Skip to content
#

bytecode

Here are 456 public repositories matching this topic...

mbenz89
mbenz89 commented Nov 21, 2018

When jimplifying com.reddit.frontpage-214190.apk(Reddit v. 2.26.2), the following exception is thrown:

Exception in thread "main" Unexpected type null
	at soot.jimple.toolkits.typing.integer.ClassHierarchy.typeNode(ClassHierarchy.java:152)
	at soot.jimple.toolkits.typing.integer.TypeResolver.typeVariable(TypeResolver.java:121)
	at soot.jimple.toolkits.typing.integer.ConstraintCollecto
h3xstream
h3xstream commented Oct 5, 2020

Description

BeanUtils is a library that is doing automatic mapping to Java object.
It can cause arm when the attack controls part of the list of properties being sets. BeanUtils does not blacklist properties like class, classloader or other objects that are likely to load arbitrary classes and possibly run code.

Code

import org.apache.commons.beanutils.BeanUtils;

public
ethereumjs-vm
jochem-brouwer
jochem-brouwer commented Oct 16, 2020

Lots of methods in Common have to do with numbers. We sometimes convert BNs to numbers (for instance block numbers) and feed those to Common. Common should support inputs where this input is of type BN and should also handle arithmetic as BN. We can keep supporting numbers by internally converting it to BN and then feeding it to the same method which handles the input as BN.

Improve this page

Add a description, image, and links to the bytecode topic page so that developers can more easily learn about it.

Curate this topic

Add this topic to your repo

To associate your repository with the bytecode topic, visit your repo's landing page and select "manage topics."

Learn more

You can’t perform that action at this time.