魅族这 root 申请直接就把异常抛到页面上

V2EX = way to explore

V2EX 是一个关于分享和探索的地方

For Existing Member Sign In

This topic created in 487 days ago, the information mentioned may be changed or developed.

链接： https://mroot.flyme.cn/
点击申请授权，直接抛异常，看 uri 和报错，应该是没登录，不过底部那个 jetty ，要是被我们安全部门看到，又要被通报了🤣

root

异常

jetty

4 replies • 2024-12-26 13:48:17 +08:00

JontyChen

Dec 26, 2024

@NxxRngjnbgj 想问下你们公司安全部门是如何运作的，我们公司没有专门安全审查的，研发测试等角色成立了一个安全小组，也只是制定一些安全规范而已，发现安全问题也都是靠扫描工具、测试、或者客户问题这些。。

foolenius

Dec 26, 2024

我这边正常跳转登录...

NxxRngjnbgj

Dec 26, 2024

@JontyChen 我们专门有个研究院的，负责日常安全问题检查和漏洞挖掘，研发只负责应用开发

Bronya

Dec 26, 2024

```
Caused by: java.lang.NullPointerException
at com.meizu.mroot.core.LoginServiceImpl.login(LoginServiceImpl.java:74)
at com.meizu.framework.impl.security.LoginServlet.service(LoginServlet.java:32)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:790)
at org.eclipse.jetty.servlet.ServletHolder$NotAsync.service(ServletHolder.java:1459)
at org.eclipse.jetty.servlet.ServletHolder.handle(ServletHolder.java:799)
at org.eclipse.jetty.servlet.ServletHandler$ChainEnd.doFilter(ServletHandler.java:1631)
at org.eclipse.jetty.websocket.server.WebSocketUpgradeFilter.doFilter(WebSocketUpgradeFilter.java:228)
at org.eclipse.jetty.servlet.FilterHolder.doFilter(FilterHolder.java:193)
at org.eclipse.jetty.servlet.ServletHandler$Chain.doFilter(ServletHandler.java:1601)
at com.meizu.framework.impl.security.WebSecurityFilter.doFilter(WebSecurityFilter.java:147)
at org.eclipse.jetty.servlet.FilterHolder.doFilter(FilterHolder.java:193)
at org.eclipse.jetty.servlet.ServletHandler$Chain.doFilter(ServletHandler.java:1601)
at com.meizu.framework.impl.servlet.SessionFilter.doFilter(SessionFilter.java:78)
at org.eclipse.jetty.servlet.FilterHolder.doFilter(FilterHolder.java:193)
at org.eclipse.jetty.servlet.ServletHandler$Chain.doFilter(ServletHandler.java:1601)
at com.meizu.bs.web.filter.EncodingFilter.doFilter(EncodingFilter.java:46)
at org.eclipse.jetty.servlet.FilterHolder.doFilter(FilterHolder.java:193)
at org.eclipse.jetty.servlet.ServletHandler$Chain.doFilter(ServletHandler.java:1601)
at com.meizu.taurus.horn.TaurusHornFilter.doFilter(TaurusHornFilter.java:73)
... 35 more
```
😂