Vulnerabilities in Third-party SDKs in Android Apps

X X X XX X X X XX X X
X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X X XX X X X XX X X X XX X AMi`Q/m+iBQM M/`QB/ a2+m`Biv "+F;`QmM/ *QMi2ti M/ :QH *b2 bim/B2b Smb? a.Eb *QM+HmbBQM X X 那些年你不知不觉间引入的漏洞木马屠城 6HMF2` E11L h1J >Ah*PL hBT2B- m;mbi kyR8 6HMF2` 那些年你不知不觉间引入的漏洞

X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X X XX X X X XX X X X XX X AMi`Q/m+iBQM M/`QB/ a2+m`Biv "+F;`QmM/ *QMi2ti M/ :QH *b2 bim/B2b Smb? a.Eb *QM+HmbBQM h#H2 Q7 *QMi2Mib X X X R AMi`Q/m+iBQM #Qmi X X X k M/`QB/ a2+m`Biv "+F;`QmM/ X X X j *QMi2ti M/ :QH X X X 9 *b2 bim/B2b lTGBMF SA KBbmb2 [email protected]+2@GBMF X X X 8 Smb? a.Eb lK2M; a.E MHvbBb Q7 s;Smb? a.E MHvbBb Q7 CSmb? a.E MHvbBb Q7 CSmb? a.E 6HMF2` 那些年你不知不觉间引入的漏洞

X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X X XX X X X XX X X X XX X AMi`Q/m+iBQM M/`QB/ a2+m`Biv "+F;`QmM/ *QMi2ti M/ :QH *b2 bim/B2b Smb? a.Eb *QM+HmbBQM #Qmi h#H2 Q7 *QMi2Mib X X X R AMi`Q/m+iBQM #Qmi X X X k M/`QB/ a2+m`Biv "+F;`QmM/ X X X j *QMi2ti M/ :QH X X X 9 *b2 bim/B2b lTGBMF SA KBbmb2 [email protected]+2@GBMF X X X 8 Smb? a.Eb lK2M; a.E MHvbBb Q7 s;Smb? a.E MHvbBb Q7 CSmb? a.E MHvbBb Q7 CSmb? a.E 6HMF2` 那些年你不知不觉间引入的漏洞

X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X X XX X X X XX X X X XX X AMi`Q/m+iBQM M/`QB/ a2+m`Biv "+F;`QmM/ *QMi2ti M/ :QH *b2 bim/B2b Smb? a.Eb *QM+HmbBQM #Qmi #Qmi K2 a2+m`Biv `2b2`+?2` i E11L- TrM2`- +Q/2`X AǶK +m``2MiHv 7Q+mbBM; QM KQ#BH2 b2+m`Biv- BM+Hm/BM; TTHB+iBQM a2+m`Biv- avbi2K a2+m`Biv- S`Q;`K MHvbBb- 2i+ 6Q`K2` K2K#2` Q7 "Hm2@HQimb- .16*PL kR 6ALG T`iB+BTMi *o1b Q7 M/`QB/ Pa +FMQrH2/;2K2Mib 7`QK h2M+2Mi- HB##- hrBii2`- a?QTB7v- 2i+ aQQi +QMi`B#miQ` 6HMF2` 那些年你不知不觉间引入的漏洞

X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X X XX X X X XX X X X XX X AMi`Q/m+iBQM M/`QB/ a2+m`Biv "+F;`QmM/ *QMi2ti M/ :QH *b2 bim/B2b Smb? a.Eb *QM+HmbBQM #Qmi #Qmi E11L a2+m`Biv `2b2`+? i2K H2/ #v !`Q+F8yN i a?M;?B ,V SrMkPrM kyRj-kyR9-kyR8 qBMM2` SrMBM2 r`/ LQKBMiBQM M/`QB/ _QQi @ SBM;TQM; _QQi CBH#`2F @ *QKBM; aQQM omHM2`#BHBiv >mMiBM; 6HMF2` 那些年你不知不觉间引入的漏洞

X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X X XX X X X XX X X X XX X AMi`Q/m+iBQM M/`QB/ a2+m`Biv "+F;`QmM/ *QMi2ti M/ :QH *b2 bim/B2b Smb? a.Eb *QM+HmbBQM #Qmi P#D2+iBp2 Q7 i?Bb iHF :Bp2 #bB+ /2b+`BTiBQM Q7 M/`QB/ a2+m`Biv J2+?MBbK omHM2`#BHBiv *b2 aim/B2b QM /Bz2`2Mi a.E pmHM2`#BHBiB2b lTHBMF [email protected]+2@HBMF 6HMF2` 那些年你不知不觉间引入的漏洞

X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X X XX X X X XX X X X XX X AMi`Q/m+iBQM M/`QB/ a2+m`Biv "+F;`QmM/ *QMi2ti M/ :QH *b2 bim/B2b Smb? a.Eb *QM+HmbBQM M/`QB/ a2+m`Biv "+F;`QmM/ X TTHB+iBQM aM/#Qt X X X *Q`b2 ++2bb +QMi`QH BKTH2K2Mi2/ BM GBMmt E2`M2H 6BH2 ++2bb +QMi`QH #b2/ QM lA. 1+? TT ;2ib Bib QrM lA. QM BMbiHHiBQM UAM ;2M2`H- A FMQr vQm rMi iQ bv b?`2/lA. M/ bvbi2K lA.V ++2bb T`Bpi2 }H2b 7`QK QM2 TT iQ MQi?2` Bb 7Q`#B//2M UA7 /2p2HQT2`b +`2i2 i?2B` }H2b +Q``2+iHvV 6HMF2` 那些年你不知不觉间引入的漏洞

X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X X XX X X X XX X X X XX X AMi`Q/m+iBQM M/`QB/ a2+m`Biv "+F;`QmM/ *QMi2ti M/ :QH *b2 bim/B2b Smb? a.Eb *QM+HmbBQM M/`QB/ a2+m`Biv "+F;`QmM/ X TTHB+iBQM aM/#Qt X X X *Q`b2 ++2bb +QMi`QH BKTH2K2Mi2/ BM GBMmt E2`M2H 6BH2 ++2bb +QMi`QH #b2/ QM lA. 1+? TT ;2ib Bib QrM lA. QM BMbiHHiBQM UAM ;2M2`H- A FMQr vQm rMi iQ bv b?`2/lA. M/ bvbi2K lA.V ++2bb T`Bpi2 }H2b 7`QK QM2 TT iQ MQi?2` Bb 7Q`#B//2M UA7 /2p2HQT2`b +`2i2 i?2B` }H2b +Q``2+iHvV _2bQm`+2 ++2bb +QMi`QH #b2/ QM :A. TTHB+iBQMb ++2bb M2irQ`F rBi? BM2i ;B/ TTHB+iBQMb ++2bb +K2` rBi? +K2` ;B/ a22 KQ`2 KTTBM;b i f/if2i+fTHi7Q`KXtKH 6HMF2` 那些年你不知不觉间引入的漏洞

X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X X XX X X X XX X X X XX X AMi`Q/m+iBQM M/`QB/ a2+m`Biv "+F;`QmM/ *QMi2ti M/ :QH *b2 bim/B2b Smb? a.Eb *QM+HmbBQM X TTHB+iBQM aM/#Qt X X X 6BM2@;`BM2/ ++2bb +QMi`QH mbBM; T2`KBbbBQM- bmTTQ`i2/ #v "BM/2` TTHB+iBQM bF 7Q` T2`KBbbBQM mTQM BMbiHHiBQM aQK2 F2v T2`KBbbBQMb `2 bB;Mim`2P`avbi2K- 2X;X ALahGGnS*E:1a *?M;2/ BM J S`2pB2r rBi? `mMiBK2 2M7Q`+2K2Mi 6HMF2` 那些年你不知不觉间引入的漏洞

X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X X XX X X X XX X X X XX X AMi`Q/m+iBQM M/`QB/ a2+m`Biv "+F;`QmM/ *QMi2ti M/ :QH *b2 bim/B2b Smb? a.Eb *QM+HmbBQM X TTHB+iBQM aM/#Qt X X X 6BM2@;`BM2/ ++2bb +QMi`QH mbBM; T2`KBbbBQM- bmTTQ`i2/ #v "BM/2` TTHB+iBQM bF 7Q` T2`KBbbBQM mTQM BMbiHHiBQM aQK2 F2v T2`KBbbBQMb `2 bB;Mim`2P`avbi2K- 2X;X ALahGGnS*E:1a *?M;2/ BM J S`2pB2r rBi? `mMiBK2 2M7Q`+2K2Mi *mbiQK +QMi`QH mbBM; 2M7Q`+2*HHBM;S2`KBbbBQM M/ ;2i*HHBM;lB/ 6`2[m2MiHv b22M BM bvbi2Knb2`p2` E2`M2H ;m`Mi22b `2bmHib 7`QK ;2i*HHBM;lB/ +MMQi #2 7Q`;2/ LQi2 *QKTQM2Mi SA +HH2` mB/ +MMQi #2 ;2i mbBM; ;2i*HHBM;lB/5 6HMF2` 那些年你不知不觉间引入的漏洞

X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X X XX X X X XX X X X XX X AMi`Q/m+iBQM M/`QB/ a2+m`Biv "+F;`QmM/ *QMi2ti M/ :QH *b2 bim/B2b Smb? a.Eb *QM+HmbBQM X *QKTQM2Mi a2+m`Biv X X X AMi2`@+QKTQM2Mi +QKKmMB+iBQM Bb F2v 7mM+iBQMHBiv BM M/`QB/ *QKTQM2Mib /2+H`2/ BM M/`QB/JMB72bi +iBpBiv- "`Q/+bi _2+2Bp2`- *QMi2Mi S`QpB/2`- a2`pB+2 *M #2 2tTQ`i2/ Q` BMi2`MH@QMHv *M #2 T`Qi2+i2/ #v T2`KBbbBQM 6HMF2` 那些年你不知不觉间引入的漏洞

X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X X XX X X X XX X X X XX X AMi`Q/m+iBQM M/`QB/ a2+m`Biv "+F;`QmM/ *QMi2ti M/ :QH *b2 bim/B2b Smb? a.Eb *QM+HmbBQM X *QKTQM2Mi a2+m`Biv X X X AMi2`@+QKTQM2Mi +QKKmMB+iBQM Bb F2v 7mM+iBQMHBiv BM M/`QB/ *QKTQM2Mib /2+H`2/ BM M/`QB/JMB72bi +iBpBiv- "`Q/+bi _2+2Bp2`- *QMi2Mi S`QpB/2`- a2`pB+2 *M #2 2tTQ`i2/ Q` BMi2`MH@QMHv *M #2 T`Qi2+i2/ #v T2`KBbbBQM .vMKB+ `2;Bbi2`2/ "`Q/+bi_2+2Bp2` AKTHB+BiHv 2tTQ`i2/ *M #2 T`Qi2+i2/ #v T2`KBbbBQM 6HMF2` 那些年你不知不觉间引入的漏洞

X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X X XX X X X XX X X X XX X AMi`Q/m+iBQM M/`QB/ a2+m`Biv "+F;`QmM/ *QMi2ti M/ :QH *b2 bim/B2b Smb? a.Eb *QM+HmbBQM X *QKTQM2Mi a2+m`Biv X X X AMi2`@+QKTQM2Mi +QKKmMB+iBQM Bb F2v 7mM+iBQMHBiv BM M/`QB/ *QKTQM2Mib /2+H`2/ BM M/`QB/JMB72bi +iBpBiv- "`Q/+bi _2+2Bp2`- *QMi2Mi S`QpB/2`- a2`pB+2 *M #2 2tTQì2/ Q` BMi2`MH@QMHv *M #2 T`Qi2+i2/ #v T2`KBbbBQM .vMKB+ `2;Bbi2`2/ "`Q/+bi_2+2Bp2` AKTHB+BiHv 2tTQì2/ *M #2 T`Qi2+i2/ #v T2`KBbbBQM ++2bb MQi?2` TTHB+iBQMǶb mM@2tTQì2/ +QKTQM2Mi Bb +QMbB/2`2/ bM/#Qt 2b+T2 lM@2tTQì2/ +QKTQM2Mib mbmHHv +QMiBMb b2MbBiBp2 +iBQMb M/ /Q MQi bMBiBx2 BMTmi G2/ iQ b2`BQmb b2+m`Biv BKT+i 6HMF2` 那些年你不知不觉间引入的漏洞

X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X X XX X X X XX X X X XX X AMi`Q/m+iBQM M/`QB/ a2+m`Biv "+F;`QmM/ *QMi2ti M/ :QH *b2 bim/B2b Smb? a.Eb *QM+HmbBQM X *QKTQM2Mi a2+m`Biv X X X GQ+H pb _2KQi2 ii+Fb a2`pB+2- "`Q/+bi _2+2Bp2`b- S`QpB/2`b +MMQi #2 ++2bb2/ `2KQi2Hv UBM i?2Q`vVX P7 +Qm`b2 T`+iB+2 ;Q #2vQM/ i?2Q`v bQK2iBK2b aQK2 +mbiQK +Q/2 #v bQK2QM2, BM Cpb+`BTiAMi2`7+2- mb2 T`b2l`B- 2i+ *2`iBM +iBpBiv +M #2 BMpQF2/ i?`Qm;? l_G lb2 a1G iQ #vTbb `2bi`B+iBQMb QM QH/ #`Qrb2`b lT@iQ@/i2 QMHv HHQrb "_Pqa"G1 +i2;Q`v 6HMF2` 那些年你不知不觉间引入的漏洞

X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X X XX X X X XX X X X XX X AMi`Q/m+iBQM M/`QB/ a2+m`Biv "+F;`QmM/ *QMi2ti M/ :QH *b2 bim/B2b Smb? a.Eb *QM+HmbBQM X :QH X X X ii+F MQi?2` TTHB+iBQM 7`QK HQ+H Q` `2KQi2- iQ .2MBH Q7 b2`pB+2 _2/fr`Bi2 T`Bpi2 }H2bf`2bQm`+2b #mb2 pB+iBKǶb T2`KBbbBQMb z2+i pB+iBKǶb BMi2`MH HQ;B+ ai2H b2MbBiBp2 BM7Q`KiBQM *Q/2 2t2+miBQM 2i+ 6HMF2` 那些年你不知不觉间引入的漏洞

X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X X XX X X X XX X X X XX X AMi`Q/m+iBQM M/`QB/ a2+m`Biv "+F;`QmM/ *QMi2ti M/ :QH *b2 bim/B2b Smb? a.Eb *QM+HmbBQM X *QMi2ti X X X >B;?@pHm2 TTHB+iBQMb `2 DmB+v i`;2ib- BM+Hm/BM; avbi2K TTHB+iBQM rBi? +`BiB+H T2`KBbbBQMb 6BMM+BHfAMTmifqB/2Hv@mb2/fa2MbBiBp2 TTHB+iBQMb qB/2Hv mb2/ a.Eb q2ǶHH b22 Hi2` 6HMF2` 那些年你不知不觉间引入的漏洞

X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X X XX X X X XX X X X XX X AMi`Q/m+iBQM M/`QB/ a2+m`Biv "+F;`QmM/ *QMi2ti M/ :QH *b2 bim/B2b Smb? a.Eb *QM+HmbBQM .1JP5 6HMF2` 那些年你不知不觉间引入的漏洞

X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X X XX X X X XX X X X XX X AMi`Q/m+iBQM M/`QB/ a2+m`Biv "+F;`QmM/ *QMi2ti M/ :QH *b2 bim/B2b Smb? a.Eb *QM+HmbBQM a.E +i2;Q`B2b M/ `+? X Smb? a.Eb X X X :*J s;Smb?- CSmb?- lK2M; Smb? X 6mM+iBQMH a.Eb X X X T+?2 *Q`/Qp omM;H2 . a.E 6L2irQ`FBM; a.E AMi2`MH a.Eb 6HMF2` 那些年你不知不觉间引入的漏洞

X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X X XX X X X XX X X X XX X AMi`Q/m+iBQM M/`QB/ a2+m`Biv "+F;`QmM/ *QMi2ti M/ :QH *b2 bim/B2b Smb? a.Eb *QM+HmbBQM lTGBMF SA KBbmb2 [email protected]+2@GBMF h#H2 Q7 *QMi2Mib X X X R AMi`Q/m+iBQM #Qmi X X X k M/`QB/ a2+m`Biv "+F;`QmM/ X X X j *QMi2ti M/ :QH X X X 9 *b2 bim/B2b lTGBMF SA KBbmb2 [email protected]+2@GBMF X X X 8 Smb? a.Eb lK2M; a.E MHvbBb Q7 s;Smb? a.E MHvbBb Q7 CSmb? a.E MHvbBb Q7 CSmb? a.E 6HMF2` 那些年你不知不觉间引入的漏洞

X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X X XX X X X XX X X X XX X AMi`Q/m+iBQM M/`QB/ a2+m`Biv "+F;`QmM/ *QMi2ti M/ :QH *b2 bim/B2b Smb? a.Eb *QM+HmbBQM lTGBMF SA KBbmb2 [email protected]+2@GBMF 6L2irQ`FBM; BM kX8XR @ U"PPGV2pHmi2a2`p2`h`mbi,Ua2+h`mbi_27Vb2`p2`h`mbi 7Q`.QKBM,ULaai`BM; V/QKBM & ffXXX B7 Ub2H7XaaGSBMMBM;JQ/2 54 6aaGSBMMBM;JQ/2LQM2 56a2`p2`h`mbiAboHB/Ub2`p2`h`mbiV 5b2H7XHHQrAMpHB/*2ìB7B+i2bV & `2im`M LPc ' La``v b2`p2`*2ìB7B+i2b 4 6*2ìB7B+i2h`mbi*?BM6Qà2`p2`h`mbiUb2`p2`h`mbiVc brBi+? Ub2H7XaaGSBMMBM;JQ/2V & +b2 6aaGSBMMBM;JQ/2LQM2, `2im`M u1ac ffQQTb- b?QmH/ #2 6a2`p2`h`mbiAboHB/Ub2`p2`h`mbiVc 6HMF2` 那些年你不知不觉间引入的漏洞

X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X X XX X X X XX X X X XX X AMi`Q/m+iBQM M/`QB/ a2+m`Biv "+F;`QmM/ *QMi2ti M/ :QH *b2 bim/B2b Smb? a.Eb *QM+HmbBQM lTGBMF SA KBbmb2 [email protected]+2@GBMF 6L2irQ`FBM; #27Q`2 kX8Xk 7i2` kXRXy pHB/i2b.QKBMLK2 /27mHib iQ LP B7 MQ TBMMBM; TTHB2/ h?mb MQ *L 7B2H/ pHB/iBQM BM +2`iB}+i2 6HMF2` 那些年你不知不觉间引入的漏洞

X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X X XX X X X XX X X X XX X AMi`Q/m+iBQM M/`QB/ a2+m`Biv "+F;`QmM/ *QMi2ti M/ :QH *b2 bim/B2b Smb? a.Eb *QM+HmbBQM lTGBMF SA KBbmb2 [email protected]+2@GBMF :QQ;H2 :*J KmHiBTH2 pmHM2`#BHBiB2b _2TQì2/ BM **a kyR9 #v w?Qm 2H X :*J BM7`bi`m+im`2 X X X X :*J PT2ìBQM ai;2b X X X _2;BbiìBQM J2bb;2 .2HBp2`v 6HMF2` 那些年你不知不觉间引入的漏洞

X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X X XX X X X XX X X X XX X AMi`Q/m+iBQM M/`QB/ a2+m`Biv "+F;`QmM/ *QMi2ti M/ :QH *b2 bim/B2b Smb? a.Eb *QM+HmbBQM lTGBMF SA KBbmb2 [email protected]+2@GBMF :*J PT2ìBQM ai;2, _2;BbiìBQM X _2;BbiìBQM _2[m2bi X X X TTHB+iBQM A. U;2M2ì2/ 7`QK TTǶb T+F;2 MK2V M/`QB/ A. UmMB[m2 7Q` M M/`QB/ .2pB+2V a2M/2À. UbbQ+Bi2 rBi? TT b2`p2`V X _2;BbiìBQM _2bTQMb2 X X X _2;BbiìBQM A. U+`2/2MiBH ?M/H2/ #Qi? iQ TT b2`p2` M/ +HB2MiV 6HMF2` 那些年你不知不觉间引入的漏洞

X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X X XX X X X XX X X X XX X AMi`Q/m+iBQM M/`QB/ a2+m`Biv "+F;`QmM/ *QMi2ti M/ :QH *b2 bim/B2b Smb? a.Eb *QM+HmbBQM lTGBMF SA KBbmb2 [email protected]+2@GBMF :*J _2;Bbi`iBQM, lTbi`2K GBMF X _2;Bbi`iBQM _2[m2bi X X X mi?Q`BxiBQM, TTA/ Y M/`QB/@B/ Y /2pB+2@iQF2MUb2+`2iV s@:PP:Xla1_nA., M/`QB/@B/ U+?2i ?2`2V /2pB+2, M/`QB/@B/ /2pB+2@iQF2M Bb b2+`2i iQ TTb- QMHv FMQrM M/ TT2M/2/ #v :*J M/`QB/@B/ +M #2 `2/ #v TTb rBi? T`QT2` T2`KBbbBQM U_1.n**PlLhaV 6HMF2` 那些年你不知不觉间引入的漏洞

X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X X XX X X X XX X X X XX X AMi`Q/m+iBQM M/`QB/ a2+m`Biv "+F;`QmM/ *QMi2ti M/ :QH *b2 bim/B2b Smb? a.Eb *QM+HmbBQM lTGBMF SA KBbmb2 [email protected]+2@GBMF X yQTb5 X X X mi?Q`BxiBQM M/ /2pB+2 }2H/b `2 +`Qbb@pHB/i2/ ++Q`/BM; iQ /2pB+2@iQF2M- #mi MQi s@:PP:Xla1_nA. _2;Bbi`iBQM A. Bb Bbbm2/ bQH2Hv QM s@:PP:Xla1_nA.5 X ii+F X X ii+F TTR bi2Hb M/`QB/@B/ QM pB+iBK /2pB+2 6HMF2` 那些年你不知不觉间引入的漏洞

X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X X XX X X X XX X X X XX X AMi`Q/m+iBQM M/`QB/ a2+m`Biv "+F;`QmM/ *QMi2ti M/ :QH *b2 bim/B2b Smb? a.Eb *QM+HmbBQM lTGBMF SA KBbmb2 [email protected]+2@GBMF X yQTb5 X X X mi?Q`BxiBQM M/ /2pB+2 }2H/b `2 +`Qbb@pHB/i2/ ++Q`/BM; iQ /2pB+2@iQF2M- #mi MQi s@:PP:Xla1_nA. _2;Bbi`iBQM A. Bb Bbbm2/ bQH2Hv QM s@:PP:Xla1_nA.5 X ii+F X X ii+F TTR bi2Hb M/`QB/@B/ QM pB+iBK /2pB+2 ii+F TTk M/ ii+F2` KQ/B}2b `2;Bbi`iBQM `2[m2bi QM ii+F/2pB+2 6HMF2` 那些年你不知不觉间引入的漏洞

X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X X XX X X X XX X X X XX X AMi`Q/m+iBQM M/`QB/ a2+m`Biv "+F;`QmM/ *QMi2ti M/ :QH *b2 bim/B2b Smb? a.Eb *QM+HmbBQM lTGBMF SA KBbmb2 [email protected]+2@GBMF X yQTb5 X X X mi?Q`BxiBQM M/ /2pB+2 }2H/b `2 +`Qbb@pHB/i2/ ++Q`/BM; iQ /2pB+2@iQF2M- #mi MQi s@:PP:Xla1_nA. _2;Bbi`iBQM A. Bb Bbbm2/ bQH2Hv QM s@:PP:Xla1_nA.5 X ii+F X X ii+F TTR bi2Hb M/`QB/@B/ QM pB+iBK /2pB+2 ii+F TTk M/ ii+F2` KQ/B}2b `2;Bbi`iBQM `2[m2bi QM ii+F/2pB+2 _2TH+2 s@:PP:Xla1_nA. rBi? pB+iBK M/`QB/@B/ 6HMF2` 那些年你不知不觉间引入的漏洞

X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X X XX X X X XX X X X XX X AMi`Q/m+iBQM M/`QB/ a2+m`Biv "+F;`QmM/ *QMi2ti M/ :QH *b2 bim/B2b Smb? a.Eb *QM+HmbBQM lTGBMF SA KBbmb2 [email protected]+2@GBMF X yQTb5 X X X mi?Q`BxiBQM M/ /2pB+2 }2H/b `2 +`Qbb@pHB/i2/ ++Q`/BM; iQ /2pB+2@iQF2M- #mi MQi s@:PP:Xla1_nA. _2;BbiìBQM A. Bb Bbbm2/ bQH2Hv QM s@:PP:Xla1_nA.5 X ii+F X X ii+F TTR bi2Hb M/`QB/@B/ QM pB+iBK /2pB+2 ii+F TTk M/ ii+F2` KQ/B}2b `2;BbiìBQM `2[m2bi QM ii+F/2pB+2 _2TH+2 s@:PP:Xla1_nA. rBi? pB+iBK M/`QB/@B/ _2;BbiìBQM A. KTTBM; iQ pB+iBK M/`QB/@B/ :2i5 6HMF2` 那些年你不知不觉间引入的漏洞

X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X X XX X X X XX X X X XX X AMi`Q/m+iBQM M/`QB/ a2+m`Biv "+F;`QmM/ *QMi2ti M/ :QH *b2 bim/B2b Smb? a.Eb *QM+HmbBQM lTGBMF SA KBbmb2 [email protected]+2@GBMF X yQTb5 X X X mi?Q`BxiBQM M/ /2pB+2 }2H/b `2 +`Qbb@pHB/i2/ ++Q`/BM; iQ /2pB+2@iQF2M- #mi MQi s@:PP:Xla1_nA. _2;BbiìBQM A. Bb Bbbm2/ bQH2Hv QM s@:PP:Xla1_nA.5 X ii+F X X ii+F TTR bi2Hb M/`QB/@B/ QM pB+iBK /2pB+2 ii+F TTk M/ ii+F2` KQ/B}2b `2;BbiìBQM `2[m2bi QM ii+F/2pB+2 _2TH+2 s@:PP:Xla1_nA. rBi? pB+iBK M/`QB/@B/ _2;BbiìBQM A. KTTBM; iQ pB+iBK M/`QB/@B/ :2i5 pB+iBK TT QM pB+iBK /2pB+2 `2;Bbi2`b- bbB;M2/ biQH2M _2;BbiìBQM A.- b2M/ iQ TT b2`p2` 6HMF2` 那些年你不知不觉间引入的漏洞

X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X X XX X X X XX X X X XX X AMi`Q/m+iBQM M/`QB/ a2+m`Biv "+F;`QmM/ *QMi2ti M/ :QH *b2 bim/B2b Smb? a.Eb *QM+HmbBQM lTGBMF SA KBbmb2 [email protected]+2@GBMF X yQTb5 X X X mi?Q`BxiBQM M/ /2pB+2 }2H/b `2 +`Qbb@pHB/i2/ ++Q`/BM; iQ /2pB+2@iQF2M- #mi MQi s@:PP:Xla1_nA. _2;BbiìBQM A. Bb Bbbm2/ bQH2Hv QM s@:PP:Xla1_nA.5 X ii+F X X ii+F TTR bi2Hb M/`QB/@B/ QM pB+iBK /2pB+2 ii+F TTk M/ ii+F2` KQ/B}2b `2;BbiìBQM `2[m2bi QM ii+F/2pB+2 _2TH+2 s@:PP:Xla1_nA. rBi? pB+iBK M/`QB/@B/ _2;BbiìBQM A. KTTBM; iQ pB+iBK M/`QB/@B/ :2i5 pB+iBK TT QM pB+iBK /2pB+2 `2;Bbi2`b- bbB;M2/ biQH2M _2;BbiìBQM A.- b2M/ iQ TT b2`p2` TT b2`p2` /BbTi+?2b K2bb;2b #b2/ QM biQH2M _2;BbiìBQM 6HMF2` 那些年你不知不觉间引入的漏洞

X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X X XX X X X XX X X X XX X AMi`Q/m+iBQM M/`QB/ a2+m`Biv "+F;`QmM/ *QMi2ti M/ :QH *b2 bim/B2b Smb? a.Eb *QM+HmbBQM lTGBMF SA KBbmb2 [email protected]+2@GBMF SA KBbmb2 @ BMb2+m`2 _a BM AMi2`MH a.E X "+F;`QmM/ X X X _a bvKK2i`B+ H;Q`Bi?K- 6Q` 2M+`vTiBQM r2 ?p2 + ≡ K2 KQ/ M 6Q` /2+`vTiBQM r2 ?p2 K ≡ +/ KQ/ M q?2`2 (2, M) Bb i?2 Tm#HB+ F2v- (/, M) Bb T`Bpi2 QM2X + Bb 2M+`vTi2/ i2ti- K Bb +H2`i2tiX 6HMF2` 那些年你不知不觉间引入的漏洞

X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X X XX X X X XX X X X XX X AMi`Q/m+iBQM M/`QB/ a2+m`Biv "+F;`QmM/ *QMi2ti M/ :QH *b2 bim/B2b Smb? a.Eb *QM+HmbBQM lTGBMF SA KBbmb2 [email protected]+2@GBMF X JmHiBTH2 pmHM2`#BHBiB2b 2tBbi BM hQ#Q GQ;BM a.E X X X hQ#Q GQ;BM a.E mb2 ?iiT +?MM2H iQ i`MbTQ`i mb2`Ƕb TbbrQ`/ r?2M HQ;BMX _a 2M+`vTiBQM Bb /QTi2/ iQ /272i JAhJ bMB{M;X >Qr2p2` KmHiBTH2 Bbbm2b 2tBbi z2+i HH KQ#BH2 +HB2Mib Q7 HB## _2TQ`i2/ BM kyR9X8- }t2/ BM Hi2 kyR9 hvTB+H 2tKTH2 Q7 SA KBbmb2 6HMF2` 那些年你不知不觉间引入的漏洞

X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X X XX X X X XX X X X XX X AMi`Q/m+iBQM M/`QB/ a2+m`Biv "+F;`QmM/ *QMi2ti M/ :QH *b2 bim/B2b Smb? a.Eb *QM+HmbBQM lTGBMF SA KBbmb2 [email protected]+2@GBMF X lb2 _a i?2M vQmǰ`2 `2HHv b2+m`2\ X X X hQ#Q GQ;BM a.E mb2 ?iiT +?MM2H iQ i`MbTQ`i mb2`Ƕb TbbrQ`/ r?2M HQ;BM- M/ mb2 _a iQ 2M+`vTi i?2 i`{+X >Qr2p2` KmHiBTH2 Bbbm2b 2tBbi h?2 +BT?2` bmBi2 Bb +?Qb2M rBi?Qmi T//BM; *BT?2`X;2iAMbiM+2UǴ_aǴV 2 Bb +?Qb2 b j hQQ bKHH 7Q` H`;2 M aQ r2 ?p2 2t+iHv + = K3- BX2X K = +1 3 h?2 TbbrQ`/ Bb +H2`i2ti 7Q` ii+F2` iQ bMBz 2p2M BiǶb 2M+`vTi2/ #v _a5 6HMF2` 那些年你不知不觉间引入的漏洞

X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X X XX X X X XX X X X XX X AMi`Q/m+iBQM M/`QB/ a2+m`Biv "+F;`QmM/ *QMi2ti M/ :QH *b2 bim/B2b Smb? a.Eb *QM+HmbBQM lTGBMF SA KBbmb2 [email protected]+2@GBMF omM;H2 /p2`iBb2K2Mi a.E omHM .Bb+Qp2`2/ #v LQra2+m`2 G# X mMxBT /B`2+iQ`v i`p2`bH X X X *Q/2 2t2+miBQM pB JAhJ .B`2+iQ`v i`p2`bH BM xBT 2Mi`v, XXfXXfXXfXXfXXfTrM2/X/2t _2bQm`+2 mT/i2 xBT pB >hhS HBMF- BMb2+m`2 b r2 FMQr ,U h?2 TT #HBM/Hv mMxBT i?2 }H2 mbBM; wBTAMTmiai`2K- 2ti`+iBM; HH }H2b Pp2`r`Bi2 /2tfQ/2tfbQ }H2- BMD2+i +Q/2- i`B;;2` 2t2+miBQM :2i b?2HH 6HMF2` 那些年你不知不觉间引入的漏洞

X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X X XX X X X XX X X X XX X AMi`Q/m+iBQM M/`QB/ a2+m`Biv "+F;`QmM/ *QMi2ti M/ :QH *b2 bim/B2b Smb? a.Eb *QM+HmbBQM lTGBMF SA KBbmb2 [email protected]+2@GBMF :*J _2;BbiìBQM, *HB2Mi GBMF lMT`Qi2+i2/ #`Q/+bi `2+2Bp2` H2Fb S2M/BM;AMi2Mi AMi2Mi `2;BbiìBQMAMi2Mi 4 M2r AMi2MiU]+QKX;QQ;H2XM/`QB/X+k/KXBMi2MiX_1:Aah1_]Vc `2;BbiìBQMAMi2MiXTmi1tiÙ]TT]-S2M/BM;AMi2MiX;2i"`Q/+biUi?Bb- y- M2r AMi2MiUV- yVVc `2;BbiìBQMAMi2MiXTmi1tiÙ]b2M/2`]- b2M/2À.Vc biìa2`pB+2U`2;BbiìBQMAMi2MiVc 6HMF2` 那些年你不知不觉间引入的漏洞

X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X X XX X X X XX X X X XX X AMi`Q/m+iBQM M/`QB/ a2+m`Biv "+F;`QmM/ *QMi2ti M/ :QH *b2 bim/B2b Smb? a.Eb *QM+HmbBQM lTGBMF SA KBbmb2 [email protected]+2@GBMF T+?2 *Q`/Qp sa .Bb+Qp2`2/ #v A"J s@H# JmHiBTH2 pmHM2`#BHBiB2b X b?QmH/Pp2``B/2l_GGQ/BM; #vTbb X X X q2#aQ+F2i +QKKmMB+iBQM Bb MQi +QMi`QHH2/ #v b?QmH/AMi2`+2Ti_2[m2bi X q2#pB2r JBb+QM7B;m`iBQM X X X b2iHHQrlMBp2`bH++2bb6`QK6BH2l`Hb Bb b2i iQ i`m2 X HQ/l`H 7`QK AMi2Mi X X X .i ~Qr2/ Qmi 7`QK AMi2Mi ~Qrb BMiQ HQ/l`H 6HMF2` 那些年你不知不觉间引入的漏洞

X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X X XX X X X XX X X X XX X AMi`Q/m+iBQM M/`QB/ a2+m`Biv "+F;`QmM/ *QMi2ti M/ :QH *b2 bim/B2b Smb? a.Eb *QM+HmbBQM lTGBMF SA KBbmb2 [email protected]+2@GBMF .i 6HQr AMBiBiBp2 Tm#HB+ pQB/ HQ/l`H Uai`BM; m`HV& ffXXX ' 2Hb2 & ai`BM; BMBil`H 4 i?BbX;2iS`QT2`ivU]m`H]- MmHHVc ff A7 7B`bi T;2 Q7 TT- i?2M b2i l_G iQ HQ/ iQ #2 i?2 QM2 Tbb2/ BM ffXXX ff Pi?2`rBb2 mb2 i?2 l_G bT2+B7B2/ BM i?2 +iBpBiv ’b 2ti`b #mM/H2 2Hb2 & i?BbXHQ/l`HAMiQoB2rUBMBil`HVc ' Tm#HB+ ai`BM; ;2iS`QT2`ivUai`BM; MK2- ai`BM; /27mHioHm2V & "mM/H2 #mM/H2 4 i?BbX+Q`/QpX;2i+iBpBivUVX;2iAMi2MiUVX;2i1ti`bUVc ffXXX P#D2+i T 4 #mM/H2X;2iUMK2V `2im`M TXiQai`BM;UVc ' 6HMF2` 那些年你不知不觉间引入的漏洞

X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X X XX X X X XX X X X XX X AMi`Q/m+iBQM M/`QB/ a2+m`Biv "+F;`QmM/ *QMi2ti M/ :QH *b2 bim/B2b Smb? a.Eb *QM+HmbBQM lTGBMF SA KBbmb2 [email protected]+2@GBMF q2 HQp2 q2#aQ+F2i5 !Pp2``B/2 Tm#HB+ q2#_2bQm`+2_2bTQMb2 b?QmH/AMi2`+2Ti_2[m2biUq2#pB2r pB2r- ai`BM; m`HV & B7U5*QM7B;XBbl`Hq?Bi2GBbi2/Um`HV Um`HXbi`ibqBi?U]?iiT,ff]V %% m`HXbi`ibqBi?U]?iiTb,ff]VVV & `2im`M ;2iq?Bi2HBbi_2bTQMb2UVc ' ' 6HMF2` 那些年你不知不觉间引入的漏洞

X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X X XX X X X XX X X X XX X AMi`Q/m+iBQM M/`QB/ a2+m`Biv "+F;`QmM/ *QMi2ti M/ :QH *b2 bim/B2b Smb? a.Eb *QM+HmbBQM lTGBMF SA KBbmb2 [email protected]+2@GBMF T+?2 *Q`/Qp sa !Pp2``B/2 Tm#HB+ #QQH2M b?QmH/Pp2``B/2l`HGQ/BM;Uq2#oB2r pB2r- ai`BM; m`HV & B7Um`HXbiìbqBi?U]7BH2,ff]V %% m`HXbiìbqBi?U]/i,]V %% *QM7B;XBbl`Hq?Bi2GBbi2/Um`HVV & `2im`M 7Hb2c ' 2Hb2 & AMi2Mi BMi2Mi 4 M2r AMi2MiUAMi2MiX*hAPLnoA1qVc BMi2MiXb2i.iUl`BXT`b2Um`HVVc i?BbX+Q`/QpX;2i+iBpBivUVXbiì+iBpBivUBMi2MiVc `2im`M i`m2c ' ' 6HMF2` 那些年你不知不觉间引入的漏洞

X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X X XX X X X XX X X X XX X AMi`Q/m+iBQM M/`QB/ a2+m`Biv "+F;`QmM/ *QMi2ti M/ :QH *b2 bim/B2b Smb? a.Eb *QM+HmbBQM lTGBMF SA KBbmb2 [email protected]+2@GBMF T+?2 *Q`/Qp sa 1tTHQBi .`Bp2@#v /`QT 2tTHQBi a2M/ AMi2Mi iQ 7Q`+2 pB+iBK HQ/ }H2,fffb/+`/fii+FX?iKH lb2 r2#bQ+F2i iQ b2M/ Qmi b2MbBiBp2 }H2b 6HMF2` 那些年你不知不觉间引入的漏洞

X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X X XX X X X XX X X X XX X AMi`Q/m+iBQM M/`QB/ a2+m`Biv "+F;`QmM/ *QMi2ti M/ :QH *b2 bim/B2b Smb? a.Eb *QM+HmbBQM lK2M; a.E MHvbBb Q7 s;Smb? a.E MHvbBb Q7 CSmb h#H2 Q7 *QMi2Mib X X X R AMi`Q/m+iBQM #Qmi X X X k M/`QB/ a2+m`Biv "+F;`QmM/ X X X j *QMi2ti M/ :QH X X X 9 *b2 bim/B2b lTGBMF SA KBbmb2 [email protected]+2@GBMF X X X 8 Smb? a.Eb lK2M; a.E MHvbBb Q7 s;Smb? a.E MHvbBb Q7 CSmb? a.E MHvbBb Q7 CSmb? a.E 6HMF2` 那些年你不知不觉间引入的漏洞

X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X X XX X X X XX X X X XX X AMi`Q/m+iBQM M/`QB/ a2+m`Biv "+F;`QmM/ *QMi2ti M/ :QH *b2 bim/B2b Smb? a.Eb *QM+HmbBQM lK2M; a.E MHvbBb Q7 s;Smb? a.E MHvbBb Q7 CSmb omHM2`#BHBiv ?B//2M BM KBHHBQMb Q7 TTb X .2p2HQT2`b HQp2b i?2b2 a.Eb X X X AM+Hm/2 i?2K b #H+F#Qt C_faP _B+? 7mM+iBQMHBiB2b5 J2bb;2 Tmb?BM;- +iBpiBM; TT- l_G Tmb?BM; JBHHBQMb Q7 TTb mb2 i?2K 6HMF2` 那些年你不知不觉间引入的漏洞

X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X X XX X X X XX X X X XX X AMi`Q/m+iBQM M/`QB/ a2+m`Biv "+F;`QmM/ *QMi2ti M/ :QH *b2 bim/B2b Smb? a.Eb *QM+HmbBQM lK2M; a.E MHvbBb Q7 s;Smb? a.E MHvbBb Q7 CSmb ii+F b+2M`BQ >Qr2p2`- /2bB;M ~rb BM i?Qb2 a.E HHQrb M x2`Q@T2`KBbbBQM ii+FBM; TT +M 6F2 MQiB}+iBQM K2bb;2 ai`i `#Bi``v +iBpBiv @ #vTbbBM; bM/#Qt S`Bpi2 }H2 biQH2M *Q/2 2t2+miBQM5 BM `#Bi``v i`;2i TT #mM/H2/ rBi? pmHM2`#H2 a.E pB AS*X 6HMF2` 那些年你不知不觉间引入的漏洞

X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X X XX X X X XX X X X XX X AMi`Q/m+iBQM M/`QB/ a2+m`Biv "+F;`QmM/ *QMi2ti M/ :QH *b2 bim/B2b Smb? a.Eb *QM+HmbBQM lK2M; a.E MHvbBb Q7 s;Smb? a.E MHvbBb Q7 CSmb *b2 bim/v, omHM2`#BHBiB2b BM Smb? a.Eb lK2M; a.E, QM2 Q7 i?2 KQbi 7KQmb Tmb? a.E BM *?BM /Q vQm FMQr 2K#2//BM; Bi rBHH #`2F vQm` TTǶb bM/#Qt\ 6HMF2` 那些年你不知不觉间引入的漏洞

X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X X XX X X X XX X X X XX X AMi`Q/m+iBQM M/`QB/ a2+m`Biv "+F;`QmM/ *QMi2ti M/ :QH *b2 bim/B2b Smb? a.Eb *QM+HmbBQM lK2M; a.E MHvbBb Q7 s;Smb? a.E MHvbBb Q7 CSmb x2`Q T2`KBbbBQM ii+FBM; TT +M 7Q`;2 pB+iBKǶb MQiB}+iBQM 6HMF2` 那些年你不知不觉间引入的漏洞

X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X X XX X X X XX X X X XX X AMi`Q/m+iBQM M/`QB/ a2+m`Biv "+F;`QmM/ *QMi2ti M/ :QH *b2 bim/B2b Smb? a.Eb *QM+HmbBQM lK2M; a.E MHvbBb Q7 s;Smb? a.E MHvbBb Q7 CSmb x2`Q T2`KBbbBQM ii+FBM; TT +M bi`i `#Bi``v +iBpBiv Q7 pB+iBK- BM+Hm/BM; mM2tTQ`i2/ QM2bX lb2 Q{+BH a.E@bKTH2 b 2tKTH2 6HMF2` 那些年你不知不觉间引入的漏洞

X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X X XX X X X XX X X X XX X AMi`Q/m+iBQM M/`QB/ a2+m`Biv "+F;`QmM/ *QMi2ti M/ :QH *b2 bim/B2b Smb? a.Eb *QM+HmbBQM lK2M; a.E MHvbBb Q7 s;Smb? a.E MHvbBb Q7 CSmb aKTH2 i`;2i h`;2i AMi2`MH +iBpBiv 6HMF2` 那些年你不知不觉间引入的漏洞

X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X X XX X X X XX X X X XX X AMi`Q/m+iBQM M/`QB/ a2+m`Biv "+F;`QmM/ *QMi2ti M/ :QH *b2 bim/B2b Smb? a.Eb *QM+HmbBQM lK2M; a.E MHvbBb Q7 s;Smb? a.E MHvbBb Q7 CSmb .2KQ pB/2Q 6Q`;2 MQiB}+iBQM Q7 TT +QMiBMBM; s;Smb? M/ lK2M;Smb? a.E ai`i T`Bpi2 +iBpBiv Q7 TT +QMiBMBM; s;Smb? M/ lK2M;Smb? a.E 6HMF2` 那些年你不知不觉间引入的漏洞

X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X X XX X X X XX X X X XX X AMi`Q/m+iBQM M/`QB/ a2+m`Biv "+F;`QmM/ *QMi2ti M/ :QH *b2 bim/B2b Smb? a.Eb *QM+HmbBQM lK2M; a.E MHvbBb Q7 s;Smb? a.E MHvbBb Q7 CSmb aiiB+ MHvbBb 6B`biHv- r2 `M i?2 a.E /2KQ i?`Qm;? biiB+ MHvbBb 7`K2rQ`FX h?2 7QHHQrBM; .i6HQr pmHM2`#BHBiB2b `2 7QmM/ X aQm`+2b M/ aBMFb X X X aQm`+2, ;2iAMi2Mi- ;2i 1ti`- 2i+ aBMF, bi`i+iBpBiv- b2M/"`Q/+bi- HQ/l`H- 2i+ 6HMF2` 那些年你不知不觉间引入的漏洞

X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X X XX X X X XX X X X XX X AMi`Q/m+iBQM M/`QB/ a2+m`Biv "+F;`QmM/ *QMi2ti M/ :QH *b2 bim/B2b Smb? a.Eb *QM+HmbBQM lK2M; a.E MHvbBb Q7 s;Smb? a.E MHvbBb Q7 CSmb a2imT 1MpB`QMK2MiUAMi2`S`Q+2/m`2V pH TT, a2imTTTHB+iBQM 4 M2r a2imTTTHB+iBQMUTHi7Q`KSi?- TFSi?V TTXb2iaiQT7i2`6B`bi6HQrU7Hb2V TTXb2i1M#H2AKTHB+Bi6HQrbUi`m2V TTXb2i1M#H2aiiB+6B2H/h`+FBM;Ui`m2V TTXb2i1M#H2*HH#+FbU7Hb2V TTXb2i1M#H21t+2TiBQMh`+FBM;U7Hb2V TTXb2i*Q/21HBKBMiBQMJQ/2U*Q/21HBKBMiBQMJQ/2XS`QT;i2*QMbiMibV pH 2bvhBMiq`TT2`, 1bvhBMiq`TT2` 4 M2r 1bvhBMiq`TT2ÙiBMir`TT2`6BH2V TTXb2ihBMiq`TT2Ù2bvhBMiq`TT2`V TTX+H+mHi2aQm`+2baBMFb1Mi`vTQBMibUbQm`+2aBMF.i6HQrV TTX;2M2ì2AM7Q7HQr*6: TTX`mMAM7Q7HQr 6HMF2` 那些年你不知不觉间引入的漏洞

X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X X XX X X X XX X X X XX X AMi`Q/m+iBQM M/`QB/ a2+m`Biv "+F;`QmM/ *QMi2ti M/ :QH *b2 bim/B2b Smb? a.Eb *QM+HmbBQM lK2M; a.E MHvbBb Q7 s;Smb? a.E MHvbBb Q7 CSmb _2bmHi a2i R (KBM) AM7Q7HQr @ @ 0`j 4 biiB+BMpQF2 IM/`QB/X+QMi2MiXAMi2Mi, M/`QB/X+QMi2MiXAMi2Mi T`b2l`BUDpXHM;Xai`BM;-BMiV=U0`k- RV QM HBM2 jj9 BM K2i?Q/ I+QKXi2M+2MiXM/`QB/XiTmb?Xs:Smb?+iBpBiv, pQB/ QT2MAMi2MiUM/`QB/X+QMi2MiXAMi2MiV= (KBM) AM7Q7HQr @ QM Si?, (KBM) AM7Q7HQr @ @= I+QKXi2M+2MiXM/`QB/XiTmb?Xs:Smb?+iBpBiv, pQB/ QT2MAMi2MiUM/`QB/X+QMi2MiXAMi2MiV= (KBM) AM7Q7HQr @ @= 0`j 4 biiB+BMpQF2 IM/`QB/X+QMi2MiXAMi2Mi, M/`QB/X+QMi2MiXAMi2Mi T`b2l`BUDpXHM;Xai`BM;-BMiV=U0`k- RV (KBM) AM7Q7HQr @ @= I+QKXi2M+2MiXM/`QB/XiTmb?Xs:Smb?+iBpBiv, pQB/ QT2MAMi2MiUM/`QB/X+QMi2MiXAMi2MiV= (KBM) AM7Q7HQr @ @= pB`imHBMpQF2 0`yXI+QKXi2M+2MiXM/`QB/XiTmb?Xs:Smb?+iBpBiv, pQB/ bi`i+iBpBivUM/`QB/X+QMi2MiXAMi2MiV=U0`jV 6HMF2` 那些年你不知不觉间引入的漏洞

X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X X XX X X X XX X X X XX X AMi`Q/m+iBQM M/`QB/ a2+m`Biv "+F;`QmM/ *QMi2ti M/ :QH *b2 bim/B2b Smb? a.Eb *QM+HmbBQM lK2M; a.E MHvbBb Q7 s;Smb? a.E MHvbBb Q7 CSmb JTTBM; #+F iQ /2+QKTBH2/ bQm`+2 T`Qi2+i2/ pQB/ QM*`2i2U"mM/H2 `;eV & AMi2Mi BMi2Mic i`v & BMi2Mi 4 i?BbX;2iAMi2MiUVc ffXXX i?BbXb?QrH2ì.BHQ;Uy- BMi2MiVc T`Bpi2 pQB/ b?QrH2ì.BHQ;UBMi `;8- AMi2Mi `;eV & ffXXX 2Hb2 B7U`;8 54 RV & i?BbXQT2MAMi2MiU`;eVc ' T`Bpi2 pQB/ QT2MAMi2MiUAMi2Mi `;eV & BMi2Mi 4 AMi2MiXT`b2l`BU`;eX;2iai`BM;1tiÙ]+iBpBiv]V- RVc BMi2MiX//6H;bUke39j898eVc BMi2MiX//*i2;Q`vU]M/`QB/XBMi2MiX+i2;Q`vX"_Pqa"G1]Vc BMi2MiXb2i*QKTQM2MiUMmHHVc ffXXX i?BbX#`Q/+bihQhSmb?a2`pB+2U`;eVc i?BbXbiì+iBpBivUBMi2MiVc 6HMF2` 那些年你不知不觉间引入的漏洞

X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X X XX X X X XX X X X XX X AMi`Q/m+iBQM M/`QB/ a2+m`Biv "+F;`QmM/ *QMi2ti M/ :QH *b2 bim/B2b Smb? a.Eb *QM+HmbBQM lK2M; a.E MHvbBb Q7 s;Smb? a.E MHvbBb Q7 CSmb _2bmHi a2i R lM7Q`imMi2Hv- i?Bb BbMǶi 2tTHQBi#H2 *QKTQM2Mi Bb b2i iQ MmHH a2H2+iQ` Bb b2i iQ MmHH LQr H2iǶb b22 _2bmHi a2i k 6HMF2` 那些年你不知不觉间引入的漏洞

X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X X XX X X X XX X X X XX X AMi`Q/m+iBQM M/`QB/ a2+m`Biv "+F;`QmM/ *QMi2ti M/ :QH *b2 bim/B2b Smb? a.Eb *QM+HmbBQM lK2M; a.E MHvbBb Q7 s;Smb? a.E MHvbBb Q7 CSmb (KBM) AM7Q7HQr @ h?2 bBMF pBìmHBMpQF2 0`yXI+QKXi2M+2MiXM/`QB/XiTmb?Xs:Smb?+iBpBiv, pQB/ biì+iBpBivUM/`QB/X+QMi2MiXAMi2MiV=U0`8V QM HBM2 Ry8 BM K2i?Q/ I+QKXi2M+2MiXM/`QB/XiTmb?Xs:Smb?+iBpBiv, pQB/ Tmb?*HB+F2/_2bmHiUM/`QB/X+QMi2MiXAMi2MiV= rb +HH2/ rBi? pHm2b 7`QK i?2 7QHHQrBM; bQm`+2b, (KBM) AM7Q7HQr @ @ 0`k 4 pBìmHBMpQF2 0`yXI+QKXi2M+2MiXM/`QB/XiTmb?Xs:Smb?+iBpBiv, M/`QB/X+QMi2MiXAMi2Mi ;2iAMi2MiUV=UV QM HBM2 8e BM K2i?Q/ I+QKXi2M+2MiXM/`QB/XiTmb?Xs:Smb?+iBpBiv, pQB/ QM*`2i2UM/`QB/XQbX"mM/H2V= (KBM) AM7Q7HQr @ QM Si?, (KBM) AM7Q7HQr @ @= I+QKXi2M+2MiXM/`QB/XiTmb?Xs:Smb?+iBpBiv, pQB/ QM*`2i2UM/`QB/XQbX"mM/H2V= (KBM) AM7Q7HQr @ @= 0`k 4 pBìmHBMpQF2 0`yXI+QKXi2M+2MiXM/`QB/XiTmb?Xs:Smb?+iBpBiv, M/`QB/X+QMi2MiXAMi2Mi ;2iAMi2MiUV=UV (KBM) AM7Q7HQr @ @= I+QKXi2M+2MiXM/`QB/XiTmb?Xs:Smb?+iBpBiv, pQB/ QM*`2i2UM/`QB/XQbX"mM/H2V= (KBM) AM7Q7HQr @ @= bT2+BHBMpQF2 0`yXI+QKXi2M+2MiXM/`QB/XiTmb?Xs:Smb?+iBpBiv, pQB/ Tmb?*HB+F2/_2bmHiUM/`QB/X+QMi2MiXAMi2MiV=U0`kV (KBM) AM7Q7HQr @ @= I+QKXi2M+2MiXM/`QB/XiTmb?Xs:Smb?+iBpBiv, pQB/ Tmb?*HB+F2/_2bmHiUM/`QB/X+QMi2MiXAMi2MiV= (KBM) AM7Q7HQr @ @= pBìmHBMpQF2 0`8XIM/`QB/X+QMi2MiXAMi2Mi, M/`QB/X+QMi2MiXAMi2Mi Tmi1ti`bUM/`QB/X+QMi2MiXAMi2MiV=U0`RV (KBM) AM7Q7HQr @ @= I+QKXi2M+2MiXM/`QB/XiTmb?Xs:Smb?+iBpBiv, pQB/ Tmb?*HB+F2/_2bmHiUM/`QB/X+QMi2MiXAMi2MiV= (KBM) AM7Q7HQr @ @= pBìmHBMpQF2 0`yXI+QKXi2M+2MiXM/`QB/XiTmb?Xs:Smb?+iBpBiv, pQB/ biì+iBpBivUM/`QB/X+QMi2MiXAMi2MiV=U0`8V 6HMF2` 那些年你不知不觉间引入的漏洞

X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X X XX X X X XX X X X XX X AMi`Q/m+iBQM M/`QB/ a2+m`Biv "+F;`QmM/ *QMi2ti M/ :QH *b2 bim/B2b Smb? a.Eb *QM+HmbBQM lK2M; a.E MHvbBb Q7 s;Smb? a.E MHvbBb Q7 CSmb _2bmHi a2i j _2bmHi k HQQFb KQ`2 HBF2 b?Q`i@+B`+mBi 2``Q`- M/ Bb 2bv iQ }t q?i B7 s:Smb?+iBpBiv BbMǶi 2tTQ`i2/ MvKQ`2\ X _2Ht- r2 +M biBHH 7BM/ rv X X X HH K2bb;2b `2 `Qmi2/ #v +QKXi2M+2MiXM/`QB/XiTmb?Xs:Smb?_2+2Bp2` 6HMF2` 那些年你不知不觉间引入的漏洞

X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X X XX X X X XX X X X XX X AMi`Q/m+iBQM M/`QB/ a2+m`Biv "+F;`QmM/ *QMi2ti M/ :QH *b2 bim/B2b Smb? a.Eb *QM+HmbBQM lK2M; a.E MHvbBb Q7 s;Smb? a.E MHvbBb Q7 CSmb _2bmHi a2i j _2bmHi k HQQFb KQ`2 HBF2 b?Q`i@+B`+mBi 2``Q`- M/ Bb 2bv iQ }t q?i B7 s:Smb?+iBpBiv BbMǶi 2tTQ`i2/ MvKQ`2\ X _2Ht- r2 +M biBHH 7BM/ rv X X X HH K2bb;2b `2 `Qmi2/ #v +QKXi2M+2MiXM/`QB/XiTmb?Xs:Smb?_2+2Bp2` *hAPL +QKXi2M+2MiXM/`QB/XiTmb?X+iBQMXALh1_LGnSla>nJ1aa:1 6HMF2` 那些年你不知不觉间引入的漏洞

X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X X XX X X X XX X X X XX X AMi`Q/m+iBQM M/`QB/ a2+m`Biv "+F;`QmM/ *QMi2ti M/ :QH *b2 bim/B2b Smb? a.Eb *QM+HmbBQM lK2M; a.E MHvbBb Q7 s;Smb? a.E MHvbBb Q7 CSmb _2bmHi a2i j, MHvbBb 6QHHQrBM; i?2 /2+QKTBH2/ bQm`+2 r2 ;Qi XXX yQTb5 6HMF2` 那些年你不知不觉间引入的漏洞

X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X X XX X X X XX X X X XX X AMi`Q/m+iBQM M/`QB/ a2+m`Biv "+F;`QmM/ *QMi2ti M/ :QH *b2 bim/B2b Smb? a.Eb *QM+HmbBQM lK2M; a.E MHvbBb Q7 s;Smb? a.E MHvbBb Q7 CSmb C1" +QK2 iQ `2b+m25 LQiB+2 A.1 ;2M2ì2/ 7mM+iBQMb M/ DbQM ?2HT2`b H2p2 i`+2b QM 7mM+iBQM MK2b, Tm#HB+ ai`BM; iQai`BM;UV & ai`BM;"mBH/2` bi`BM;"mBH/2` 4 M2r ai`BM;"mBH/2ÙVc bi`BM;"mBH/2`XTT2M/U]Smb?J2bb;2JM;2` (Kb;A/4]VXTT2M/Ui?BbXVXTT2M/U]- ++2bbA/4]VXTT2M/U i?BbX#VXTT2M/U]- #mbBJb;A/4]VXTT2M/Ui?BbX+VXTT2M/U]- +QMi2Mi4]VXTT2M/Ui?BbX/VXTT2M/U ]- iBK2biKTb4]VXTT2M/Ui?BbX2VXTT2M/U]- ivT24]VXTT2M/Ui?BbX7VXTT2M/U]- BMi2Mi4]V XTT2M/Ui?BbX?VXTT2M/U]- K2bb;2>QH/2`4]VXTT2M/Ui?BbXBVXTT2M/U])]Vc `2im`M bi`BM;"mBH/2`XiQai`BM;UVc ' Tm#HB+ biiB+ ? U*QMi2ti `;3- AMi2Mi `;NV & ? ? 4 M2r ?U`;3- `;NVc ai`BM; bi`BM; 4 _BDM/2HX/2+`vTiU`;NX;2iai`BM;1tiÙ]+QMi2Mi]VVc ?X/ 4 bi`BM;c ?X 4 `;NX;2iGQM;1tiÙ]Kb;A/]- @RVc ?X# 4 `;NX;2iGQM;1tiÙ]++A/]- @RVc ?X+ 4 `;NX;2iGQM;1tiÙ]#mbBJb;A/]- @RVc ?X2 4 `;NX;2iGQM;1tiÙ]iBK2biKTb]- @RVc ?X7 4 `;NX;2iGQM;1tiÙ]ivT2]- @RVc 6HMF2` 那些年你不知不觉间引入的漏洞

X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X X XX X X X XX X X X XX X AMi`Q/m+iBQM M/`QB/ a2+m`Biv "+F;`QmM/ *QMi2ti M/ :QH *b2 bim/B2b Smb? a.Eb *QM+HmbBQM lK2M; a.E MHvbBb Q7 s;Smb? a.E MHvbBb Q7 CSmb MHvbBb iQai`BM; K2i?Q/b M/ DbQM 7mM+iBQMb `;mK2Mib iQ `2biQ`2 Q`B;BMH MK2bX C2# THm;BM bQm`+2 pBH#H2 i ~MF2`?[/fD2#SHm;BMb Tm#HB+ +Hbb Smb?J2bb;2JM;2` & T`Bpi2 HQM; Kb;A/c T`Bpi2 HQM; ++A/c T`Bpi2 HQM; #mbBJb;A/c T`Bpi2 ai`BM; +QMi2Mic T`Bpi2 HQM; iBK2biKTbc T`Bpi2 HQM; ivT2c T`Bpi2 *QMi2ti ;c T`Bpi2 AMi2Mi BMi2Mic T`Bpi2 "b2J2bb;2>QH/2` K2bb;2>QH/2`c T`Bpi2 Smb?J2bb;2JM;2`U*QMi2ti `;8- AMi2Mi `;eV & bmT2`UVc i?BbXKb;A/ 4 @Rc i?BbX++A/ 4 @Rc i?BbX#mbBJb;A/ 4 @Rc i?BbX+QMi2Mi 4 ]]c i?BbXiBK2biKTb 4 @Rc i?BbXivT2 4 @Rc i?BbX; 4 MmHHc i?BbXBMi2Mi 4 MmHHc i?BbXK2bb;2>QH/2` 4 MmHHc 6HMF2` 那些年你不知不觉间引入的漏洞

X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X X XX X X X XX X X X XX X AMi`Q/m+iBQM M/`QB/ a2+m`Biv "+F;`QmM/ *QMi2ti M/ :QH *b2 bim/B2b Smb? a.Eb *QM+HmbBQM lK2M; a.E MHvbBb Q7 s;Smb? a.E MHvbBb Q7 CSmb _2bmHi b2i j, MHvbBb LQr r2Ƕp2 `2+Qp2`2/ i?2 HQ;B+ Q7 Tmb? K2bb;2 T`Q+2bbBM; J2bb;2b `2 7Q`r`/2/ iQ s:Smb?_2+2Bp2` rBi? ALh1_LGnSla>nJ1aa:1 6HMF2` 那些年你不知不觉间引入的漏洞

X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X X XX X X X XX X X X XX X AMi`Q/m+iBQM M/`QB/ a2+m`Biv "+F;`QmM/ *QMi2ti M/ :QH *b2 bim/B2b Smb? a.Eb *QM+HmbBQM lK2M; a.E MHvbBb Q7 s;Smb? a.E MHvbBb Q7 CSmb _2bmHi b2i j, MHvbBb LQr r2Ƕp2 `2+Qp2`2/ i?2 HQ;B+ Q7 Tmb? K2bb;2 T`Q+2bbBM; J2bb;2b `2 7Q`r`/2/ iQ s:Smb?_2+2Bp2` rBi? ALh1_LGnSla>nJ1aa:1 _2+2Bp2` T2`7Q`Kb +?2+F QM ++A/ M/ Kb;A/ ++A/ Kmbi Ki+? QM2 /2+H`2/ BM JMB72bi U2bv5V Kb;A/ Kmbi #2 mMB[m2 U2bv5V 6HMF2` 那些年你不知不觉间引入的漏洞

X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X X XX X X X XX X X X XX X AMi`Q/m+iBQM M/`QB/ a2+m`Biv "+F;`QmM/ *QMi2ti M/ :QH *b2 bim/B2b Smb? a.Eb *QM+HmbBQM lK2M; a.E MHvbBb Q7 s;Smb? a.E MHvbBb Q7 CSmb _2bmHi b2i j, MHvbBb LQr r2Ƕp2 `2+Qp2`2/ i?2 HQ;B+ Q7 Tmb? K2bb;2 T`Q+2bbBM; J2bb;2b `2 7Q`r`/2/ iQ s:Smb?_2+2Bp2` rBi? ALh1_LGnSla>nJ1aa:1 _2+2Bp2` T2`7Q`Kb +?2+F QM ++A/ M/ Kb;A/ ++A/ Kmbi Ki+? QM2 /2+H`2/ BM JMB72bi U2bv5V Kb;A/ Kmbi #2 mMB[m2 U2bv5V M BMi2Mi TQBMi iQ s:Smb?+iBpBiv Bb +QMbi`m+i2/ #b2/ QM +QMi2Mi Q7 K2bb;2 ?b +iBpBiv }2H/\ qBHH i2HH s:Smb?+iBpBiv iQ QT2M +iBpBiv ?b MQiB7B+iBQM }2H/\ ?b m`H }2H/\ 6HMF2` 那些年你不知不觉间引入的漏洞

X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X X XX X X X XX X X X XX X AMi`Q/m+iBQM M/`QB/ a2+m`Biv "+F;`QmM/ *QMi2ti M/ :QH *b2 bim/B2b Smb? a.Eb *QM+HmbBQM lK2M; a.E MHvbBb Q7 s;Smb? a.E MHvbBb Q7 CSmb X qBiXXX X X X "bB+ 2M+`vTiBQM QM K2bb;2 +QMi2Mi avKK2i`B+ 1a Cmbi `2mb2 i?2 HB#``v- 并没有什么卵用 6HMF2` 那些年你不知不觉间引入的漏洞

X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X X XX X X X XX X X X XX X AMi`Q/m+iBQM M/`QB/ a2+m`Biv "+F;`QmM/ *QMi2ti M/ :QH *b2 bim/B2b Smb? a.Eb *QM+HmbBQM lK2M; a.E MHvbBb Q7 s;Smb? a.E MHvbBb Q7 CSmb SP* +Q/2 BMi2MiRXb2i+iBQMU]+QKXi2M+2MiXM/`QB/XiTmb?X+iBQMXALh1_LGnSla>nJ1aa:1]Vc BMi2MiRXTmi1tiÙ]T`Qi2+i]- ]1p/.2yPlQQEfK2hbhÈJHKHR.v**:ok]Vc BMi2MiRXTmi1tiÙ]+QMi2Mi]- ]LB:Kpx9aFoP1;MEDLeh[w>96KmoK"lu_f:8H+A"KQ#aQoRoxa2SuCFQjiGT8fep66PPRH8`qiS79?NM+e K2bb;2 BMi2MiRXTmi1tiÙ]ivT2]- RGVc BMi2MiRXTmi1tiÙ]++A/]- kRyyy9d9k3GVc BMi2MiRXTmi1tiÙ]Kb;A/]- NNNNNGVc BMi2MiRXb2i*QKTQM2MiUM2r *QKTQM2MiLK2U]+QKX[[Xt;/2KQ]-]+QKXi2M+2MiXM/`QB/XiTmb?Xs:Smb?_2+2Bp2`]VVc b2M/"`Q/+biUBMi2MiRVc 6HMF2` 那些年你不知不觉间引入的漏洞

X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X X XX X X X XX X X X XX X AMi`Q/m+iBQM M/`QB/ a2+m`Biv "+F;`QmM/ *QMi2ti M/ :QH *b2 bim/B2b Smb? a.Eb *QM+HmbBQM lK2M; a.E MHvbBb Q7 s;Smb? a.E MHvbBb Q7 CSmb omHM2`#BHBiv MHvbBb h?2 a.E //b 2tTQ`i2/ +MXDTmb?XM/`QB/XmBXSmb?+iBpBiv BM M/`QB/JMB72bi 6HMF2` 那些年你不知不觉间引入的漏洞

X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X X XX X X X XX X X X XX X AMi`Q/m+iBQM M/`QB/ a2+m`Biv "+F;`QmM/ *QMi2ti M/ :QH *b2 bim/B2b Smb? a.Eb *QM+HmbBQM lK2M; a.E MHvbBb Q7 s;Smb? a.E MHvbBb Q7 CSmb 6HMF2` 那些年你不知不觉间引入的漏洞

X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X X XX X X X XX X X X XX X AMi`Q/m+iBQM M/`QB/ a2+m`Biv "+F;`QmM/ *QMi2ti M/ :QH *b2 bim/B2b Smb? a.Eb *QM+HmbBQM lK2M; a.E MHvbBb Q7 s;Smb? a.E MHvbBb Q7 CSmb Tm#HB+ 7BMH pQB/ ?M/H2J2bb;2UJ2bb;2 `;3V & >M/H2` ?M/H2`c BMi B 4 8c BMi BR 4 jc HQM; H 4 ytj13c brBi+?U`;3Xr?iV & ff+b2 y-k-e QKBi +b2 9, & i?BbXXb2i_2[m2bi2/P`B2MiiBQMURVc ?M/H2` 4 Smb?+iBpBivX;2i>M/H2`Ui?BbXVc ?M/H2`X`2KQp2J2bb;2bU9Vc ?M/H2` 4 Smb?+iBpBivX;2i>M/H2`Ui?BbXVc ?M/H2`X`2KQp2J2bb;2bUBVc i?BbXb2M/1KTivJ2bb;2.2Hv2/UB- HVcffMQiB+2 i?Bb HBM2 b2M/ Qmi Kb; Q7 8 #`2Fc ' +b2 8, & Smb?+iBpBivXT`Q+2bbCTmb?.iUi?BbXVc ffF2v Ti? #`2Fc ' ffQKBi ' ' 6HMF2` 那些年你不知不觉间引入的漏洞

X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X X XX X X X XX X X X XX X AMi`Q/m+iBQM M/`QB/ a2+m`Biv "+F;`QmM/ *QMi2ti M/ :QH *b2 bim/B2b Smb? a.Eb *QM+HmbBQM lK2M; a.E MHvbBb Q7 s;Smb? a.E MHvbBb Q7 CSmb biiB+ pQB/ T`Q+2bbCTmb?.iUSmb?+iBpBiv `;3V & ffQKBi CSmb?.iR Tmb?/i 4 `;3XDTmb?/ic ai`BM; bi`BM; 4 UUbVTmb?/iVXc B7UUUbVTmb?/iVXq 44 yV & B7UTXUbi`BM;VV & ai`BM; bi`BM;R 4 UUbVTmb?/iVX#c B7UUUbVTmb?/iVX[V & `;3X/ 4 M2r CbAMi2`7+2q2#pB2rRUUU*QMi2tiV`;3V- Tmb?/iVc CbAMi2`7+2q2#pB2rR 4 `;3X/c B7U5h2tiliBHbXBb1KTivUUU*?`a2[m2M+2Vbi`BM;RVVV & bi`BM;k 4 bi`BM;RX`2TH+2USmb?+iBpBivXx(B)- ]]Vc 7BH2 4 M2r 6BH2Ubi`BM;kVc B7U7BH2X2tBbibUVV & `;3X/XHQ/l_GUbi`BM;RVc ff`#Bi``v HQ/ 7`QK 7BH2 ;QiQ H#2Hnjdc ' ' `;3X/XHQ/l_GUbi`BM;Vcff`#Bi``v l_G HQ/ rBi? //CbAMi2`7+2 2M#H2/- ;K2 Qp2` ' 6HMF2` 那些年你不知不觉间引入的漏洞

X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X X XX X X X XX X X X XX X AMi`Q/m+iBQM M/`QB/ a2+m`Biv "+F;`QmM/ *QMi2ti M/ :QH *b2 bim/B2b Smb? a.Eb *QM+HmbBQM *QM+HmbBQM h#H2 Q7 *QMi2Mib X X X R AMi`Q/m+iBQM #Qmi X X X k M/`QB/ a2+m`Biv "+F;`QmM/ X X X j *QMi2ti M/ :QH X X X 9 *b2 bim/B2b lTGBMF SA KBbmb2 [email protected]+2@GBMF X X X 8 Smb? a.Eb lK2M; a.E MHvbBb Q7 s;Smb? a.E MHvbBb Q7 CSmb? a.E MHvbBb Q7 CSmb? a.E 6HMF2` 那些年你不知不觉间引入的漏洞

X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X X XX X X X XX X X X XX X AMi`Q/m+iBQM M/`QB/ a2+m`Biv "+F;`QmM/ *QMi2ti M/ :QH *b2 bim/B2b Smb? a.Eb *QM+HmbBQM *QM+HmbBQM h?2 Bbbm2 Bb }t2/ i kyR8Xk- `2BMi`Q/m+2/ Hi2` >Qr2p2` TTb /Bbi`B#mi2/ i kyR8X8 biBHH +QMiBM i?2 QH/ pmHM2`#H2 a.E 6BMHHv }t2/U\V BM RX3Xy #v b2iiBM; 2tTQ`i2/47Hb2 6HMF2` 那些年你不知不觉间引入的漏洞

X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X X XX X X X XX X X X XX X AMi`Q/m+iBQM M/`QB/ a2+m`Biv "+F;`QmM/ *QMi2ti M/ :QH *b2 bim/B2b Smb? a.Eb *QM+HmbBQM *QM+HmbBQM aiimb lK2M; a.E, `2TQ`i2/ M/ }t2/ i kyR8Xd s;Smb? a.E, `2TQ`i2/ M/ }t2/ i kyR8Xd CSmb? a.E, }t2/ M/ ;BM pmHM2`#H2- }MHHv }t2/ BM RX3Xy 6HMF2` 那些年你不知不觉间引入的漏洞

X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X X XX X X X XX X X X XX X AMi`Q/m+iBQM M/`QB/ a2+m`Biv "+F;`QmM/ *QMi2ti M/ :QH *b2 bim/B2b Smb? a.Eb *QM+HmbBQM *QM+HmbBQM q2 `2pB2r2/ /Bz2`2Mi FBM/b Q7 pmHM2`#BHBiB2b BM a.Eb q2 r2Mi i?`Qm;? /2iBH2/ MHvbBb Q7 s;Smb? M/ CSmb? a.E T`Q#H2Kb .2p2HQT2`b M/ a2+m`Biv _2b2`+?2`b b?QmH/ #2 r`2 PM+2 /2THQv2/- pmHM2`#H2 2p2`vr?2`2 6HMF2` 那些年你不知不觉间引入的漏洞

X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X X XX X X X XX X X X XX X AMi`Q/m+iBQM M/`QB/ a2+m`Biv "+F;`QmM/ *QMi2ti M/ :QH *b2 bim/B2b Smb? a.Eb *QM+HmbBQM *QM+HmbBQM *`2/Bib _2bT2+iBp2 /Bb+HQbm`2 T`iB2b ha_*- a_* 7Q` }tBM; s;Smb?- lK2M; pmHM2`#BHBiB2b aQQi .2pb h2bi TFb M/ SP* pBH#H2 i ~MF2`?[/f?Bi+QMkyR8 6HMF2` 那些年你不知不觉间引入的漏洞

X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X X XX X X X XX X X X XX X AMi`Q/m+iBQM M/`QB/ a2+m`Biv "+F;`QmM/ *QMi2ti M/ :QH *b2 bim/B2b Smb? a.Eb *QM+HmbBQM *QM+HmbBQM _27b Jv?2K BM i?2 Smb? *HQm/b, lM/2`biM/BM; M/ JBiB;iBM; a2+m`Biv >x`/b BM JQ#BH2 Smb?@J2bb;BM; a2`pB+2b _1JPh1 1sSGPAhhAPL P6 h>1 *P_.Po 6_J1qP_E- A"J a2+m`Biv avbi2Kb ?iiTb,ffrrrXMQrb2+m`2X+QKf#HQ;fkyR8fyefR8f@Tii2`M@7Q`@ `2KQi2@+Q/2@2t2+miBQM@mbBM;@`#Bi``v@}H2@r`Bi2b@M/@ KmHiB/2t@TTHB+iBQMbf ?iiT,ff#HQ;XKBM/2/b2+m`BivX+QKfkyR8fyjfbbH@KBiK@ii+F@BM@ 7M2irQ`FBM;@k8R@/QX?iKH 6HMF2` 那些年你不知不觉间引入的漏洞

X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X XX X X X XX X X X X XX X X X XX X X X X XX X X X XX X X X XX X AMi`Q/m+iBQM M/`QB/ a2+m`Biv "+F;`QmM/ *QMi2ti M/ :QH *b2 bim/B2b Smb? a.Eb *QM+HmbBQM *QM+HmbBQM h?MFb5 Mv [m2biBQMb\ hrBii2`fq2B#Q, ~MF2`n?[/ 6HMF2`nyRd 6HMF2` 那些年你不知不觉间引入的漏洞

Vulnerabilities in Third-party SDKs in Android Apps

Vulnerabilities in Third-party SDKs in Android Apps

More Decks by flankerhqd

Other Decks in Programming

Featured

Transcript