Skip to content

Commit

Permalink
Update MASWE-0116.md (#3057)
Browse files Browse the repository at this point in the history
  • Loading branch information
cpholguera authored Nov 7, 2024
1 parent 4e8bddf commit c2f3ff5
Showing 1 changed file with 4 additions and 1 deletion.
5 changes: 4 additions & 1 deletion weaknesses/MASVS-CODE/MASWE-0116.md
Original file line number Diff line number Diff line change
Expand Up @@ -11,13 +11,16 @@ refs:
- https://www.mcafee.com/enterprise/en-us/assets/white-papers/wp-secure-coding-android-applications.pdf
- https://mas.owasp.org/MASTG/0x05i-Testing-Code-Quality-and-Build-Settings/#binary-protection-mechanisms
- https://mas.owasp.org/MASTG/0x06i-Testing-Code-Quality-and-Build-Settings/#binary-protection-mechanisms
- https://sensepost.com/blog/2021/on-ios-binary-protections/
- https://www.sans.org/blog/stack-canaries-gingerly-sidestepping-the-cage/
draft:
description: e.g., PIC, stack canaries. Alternative title could be Memory Anti-Exploitation Mechanisms Not Implemented
topics:
- PIC
- stack canaries
note: PIC cannot be switched off in newer versions of Android, the NDK does not link against such libraries anymore [source](https://cs.android.com/android/platform/superproject/main/+/main:bionic/linker/linker_main.cpp;l=397?q=linker_main&ss=android%2Fplatform%2Fsuperproject%2Fmain).
status: draft

observed_examples:
- https://nvd.nist.gov/vuln/detail/CVE-2019-3568
---

0 comments on commit c2f3ff5

Please sign in to comment.