1f6603c60Sopenharmony_ci/* 2f6603c60Sopenharmony_ci * Copyright (c) 2023 Huawei Device Co., Ltd. 3f6603c60Sopenharmony_ci * 4f6603c60Sopenharmony_ci * Licensed under the Apache License, Version 2.0 (the "License"); 5f6603c60Sopenharmony_ci * you may not use this file except in compliance with the License. 6f6603c60Sopenharmony_ci * You may obtain a copy of the License at 7f6603c60Sopenharmony_ci * 8f6603c60Sopenharmony_ci * http://www.apache.org/licenses/LICENSE-2.0 9f6603c60Sopenharmony_ci * 10f6603c60Sopenharmony_ci * Unless required by applicable law or agreed to in writing, software 11f6603c60Sopenharmony_ci * distributed under the License is distributed on an "AS IS" BASIS, 12f6603c60Sopenharmony_ci * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. 13f6603c60Sopenharmony_ci * See the License for the specific language governing permissions and 14f6603c60Sopenharmony_ci * limitations under the License. 15f6603c60Sopenharmony_ci */ 16f6603c60Sopenharmony_ci 17f6603c60Sopenharmony_ciimport "console" 18f6603c60Sopenharmony_ciimport "elf" 19f6603c60Sopenharmony_ci 20f6603c60Sopenharmony_ci 21f6603c60Sopenharmony_cirule OpenHarmony_SA_2022_1101 22f6603c60Sopenharmony_ci{ 23f6603c60Sopenharmony_ci meta: 24f6603c60Sopenharmony_ci date = "2023-03-02" 25f6603c60Sopenharmony_ci openharmony_sa = "OpenHarmony-SA-2022-1101" 26f6603c60Sopenharmony_ci cve = "CVE-2022-43451" 27f6603c60Sopenharmony_ci severity = "high" 28f6603c60Sopenharmony_ci affacted_files = "nwebspawn" 29f6603c60Sopenharmony_ci affected_func = "main" 30f6603c60Sopenharmony_ci 31f6603c60Sopenharmony_ci strings: 32f6603c60Sopenharmony_ci $features = "strncpy_s appspawn server name error" nocase wide ascii 33f6603c60Sopenharmony_ci 34f6603c60Sopenharmony_ci condition: 35f6603c60Sopenharmony_ci (elf.machine == elf.EM_ARM) and $features and console.log("OpenHarmony-SA-2022-1101 testcase pass") 36f6603c60Sopenharmony_ci 37f6603c60Sopenharmony_ci} 38