Hi, our app written with Xamarin.iOS 6.3 and XCode 8.3 was tested by a security check and 4 issues were found
App is not compiled with Automatic Reference Counting (ARC) flag.
ARC is a compiler feature that provides automatic memory
management of Objective-C objects and protects from memory
=> I tried the -gcc-flags "-fobj-orc" parameters with same result
The binary may contain the following banned API(s)
vsnprintf, sscanf, strtok, strlen, strcat, alloca, strcpy, sprintf,
printf, gets, vsprintf, memcpy, strncpy.
=> Any chance we can change that ?
The binary may use the following weak hash API(s)
CC_MD2_Final, CC_MD5_Update, CC_MD4_Update, CC_MD4_Init,
CC_MD2_Update, CC_SHA1_Init, CC_SHA1_Update,
CC_MD2_Init, CC_MD4_Final, CC_MD5_Final, CC_SHA1_Final,
=> We reference an external library and I think these old crypting apis are used for crypting pdf
The binary may use malloc function instead of calloc.
=>Is-it possible to change this when converting to Objectiv-C ?
Any helps would be greatly appreciated...