OpenSSL vulnerability

[broozar]

new hotfix lib link:
http://www.shiva-engine.com/download/ho ... 160331.zip

[Fraser]

[fossillabs]

I tried on two of my apps as a quick test. Disclaimer , I am not a good tester so I did not inspect the logcat and just uploaded to play store after a quick text.

- The play store accepted the apk and removed the SSL warning
- I downloaded apk from playstore and tested the functionality, everything is working, no crashes

I am not using any of the SSL functionality in my app, maybe that is why it is not crashing. Or maybe the the logcat is still spitting out the message as a warning and the app continues to function without crashing.

[broozar]

thanks for testing. hmm, 2 conflicting messages... Fraser, what can you tell us about your setup?
- do you actually use the lib in your code?
- is it a lua build or a native build?
- if native, is it eclipse or android studio?
- are you sure this is not just a naming problem?
- is it possible for you to share the faulty app?

[Fraser]

I don't actively use the SSL lib in my project.

1.4 c++ export built in UAT
also beta4 ( checked generate c++ )
both using GNU Static STL (this may be causing it)

It is strange that the last 6 hotfix .so files do not give the problem.

I will try and generate a standalone project to reproduce the problem...

[fossillabs]

If it helps to troubleshoot. I am using Shva 1.9.2.0 . The android environment is eclipse.

[kaxig]

[Fraser]

[Fraser]

[Fraser]