[*] Binary protection state of libxtables.so.4.0.0

  	RELRO          CANARY            NX           PIE          RPATH        RUNPATH      SYMBOLS      

  	No RELRO       No Canary found   NX disabled  DSO          No RPATH     No RUNPATH   Symbols

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_numeric_to_ip6addr_000119f0.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        8 - iVar1 = inet_pton(10,param_1,ap_5583)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_ip6addr_to_anyname_00011d64.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion

        Issue description:

    The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be  the precursor to buffer underwrite conditions. Buffer underwrites  occur frequently when large unsigned values are cast to signed values,  and then used as indexes into a buffer or for pointer arithmetic.

        30 - memcpy(local_30.sa_data + 6,param_1,0x10)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_ipaddr_to_numeric_00011a4c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-format-string-bugs

        Issue description:

    The software uses a function that accepts a format string as an argument, but the format string originates from an external source. This can lead  to buffer overflows, denial of service, or data representation problems.

        5 - sprintf(buf_5187,(char *)0x5698,(uint)*param_1,(uint)param_1[1],(uint)param_1[2],(uint)param_1[3])

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_ipaddr_to_numeric_00011a4c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        5 - sprintf(buf_5187,(char *)0x5698,(uint)*param_1,(uint)param_1[1],(uint)param_1[2],(uint)param_1[3])   //possible issue identified - semgrep

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_set_params_00012250.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-format-string-bugs

        Issue description:

    The software uses a function that accepts a format string as an argument, but the format string originates from an external source. This can lead  to buffer overflows, denial of service, or data representation problems.

        10 - fprintf(_stderr,(char *)0x57dc,0x5dc8)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_save_string_000117e0.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion

        Issue description:

    The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be  the precursor to buffer underwrite conditions. Buffer underwrites  occur frequently when large unsigned values are cast to signed values,  and then used as indexes into a buffer or for pointer arithmetic.

        10 - sVar1 = strcspn(param_1,(char *)0x5d84)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_save_string_000117e0.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-pointer-subtraction

        Issue description:

    The software subtracts one pointer from another in order to determine size, but this calculation can be incorrect if the pointers do not exist in the same memory chunk.

        22 - fwrite(param_1,1,(int)pcVar2 - (int)param_1,_stdout)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_save_string_000117e0.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-format-string-bugs

        Issue description:

    The software uses a function that accepts a format string as an argument, but the format string originates from an external source. This can lead  to buffer overflows, denial of service, or data representation problems.

        32 - printf((char *)0x5694)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_ipmask_to_numeric_00011ab0.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-format-string-bugs

        Issue description:

    The software uses a function that accepts a format string as an argument, but the format string originates from an external source. This can lead  to buffer overflows, denial of service, or data representation problems.

        34 - sprintf(buf_5237,__format,iVar5)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_ipmask_to_numeric_00011ab0.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-insecure-api-sprintf-vsprintf

        Issue description:

    A buffer overflow condition exists when a program attempts to put more data in a buffer than it can hold, or when a program attempts to put data in a memory area outside of the boundaries of a buffer.

        34 - sprintf(buf_5237,__format,iVar5);   //possible issue identified - semgrep

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_ipmask_to_numeric_00011ab0.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        34 - sprintf(buf_5237,__format,iVar5);   //possible issue identified - semgrep

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_malloc_00012fa4.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        7 - pvVar1 = malloc(param_1)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_realloc_00012f34.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        7 - pvVar1 = realloc(param_1,param_2)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/__numeric_to_ipaddr_000127a0.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        17 - strncpy(__dest,param_1,0x13)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/__numeric_to_ipaddr_000127a0.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion

        Issue description:

    The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be  the precursor to buffer underwrite conditions. Buffer underwrites  occur frequently when large unsigned values are cast to signed values,  and then used as indexes into a buffer or for pointer arithmetic.

        17 - strncpy(__dest,param_1,0x13);   //possible issue identified - semgrep

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/__numeric_to_ipaddr_000127a0.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-unterminated-string-strncpy

        Issue description:

    If there is no NUL character byte in the first n bytes of the source string, strncpy() and stpncpy() do not NUL-terminate the destination buffer. If the program does not explicitly terminate the destination buffer, this will almost certainly result in information disclosure, and possibly a buffer overflow condition.

        17 - strncpy(__dest,param_1,0x13);   //possible issue identified - semgrep

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_ip6mask_to_numeric_00011bb8.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-format-string-bugs

        Issue description:

    The software uses a function that accepts a format string as an argument, but the format string originates from an external source. This can lead  to buffer overflows, denial of service, or data representation problems.

        31 - sprintf(buf_5575,(char *)0x56a4)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_ip6mask_to_numeric_00011bb8.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        31 - sprintf(buf_5575,(char *)0x56a4);   //possible issue identified - semgrep

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_ip6mask_to_numeric_00011bb8.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-insecure-api-strcpy-strcat

        Issue description:

    A buffer overflow condition exists when a program attempts to put more data in a buffer than it can hold, or when a program attempts to put data in a memory area outside of the boundaries of a buffer.

        34 - strcpy(buf_5575,(char *)0x56ac)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_ip6mask_to_numeric_00011bb8.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        34 - strcpy(buf_5575,(char *)0x56ac);   //possible issue identified - semgrep

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_ip6mask_to_numeric_00011bb8.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-insecure-api-strcpy-strcat

        Issue description:

    A buffer overflow condition exists when a program attempts to put more data in a buffer than it can hold, or when a program attempts to put data in a memory area outside of the boundaries of a buffer.

        36 - strcat(buf_5575,__src)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_ip6mask_to_numeric_00011bb8.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        36 - strcat(buf_5575,__src);   //possible issue identified - semgrep

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_insmod_00012b3c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        18 - _Var1 = vfork()

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_insmod_00012b3c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        30 - execv(param_2,&local_24)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_insmod_00012b3c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-use-after-free

        Issue description:

    The use of previously-freed memory can have any number of adverse consequences, ranging from the corruption of valid data to the execution of arbitrary code, depending on the instantiation and timing of the flaw. The simplest way data corruption may occur involves the system's reuse of the freed memory.

        37 - return 0

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/compatible_revision_00012ce8.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-format-string-bugs

        Issue description:

    The software uses a function that accepts a format string as an argument, but the format string originates from an external source. This can lead  to buffer overflows, denial of service, or data representation problems.

        28 - fprintf(__stream,__format,pcVar2)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/compatible_revision_00012ce8.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-format-string-bugs

        Issue description:

    The software uses a function that accepts a format string as an argument, but the format string originates from an external source. This can lead  to buffer overflows, denial of service, or data representation problems.

        35 - fprintf(_stderr,(char *)0x5888,uVar4)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/compatible_revision_00012ce8.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-insecure-api-strcpy-strcat

        Issue description:

    A buffer overflow condition exists when a program attempts to put more data in a buffer than it can hold, or when a program attempts to put data in a memory area outside of the boundaries of a buffer.

        39 - strcpy(acStack_44,param_1)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/compatible_revision_00012ce8.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        39 - strcpy(acStack_44,param_1);   //possible issue identified - semgrep

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_parse_interface_0001205c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion

        Issue description:

    The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be  the precursor to buffer underwrite conditions. Buffer underwrites  occur frequently when large unsigned values are cast to signed values,  and then used as indexes into a buffer or for pointer arithmetic.

        14 - memset(param_3,0,0x10)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_parse_interface_0001205c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion

        Issue description:

    The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be  the precursor to buffer underwrite conditions. Buffer underwrites  occur frequently when large unsigned values are cast to signed values,  and then used as indexes into a buffer or for pointer arithmetic.

        16 - memset(param_2,0,0x10)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_parse_interface_0001205c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-insecure-api-strcpy-strcat

        Issue description:

    A buffer overflow condition exists when a program attempts to put more data in a buffer than it can hold, or when a program attempts to put data in a memory area outside of the boundaries of a buffer.

        22 - strcpy(param_2,pcVar3)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_parse_interface_0001205c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        22 - strcpy(param_2,pcVar3);   //possible issue identified - semgrep

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_parse_interface_0001205c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion

        Issue description:

    The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be  the precursor to buffer underwrite conditions. Buffer underwrites  occur frequently when large unsigned values are cast to signed values,  and then used as indexes into a buffer or for pointer arithmetic.

        23 - __n = sVar2 - 1

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_parse_interface_0001205c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion

        Issue description:

    The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be  the precursor to buffer underwrite conditions. Buffer underwrites  occur frequently when large unsigned values are cast to signed values,  and then used as indexes into a buffer or for pointer arithmetic.

        25 - sVar2 = 0x10

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_parse_interface_0001205c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-format-string-bugs

        Issue description:

    The software uses a function that accepts a format string as an argument, but the format string originates from an external source. This can lead  to buffer overflows, denial of service, or data representation problems.

        40 - fprintf(_stderr,(char *)0x5780,param_2)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_parse_interface_0001205c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion

        Issue description:

    The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be  the precursor to buffer underwrite conditions. Buffer underwrites  occur frequently when large unsigned values are cast to signed values,  and then used as indexes into a buffer or for pointer arithmetic.

        45 - sVar2 = 0x11 - sVar2

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_register_match_00013ac0.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-format-string-bugs

        Issue description:

    The software uses a function that accepts a format string as an argument, but the format string originates from an external source. This can lead  to buffer overflows, denial of service, or data representation problems.

        90 - fprintf(_stderr,pcVar7,uVar6,__s)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_register_match_00013ac0.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-format-string-bugs

        Issue description:

    The software uses a function that accepts a format string as an argument, but the format string originates from an external source. This can lead  to buffer overflows, denial of service, or data representation problems.

        97 - fprintf(_stderr,__format,uVar6,__s,pcVar7)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_find_match_0001383c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        38 - puVar4 = (undefined4 *)xtables_malloc(0xc)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_find_match_0001383c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        56 - pvVar2 = (void *)xtables_malloc(0x44)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_find_match_0001383c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion

        Issue description:

    The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be  the precursor to buffer underwrite conditions. Buffer underwrites  occur frequently when large unsigned values are cast to signed values,  and then used as indexes into a buffer or for pointer arithmetic.

        57 - memcpy(pvVar2,__src,0x44)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/ip6parse_hostnetwork_00013014.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion

        Issue description:

    The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be  the precursor to buffer underwrite conditions. Buffer underwrites  occur frequently when large unsigned values are cast to signed values,  and then used as indexes into a buffer or for pointer arithmetic.

        15 - memset(__req,0,0x20)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/ip6parse_hostnetwork_00013014.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        24 - addr_5591 = (addrinfo *)xtables_malloc(0x10)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/ip6parse_hostnetwork_00013014.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion

        Issue description:

    The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be  the precursor to buffer underwrite conditions. Buffer underwrites  occur frequently when large unsigned values are cast to signed values,  and then used as indexes into a buffer or for pointer arithmetic.

        25 - memcpy(addr_5591,local_40->ai_addr->sa_data + 6,0x10)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/ip6parse_hostnetwork_00013014.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        37 - __req = (addrinfo *)xtables_malloc(0x10)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/ip6parse_hostnetwork_00013014.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion

        Issue description:

    The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be  the precursor to buffer underwrite conditions. Buffer underwrites  occur frequently when large unsigned values are cast to signed values,  and then used as indexes into a buffer or for pointer arithmetic.

        38 - memcpy(__req,__src,0x10)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_ip6parse_any_000131d0.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        22 - strncpy(acStack_118,param_1,0xff)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_ip6parse_any_000131d0.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion

        Issue description:

    The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be  the precursor to buffer underwrite conditions. Buffer underwrites  occur frequently when large unsigned values are cast to signed values,  and then used as indexes into a buffer or for pointer arithmetic.

        22 - strncpy(acStack_118,param_1,0xff);   //possible issue identified - semgrep

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_ip6parse_any_000131d0.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-unterminated-string-strncpy

        Issue description:

    If there is no NUL character byte in the first n bytes of the source string, strncpy() and stpncpy() do not NUL-terminate the destination buffer. If the program does not explicitly terminate the destination buffer, this will almost certainly result in information disclosure, and possibly a buffer overflow condition.

        22 - strncpy(acStack_118,param_1,0xff);   //possible issue identified - semgrep

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_ip6parse_any_000131d0.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion

        Issue description:

    The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be  the precursor to buffer underwrite conditions. Buffer underwrites  occur frequently when large unsigned values are cast to signed values,  and then used as indexes into a buffer or for pointer arithmetic.

        33 - memcpy(param_3,__src,0x10)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_ip6parse_any_000131d0.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-insecure-api-strcpy-strcat

        Issue description:

    A buffer overflow condition exists when a program attempts to put more data in a buffer than it can hold, or when a program attempts to put data in a memory area outside of the boundaries of a buffer.

        36 - strcpy(acStack_118,(char *)0x5970)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_ip6parse_any_000131d0.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        36 - strcpy(acStack_118,(char *)0x5970);   //possible issue identified - semgrep

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_register_target_000142e4.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-format-string-bugs

        Issue description:

    The software uses a function that accepts a format string as an argument, but the format string originates from an external source. This can lead  to buffer overflows, denial of service, or data representation problems.

        87 - fprintf(_stderr,pcVar8,uVar7,__s)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_register_target_000142e4.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-format-string-bugs

        Issue description:

    The software uses a function that accepts a format string as an argument, but the format string originates from an external source. This can lead  to buffer overflows, denial of service, or data representation problems.

        94 - fprintf(_stderr,__format,uVar7,__s,pcVar8)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_calloc_0001481c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        7 - pvVar1 = calloc(param_1,param_2)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/ipparse_hostnetwork_0001488c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        22 - puVar1 = (undefined4 *)xtables_calloc()

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/ipparse_hostnetwork_0001488c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion

        Issue description:

    The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be  the precursor to buffer underwrite conditions. Buffer underwrites  occur frequently when large unsigned values are cast to signed values,  and then used as indexes into a buffer or for pointer arithmetic.

        25 - memcpy((void *)((int)puVar1 + iVar6),*(void **)((int)phVar4->h_addr_list + iVar6),4)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/ipparse_hostnetwork_0001488c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        40 - puVar5 = (undefined4 *)xtables_malloc(4)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/basic_exit_err_0001512c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-format-string-bugs

        Issue description:

    The software uses a function that accepts a format string as an argument, but the format string originates from an external source. This can lead  to buffer overflows, denial of service, or data representation problems.

        12 - fprintf(_stderr,(char *)0x5d0c,*(undefined4 *)(xt_params + 4),*(undefined4 *)(xt_params + 8))

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/basic_exit_err_0001512c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-format-string-bugs

        Issue description:

    The software uses a function that accepts a format string as an argument, but the format string originates from an external source. This can lead  to buffer overflows, denial of service, or data representation problems.

        13 - vfprintf(_stderr,param_2,&local_res8)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_init_00014fe4.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        9 - xtables_libdir = getenv((char *)0x5c54)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_init_00014fe4.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        13 - xtables_libdir = getenv((char *)0x5c64)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_init_00014fe4.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        15 - xtables_libdir = getenv((char *)0x5cb0)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_merge_options_00014680.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion

        Issue description:

    The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be  the precursor to buffer underwrite conditions. Buffer underwrites  occur frequently when large unsigned values are cast to signed values,  and then used as indexes into a buffer or for pointer arithmetic.

        22 - __n = __n + 0x10

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_merge_options_00014680.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-wraparound

        Issue description:

    The software performs a calculation that can produce an integer overflow or wraparound, when the logic assumes that the resulting value will always be larger than the original value. This can introduce other weaknesses when the calculation is used for resource management or execution control.

        32 - __dest = malloc((uVar7 + iVar6 + 1) * 0x10)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_merge_options_00014680.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        32 - __dest = malloc((uVar7 + iVar6 + 1) * 0x10);   //possible issue identified - semgrep

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_merge_options_00014680.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        37 - memcpy(__dest,param_1,__n)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_merge_options_00014680.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion

        Issue description:

    The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be  the precursor to buffer underwrite conditions. Buffer underwrites  occur frequently when large unsigned values are cast to signed values,  and then used as indexes into a buffer or for pointer arithmetic.

        45 - memcpy(__dest_00,param_2,0x10)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_ipparse_any_00014a80.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        19 - strncpy(acStack_118,param_1,0xff)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_ipparse_any_00014a80.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion

        Issue description:

    The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be  the precursor to buffer underwrite conditions. Buffer underwrites  occur frequently when large unsigned values are cast to signed values,  and then used as indexes into a buffer or for pointer arithmetic.

        19 - strncpy(acStack_118,param_1,0xff);   //possible issue identified - semgrep

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_ipparse_any_00014a80.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-unterminated-string-strncpy

        Issue description:

    If there is no NUL character byte in the first n bytes of the source string, strncpy() and stpncpy() do not NUL-terminate the destination buffer. If the program does not explicitly terminate the destination buffer, this will almost certainly result in information disclosure, and possibly a buffer overflow condition.

        19 - strncpy(acStack_118,param_1,0xff);   //possible issue identified - semgrep

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_ipparse_any_00014a80.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-insecure-api-strcpy-strcat

        Issue description:

    A buffer overflow condition exists when a program attempts to put more data in a buffer than it can hold, or when a program attempts to put data in a memory area outside of the boundaries of a buffer.

        33 - strcpy(acStack_118,(char *)0x5c4c)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_ipparse_any_00014a80.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        33 - strcpy(acStack_118,(char *)0x5c4c);   //possible issue identified - semgrep

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_ip6parse_multiple_0001343c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        30 - iVar3 = xtables_malloc(uVar8 << 4)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_ip6parse_multiple_0001343c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        32 - iVar3 = xtables_malloc(uVar8 << 4)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_ip6parse_multiple_0001343c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion

        Issue description:

    The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be  the precursor to buffer underwrite conditions. Buffer underwrites  occur frequently when large unsigned values are cast to signed values,  and then used as indexes into a buffer or for pointer arithmetic.

        40 - __n = (int)pcVar2 - (int)param_1

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_ip6parse_multiple_0001343c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-pointer-subtraction

        Issue description:

    The software subtracts one pointer from another in order to determine size, but this calculation can be incorrect if the pointers do not exist in the same memory chunk.

        40 - __n = (int)pcVar2 - (int)param_1;   //possible issue identified - semgrep

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_ip6parse_multiple_0001343c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        45 - strncpy(local_30,param_1,__n)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_ip6parse_multiple_0001343c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-unterminated-string-strncpy

        Issue description:

    If there is no NUL character byte in the first n bytes of the source string, strncpy() and stpncpy() do not NUL-terminate the destination buffer. If the program does not explicitly terminate the destination buffer, this will almost certainly result in information disclosure, and possibly a buffer overflow condition.

        45 - strncpy(local_30,param_1,__n);   //possible issue identified - semgrep

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_ip6parse_multiple_0001343c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion

        Issue description:

    The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be  the precursor to buffer underwrite conditions. Buffer underwrites  occur frequently when large unsigned values are cast to signed values,  and then used as indexes into a buffer or for pointer arithmetic.

        55 - memcpy((void *)(*param_3 + iVar5),pvVar4,0x10)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_ip6parse_multiple_0001343c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-insecure-api-strcpy-strcat

        Issue description:

    A buffer overflow condition exists when a program attempts to put more data in a buffer than it can hold, or when a program attempts to put data in a memory area outside of the boundaries of a buffer.

        58 - strcpy(local_30,(char *)0x5970)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_ip6parse_multiple_0001343c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        58 - strcpy(local_30,(char *)0x5970);   //possible issue identified - semgrep

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_ip6parse_multiple_0001343c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion

        Issue description:

    The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be  the precursor to buffer underwrite conditions. Buffer underwrites  occur frequently when large unsigned values are cast to signed values,  and then used as indexes into a buffer or for pointer arithmetic.

        62 - memcpy((void *)(*param_2 + iVar5),pvVar4,0x10)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_ip6parse_multiple_0001343c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        66 - iVar3 = xtables_realloc(*param_2,uVar8 * 0x10)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_ip6parse_multiple_0001343c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        68 - iVar3 = xtables_realloc(*param_3,uVar8 * 0x10)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_ip6parse_multiple_0001343c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion

        Issue description:

    The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be  the precursor to buffer underwrite conditions. Buffer underwrites  occur frequently when large unsigned values are cast to signed values,  and then used as indexes into a buffer or for pointer arithmetic.

        77 - memcpy((void *)(*param_2 + iVar3),__src,0x10)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_ip6parse_multiple_0001343c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion

        Issue description:

    The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be  the precursor to buffer underwrite conditions. Buffer underwrites  occur frequently when large unsigned values are cast to signed values,  and then used as indexes into a buffer or for pointer arithmetic.

        87 - memcpy((void *)(*param_3 + iVar3),(void *)(*param_3 + iVar5),0x10)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/load_extension_00013e84.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-format-string-bugs

        Issue description:

    The software uses a function that accepts a format string as an argument, but the format string originates from an external source. This can lead  to buffer overflows, denial of service, or data representation problems.

        21 - snprintf(acStack_128,0x100,(char *)0x5ad4,(int)pcVar2 - (int)param_1,param_1,param_3)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/load_extension_00013e84.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        21 - snprintf(acStack_128,0x100,(char *)0x5ad4,(int)pcVar2 - (int)param_1,param_1,param_3);   //possible issue identified - semgrep

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/load_extension_00013e84.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion

        Issue description:

    The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be  the precursor to buffer underwrite conditions. Buffer underwrites  occur frequently when large unsigned values are cast to signed values,  and then used as indexes into a buffer or for pointer arithmetic.

        21 - snprintf(acStack_128,0x100,(char *)0x5ad4,(int)pcVar2 - (int)param_1,param_1,param_3);   //possible issue identified - semgrep

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/load_extension_00013e84.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-pointer-subtraction

        Issue description:

    The software subtracts one pointer from another in order to determine size, but this calculation can be incorrect if the pointers do not exist in the same memory chunk.

        21 - snprintf(acStack_128,0x100,(char *)0x5ad4,(int)pcVar2 - (int)param_1,param_1,param_3);   //possible issue identified - semgrep

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/load_extension_00013e84.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        22 - iVar4 = dlopen(acStack_128,2)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/load_extension_00013e84.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-format-string-bugs

        Issue description:

    The software uses a function that accepts a format string as an argument, but the format string originates from an external source. This can lead  to buffer overflows, denial of service, or data representation problems.

        28 - fprintf(pFVar1,(char *)0x5ae8,acStack_128,uVar5)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/load_extension_00013e84.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-format-string-bugs

        Issue description:

    The software uses a function that accepts a format string as an argument, but the format string originates from an external source. This can lead  to buffer overflows, denial of service, or data representation problems.

        42 - snprintf(acStack_128,0x100,(char *)0x5af0,(int)pcVar2 - (int)param_1,param_1,param_2,param_3)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/load_extension_00013e84.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        42 - snprintf(acStack_128,0x100,(char *)0x5af0,(int)pcVar2 - (int)param_1,param_1,param_2,param_3);   //possible issue identified - semgrep

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/load_extension_00013e84.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion

        Issue description:

    The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be  the precursor to buffer underwrite conditions. Buffer underwrites  occur frequently when large unsigned values are cast to signed values,  and then used as indexes into a buffer or for pointer arithmetic.

        42 - snprintf(acStack_128,0x100,(char *)0x5af0,(int)pcVar2 - (int)param_1,param_1,param_2,param_3);   //possible issue identified - semgrep

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/load_extension_00013e84.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-pointer-subtraction

        Issue description:

    The software subtracts one pointer from another in order to determine size, but this calculation can be incorrect if the pointers do not exist in the same memory chunk.

        42 - snprintf(acStack_128,0x100,(char *)0x5af0,(int)pcVar2 - (int)param_1,param_1,param_2,param_3);   //possible issue identified - semgrep

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/load_extension_00013e84.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        43 - iVar4 = dlopen(acStack_128,2)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/load_extension_00013e84.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-format-string-bugs

        Issue description:

    The software uses a function that accepts a format string as an argument, but the format string originates from an external source. This can lead  to buffer overflows, denial of service, or data representation problems.

        49 - fprintf(pFVar1,(char *)0x5ae8,acStack_128,uVar5)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_ipparse_multiple_00014c0c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        30 - iVar3 = xtables_malloc(uVar8 << 2)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_ipparse_multiple_00014c0c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        32 - iVar3 = xtables_malloc(uVar8 << 2)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_ipparse_multiple_00014c0c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion

        Issue description:

    The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be  the precursor to buffer underwrite conditions. Buffer underwrites  occur frequently when large unsigned values are cast to signed values,  and then used as indexes into a buffer or for pointer arithmetic.

        40 - __n = (int)pcVar2 - (int)param_1

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_ipparse_multiple_00014c0c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-pointer-subtraction

        Issue description:

    The software subtracts one pointer from another in order to determine size, but this calculation can be incorrect if the pointers do not exist in the same memory chunk.

        40 - __n = (int)pcVar2 - (int)param_1;   //possible issue identified - semgrep

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_ipparse_multiple_00014c0c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        45 - strncpy(local_30,param_1,__n)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_ipparse_multiple_00014c0c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-unterminated-string-strncpy

        Issue description:

    If there is no NUL character byte in the first n bytes of the source string, strncpy() and stpncpy() do not NUL-terminate the destination buffer. If the program does not explicitly terminate the destination buffer, this will almost certainly result in information disclosure, and possibly a buffer overflow condition.

        45 - strncpy(local_30,param_1,__n);   //possible issue identified - semgrep

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_ipparse_multiple_00014c0c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion

        Issue description:

    The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be  the precursor to buffer underwrite conditions. Buffer underwrites  occur frequently when large unsigned values are cast to signed values,  and then used as indexes into a buffer or for pointer arithmetic.

        55 - memcpy((void *)(*param_3 + iVar3),pvVar4,4)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_ipparse_multiple_00014c0c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-insecure-api-strcpy-strcat

        Issue description:

    A buffer overflow condition exists when a program attempts to put more data in a buffer than it can hold, or when a program attempts to put data in a memory area outside of the boundaries of a buffer.

        57 - strcpy(local_30,(char *)0x5c4c)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_ipparse_multiple_00014c0c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        57 - strcpy(local_30,(char *)0x5c4c);   //possible issue identified - semgrep

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_ipparse_multiple_00014c0c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion

        Issue description:

    The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be  the precursor to buffer underwrite conditions. Buffer underwrites  occur frequently when large unsigned values are cast to signed values,  and then used as indexes into a buffer or for pointer arithmetic.

        61 - memcpy((void *)(*param_2 + iVar3),pvVar4,4)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_ipparse_multiple_00014c0c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        65 - iVar5 = xtables_realloc(*param_2,uVar8 * 4)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_ipparse_multiple_00014c0c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        67 - iVar5 = xtables_realloc(*param_3,uVar8 * 4)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_ipparse_multiple_00014c0c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion

        Issue description:

    The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be  the precursor to buffer underwrite conditions. Buffer underwrites  occur frequently when large unsigned values are cast to signed values,  and then used as indexes into a buffer or for pointer arithmetic.

        76 - memcpy((void *)(*param_2 + iVar5),__src,4)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_ipparse_multiple_00014c0c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion

        Issue description:

    The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be  the precursor to buffer underwrite conditions. Buffer underwrites  occur frequently when large unsigned values are cast to signed values,  and then used as indexes into a buffer or for pointer arithmetic.

        86 - memcpy((void *)(*param_3 + iVar5),(void *)(*param_3 + iVar3),4)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/__numeric_to_ipaddr_000127a0.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        17 - strncpy(__dest,param_1,0x13)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/__numeric_to_ipaddr_000127a0.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion

        Issue description:

    The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be  the precursor to buffer underwrite conditions. Buffer underwrites  occur frequently when large unsigned values are cast to signed values,  and then used as indexes into a buffer or for pointer arithmetic.

        17 - strncpy(__dest,param_1,0x13);   //possible issue identified - semgrep

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/__numeric_to_ipaddr_000127a0.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-unterminated-string-strncpy

        Issue description:

    If there is no NUL character byte in the first n bytes of the source string, strncpy() and stpncpy() do not NUL-terminate the destination buffer. If the program does not explicitly terminate the destination buffer, this will almost certainly result in information disclosure, and possibly a buffer overflow condition.

        17 - strncpy(__dest,param_1,0x13);   //possible issue identified - semgrep

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/basic_exit_err_0001512c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-format-string-bugs

        Issue description:

    The software uses a function that accepts a format string as an argument, but the format string originates from an external source. This can lead  to buffer overflows, denial of service, or data representation problems.

        12 - fprintf(_stderr,(char *)0x5d0c,*(undefined4 *)(xt_params + 4),*(undefined4 *)(xt_params + 8))

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/basic_exit_err_0001512c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-format-string-bugs

        Issue description:

    The software uses a function that accepts a format string as an argument, but the format string originates from an external source. This can lead  to buffer overflows, denial of service, or data representation problems.

        13 - vfprintf(_stderr,param_2,&local_res8)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/compatible_revision_00012ce8.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-format-string-bugs

        Issue description:

    The software uses a function that accepts a format string as an argument, but the format string originates from an external source. This can lead  to buffer overflows, denial of service, or data representation problems.

        28 - fprintf(__stream,__format,pcVar2)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/compatible_revision_00012ce8.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-format-string-bugs

        Issue description:

    The software uses a function that accepts a format string as an argument, but the format string originates from an external source. This can lead  to buffer overflows, denial of service, or data representation problems.

        35 - fprintf(_stderr,(char *)0x5888,uVar4)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/compatible_revision_00012ce8.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-insecure-api-strcpy-strcat

        Issue description:

    A buffer overflow condition exists when a program attempts to put more data in a buffer than it can hold, or when a program attempts to put data in a memory area outside of the boundaries of a buffer.

        39 - strcpy(acStack_44,param_1)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/compatible_revision_00012ce8.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        39 - strcpy(acStack_44,param_1);   //possible issue identified - semgrep

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/ip6parse_hostnetwork_00013014.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion

        Issue description:

    The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be  the precursor to buffer underwrite conditions. Buffer underwrites  occur frequently when large unsigned values are cast to signed values,  and then used as indexes into a buffer or for pointer arithmetic.

        15 - memset(__req,0,0x20)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/ip6parse_hostnetwork_00013014.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        24 - addr_5591 = (addrinfo *)xtables_malloc(0x10)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/ip6parse_hostnetwork_00013014.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion

        Issue description:

    The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be  the precursor to buffer underwrite conditions. Buffer underwrites  occur frequently when large unsigned values are cast to signed values,  and then used as indexes into a buffer or for pointer arithmetic.

        25 - memcpy(addr_5591,local_40->ai_addr->sa_data + 6,0x10)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/ip6parse_hostnetwork_00013014.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        37 - __req = (addrinfo *)xtables_malloc(0x10)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/ip6parse_hostnetwork_00013014.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion

        Issue description:

    The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be  the precursor to buffer underwrite conditions. Buffer underwrites  occur frequently when large unsigned values are cast to signed values,  and then used as indexes into a buffer or for pointer arithmetic.

        38 - memcpy(__req,__src,0x10)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/ipparse_hostnetwork_0001488c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        22 - puVar1 = (undefined4 *)xtables_calloc()

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/ipparse_hostnetwork_0001488c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion

        Issue description:

    The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be  the precursor to buffer underwrite conditions. Buffer underwrites  occur frequently when large unsigned values are cast to signed values,  and then used as indexes into a buffer or for pointer arithmetic.

        25 - memcpy((void *)((int)puVar1 + iVar6),*(void **)((int)phVar4->h_addr_list + iVar6),4)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/ipparse_hostnetwork_0001488c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        40 - puVar5 = (undefined4 *)xtables_malloc(4)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/load_extension_00013e84.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-format-string-bugs

        Issue description:

    The software uses a function that accepts a format string as an argument, but the format string originates from an external source. This can lead  to buffer overflows, denial of service, or data representation problems.

        21 - snprintf(acStack_128,0x100,(char *)0x5ad4,(int)pcVar2 - (int)param_1,param_1,param_3)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/load_extension_00013e84.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        21 - snprintf(acStack_128,0x100,(char *)0x5ad4,(int)pcVar2 - (int)param_1,param_1,param_3);   //possible issue identified - semgrep

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/load_extension_00013e84.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion

        Issue description:

    The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be  the precursor to buffer underwrite conditions. Buffer underwrites  occur frequently when large unsigned values are cast to signed values,  and then used as indexes into a buffer or for pointer arithmetic.

        21 - snprintf(acStack_128,0x100,(char *)0x5ad4,(int)pcVar2 - (int)param_1,param_1,param_3);   //possible issue identified - semgrep

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/load_extension_00013e84.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-pointer-subtraction

        Issue description:

    The software subtracts one pointer from another in order to determine size, but this calculation can be incorrect if the pointers do not exist in the same memory chunk.

        21 - snprintf(acStack_128,0x100,(char *)0x5ad4,(int)pcVar2 - (int)param_1,param_1,param_3);   //possible issue identified - semgrep

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/load_extension_00013e84.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        22 - iVar4 = dlopen(acStack_128,2)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/load_extension_00013e84.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-format-string-bugs

        Issue description:

    The software uses a function that accepts a format string as an argument, but the format string originates from an external source. This can lead  to buffer overflows, denial of service, or data representation problems.

        28 - fprintf(pFVar1,(char *)0x5ae8,acStack_128,uVar5)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/load_extension_00013e84.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-format-string-bugs

        Issue description:

    The software uses a function that accepts a format string as an argument, but the format string originates from an external source. This can lead  to buffer overflows, denial of service, or data representation problems.

        42 - snprintf(acStack_128,0x100,(char *)0x5af0,(int)pcVar2 - (int)param_1,param_1,param_2,param_3)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/load_extension_00013e84.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        42 - snprintf(acStack_128,0x100,(char *)0x5af0,(int)pcVar2 - (int)param_1,param_1,param_2,param_3);   //possible issue identified - semgrep

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/load_extension_00013e84.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion

        Issue description:

    The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be  the precursor to buffer underwrite conditions. Buffer underwrites  occur frequently when large unsigned values are cast to signed values,  and then used as indexes into a buffer or for pointer arithmetic.

        42 - snprintf(acStack_128,0x100,(char *)0x5af0,(int)pcVar2 - (int)param_1,param_1,param_2,param_3);   //possible issue identified - semgrep

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/load_extension_00013e84.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-pointer-subtraction

        Issue description:

    The software subtracts one pointer from another in order to determine size, but this calculation can be incorrect if the pointers do not exist in the same memory chunk.

        42 - snprintf(acStack_128,0x100,(char *)0x5af0,(int)pcVar2 - (int)param_1,param_1,param_2,param_3);   //possible issue identified - semgrep

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/load_extension_00013e84.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        43 - iVar4 = dlopen(acStack_128,2)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/load_extension_00013e84.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-format-string-bugs

        Issue description:

    The software uses a function that accepts a format string as an argument, but the format string originates from an external source. This can lead  to buffer overflows, denial of service, or data representation problems.

        49 - fprintf(pFVar1,(char *)0x5ae8,acStack_128,uVar5)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_calloc_0001481c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        7 - pvVar1 = calloc(param_1,param_2)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_find_match_0001383c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        38 - puVar4 = (undefined4 *)xtables_malloc(0xc)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_find_match_0001383c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        56 - pvVar2 = (void *)xtables_malloc(0x44)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_find_match_0001383c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion

        Issue description:

    The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be  the precursor to buffer underwrite conditions. Buffer underwrites  occur frequently when large unsigned values are cast to signed values,  and then used as indexes into a buffer or for pointer arithmetic.

        57 - memcpy(pvVar2,__src,0x44)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_init_00014fe4.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        9 - xtables_libdir = getenv((char *)0x5c54)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_init_00014fe4.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        13 - xtables_libdir = getenv((char *)0x5c64)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_init_00014fe4.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        15 - xtables_libdir = getenv((char *)0x5cb0)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_insmod_00012b3c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        18 - _Var1 = vfork()

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_insmod_00012b3c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        30 - execv(param_2,&local_24)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_insmod_00012b3c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-use-after-free

        Issue description:

    The use of previously-freed memory can have any number of adverse consequences, ranging from the corruption of valid data to the execution of arbitrary code, depending on the instantiation and timing of the flaw. The simplest way data corruption may occur involves the system's reuse of the freed memory.

        37 - return 0

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_ip6addr_to_anyname_00011d64.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion

        Issue description:

    The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be  the precursor to buffer underwrite conditions. Buffer underwrites  occur frequently when large unsigned values are cast to signed values,  and then used as indexes into a buffer or for pointer arithmetic.

        30 - memcpy(local_30.sa_data + 6,param_1,0x10)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_ip6mask_to_numeric_00011bb8.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-format-string-bugs

        Issue description:

    The software uses a function that accepts a format string as an argument, but the format string originates from an external source. This can lead  to buffer overflows, denial of service, or data representation problems.

        31 - sprintf(buf_5575,(char *)0x56a4)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_ip6mask_to_numeric_00011bb8.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        31 - sprintf(buf_5575,(char *)0x56a4);   //possible issue identified - semgrep

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_ip6mask_to_numeric_00011bb8.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-insecure-api-strcpy-strcat

        Issue description:

    A buffer overflow condition exists when a program attempts to put more data in a buffer than it can hold, or when a program attempts to put data in a memory area outside of the boundaries of a buffer.

        34 - strcpy(buf_5575,(char *)0x56ac)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_ip6mask_to_numeric_00011bb8.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        34 - strcpy(buf_5575,(char *)0x56ac);   //possible issue identified - semgrep

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_ip6mask_to_numeric_00011bb8.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-insecure-api-strcpy-strcat

        Issue description:

    A buffer overflow condition exists when a program attempts to put more data in a buffer than it can hold, or when a program attempts to put data in a memory area outside of the boundaries of a buffer.

        36 - strcat(buf_5575,__src)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_ip6mask_to_numeric_00011bb8.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        36 - strcat(buf_5575,__src);   //possible issue identified - semgrep

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_ip6parse_any_000131d0.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        22 - strncpy(acStack_118,param_1,0xff)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_ip6parse_any_000131d0.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion

        Issue description:

    The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be  the precursor to buffer underwrite conditions. Buffer underwrites  occur frequently when large unsigned values are cast to signed values,  and then used as indexes into a buffer or for pointer arithmetic.

        22 - strncpy(acStack_118,param_1,0xff);   //possible issue identified - semgrep

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_ip6parse_any_000131d0.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-unterminated-string-strncpy

        Issue description:

    If there is no NUL character byte in the first n bytes of the source string, strncpy() and stpncpy() do not NUL-terminate the destination buffer. If the program does not explicitly terminate the destination buffer, this will almost certainly result in information disclosure, and possibly a buffer overflow condition.

        22 - strncpy(acStack_118,param_1,0xff);   //possible issue identified - semgrep

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_ip6parse_any_000131d0.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion

        Issue description:

    The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be  the precursor to buffer underwrite conditions. Buffer underwrites  occur frequently when large unsigned values are cast to signed values,  and then used as indexes into a buffer or for pointer arithmetic.

        33 - memcpy(param_3,__src,0x10)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_ip6parse_any_000131d0.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-insecure-api-strcpy-strcat

        Issue description:

    A buffer overflow condition exists when a program attempts to put more data in a buffer than it can hold, or when a program attempts to put data in a memory area outside of the boundaries of a buffer.

        36 - strcpy(acStack_118,(char *)0x5970)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_ip6parse_any_000131d0.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        36 - strcpy(acStack_118,(char *)0x5970);   //possible issue identified - semgrep

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_ip6parse_multiple_0001343c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        30 - iVar3 = xtables_malloc(uVar8 << 4)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_ip6parse_multiple_0001343c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        32 - iVar3 = xtables_malloc(uVar8 << 4)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_ip6parse_multiple_0001343c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion

        Issue description:

    The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be  the precursor to buffer underwrite conditions. Buffer underwrites  occur frequently when large unsigned values are cast to signed values,  and then used as indexes into a buffer or for pointer arithmetic.

        40 - __n = (int)pcVar2 - (int)param_1

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_ip6parse_multiple_0001343c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-pointer-subtraction

        Issue description:

    The software subtracts one pointer from another in order to determine size, but this calculation can be incorrect if the pointers do not exist in the same memory chunk.

        40 - __n = (int)pcVar2 - (int)param_1;   //possible issue identified - semgrep

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_ip6parse_multiple_0001343c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        45 - strncpy(local_30,param_1,__n)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_ip6parse_multiple_0001343c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-unterminated-string-strncpy

        Issue description:

    If there is no NUL character byte in the first n bytes of the source string, strncpy() and stpncpy() do not NUL-terminate the destination buffer. If the program does not explicitly terminate the destination buffer, this will almost certainly result in information disclosure, and possibly a buffer overflow condition.

        45 - strncpy(local_30,param_1,__n);   //possible issue identified - semgrep

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_ip6parse_multiple_0001343c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion

        Issue description:

    The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be  the precursor to buffer underwrite conditions. Buffer underwrites  occur frequently when large unsigned values are cast to signed values,  and then used as indexes into a buffer or for pointer arithmetic.

        55 - memcpy((void *)(*param_3 + iVar5),pvVar4,0x10)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_ip6parse_multiple_0001343c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-insecure-api-strcpy-strcat

        Issue description:

    A buffer overflow condition exists when a program attempts to put more data in a buffer than it can hold, or when a program attempts to put data in a memory area outside of the boundaries of a buffer.

        58 - strcpy(local_30,(char *)0x5970)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_ip6parse_multiple_0001343c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        58 - strcpy(local_30,(char *)0x5970);   //possible issue identified - semgrep

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_ip6parse_multiple_0001343c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion

        Issue description:

    The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be  the precursor to buffer underwrite conditions. Buffer underwrites  occur frequently when large unsigned values are cast to signed values,  and then used as indexes into a buffer or for pointer arithmetic.

        62 - memcpy((void *)(*param_2 + iVar5),pvVar4,0x10)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_ip6parse_multiple_0001343c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        66 - iVar3 = xtables_realloc(*param_2,uVar8 * 0x10)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_ip6parse_multiple_0001343c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        68 - iVar3 = xtables_realloc(*param_3,uVar8 * 0x10)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_ip6parse_multiple_0001343c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion

        Issue description:

    The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be  the precursor to buffer underwrite conditions. Buffer underwrites  occur frequently when large unsigned values are cast to signed values,  and then used as indexes into a buffer or for pointer arithmetic.

        77 - memcpy((void *)(*param_2 + iVar3),__src,0x10)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_ip6parse_multiple_0001343c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion

        Issue description:

    The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be  the precursor to buffer underwrite conditions. Buffer underwrites  occur frequently when large unsigned values are cast to signed values,  and then used as indexes into a buffer or for pointer arithmetic.

        87 - memcpy((void *)(*param_3 + iVar3),(void *)(*param_3 + iVar5),0x10)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_ipaddr_to_numeric_00011a4c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-format-string-bugs

        Issue description:

    The software uses a function that accepts a format string as an argument, but the format string originates from an external source. This can lead  to buffer overflows, denial of service, or data representation problems.

        5 - sprintf(buf_5187,(char *)0x5698,(uint)*param_1,(uint)param_1[1],(uint)param_1[2],(uint)param_1[3])

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_ipaddr_to_numeric_00011a4c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        5 - sprintf(buf_5187,(char *)0x5698,(uint)*param_1,(uint)param_1[1],(uint)param_1[2],(uint)param_1[3])   //possible issue identified - semgrep

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_ipmask_to_numeric_00011ab0.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-format-string-bugs

        Issue description:

    The software uses a function that accepts a format string as an argument, but the format string originates from an external source. This can lead  to buffer overflows, denial of service, or data representation problems.

        34 - sprintf(buf_5237,__format,iVar5)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_ipmask_to_numeric_00011ab0.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-insecure-api-sprintf-vsprintf

        Issue description:

    A buffer overflow condition exists when a program attempts to put more data in a buffer than it can hold, or when a program attempts to put data in a memory area outside of the boundaries of a buffer.

        34 - sprintf(buf_5237,__format,iVar5);   //possible issue identified - semgrep

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_ipmask_to_numeric_00011ab0.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        34 - sprintf(buf_5237,__format,iVar5);   //possible issue identified - semgrep

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_ipparse_any_00014a80.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        19 - strncpy(acStack_118,param_1,0xff)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_ipparse_any_00014a80.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion

        Issue description:

    The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be  the precursor to buffer underwrite conditions. Buffer underwrites  occur frequently when large unsigned values are cast to signed values,  and then used as indexes into a buffer or for pointer arithmetic.

        19 - strncpy(acStack_118,param_1,0xff);   //possible issue identified - semgrep

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_ipparse_any_00014a80.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-unterminated-string-strncpy

        Issue description:

    If there is no NUL character byte in the first n bytes of the source string, strncpy() and stpncpy() do not NUL-terminate the destination buffer. If the program does not explicitly terminate the destination buffer, this will almost certainly result in information disclosure, and possibly a buffer overflow condition.

        19 - strncpy(acStack_118,param_1,0xff);   //possible issue identified - semgrep

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_ipparse_any_00014a80.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-insecure-api-strcpy-strcat

        Issue description:

    A buffer overflow condition exists when a program attempts to put more data in a buffer than it can hold, or when a program attempts to put data in a memory area outside of the boundaries of a buffer.

        33 - strcpy(acStack_118,(char *)0x5c4c)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_ipparse_any_00014a80.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        33 - strcpy(acStack_118,(char *)0x5c4c);   //possible issue identified - semgrep

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_ipparse_multiple_00014c0c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        30 - iVar3 = xtables_malloc(uVar8 << 2)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_ipparse_multiple_00014c0c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        32 - iVar3 = xtables_malloc(uVar8 << 2)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_ipparse_multiple_00014c0c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion

        Issue description:

    The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be  the precursor to buffer underwrite conditions. Buffer underwrites  occur frequently when large unsigned values are cast to signed values,  and then used as indexes into a buffer or for pointer arithmetic.

        40 - __n = (int)pcVar2 - (int)param_1

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_ipparse_multiple_00014c0c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-pointer-subtraction

        Issue description:

    The software subtracts one pointer from another in order to determine size, but this calculation can be incorrect if the pointers do not exist in the same memory chunk.

        40 - __n = (int)pcVar2 - (int)param_1;   //possible issue identified - semgrep

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_ipparse_multiple_00014c0c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        45 - strncpy(local_30,param_1,__n)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_ipparse_multiple_00014c0c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-unterminated-string-strncpy

        Issue description:

    If there is no NUL character byte in the first n bytes of the source string, strncpy() and stpncpy() do not NUL-terminate the destination buffer. If the program does not explicitly terminate the destination buffer, this will almost certainly result in information disclosure, and possibly a buffer overflow condition.

        45 - strncpy(local_30,param_1,__n);   //possible issue identified - semgrep

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_ipparse_multiple_00014c0c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion

        Issue description:

    The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be  the precursor to buffer underwrite conditions. Buffer underwrites  occur frequently when large unsigned values are cast to signed values,  and then used as indexes into a buffer or for pointer arithmetic.

        55 - memcpy((void *)(*param_3 + iVar3),pvVar4,4)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_ipparse_multiple_00014c0c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-insecure-api-strcpy-strcat

        Issue description:

    A buffer overflow condition exists when a program attempts to put more data in a buffer than it can hold, or when a program attempts to put data in a memory area outside of the boundaries of a buffer.

        57 - strcpy(local_30,(char *)0x5c4c)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_ipparse_multiple_00014c0c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        57 - strcpy(local_30,(char *)0x5c4c);   //possible issue identified - semgrep

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_ipparse_multiple_00014c0c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion

        Issue description:

    The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be  the precursor to buffer underwrite conditions. Buffer underwrites  occur frequently when large unsigned values are cast to signed values,  and then used as indexes into a buffer or for pointer arithmetic.

        61 - memcpy((void *)(*param_2 + iVar3),pvVar4,4)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_ipparse_multiple_00014c0c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        65 - iVar5 = xtables_realloc(*param_2,uVar8 * 4)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_ipparse_multiple_00014c0c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        67 - iVar5 = xtables_realloc(*param_3,uVar8 * 4)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_ipparse_multiple_00014c0c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion

        Issue description:

    The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be  the precursor to buffer underwrite conditions. Buffer underwrites  occur frequently when large unsigned values are cast to signed values,  and then used as indexes into a buffer or for pointer arithmetic.

        76 - memcpy((void *)(*param_2 + iVar5),__src,4)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_ipparse_multiple_00014c0c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion

        Issue description:

    The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be  the precursor to buffer underwrite conditions. Buffer underwrites  occur frequently when large unsigned values are cast to signed values,  and then used as indexes into a buffer or for pointer arithmetic.

        86 - memcpy((void *)(*param_3 + iVar5),(void *)(*param_3 + iVar3),4)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_malloc_00012fa4.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        7 - pvVar1 = malloc(param_1)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_merge_options_00014680.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion

        Issue description:

    The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be  the precursor to buffer underwrite conditions. Buffer underwrites  occur frequently when large unsigned values are cast to signed values,  and then used as indexes into a buffer or for pointer arithmetic.

        22 - __n = __n + 0x10

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_merge_options_00014680.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-wraparound

        Issue description:

    The software performs a calculation that can produce an integer overflow or wraparound, when the logic assumes that the resulting value will always be larger than the original value. This can introduce other weaknesses when the calculation is used for resource management or execution control.

        32 - __dest = malloc((uVar7 + iVar6 + 1) * 0x10)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_merge_options_00014680.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        32 - __dest = malloc((uVar7 + iVar6 + 1) * 0x10);   //possible issue identified - semgrep

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_merge_options_00014680.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        37 - memcpy(__dest,param_1,__n)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_merge_options_00014680.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion

        Issue description:

    The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be  the precursor to buffer underwrite conditions. Buffer underwrites  occur frequently when large unsigned values are cast to signed values,  and then used as indexes into a buffer or for pointer arithmetic.

        45 - memcpy(__dest_00,param_2,0x10)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_numeric_to_ip6addr_000119f0.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        8 - iVar1 = inet_pton(10,param_1,ap_5583)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_parse_interface_0001205c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion

        Issue description:

    The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be  the precursor to buffer underwrite conditions. Buffer underwrites  occur frequently when large unsigned values are cast to signed values,  and then used as indexes into a buffer or for pointer arithmetic.

        14 - memset(param_3,0,0x10)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_parse_interface_0001205c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion

        Issue description:

    The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be  the precursor to buffer underwrite conditions. Buffer underwrites  occur frequently when large unsigned values are cast to signed values,  and then used as indexes into a buffer or for pointer arithmetic.

        16 - memset(param_2,0,0x10)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_parse_interface_0001205c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-insecure-api-strcpy-strcat

        Issue description:

    A buffer overflow condition exists when a program attempts to put more data in a buffer than it can hold, or when a program attempts to put data in a memory area outside of the boundaries of a buffer.

        22 - strcpy(param_2,pcVar3)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_parse_interface_0001205c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        22 - strcpy(param_2,pcVar3);   //possible issue identified - semgrep

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_parse_interface_0001205c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion

        Issue description:

    The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be  the precursor to buffer underwrite conditions. Buffer underwrites  occur frequently when large unsigned values are cast to signed values,  and then used as indexes into a buffer or for pointer arithmetic.

        23 - __n = sVar2 - 1

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_parse_interface_0001205c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion

        Issue description:

    The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be  the precursor to buffer underwrite conditions. Buffer underwrites  occur frequently when large unsigned values are cast to signed values,  and then used as indexes into a buffer or for pointer arithmetic.

        25 - sVar2 = 0x10

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_parse_interface_0001205c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-format-string-bugs

        Issue description:

    The software uses a function that accepts a format string as an argument, but the format string originates from an external source. This can lead  to buffer overflows, denial of service, or data representation problems.

        40 - fprintf(_stderr,(char *)0x5780,param_2)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_parse_interface_0001205c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion

        Issue description:

    The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be  the precursor to buffer underwrite conditions. Buffer underwrites  occur frequently when large unsigned values are cast to signed values,  and then used as indexes into a buffer or for pointer arithmetic.

        45 - sVar2 = 0x11 - sVar2

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_realloc_00012f34.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        7 - pvVar1 = realloc(param_1,param_2)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_register_match_00013ac0.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-format-string-bugs

        Issue description:

    The software uses a function that accepts a format string as an argument, but the format string originates from an external source. This can lead  to buffer overflows, denial of service, or data representation problems.

        90 - fprintf(_stderr,pcVar7,uVar6,__s)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_register_match_00013ac0.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-format-string-bugs

        Issue description:

    The software uses a function that accepts a format string as an argument, but the format string originates from an external source. This can lead  to buffer overflows, denial of service, or data representation problems.

        97 - fprintf(_stderr,__format,uVar6,__s,pcVar7)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_register_target_000142e4.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-format-string-bugs

        Issue description:

    The software uses a function that accepts a format string as an argument, but the format string originates from an external source. This can lead  to buffer overflows, denial of service, or data representation problems.

        87 - fprintf(_stderr,pcVar8,uVar7,__s)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_register_target_000142e4.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-format-string-bugs

        Issue description:

    The software uses a function that accepts a format string as an argument, but the format string originates from an external source. This can lead  to buffer overflows, denial of service, or data representation problems.

        94 - fprintf(_stderr,__format,uVar7,__s,pcVar8)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_save_string_000117e0.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion

        Issue description:

    The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be  the precursor to buffer underwrite conditions. Buffer underwrites  occur frequently when large unsigned values are cast to signed values,  and then used as indexes into a buffer or for pointer arithmetic.

        10 - sVar1 = strcspn(param_1,(char *)0x5d84)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_save_string_000117e0.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-pointer-subtraction

        Issue description:

    The software subtracts one pointer from another in order to determine size, but this calculation can be incorrect if the pointers do not exist in the same memory chunk.

        22 - fwrite(param_1,1,(int)pcVar2 - (int)param_1,_stdout)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_save_string_000117e0.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-format-string-bugs

        Issue description:

    The software uses a function that accepts a format string as an argument, but the format string originates from an external source. This can lead  to buffer overflows, denial of service, or data representation problems.

        32 - printf((char *)0x5694)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libxtables.so.4.0.0/xtables_set_params_00012250.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-format-string-bugs

        Issue description:

    The software uses a function that accepts a format string as an argument, but the format string originates from an external source. This can lead  to buffer overflows, denial of service, or data representation problems.

        10 - fprintf(_stderr,(char *)0x57dc,0x5dc8)