Back to library list

com.facebook.soloader__soloader

Column Insecure: Icon yes indicates the version is insecure, otherwise no
Column CryptoMisuse: Icon yes indicates the version has cryptographic API misuse, otherwise no
Version Insecure CryptoMisuse Rule name Method Statement Details
0.1.0 no       no
0.2.0 no       no
0.3.0 no       no
0.4.0 no       yes MessageDigest com.facebook.soloader.SoLoader$1.load(Ljava/lang/String;I)V $r10 = virtualinvoke r2.<java.security.MessageDigest: byte[] digest()>() Unexpected call to method <java.security.MessageDigest: byte[] digest()> on object of type java.security.MessageDigest. Expect a call to one of the following methods <java.security.MessageDigest: void update(byte[])>,<java.security.MessageDigest: void update(byte[],int,int)>,<java.security.MessageDigest: byte[] digest(byte[])>,<java.security.MessageDigest: void update(java.nio.ByteBuffer)>,<java.security.MessageDigest: void update(byte)>
- - yes MessageDigest com.facebook.soloader.SoLoader$1.load(Ljava/lang/String;I)V r2 = staticinvoke <java.security.MessageDigest: java.security.MessageDigest getInstance(java.lang.String)>(varReplacer134) First parameter (with value "MD5") should be any of {SHA-256, SHA-384, SHA-512}
0.4.1 no       yes MessageDigest com.facebook.soloader.SoLoader$1.load(Ljava/lang/String;I)V $r10 = virtualinvoke r2.<java.security.MessageDigest: byte[] digest()>() Unexpected call to method <java.security.MessageDigest: byte[] digest()> on object of type java.security.MessageDigest. Expect a call to one of the following methods <java.security.MessageDigest: void update(byte[])>,<java.security.MessageDigest: void update(byte[],int,int)>,<java.security.MessageDigest: byte[] digest(byte[])>,<java.security.MessageDigest: void update(java.nio.ByteBuffer)>,<java.security.MessageDigest: void update(byte)>
- - yes MessageDigest com.facebook.soloader.SoLoader$1.load(Ljava/lang/String;I)V r2 = staticinvoke <java.security.MessageDigest: java.security.MessageDigest getInstance(java.lang.String)>(varReplacer132) First parameter (with value "MD5") should be any of {SHA-256, SHA-384, SHA-512}
0.5.0 no       yes MessageDigest com.facebook.soloader.SoLoader$1.load(Ljava/lang/String;I)V $r10 = virtualinvoke r2.<java.security.MessageDigest: byte[] digest()>() Unexpected call to method <java.security.MessageDigest: byte[] digest()> on object of type java.security.MessageDigest. Expect a call to one of the following methods <java.security.MessageDigest: void update(byte[])>,<java.security.MessageDigest: void update(byte[],int,int)>,<java.security.MessageDigest: byte[] digest(byte[])>,<java.security.MessageDigest: void update(java.nio.ByteBuffer)>,<java.security.MessageDigest: void update(byte)>
- - yes MessageDigest com.facebook.soloader.SoLoader$1.load(Ljava/lang/String;I)V r2 = staticinvoke <java.security.MessageDigest: java.security.MessageDigest getInstance(java.lang.String)>(varReplacer133) First parameter (with value "MD5") should be any of {SHA-256, SHA-384, SHA-512}
0.5.1 no       yes MessageDigest com.facebook.soloader.SoLoader$1.load(Ljava/lang/String;I)V $r10 = virtualinvoke r2.<java.security.MessageDigest: byte[] digest()>() Unexpected call to method <java.security.MessageDigest: byte[] digest()> on object of type java.security.MessageDigest. Expect a call to one of the following methods <java.security.MessageDigest: void update(byte[])>,<java.security.MessageDigest: void update(byte[],int,int)>,<java.security.MessageDigest: byte[] digest(byte[])>,<java.security.MessageDigest: void update(java.nio.ByteBuffer)>,<java.security.MessageDigest: void update(byte)>
- - yes MessageDigest com.facebook.soloader.SoLoader$1.load(Ljava/lang/String;I)V r2 = staticinvoke <java.security.MessageDigest: java.security.MessageDigest getInstance(java.lang.String)>(varReplacer134) First parameter (with value "MD5") should be any of {SHA-256, SHA-384, SHA-512}