1f6603c60Sopenharmony_ci/* 2f6603c60Sopenharmony_ci * Copyright (c) 2023 Huawei Device Co., Ltd. 3f6603c60Sopenharmony_ci * 4f6603c60Sopenharmony_ci * Licensed under the Apache License, Version 2.0 (the "License"); 5f6603c60Sopenharmony_ci * you may not use this file except in compliance with the License. 6f6603c60Sopenharmony_ci * You may obtain a copy of the License at 7f6603c60Sopenharmony_ci * 8f6603c60Sopenharmony_ci * http://www.apache.org/licenses/LICENSE-2.0 9f6603c60Sopenharmony_ci * 10f6603c60Sopenharmony_ci * Unless required by applicable law or agreed to in writing, software 11f6603c60Sopenharmony_ci * distributed under the License is distributed on an "AS IS" BASIS, 12f6603c60Sopenharmony_ci * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. 13f6603c60Sopenharmony_ci * See the License for the specific language governing permissions and 14f6603c60Sopenharmony_ci * limitations under the License. 15f6603c60Sopenharmony_ci */ 16f6603c60Sopenharmony_ci 17f6603c60Sopenharmony_ciimport "console" 18f6603c60Sopenharmony_ciimport "elf" 19f6603c60Sopenharmony_ci 20f6603c60Sopenharmony_cirule OpenHarmony_SA_2022_1205 21f6603c60Sopenharmony_ci{ 22f6603c60Sopenharmony_ci meta: 23f6603c60Sopenharmony_ci date = "2023-01-10" 24f6603c60Sopenharmony_ci openharmony_sa = "OpenHarmony-SA-2022-1205" 25f6603c60Sopenharmony_ci cve = "CVE-2022-44455" 26f6603c60Sopenharmony_ci severity = "medium" 27f6603c60Sopenharmony_ci affacted_files = "appspawn" 28f6603c60Sopenharmony_ci affected_func = "CheckAppProperty" 29f6603c60Sopenharmony_ci 30f6603c60Sopenharmony_ci strings: 31f6603c60Sopenharmony_ci $features = "process name error" nocase wide ascii 32f6603c60Sopenharmony_ci $features1 = "process name length is 0" nocase wide ascii 33f6603c60Sopenharmony_ci 34f6603c60Sopenharmony_ci condition: 35f6603c60Sopenharmony_ci (elf.machine == elf.EM_ARM) and ($features and not $features1) and console.log("OpenHarmony-SA-2022-1205 testcase pass") 36f6603c60Sopenharmony_ci 37f6603c60Sopenharmony_ci}