Merge pull request #8 from h0tw1r3/cleanup #17
h0tw1r3Annotations
10 warnings and 2 notices
|
pam_shield.c:102:3 [clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling]:
pam_shield.c#L102
Call to function 'memset' is insecure as it does not provide security checks introduced in the C11 standard. Replace with analogous functions that support length arguments or provides boundary checks such as 'memset_s' in case of C11
|
|
pam_shield.c:121:3 [clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling]:
pam_shield.c#L121
Call to function 'memset' is insecure as it does not provide security checks introduced in the C11 standard. Replace with analogous functions that support length arguments or provides boundary checks such as 'memset_s' in case of C11
|
|
pam_shield.c:168:8 [clang-analyzer-deadcode.DeadStores]:
pam_shield.c#L168
Although the value stored to 'pwd' is used in the enclosing expression, the value is never actually read from 'pwd'
|
|
pam_shield.c:303:7 [clang-analyzer-deadcode.DeadStores]:
pam_shield.c#L303
Value stored to 'whitelisted' is never read
|
|
pam_shield.c:339:11 [clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling]:
pam_shield.c#L339
Call to function 'memmove' is insecure as it does not provide security checks introduced in the C11 standard. Replace with analogous functions that support length arguments or provides boundary checks such as 'memmove_s' in case of C11
|
|
pam_shield.c:359:11 [clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling]:
pam_shield.c#L359
Call to function 'memcpy' is insecure as it does not provide security checks introduced in the C11 standard. Replace with analogous functions that support length arguments or provides boundary checks such as 'memcpy_s' in case of C11
|
|
pam_shield_lib.c:72:3 [clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling]:
pam_shield_lib.c#L72
Call to function 'memset' is insecure as it does not provide security checks introduced in the C11 standard. Replace with analogous functions that support length arguments or provides boundary checks such as 'memset_s' in case of C11
|
|
pam_shield_lib.c:181:3 [clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling]:
pam_shield_lib.c#L181
Call to function 'memset' is insecure as it does not provide security checks introduced in the C11 standard. Replace with analogous functions that support length arguments or provides boundary checks such as 'memset_s' in case of C11
|
|
pam_shield_lib.c:182:3 [clang-analyzer-security.insecureAPI.strcpy]:
pam_shield_lib.c#L182
Call to function 'strcpy' is insecure as it does not provide bounding of the memory buffer. Replace unbounded copy functions with analogous functions that support length arguments such as 'strlcpy'. CWE-119
|
|
pam_shield_lib.c:294:5 [clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling]:
pam_shield_lib.c#L294
Call to function 'memmove' is insecure as it does not provide security checks introduced in the C11 standard. Replace with analogous functions that support length arguments or provides boundary checks such as 'memmove_s' in case of C11
|
|
Run clang-format on pam_shield.h:
pam_shield.h#L1
File pam_shield.h does not conform to Custom style guidelines. (lines 1)
|
|
Run clang-format on pam_shield_lib.h:
pam_shield_lib.h#L1
File pam_shield_lib.h does not conform to Custom style guidelines. (lines 1)
|