Return-Path: X-Original-To: archive-asf-public-internal@cust-asf2.ponee.io Delivered-To: archive-asf-public-internal@cust-asf2.ponee.io Received: from cust-asf.ponee.io (cust-asf.ponee.io [163.172.22.183]) by cust-asf2.ponee.io (Postfix) with ESMTP id 5CFEA200D4E for ; Thu, 7 Dec 2017 10:19:06 +0100 (CET) Received: by cust-asf.ponee.io (Postfix) id 5B575160C0C; Thu, 7 Dec 2017 09:19:06 +0000 (UTC) Delivered-To: archive-asf-public@cust-asf.ponee.io Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by cust-asf.ponee.io (Postfix) with SMTP id A4C08160C1E for ; Thu, 7 Dec 2017 10:19:05 +0100 (CET) Received: (qmail 70249 invoked by uid 500); 7 Dec 2017 09:19:04 -0000 Mailing-List: contact commits-help@weex.incubator.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: dev@weex.incubator.apache.org Delivered-To: mailing list commits@weex.incubator.apache.org Received: (qmail 70240 invoked by uid 99); 7 Dec 2017 09:19:04 -0000 Received: from pnap-us-west-generic-nat.apache.org (HELO spamd2-us-west.apache.org) (209.188.14.142) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 07 Dec 2017 09:19:04 +0000 Received: from localhost (localhost [127.0.0.1]) by spamd2-us-west.apache.org (ASF Mail Server at spamd2-us-west.apache.org) with ESMTP id 2FC3C1A0F1A for ; Thu, 7 Dec 2017 09:19:04 +0000 (UTC) X-Virus-Scanned: Debian amavisd-new at spamd2-us-west.apache.org X-Spam-Flag: NO X-Spam-Score: -4.021 X-Spam-Level: X-Spam-Status: No, score=-4.021 tagged_above=-999 required=6.31 tests=[KAM_LAZY_DOMAIN_SECURITY=1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001] autolearn=disabled Received: from mx1-lw-us.apache.org ([10.40.0.8]) by localhost (spamd2-us-west.apache.org [10.40.0.9]) (amavisd-new, port 10024) with ESMTP id 7ActRUl2RR4s for ; Thu, 7 Dec 2017 09:19:03 +0000 (UTC) Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by mx1-lw-us.apache.org (ASF Mail Server at mx1-lw-us.apache.org) with SMTP id 216D75F231 for ; Thu, 7 Dec 2017 09:19:02 +0000 (UTC) Received: (qmail 69380 invoked by uid 99); 7 Dec 2017 09:19:02 -0000 Received: from git1-us-west.apache.org (HELO git1-us-west.apache.org) (140.211.11.23) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 07 Dec 2017 09:19:02 +0000 Received: by git1-us-west.apache.org (ASF Mail Server at git1-us-west.apache.org, from userid 33) id 39275DFF0F; Thu, 7 Dec 2017 09:19:02 +0000 (UTC) From: yuhun-alibaba To: commits@weex.incubator.apache.org Reply-To: commits@weex.incubator.apache.org References: In-Reply-To: Subject: [GitHub] incubator-weex pull request #934: [WEEX-163] [android] Fix fix security weak... Content-Type: text/plain Message-Id: <20171207091902.39275DFF0F@git1-us-west.apache.org> Date: Thu, 7 Dec 2017 09:19:02 +0000 (UTC) archived-at: Thu, 07 Dec 2017 09:19:06 -0000 GitHub user yuhun-alibaba reopened a pull request: https://github.com/apache/incubator-weex/pull/934 [WEEX-163] [android] Fix fix security weaknesses on libweex*.so [WEEX-163] [android] Fix fix security weaknesses on libweex*.so 1. use duplicat fuction initFramework may call compatible bug 2. on app cache dir, use jsserver_crash file to collect some crash bug, but it may has read|write|exec permission under android5.0 You can merge this pull request into a Git repository by running: $ git pull https://github.com/yuhun-alibaba/incubator-weex bug-fix-security Alternatively you can review and apply these changes as the patch at: https://github.com/apache/incubator-weex/pull/934.patch To close this pull request, make a commit to your master/trunk branch with (at least) the following in the commit message: This closes #934 ---- commit 604fdf42d46abf0df48fc4e31a0fd5eec257fe58 Author: yuhun-alibaba Date: 2017-12-07T08:30:41Z [WEEX-163] [android] Fix fix security weaknesses on libweex*.so 1. use duplicat fuction initFramework may call compatible bug 2. on app cache dir, use jsserver_crash file to collect some crash bug, but it may has read|write|exec permission under android5.0 ---- ---