安全分析报告： 91重口 v1.4.2

应用程序记录日志信息,不得记录敏感信息
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#logs

Files:
c/b/a/n.java, line(s) 30
c/b/b/a/a.java, line(s) 69
c/b/e/b.java, line(s) 124,158,172,180,341
c/b/e/e/b.java, line(s) 366
c/b/f/b0.java, line(s) 99,167
c/b/f/d.java, line(s) 280
c/b/f/e0.java, line(s) 21,31
c/b/f/h.java, line(s) 29
c/b/f/n.java, line(s) 93,102,194,253
c/b/f/o.java, line(s) 113
c/b/f/u.java, line(s) 87,243,348,166,173,330,357,395,409,453
c/b/f/v.java, line(s) 25
c/d/a/e2.java, line(s) 10,16,15,21,22,27,35,36
c/d/a/f2.java, line(s) 60
c/d/a/q2/d0/b.java, line(s) 194
c/d/a/r2/f/a.java, line(s) 15
c/h/c/a/c.java, line(s) 35,113
c/h/c/a/e.java, line(s) 183,190
c/h/c/a/g.java, line(s) 911,2206
c/h/c/a/j.java, line(s) 326,360,600,734,871,903,195
c/h/c/a/o.java, line(s) 223,228
c/h/d/a.java, line(s) 216,98,271
c/h/d/c.java, line(s) 1035,1976,2734,2206,264,348,374,392,1051,1084,1796,2059,2105,2130,2822,2829
c/h/d/e.java, line(s) 81
c/j/a/c.java, line(s) 94
c/j/a/d.java, line(s) 28
c/j/b/b/e.java, line(s) 45,84,102,110
c/j/c/c.java, line(s) 39,44
c/j/c/d.java, line(s) 55
c/j/c/e.java, line(s) 44
c/j/c/g/d.java, line(s) 24,47
c/j/d/b.java, line(s) 21
c/j/h/a.java, line(s) 238
c/j/h/d.java, line(s) 179,211
c/j/h/l.java, line(s) 17,28
c/j/h/o.java, line(s) 116,198,550,562,569,578,43,187
c/k/a/b.java, line(s) 364
c/n/a/a.java, line(s) 350,541,674,684,693,698,757,843,861,865,871,910,947,1162,1249,1299,1482,1543,1746,1751,1757,1782,1801,1816,1819,1906,1968,2159,2254,2263,2287,2299,2490,2685,2738,2772,2804,2853,2861,2903,2923,2947,3126,381,3452,3460,3494,3506,3518,3530,3542,3554,3566,3578,3590,3597,3608,3620,94,562,1474,1491,1499,1724,1774,1777,1840,1851,2112,2121,2678,3603
c/o/a/a.java, line(s) 50,191,204,214
c/o/a/b.java, line(s) 578,627,656,661
c/o/a/j0.java, line(s) 15
c/o/a/n.java, line(s) 321,421,806,1686,212,826,217,1003,827,1023
c/o/a/r.java, line(s) 98,109
c/o/a/u.java, line(s) 82,32,38,46,52
c/o/a/v.java, line(s) 65,116,241,265,353,373,419,440,457,469,595,635,676,771,781,232,339,499,517,523,559,606,706,815
c/o/a/w.java, line(s) 104,114
c/s/f.java, line(s) 36
c/s/i.java, line(s) 61
c/s/k.java, line(s) 34
c/s/n.java, line(s) 30
c/t/a.java, line(s) 150,230,244,44,63,77,85,96,69,81,91,108,113,134,192
c/x/d.java, line(s) 28
c/x/z.java, line(s) 42
cn/bingoogolapple/swipebacklayout/BGASwipeBackLayout.java, line(s) 872
com/bumptech/glide/GeneratedAppGlideModuleImpl.java, line(s) 19,20,18
com/bumptech/glide/integration/webp/WebpBitmapFactory.java, line(s) 194
com/bumptech/glide/load/engine/DecodeJob.java, line(s) 172,227,369
com/bumptech/glide/load/engine/GlideException.java, line(s) 149
com/bumptech/glide/load/resource/bitmap/DefaultImageHeaderParser.java, line(s) 173,179,257,271,281,325,333,350,362,172,178,246,256,268,280,306,324,328,337,346,349,354,361
com/bumptech/glide/load/resource/bitmap/VideoDecoder.java, line(s) 118,117
com/bumptech/glide/manager/SupportRequestManagerFragment.java, line(s) 68,77,69,78
com/bumptech/glide/request/SingleRequest.java, line(s) 515,26,398,408
com/contrarywind/view/WheelView.java, line(s) 344
com/danikula/videocache/HttpProxyCacheDebuger.java, line(s) 34,55,69,41,48
com/grass/mh/App.java, line(s) 124
com/grass/mh/player/BrushVideoPlayer.java, line(s) 131
com/grass/mh/player/tiktok/TikTokPlayer.java, line(s) 141
com/grass/mh/ui/comment/InputTextDialog.java, line(s) 97
com/grass/mh/ui/mine/activity/AddGroupActivity.java, line(s) 77
com/grass/mh/ui/mine/fragment/MineFansAddFragment.java, line(s) 70
com/grass/mh/ui/shortvideo/ShortVideoFollowListFragment.java, line(s) 292
com/grass/mh/ui/shortvideo/ShortVideoListFragment.java, line(s) 297
com/grass/mh/utils/CThreadPoolExecutor.java, line(s) 39,119,40,87
com/grass/mh/utils/KeyBoardChangeListener.java, line(s) 22
com/grass/mh/utils/MigrationHelper.java, line(s) 64
com/grass/mh/view/WheelView.java, line(s) 273
com/grass/mh/view/gridpager/PagerConfig.java, line(s) 12,18
com/grass/mh/view/gridpager/PagerGridLayoutManager.java, line(s) 433,453,522,542
com/just/agentweb/AgentWebUtils.java, line(s) 160,130,131,140,153
com/just/agentweb/AgentWebView.java, line(s) 56,87,100,35,225
com/just/agentweb/DefaultChromeClient.java, line(s) 252,258
com/just/agentweb/JsCallJava.java, line(s) 137,70,41,81
com/just/agentweb/JsCallback.java, line(s) 64
com/just/agentweb/LogUtils.java, line(s) 8,23,37,13,31
com/luck/picture/lib/PictureCustomCameraActivity.java, line(s) 76
com/luck/picture/lib/broadcast/BroadcastManager.java, line(s) 27,33,150,166,224,235,246,257,275,286,297,308,80,85,92,96,112,122
com/luck/picture/lib/compress/Checker.java, line(s) 140,154,173,190,194
com/luck/picture/lib/compress/Luban.java, line(s) 391,390
com/luck/picture/lib/model/LocalMediaLoader.java, line(s) 418
com/luck/picture/lib/model/LocalMediaPageLoader.java, line(s) 519,578,678
com/luck/picture/lib/thread/PictureThreadUtils.java, line(s) 72,77,299,326,421,535,161,334
com/luck/picture/lib/tools/PictureFileUtils.java, line(s) 277
com/luck/picture/lib/widget/longimage/SubsamplingScaleImageView.java, line(s) 601,194,198,365,369,431,669,753,762,791,796,1667,1871,2171
com/lv/downloadvideo/M3U8DownloadTask.java, line(s) 126,163,333,350
com/lv/downloadvideo/M3U8Downloader.java, line(s) 51,100,174,186,190,194,199,218,244,273,278,294
com/lv/downloadvideo/utils/DataCacheUtils.java, line(s) 50,53,60,72,95
com/lv/downloadvideo/utils/M3U8Log.java, line(s) 10,16
com/lv/downloadvideo/utils/SPHelper.java, line(s) 15
com/lxj/xpopup/util/XPermission.java, line(s) 77
com/maning/updatelibrary/InstallUtils.java, line(s) 150
com/maning/updatelibrary/http/DownloadFileUtils.java, line(s) 236,286
com/tbruyelle/rxpermissions2/RxPermissionsFragment.java, line(s) 45,90
com/yalantis/ucrop/UCropActivity.java, line(s) 511
com/yalantis/ucrop/view/OverlayView.java, line(s) 271,274
com/yalantis/ucrop/view/TransformImageView.java, line(s) 65,150,207
e/a/a/a/a.java, line(s) 213,232,250,305
e/c/a/a/a/a.java, line(s) 14,27
e/c/a/a/c/b/d.java, line(s) 84,83
e/c/a/a/d/b.java, line(s) 35,38
e/c/a/a/d/d/a.java, line(s) 147
e/d/a/c.java, line(s) 225,232,242,247,264,274,224,231,235,241,246,263,270,370,236,371
e/d/a/g.java, line(s) 383,303,304
e/d/a/h.java, line(s) 92,91
e/d/a/k/d.java, line(s) 172,199,169,198
e/d/a/k/e.java, line(s) 84,105,123,83,104,122
e/d/a/l/a/c/h.java, line(s) 59,139,152,169,270,56,103,138,147,164
e/d/a/l/a/c/i.java, line(s) 81,380,80,334,379,406,430,350,416,455
e/d/a/l/a/c/j.java, line(s) 16,17
e/d/a/m/n/b.java, line(s) 45,44
e/d/a/m/n/j.java, line(s) 41,88,148,40,87,91,96,103,147,100,106
e/d/a/m/n/l.java, line(s) 46,45
e/d/a/m/n/o/b.java, line(s) 90,133,173,89,132,172
e/d/a/m/o/a0/e.java, line(s) 44,77,89,99,45,90,78,100
e/d/a/m/o/a0/k.java, line(s) 84,69
e/d/a/m/o/b0/a.java, line(s) 65,64
e/d/a/m/o/h.java, line(s) 133,134
e/d/a/m/o/j.java, line(s) 21,145
e/d/a/m/o/y.java, line(s) 43,44
e/d/a/m/o/z/i.java, line(s) 161,195,165,200
e/d/a/m/o/z/j.java, line(s) 53,64,166,210,48,52,63,95,103,131,161,178,197,209,96,104,151,183,198
e/d/a/m/p/c.java, line(s) 15,14
e/d/a/m/p/d.java, line(s) 39,38
e/d/a/m/p/f.java, line(s) 96,95
e/d/a/m/p/s.java, line(s) 99,100
e/d/a/m/p/t.java, line(s) 37,36
e/d/a/m/q/a.java, line(s) 76,118,87,128
e/d/a/m/q/c/c.java, line(s) 57,56,73,74
e/d/a/m/q/c/j.java, line(s) 19,25,20,26
e/d/a/m/q/c/l.java, line(s) 100,446,675,99,405,445,469,502,567,585,599,626,644,652,674,693,701,425,479,527
e/d/a/m/q/c/m.java, line(s) 27,31,28,32
e/d/a/m/q/c/q.java, line(s) 69,74,79,85,90,97,102,121,130,70,75,80,86,91,98,103,131,122
e/d/a/m/q/c/y.java, line(s) 80,89,96,81,90,97,98,99,103
e/d/a/m/q/g/a.java, line(s) 61,143,150,157,69,146,153,160
e/d/a/m/q/g/c.java, line(s) 18,19
e/d/a/m/q/g/i.java, line(s) 49,50
e/d/a/n/e.java, line(s) 36,33,77,98,78,99
e/d/a/n/o.java, line(s) 60,61
e/d/a/n/p.java, line(s) 219,220,228
e/d/a/q/i/d.java, line(s) 39,85,86,40
e/d/a/q/i/k.java, line(s) 60,109,110,61
e/d/a/s/j/a.java, line(s) 36,39
e/e/b/a.java, line(s) 86
e/f/a/a/b0.java, line(s) 218,427
e/f/a/a/c0.java, line(s) 201,209,556,1482,1487,1493,1504,543
e/f/a/a/c1/a0/d.java, line(s) 580,789,1094,1428,1538,1542
e/f/a/a/c1/b0/d.java, line(s) 147,215
e/f/a/a/c1/c0/d.java, line(s) 222,413
e/f/a/a/c1/c0/e.java, line(s) 40,58,78,98,110,127,137
e/f/a/a/c1/c0/f.java, line(s) 567,670,592,938
e/f/a/a/c1/c0/j.java, line(s) 53
e/f/a/a/c1/d0/i.java, line(s) 273
e/f/a/a/c1/f0/f.java, line(s) 152
e/f/a/a/c1/f0/n.java, line(s) 28
e/f/a/a/c1/f0/r.java, line(s) 38,44
e/f/a/a/c1/g0/a.java, line(s) 358,380
e/f/a/a/d1/e.java, line(s) 249,268,178
e/f/a/a/e1/i/b.java, line(s) 205,308,313,322,551,557,565,603
e/f/a/a/g0.java, line(s) 171
e/f/a/a/h1/i0/c.java, line(s) 36
e/f/a/a/h1/i0/g.java, line(s) 446
e/f/a/a/h1/j0/j/c.java, line(s) 354
e/f/a/a/h1/k0/n.java, line(s) 162,290
e/f/a/a/i1/l/a.java, line(s) 209
e/f/a/a/i1/l/c.java, line(s) 281,332,349,579
e/f/a/a/i1/m/a.java, line(s) 70
e/f/a/a/i1/o/a.java, line(s) 347,172,195,226,327,332
e/f/a/a/i1/o/c.java, line(s) 40
e/f/a/a/i1/p/a.java, line(s) 71
e/f/a/a/i1/q/a.java, line(s) 248,87,268,466,469
e/f/a/a/i1/s/f.java, line(s) 213,295,311,316,386
e/f/a/a/l1/a0/s.java, line(s) 62,71,89,103,121,127,402,469
e/f/a/a/l1/p.java, line(s) 155
e/f/a/a/l1/r.java, line(s) 125,223,239,235
e/f/a/a/m1/b0.java, line(s) 503
e/f/a/a/m1/e.java, line(s) 33,84
e/f/a/a/o0.java, line(s) 51
e/f/a/a/t0.java, line(s) 381,402,465,493,510,522,561,576,613,803,849,995,1034
e/f/a/a/x0/t.java, line(s) 99
e/f/a/b/a/g.java, line(s) 45
e/f/a/b/p/a.java, line(s) 317
e/f/a/b/t/b.java, line(s) 113,148
e/f/a/b/u/a.java, line(s) 34
e/g/a/f0/d/p0.java, line(s) 14
e/g/a/f0/g/a/u.java, line(s) 29
e/g/a/f0/g/a/v.java, line(s) 29
e/g/a/f0/g/a/w.java, line(s) 43
e/g/a/f0/g/a/y.java, line(s) 19
e/g/a/f0/g/b/a.java, line(s) 22
e/g/a/f0/g/c/a.java, line(s) 31
e/g/a/f0/g/c/b.java, line(s) 47
e/g/a/f0/g/c/c.java, line(s) 29
e/g/a/i0/g.java, line(s) 14
e/k/a/c/a/a.java, line(s) 152,157
e/k/a/f/a.java, line(s) 61,69,88,93,116
e/k/b/a.java, line(s) 68,73
e/k/b/b/b.java, line(s) 185,190
e/o/a/l/a.java, line(s) 154,106,247
e/o/a/l/b.java, line(s) 45,88,159,171,177,184,234,240,282,348,385
e/o/a/m/b.java, line(s) 56,85,94,112,156,164,181,192,39,47,55,82,93,111,140,155,159,168,177,180,185,191
j/a/y1/k.java, line(s) 43
m/b/b/a.java, line(s) 382
org/dsq/library/widget/CacheM3u8FilePlayer.java, line(s) 62
org/dsq/library/widget/bigImage/SubsamplingScaleImageView.java, line(s) 630,206,210,383,387,453,775,784,813,818,1727,1938,2269
org/dsq/library/widget/bigImage/decoder/SkiaPooledImageRegionDecoder.java, line(s) 117
org/greenrobot/greendao/DaoException.java, line(s) 15,16
tv/danmaku/ijk/media/exo/demo/EventLogger.java, line(s) 55,67,95,109,129,144,208,220,230,235,48,152,166,190
tv/danmaku/ijk/media/exo/demo/player/DashRendererBuilder.java, line(s) 152
tv/danmaku/ijk/media/exo2/demo/EventLogger.java, line(s) 109,114,119,124,129,134,138,143,155,163,171,181,186,202,209,216,236,262,275,277,284,308,316,325,333,338,343,355,358,361,365,368,370,379,382,393,400,406,410,420,423,429,439,447,454,458,462,464,478,486,494,504,509,99,296
tv/danmaku/ijk/media/exo2/source/GSYDefaultHttpDataSource.java, line(s) 82,96,113,108
tv/danmaku/ijk/media/player/IjkMediaCodecInfo.java, line(s) 191,193
tv/danmaku/ijk/media/player/IjkMediaPlayer.java, line(s) 148,154,238,254,143,157,179,246,416,176,266,798,812
tv/danmaku/ijk/media/player/pragma/DebugLog.java, line(s) 13,17,65,21,25,69,29,33,73,49,53,77,57,61,81

此应用程序使用SQL Cipher。SQLCipher为sqlite数据库文件提供256位AES加密


Files:
org/greenrobot/greendao/database/SqlCipherEncryptedHelper.java, line(s) 17,8,9