5 ms·
Interesting, I used https://ossinsight.io/analyze/JiaT75 https://ossinsight.io/analyze/JiaT75 to identify contributions from the account used by author of the b
by travem 2y ago
Interesting, I used https://ossinsight.io/analyze/JiaT75 https://ossinsight.io/analyze/JiaT75 to identify contributions from the account used by author of the backdoor. It looks like the account made other potentially problematic contributions to other projects.
The disabling of ifunc in this PR against Google's oss-fuzz project maybe one way they tried to prevent this particular backdoor being flagged by that tool? https://github.com/google/oss-fuzz/pull/10667 https://github.com/google/oss-fuzz/pull/10667