Bug Fix and QA (#2315)

* Bug Fix * QA * Version bumps
MobSF · Dec 28, 2023 · 9f0467c · 9f0467c
1 parent 3342311
commit 9f0467c
Show file tree

Hide file tree

Showing 6 changed files with 28 additions and 26 deletions.
diff --git a/mobsf/MobSF/init.py b/mobsf/MobSF/init.py
@@ -10,7 +10,7 @@
 
 logger = logging.getLogger(__name__)
 
-VERSION = '3.9.0'
+VERSION = '3.9.1'
 BANNER = """
   __  __       _    ____  _____       _____ ___  
  |  \/  | ___ | |__/ ___||  ___|_   _|___ // _ \ 

diff --git a/mobsf/MobSF/urls.py b/mobsf/MobSF/urls.py
@@ -284,13 +284,13 @@
         re_path(r'^ios/system_logs/$',
                 instance.system_logs,
                 name='ios_system_logs'),
-        re_path(r'^ios/download_data/(?P<bundle_id>([\w]*\.)+[\w-]{2,155})$',
+        re_path(r'^ios/download_data/(?P<bundle_id>([\w-]*\.)+[\w-]{2,155})$',
                 instance.download_data,
                 name='ios_download_data'),
         re_path(r'^ios/instrument/$',
                 ios_tests_frida.ios_instrument,
                 name='ios_instrument'),
-        re_path(r'^ios/view_report/(?P<bundle_id>([\w]*\.)+[\w-]{2,155})$',
+        re_path(r'^ios/view_report/(?P<bundle_id>([\w-]*\.)+[\w-]{2,155})$',
                 ios_view_report.ios_view_report,
                 name='ios_view_report'),
 

diff --git a/mobsf/MobSF/utils.py b/mobsf/MobSF/utils.py
@@ -635,7 +635,7 @@ def strict_package_check(user_input):
 
     For android package and ios bundle id
     """
-    pat = re.compile(r'^([\w]*\.)+[\w-]{2,155}$')
+    pat = re.compile(r'^([\w-]*\.)+[\w-]{2,155}$')
     resp = re.match(pat, user_input)
     if not resp or '..' in user_input:
         logger.error('Invalid package name/bundle id/class name')

diff --git a/mobsf/StaticAnalyzer/views/android/rules/android_permissions.yaml b/mobsf/StaticAnalyzer/views/android/rules/android_permissions.yaml
@@ -690,6 +690,8 @@
     - getLastKnownLocation\(
     - getBestProvider\(
     - sendExtraCommand\(
+    - Manifest\.permission\.ACCESS_FINE_LOCATION
+    - Context\.LOCATION_SERVICE
   input_case: exact
   severity: info
 - id: android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

diff --git a/poetry.lock b/poetry.lock
diff --git a/pyproject.toml b/pyproject.toml
@@ -1,6 +1,6 @@
 [tool.poetry]
 name = "mobsf"
-version = "3.9.0"
+version = "3.9.1"
 description = "Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis."
 keywords = ["mobsf", "mobile security framework", "mobile security", "security tool", "static analysis", "dynamic analysis", "malware analysis"]
 authors = ["Ajin Abraham <[email protected]>"]