I-Facebook yazisa uhlalutyi olutsha oluvulekileyo lwe-static, i-Mariana Trench, ejoliswe ekuchongeni ubuthathaka kwizicelo zeqonga le-Android kunye neenkqubo zeJava. Kunokwenzeka ukuhlalutya iiprojekthi ngaphandle kweekhowudi zomthombo, apho kuphela i-bytecode yomshini we-Dalvik okhoyo. Enye iadvanteji sisantya esiphezulu kakhulu sokubulawa (uhlalutyo lwemigca yekhowudi ezigidi eziliqela ithatha malunga nemizuzwana eyi-10), ekuvumela ukuba usebenzise i-Mariana Trench ukujonga zonke iinguqu ezicetywayo njengoko zifika. Ikhowudi yeprojekthi ibhaliwe kwi-C ++ kwaye ihanjiswa phantsi kwelayisenisi ye-MIT.
I-analyzer yaphuhliswa njengenxalenye yeprojekthi yokuzenzekelayo inkqubo yokuphonononga izicatshulwa zomthombo wezicelo zeselula ze-Facebook, Instagram kunye ne-Whatsapp. Kwisiqingatha sokuqala sika-2021, isiqingatha sabo bonke ubuthathaka kwizicelo zeselfowuni zikaFacebook zachongwa kusetyenziswa izixhobo zokuhlalutya ezizenzekelayo. Ikhowudi yaseMariana Trench idityaniswe ngokusondeleyo nezinye iiprojekthi zikaFacebook; umzekelo, iRedex bytecode optimizer yasetyenziselwa ukwahlula i-bytecode, kwaye ithala leencwadi le-SPARTA lasetyenziselwa ukutolika ngokubonakalayo nokufunda iziphumo zohlalutyo olungatshintshiyo.
Ubuthathaka obunokwenzeka kunye nemiba yangasese ichongiwe ngokuhlalutya ukuhamba kwedatha ngexesha lokwenziwa kwesicelo ukuchonga iimeko apho idatha yangaphandle eluhlaza icutshungulwa kwizakhiwo ezinobungozi, njengemibuzo ye-SQL, ukusebenza kweefayile, kunye neefowuni ezibangela iinkqubo zangaphandle.
Umsebenzi we-analyzer wehla ekuchongeni imithombo yedatha kunye neefowuni ezinobungozi apho idatha yomthombo akufanele isetyenziswe - i-analyzer ilandelela ukuhamba kwedatha ngekhonkco leefowuni zokusebenza kwaye idibanisa idatha yomthombo kunye neendawo ezinobungozi kwikhowudi. . Umzekelo, idatha efunyenwe ngomnxeba oya kwi-Intent.getData ithathwa njengefuna ukukhangelwa komthombo, kwaye iifowuni eziya kwi-Log.w kunye ne-Runtime.exec zithathwa njengezinto ezinobungozi.
umthombo: opennet.ru