libpng containing a security vulnerability Warning - android-security

I have question about a warning that I received yesterday in google play developer console, below I attached a image.
It's about libpng library security vulnerability.
I think that I don't use this library in my project or if I use it I cannot find it.
In my project I use the following libraries:
AdvancedLayers-1.0-20150422.082825-48;
greendao-1.3.7; jts-1.13; jump-core-1.2;
nutiteq-3d-sdk-2.4.2-22042015;
shapefilereader-1.0;
Can somebody tell me how to fix this problem?
Thank you!

A simple fix is to extract the following zip file into your “cocos2dx\platform\third_party\android\prebuilt” folder:
Download the fix from here:
libpng_fix.zip for Cocos2d-x 2.x
And change “Android.mk” file under “cocos2dx” folder:
Change:
LOCAL_WHOLE_STATIC_LIBRARIES := cocos_libpng_static
to
LOCAL_WHOLE_STATIC_LIBRARIES := cocos_libzlib_static
LOCAL_WHOLE_STATIC_LIBRARIES += cocos_libpng_static
Change:
$(call import-module,libpng)
to:
$(call import-module,libzlib)
$(call import-module,libpng)
courtesy: Bengigi Apps and Games

Related

Where do webpack:// files live, and how are they generated?

I am very much a novice regarding the Node ecosystem, and my intention is to update my team's React/Typescript app from react-scripts 4.x to 5.x. I'm seeing an error which I don't understand (actually a warning, but CircleCI is failing b/c it's on strict mode) when I execute npx react-app-rewired build --aot --no-watch --no-progress:
static/css/main.109f02ad.css from Css Minimizer plugin
postcss-svgo:: Invalid character in tag name
> 1 | <svg+xmlns="http://www.w3.org/2000/svg"+width="1"+height="1"+viewBox="0+0+1+1"><…
| ^
webpack://./src/app/styles/genome-extraction-datatable.css:1:0
My app does have a styles/genome-extraction-datatable.css but the text svg and xmlns do not appear in it. So this webpack:// file must be generated ... but how?
Also, removing the source CSS file does not resolve the error. It complains about a different CSS file in that case.
Is this enough information to help me get started? Please let me know what additional information would be useful here. I know nothing about webpack.

Drupal9: installing problem PHP-encryption library

for encryption data i wants to use in Drupal9 the PHP-encryption library width "REAL AES" Module. But Drupal can not find the PHP-encryption library while enaple the "REAL AES" module.
It is very new to use PHP-encryption in Drupal9, so i think there can be a bug in code or in readme.txt of Installationprozess.
So my main question is: In Which folder do i have to install PHP-encryption-Code?
I installed by the hint of REAME.txt "composer require defuse/php-encryption". But it was unclear in which folder:
In Root of Server? or
In Drupal-Folder sites/all/libraries/php-encryption or
In Drupal-Folder of REal AES Module: modules/real_aes/defuse/
Question: Drupal9 works with composer. Do I have to activate the PHP-encryption library especially? for ex. in main composer.json ?
Thank you for your help, because I m new in Drupal9.
After activating the REAl AEs Module in Drupal9, the module wants to use the library. That does not work, so it shows the errormessage
Please install the Defuse PHP-encryption library via Composer. See README.txt
I use this Drupalmodule:
https://www.drupal.org/project/real_aes
PHP-encryption library:
https://github.com/defuse/php-encryption
So now im looking in the code of php-encryption library und found the Problem in checking the existens of a Class which causes the problem.
so this becomes false instead of true:
if (class_exists('\Defuse\Crypto\Crypto'))
in https://www.drupal.org/files/issues/2613682-3.patch
So the result is the text above "Please install the Defuse PHP-encryption library via Composer"...
but the class Crypto is in folder /defuse/src/Crypto.php
<?php
namespace Defuse\Crypto;
use Defuse\Crypto\Exception as Ex;
class Crypto
{
Now it works:
I had to install php-encryption-library with composer in folder of the module!

Flex Localization: Could not find compiled resource bundle

I tried every solution i found in the internet.
Im using flex 4.5, This is what im doing:
created directory locale/en_US in my src directory
add resources.properties file to that directory with some mappings.
add -locale en_US -source-path=./locale/{locale} -allow-source-path-overlap=true to the compile args.
checked in the framework that the en_US locale directory appear.
add metadata:
<fx:Metadata>
[ResourceBundle("resources")]
</fx:Metadata>
starting the app gives me the exception:
Error: Could not find compiled resource bundle 'resources' for locale 'en_US'.
This is some of the main solutions i tried:
uncheck "Remove unused RSLs" from the build path.
add the directory as a source path.
using the argument -include-resource-bundles and give my directory here (with using the argument -resource-bundle-list to get all bundles).
Any idea what else can i do?
Here is my structure for a mobile app (Android and iOS):
In src/locale I have 3 subdirs: de_DE, en_US, ru_RU
And in compiler options: -locale=ru_RU,en_US,de_DE -source-path=locale/{locale}
For another mobile app I have:
In src/locale 4 subdirs: en_US, hr_HR, sr_RS, sl_SI.
I had to add the latter 3 dirs with copylocale command.
And in compiler options: -locale hr_HR sr_RS sl_SI en_US -allow-source-path-overlap=true
Both apps work well for me with the latest Apache Flex SDK.
Here is the contents of a src/locale/hr_HR/recources.properties file:
# resources.properties file for locale hr_HR
navbar.tables=Stolovi za igranje:
navbar.all=Svi
navbar.vacant_long=Slobodni
navbar.vacant_short=Slb.
navbar.full_long=Su puni
navbar.full_short=Su puni
comments.good_long=dobri
comments.good_short=Dbr.
comments.bad_long=loši
comments.bad_short=loši
comments.without_long=neutralni
comments.without_short=ntr.
help.title=Pomoć
OK i found a solution here:
http://www.nbilyk.com/flex-localization-example
im really not sure why it should be that difficult.
anyway, if someone ever need a help with that. after you successfully compile the file using ant (like described in the link), if you want to load it dynamcally like i needed just use (for example):
resourceManager.localeChain = ["en_US", "es_ES"];
resourceManager.loadResourceModule("Resources_en_US.swf");
resourceManager.loadResourceModule("Resources_es_ES.swf");
worked well for me, no need to add anything to the compiler args for that solution.
Try using the fully qualified directory path name. If you're using ant you can use ${basedir}/src/locale/{locale}

Compile error in empty cocos2d 2.0 (iPhone)

When I try to compile new cocos2d+box2d project in xcode4.
I got error message like:
/Users/bla-bla/Cocos2d testing/Cocos2d testing/libs/cocos2d/CCDirector.h:32:9: fatal error: 'kazmath/mat4.h' file not found [2]
/Users/bla-bla/Cocos2d testing/Cocos2d testing/libs/cocos2d/CCNode.h:37:9: fatal error: 'kazmath/kazmath.h' file not found [2]
File I checked, what is wrong?
This is caused by having a space in the path name to your project. To work around this, you'll need to add the following under your project's configuration... in Build Settings, in the group of Search Paths, set the Header Search Paths to the following value:
"${SRCROOT}/Cocos2d testing/libs/kazmath/include"
Be sure to include the double-quotes.
did you check in Finder to see if there is a real folder named kazmath in the same path as where CCNode is ? if not, there is probably a flaw in the templates install script for that version of coco. But dont rely on the 'tree view' of the Xcode project navigator to really know whether a file is present or not. If the path is wrong in the include, suggest you report it to the coco team. You could temporarily fix the import statements to get going, but that would be throw-away code :) when coco issues another release candidate, presumably fixed.
Ensure you are editing the right header search paths for the right target. 1 hour of my life wasted editing the main project or the app rather than the test!

Version information on Xserver modules

I am trying to find a tool that will extract the module version information (a part of the module record) fron an Xserver module. For example, in the Xorg logs I can see the following information for the librecord module in my Xorg.0.log file...
[ 39.892] (II) Loading /usr/lib/xorg/modules/extensions/librecord.so
[ 39.905] (II) Module record: vendor="X.Org Foundation"
[ 39.905] compiled for 1.9.0, module version = 1.13.0
[ 39.905] Module class: X.Org Server Extension
[ 39.905] ABI class: X.Org Server Extension, version 4.0
Is there a tools that would allow me to easily extract the aforementioned information. Sometimes you can use modinfo on the module and that will have version information, but that does not always work. The only consistent way I know of now is to parse the xorg log file. Thanks.
Yes, there is and you can also try to write a small one.
http://gitorious.org/xdriverprobe
The problem is that xdriverprobe won't compile on newer servers since I didn't update it to the newest ABIs. Also, xdriverprobe is only used for video drivers, but it can be adapted to be used on other modules. The main source code file (xdriverprobe.c) has less than 500 lines, so you can easily learn by reading it.
It works in Ubuntu 11.10... ./xdriverprobe -o moduledata gives the information you want.
Look at its source code. It does:
dlopen() the module
find a symbol called modulenameModuleData (if your module is called modulename)
that symbol is a XF86ModuleData* See /usr/include/xorg/xf86Module.h
check its member named vers
Spend a few hours and you'll be able to write a very tiny code that does what you want.
More information: http://www.xfree86.org/current/DESIGN17.html#65 (very old document, but most of what's written there is still true today). If you're not happy with that document, you have to read the Xorg source code.
Happy hacking!

Resources