Skip to content

Conversation

@bitterpanda63
Copy link
Member

No description provided.

return fileName.toString();
}

public interface Libc {

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

GetBinaryPath now includes an FFI Libc interface and native probing, mixing path-construction and native-detection responsibilities.

Feedback

Post a comment with the following structure to provide feedback on this finding:

@AikidoSec feedback: [FEEDBACK]

Aikido will process this feedback into learnings to give better review comments in the future.
More info

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

the path construction requires knowledge of musl vs gnu, would be strange to put it in another file, file name could be reworked I guess

}
} catch (IOException e) {
logger.trace(e);
Libc.INSTANCE.gnu_get_libc_version();

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

getLibCVariant calls gnu_get_libc_version() and discards its result, making the function's intent (probing for glibc) unclear.

Feedback

Post a comment with the following structure to provide feedback on this finding:

@AikidoSec feedback: [FEEDBACK]

Aikido will process this feedback into learnings to give better review comments in the future.
More info

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

context of file seems enough to me?

@codecov
Copy link

codecov bot commented Oct 27, 2025

Codecov Report

❌ Patch coverage is 0% with 10 lines in your changes missing coverage. Please review.

Files with missing lines Patch % Lines
...i/vulnerabilities/sql_injection/GetBinaryPath.java 0.00% 10 Missing ⚠️

📢 Thoughts on this report? Let us know!

on:
push:
branches:
- main
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

would remove this restriction? let's always run it?

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

it runs for every PR, same as other workflows atm

@bitterpanda63 bitterpanda63 merged commit e9c6223 into main Oct 27, 2025
207 of 208 checks passed
@bitterpanda63 bitterpanda63 deleted the fix-musl-detection branch October 27, 2025 11:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants