Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Insecure malloc function is used instead of calloc #426

Open
Gautam-zodape opened this issue Mar 10, 2022 · 0 comments
Open

Insecure malloc function is used instead of calloc #426

Gautam-zodape opened this issue Mar 10, 2022 · 0 comments

Comments

@Gautam-zodape
Copy link

hi Team,
We are getting error in PEN Test for iOS application which used rollbar(internally used KSCrash).
PEN Test check for the security performance of app. We used mobSF (https://mobsf.github.io/Mobile-Security-Framework-MobSF/) tool for the PEN Test.

We get following error in Security PEN Test-

Insecure malloc function is used instead of calloc :-

  • malloc is insecure to use and we have calloc as safe alternative of it which should be used.

Do you have any plan for updating this function in your library?
If yes then will it be available in next release or any ETA will be very helpful for me.

Following are the locations and line number of the malloc function used in KSCrash code -

  • KSKrashMonitor_NSException : Line Number 71
  • KSKrashMonitor_Signal : Line Number 131, 148
  • KSKrashMonitor_System : Line Number 130, 142
  • KSKrashReport : Line Number 1829
  • KSKrashReport_Fixer : Line Number 332, 335
  • KSString : Line Number 79
  • KSFileUtils : Line Number 171, 289
  • KSJSONCodecObjC : Line Number 130
  • KSLogger : Line Number 307
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant