[*] Binary protection state of libpthread-0.9.30.1.so
RELRO CANARY NX PIE RPATH RUNPATH SYMBOLS
Full RELRO No Canary found NX disabled DSO No RPATH No RUNPATH No Symbols
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libpthread-0.9.30.1.so/pthread_attr_getschedparam_00013890.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion
Issue description:
The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be the precursor to buffer underwrite conditions. Buffer underwrites occur frequently when large unsigned values are cast to signed values, and then used as indexes into a buffer or for pointer arithmetic.
5 - memcpy(__param,__attr->__size + 8,4)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libpthread-0.9.30.1.so/pthread_attr_setschedparam_000138d4.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion
Issue description:
The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be the precursor to buffer underwrite conditions. Buffer underwrites occur frequently when large unsigned values are cast to signed values, and then used as indexes into a buffer or for pointer arithmetic.
17 - memcpy(__attr->__size + 8,__param,4)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libpthread-0.9.30.1.so/pthread_cancel_00013e50.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
21 - cVar1 = *(char *)(iVar2 + 0x42)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libpthread-0.9.30.1.so/pthread_detach_00014a68.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
24 - cVar1 = *(char *)(iVar2 + 0x2c)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libpthread-0.9.30.1.so/FUN_00015544_00015544.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
38 - cVar1 = *(char *)((int)puVar5 + 0x2d)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libpthread-0.9.30.1.so/pthread_atfork_000171b8.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
10 - puVar2 = (undefined4 *)malloc(0x18)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libpthread-0.9.30.1.so/pthread_atfork_000171b8.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion
Issue description:
The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be the precursor to buffer underwrite conditions. Buffer underwrites occur frequently when large unsigned values are cast to signed values, and then used as indexes into a buffer or for pointer arithmetic.
10 - puVar2 = (undefined4 *)malloc(0x18); //possible issue identified - semgrep
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libpthread-0.9.30.1.so/fork_00016f80.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
21 - iVar1 = __libc_fork()
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libpthread-0.9.30.1.so/fork_00016f80.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
31 - __pthread_reset_main_thread()
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libpthread-0.9.30.1.so/__pthread_manager_00015744.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
48 - iVar1 = __libc_read(param_1,&local_d8,0x94)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libpthread-0.9.30.1.so/__pthread_manager_00015744.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
72 - __libc_read(param_1,local_2c,0x94)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libpthread-0.9.30.1.so/__pthread_manager_00015744.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion
Issue description:
The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be the precursor to buffer underwrite conditions. Buffer underwrites occur frequently when large unsigned values are cast to signed values, and then used as indexes into a buffer or for pointer arithmetic.
113 - __len = puVar9[5]
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libpthread-0.9.30.1.so/__pthread_manager_00015744.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion
Issue description:
The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be the precursor to buffer underwrite conditions. Buffer underwrites occur frequently when large unsigned values are cast to signed values, and then used as indexes into a buffer or for pointer arithmetic.
118 - memset(piVar2,0,0x1e0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libpthread-0.9.30.1.so/__pthread_manager_00015744.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion
Issue description:
The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be the precursor to buffer underwrite conditions. Buffer underwrites occur frequently when large unsigned values are cast to signed values, and then used as indexes into a buffer or for pointer arithmetic.
150 - memcpy(piVar2 + 0x3a,puVar9 + 2,4)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libpthread-0.9.30.1.so/__pthread_manager_00015744.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion
Issue description:
The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be the precursor to buffer underwrite conditions. Buffer underwrites occur frequently when large unsigned values are cast to signed values, and then used as indexes into a buffer or for pointer arithmetic.
159 - memcpy(piVar2 + 0x19,auStack_c4,0x80)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libpthread-0.9.30.1.so/sigaction_0001896c.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion
Issue description:
The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be the precursor to buffer underwrite conditions. Buffer underwrites occur frequently when large unsigned values are cast to signed values, and then used as indexes into a buffer or for pointer arithmetic.
20 - memcpy(auStack_a8,__act,0x90)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libpthread-0.9.30.1.so/pthread_sigmask_00018e44.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion
Issue description:
The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be the precursor to buffer underwrite conditions. Buffer underwrites occur frequently when large unsigned values are cast to signed values, and then used as indexes into a buffer or for pointer arithmetic.
14 - memcpy(__set,__newmask,0x80)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libpthread-0.9.30.1.so/pthread_setspecific_0001930c.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
13 - pvVar2 = calloc(0x20,4)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libpthread-0.9.30.1.so/pthread_setspecific_0001930c.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion
Issue description:
The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be the precursor to buffer underwrite conditions. Buffer underwrites occur frequently when large unsigned values are cast to signed values, and then used as indexes into a buffer or for pointer arithmetic.
13 - pvVar2 = calloc(0x20,4); //possible issue identified - semgrep
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libpthread-0.9.30.1.so/pthread_key_delete_000193fc.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
17 - cVar1 = (char)piVar2[0xb]
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libpthread-0.9.30.1.so/pthread_key_delete_000193fc.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
25 - cVar1 = *(char *)(piVar4 + 0xb)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libpthread-0.9.30.1.so/recvfrom_0001a0a0.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
9 - sVar1 = __libc_recvfrom(__fd,__buf,__n,__flags,__addr,__addr_len)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libpthread-0.9.30.1.so/recv_0001a150.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
9 - sVar1 = __libc_recv(__fd,__buf,__n,__flags)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libpthread-0.9.30.1.so/system_0001a510.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
9 - iVar1 = __libc_system(__command)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libpthread-0.9.30.1.so/__pthread_alt_timedlock_00019b28.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-unchecked-ret-malloc
Issue description:
The software does not check the return value from a method or function, which can prevent it from detecting unexpected states and conditions.
16 - if ((piVar1 == (int *)0x0) && (piVar1 = (int *)malloc(0xc), piVar1 == (int *)0x0)) {
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libpthread-0.9.30.1.so/__pthread_alt_timedlock_00019b28.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
16 - if ((piVar1 == (int *)0x0) && (piVar1 = (int *)malloc(0xc), piVar1 == (int *)0x0)) { //possible issue identified - semgrep
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libpthread-0.9.30.1.so/__pthread_alt_timedlock_00019b28.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion
Issue description:
The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be the precursor to buffer underwrite conditions. Buffer underwrites occur frequently when large unsigned values are cast to signed values, and then used as indexes into a buffer or for pointer arithmetic.
16 - if ((piVar1 == (int *)0x0) && (piVar1 = (int *)malloc(0xc), piVar1 == (int *)0x0)) { //possible issue identified - semgrep
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libpthread-0.9.30.1.so/read_0001a580.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
9 - sVar1 = __libc_read(__fd,__buf,__nbytes)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libpthread-0.9.30.1.so/pread_0001a750.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
9 - sVar1 = __libc_pread(__fd,__buf,__nbytes,__offset)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libpthread-0.9.30.1.so/open64_0001a85c.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
15 - iVar1 = __libc_open64(__file,__oflag,in_a2)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libpthread-0.9.30.1.so/msync_0001aa04.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion
Issue description:
The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be the precursor to buffer underwrite conditions. Buffer underwrites occur frequently when large unsigned values are cast to signed values, and then used as indexes into a buffer or for pointer arithmetic.
9 - iVar1 = __libc_msync(__addr,__len,__flags)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libpthread-0.9.30.1.so/open_0001a8f0.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
15 - iVar1 = __libc_open(__file,__oflag,in_a2)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libpthread-0.9.30.1.so/pthread_kill_other_threads_np_0001b32c.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
10 - __pthread_reset_main_thread()
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libpthread-0.9.30.1.so/__pthread_initialize_manager_0001b8a4.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-wraparound
Issue description:
The software performs a calculation that can produce an integer overflow or wraparound, when the logic assumes that the resulting value will always be larger than the original value. This can introduce other weaknesses when the calculation is used for resource management or execution control.
19 - __pthread_manager_thread_bos = malloc((___pagesize + 0x7ffffff0) * 2)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libpthread-0.9.30.1.so/__pthread_initialize_manager_0001b8a4.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
19 - __pthread_manager_thread_bos = malloc((___pagesize + 0x7ffffff0) * 2); //possible issue identified - semgrep
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libpthread-0.9.30.1.so/__pthread_initialize_manager_0001b8a4.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
25 - iVar1 = pipe((int *)&local_b8)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libpthread-0.9.30.1.so/FUN_00015544_00015544.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
38 - cVar1 = *(char *)((int)puVar5 + 0x2d)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libpthread-0.9.30.1.so/__pthread_alt_timedlock_00019b28.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-unchecked-ret-malloc
Issue description:
The software does not check the return value from a method or function, which can prevent it from detecting unexpected states and conditions.
16 - if ((piVar1 == (int *)0x0) && (piVar1 = (int *)malloc(0xc), piVar1 == (int *)0x0)) {
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libpthread-0.9.30.1.so/__pthread_alt_timedlock_00019b28.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
16 - if ((piVar1 == (int *)0x0) && (piVar1 = (int *)malloc(0xc), piVar1 == (int *)0x0)) { //possible issue identified - semgrep
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libpthread-0.9.30.1.so/__pthread_alt_timedlock_00019b28.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion
Issue description:
The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be the precursor to buffer underwrite conditions. Buffer underwrites occur frequently when large unsigned values are cast to signed values, and then used as indexes into a buffer or for pointer arithmetic.
16 - if ((piVar1 == (int *)0x0) && (piVar1 = (int *)malloc(0xc), piVar1 == (int *)0x0)) { //possible issue identified - semgrep
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libpthread-0.9.30.1.so/__pthread_initialize_manager_0001b8a4.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-wraparound
Issue description:
The software performs a calculation that can produce an integer overflow or wraparound, when the logic assumes that the resulting value will always be larger than the original value. This can introduce other weaknesses when the calculation is used for resource management or execution control.
19 - __pthread_manager_thread_bos = malloc((___pagesize + 0x7ffffff0) * 2)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libpthread-0.9.30.1.so/__pthread_initialize_manager_0001b8a4.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
19 - __pthread_manager_thread_bos = malloc((___pagesize + 0x7ffffff0) * 2); //possible issue identified - semgrep
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libpthread-0.9.30.1.so/__pthread_initialize_manager_0001b8a4.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
25 - iVar1 = pipe((int *)&local_b8)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libpthread-0.9.30.1.so/__pthread_manager_00015744.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
48 - iVar1 = __libc_read(param_1,&local_d8,0x94)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libpthread-0.9.30.1.so/__pthread_manager_00015744.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
72 - __libc_read(param_1,local_2c,0x94)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libpthread-0.9.30.1.so/__pthread_manager_00015744.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion
Issue description:
The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be the precursor to buffer underwrite conditions. Buffer underwrites occur frequently when large unsigned values are cast to signed values, and then used as indexes into a buffer or for pointer arithmetic.
113 - __len = puVar9[5]
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libpthread-0.9.30.1.so/__pthread_manager_00015744.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion
Issue description:
The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be the precursor to buffer underwrite conditions. Buffer underwrites occur frequently when large unsigned values are cast to signed values, and then used as indexes into a buffer or for pointer arithmetic.
118 - memset(piVar2,0,0x1e0)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libpthread-0.9.30.1.so/__pthread_manager_00015744.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion
Issue description:
The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be the precursor to buffer underwrite conditions. Buffer underwrites occur frequently when large unsigned values are cast to signed values, and then used as indexes into a buffer or for pointer arithmetic.
150 - memcpy(piVar2 + 0x3a,puVar9 + 2,4)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libpthread-0.9.30.1.so/__pthread_manager_00015744.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion
Issue description:
The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be the precursor to buffer underwrite conditions. Buffer underwrites occur frequently when large unsigned values are cast to signed values, and then used as indexes into a buffer or for pointer arithmetic.
159 - memcpy(piVar2 + 0x19,auStack_c4,0x80)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libpthread-0.9.30.1.so/fork_00016f80.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
21 - iVar1 = __libc_fork()
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libpthread-0.9.30.1.so/fork_00016f80.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
31 - __pthread_reset_main_thread()
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libpthread-0.9.30.1.so/msync_0001aa04.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion
Issue description:
The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be the precursor to buffer underwrite conditions. Buffer underwrites occur frequently when large unsigned values are cast to signed values, and then used as indexes into a buffer or for pointer arithmetic.
9 - iVar1 = __libc_msync(__addr,__len,__flags)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libpthread-0.9.30.1.so/open64_0001a85c.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
15 - iVar1 = __libc_open64(__file,__oflag,in_a2)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libpthread-0.9.30.1.so/open_0001a8f0.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
15 - iVar1 = __libc_open(__file,__oflag,in_a2)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libpthread-0.9.30.1.so/pread_0001a750.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
9 - sVar1 = __libc_pread(__fd,__buf,__nbytes,__offset)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libpthread-0.9.30.1.so/pthread_atfork_000171b8.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
10 - puVar2 = (undefined4 *)malloc(0x18)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libpthread-0.9.30.1.so/pthread_atfork_000171b8.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion
Issue description:
The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be the precursor to buffer underwrite conditions. Buffer underwrites occur frequently when large unsigned values are cast to signed values, and then used as indexes into a buffer or for pointer arithmetic.
10 - puVar2 = (undefined4 *)malloc(0x18); //possible issue identified - semgrep
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libpthread-0.9.30.1.so/pthread_attr_getschedparam_00013890.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion
Issue description:
The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be the precursor to buffer underwrite conditions. Buffer underwrites occur frequently when large unsigned values are cast to signed values, and then used as indexes into a buffer or for pointer arithmetic.
5 - memcpy(__param,__attr->__size + 8,4)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libpthread-0.9.30.1.so/pthread_attr_setschedparam_000138d4.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion
Issue description:
The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be the precursor to buffer underwrite conditions. Buffer underwrites occur frequently when large unsigned values are cast to signed values, and then used as indexes into a buffer or for pointer arithmetic.
17 - memcpy(__attr->__size + 8,__param,4)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libpthread-0.9.30.1.so/pthread_cancel_00013e50.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
21 - cVar1 = *(char *)(iVar2 + 0x42)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libpthread-0.9.30.1.so/pthread_detach_00014a68.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
24 - cVar1 = *(char *)(iVar2 + 0x2c)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libpthread-0.9.30.1.so/pthread_key_delete_000193fc.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
17 - cVar1 = (char)piVar2[0xb]
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libpthread-0.9.30.1.so/pthread_key_delete_000193fc.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation
Issue description:
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion. The value cannot be trusted and the application will be in an undefined state.
25 - cVar1 = *(char *)(piVar4 + 0xb)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libpthread-0.9.30.1.so/pthread_kill_other_threads_np_0001b32c.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
10 - __pthread_reset_main_thread()
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libpthread-0.9.30.1.so/pthread_setspecific_0001930c.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
13 - pvVar2 = calloc(0x20,4)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libpthread-0.9.30.1.so/pthread_setspecific_0001930c.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion
Issue description:
The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be the precursor to buffer underwrite conditions. Buffer underwrites occur frequently when large unsigned values are cast to signed values, and then used as indexes into a buffer or for pointer arithmetic.
13 - pvVar2 = calloc(0x20,4); //possible issue identified - semgrep
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libpthread-0.9.30.1.so/pthread_sigmask_00018e44.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion
Issue description:
The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be the precursor to buffer underwrite conditions. Buffer underwrites occur frequently when large unsigned values are cast to signed values, and then used as indexes into a buffer or for pointer arithmetic.
14 - memcpy(__set,__newmask,0x80)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libpthread-0.9.30.1.so/read_0001a580.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
9 - sVar1 = __libc_read(__fd,__buf,__nbytes)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libpthread-0.9.30.1.so/recv_0001a150.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
9 - sVar1 = __libc_recv(__fd,__buf,__n,__flags)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libpthread-0.9.30.1.so/recvfrom_0001a0a0.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
9 - sVar1 = __libc_recvfrom(__fd,__buf,__n,__flags,__addr,__addr_len)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libpthread-0.9.30.1.so/sigaction_0001896c.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion
Issue description:
The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be the precursor to buffer underwrite conditions. Buffer underwrites occur frequently when large unsigned values are cast to signed values, and then used as indexes into a buffer or for pointer arithmetic.
20 - memcpy(auStack_a8,__act,0x90)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libpthread-0.9.30.1.so/system_0001a510.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
9 - iVar1 = __libc_system(__command)
