[*] Binary protection state of libdl-0.9.30.1.so
RELRO CANARY NX PIE RPATH RUNPATH SYMBOLS
Full RELRO No Canary found NX disabled DSO No RPATH No RUNPATH No Symbols
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libdl-0.9.30.1.so/FUN_00010ad4_00010ad4.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
36 - sVar2 = *(short *)(*param_1 + 0x20)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libdl-0.9.30.1.so/FUN_00010ad4_00010ad4.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
41 - sVar2 = (short)piVar11[8] + -1
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libdl-0.9.30.1.so/FUN_00010ad4_00010ad4.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
74 - syscall(0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libdl-0.9.30.1.so/dlinfo_0001093c.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-format-string-bugs
Issue description:
The software uses a function that accepts a format string as an argument, but the format string originates from an external source. This can lead to buffer overflows, denial of service, or data representation problems.
11 - fprintf(_stderr,(char *)0x16c0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libdl-0.9.30.1.so/dlinfo_0001093c.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-format-string-bugs
Issue description:
The software uses a function that accepts a format string as an argument, but the format string originates from an external source. This can lead to buffer overflows, denial of service, or data representation problems.
15 - (uint)*(ushort *)(puVar2 + 8),puVar2[1])
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libdl-0.9.30.1.so/dlinfo_0001093c.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-format-string-bugs
Issue description:
The software uses a function that accepts a format string as an argument, but the format string originates from an external source. This can lead to buffer overflows, denial of service, or data representation problems.
17 - fprintf(_stderr,(char *)0x16ec,__dl_symbol_tables,0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libdl-0.9.30.1.so/dlinfo_0001093c.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-format-string-bugs
Issue description:
The software uses a function that accepts a format string as an argument, but the format string originates from an external source. This can lead to buffer overflows, denial of service, or data representation problems.
20 - fprintf(_stderr,(char *)0x170c,*piVar1,*(undefined4 *)(*piVar1 + 4))
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libdl-0.9.30.1.so/dlinfo_0001093c.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-format-string-bugs
Issue description:
The software uses a function that accepts a format string as an argument, but the format string originates from an external source. This can lead to buffer overflows, denial of service, or data representation problems.
23 - fprintf(_stderr,(char *)0x1714,piVar3)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libdl-0.9.30.1.so/dlinfo_0001093c.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-format-string-bugs
Issue description:
The software uses a function that accepts a format string as an argument, but the format string originates from an external source. This can lead to buffer overflows, denial of service, or data representation problems.
25 - fprintf(_stderr,(char *)0x170c,*piVar1,*(undefined4 *)(*piVar1 + 4))
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libdl-0.9.30.1.so/dlopen_00010fb4.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
75 - pcVar2 = getenv((char *)0x172c)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libdl-0.9.30.1.so/dlopen_00010fb4.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-unchecked-ret-malloc
Issue description:
The software does not check the return value from a method or function, which can prevent it from detecting unexpected states and conditions.
85 - piVar4 = (int *)malloc(0x18)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libdl-0.9.30.1.so/dlopen_00010fb4.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
85 - piVar4 = (int *)malloc(0x18); //possible issue identified - semgrep
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libdl-0.9.30.1.so/dlopen_00010fb4.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion
Issue description:
The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be the precursor to buffer underwrite conditions. Buffer underwrites occur frequently when large unsigned values are cast to signed values, and then used as indexes into a buffer or for pointer arithmetic.
85 - piVar4 = (int *)malloc(0x18); //possible issue identified - semgrep
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libdl-0.9.30.1.so/dlopen_00010fb4.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-unchecked-ret-malloc
Issue description:
The software does not check the return value from a method or function, which can prevent it from detecting unexpected states and conditions.
145 - puVar5 = (undefined1 *)malloc(0x18)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libdl-0.9.30.1.so/dlopen_00010fb4.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
145 - puVar5 = (undefined1 *)malloc(0x18); //possible issue identified - semgrep
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libdl-0.9.30.1.so/dlopen_00010fb4.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion
Issue description:
The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be the precursor to buffer underwrite conditions. Buffer underwrites occur frequently when large unsigned values are cast to signed values, and then used as indexes into a buffer or for pointer arithmetic.
145 - puVar5 = (undefined1 *)malloc(0x18); //possible issue identified - semgrep
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libdl-0.9.30.1.so/dlopen_00010fb4.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-unchecked-ret-malloc
Issue description:
The software does not check the return value from a method or function, which can prevent it from detecting unexpected states and conditions.
178 - pvVar7 = malloc(local_40 << 2)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libdl-0.9.30.1.so/dlopen_00010fb4.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
178 - pvVar7 = malloc(local_40 << 2); //possible issue identified - semgrep
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libdl-0.9.30.1.so/dlopen_00010fb4.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-unchecked-ret-malloc
Issue description:
The software does not check the return value from a method or function, which can prevent it from detecting unexpected states and conditions.
187 - puVar6 = (undefined4 *)malloc(8)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libdl-0.9.30.1.so/dlopen_00010fb4.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
187 - puVar6 = (undefined4 *)malloc(8); //possible issue identified - semgrep
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libdl-0.9.30.1.so/dlopen_00010fb4.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion
Issue description:
The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be the precursor to buffer underwrite conditions. Buffer underwrites occur frequently when large unsigned values are cast to signed values, and then used as indexes into a buffer or for pointer arithmetic.
187 - puVar6 = (undefined4 *)malloc(8); //possible issue identified - semgrep
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libdl-0.9.30.1.so/FUN_00010ad4_00010ad4.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
36 - sVar2 = *(short *)(*param_1 + 0x20)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libdl-0.9.30.1.so/FUN_00010ad4_00010ad4.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
41 - sVar2 = (short)piVar11[8] + -1
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libdl-0.9.30.1.so/FUN_00010ad4_00010ad4.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
74 - syscall(0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libdl-0.9.30.1.so/dlinfo_0001093c.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-format-string-bugs
Issue description:
The software uses a function that accepts a format string as an argument, but the format string originates from an external source. This can lead to buffer overflows, denial of service, or data representation problems.
11 - fprintf(_stderr,(char *)0x16c0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libdl-0.9.30.1.so/dlinfo_0001093c.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-format-string-bugs
Issue description:
The software uses a function that accepts a format string as an argument, but the format string originates from an external source. This can lead to buffer overflows, denial of service, or data representation problems.
15 - (uint)*(ushort *)(puVar2 + 8),puVar2[1])
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libdl-0.9.30.1.so/dlinfo_0001093c.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-format-string-bugs
Issue description:
The software uses a function that accepts a format string as an argument, but the format string originates from an external source. This can lead to buffer overflows, denial of service, or data representation problems.
17 - fprintf(_stderr,(char *)0x16ec,__dl_symbol_tables,0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libdl-0.9.30.1.so/dlinfo_0001093c.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-format-string-bugs
Issue description:
The software uses a function that accepts a format string as an argument, but the format string originates from an external source. This can lead to buffer overflows, denial of service, or data representation problems.
20 - fprintf(_stderr,(char *)0x170c,*piVar1,*(undefined4 *)(*piVar1 + 4))
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libdl-0.9.30.1.so/dlinfo_0001093c.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-format-string-bugs
Issue description:
The software uses a function that accepts a format string as an argument, but the format string originates from an external source. This can lead to buffer overflows, denial of service, or data representation problems.
23 - fprintf(_stderr,(char *)0x1714,piVar3)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libdl-0.9.30.1.so/dlinfo_0001093c.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-format-string-bugs
Issue description:
The software uses a function that accepts a format string as an argument, but the format string originates from an external source. This can lead to buffer overflows, denial of service, or data representation problems.
25 - fprintf(_stderr,(char *)0x170c,*piVar1,*(undefined4 *)(*piVar1 + 4))
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libdl-0.9.30.1.so/dlopen_00010fb4.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
75 - pcVar2 = getenv((char *)0x172c)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libdl-0.9.30.1.so/dlopen_00010fb4.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-unchecked-ret-malloc
Issue description:
The software does not check the return value from a method or function, which can prevent it from detecting unexpected states and conditions.
85 - piVar4 = (int *)malloc(0x18)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libdl-0.9.30.1.so/dlopen_00010fb4.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
85 - piVar4 = (int *)malloc(0x18); //possible issue identified - semgrep
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libdl-0.9.30.1.so/dlopen_00010fb4.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion
Issue description:
The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be the precursor to buffer underwrite conditions. Buffer underwrites occur frequently when large unsigned values are cast to signed values, and then used as indexes into a buffer or for pointer arithmetic.
85 - piVar4 = (int *)malloc(0x18); //possible issue identified - semgrep
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libdl-0.9.30.1.so/dlopen_00010fb4.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-unchecked-ret-malloc
Issue description:
The software does not check the return value from a method or function, which can prevent it from detecting unexpected states and conditions.
145 - puVar5 = (undefined1 *)malloc(0x18)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libdl-0.9.30.1.so/dlopen_00010fb4.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
145 - puVar5 = (undefined1 *)malloc(0x18); //possible issue identified - semgrep
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libdl-0.9.30.1.so/dlopen_00010fb4.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion
Issue description:
The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be the precursor to buffer underwrite conditions. Buffer underwrites occur frequently when large unsigned values are cast to signed values, and then used as indexes into a buffer or for pointer arithmetic.
145 - puVar5 = (undefined1 *)malloc(0x18); //possible issue identified - semgrep
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libdl-0.9.30.1.so/dlopen_00010fb4.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-unchecked-ret-malloc
Issue description:
The software does not check the return value from a method or function, which can prevent it from detecting unexpected states and conditions.
178 - pvVar7 = malloc(local_40 << 2)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libdl-0.9.30.1.so/dlopen_00010fb4.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
178 - pvVar7 = malloc(local_40 << 2); //possible issue identified - semgrep
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libdl-0.9.30.1.so/dlopen_00010fb4.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-unchecked-ret-malloc
Issue description:
The software does not check the return value from a method or function, which can prevent it from detecting unexpected states and conditions.
187 - puVar6 = (undefined4 *)malloc(8)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libdl-0.9.30.1.so/dlopen_00010fb4.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
187 - puVar6 = (undefined4 *)malloc(8); //possible issue identified - semgrep
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libdl-0.9.30.1.so/dlopen_00010fb4.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion
Issue description:
The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be the precursor to buffer underwrite conditions. Buffer underwrites occur frequently when large unsigned values are cast to signed values, and then used as indexes into a buffer or for pointer arithmetic.
187 - puVar6 = (undefined4 *)malloc(8); //possible issue identified - semgrep
