Commit Graph

3 Commits (8d8ba00515fc3c6826989c2338fef2d8a81660c7)

Author SHA1 Message Date
pagran d47e0761eb
Prevent automated plaintext extraction of literals with current tools (#930)
Some programs which could automatically reverse string literals obfuscated with `-literals` exist.

They currently work by emulating the string literal decryption functions we insert.

We prevent this naive emulation from succeeding by making the decryption functions dependent on global state.

This can still be broken with enough effort, we are curious which approach reverse-engineers come up with next, we certainly still have some ideas to make this harder.

Fixes #926
---------

Co-authored-by: Paul Scheduikat <lu4p@pm.me>
4 months ago
Daniel Martí b0d3563fef all: use quicktest more consistently 11 months ago
Daniel Martí 83ee4d0509 internal/literals: add fuzzer
To inevstigate #721, I wrote this fuzzer to see if any particular
combination of string literals and literal obfuscators would result
in a broken program.

I didn't find anything, but I reckon this fuzzer can still be useful.
2 years ago