Facebook yakaunza itsva yakavhurika static analyzer, Mariana Trench, ine chinangwa chekuona kusagadzikana mumashandisirwo eiyo Android platform uye Java zvirongwa. Zvinogoneka kuongorora mapurojekiti pasina kodhi yekodhi, iyo chete bytecode yemuchina weDalvik chaiwo unowanikwa. Imwe bhenefiti ndeyekumhanya kwayo kukuru kwekuita (kuongororwa kwemamiriyoni akati wandei mitsara yekodhi inotora masekonzi gumi), iyo inobvumidza iwe kushandisa Mariana Trench kutarisa shanduko dzese dzakarongwa sezvavanosvika. Iyo kodhi yeprojekiti yakanyorwa muC ++ uye yakagoverwa pasi peMIT rezinesi.
Iyo analyzer yakagadziridzwa sechikamu chepurojekiti yekushandura otomatiki maitiro ekudzokorora zvinyorwa zvemafambisirwo emafoni eFacebook, Instagram neWhatsapp. Muhafu yekutanga ya2021, hafu yekusagadzikana kwese muFacebook nharembozha yakaonekwa pachishandiswa otomatiki ekuongorora maturusi. Iyo Mariana Trench kodhi yakanyatsopindirana nemamwe mapurojekiti eFacebook; semuenzaniso, iyo Redex bytecode optimizer yakashandiswa kuburitsa iyo bytecode, uye raibhurari yeSPARTA yakashandiswa kududzira nekuona uye kudzidza mhedzisiro yekuongorora kwakamira.
Zvingangove zvisizvo uye nyaya dzekuvanzika dzinoonekwa nekuongorora kuyerera kwedata panguva yekushandiswa kwechikumbiro kuona mamiriro apo data rekunze rinogadziriswa mune zvine njodzi zvivakwa, senge SQL mibvunzo, faira mashandiro, uye mafoni anokonzeresa zvirongwa zvekunze.
Basa reanalyzer rinouya pasi pakuona masosi e data uye mafoni ane njodzi umo iyo sosi data haifanirwe kushandiswa - analyzer inoteedzera mafambiro e data kuburikidza neketani yebasa rekufona uye inobatanidza iyo sosi data nenzvimbo dzingangove nengozi mukodhi. . Semuyenzaniso, data yakagamuchirwa kuburikidza nekufona kuIntent.getData inoonekwa sekuda kutariswa kwaunobva, uye nhare kuLog.w neRuntime.exec dzinoonekwa sekushandiswa kune njodzi.
Source: opennet.ru