kaMariana Trench isondelene kakhulu namanye amaphrojekthi we-Facebook, isibonelo, ukusebenza kwe-Redex bytecode optimizer kusetshenziselwa ukuhlaziya i-bytecode kanti umtapo wolwazi we-SPARTA usetshenziselwa ukutolika nokubuka imiphumela. Ukuhlaziywa kwe-static.

Ubungozi obungaba khona nezinkinga zokuphepha zikhonjwa ngokuhlaziya ukuhamba kwedatha ngesikhathi kwenziwa isicelo, okuvumela ukukhomba izimo lapho kucutshungulwa idatha yangaphandle eluhlaza ekwakhiweni okuyingozi, njengemibuzo ye-SQL, ukusebenza kwamafayela, namakholi aholela ekwethulweni kwezinhlelo zangaphandle.

I-MT yenzelwe ukuthi iskene izisekelo zamakhodi weselula ezinkulu futhi ifulege izinkinga ezingaba khona kuzicelo zokudonsa ngaphambi kokukhiqizwa. Yenziwe njengomphumela wokubambisana okusondelene phakathi konjiniyela be-Facebook nabonjiniyela be-software, abaqeqesha abakwa-MT ukuthi babheke le khodi futhi bahlaziye ukuthi idatha igeleza kanjani kuyo. Ukuhlaziya ukugeleza kwedatha kuyasiza ngoba izindaba eziningi zokuphepha nezobumfihlo zingalingiswa njengedatha egeleza lapho kungafanele khona.

Umsebenzi womhlaziyi wehliselwe ekunqumeni imithombo yedatha nezingcingo eziyingozi, lapho imininingwane yoqobo kungafanele isetshenziswe khona: Isicubunguli siqapha ukwedlula kwedatha ngochungechunge lwezingcingo zomsebenzi futhi sixhuma idatha yokuqala nezindawo ezingaba yingozi kukhodi.

Kusukela ku-MT, ukugeleza kwedatha kungachazwa ngu:

  • Umthombo: iphuzu lendabuko. Lokhu kungaba yintambo elawulwa ngumsebenzisi ofaka uhlelo lokusebenza nge- `Intent.getData`.
  • Isinki: indawo okuyiwa kuyo. Ku-Android, lokhu kungaba ucingo oluthi `Log.w` noma` Runtime.exec`. Isibonelo, idatha evela kukholi eya ku-Intent.getData ithathwa njengomthombo wokuqapha, futhi izingcingo eziya ku-Log.w nakuRuntime.exec zithathwa njengezisebenzisayo eziyingozi.

Isisekelo esikhulu sekhodi singaqukatha izinhlobo eziningi zemithombo nabamukeli abahambelanayo. Singatshela uMT ukuthi asikhombise ukugeleza okuthile ngokuchaza imithetho.

Umthetho ungacacisa, isibonelo, ukuthi sifuna ukuthola ukuqondiswa kabusha kwezinhloso (izinkinga ezivumela abahlaseli ukuthola idatha ebucayi) ngokuchaza umthetho osikhombisa yonke imikhondo kusuka emithonjeni "elawulwa ngumsebenzisi" kusinki "sokuqondiswa kabusha kwezinhloso.

Okokugcina uma unesifiso sokwazi okwengeziwe ngakho, ungabheka i- imininingwane kusixhumanisi esilandelayo.


Shiya umbono wakho

Ikheli lakho le ngeke ishicilelwe. Ezidingekayo ibhalwe nge *

*

*

  1. Ubhekele imininingwane: Miguel Ángel Gatón
  2. Inhloso yedatha: Lawula Ugaxekile, ukuphathwa kwamazwana.
  3. Ukusemthethweni: Imvume yakho
  4. Ukuxhumana kwemininingwane: Imininingwane ngeke idluliselwe kubantu besithathu ngaphandle kwesibopho esisemthethweni.
  5. Isitoreji sedatha: Idatabase ebanjwe yi-Occentus Networks (EU)
  6. Amalungelo: Nganoma yisiphi isikhathi ungakhawulela, uthole futhi ususe imininingwane yakho.