[*] Binary protection state of wps
RELRO CANARY NX PIE RPATH RUNPATH SYMBOLS
No RELRO No Canary found NX disabled No PIE No RPATH No RUNPATH No Symbols
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00403360_00403360.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
13 - ((((cVar1 = *(char *)(iVar3 + -1), cVar1 == ' ' || (cVar1 == ' ')) || (cVar1 == '
')) ||
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00404320_00404320.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
37 - cVar3 = cVar3 + -0x3d
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00407558_00407558.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
17 - cVar1 = *(char *)(param_2 + 6)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00407438_00407438.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
17 - cVar1 = *(char *)(param_2 + 6)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_004077fc_004077fc.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
8 - cVar1 = **(char **)(param_1 + 4)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_004064b8_004064b8.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
13 - sVar7 = (*(short *)(param_1 + 0x57) != 0) + 7 + (ushort)(*(short *)(param_1 + 100) != 0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_004064b8_004064b8.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
15 - sVar7 = sVar7 + 1
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_004064b8_004064b8.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
18 - sVar7 = sVar7 + 1
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_004064b8_004064b8.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
21 - sVar7 = sVar7 + 1
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_0041507c_0041507c.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
11 - sVar2 = CONCAT11(*(undefined1 *)(param_1 + 3),*(undefined1 *)(param_1 + 2))
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_0041f1ac_0041f1ac.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
111 - sVar1 = *(short *)(*(int *)(param_1 + 0x20) + 0x11a)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_004201c0_004201c0.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
20 - sVar6 = *(short *)(*(int *)(param_1 + 0x20) + 0x5f)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_004201c0_004201c0.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
30 - sVar6 = *(short *)(*(int *)(param_1 + 0x20) + 99)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_004201c0_004201c0.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
72 - cVar1 = *(char *)(iVar10 + 0x68)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00421a68_00421a68.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
19 - cVar2 = cVar2 + -0x57
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00421a68_00421a68.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
26 - cVar2 = cVar2 + -0x37
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00421a68_00421a68.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
38 - cVar1 = *(char *)(param_3 + iVar4)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00421a68_00421a68.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
39 - cVar2 = cVar2 + -0x57
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00421a68_00421a68.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
43 - cVar1 = *(char *)(param_3 + iVar4)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00421a68_00421a68.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
44 - cVar2 = cVar2 + -0x37
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00421958_00421958.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
21 - sVar6 = *(short *)(*(int *)(param_1 + 0x20) + 0x5f)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00421958_00421958.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
31 - sVar6 = *(short *)(*(int *)(param_1 + 0x20) + 99)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00421958_00421958.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
72 - cVar1 = *(char *)(iVar10 + 0x68)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00425330_00425330.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
17 - cVar1 = *(char *)(param_1 + 0x99)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00425c70_00425c70.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
20 - local_41f = (char)param_4 + ''
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00425b3c_00425b3c.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
19 - cVar2 = *(int *)(param_1 + 0x19c) != 0 && iVar1 - *(int *)(param_1 + 0x19c) < 0x78
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00425b3c_00425b3c.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
21 - cVar2 = cVar2 + (iVar1 - *(int *)(param_1 + 0x1a6) < 0x78)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00448a80_00448a80.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
202 - cVar1 = *(char *)((int)&local_80 + iVar29 + 2)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00448a80_00448a80.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
203 - cVar2 = *(char *)((int)&local_80 + iVar29 + 3)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00448a80_00448a80.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
204 - cVar3 = *(char *)((int)&local_7c + iVar29)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00448a80_00448a80.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
205 - cVar4 = *(char *)((int)&local_7c + iVar29 + 1)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00448a80_00448a80.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
206 - cVar5 = *(char *)((int)&local_7c + iVar29 + 2)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00448a80_00448a80.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
247 - cVar1 = *(char *)((int)&local_74 + iVar29)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00448a80_00448a80.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
249 - cVar2 = *(char *)((int)&local_74 + iVar29 + 1)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00448a80_00448a80.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
250 - cVar3 = *(char *)((int)&local_74 + iVar29 + 2)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_004651b4_004651b4.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-pointer-subtraction
Issue description:
The software subtracts one pointer from another in order to determine size, but this calculation can be incorrect if the pointers do not exist in the same memory chunk.
116 - pcVar8 = pcVar1 + ((int)pcVar8 - (int)local_64)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_004651b4_004651b4.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-pointer-subtraction
Issue description:
The software subtracts one pointer from another in order to determine size, but this calculation can be incorrect if the pointers do not exist in the same memory chunk.
192 - pcVar8 = pcVar7 + ((int)pcVar8 - (int)local_64)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_0046eafc_0046eafc.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
22 - cVar1 = param_3[1]
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_0046f1ac_0046f1ac.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
33 - builtin_strncpy(pcVar3,"",9)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00473458_00473458.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
20 - cVar1 = pcVar3[1]
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00473228_00473228.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
9 - cVar2 = **(char **)(param_1 + 0xc)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00473228_00473228.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
44 - cVar2 = **(char **)(param_1 + 0xc)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00475334_00475334.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
25 - ((cVar1 = *(char *)(iVar6 + 8), cVar1 != '.' && ((cVar1 != '_' && (cVar1 != '$')))))) ||
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00475d0c_00475d0c.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
18 - cVar1 = **(char **)(param_1 + 0xc)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_004754f4_004754f4.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
42 - cVar1 = pcVar9[1]
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_004771ac_004771ac.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
19 - cVar1 = **(char **)(param_1 + 0xc)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00475f2c_00475f2c.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
12 - cVar1 = **(char **)(param_1 + 0xc)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00475f2c_00475f2c.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
35 - cVar1 = pcVar3[1]
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00475f2c_00475f2c.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
70 - cVar1 = pcVar3[1]
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_0047733c_0047733c.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
25 - while (cVar1 = **(char **)(param_1 + 0xc), cVar1 != '') {
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00477904_00477904.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
37 - ((((cVar1 = param_1[8], cVar1 == '.' || (cVar1 == '_')) || (cVar1 == '$')) &&
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00477904_00477904.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
38 - ((cVar1 = param_1[9], cVar1 == 'D' || (cVar1 == 'I')))))) && (param_1[10] == '_')) {
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_004763b0_004763b0.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
57 - cVar2 = pcVar7[1]
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_004763b0_004763b0.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
156 - cVar2 = pcVar7[1]
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_004763b0_004763b0.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
184 - cVar2 = **(char **)(param_1 + 0xc)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_004763b0_004763b0.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
201 - cVar2 = pcVar7[1]
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_0047ece0_0047ece0.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
8 - syscall(0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_0047ed20_0047ed20.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
10 - syscall(0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_0047ed80_0047ed80.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
11 - syscall(0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_0047d9c0_0047d9c0.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
145 - cVar1 = pcVar24[1]
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_0047d9c0_0047d9c0.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
148 - cVar1 = pcVar24[2]
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_0047ee10_0047ee10.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
10 - syscall(0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_0047ee70_0047ee70.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
10 - syscall(0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_0047eed0_0047eed0.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
9 - syscall(0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_0047efb0_0047efb0.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
13 - syscall(0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_0047ef30_0047ef30.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
15 - syscall(0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_0047f050_0047f050.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
10 - syscall(0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_0047f0b0_0047f0b0.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
10 - syscall(0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_0047f1c0_0047f1c0.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
12 - syscall(0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_0047f130_0047f130.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
11 - syscall(0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_0047f2b0_0047f2b0.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
10 - syscall(0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_0047f250_0047f250.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
10 - syscall(0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_0047f310_0047f310.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
10 - syscall(0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_0047f370_0047f370.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
10 - syscall(0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00481370_00481370.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
14 - sVar3 = FUN_00484130(0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00481370_00481370.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
17 - sVar3 = FUN_00484130(1)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00481984_00481984.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-pointer-subtraction
Issue description:
The software subtracts one pointer from another in order to determine size, but this calculation can be incorrect if the pointers do not exist in the same memory chunk.
59 - iVar3 = (int)pcVar11 - (int)param_2
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_004823c0_004823c0.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
128 - cVar5 = pcVar8[9]
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_004823c0_004823c0.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
132 - cVar5 = pcVar8[0x12]
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_004823c0_004823c0.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
135 - cVar5 = pcVar8[9]
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00483e50_00483e50.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-pointer-subtraction
Issue description:
The software subtracts one pointer from another in order to determine size, but this calculation can be incorrect if the pointers do not exist in the same memory chunk.
9 - return (int)pcVar1 - (int)param_1
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00483f30_00483f30.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-pointer-subtraction
Issue description:
The software subtracts one pointer from another in order to determine size, but this calculation can be incorrect if the pointers do not exist in the same memory chunk.
10 - return (int)pcVar1 - (int)param_1
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00484220_00484220.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
10 - syscall(0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00484280_00484280.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
10 - syscall(0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_004842e0_004842e0.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
10 - syscall(0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00484340_00484340.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
10 - syscall(0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_004843c0_004843c0.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
10 - syscall(0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00484420_00484420.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
10 - syscall(0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_004844a0_004844a0.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
10 - syscall(0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_0048669c_0048669c.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
343 - cVar1 = pcVar11[1]
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_004878d0_004878d0.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
10 - syscall(0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00487a80_00487a80.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
10 - syscall(0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00487ae0_00487ae0.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
10 - syscall(0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_004875e0_004875e0.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
93 - syscall(0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00487b40_00487b40.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
10 - syscall(0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00487ba0_00487ba0.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
9 - syscall(0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00487bf0_00487bf0.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
10 - syscall(0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00487ca0_00487ca0.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
9 - syscall(0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00487d60_00487d60.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
10 - syscall(0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00487d00_00487d00.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
9 - syscall(0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00487eb0_00487eb0.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
9 - syscall(0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00487e50_00487e50.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
10 - syscall(0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00487de0_00487de0.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
9 - syscall(0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00487fc0_00487fc0.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
10 - syscall(0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00487f20_00487f20.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
12 - syscall(0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00488040_00488040.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
10 - syscall(0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_004880a0_004880a0.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
10 - syscall(0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00488190_00488190.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
8 - syscall(0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00488220_00488220.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
9 - syscall(0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00488290_00488290.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
10 - syscall(0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_004882f0_004882f0.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
9 - syscall(0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00488c80_00488c80.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
183 - local_b0 = local_b0 + -0x20
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_0048a9e0_0048a9e0.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-pointer-subtraction
Issue description:
The software subtracts one pointer from another in order to determine size, but this calculation can be incorrect if the pointers do not exist in the same memory chunk.
117 - param_3 = pcVar4 + ((int)param_3 - (int)pcVar13)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00489f80_00489f80.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-pointer-subtraction
Issue description:
The software subtracts one pointer from another in order to determine size, but this calculation can be incorrect if the pointers do not exist in the same memory chunk.
115 - if ((int)pcVar8 - (int)local_30 < 0x41) {
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_0048aeb0_0048aeb0.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
9 - syscall(0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_0048ae40_0048ae40.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
8 - syscall(0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00403360_00403360.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
13 - ((((cVar1 = *(char *)(iVar3 + -1), cVar1 == ' ' || (cVar1 == ' ')) || (cVar1 == '
')) ||
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00404320_00404320.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
37 - cVar3 = cVar3 + -0x3d
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_004064b8_004064b8.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
13 - sVar7 = (*(short *)(param_1 + 0x57) != 0) + 7 + (ushort)(*(short *)(param_1 + 100) != 0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_004064b8_004064b8.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
15 - sVar7 = sVar7 + 1
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_004064b8_004064b8.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
18 - sVar7 = sVar7 + 1
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_004064b8_004064b8.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
21 - sVar7 = sVar7 + 1
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00407438_00407438.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
17 - cVar1 = *(char *)(param_2 + 6)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00407558_00407558.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
17 - cVar1 = *(char *)(param_2 + 6)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_004077fc_004077fc.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
8 - cVar1 = **(char **)(param_1 + 4)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_0041507c_0041507c.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
11 - sVar2 = CONCAT11(*(undefined1 *)(param_1 + 3),*(undefined1 *)(param_1 + 2))
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_0041f1ac_0041f1ac.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
111 - sVar1 = *(short *)(*(int *)(param_1 + 0x20) + 0x11a)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_004201c0_004201c0.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
20 - sVar6 = *(short *)(*(int *)(param_1 + 0x20) + 0x5f)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_004201c0_004201c0.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
30 - sVar6 = *(short *)(*(int *)(param_1 + 0x20) + 99)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_004201c0_004201c0.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
72 - cVar1 = *(char *)(iVar10 + 0x68)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00421958_00421958.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
21 - sVar6 = *(short *)(*(int *)(param_1 + 0x20) + 0x5f)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00421958_00421958.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
31 - sVar6 = *(short *)(*(int *)(param_1 + 0x20) + 99)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00421958_00421958.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
72 - cVar1 = *(char *)(iVar10 + 0x68)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00421a68_00421a68.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
19 - cVar2 = cVar2 + -0x57
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00421a68_00421a68.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
26 - cVar2 = cVar2 + -0x37
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00421a68_00421a68.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
38 - cVar1 = *(char *)(param_3 + iVar4)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00421a68_00421a68.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
39 - cVar2 = cVar2 + -0x57
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00421a68_00421a68.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
43 - cVar1 = *(char *)(param_3 + iVar4)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00421a68_00421a68.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
44 - cVar2 = cVar2 + -0x37
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00425330_00425330.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
17 - cVar1 = *(char *)(param_1 + 0x99)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00425b3c_00425b3c.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
19 - cVar2 = *(int *)(param_1 + 0x19c) != 0 && iVar1 - *(int *)(param_1 + 0x19c) < 0x78
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00425b3c_00425b3c.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
21 - cVar2 = cVar2 + (iVar1 - *(int *)(param_1 + 0x1a6) < 0x78)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00425c70_00425c70.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
20 - local_41f = (char)param_4 + ''
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00448a80_00448a80.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
202 - cVar1 = *(char *)((int)&local_80 + iVar29 + 2)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00448a80_00448a80.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
203 - cVar2 = *(char *)((int)&local_80 + iVar29 + 3)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00448a80_00448a80.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
204 - cVar3 = *(char *)((int)&local_7c + iVar29)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00448a80_00448a80.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
205 - cVar4 = *(char *)((int)&local_7c + iVar29 + 1)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00448a80_00448a80.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
206 - cVar5 = *(char *)((int)&local_7c + iVar29 + 2)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00448a80_00448a80.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
247 - cVar1 = *(char *)((int)&local_74 + iVar29)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00448a80_00448a80.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
249 - cVar2 = *(char *)((int)&local_74 + iVar29 + 1)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00448a80_00448a80.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
250 - cVar3 = *(char *)((int)&local_74 + iVar29 + 2)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_004651b4_004651b4.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-pointer-subtraction
Issue description:
The software subtracts one pointer from another in order to determine size, but this calculation can be incorrect if the pointers do not exist in the same memory chunk.
116 - pcVar8 = pcVar1 + ((int)pcVar8 - (int)local_64)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_004651b4_004651b4.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-pointer-subtraction
Issue description:
The software subtracts one pointer from another in order to determine size, but this calculation can be incorrect if the pointers do not exist in the same memory chunk.
192 - pcVar8 = pcVar7 + ((int)pcVar8 - (int)local_64)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_0046eafc_0046eafc.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
22 - cVar1 = param_3[1]
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_0046f1ac_0046f1ac.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
33 - builtin_strncpy(pcVar3,"",9)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00473228_00473228.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
9 - cVar2 = **(char **)(param_1 + 0xc)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00473228_00473228.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
44 - cVar2 = **(char **)(param_1 + 0xc)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00473458_00473458.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
20 - cVar1 = pcVar3[1]
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00475334_00475334.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
25 - ((cVar1 = *(char *)(iVar6 + 8), cVar1 != '.' && ((cVar1 != '_' && (cVar1 != '$')))))) ||
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_004754f4_004754f4.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
42 - cVar1 = pcVar9[1]
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00475d0c_00475d0c.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
18 - cVar1 = **(char **)(param_1 + 0xc)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00475f2c_00475f2c.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
12 - cVar1 = **(char **)(param_1 + 0xc)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00475f2c_00475f2c.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
35 - cVar1 = pcVar3[1]
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00475f2c_00475f2c.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
70 - cVar1 = pcVar3[1]
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_004763b0_004763b0.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
57 - cVar2 = pcVar7[1]
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_004763b0_004763b0.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
156 - cVar2 = pcVar7[1]
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_004763b0_004763b0.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
184 - cVar2 = **(char **)(param_1 + 0xc)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_004763b0_004763b0.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
201 - cVar2 = pcVar7[1]
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_004771ac_004771ac.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
19 - cVar1 = **(char **)(param_1 + 0xc)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_0047733c_0047733c.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
25 - while (cVar1 = **(char **)(param_1 + 0xc), cVar1 != '') {
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00477904_00477904.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
37 - ((((cVar1 = param_1[8], cVar1 == '.' || (cVar1 == '_')) || (cVar1 == '$')) &&
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00477904_00477904.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
38 - ((cVar1 = param_1[9], cVar1 == 'D' || (cVar1 == 'I')))))) && (param_1[10] == '_')) {
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_0047d9c0_0047d9c0.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
145 - cVar1 = pcVar24[1]
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_0047d9c0_0047d9c0.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
148 - cVar1 = pcVar24[2]
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_0047ece0_0047ece0.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
8 - syscall(0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_0047ed20_0047ed20.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
10 - syscall(0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_0047ed80_0047ed80.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
11 - syscall(0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_0047ee10_0047ee10.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
10 - syscall(0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_0047ee70_0047ee70.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
10 - syscall(0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_0047eed0_0047eed0.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
9 - syscall(0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_0047ef30_0047ef30.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
15 - syscall(0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_0047efb0_0047efb0.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
13 - syscall(0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_0047f050_0047f050.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
10 - syscall(0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_0047f0b0_0047f0b0.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
10 - syscall(0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_0047f130_0047f130.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
11 - syscall(0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_0047f1c0_0047f1c0.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
12 - syscall(0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_0047f250_0047f250.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
10 - syscall(0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_0047f2b0_0047f2b0.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
10 - syscall(0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_0047f310_0047f310.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
10 - syscall(0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_0047f370_0047f370.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
10 - syscall(0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00481370_00481370.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
14 - sVar3 = FUN_00484130(0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00481370_00481370.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
17 - sVar3 = FUN_00484130(1)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00481984_00481984.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-pointer-subtraction
Issue description:
The software subtracts one pointer from another in order to determine size, but this calculation can be incorrect if the pointers do not exist in the same memory chunk.
59 - iVar3 = (int)pcVar11 - (int)param_2
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_004823c0_004823c0.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
128 - cVar5 = pcVar8[9]
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_004823c0_004823c0.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
132 - cVar5 = pcVar8[0x12]
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_004823c0_004823c0.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
135 - cVar5 = pcVar8[9]
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00483e50_00483e50.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-pointer-subtraction
Issue description:
The software subtracts one pointer from another in order to determine size, but this calculation can be incorrect if the pointers do not exist in the same memory chunk.
9 - return (int)pcVar1 - (int)param_1
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00483f30_00483f30.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-pointer-subtraction
Issue description:
The software subtracts one pointer from another in order to determine size, but this calculation can be incorrect if the pointers do not exist in the same memory chunk.
10 - return (int)pcVar1 - (int)param_1
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00484220_00484220.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
10 - syscall(0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00484280_00484280.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
10 - syscall(0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_004842e0_004842e0.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
10 - syscall(0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00484340_00484340.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
10 - syscall(0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_004843c0_004843c0.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
10 - syscall(0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00484420_00484420.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
10 - syscall(0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_004844a0_004844a0.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
10 - syscall(0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_0048669c_0048669c.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
343 - cVar1 = pcVar11[1]
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_004875e0_004875e0.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
93 - syscall(0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_004878d0_004878d0.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
10 - syscall(0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00487a80_00487a80.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
10 - syscall(0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00487ae0_00487ae0.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
10 - syscall(0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00487b40_00487b40.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
10 - syscall(0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00487ba0_00487ba0.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
9 - syscall(0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00487bf0_00487bf0.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
10 - syscall(0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00487ca0_00487ca0.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
9 - syscall(0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00487d00_00487d00.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
9 - syscall(0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00487d60_00487d60.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
10 - syscall(0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00487de0_00487de0.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
9 - syscall(0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00487e50_00487e50.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
10 - syscall(0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00487eb0_00487eb0.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
9 - syscall(0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00487f20_00487f20.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
12 - syscall(0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00487fc0_00487fc0.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
10 - syscall(0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00488040_00488040.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
10 - syscall(0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_004880a0_004880a0.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
10 - syscall(0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00488190_00488190.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
8 - syscall(0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00488220_00488220.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
9 - syscall(0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00488290_00488290.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
10 - syscall(0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_004882f0_004882f0.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
9 - syscall(0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00488c80_00488c80.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
183 - local_b0 = local_b0 + -0x20
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_00489f80_00489f80.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-pointer-subtraction
Issue description:
The software subtracts one pointer from another in order to determine size, but this calculation can be incorrect if the pointers do not exist in the same memory chunk.
115 - if ((int)pcVar8 - (int)local_30 < 0x41) {
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_0048a9e0_0048a9e0.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-pointer-subtraction
Issue description:
The software subtracts one pointer from another in order to determine size, but this calculation can be incorrect if the pointers do not exist in the same memory chunk.
117 - param_3 = pcVar4 + ((int)param_3 - (int)pcVar13)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_0048ae40_0048ae40.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
8 - syscall(0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_wps/FUN_0048aeb0_0048aeb0.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
9 - syscall(0)