[*] Binary protection state of rt3052esw
RELRO CANARY NX PIE RPATH RUNPATH SYMBOLS
No RELRO No Canary found NX disabled No PIE No RPATH No RUNPATH No Symbols
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_rt3052esw/FUN_00400954_00400954.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
9 - __stream = fopen("/proc/rt3052/mii/ctrl","w")
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_rt3052esw/main_00400a38.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
32 - while (iVar2 = getopt(param_1,param_2,"i:vh"), 0 < iVar2) {
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_rt3052esw/main_00400a38.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
73 - while (iVar2 = getopt(param_1,param_2,"i:d:vh"), pcVar1 = _optarg, 0 < iVar2) {
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_rt3052esw/FUN_00400f94_00400f94.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
16 - pFVar2 = fopen("/proc/rt3052/mii/ctrl","w")
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_rt3052esw/FUN_00400f94_00400f94.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
23 - pFVar2 = fopen("/proc/rt3052/mii/data","r")
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_rt3052esw/FUN_00400f94_00400f94.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
28 - fread(local_58,1,0x40,pFVar2)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_rt3052esw/FUN_00400f94_00400f94.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion
Issue description:
The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be the precursor to buffer underwrite conditions. Buffer underwrites occur frequently when large unsigned values are cast to signed values, and then used as indexes into a buffer or for pointer arithmetic.
28 - fread(local_58,1,0x40,pFVar2); //possible issue identified - semgrep
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_rt3052esw/FUN_00400954_00400954.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
9 - __stream = fopen("/proc/rt3052/mii/ctrl","w")
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_rt3052esw/FUN_00400f94_00400f94.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
16 - pFVar2 = fopen("/proc/rt3052/mii/ctrl","w")
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_rt3052esw/FUN_00400f94_00400f94.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
23 - pFVar2 = fopen("/proc/rt3052/mii/data","r")
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_rt3052esw/FUN_00400f94_00400f94.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
28 - fread(local_58,1,0x40,pFVar2)
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_rt3052esw/FUN_00400f94_00400f94.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion
Issue description:
The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be the precursor to buffer underwrite conditions. Buffer underwrites occur frequently when large unsigned values are cast to signed values, and then used as indexes into a buffer or for pointer arithmetic.
28 - fread(local_58,1,0x40,pFVar2); //possible issue identified - semgrep
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_rt3052esw/main_00400a38.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
32 - while (iVar2 = getopt(param_1,param_2,"i:vh"), 0 < iVar2) {
[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_rt3052esw/main_00400a38.c
Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls
Issue description:
Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.
73 - while (iVar2 = getopt(param_1,param_2,"i:d:vh"), pcVar1 = _optarg, 0 < iVar2) {
