Vulnerable WebRTC Versions

1,366 views

Skip to first unread message

Pankaj Pandey

unread,

Oct 20, 2022, 2:01:59 AM10/20/22

to discuss-webrtc

Hi Guys,
I have uploaded app on playstore .

Yesterday getting error from play store

Your app uses a bad version of WebRTC, which contains security vulnerabilities.

Regards,
Pankaj Pandey

Byoungchan Lee

unread,

Oct 20, 2022, 5:43:08 AM10/20/22

to discuss-webrtc

You seem to be using a pre-build version of WebRTC Android.

Google no longer provides pre-built WebRTC libraries. Last update was over 2 years ago.

You need to build WebRTC from source. See PSA for details: https://groups.google.com/g/discuss-webrtc/c/Ozvbd0p7Q1Y/m/M4WN2cRKCwAJ

Pankaj Pandey

unread,

Oct 20, 2022, 6:20:10 AM10/20/22

to discuss...@googlegroups.com

Hi ,
I am using the android SDK below version

api 'org.webrtc:google-webrtc:1.0.32006'

--

---
You received this message because you are subscribed to a topic in the Google Groups "discuss-webrtc" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/discuss-webrtc/Spwo-l_4gAs/unsubscribe.
To unsubscribe from this group and all its topics, send an email to discuss-webrt...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/discuss-webrtc/e25040e5-82f1-4b0b-85e4-1a7b3570e6cbn%40googlegroups.com.

Pankaj Pandey

unread,

Oct 21, 2022, 3:08:41 AM10/21/22

to discuss...@googlegroups.com

Any luck?

vishalr...@gmail.com

unread,

Oct 21, 2022, 3:18:54 AM10/21/22

to discuss-webrtc

Google stopped providing official binaries since 2020.

You have 2 options

1. Compile source and create your own binaries as shown here - https://webrtc.github.io/webrtc-org/native-code/android/

2. Use unofficial binaries from other sources like https://github.com/rno/WebRTC or https://github.com/haiyangwu/webrtc-android-build

jayprakash kumar

unread,

Oct 26, 2022, 7:24:09 PM10/26/22

to discuss...@googlegroups.com

Hi Guys,

I am trying to compile source and create your own binaries as shown here - https://webrtc.github.io/webrtc-org/native-code/android/ in my mac system (V 12.5.1 M1 chip)

After checkout the chromium - https://chromium.googlesource.com/chromium/tools/depot_tools.git

and set the path to the my directory, where i have fetch the code from - fetch --nohooks webrtc_android

and then - gclient sync

once i execute - gn gen out/Debug --args='target_os="android" target_cpu="arm"' this command

i am getting error -

ERROR at //build/config/android/config.gni:319:5: Assertion failed.

assert(false, "Need Android toolchain support for your build CPU arch.")

^-----

Need Android toolchain support for your build CPU arch.

See //build/config/sysroot.gni:32:5: whence it was imported.

import("//build/config/android/config.gni")

^-----------------------------------------

See //build/config/linux/pkg_config.gni:5:1: whence it was imported.

import("//build/config/sysroot.gni")

^----------------------------------

See //BUILD.gn:24:1: whence it was imported.

import("//build/config/linux/pkg_config.gni")

^-------------------------------------------

Then after i am going to /src/build/config/android/config.gni and add

(the heighlited part)

if (host_cpu == "x64" || host_cpu == "arm64") {

android_host_arch = "x86_64"

} else if (host_cpu == "x86") {

android_host_arch = "x86"

}else {

assert(false, "Need Android toolchain support for your build CPU arch.")

}

then then execute agian - gn gen out/Debug --args='target_os="android" target_cpu="arm"'

and now i am getting error as

Unresolved dependencies.

//examples/androidapp/third_party/autobanh:autobanh_java__header(//build/toolchain/android:android_clang_arm)