Skip to content
#

bytecode

Here are 557 public repositories matching this topic...

mbenz89
mbenz89 commented Nov 21, 2018

When jimplifying com.reddit.frontpage-214190.apk(Reddit v. 2.26.2), the following exception is thrown:

Exception in thread "main" Unexpected type null
	at soot.jimple.toolkits.typing.integer.ClassHierarchy.typeNode(ClassHierarchy.java:152)
	at soot.jimple.toolkits.typing.integer.TypeResolver.typeVariable(TypeResolver.java:121)
	at soot.jimple.toolkits.typing.integer.ConstraintCollecto
find-sec-bugs
h3xstream
h3xstream commented Oct 5, 2020

Description

BeanUtils is a library that is doing automatic mapping to Java object.
It can cause arm when the attack controls part of the list of properties being sets. BeanUtils does not blacklist properties like class, classloader or other objects that are likely to load arbitrary classes and possibly run code.

Code

import org.apache.commons.beanutils.BeanUtils;

public

Improve this page

Add a description, image, and links to the bytecode topic page so that developers can more easily learn about it.

Curate this topic

Add this topic to your repo

To associate your repository with the bytecode topic, visit your repo's landing page and select "manage topics."

Learn more