diff --git a/demo/sectest/poc_patch_scan/2023-03/OpenHarmony-SA-2023-0302/OpenHarmony-SA-2023-0302.md b/demo/sectest/poc_patch_scan/2023-03/OpenHarmony-SA-2023-0302/OpenHarmony-SA-2023-0302.md deleted file mode 100644 index 9aab36d8fe7da011d43be522c2a8584532afbbe9..0000000000000000000000000000000000000000 --- a/demo/sectest/poc_patch_scan/2023-03/OpenHarmony-SA-2023-0302/OpenHarmony-SA-2023-0302.md +++ /dev/null @@ -1,47 +0,0 @@ -# OpenHarmony-SA-2023-0302 - -## 1、漏洞分析 - -**根因分析** - -安装hap包时,包管理子系统并不检查配置文件config.json中部分字符串的长度,超长字符串导致出现各种问题 - -**漏洞复现步骤** - -1. 准备一个hap文件 -2. 打开hap包,修改config.json加入一个超长的字符串 -3. 对hap包重新签名,安装到OH系统中 -4. 重启OH,可以看到大部分的应用图标消失。如果这时候(不卸载直接使用安装命令)再次安装该hap包,剩余的应用图标也会消失 -5. 卸载恶意应用,图标会重新复原 - -## 2、受影响版本 - -OpenHarmony-v3.1-Release到OpenHarmony-v3.1.4-Release - -## 3、漏洞触发用例 - - - -## 4、验证效果 - -*提供执行效果截图* - -**合入补丁前版本** - -1.安装恶意应用并重启 - -1 - -2 - -2.卸载应用 - -3 - -4 - -**合入补丁后版本** - -安装恶意应用,会直接报错 - -5 \ No newline at end of file diff --git a/demo/sectest/poc_patch_scan/2023-03/OpenHarmony-SA-2023-0302/img/1.png b/demo/sectest/poc_patch_scan/2023-03/OpenHarmony-SA-2023-0302/img/1.png deleted file mode 100644 index e8d758e62120bcc19ac7e9ab4f4dc77dfe9b7344..0000000000000000000000000000000000000000 Binary files a/demo/sectest/poc_patch_scan/2023-03/OpenHarmony-SA-2023-0302/img/1.png and /dev/null differ diff --git a/demo/sectest/poc_patch_scan/2023-03/OpenHarmony-SA-2023-0302/img/2.png b/demo/sectest/poc_patch_scan/2023-03/OpenHarmony-SA-2023-0302/img/2.png deleted file mode 100644 index 76bea29d23ccdc374639c3c971ca27b38678ddf8..0000000000000000000000000000000000000000 Binary files a/demo/sectest/poc_patch_scan/2023-03/OpenHarmony-SA-2023-0302/img/2.png and /dev/null differ diff --git a/demo/sectest/poc_patch_scan/2023-03/OpenHarmony-SA-2023-0302/img/3.png b/demo/sectest/poc_patch_scan/2023-03/OpenHarmony-SA-2023-0302/img/3.png deleted file mode 100644 index f3aa0b7ea5033d480be4a600394257678b26a466..0000000000000000000000000000000000000000 Binary files a/demo/sectest/poc_patch_scan/2023-03/OpenHarmony-SA-2023-0302/img/3.png and /dev/null differ diff --git a/demo/sectest/poc_patch_scan/2023-03/OpenHarmony-SA-2023-0302/img/4.png b/demo/sectest/poc_patch_scan/2023-03/OpenHarmony-SA-2023-0302/img/4.png deleted file mode 100644 index 2a72539ad6494502d3512feda4ebe280c41eda8b..0000000000000000000000000000000000000000 Binary files a/demo/sectest/poc_patch_scan/2023-03/OpenHarmony-SA-2023-0302/img/4.png and /dev/null differ diff --git a/demo/sectest/poc_patch_scan/2023-03/OpenHarmony-SA-2023-0302/img/5.png b/demo/sectest/poc_patch_scan/2023-03/OpenHarmony-SA-2023-0302/img/5.png deleted file mode 100644 index 8cc9d66d44106ced2de1457c6011c119fdacfb9b..0000000000000000000000000000000000000000 Binary files a/demo/sectest/poc_patch_scan/2023-03/OpenHarmony-SA-2023-0302/img/5.png and /dev/null differ