[*] Binary protection state of gpiod

  	RELRO          CANARY            NX           PIE          RPATH        RUNPATH      SYMBOLS      

  	No RELRO       No Canary found   NX disabled  No PIE       No RPATH     No RUNPATH   Symbols

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/freset_handler_00401ed4.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        35 - mysystem(pcVar2)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/gpio_test_00401ad8.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        8 - __stream = fopen("/var/gpio_ctrl_result","w")

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/wpspb_handler_00402024.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        17 - mysystem("event WPSPBC.PUSH")

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/main_00401624.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        12 - iVar1 = getopt(param_1,param_2,"hdf:")

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/main_00401624.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        35 - usock_data = usock_open(1,"/var/gpio_ctrl")

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/usock_handler_00401b7c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion

        Issue description:

    The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be  the precursor to buffer underwrite conditions. Buffer underwrites  occur frequently when large unsigned values are cast to signed values,  and then used as indexes into a buffer or for pointer arithmetic.

        9 - memset(acStack_110,0,0x100)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/usock_handler_00401b7c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        10 - iVar1 = usock_recv(*param_2,acStack_110,0x100,0)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/getportlinkstatus_004023c0.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        10 - __fd = open("/dev/gpio",0)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/gpio_in_00402464.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        10 - __fd = open("/dev/gpio",0)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/_gpio_ioc_set_00402524.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        8 - __fd = open("/dev/gpio",0)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/wan_handler_004022e8.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        7 - mii_read(4,1)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/wan_handler_004022e8.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        8 - uVar1 = mii_read(4,1)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/wan_handler_004022e8.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        13 - mysystem("event WANPORT.LINKDOWN")

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/wan_handler_004022e8.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        19 - mysystem("event WANPORT.LINKUP")

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/mii_read_00402170.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        11 - pFVar1 = fopen("/proc/rt3052/mii/ctrl","w")

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/mii_read_00402170.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        19 - pFVar1 = fopen("/proc/rt3052/mii/data","r")

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/mii_read_00402170.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        25 - fread(acStack_58,1,0x40,pFVar1)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/mii_read_00402170.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion

        Issue description:

    The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be  the precursor to buffer underwrite conditions. Buffer underwrites  occur frequently when large unsigned values are cast to signed values,  and then used as indexes into a buffer or for pointer arithmetic.

        25 - fread(acStack_58,1,0x40,pFVar1);   //possible issue identified - semgrep

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/sloop_register_signal_00403530.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-insecure-api-signal

        Issue description:

    The signal() API should be regarded as deprecated. When possible, sigaction() should be used instead, because it allows to precisely specify the desired behavior in case two signals arrive shortly after each other thus preventing many race conditions.

        25 - signal(param_1,sloop_signals_handler)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/sloop_cancel_signal_00402df8.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-insecure-api-signal

        Issue description:

    The signal() API should be regarded as deprecated. When possible, sigaction() should be used instead, because it allows to precisely specify the desired behavior in case two signals arrive shortly after each other thus preventing many race conditions.

        12 - signal(DAT_00417da8[3],(__sighandler_t)0x0)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/sloop_cancel_signal_00402df8.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-insecure-api-signal

        Issue description:

    The signal() API should be regarded as deprecated. When possible, sigaction() should be used instead, because it allows to precisely specify the desired behavior in case two signals arrive shortly after each other thus preventing many race conditions.

        27 - signal(param_1[3],(__sighandler_t)0x0)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/sloop_run_00402f1c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        98 - ((sVar4 = read(DAT_00417d74,&local_140,4), -1 < sVar4 &&

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/sloop_run_00402f1c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion

        Issue description:

    The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be  the precursor to buffer underwrite conditions. Buffer underwrites  occur frequently when large unsigned values are cast to signed values,  and then used as indexes into a buffer or for pointer arithmetic.

        98 - ((sVar4 = read(DAT_00417d74,&local_140,4), -1 < sVar4 &&   //possible issue identified - semgrep

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/usock_recv_timed_00403918.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        24 - usock_recv(param_1,param_2,param_3,param_4)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/usock_close_00403a74.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        14 - unlink((char *)__name)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/usock_recv_004038ac.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        8 - recv(*param_1,param_2,param_3,param_4)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/usock_recv_004038ac.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        12 - recvfrom(*param_1,param_2,param_3,param_4,(sockaddr *)((int)param_1 + 0x76),local_10)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/lxmldbc_reatwhite_00403d60.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion

        Issue description:

    The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be  the precursor to buffer underwrite conditions. Buffer underwrites  occur frequently when large unsigned values are cast to signed values,  and then used as indexes into a buffer or for pointer arithmetic.

        12 - (sVar2 = sVar2 - 1, -1 < (int)sVar2 &&

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/lxmldbc_reatwhite_00403d60.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation

        Issue description:

    Truncation errors occur when a primitive is cast to a primitive of a  smaller size and data is lost in the conversion. The value cannot be  trusted and the application will be in an undefined state.

        13 - ((((cVar1 = pcVar3[-1], cVar1 == ' ' || (cVar1 == '	')) || (cVar1 == '

    ')) ||

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/__open_socket_00403dfc.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        19 - snprintf(local_80[0].sa_data,0x6c,"%s",param_1)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/__open_socket_00403dfc.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion

        Issue description:

    The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be  the precursor to buffer underwrite conditions. Buffer underwrites  occur frequently when large unsigned values are cast to signed values,  and then used as indexes into a buffer or for pointer arithmetic.

        19 - snprintf(local_80[0].sa_data,0x6c,"%s",param_1);   //possible issue identified - semgrep

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/_cmd_wo_out_00403f7c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        19 - read(__fd,auStack_28,0xc)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/_cmd_wo_out_00403f7c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion

        Issue description:

    The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be  the precursor to buffer underwrite conditions. Buffer underwrites  occur frequently when large unsigned values are cast to signed values,  and then used as indexes into a buffer or for pointer arithmetic.

        19 - read(__fd,auStack_28,0xc);   //possible issue identified - semgrep

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/sloop_init_0040361c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion

        Issue description:

    The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be  the precursor to buffer underwrite conditions. Buffer underwrites  occur frequently when large unsigned values are cast to signed values,  and then used as indexes into a buffer or for pointer arithmetic.

        10 - memset(&sloop,0,0x48)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/sloop_init_0040361c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion

        Issue description:

    The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be  the precursor to buffer underwrite conditions. Buffer underwrites  occur frequently when large unsigned values are cast to signed values,  and then used as indexes into a buffer or for pointer arithmetic.

        26 - memset(&_sloop_sockets,0,0xc00)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/sloop_init_0040361c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion

        Issue description:

    The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be  the precursor to buffer underwrite conditions. Buffer underwrites  occur frequently when large unsigned values are cast to signed values,  and then used as indexes into a buffer or for pointer arithmetic.

        27 - memset(&_sloop_timeout,0,0xe00)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/sloop_init_0040361c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion

        Issue description:

    The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be  the precursor to buffer underwrite conditions. Buffer underwrites  occur frequently when large unsigned values are cast to signed values,  and then used as indexes into a buffer or for pointer arithmetic.

        28 - memset(&_sloop_signals,0,0x180)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/sloop_init_0040361c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        67 - pipe(&DAT_00417d74)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/xmldbc_ephp_wb_00404554.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion

        Issue description:

    The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be  the precursor to buffer underwrite conditions. Buffer underwrites  occur frequently when large unsigned values are cast to signed values,  and then used as indexes into a buffer or for pointer arithmetic.

        16 - iVar2 = send_xmldb_cmd(__fd,10,param_2,param_3,sVar1 + 1 & 0xffff)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/redirect_to_buffer_00404420.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        27 - sVar3 = read(param_1,(void *)(param_2 + uVar4),param_3 - uVar4)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/xmldbc_get_wb_00404628.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion

        Issue description:

    The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be  the precursor to buffer underwrite conditions. Buffer underwrites  occur frequently when large unsigned values are cast to signed values,  and then used as indexes into a buffer or for pointer arithmetic.

        16 - iVar2 = send_xmldb_cmd(__fd,1,param_2,param_3,sVar1 + 1 & 0xffff)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/xmldbc_setext_004042e0.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        9 - snprintf(acStack_210,0x1ff,"%s %s",param_3,param_4)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/xmldbc_setext_004042e0.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion

        Issue description:

    The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be  the precursor to buffer underwrite conditions. Buffer underwrites  occur frequently when large unsigned values are cast to signed values,  and then used as indexes into a buffer or for pointer arithmetic.

        9 - snprintf(acStack_210,0x1ff,"%s %s",param_3,param_4);   //possible issue identified - semgrep

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/xmldbc_set_00404380.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        9 - snprintf(acStack_210,0x1ff,"%s %s",param_3,param_4)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/xmldbc_set_00404380.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion

        Issue description:

    The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be  the precursor to buffer underwrite conditions. Buffer underwrites  occur frequently when large unsigned values are cast to signed values,  and then used as indexes into a buffer or for pointer arithmetic.

        9 - snprintf(acStack_210,0x1ff,"%s %s",param_3,param_4);   //possible issue identified - semgrep

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/redirect_output_004046fc.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion

        Issue description:

    The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be  the precursor to buffer underwrite conditions. Buffer underwrites  occur frequently when large unsigned values are cast to signed values,  and then used as indexes into a buffer or for pointer arithmetic.

        28 - sVar2 = read(param_1,__s,0x400)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/redirect_output_004046fc.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        28 - sVar2 = read(param_1,__s,0x400);   //possible issue identified - semgrep

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/redirect_output_004046fc.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion

        Issue description:

    The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be  the precursor to buffer underwrite conditions. Buffer underwrites  occur frequently when large unsigned values are cast to signed values,  and then used as indexes into a buffer or for pointer arithmetic.

        28 - sVar2 = read(param_1,__s,0x400);   //possible issue identified - semgrep

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/usock_open_00403af4.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        13 - __s = (int *)malloc(0xe4)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/usock_open_00403af4.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion

        Issue description:

    The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be  the precursor to buffer underwrite conditions. Buffer underwrites  occur frequently when large unsigned values are cast to signed values,  and then used as indexes into a buffer or for pointer arithmetic.

        13 - __s = (int *)malloc(0xe4);   //possible issue identified - semgrep

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/usock_open_00403af4.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion

        Issue description:

    The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be  the precursor to buffer underwrite conditions. Buffer underwrites  occur frequently when large unsigned values are cast to signed values,  and then used as indexes into a buffer or for pointer arithmetic.

        15 - memset(__s,0,0xe4)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/usock_open_00403af4.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        20 - snprintf((char *)((int)__s + 10),0x6c,"%s",param_2)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/usock_open_00403af4.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion

        Issue description:

    The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be  the precursor to buffer underwrite conditions. Buffer underwrites  occur frequently when large unsigned values are cast to signed values,  and then used as indexes into a buffer or for pointer arithmetic.

        20 - snprintf((char *)((int)__s + 10),0x6c,"%s",param_2);   //possible issue identified - semgrep

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/usock_open_00403af4.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        23 - snprintf((char *)(__s + 0x1e),0x6c,"%s_reply",param_2)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/usock_open_00403af4.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion

        Issue description:

    The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be  the precursor to buffer underwrite conditions. Buffer underwrites  occur frequently when large unsigned values are cast to signed values,  and then used as indexes into a buffer or for pointer arithmetic.

        23 - snprintf((char *)(__s + 0x1e),0x6c,"%s_reply",param_2);   //possible issue identified - semgrep

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/usock_open_00403af4.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        24 - unlink((char *)(__s + 0x1e))

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/usock_open_00403af4.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        32 - unlink((char *)((int)__s + 10))

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/usock_open_00403af4.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        48 - unlink((char *)__name)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/lxmldbc_system_00404ad4.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-format-string-bugs

        Issue description:

    The software uses a function that accepts a format string as an argument, but the format string originates from an external source. This can lead  to buffer overflows, denial of service, or data representation problems.

        13 - vsnprintf(acStack_40c,0x400,param_1,&local_res4)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/lxmldbc_system_00404ad4.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        13 - vsnprintf(acStack_40c,0x400,param_1,&local_res4);   //possible issue identified - semgrep

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/lxmldbc_system_00404ad4.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion

        Issue description:

    The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be  the precursor to buffer underwrite conditions. Buffer underwrites  occur frequently when large unsigned values are cast to signed values,  and then used as indexes into a buffer or for pointer arithmetic.

        13 - vsnprintf(acStack_40c,0x400,param_1,&local_res4);   //possible issue identified - semgrep

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/lxmldbc_system_00404ad4.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-command-injection

        Issue description:

    The software constructs an OS command using externally-influenced input,  but it does not neutralize or incorrectly neutralizes special elements  that could modify the intended OS command.

        14 - system(acStack_40c)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/lxmldbc_system_00404ad4.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        14 - system(acStack_40c);   //possible issue identified - semgrep

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/lxmldbc_run_shell_00404b48.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-format-string-bugs

        Issue description:

    The software uses a function that accepts a format string as an argument, but the format string originates from an external source. This can lead  to buffer overflows, denial of service, or data representation problems.

        14 - vsnprintf(acStack_41c,0x400,param_3,&local_resc)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/lxmldbc_run_shell_00404b48.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        14 - vsnprintf(acStack_41c,0x400,param_3,&local_resc);   //possible issue identified - semgrep

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/lxmldbc_run_shell_00404b48.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion

        Issue description:

    The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be  the precursor to buffer underwrite conditions. Buffer underwrites  occur frequently when large unsigned values are cast to signed values,  and then used as indexes into a buffer or for pointer arithmetic.

        14 - vsnprintf(acStack_41c,0x400,param_3,&local_resc);   //possible issue identified - semgrep

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/lxmldbc_run_shell_00404b48.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-command-injection

        Issue description:

    The software constructs an OS command using externally-influenced input,  but it does not neutralize or incorrectly neutralizes special elements  that could modify the intended OS command.

        15 - __stream = popen(acStack_41c,"r")

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/lxmldbc_run_shell_00404b48.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        15 - __stream = popen(acStack_41c,"r");   //possible issue identified - semgrep

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/lxmldbc_run_shell_00404b48.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        22 - iVar1 = fgetc(__stream)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/lxmldbc_run_shell_00404b48.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-off-by-one

        Issue description:

    The software calculates or uses an incorrect maximum or minimum value that is 1 more, or 1 less, than the correct value.

        30 - if (param_1[sVar2 - 1] == '

    ') {

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/lxmldbc_run_shell_00404b48.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-off-by-one

        Issue description:

    The software calculates or uses an incorrect maximum or minimum value that is 1 more, or 1 less, than the correct value.

        31 - param_1[sVar2 - 1] = ''

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/__open_socket_00403dfc.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        19 - snprintf(local_80[0].sa_data,0x6c,"%s",param_1)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/__open_socket_00403dfc.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion

        Issue description:

    The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be  the precursor to buffer underwrite conditions. Buffer underwrites  occur frequently when large unsigned values are cast to signed values,  and then used as indexes into a buffer or for pointer arithmetic.

        19 - snprintf(local_80[0].sa_data,0x6c,"%s",param_1);   //possible issue identified - semgrep

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/_cmd_wo_out_00403f7c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        19 - read(__fd,auStack_28,0xc)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/_cmd_wo_out_00403f7c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion

        Issue description:

    The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be  the precursor to buffer underwrite conditions. Buffer underwrites  occur frequently when large unsigned values are cast to signed values,  and then used as indexes into a buffer or for pointer arithmetic.

        19 - read(__fd,auStack_28,0xc);   //possible issue identified - semgrep

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/_gpio_ioc_set_00402524.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        8 - __fd = open("/dev/gpio",0)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/freset_handler_00401ed4.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        35 - mysystem(pcVar2)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/getportlinkstatus_004023c0.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        10 - __fd = open("/dev/gpio",0)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/gpio_in_00402464.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        10 - __fd = open("/dev/gpio",0)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/gpio_test_00401ad8.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        8 - __stream = fopen("/var/gpio_ctrl_result","w")

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/lxmldbc_reatwhite_00403d60.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion

        Issue description:

    The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be  the precursor to buffer underwrite conditions. Buffer underwrites  occur frequently when large unsigned values are cast to signed values,  and then used as indexes into a buffer or for pointer arithmetic.

        12 - (sVar2 = sVar2 - 1, -1 < (int)sVar2 &&

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/lxmldbc_reatwhite_00403d60.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-integer-truncation

        Issue description:

    Truncation errors occur when a primitive is cast to a primitive of a  smaller size and data is lost in the conversion. The value cannot be  trusted and the application will be in an undefined state.

        13 - ((((cVar1 = pcVar3[-1], cVar1 == ' ' || (cVar1 == '	')) || (cVar1 == '

    ')) ||

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/lxmldbc_run_shell_00404b48.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-format-string-bugs

        Issue description:

    The software uses a function that accepts a format string as an argument, but the format string originates from an external source. This can lead  to buffer overflows, denial of service, or data representation problems.

        14 - vsnprintf(acStack_41c,0x400,param_3,&local_resc)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/lxmldbc_run_shell_00404b48.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        14 - vsnprintf(acStack_41c,0x400,param_3,&local_resc);   //possible issue identified - semgrep

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/lxmldbc_run_shell_00404b48.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion

        Issue description:

    The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be  the precursor to buffer underwrite conditions. Buffer underwrites  occur frequently when large unsigned values are cast to signed values,  and then used as indexes into a buffer or for pointer arithmetic.

        14 - vsnprintf(acStack_41c,0x400,param_3,&local_resc);   //possible issue identified - semgrep

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/lxmldbc_run_shell_00404b48.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-command-injection

        Issue description:

    The software constructs an OS command using externally-influenced input,  but it does not neutralize or incorrectly neutralizes special elements  that could modify the intended OS command.

        15 - __stream = popen(acStack_41c,"r")

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/lxmldbc_run_shell_00404b48.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        15 - __stream = popen(acStack_41c,"r");   //possible issue identified - semgrep

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/lxmldbc_run_shell_00404b48.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        22 - iVar1 = fgetc(__stream)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/lxmldbc_run_shell_00404b48.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-off-by-one

        Issue description:

    The software calculates or uses an incorrect maximum or minimum value that is 1 more, or 1 less, than the correct value.

        30 - if (param_1[sVar2 - 1] == '

    ') {

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/lxmldbc_run_shell_00404b48.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-off-by-one

        Issue description:

    The software calculates or uses an incorrect maximum or minimum value that is 1 more, or 1 less, than the correct value.

        31 - param_1[sVar2 - 1] = ''

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/lxmldbc_system_00404ad4.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-format-string-bugs

        Issue description:

    The software uses a function that accepts a format string as an argument, but the format string originates from an external source. This can lead  to buffer overflows, denial of service, or data representation problems.

        13 - vsnprintf(acStack_40c,0x400,param_1,&local_res4)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/lxmldbc_system_00404ad4.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        13 - vsnprintf(acStack_40c,0x400,param_1,&local_res4);   //possible issue identified - semgrep

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/lxmldbc_system_00404ad4.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion

        Issue description:

    The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be  the precursor to buffer underwrite conditions. Buffer underwrites  occur frequently when large unsigned values are cast to signed values,  and then used as indexes into a buffer or for pointer arithmetic.

        13 - vsnprintf(acStack_40c,0x400,param_1,&local_res4);   //possible issue identified - semgrep

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/lxmldbc_system_00404ad4.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-command-injection

        Issue description:

    The software constructs an OS command using externally-influenced input,  but it does not neutralize or incorrectly neutralizes special elements  that could modify the intended OS command.

        14 - system(acStack_40c)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/lxmldbc_system_00404ad4.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        14 - system(acStack_40c);   //possible issue identified - semgrep

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/main_00401624.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        12 - iVar1 = getopt(param_1,param_2,"hdf:")

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/main_00401624.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        35 - usock_data = usock_open(1,"/var/gpio_ctrl")

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/mii_read_00402170.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        11 - pFVar1 = fopen("/proc/rt3052/mii/ctrl","w")

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/mii_read_00402170.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        19 - pFVar1 = fopen("/proc/rt3052/mii/data","r")

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/mii_read_00402170.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        25 - fread(acStack_58,1,0x40,pFVar1)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/mii_read_00402170.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion

        Issue description:

    The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be  the precursor to buffer underwrite conditions. Buffer underwrites  occur frequently when large unsigned values are cast to signed values,  and then used as indexes into a buffer or for pointer arithmetic.

        25 - fread(acStack_58,1,0x40,pFVar1);   //possible issue identified - semgrep

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/redirect_output_004046fc.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion

        Issue description:

    The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be  the precursor to buffer underwrite conditions. Buffer underwrites  occur frequently when large unsigned values are cast to signed values,  and then used as indexes into a buffer or for pointer arithmetic.

        28 - sVar2 = read(param_1,__s,0x400)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/redirect_output_004046fc.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        28 - sVar2 = read(param_1,__s,0x400);   //possible issue identified - semgrep

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/redirect_output_004046fc.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion

        Issue description:

    The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be  the precursor to buffer underwrite conditions. Buffer underwrites  occur frequently when large unsigned values are cast to signed values,  and then used as indexes into a buffer or for pointer arithmetic.

        28 - sVar2 = read(param_1,__s,0x400);   //possible issue identified - semgrep

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/redirect_to_buffer_00404420.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        27 - sVar3 = read(param_1,(void *)(param_2 + uVar4),param_3 - uVar4)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/sloop_cancel_signal_00402df8.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-insecure-api-signal

        Issue description:

    The signal() API should be regarded as deprecated. When possible, sigaction() should be used instead, because it allows to precisely specify the desired behavior in case two signals arrive shortly after each other thus preventing many race conditions.

        12 - signal(DAT_00417da8[3],(__sighandler_t)0x0)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/sloop_cancel_signal_00402df8.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-insecure-api-signal

        Issue description:

    The signal() API should be regarded as deprecated. When possible, sigaction() should be used instead, because it allows to precisely specify the desired behavior in case two signals arrive shortly after each other thus preventing many race conditions.

        27 - signal(param_1[3],(__sighandler_t)0x0)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/sloop_init_0040361c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion

        Issue description:

    The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be  the precursor to buffer underwrite conditions. Buffer underwrites  occur frequently when large unsigned values are cast to signed values,  and then used as indexes into a buffer or for pointer arithmetic.

        10 - memset(&sloop,0,0x48)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/sloop_init_0040361c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion

        Issue description:

    The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be  the precursor to buffer underwrite conditions. Buffer underwrites  occur frequently when large unsigned values are cast to signed values,  and then used as indexes into a buffer or for pointer arithmetic.

        26 - memset(&_sloop_sockets,0,0xc00)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/sloop_init_0040361c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion

        Issue description:

    The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be  the precursor to buffer underwrite conditions. Buffer underwrites  occur frequently when large unsigned values are cast to signed values,  and then used as indexes into a buffer or for pointer arithmetic.

        27 - memset(&_sloop_timeout,0,0xe00)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/sloop_init_0040361c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion

        Issue description:

    The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be  the precursor to buffer underwrite conditions. Buffer underwrites  occur frequently when large unsigned values are cast to signed values,  and then used as indexes into a buffer or for pointer arithmetic.

        28 - memset(&_sloop_signals,0,0x180)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/sloop_init_0040361c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        67 - pipe(&DAT_00417d74)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/sloop_register_signal_00403530.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-insecure-api-signal

        Issue description:

    The signal() API should be regarded as deprecated. When possible, sigaction() should be used instead, because it allows to precisely specify the desired behavior in case two signals arrive shortly after each other thus preventing many race conditions.

        25 - signal(param_1,sloop_signals_handler)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/sloop_run_00402f1c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        98 - ((sVar4 = read(DAT_00417d74,&local_140,4), -1 < sVar4 &&

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/sloop_run_00402f1c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion

        Issue description:

    The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be  the precursor to buffer underwrite conditions. Buffer underwrites  occur frequently when large unsigned values are cast to signed values,  and then used as indexes into a buffer or for pointer arithmetic.

        98 - ((sVar4 = read(DAT_00417d74,&local_140,4), -1 < sVar4 &&   //possible issue identified - semgrep

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/usock_close_00403a74.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        14 - unlink((char *)__name)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/usock_handler_00401b7c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion

        Issue description:

    The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be  the precursor to buffer underwrite conditions. Buffer underwrites  occur frequently when large unsigned values are cast to signed values,  and then used as indexes into a buffer or for pointer arithmetic.

        9 - memset(acStack_110,0,0x100)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/usock_handler_00401b7c.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        10 - iVar1 = usock_recv(*param_2,acStack_110,0x100,0)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/usock_open_00403af4.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        13 - __s = (int *)malloc(0xe4)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/usock_open_00403af4.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion

        Issue description:

    The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be  the precursor to buffer underwrite conditions. Buffer underwrites  occur frequently when large unsigned values are cast to signed values,  and then used as indexes into a buffer or for pointer arithmetic.

        13 - __s = (int *)malloc(0xe4);   //possible issue identified - semgrep

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/usock_open_00403af4.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion

        Issue description:

    The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be  the precursor to buffer underwrite conditions. Buffer underwrites  occur frequently when large unsigned values are cast to signed values,  and then used as indexes into a buffer or for pointer arithmetic.

        15 - memset(__s,0,0xe4)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/usock_open_00403af4.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        20 - snprintf((char *)((int)__s + 10),0x6c,"%s",param_2)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/usock_open_00403af4.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion

        Issue description:

    The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be  the precursor to buffer underwrite conditions. Buffer underwrites  occur frequently when large unsigned values are cast to signed values,  and then used as indexes into a buffer or for pointer arithmetic.

        20 - snprintf((char *)((int)__s + 10),0x6c,"%s",param_2);   //possible issue identified - semgrep

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/usock_open_00403af4.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        23 - snprintf((char *)(__s + 0x1e),0x6c,"%s_reply",param_2)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/usock_open_00403af4.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion

        Issue description:

    The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be  the precursor to buffer underwrite conditions. Buffer underwrites  occur frequently when large unsigned values are cast to signed values,  and then used as indexes into a buffer or for pointer arithmetic.

        23 - snprintf((char *)(__s + 0x1e),0x6c,"%s_reply",param_2);   //possible issue identified - semgrep

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/usock_open_00403af4.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        24 - unlink((char *)(__s + 0x1e))

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/usock_open_00403af4.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        32 - unlink((char *)((int)__s + 10))

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/usock_open_00403af4.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        48 - unlink((char *)__name)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/usock_recv_004038ac.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        8 - recv(*param_1,param_2,param_3,param_4)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/usock_recv_004038ac.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        12 - recvfrom(*param_1,param_2,param_3,param_4,(sockaddr *)((int)param_1 + 0x76),local_10)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/usock_recv_timed_00403918.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        24 - usock_recv(param_1,param_2,param_3,param_4)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/wan_handler_004022e8.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        7 - mii_read(4,1)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/wan_handler_004022e8.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        8 - uVar1 = mii_read(4,1)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/wan_handler_004022e8.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        13 - mysystem("event WANPORT.LINKDOWN")

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/wan_handler_004022e8.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        19 - mysystem("event WANPORT.LINKUP")

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/wpspb_handler_00402024.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        17 - mysystem("event WPSPBC.PUSH")

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/xmldbc_ephp_wb_00404554.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion

        Issue description:

    The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be  the precursor to buffer underwrite conditions. Buffer underwrites  occur frequently when large unsigned values are cast to signed values,  and then used as indexes into a buffer or for pointer arithmetic.

        16 - iVar2 = send_xmldb_cmd(__fd,10,param_2,param_3,sVar1 + 1 & 0xffff)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/xmldbc_get_wb_00404628.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion

        Issue description:

    The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be  the precursor to buffer underwrite conditions. Buffer underwrites  occur frequently when large unsigned values are cast to signed values,  and then used as indexes into a buffer or for pointer arithmetic.

        16 - iVar2 = send_xmldb_cmd(__fd,1,param_2,param_3,sVar1 + 1 & 0xffff)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/xmldbc_set_00404380.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        9 - snprintf(acStack_210,0x1ff,"%s %s",param_3,param_4)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/xmldbc_set_00404380.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion

        Issue description:

    The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be  the precursor to buffer underwrite conditions. Buffer underwrites  occur frequently when large unsigned values are cast to signed values,  and then used as indexes into a buffer or for pointer arithmetic.

        9 - snprintf(acStack_210,0x1ff,"%s %s",param_3,param_4);   //possible issue identified - semgrep

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/xmldbc_setext_004042e0.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        9 - snprintf(acStack_210,0x1ff,"%s %s",param_3,param_4)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_gpiod/xmldbc_setext_004042e0.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion

        Issue description:

    The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be  the precursor to buffer underwrite conditions. Buffer underwrites  occur frequently when large unsigned values are cast to signed values,  and then used as indexes into a buffer or for pointer arithmetic.

        9 - snprintf(acStack_210,0x1ff,"%s %s",param_3,param_4);   //possible issue identified - semgrep