[*] Binary protection state of libipt_HIJACK.so

  	RELRO          CANARY            NX           PIE          RPATH        RUNPATH      SYMBOLS      

  	No RELRO       No Canary found   NX disabled  DSO          No RPATH     No RUNPATH   Symbols

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libipt_HIJACK.so/parse_000108fc.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        36 - strncpy(__dest,__s1,0x40)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libipt_HIJACK.so/parse_000108fc.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion

        Issue description:

    The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be  the precursor to buffer underwrite conditions. Buffer underwrites  occur frequently when large unsigned values are cast to signed values,  and then used as indexes into a buffer or for pointer arithmetic.

        36 - strncpy(__dest,__s1,0x40);   //possible issue identified - semgrep

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libipt_HIJACK.so/parse_000108fc.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-unterminated-string-strncpy

        Issue description:

    If there is no NUL character byte in the first n bytes of the source string, strncpy() and stpncpy() do not NUL-terminate the destination buffer. If the program does not explicitly terminate the destination buffer, this will almost certainly result in information disclosure, and possibly a buffer overflow condition.

        36 - strncpy(__dest,__s1,0x40);   //possible issue identified - semgrep

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libipt_HIJACK.so/parse_000108fc.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-interesting-api-calls

        Issue description:

    Locate all calls to interesting and potentially insecure API functions (candidate points). The auditor can backtrace from these candidate points to find pathways allowing access from untrusted input.

        36 - strncpy(__dest,__s1,0x40)

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libipt_HIJACK.so/parse_000108fc.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-signed-unsigned-conversion

        Issue description:

    The software uses a signed primitive and performs a cast to an unsigned primitive, or uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value. When the result of a function is to be used as a size parameter, using negative return values can have unexpected results. Although less frequent an issue, unsigned-to-signed conversion can be  the precursor to buffer underwrite conditions. Buffer underwrites  occur frequently when large unsigned values are cast to signed values,  and then used as indexes into a buffer or for pointer arithmetic.

        36 - strncpy(__dest,__s1,0x40);   //possible issue identified - semgrep

[+] Identified source function: /logs/s16_ghidra_decompile_checks/haruspex_libipt_HIJACK.so/parse_000108fc.c

        Semgrep rule: external.semgrep-rules-0xdea.rules.c.raptor-unterminated-string-strncpy

        Issue description:

    If there is no NUL character byte in the first n bytes of the source string, strncpy() and stpncpy() do not NUL-terminate the destination buffer. If the program does not explicitly terminate the destination buffer, this will almost certainly result in information disclosure, and possibly a buffer overflow condition.

        36 - strncpy(__dest,__s1,0x40);   //possible issue identified - semgrep