Ua wehe ʻo Facebook i ka Mariana Trench static analyzer

Ua hoʻolauna ʻo Facebook i kahi mea hōʻike static hou, ʻo Mariana Trench, i manaʻo e ʻike i nā nāwaliwali o nā noi no ka Android platform a me nā polokalamu Java. Hiki ke kālailai ʻia nā papahana me ka ʻole o nā code kumu, kahi bytecode wale nō no ka mīkini virtual Dalvik i loaʻa. ʻO kekahi pōmaikaʻi ʻē aʻe ʻo kona wikiwiki hoʻokō kiʻekiʻe loa (ʻo ka nānā ʻana o nā miliona mau laina o ke code ma kahi o 10 kekona), hiki iā ʻoe ke hoʻohana iā Mariana Trench e nānā i nā hoʻololi i manaʻo ʻia i ko lākou hiki ʻana. Ua kākau ʻia ke code papahana ma C ++ a ua māhele ʻia ma lalo o ka laikini MIT.

Ua hoʻomohala ʻia ka mea loiloi ma ke ʻano he papahana e hoʻokaʻawale i ke kaʻina o ka nānā ʻana i nā kikokikona kumu o nā noi kelepona no Facebook, Instagram a me Whatsapp. I ka hapa mua o 2021, ua ʻike ʻia ka hapalua o nā mea nāwaliwali i nā noi kelepona Facebook me ka hoʻohana ʻana i nā mea hana loiloi automated. Hoʻopili pono ʻia ka code Mariana Trench me nā papahana Facebook ʻē aʻe; no ka laʻana, ua hoʻohana ʻia ka Redex bytecode optimizer no ka hoʻopau ʻana i ka bytecode, a ua hoʻohana ʻia ka waihona SPARTA no ka wehewehe ʻana a me ke aʻo ʻana i nā hopena o ka nānā ʻana.

ʻIke ʻia nā pilikia a me nā pilikia pilikino e ka nānā ʻana i nā kahe ʻikepili i ka wā o ka hoʻokō ʻana i ka noi no ka ʻike ʻana i nā kūlana kahi e hana ʻia ai ka ʻikepili o waho i nā hana weliweli, e like me nā nīnau SQL, nā hana faila, a me nā kelepona e hoʻomaka ai i nā polokalamu waho.

Ke iho nei ka hana a ka mea anaana i ka ike ana i na kumu o ka ikepili a me na kelepona pilikia kahi e pono ole ai ke hoohana ia ka ikepili kumu - na ka mea anaana e hahai i ka hele ana o ka ikepili ma o ke kaulahao o na kelepona hana a hookui i ka ikepili kumu me na wahi pilikia i ke code. . No ka laʻana, manaʻo ʻia ka ʻikepili i loaʻa ma ke kelepona iā Intent.getData e koi i ka nānā kumu, a ua manaʻo ʻia nā kelepona iā Log.w a me Runtime.exec i nā hoʻohana weliweli.

Ua wehe ʻo Facebook i ka Mariana Trench static analyzer


Source: opennet.ru

Pākuʻi i ka manaʻo hoʻopuka