diff --git a/demo/sectest/static_patch_scan/2022-12/OpenHarmony-SA-2022-1201 b/demo/sectest/static_patch_scan/2022-12/OpenHarmony-SA-2022-1201 new file mode 100644 index 0000000000000000000000000000000000000000..b1acbc13a7bba72c30f3d746c770c296971448d1 --- /dev/null +++ b/demo/sectest/static_patch_scan/2022-12/OpenHarmony-SA-2022-1201 @@ -0,0 +1,35 @@ +# Copyright (C) 2023 Huawei Device Co., Ltd. +# +# Licensed under the Apache License, Version 2.0 (the "License"); +# you may not use this file except in compliance with the License. +# You may obtain a copy of the License at +# +# http://www.apache.org/licenses/LICENSE-2.0 +# +# Unless required by applicable law or agreed to in writing, software +# distributed under the License is distributed on an "AS IS" BASIS, +# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +# See the License for the specific language governing permissions and +# limitations under the License. +import "console" +import "elf" +rule OpenHarmony_SA_2022_1201 +{ +meta: + +date = "2022-12" +openharmony_sa = "OpenHarmony-SA-2022-1201" +cve = "CVE-2022-45877" +severity = "high" +affected_files = "pin_auth_ui.so" //3.1.x以后的版本 +affected_func = "AuthOnDataReceived" + +strings: + +$fix = "authManager is null" //更新后字符串 + +$vul = "ShowPinDialog authManager is null" //更新前字符串 + +condition: + (elf.machine == elf.EM_ARM) and ((not $vul) and $fix) and console.log("OpenHarmony-SA-2022-1201 testcase pass") +} \ No newline at end of file