Re: Are there any logs to explain why: "Failed to decompile source" ? (248 Views)
Reply
Occasional Visitor
pulkitsinghal
Posts: 2
Registered: ‎03-23-2010
Message 1 of 3 (255 Views)

Are there any logs to explain why: "Failed to decompile source" ?

I read the FAQ, it didn't help me. Can someone point us to a log file so that we can find out what needs to be done to get around this issue? Also we have the source in our hand, do we really need to decompile? Can't we just have the tool scan the source for vulnerabilities?

Respected Contributor
HansEnders
Posts: 605
Registered: ‎07-01-2008
Message 2 of 3 (248 Views)

Re: Are there any logs to explain why: "Failed to decompile source" ?

According to the off-line developer discussion...


<<Unfortunately, I don’t think I can provide you with a workaround for this issue. The error you are getting means that there is some tag format (most probably in the header) of the binary SWF file that SWFScan cannot understand. There is no real logging mechanism used by the tool. The only way to identify the issue is for us to run the tool in debug mode and see where during the decompilation process it is failing.


Also it cannot simply consume the ActionScript source code and audit it, since the tool generates a custom object model during the decompilation phase which is then used for detecting vulnerabilities.>>


-- Habeas Data
Occasional Visitor
pulkitsinghal
Posts: 2
Registered: ‎03-23-2010
Message 3 of 3 (248 Views)

Re: Are there any logs to explain why: "Failed to decompile source" ?

Ok, so how do I run SwfScan in DEBUG mode?

The opinions expressed above are the personal opinions of the authors, not of HP. By using this site, you accept the Terms of Use and Rules of Participation.