Post

Replies

Boosts

Views

Activity

Reply to Security threat due to insecure function "malloc()" in GCDAsyncSocket.m
Fresh Flutter Project Using Insecure APIs (_sscanf, _strlen, _fopen, malloc) in Binary I recently created a fresh Flutter project with: No dependencies No additional written code After generating the iOS build, I navigated to the build folder: cd build/ios/iphoneos/Runner.app Then, I ran the following commands to inspect the binary: otool -Iv Runner | grep -w _strlen otool -Iv Runner | grep -w _malloc Surprisingly, I received positive results, meaning these functions are present in the binary. My Questions: Why is a fresh project (with no extra dependencies & No additional written code ) including these APIs in the binary? @DTS Engineer
Topic: App & System Services SubTopic: Core OS Tags:
Mar ’25