[*] Binary protection state of librt-0.9.30.1.so
RELRO CANARY NX PIE RPATH RUNPATH SYMBOLS
No RELRO No Canary found NX disabled DSO No RPATH No RUNPATH No Symbols
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_librt-0.9.30.1.so/mq_getattr_00010638.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
9 - syscall(0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_librt-0.9.30.1.so/mq_setattr_000105e0.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
9 - syscall(0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_librt-0.9.30.1.so/mq_notify_00010660.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
10 - syscall(0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_librt-0.9.30.1.so/mq_open_000106f0.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
13 - syscall(0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_librt-0.9.30.1.so/FUN_000107a0_000107a0.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
10 - syscall(0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_librt-0.9.30.1.so/mq_unlink_00010940.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
10 - syscall(0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_librt-0.9.30.1.so/timer_delete_00010af0.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
10 - syscall(0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_librt-0.9.30.1.so/timer_getoverrun_00010b70.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
9 - syscall(0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_librt-0.9.30.1.so/timer_gettime_00010bd0.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
9 - syscall(0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_librt-0.9.30.1.so/timer_settime_00010c30.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
8 - syscall(0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_librt-0.9.30.1.so/timer_create_000109f0.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-unchecked-ret-malloc
Issue description:
The software does not check the return value from a method or function, which can prevent it from detecting unexpected states and conditions.
20 - (__ptr.sival_ptr = malloc(8), (sigval_t *)__ptr.sival_int != (sigval_t *)0x0)) {
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_librt-0.9.30.1.so/timer_create_000109f0.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
20 - (__ptr.sival_ptr = malloc(8), (sigval_t *)__ptr.sival_int != (sigval_t *)0x0)) { //possible issue identified - semgrep
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_librt-0.9.30.1.so/timer_create_000109f0.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion
Issue description:
The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be the precursor to buffer underwrite conditions. Buffer underwrites occur frequently when large unsigned values are cast to signed values, and then used as indexes into a buffer or for pointer arithmetic.
20 - (__ptr.sival_ptr = malloc(8), (sigval_t *)__ptr.sival_int != (sigval_t *)0x0)) { //possible issue identified - semgrep
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_librt-0.9.30.1.so/timer_create_000109f0.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
21 - syscall(0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_librt-0.9.30.1.so/FUN_000107a0_000107a0.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
10 - syscall(0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_librt-0.9.30.1.so/mq_getattr_00010638.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
9 - syscall(0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_librt-0.9.30.1.so/mq_notify_00010660.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
10 - syscall(0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_librt-0.9.30.1.so/mq_open_000106f0.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
13 - syscall(0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_librt-0.9.30.1.so/mq_setattr_000105e0.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
9 - syscall(0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_librt-0.9.30.1.so/mq_unlink_00010940.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
10 - syscall(0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_librt-0.9.30.1.so/timer_create_000109f0.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-unchecked-ret-malloc
Issue description:
The software does not check the return value from a method or function, which can prevent it from detecting unexpected states and conditions.
20 - (__ptr.sival_ptr = malloc(8), (sigval_t *)__ptr.sival_int != (sigval_t *)0x0)) {
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_librt-0.9.30.1.so/timer_create_000109f0.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
20 - (__ptr.sival_ptr = malloc(8), (sigval_t *)__ptr.sival_int != (sigval_t *)0x0)) { //possible issue identified - semgrep
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_librt-0.9.30.1.so/timer_create_000109f0.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion
Issue description:
The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be the precursor to buffer underwrite conditions. Buffer underwrites occur frequently when large unsigned values are cast to signed values, and then used as indexes into a buffer or for pointer arithmetic.
20 - (__ptr.sival_ptr = malloc(8), (sigval_t *)__ptr.sival_int != (sigval_t *)0x0)) { //possible issue identified - semgrep
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_librt-0.9.30.1.so/timer_create_000109f0.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
21 - syscall(0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_librt-0.9.30.1.so/timer_delete_00010af0.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
10 - syscall(0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_librt-0.9.30.1.so/timer_getoverrun_00010b70.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
9 - syscall(0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_librt-0.9.30.1.so/timer_gettime_00010bd0.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
9 - syscall(0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_librt-0.9.30.1.so/timer_settime_00010c30.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
8 - syscall(0)
