« IntelDatasetApproved:test » : différence entre les versions

De HackBBS
Aller à la navigation Aller à la recherche
Aucun résumé des modifications
Aucun résumé des modifications
Ligne 23 : Ligne 23 :
         "description": ".\/pcap_sniffer.c:77:  [2] (integer) atoi: Unless checked, the resulting number can exceed the expected range (CWE-190). If source untrusted, check both minimum and maximum, even if the input had no minus sign (large numbers can roll over into negative number; consider saving to an unsigned value if that is intended).",<br />
         "description": ".\/pcap_sniffer.c:77:  [2] (integer) atoi: Unless checked, the resulting number can exceed the expected range (CWE-190). If source untrusted, check both minimum and maximum, even if the input had no minus sign (large numbers can roll over into negative number; consider saving to an unsigned value if that is intended).",<br />
         "comment": "ok5"<br />
         "comment": "ok5"<br />
    },<br />
    {<br />
        "description": ".\/pcap_sniffer.c:51:  [1] (buffer) strncpy: Easily used incorrectly; doesn't always \\0-terminate or check for invalid pointers [MS-banned] (CWE-120).",<br />
        "comment": "good"<br />
     }<br />
     }<br />
]
]

Version du 8 mai 2024 à 00:24

[

   {
"description": ".\/pcap_functions.c:93: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!\/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length.",
"comment": "ok2"
},
{
"description": ".\/pcap_functions.c:94: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!\/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length.",
"comment": "ok3"
},
{
"description": ".\/pcap_sniffer.c:15: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!\/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length.",
"comment": "ok4"
},
{
"description": ".\/pcap_sniffer.c:17: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!\/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length.",
"comment": "ok1"
},
{
"description": ".\/pcap_sniffer.c:20: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!\/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length.",
"comment": "ok4"
},
{
"description": ".\/pcap_sniffer.c:77: [2] (integer) atoi: Unless checked, the resulting number can exceed the expected range (CWE-190). If source untrusted, check both minimum and maximum, even if the input had no minus sign (large numbers can roll over into negative number; consider saving to an unsigned value if that is intended).",
"comment": "ok5"
},
{
"description": ".\/pcap_sniffer.c:51: [1] (buffer) strncpy: Easily used incorrectly; doesn't always \\0-terminate or check for invalid pointers [MS-banned] (CWE-120).",
"comment": "good"
}

]