45 ms·
Sounds like the vaunted App Store review isn’t all that it’s cracked up to be.
by Apocryphon 5y ago
Sounds like the vaunted App Store review isn’t all that it’s cracked up to be.
- Someone 5y agoIf an app can make a http request, parse the response, and do different things depending on the result, it’s hard to prove it won’t crash on receiving invalid input without access to the source code (often even with access to it. If that were easy, there wouldn’t be that many vulnerabilities from exploiting such crashes) If Apple required the source code, I predict an outcry “they’ll steal our code, just as they steal our ideas”. And no, LLVM Bitcode won’t help here, even ignoring (AFAIK) that they don’t require you to provide it (which would lead to another outcry “we can’t use gcc”) It’s too low level for that.