Re: Are there any logs to explain why: "Failed to decompile source" ? (222 Views)
Reply
Occasional Visitor
pulkitsinghal
Posts: 2
Registered: ‎03-23-2010
Message 1 of 3 (229 Views)

Are there any logs to explain why: "Failed to decompile source" ?

I read the FAQ, it didn't help me. Can someone point us to a log file so that we can find out what needs to be done to get around this issue? Also we have the source in our hand, do we really need to decompile? Can't we just have the tool scan the source for vulnerabilities?

Please use plain text.
Respected Contributor
HansEnders
Posts: 597
Registered: ‎07-01-2008
Message 2 of 3 (222 Views)

Re: Are there any logs to explain why: "Failed to decompile source" ?

According to the off-line developer discussion...


<<Unfortunately, I don’t think I can provide you with a workaround for this issue. The error you are getting means that there is some tag format (most probably in the header) of the binary SWF file that SWFScan cannot understand. There is no real logging mechanism used by the tool. The only way to identify the issue is for us to run the tool in debug mode and see where during the decompilation process it is failing.


Also it cannot simply consume the ActionScript source code and audit it, since the tool generates a custom object model during the decompilation phase which is then used for detecting vulnerabilities.>>


-- Habeas Data
Please use plain text.
Occasional Visitor
pulkitsinghal
Posts: 2
Registered: ‎03-23-2010
Message 3 of 3 (222 Views)

Re: Are there any logs to explain why: "Failed to decompile source" ?

Ok, so how do I run SwfScan in DEBUG mode?

Please use plain text.
The opinions expressed above are the personal opinions of the authors, not of HP. By using this site, you accept the Terms of Use and Rules of Participation