Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update yara plugin due openssl issues #3293

Open
wargio opened this issue Feb 13, 2024 · 4 comments
Open

Update yara plugin due openssl issues #3293

wargio opened this issue Feb 13, 2024 · 4 comments
Milestone

Comments

@wargio
Copy link
Member

wargio commented Feb 13, 2024

$ ./Cutter-v2.3.4-Linux-x86_64.AppImage 
qt.qpa.plugin: Could not find the Qt platform plugin "wayland" in ""
"0.7.1" "0.7.1"
Setting PYTHONHOME = "/tmp/.mount_Cutterv59kUY/usr"  for AppImage.
PYTHONHOME = "/tmp/.mount_Cutterv59kUY/usr"
ERROR: rz_sys_dlopen: error: /tmp/.mount_Cutterv59kUY/usr/lib/rizin/plugins/librz_yara.so (libcrypto.so.1.1: cannot open shared object file: No such file or directory)
Plugins are loaded from "/home/deroad/.local/share/rizin/cutter/plugins"
Native plugins are loaded from "/home/deroad/.local/share/rizin/cutter/plugins/native"
Python plugins are loaded from "/home/deroad/.local/share/rizin/cutter/plugins/python"
Loaded 0 plugin(s).
Plugins are loaded from "/tmp/.mount_Cutterv59kUY/usr/local/share/rizin/cutter/plugins"
Plugins are loaded from "/tmp/.mount_Cutterv59kUY/usr/share/rizin/cutter/plugins"
Native plugins are loaded from "/tmp/.mount_Cutterv59kUY/usr/share/rizin/cutter/plugins/native"
Load Error for plugin "libcutter_yara_plugin.so" : "Cannot load library /tmp/.mount_Cutterv59kUY/usr/share/rizin/cutter/plugins/native/libcutter_yara_plugin.so: (librz_yara.so: cannot open shared object file: No such file or directory)"
Loaded 1 plugin(s).
Only C and default locale supported with the posix collation implementation
Only C and default locale supported with the posix collation implementation
Case insensitive sorting unsupported in the posix collation implementation

(libcrypto.so.1.1: cannot open shared object file: No such file or directory

@wargio wargio added this to the 2.4 milestone Feb 13, 2024
@XVilka
Copy link
Member

XVilka commented Feb 23, 2024

@wargio it's unclear what is to be done here

@wargio
Copy link
Member Author

wargio commented Feb 23, 2024

i need to update the plugin. it's a reminder for myself.

@eirnym
Copy link

eirnym commented Apr 26, 2024

I'd like to add that on macOS (I've tested on version 2.3.4) when app is started from terminal I see message as shown below. This message means that yara is built using local openssl library, but can't be loaded. The solution for macOS is to provide bundled version of openssl.

ERROR: rz_sys_dlopen: error: /Volumes/Cutter/Cutter.app/Contents/Resources/lib/rizin/plugins/librz_yara.dylib (dlopen(/Volumes/Cutter/Cutter.app/Contents/Resources/lib/rizin/plugins/librz_yara.dylib, 0x0009): Library not loaded: '/opt/local/libexec/openssl3/lib/libcrypto.3.dylib'
  Referenced from: '/Volumes/Cutter/Cutter.app/Contents/Resources/lib/rizin/plugins/librz_yara.dylib'
  Reason: tried: '/opt/local/libexec/openssl3/lib/libcrypto.3.dylib' (code signature in <4137ACB3-****-****-****-************> '/opt/local/libexec/openssl3/lib/libcrypto.3.dylib' not valid for use in process: mapped file has no Team ID and is not a platform binary (signed with custom identity or adhoc?)), '/usr/lib/libcrypto.3.dylib' (no such file))
Plugins are loaded from "/Users/eirnym/Library/Application Support/rizin/cutter/plugins"
Native plugins are loaded from "/Users/eirnym/Library/Application Support/rizin/cutter/plugins/native"
Python plugins are loaded from "/Users/eirnym/Library/Application Support/rizin/cutter/plugins/python"
Loaded 0 plugin(s).
Plugins are loaded from "/Library/Application Support/rizin/cutter/plugins"
Plugins are loaded from "/Volumes/Cutter/Cutter.app/Contents/Resources/plugins"
Native plugins are loaded from "/Volumes/Cutter/Cutter.app/Contents/Resources/plugins/native"
Load Error for plugin "libcutter_yara_plugin.so" : "Cannot load library /Volumes/Cutter/Cutter.app/Contents/Resources/plugins/native/libcutter_yara_plugin.so: (dlopen(/Volumes/Cutter/Cutter.app/Contents/Resources/plugins/native/libcutter_yara_plugin.so, 0x0085): Library not loaded: '/opt/local/libexec/openssl3/lib/libcrypto.3.dylib'\n  Referenced from: '/Volumes/Cutter/Cutter.app/Contents/Resources/lib/rizin/plugins/librz_yara.dylib'\n  Reason: tried: '/opt/local/libexec/openssl3/lib/libcrypto.3.dylib' (code signature in <4137ACB3-****-****-****-************> '/opt/local/libexec/openssl3/lib/libcrypto.3.dylib' not valid for use in process: mapped file has no Team ID and is not a platform binary (signed with custom identity or adhoc?)), '/usr/lib/libcrypto.3.dylib' (no such file))"
Loaded 1 plugin(s).
qt.qpa.fonts: Populating font family aliases took 290 ms. Replace uses of missing font family "Helvetica, Arial, Sans-serif" with one that exists to avoid this cost. 

@wargio
Copy link
Member Author

wargio commented Apr 27, 2024

if this is from the latest cutter, yes this is known. try to get the cutter dev version.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

3 participants