diff --git a/demo/sectest/poc_patch_scan/2023-03/OpenHarmony-SA-2023-0302/OpenHarmony-SA-2023-0302.md b/demo/sectest/poc_patch_scan/2023-03/OpenHarmony-SA-2023-0302/OpenHarmony-SA-2023-0302.md new file mode 100644 index 0000000000000000000000000000000000000000..9aab36d8fe7da011d43be522c2a8584532afbbe9 --- /dev/null +++ b/demo/sectest/poc_patch_scan/2023-03/OpenHarmony-SA-2023-0302/OpenHarmony-SA-2023-0302.md @@ -0,0 +1,47 @@ +# OpenHarmony-SA-2023-0302 + +## 1、漏洞分析 + +**根因分析** + +安装hap包时,包管理子系统并不检查配置文件config.json中部分字符串的长度,超长字符串导致出现各种问题 + +**漏洞复现步骤** + +1. 准备一个hap文件 +2. 打开hap包,修改config.json加入一个超长的字符串 +3. 对hap包重新签名,安装到OH系统中 +4. 重启OH,可以看到大部分的应用图标消失。如果这时候(不卸载直接使用安装命令)再次安装该hap包,剩余的应用图标也会消失 +5. 卸载恶意应用,图标会重新复原 + +## 2、受影响版本 + +OpenHarmony-v3.1-Release到OpenHarmony-v3.1.4-Release + +## 3、漏洞触发用例 + + + +## 4、验证效果 + +*提供执行效果截图* + +**合入补丁前版本** + +1.安装恶意应用并重启 + +1 + +2 + +2.卸载应用 + +3 + +4 + +**合入补丁后版本** + +安装恶意应用,会直接报错 + +5 \ No newline at end of file diff --git a/demo/sectest/poc_patch_scan/2023-03/OpenHarmony-SA-2023-0302/img/1.png b/demo/sectest/poc_patch_scan/2023-03/OpenHarmony-SA-2023-0302/img/1.png new file mode 100644 index 0000000000000000000000000000000000000000..e8d758e62120bcc19ac7e9ab4f4dc77dfe9b7344 Binary files /dev/null and b/demo/sectest/poc_patch_scan/2023-03/OpenHarmony-SA-2023-0302/img/1.png differ diff --git a/demo/sectest/poc_patch_scan/2023-03/OpenHarmony-SA-2023-0302/img/2.png b/demo/sectest/poc_patch_scan/2023-03/OpenHarmony-SA-2023-0302/img/2.png new file mode 100644 index 0000000000000000000000000000000000000000..76bea29d23ccdc374639c3c971ca27b38678ddf8 Binary files /dev/null and b/demo/sectest/poc_patch_scan/2023-03/OpenHarmony-SA-2023-0302/img/2.png differ diff --git a/demo/sectest/poc_patch_scan/2023-03/OpenHarmony-SA-2023-0302/img/3.png b/demo/sectest/poc_patch_scan/2023-03/OpenHarmony-SA-2023-0302/img/3.png new file mode 100644 index 0000000000000000000000000000000000000000..f3aa0b7ea5033d480be4a600394257678b26a466 Binary files /dev/null and b/demo/sectest/poc_patch_scan/2023-03/OpenHarmony-SA-2023-0302/img/3.png differ diff --git a/demo/sectest/poc_patch_scan/2023-03/OpenHarmony-SA-2023-0302/img/4.png b/demo/sectest/poc_patch_scan/2023-03/OpenHarmony-SA-2023-0302/img/4.png new file mode 100644 index 0000000000000000000000000000000000000000..2a72539ad6494502d3512feda4ebe280c41eda8b Binary files /dev/null and b/demo/sectest/poc_patch_scan/2023-03/OpenHarmony-SA-2023-0302/img/4.png differ diff --git a/demo/sectest/poc_patch_scan/2023-03/OpenHarmony-SA-2023-0302/img/5.png b/demo/sectest/poc_patch_scan/2023-03/OpenHarmony-SA-2023-0302/img/5.png new file mode 100644 index 0000000000000000000000000000000000000000..8cc9d66d44106ced2de1457c6011c119fdacfb9b Binary files /dev/null and b/demo/sectest/poc_patch_scan/2023-03/OpenHarmony-SA-2023-0302/img/5.png differ