diff --git a/demo/sectest/static_patch_scan/2022-12/OpenHarmony-SA-2022-1205 b/demo/sectest/static_patch_scan/2022-12/OpenHarmony-SA-2022-1205 deleted file mode 100644 index f6526ed696ad9c3f9c902b194897502464ddc160..0000000000000000000000000000000000000000 --- a/demo/sectest/static_patch_scan/2022-12/OpenHarmony-SA-2022-1205 +++ /dev/null @@ -1,35 +0,0 @@ -# Copyright (C) 2023 Huawei Device Co., Ltd. -# -# Licensed under the Apache License, Version 2.0 (the "License"); -# you may not use this file except in compliance with the License. -# You may obtain a copy of the License at -# -# http://www.apache.org/licenses/LICENSE-2.0 -# -# Unless required by applicable law or agreed to in writing, software -# distributed under the License is distributed on an "AS IS" BASIS, -# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. -# See the License for the specific language governing permissions and -# limitations under the License. - -import "console" -import "elf" - -rule OpenHarmony_SA_2022_1205 -{ - meta: - date = "2023-01-10" - openharmony_sa = "OpenHarmony-SA-2022-1205" - cve = "CVE-2022-44455" - severity = "medium" - affacted_files = "appspawn" - affected_func = "CheckAppProperty" - - strings: - $features = "process name error" nocase wide ascii - $features1 = "process name length is 0" nocase wide ascii - - condition: - (elf.machine == elf.EM_ARM) and ($features and not $features1) and console.log("OpenHarmony-SA-2022-1205 testcase pass") - -} \ No newline at end of file diff --git a/demo/sectest/static_patch_scan/2022-12/OpenHarmony-SA-2022-1205.yara b/demo/sectest/static_patch_scan/2022-12/OpenHarmony-SA-2022-1205.yara new file mode 100644 index 0000000000000000000000000000000000000000..cd54092d1330a88cd0d06285124f415408972da9 --- /dev/null +++ b/demo/sectest/static_patch_scan/2022-12/OpenHarmony-SA-2022-1205.yara @@ -0,0 +1,37 @@ +/* + * Copyright (c) 2023 Huawei Device Co., Ltd. + * + * Licensed under the Apache License, Version 2.0 (the "License"); + * you may not use this file except in compliance with the License. + * You may obtain a copy of the License at + * + * http://www.apache.org/licenses/LICENSE-2.0 + * + * Unless required by applicable law or agreed to in writing, software + * distributed under the License is distributed on an "AS IS" BASIS, + * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. + * See the License for the specific language governing permissions and + * limitations under the License. + */ + +import "console" +import "elf" + +rule OpenHarmony_SA_2022_1205 +{ + meta: + date = "2023-01-10" + openharmony_sa = "OpenHarmony-SA-2022-1205" + cve = "CVE-2022-44455" + severity = "medium" + affacted_files = "appspawn" + affected_func = "CheckAppProperty" + + strings: + $features = "process name error" nocase wide ascii + $features1 = "process name length is 0" nocase wide ascii + + condition: + (elf.machine == elf.EM_ARM) and ($features and not $features1) and console.log("OpenHarmony-SA-2022-1205 testcase pass") + +} \ No newline at end of file