Fresh Flutter Project Using Insecure APIs (_sscanf, _strlen, _fopen, malloc) in Binary
I recently created a fresh Flutter project with:
No dependencies
No additional written code
After generating the iOS build, I navigated to the build folder:
cd build/ios/iphoneos/Runner.app
Then, I ran the following commands to inspect the binary:
otool -Iv Runner | grep -w _strlen
otool -Iv Runner | grep -w _malloc
Surprisingly, I received positive results, meaning these functions are present in the binary.
My Questions:
Why is a fresh project (with no extra dependencies & No additional written code ) including these APIs in the binary?
@DTS Engineer
Topic:
App & System Services
SubTopic:
Core OS
Tags: