Skip to content

Commit 05b4150

Browse files
committedAug 31, 2021
update video page
1 parent 54fada8 commit 05b4150

File tree

7 files changed

+145
-56
lines changed

7 files changed

+145
-56
lines changed
 

‎.jekyll-metadata

463 Bytes
Binary file not shown.

‎_includes/Type-1.html

+77-25
Large diffs are not rendered by default.

‎_includes/header.html

+1-2
Original file line numberDiff line numberDiff line change
@@ -629,11 +629,10 @@
629629
</div>
630630
</li>
631631
<li><a class="waves-effect" href="{{site.baseurl}}/"><i class="material-icons">home</i>Home</a></li>
632-
<li><a class="waves-effect" href="{{site.baseurl}}/empiricalstudy"><i class="material-icons">label</i>Empirical Study</a></li>
633632
<li><a class="waves-effect" href="{{site.baseurl}}/type-1"><i class="material-icons">description</i>Type-1</a></li>
634633
<li><a class="waves-effect" href="{{site.baseurl}}/type-2"><i class="material-icons">description</i>Type-2</a></li>
635-
<li><a class="waves-effect" href="{{site.baseurl}}/casestudy"><i class="material-icons">chat_bubble</i>Case Study</a></li>
636634
<li><a class="waves-effect" href="{{site.baseurl}}/benchmarks"><i class="material-icons">assessment</i>Benchmarks</a></li>
635+
<li><a class="waves-effect" href="{{site.baseurl}}/empiricalstudy"><i class="material-icons">label</i>Empirical Study</a></li>
637636
<!-- <li><a class="waves-effect" href="{{site.baseurl}}/feed.xml" target="_blank"><i class="material-icons">rss_feed</i>RSS</a></li> -->
638637
<!-- <li><div class="divider"></div></li>
639638
<li><a class="waves-effect" href="{{site.baseurl}}/about"><i class="material-icons">person</i>About</a></li>

‎_includes/index.html

+2-2
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
<div class="col s12 tag-div">
1+
<!-- <div class="col s12 tag-div">
22
<div class="user-content">
33
<p>
44
Android platform introduces the runtime permission model since version 6.0. The new model greatly improves data privacy and user experience, but brings new challenges for app developers. First,the new model allows users to freely revoke granted permissions.Hence, developers cannot simply assume that permissions granted to an app would keep being granted. Instead, they should maketheir app carefully check the permission status before invoking any permission-protected APIs. Second, the permission specification keeps evolving, bringing new types of compatibility issues to the ecosystem.
@@ -9,4 +9,4 @@
99
<p>
1010
</p>
1111
</div>
12-
</div>
12+
</div> -->

‎_includes/videopages/type1/notecryptpro.html

+2-2
Original file line numberDiff line numberDiff line change
@@ -1,10 +1,10 @@
1-
<div class="col s12 tag-div">
1+
<!-- <div class="col s12 tag-div">
22
<div class="user-content">
33
<p>
44
Description of this bug.
55
</p>
66
</div>
7-
</div>
7+
</div> -->
88

99
<!-- <embed src="/assets/res/videos/NoteBuddy_v1.3.2.mp4" autostart="false"/> -->
1010

‎index.md

+13-24
Original file line numberDiff line numberDiff line change
@@ -6,42 +6,31 @@ css: ["index.css"]
66
{% include index.html %}
77

88

9+
##### 1: Type-1 bugs in real apps
10+
(Missing Permission Checks): A dangerous API is called without a guarding permission check.
911

10-
______
11-
12-
##### 1: Empirical Study
13-
To understand the practices of runtime permissions and exposethe limitations of existing work, we conducted an empirical studyto investigate the following three research questions.
14-
15-
[**Click me see details**](https://aper-project.github.io/empiricalstudy)
16-
17-
___
18-
19-
##### 2: Type-1 Real Bugs
20-
(Missing Permission Checks): A dangerous API iscalled without a guarding permission check.
21-
22-
[**Click me see details**](https://aper-project.github.io/type-1)
12+
[**Click for more details**](https://aper-project.github.io/type-1)
2313

2414
---
2515

26-
##### 3: Type-2 Real Bugs
16+
##### 2: Type-2 bugs in real apps
2717
(Incompatible Permission Usages): A new dangerousAPI is called on lower platforms, or the evolution of permissionspecifications is not fully handled.
2818

29-
[**Click me see details**](https://aper-project.github.io/type-2)
19+
[**Click for more details**](https://aper-project.github.io/type-2)
3020

3121
---
3222

33-
##### 4: Case Study
34-
- Type-1 misuse bug
35-
- Safe inter-component ARP usage
36-
- Type-2 bug in TPL
37-
- Countermeasure against permission evolution
23+
##### 3: Benchmarks
24+
We built a benchmark, ARPfix, that contains buggy ARPusages in real open-source apps, and the corresponding patches.
25+
3826

39-
[**Click me see details**](https://aper-project.github.io/casestudy)
27+
[**Click for more details**](https://aper-project.github.io/benchmarks)
4028

4129
---
4230

43-
##### 5: Benchmarks
44-
We built a benchmark, ARPfix, that contains buggy ARPusages in real open-source apps, and the corresponding patches.
31+
##### 4: Empirical Study
32+
To understand the practices of runtime permissions and exposethe limitations of existing work, we conducted an empirical studyto investigate the following three research questions.
4533

34+
[**Click for more details**](https://aper-project.github.io/empiricalstudy)
4635

47-
[**Click me see details**](https://aper-project.github.io/benchmarks)
36+
---

‎notecryptpro.md

+50-1
Original file line numberDiff line numberDiff line change
@@ -3,4 +3,53 @@ layout: page
33
css: ["projects.css"]
44
# js: ["https://cdnjs.cloudflare.com/ajax/libs/geopattern/1.2.3/js/geopattern.min.js", "projects.js"]
55
---
6-
{% include videopages/type1/notecryptpro.html %}
6+
---
7+
8+
| Device Name | Android Version | App Name | App Version |
9+
|:--------------------:|:---------------:|:--------------:|:-----------:|
10+
| Samsung Galaxy Note4 | 6.0.1 | Note Crypt Pro | 1.44 |
11+
12+
---
13+
14+
{% include videopages/type1/notecryptpro.html %}
15+
16+
17+
##### Description
18+
Reproduce crash
19+
1. grant the storage permission for the app
20+
2. create a database in the main activity
21+
3. select a database and enter the SelectDatabaseActivity
22+
4. go to the system setting and revoke the storage permission
23+
5. back to the app and it crashes
24+
25+
##### Aper Outputs
26+
```
27+
API:
28+
<android.os.Environment: java.io.File getExternalStorageDirectory()>
29+
---
30+
PERMISSIONS:
31+
[android.permission.READ_EXTERNAL_STORAGE,android.permission.WRITE_EXTERNAL_STORAGE]
32+
---
33+
CALLCHAIN:
34+
com.notecrypt.ui.SelectDatabaseActivity$2$2.onClick(android.content.DialogInterface,int)void
35+
com.notecrypt.ui.SelectDatabaseActivity.a(com.notecrypt.ui.SelectDatabaseActivity,java.lang.String,boolean)void
36+
com.notecrypt.ui.SelectDatabaseActivity.a(java.lang.String,boolean)void
37+
com.notecrypt.utils.StringMethods.fixPath(java.lang.String)java.lang.String
38+
android.os.Environment.getExternalStorageDirectory()java.io.File
39+
40+
======
41+
42+
DANGEROUS: android.permission.READ_EXTERNAL_STORAGE
43+
Is Declared: false
44+
Check Sites: NONE
45+
Request Sites: NONE
46+
Has Handle: in <com.notecrypt.ui.SelectDatabaseActivity: void onRequestPermissionsResult(int,java.lang.String[],int[])>
47+
48+
---
49+
DANGEROUS: android.permission.WRITE_EXTERNAL_STORAGE
50+
Is Declared: true
51+
Check Sites: NONE
52+
Request Sites: NONE
53+
Has Handle: in <com.notecrypt.ui.SelectDatabaseActivity: void onRequestPermissionsResult(int,java.lang.String[],int[])>
54+
```
55+

0 commit comments

Comments
 (0)
Please sign in to comment.