Skip to content

Commit

Permalink
Update MASWE-0116.md (OWASP#3057)
Browse files Browse the repository at this point in the history
  • Loading branch information
cpholguera authored and serek8 committed Jan 2, 2025
1 parent 9db304c commit 79d1079
Showing 1 changed file with 4 additions and 1 deletion.
5 changes: 4 additions & 1 deletion weaknesses/MASVS-CODE/MASWE-0116.md
Original file line number Diff line number Diff line change
Expand Up @@ -11,13 +11,16 @@ refs:
- https://www.mcafee.com/enterprise/en-us/assets/white-papers/wp-secure-coding-android-applications.pdf
- https://mas.owasp.org/MASTG/0x05i-Testing-Code-Quality-and-Build-Settings/#binary-protection-mechanisms
- https://mas.owasp.org/MASTG/0x06i-Testing-Code-Quality-and-Build-Settings/#binary-protection-mechanisms
- https://sensepost.com/blog/2021/on-ios-binary-protections/
- https://www.sans.org/blog/stack-canaries-gingerly-sidestepping-the-cage/
draft:
description: e.g., PIC, stack canaries. Alternative title could be Memory Anti-Exploitation Mechanisms Not Implemented
topics:
- PIC
- stack canaries
note: PIC cannot be switched off in newer versions of Android, the NDK does not link against such libraries anymore [source](https://cs.android.com/android/platform/superproject/main/+/main:bionic/linker/linker_main.cpp;l=397?q=linker_main&ss=android%2Fplatform%2Fsuperproject%2Fmain).
status: draft

observed_examples:
- https://nvd.nist.gov/vuln/detail/CVE-2019-3568
---

0 comments on commit 79d1079

Please sign in to comment.