Flawfinder version 2.0.10, (C) 2001-2019 David A. Wheeler.
Number of rules (primarily dangerous function names) in C/C++ ruleset: 223
Examining data/monero-0.16.0.0/cmake/CheckLinkerFlag.c
Examining data/monero-0.16.0.0/cmake/test-libusb-version.c
Examining data/monero-0.16.0.0/cmake/test-protobuf.cpp
Examining data/monero-0.16.0.0/cmake/test-static-assert.c
Examining data/monero-0.16.0.0/cmake/test-static-assert.cpp
Examining data/monero-0.16.0.0/contrib/depends/patches/ncurses/fallback.c
Examining data/monero-0.16.0.0/contrib/epee/demo/demo_http_server/stdafx.cpp
Examining data/monero-0.16.0.0/contrib/epee/demo/demo_http_server/stdafx.h
Examining data/monero-0.16.0.0/contrib/epee/demo/demo_http_server/targetver.h
Examining data/monero-0.16.0.0/contrib/epee/demo/demo_levin_server/stdafx.cpp
Examining data/monero-0.16.0.0/contrib/epee/demo/demo_levin_server/stdafx.h
Examining data/monero-0.16.0.0/contrib/epee/demo/demo_levin_server/targetver.h
Examining data/monero-0.16.0.0/contrib/epee/demo/iface/transport_defs.h
Examining data/monero-0.16.0.0/contrib/epee/include/ado_db_helper.h
Examining data/monero-0.16.0.0/contrib/epee/include/byte_slice.h
Examining data/monero-0.16.0.0/contrib/epee/include/byte_stream.h
Examining data/monero-0.16.0.0/contrib/epee/include/console_handler.h
Examining data/monero-0.16.0.0/contrib/epee/include/copyable_atomic.h
Examining data/monero-0.16.0.0/contrib/epee/include/file_io_utils.h
Examining data/monero-0.16.0.0/contrib/epee/include/fnv1.h
Examining data/monero-0.16.0.0/contrib/epee/include/global_stream_operators.h
Examining data/monero-0.16.0.0/contrib/epee/include/gzip_encoding.h
Examining data/monero-0.16.0.0/contrib/epee/include/hex.h
Examining data/monero-0.16.0.0/contrib/epee/include/hmac-md5.h
Examining data/monero-0.16.0.0/contrib/epee/include/include_base_utils.h
Examining data/monero-0.16.0.0/contrib/epee/include/int-util.h
Examining data/monero-0.16.0.0/contrib/epee/include/math_helper.h
Examining data/monero-0.16.0.0/contrib/epee/include/md5_l.h
Examining data/monero-0.16.0.0/contrib/epee/include/md5global.h
Examining data/monero-0.16.0.0/contrib/epee/include/memwipe.h
Examining data/monero-0.16.0.0/contrib/epee/include/misc_language.h
Examining data/monero-0.16.0.0/contrib/epee/include/misc_log_ex.h
Examining data/monero-0.16.0.0/contrib/epee/include/misc_os_dependent.h
Examining data/monero-0.16.0.0/contrib/epee/include/mlocker.h
Examining data/monero-0.16.0.0/contrib/epee/include/net/abstract_http_client.h
Examining data/monero-0.16.0.0/contrib/epee/include/net/abstract_tcp_server.h
Examining data/monero-0.16.0.0/contrib/epee/include/net/abstract_tcp_server2.h
Examining data/monero-0.16.0.0/contrib/epee/include/net/abstract_tcp_server_cp.h
Examining data/monero-0.16.0.0/contrib/epee/include/net/buffer.h
Examining data/monero-0.16.0.0/contrib/epee/include/net/connection_basic.hpp
Examining data/monero-0.16.0.0/contrib/epee/include/net/enums.h
Examining data/monero-0.16.0.0/contrib/epee/include/net/http_auth.h
Examining data/monero-0.16.0.0/contrib/epee/include/net/http_base.h
Examining data/monero-0.16.0.0/contrib/epee/include/net/http_client.h
Examining data/monero-0.16.0.0/contrib/epee/include/net/http_client_base.h
Examining data/monero-0.16.0.0/contrib/epee/include/net/http_client_via_api_helper.h
Examining data/monero-0.16.0.0/contrib/epee/include/net/http_protocol_handler.h
Examining data/monero-0.16.0.0/contrib/epee/include/net/http_server_cp.h
Examining data/monero-0.16.0.0/contrib/epee/include/net/http_server_cp2.h
Examining data/monero-0.16.0.0/contrib/epee/include/net/http_server_handlers_map2.h
Examining data/monero-0.16.0.0/contrib/epee/include/net/http_server_impl_base.h
Examining data/monero-0.16.0.0/contrib/epee/include/net/http_server_thread_per_connect.h
Examining data/monero-0.16.0.0/contrib/epee/include/net/jsonrpc_protocol_handler.h
Examining data/monero-0.16.0.0/contrib/epee/include/net/jsonrpc_server_handlers_map.h
Examining data/monero-0.16.0.0/contrib/epee/include/net/jsonrpc_server_impl_base.h
Examining data/monero-0.16.0.0/contrib/epee/include/net/jsonrpc_structs.h
Examining data/monero-0.16.0.0/contrib/epee/include/net/levin_base.h
Examining data/monero-0.16.0.0/contrib/epee/include/net/levin_client.h
Examining data/monero-0.16.0.0/contrib/epee/include/net/levin_client_async.h
Examining data/monero-0.16.0.0/contrib/epee/include/net/levin_helper.h
Examining data/monero-0.16.0.0/contrib/epee/include/net/levin_protocol_handler.h
Examining data/monero-0.16.0.0/contrib/epee/include/net/levin_protocol_handler_async.h
Examining data/monero-0.16.0.0/contrib/epee/include/net/levin_server_cp.h
Examining data/monero-0.16.0.0/contrib/epee/include/net/levin_server_cp2.h
Examining data/monero-0.16.0.0/contrib/epee/include/net/multiprotocols_server.h
Examining data/monero-0.16.0.0/contrib/epee/include/net/munin_connection_handler.h
Examining data/monero-0.16.0.0/contrib/epee/include/net/munin_node_server.h
Examining data/monero-0.16.0.0/contrib/epee/include/net/net_fwd.h
Examining data/monero-0.16.0.0/contrib/epee/include/net/net_helper.h
Examining data/monero-0.16.0.0/contrib/epee/include/net/net_parse_helpers.h
Examining data/monero-0.16.0.0/contrib/epee/include/net/net_ssl.h
Examining data/monero-0.16.0.0/contrib/epee/include/net/net_utils_base.h
Examining data/monero-0.16.0.0/contrib/epee/include/net/network_throttle-detail.hpp
Examining data/monero-0.16.0.0/contrib/epee/include/net/network_throttle.hpp
Examining data/monero-0.16.0.0/contrib/epee/include/net/protocol_switcher.h
Examining data/monero-0.16.0.0/contrib/epee/include/net/rpc_method_name.h
Examining data/monero-0.16.0.0/contrib/epee/include/net/smtp.h
Examining data/monero-0.16.0.0/contrib/epee/include/net/smtp_helper.h
Examining data/monero-0.16.0.0/contrib/epee/include/net/local_ip.h
Examining data/monero-0.16.0.0/contrib/epee/include/pragma_comp_defs.h
Examining data/monero-0.16.0.0/contrib/epee/include/profile_tools.h
Examining data/monero-0.16.0.0/contrib/epee/include/readline_buffer.h
Examining data/monero-0.16.0.0/contrib/epee/include/reg_exp_definer.h
Examining data/monero-0.16.0.0/contrib/epee/include/reg_utils.h
Examining data/monero-0.16.0.0/contrib/epee/include/rolling_median.h
Examining data/monero-0.16.0.0/contrib/epee/include/serialization/enableable.h
Examining data/monero-0.16.0.0/contrib/epee/include/serialization/keyvalue_serialization.h
Examining data/monero-0.16.0.0/contrib/epee/include/serialization/keyvalue_serialization_overloads.h
Examining data/monero-0.16.0.0/contrib/epee/include/serialization/serialize_base.h
Examining data/monero-0.16.0.0/contrib/epee/include/service_impl_base.h
Examining data/monero-0.16.0.0/contrib/epee/include/sha1.h
Examining data/monero-0.16.0.0/contrib/epee/include/soci_helper.h
Examining data/monero-0.16.0.0/contrib/epee/include/span.h
Examining data/monero-0.16.0.0/contrib/epee/include/static_initializer.h
Examining data/monero-0.16.0.0/contrib/epee/include/stats.h
Examining data/monero-0.16.0.0/contrib/epee/include/storages/crypted_storage.h
Examining data/monero-0.16.0.0/contrib/epee/include/storages/gzipped_inmemstorage.h
Examining data/monero-0.16.0.0/contrib/epee/include/storages/http_abstract_invoke.h
Examining data/monero-0.16.0.0/contrib/epee/include/storages/levin_abstract_invoke2.h
Examining data/monero-0.16.0.0/contrib/epee/include/storages/parserse_base_utils.h
Examining data/monero-0.16.0.0/contrib/epee/include/storages/portable_storage.h
Examining data/monero-0.16.0.0/contrib/epee/include/storages/portable_storage_base.h
Examining data/monero-0.16.0.0/contrib/epee/include/storages/portable_storage_bin_utils.h
Examining data/monero-0.16.0.0/contrib/epee/include/storages/portable_storage_from_bin.h
Examining data/monero-0.16.0.0/contrib/epee/include/storages/portable_storage_from_json.h
Examining data/monero-0.16.0.0/contrib/epee/include/storages/portable_storage_template_helper.h
Examining data/monero-0.16.0.0/contrib/epee/include/storages/portable_storage_to_bin.h
Examining data/monero-0.16.0.0/contrib/epee/include/storages/portable_storage_to_json.h
Examining data/monero-0.16.0.0/contrib/epee/include/storages/portable_storage_val_converters.h
Examining data/monero-0.16.0.0/contrib/epee/include/string_coding.h
Examining data/monero-0.16.0.0/contrib/epee/include/string_tools.h
Examining data/monero-0.16.0.0/contrib/epee/include/syncobj.h
Examining data/monero-0.16.0.0/contrib/epee/include/time_helper.h
Examining data/monero-0.16.0.0/contrib/epee/include/tiny_ini.h
Examining data/monero-0.16.0.0/contrib/epee/include/to_nonconst_iterator.h
Examining data/monero-0.16.0.0/contrib/epee/include/warnings.h
Examining data/monero-0.16.0.0/contrib/epee/include/winobj.h
Examining data/monero-0.16.0.0/contrib/epee/include/wipeable_string.h
Examining data/monero-0.16.0.0/contrib/epee/include/zlib_helper.h
Examining data/monero-0.16.0.0/contrib/epee/src/abstract_http_client.cpp
Examining data/monero-0.16.0.0/contrib/epee/src/buffer.cpp
Examining data/monero-0.16.0.0/contrib/epee/src/byte_slice.cpp
Examining data/monero-0.16.0.0/contrib/epee/src/byte_stream.cpp
Examining data/monero-0.16.0.0/contrib/epee/src/connection_basic.cpp
Examining data/monero-0.16.0.0/contrib/epee/src/hex.cpp
Examining data/monero-0.16.0.0/contrib/epee/src/http_auth.cpp
Examining data/monero-0.16.0.0/contrib/epee/src/int-util.cpp
Examining data/monero-0.16.0.0/contrib/epee/src/levin_base.cpp
Examining data/monero-0.16.0.0/contrib/epee/src/memwipe.c
Examining data/monero-0.16.0.0/contrib/epee/src/mlocker.cpp
Examining data/monero-0.16.0.0/contrib/epee/src/mlog.cpp
Examining data/monero-0.16.0.0/contrib/epee/src/net_helper.cpp
Examining data/monero-0.16.0.0/contrib/epee/src/net_ssl.cpp
Examining data/monero-0.16.0.0/contrib/epee/src/net_utils_base.cpp
Examining data/monero-0.16.0.0/contrib/epee/src/network_throttle-detail.cpp
Examining data/monero-0.16.0.0/contrib/epee/src/network_throttle.cpp
Examining data/monero-0.16.0.0/contrib/epee/src/readline_buffer.cpp
Examining data/monero-0.16.0.0/contrib/epee/src/string_tools.cpp
Examining data/monero-0.16.0.0/contrib/epee/src/wipeable_string.cpp
Examining data/monero-0.16.0.0/contrib/epee/tests/src/misc/test_math.h
Examining data/monero-0.16.0.0/contrib/epee/tests/src/net/test_net.h
Examining data/monero-0.16.0.0/contrib/epee/tests/src/storages/portable_storages_test.h
Examining data/monero-0.16.0.0/contrib/epee/tests/src/storages/storage_tests.h
Examining data/monero-0.16.0.0/contrib/epee/tests/src/tests.cpp
Examining data/monero-0.16.0.0/external/boost/archive/portable_binary_archive.hpp
Examining data/monero-0.16.0.0/external/boost/archive/portable_binary_iarchive.hpp
Examining data/monero-0.16.0.0/external/boost/archive/portable_binary_oarchive.hpp
Examining data/monero-0.16.0.0/external/db_drivers/liblmdb/lmdb.h
Examining data/monero-0.16.0.0/external/db_drivers/liblmdb/mdb.c
Examining data/monero-0.16.0.0/external/db_drivers/liblmdb/mdb_copy.c
Examining data/monero-0.16.0.0/external/db_drivers/liblmdb/mdb_drop.c
Examining data/monero-0.16.0.0/external/db_drivers/liblmdb/mdb_dump.c
Examining data/monero-0.16.0.0/external/db_drivers/liblmdb/mdb_load.c
Examining data/monero-0.16.0.0/external/db_drivers/liblmdb/mdb_stat.c
Examining data/monero-0.16.0.0/external/db_drivers/liblmdb/midl.c
Examining data/monero-0.16.0.0/external/db_drivers/liblmdb/midl.h
Examining data/monero-0.16.0.0/external/db_drivers/liblmdb/mtest.c
Examining data/monero-0.16.0.0/external/db_drivers/liblmdb/mtest2.c
Examining data/monero-0.16.0.0/external/db_drivers/liblmdb/mtest3.c
Examining data/monero-0.16.0.0/external/db_drivers/liblmdb/mtest4.c
Examining data/monero-0.16.0.0/external/db_drivers/liblmdb/mtest5.c
Examining data/monero-0.16.0.0/external/db_drivers/liblmdb/mtest6.c
Examining data/monero-0.16.0.0/external/easylogging++/ea_config.h
Examining data/monero-0.16.0.0/external/easylogging++/easylogging++.cc
Examining data/monero-0.16.0.0/external/easylogging++/easylogging++.h
Examining data/monero-0.16.0.0/include/INode.h
Examining data/monero-0.16.0.0/include/IWallet.h
Examining data/monero-0.16.0.0/src/blockchain_db/blockchain_db.cpp
Examining data/monero-0.16.0.0/src/blockchain_db/blockchain_db.h
Examining data/monero-0.16.0.0/src/blockchain_db/lmdb/db_lmdb.cpp
Examining data/monero-0.16.0.0/src/blockchain_db/lmdb/db_lmdb.h
Examining data/monero-0.16.0.0/src/blockchain_db/locked_txn.h
Examining data/monero-0.16.0.0/src/blockchain_db/testdb.h
Examining data/monero-0.16.0.0/src/blockchain_utilities/blockchain_ancestry.cpp
Examining data/monero-0.16.0.0/src/blockchain_utilities/blockchain_blackball.cpp
Examining data/monero-0.16.0.0/src/blockchain_utilities/blockchain_depth.cpp
Examining data/monero-0.16.0.0/src/blockchain_utilities/blockchain_export.cpp
Examining data/monero-0.16.0.0/src/blockchain_utilities/blockchain_import.cpp
Examining data/monero-0.16.0.0/src/blockchain_utilities/blockchain_prune.cpp
Examining data/monero-0.16.0.0/src/blockchain_utilities/blockchain_prune_known_spent_data.cpp
Examining data/monero-0.16.0.0/src/blockchain_utilities/blockchain_stats.cpp
Examining data/monero-0.16.0.0/src/blockchain_utilities/blockchain_usage.cpp
Examining data/monero-0.16.0.0/src/blockchain_utilities/blockchain_utilities.h
Examining data/monero-0.16.0.0/src/blockchain_utilities/blocksdat_file.cpp
Examining data/monero-0.16.0.0/src/blockchain_utilities/blocksdat_file.h
Examining data/monero-0.16.0.0/src/blockchain_utilities/bootstrap_file.cpp
Examining data/monero-0.16.0.0/src/blockchain_utilities/bootstrap_file.h
Examining data/monero-0.16.0.0/src/blockchain_utilities/bootstrap_serialization.h
Examining data/monero-0.16.0.0/src/blocks/blocks.cpp
Examining data/monero-0.16.0.0/src/blocks/blocks.h
Examining data/monero-0.16.0.0/src/checkpoints/checkpoints.cpp
Examining data/monero-0.16.0.0/src/checkpoints/checkpoints.h
Examining data/monero-0.16.0.0/src/common/aligned.c
Examining data/monero-0.16.0.0/src/common/aligned.h
Examining data/monero-0.16.0.0/src/common/apply_permutation.h
Examining data/monero-0.16.0.0/src/common/base58.cpp
Examining data/monero-0.16.0.0/src/common/base58.h
Examining data/monero-0.16.0.0/src/common/boost_serialization_helper.h
Examining data/monero-0.16.0.0/src/common/combinator.cpp
Examining data/monero-0.16.0.0/src/common/combinator.h
Examining data/monero-0.16.0.0/src/common/command_line.cpp
Examining data/monero-0.16.0.0/src/common/command_line.h
Examining data/monero-0.16.0.0/src/common/common_fwd.h
Examining data/monero-0.16.0.0/src/common/compat/glibc_compat.cpp
Examining data/monero-0.16.0.0/src/common/dns_utils.cpp
Examining data/monero-0.16.0.0/src/common/dns_utils.h
Examining data/monero-0.16.0.0/src/common/download.cpp
Examining data/monero-0.16.0.0/src/common/download.h
Examining data/monero-0.16.0.0/src/common/error.cpp
Examining data/monero-0.16.0.0/src/common/error.h
Examining data/monero-0.16.0.0/src/common/expect.cpp
Examining data/monero-0.16.0.0/src/common/expect.h
Examining data/monero-0.16.0.0/src/common/http_connection.h
Examining data/monero-0.16.0.0/src/common/i18n.cpp
Examining data/monero-0.16.0.0/src/common/i18n.h
Examining data/monero-0.16.0.0/src/common/json_util.h
Examining data/monero-0.16.0.0/src/common/notify.cpp
Examining data/monero-0.16.0.0/src/common/notify.h
Examining data/monero-0.16.0.0/src/common/password.cpp
Examining data/monero-0.16.0.0/src/common/password.h
Examining data/monero-0.16.0.0/src/common/perf_timer.cpp
Examining data/monero-0.16.0.0/src/common/perf_timer.h
Examining data/monero-0.16.0.0/src/common/pod-class.h
Examining data/monero-0.16.0.0/src/common/pruning.cpp
Examining data/monero-0.16.0.0/src/common/pruning.h
Examining data/monero-0.16.0.0/src/common/rpc_client.h
Examining data/monero-0.16.0.0/src/common/scoped_message_writer.h
Examining data/monero-0.16.0.0/src/common/sfinae_helpers.h
Examining data/monero-0.16.0.0/src/common/spawn.cpp
Examining data/monero-0.16.0.0/src/common/spawn.h
Examining data/monero-0.16.0.0/src/common/stack_trace.cpp
Examining data/monero-0.16.0.0/src/common/stack_trace.h
Examining data/monero-0.16.0.0/src/common/threadpool.cpp
Examining data/monero-0.16.0.0/src/common/threadpool.h
Examining data/monero-0.16.0.0/src/common/timings.cc
Examining data/monero-0.16.0.0/src/common/timings.h
Examining data/monero-0.16.0.0/src/common/unordered_containers_boost_serialization.h
Examining data/monero-0.16.0.0/src/common/updates.cpp
Examining data/monero-0.16.0.0/src/common/updates.h
Examining data/monero-0.16.0.0/src/common/utf8.h
Examining data/monero-0.16.0.0/src/common/util.cpp
Examining data/monero-0.16.0.0/src/common/util.h
Examining data/monero-0.16.0.0/src/common/varint.h
Examining data/monero-0.16.0.0/src/crypto/CryptonightR_JIT.c
Examining data/monero-0.16.0.0/src/crypto/CryptonightR_JIT.h
Examining data/monero-0.16.0.0/src/crypto/CryptonightR_template.h
Examining data/monero-0.16.0.0/src/crypto/aesb.c
Examining data/monero-0.16.0.0/src/crypto/blake256.c
Examining data/monero-0.16.0.0/src/crypto/blake256.h
Examining data/monero-0.16.0.0/src/crypto/c_threads.h
Examining data/monero-0.16.0.0/src/crypto/chacha.c
Examining data/monero-0.16.0.0/src/crypto/chacha.h
Examining data/monero-0.16.0.0/src/crypto/crypto-ops-data.c
Examining data/monero-0.16.0.0/src/crypto/crypto-ops.c
Examining data/monero-0.16.0.0/src/crypto/crypto-ops.h
Examining data/monero-0.16.0.0/src/crypto/crypto.cpp
Examining data/monero-0.16.0.0/src/crypto/crypto.h
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/api.h
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/crypto-ops-data.c
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/crypto-ops-old.c
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/crypto-ops.h
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/crypto_int32.h
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/crypto_sign.h
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/crypto_uint32.h
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/crypto_verify_32.h
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/include/sodium.h
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/include/sodium/crypto_int32.h
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/include/sodium/crypto_int64.h
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/include/sodium/crypto_uint16.h
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/include/sodium/crypto_uint32.h
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/include/sodium/crypto_uint64.h
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/include/sodium/crypto_uint8.h
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/include/sodium/crypto_verify_32.h
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/include/sodium/randombytes.h
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/randombytes.c
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10/api.h
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10/base.h
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10/base2.h
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10/d.h
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10/d2.h
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10/fe.h
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10/fe_0.c
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10/fe_1.c
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10/fe_add.c
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10/fe_cmov.c
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10/fe_copy.c
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10/fe_frombytes.c
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10/fe_invert.c
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10/fe_isnegative.c
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10/fe_isnonzero.c
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10/fe_mul.c
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10/fe_neg.c
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10/fe_pow22523.c
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10/fe_sq.c
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10/fe_sq2.c
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10/fe_sub.c
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10/fe_tobytes.c
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10/ge.h
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10/ge_add.c
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10/ge_add.h
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10/ge_double_scalarmult.c
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10/ge_frombytes.c
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10/ge_madd.c
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10/ge_madd.h
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10/ge_msub.c
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10/ge_msub.h
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10/ge_p1p1_to_p2.c
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10/ge_p1p1_to_p3.c
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10/ge_p2_0.c
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10/ge_p2_dbl.c
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10/ge_p2_dbl.h
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10/ge_p3_0.c
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10/ge_p3_dbl.c
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10/ge_p3_to_cached.c
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10/ge_p3_to_p2.c
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10/ge_p3_tobytes.c
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10/ge_precomp_0.c
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10/ge_scalarmult_base.c
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10/ge_sub.c
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10/ge_sub.h
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10/ge_tobytes.c
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10/keypair.c
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10/open.c
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10/pow22523.h
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10/pow225521.h
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10/sc.h
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10/sc_muladd.c
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10/sc_reduce.c
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10/sign.c
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10/sqrtm1.h
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10CommentedCombined/api.h
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10CommentedCombined/base.h
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10CommentedCombined/base2.h
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10CommentedCombined/crypto-ops.h
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10CommentedCombined/d.h
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10CommentedCombined/d2.h
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10CommentedCombined/fe.h
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10CommentedCombined/fe_0.c
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10CommentedCombined/fe_1.c
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10CommentedCombined/fe_add.c
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10CommentedCombined/fe_cmov.c
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10CommentedCombined/fe_copy.c
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10CommentedCombined/fe_frombytes.c
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10CommentedCombined/fe_invert.c
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10CommentedCombined/fe_isnegative.c
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10CommentedCombined/fe_isnonzero.c
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10CommentedCombined/fe_mul.c
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10CommentedCombined/fe_neg.c
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10CommentedCombined/fe_pow22523.c
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10CommentedCombined/fe_sq.c
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10CommentedCombined/fe_sq2.c
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10CommentedCombined/fe_sub.c
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10CommentedCombined/fe_tobytes.c
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10CommentedCombined/ge.h
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10CommentedCombined/ge_add.c
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10CommentedCombined/ge_add.h
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10CommentedCombined/ge_double_scalarmult.c
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10CommentedCombined/ge_frombytes.c
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10CommentedCombined/ge_madd.c
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10CommentedCombined/ge_madd.h
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10CommentedCombined/ge_msub.c
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10CommentedCombined/ge_msub.h
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10CommentedCombined/ge_p1p1_to_p2.c
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10CommentedCombined/ge_p1p1_to_p3.c
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10CommentedCombined/ge_p2_0.c
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10CommentedCombined/ge_p2_dbl.c
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10CommentedCombined/ge_p2_dbl.h
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10CommentedCombined/ge_p3_0.c
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10CommentedCombined/ge_p3_dbl.c
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10CommentedCombined/ge_p3_to_cached.c
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10CommentedCombined/ge_p3_to_p2.c
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10CommentedCombined/ge_p3_tobytes.c
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10CommentedCombined/ge_precomp_0.c
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10CommentedCombined/ge_scalarmult_base.c
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10CommentedCombined/ge_sub.c
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10CommentedCombined/ge_sub.h
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10CommentedCombined/ge_tobytes.c
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10CommentedCombined/keypair.c
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10CommentedCombined/open.c
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10CommentedCombined/pow22523.h
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10CommentedCombined/pow225521.h
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10CommentedCombined/sc.h
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10CommentedCombined/sc_muladd.c
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10CommentedCombined/sc_reduce.c
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10CommentedCombined/sc_sub.xmr.c
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10CommentedCombined/sign.c
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10CommentedCombined/sqrtm1.h
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10CommentedCombined/xmrSpecificOld.c
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/sha512-blocks.c
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/sha512-hash.c
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/sha512.h
Examining data/monero-0.16.0.0/src/crypto/crypto_ops_builder/verify.c
Examining data/monero-0.16.0.0/src/crypto/duration.h
Examining data/monero-0.16.0.0/src/crypto/generic-ops.h
Examining data/monero-0.16.0.0/src/crypto/groestl.c
Examining data/monero-0.16.0.0/src/crypto/groestl.h
Examining data/monero-0.16.0.0/src/crypto/groestl_tables.h
Examining data/monero-0.16.0.0/src/crypto/hash-extra-blake.c
Examining data/monero-0.16.0.0/src/crypto/hash-extra-groestl.c
Examining data/monero-0.16.0.0/src/crypto/hash-extra-jh.c
Examining data/monero-0.16.0.0/src/crypto/hash-extra-skein.c
Examining data/monero-0.16.0.0/src/crypto/hash-ops.h
Examining data/monero-0.16.0.0/src/crypto/hash.c
Examining data/monero-0.16.0.0/src/crypto/hash.h
Examining data/monero-0.16.0.0/src/crypto/hmac-keccak.c
Examining data/monero-0.16.0.0/src/crypto/hmac-keccak.h
Examining data/monero-0.16.0.0/src/crypto/initializer.h
Examining data/monero-0.16.0.0/src/crypto/jh.c
Examining data/monero-0.16.0.0/src/crypto/jh.h
Examining data/monero-0.16.0.0/src/crypto/keccak.c
Examining data/monero-0.16.0.0/src/crypto/keccak.h
Examining data/monero-0.16.0.0/src/crypto/oaes_config.h
Examining data/monero-0.16.0.0/src/crypto/oaes_lib.c
Examining data/monero-0.16.0.0/src/crypto/oaes_lib.h
Examining data/monero-0.16.0.0/src/crypto/random.c
Examining data/monero-0.16.0.0/src/crypto/random.h
Examining data/monero-0.16.0.0/src/crypto/rx-slow-hash.c
Examining data/monero-0.16.0.0/src/crypto/skein.c
Examining data/monero-0.16.0.0/src/crypto/skein.h
Examining data/monero-0.16.0.0/src/crypto/skein_port.h
Examining data/monero-0.16.0.0/src/crypto/slow-hash.c
Examining data/monero-0.16.0.0/src/crypto/tree-hash.c
Examining data/monero-0.16.0.0/src/crypto/variant2_int_sqrt.h
Examining data/monero-0.16.0.0/src/crypto/variant4_random_math.h
Examining data/monero-0.16.0.0/src/cryptonote_basic/account.cpp
Examining data/monero-0.16.0.0/src/cryptonote_basic/account.h
Examining data/monero-0.16.0.0/src/cryptonote_basic/account_boost_serialization.h
Examining data/monero-0.16.0.0/src/cryptonote_basic/blobdatatype.h
Examining data/monero-0.16.0.0/src/cryptonote_basic/connection_context.h
Examining data/monero-0.16.0.0/src/cryptonote_basic/cryptonote_basic.h
Examining data/monero-0.16.0.0/src/cryptonote_basic/cryptonote_basic_impl.cpp
Examining data/monero-0.16.0.0/src/cryptonote_basic/cryptonote_basic_impl.h
Examining data/monero-0.16.0.0/src/cryptonote_basic/cryptonote_boost_serialization.h
Examining data/monero-0.16.0.0/src/cryptonote_basic/cryptonote_format_utils.cpp
Examining data/monero-0.16.0.0/src/cryptonote_basic/cryptonote_format_utils.h
Examining data/monero-0.16.0.0/src/cryptonote_basic/difficulty.cpp
Examining data/monero-0.16.0.0/src/cryptonote_basic/difficulty.h
Examining data/monero-0.16.0.0/src/cryptonote_basic/hardfork.cpp
Examining data/monero-0.16.0.0/src/cryptonote_basic/hardfork.h
Examining data/monero-0.16.0.0/src/cryptonote_basic/miner.cpp
Examining data/monero-0.16.0.0/src/cryptonote_basic/miner.h
Examining data/monero-0.16.0.0/src/cryptonote_basic/subaddress_index.h
Examining data/monero-0.16.0.0/src/cryptonote_basic/tx_extra.h
Examining data/monero-0.16.0.0/src/cryptonote_basic/verification_context.h
Examining data/monero-0.16.0.0/src/cryptonote_config.h
Examining data/monero-0.16.0.0/src/cryptonote_core/blockchain.cpp
Examining data/monero-0.16.0.0/src/cryptonote_core/blockchain.h
Examining data/monero-0.16.0.0/src/cryptonote_core/blockchain_storage_boost_serialization.h
Examining data/monero-0.16.0.0/src/cryptonote_core/cryptonote_core.cpp
Examining data/monero-0.16.0.0/src/cryptonote_core/cryptonote_core.h
Examining data/monero-0.16.0.0/src/cryptonote_core/cryptonote_tx_utils.cpp
Examining data/monero-0.16.0.0/src/cryptonote_core/cryptonote_tx_utils.h
Examining data/monero-0.16.0.0/src/cryptonote_core/i_core_events.h
Examining data/monero-0.16.0.0/src/cryptonote_core/tx_pool.cpp
Examining data/monero-0.16.0.0/src/cryptonote_core/tx_pool.h
Examining data/monero-0.16.0.0/src/cryptonote_core/tx_sanity_check.cpp
Examining data/monero-0.16.0.0/src/cryptonote_core/tx_sanity_check.h
Examining data/monero-0.16.0.0/src/cryptonote_protocol/block_queue.cpp
Examining data/monero-0.16.0.0/src/cryptonote_protocol/block_queue.h
Examining data/monero-0.16.0.0/src/cryptonote_protocol/cryptonote_protocol_defs.h
Examining data/monero-0.16.0.0/src/cryptonote_protocol/cryptonote_protocol_handler-base.cpp
Examining data/monero-0.16.0.0/src/cryptonote_protocol/cryptonote_protocol_handler.h
Examining data/monero-0.16.0.0/src/cryptonote_protocol/cryptonote_protocol_handler_common.h
Examining data/monero-0.16.0.0/src/cryptonote_protocol/enums.h
Examining data/monero-0.16.0.0/src/cryptonote_protocol/fwd.h
Examining data/monero-0.16.0.0/src/cryptonote_protocol/levin_notify.cpp
Examining data/monero-0.16.0.0/src/cryptonote_protocol/levin_notify.h
Examining data/monero-0.16.0.0/src/daemon/command_line_args.h
Examining data/monero-0.16.0.0/src/daemon/command_parser_executor.cpp
Examining data/monero-0.16.0.0/src/daemon/command_parser_executor.h
Examining data/monero-0.16.0.0/src/daemon/command_server.cpp
Examining data/monero-0.16.0.0/src/daemon/command_server.h
Examining data/monero-0.16.0.0/src/daemon/core.h
Examining data/monero-0.16.0.0/src/daemon/daemon.cpp
Examining data/monero-0.16.0.0/src/daemon/daemon.h
Examining data/monero-0.16.0.0/src/daemon/executor.cpp
Examining data/monero-0.16.0.0/src/daemon/executor.h
Examining data/monero-0.16.0.0/src/daemon/main.cpp
Examining data/monero-0.16.0.0/src/daemon/p2p.h
Examining data/monero-0.16.0.0/src/daemon/protocol.h
Examining data/monero-0.16.0.0/src/daemon/rpc.h
Examining data/monero-0.16.0.0/src/daemon/rpc_command_executor.cpp
Examining data/monero-0.16.0.0/src/daemon/rpc_command_executor.h
Examining data/monero-0.16.0.0/src/daemonizer/daemonizer.h
Examining data/monero-0.16.0.0/src/daemonizer/posix_fork.cpp
Examining data/monero-0.16.0.0/src/daemonizer/posix_fork.h
Examining data/monero-0.16.0.0/src/daemonizer/windows_service.cpp
Examining data/monero-0.16.0.0/src/daemonizer/windows_service.h
Examining data/monero-0.16.0.0/src/daemonizer/windows_service_runner.h
Examining data/monero-0.16.0.0/src/debug_utilities/cn_deserialize.cpp
Examining data/monero-0.16.0.0/src/debug_utilities/dns_checks.cpp
Examining data/monero-0.16.0.0/src/debug_utilities/object_sizes.cpp
Examining data/monero-0.16.0.0/src/device/device.cpp
Examining data/monero-0.16.0.0/src/device/device.hpp
Examining data/monero-0.16.0.0/src/device/device_cold.hpp
Examining data/monero-0.16.0.0/src/device/device_default.cpp
Examining data/monero-0.16.0.0/src/device/device_default.hpp
Examining data/monero-0.16.0.0/src/device/device_io.hpp
Examining data/monero-0.16.0.0/src/device/device_io_hid.cpp
Examining data/monero-0.16.0.0/src/device/device_io_hid.hpp
Examining data/monero-0.16.0.0/src/device/device_ledger.cpp
Examining data/monero-0.16.0.0/src/device/device_ledger.hpp
Examining data/monero-0.16.0.0/src/device/log.cpp
Examining data/monero-0.16.0.0/src/device/log.hpp
Examining data/monero-0.16.0.0/src/device_trezor/device_trezor.cpp
Examining data/monero-0.16.0.0/src/device_trezor/device_trezor.hpp
Examining data/monero-0.16.0.0/src/device_trezor/device_trezor_base.cpp
Examining data/monero-0.16.0.0/src/device_trezor/device_trezor_base.hpp
Examining data/monero-0.16.0.0/src/device_trezor/trezor.hpp
Examining data/monero-0.16.0.0/src/device_trezor/trezor/debug_link.cpp
Examining data/monero-0.16.0.0/src/device_trezor/trezor/debug_link.hpp
Examining data/monero-0.16.0.0/src/device_trezor/trezor/exceptions.hpp
Examining data/monero-0.16.0.0/src/device_trezor/trezor/messages_map.cpp
Examining data/monero-0.16.0.0/src/device_trezor/trezor/messages_map.hpp
Examining data/monero-0.16.0.0/src/device_trezor/trezor/protocol.cpp
Examining data/monero-0.16.0.0/src/device_trezor/trezor/protocol.hpp
Examining data/monero-0.16.0.0/src/device_trezor/trezor/transport.cpp
Examining data/monero-0.16.0.0/src/device_trezor/trezor/transport.hpp
Examining data/monero-0.16.0.0/src/device_trezor/trezor/trezor_defs.hpp
Examining data/monero-0.16.0.0/src/gen_multisig/gen_multisig.cpp
Examining data/monero-0.16.0.0/src/gen_ssl_cert/gen_ssl_cert.cpp
Examining data/monero-0.16.0.0/src/hardforks/hardforks.cpp
Examining data/monero-0.16.0.0/src/hardforks/hardforks.h
Examining data/monero-0.16.0.0/src/lmdb/database.cpp
Examining data/monero-0.16.0.0/src/lmdb/database.h
Examining data/monero-0.16.0.0/src/lmdb/error.cpp
Examining data/monero-0.16.0.0/src/lmdb/error.h
Examining data/monero-0.16.0.0/src/lmdb/key_stream.h
Examining data/monero-0.16.0.0/src/lmdb/table.cpp
Examining data/monero-0.16.0.0/src/lmdb/table.h
Examining data/monero-0.16.0.0/src/lmdb/transaction.h
Examining data/monero-0.16.0.0/src/lmdb/util.h
Examining data/monero-0.16.0.0/src/lmdb/value_stream.cpp
Examining data/monero-0.16.0.0/src/lmdb/value_stream.h
Examining data/monero-0.16.0.0/src/mnemonics/chinese_simplified.h
Examining data/monero-0.16.0.0/src/mnemonics/dutch.h
Examining data/monero-0.16.0.0/src/mnemonics/electrum-words.cpp
Examining data/monero-0.16.0.0/src/mnemonics/electrum-words.h
Examining data/monero-0.16.0.0/src/mnemonics/english.h
Examining data/monero-0.16.0.0/src/mnemonics/english_old.h
Examining data/monero-0.16.0.0/src/mnemonics/esperanto.h
Examining data/monero-0.16.0.0/src/mnemonics/french.h
Examining data/monero-0.16.0.0/src/mnemonics/german.h
Examining data/monero-0.16.0.0/src/mnemonics/italian.h
Examining data/monero-0.16.0.0/src/mnemonics/japanese.h
Examining data/monero-0.16.0.0/src/mnemonics/language_base.h
Examining data/monero-0.16.0.0/src/mnemonics/lojban.h
Examining data/monero-0.16.0.0/src/mnemonics/portuguese.h
Examining data/monero-0.16.0.0/src/mnemonics/russian.h
Examining data/monero-0.16.0.0/src/mnemonics/singleton.h
Examining data/monero-0.16.0.0/src/mnemonics/spanish.h
Examining data/monero-0.16.0.0/src/multisig/multisig.cpp
Examining data/monero-0.16.0.0/src/multisig/multisig.h
Examining data/monero-0.16.0.0/src/net/dandelionpp.cpp
Examining data/monero-0.16.0.0/src/net/dandelionpp.h
Examining data/monero-0.16.0.0/src/net/error.cpp
Examining data/monero-0.16.0.0/src/net/error.h
Examining data/monero-0.16.0.0/src/net/fwd.h
Examining data/monero-0.16.0.0/src/net/i2p_address.cpp
Examining data/monero-0.16.0.0/src/net/i2p_address.h
Examining data/monero-0.16.0.0/src/net/parse.cpp
Examining data/monero-0.16.0.0/src/net/parse.h
Examining data/monero-0.16.0.0/src/net/socks.cpp
Examining data/monero-0.16.0.0/src/net/socks.h
Examining data/monero-0.16.0.0/src/net/socks_connect.cpp
Examining data/monero-0.16.0.0/src/net/socks_connect.h
Examining data/monero-0.16.0.0/src/net/tor_address.cpp
Examining data/monero-0.16.0.0/src/net/tor_address.h
Examining data/monero-0.16.0.0/src/net/zmq.cpp
Examining data/monero-0.16.0.0/src/net/zmq.h
Examining data/monero-0.16.0.0/src/p2p/net_node.cpp
Examining data/monero-0.16.0.0/src/p2p/net_node.h
Examining data/monero-0.16.0.0/src/p2p/net_node_common.h
Examining data/monero-0.16.0.0/src/p2p/net_peerlist.cpp
Examining data/monero-0.16.0.0/src/p2p/net_peerlist.h
Examining data/monero-0.16.0.0/src/p2p/net_peerlist_boost_serialization.h
Examining data/monero-0.16.0.0/src/p2p/p2p_protocol_defs.h
Examining data/monero-0.16.0.0/src/p2p/stdafx.h
Examining data/monero-0.16.0.0/src/platform/mingw/alloca.h
Examining data/monero-0.16.0.0/src/platform/msc/alloca.h
Examining data/monero-0.16.0.0/src/platform/msc/inline_c.h
Examining data/monero-0.16.0.0/src/platform/msc/stdbool.h
Examining data/monero-0.16.0.0/src/platform/msc/sys/param.h
Examining data/monero-0.16.0.0/src/ringct/bulletproofs.cc
Examining data/monero-0.16.0.0/src/ringct/bulletproofs.h
Examining data/monero-0.16.0.0/src/ringct/multiexp.cc
Examining data/monero-0.16.0.0/src/ringct/multiexp.h
Examining data/monero-0.16.0.0/src/ringct/rctCryptoOps.c
Examining data/monero-0.16.0.0/src/ringct/rctCryptoOps.h
Examining data/monero-0.16.0.0/src/ringct/rctOps.cpp
Examining data/monero-0.16.0.0/src/ringct/rctOps.h
Examining data/monero-0.16.0.0/src/ringct/rctSigs.cpp
Examining data/monero-0.16.0.0/src/ringct/rctSigs.h
Examining data/monero-0.16.0.0/src/ringct/rctTypes.cpp
Examining data/monero-0.16.0.0/src/ringct/rctTypes.h
Examining data/monero-0.16.0.0/src/rpc/bootstrap_daemon.cpp
Examining data/monero-0.16.0.0/src/rpc/bootstrap_daemon.h
Examining data/monero-0.16.0.0/src/rpc/bootstrap_node_selector.cpp
Examining data/monero-0.16.0.0/src/rpc/bootstrap_node_selector.h
Examining data/monero-0.16.0.0/src/rpc/core_rpc_server.cpp
Examining data/monero-0.16.0.0/src/rpc/core_rpc_server.h
Examining data/monero-0.16.0.0/src/rpc/core_rpc_server_commands_defs.h
Examining data/monero-0.16.0.0/src/rpc/core_rpc_server_error_codes.h
Examining data/monero-0.16.0.0/src/rpc/daemon_handler.cpp
Examining data/monero-0.16.0.0/src/rpc/daemon_handler.h
Examining data/monero-0.16.0.0/src/rpc/daemon_messages.cpp
Examining data/monero-0.16.0.0/src/rpc/daemon_messages.h
Examining data/monero-0.16.0.0/src/rpc/daemon_rpc_version.h
Examining data/monero-0.16.0.0/src/rpc/instanciations.cpp
Examining data/monero-0.16.0.0/src/rpc/message.cpp
Examining data/monero-0.16.0.0/src/rpc/message.h
Examining data/monero-0.16.0.0/src/rpc/message_data_structs.h
Examining data/monero-0.16.0.0/src/rpc/rpc_args.cpp
Examining data/monero-0.16.0.0/src/rpc/rpc_args.h
Examining data/monero-0.16.0.0/src/rpc/rpc_handler.cpp
Examining data/monero-0.16.0.0/src/rpc/rpc_handler.h
Examining data/monero-0.16.0.0/src/rpc/rpc_payment.cpp
Examining data/monero-0.16.0.0/src/rpc/rpc_payment.h
Examining data/monero-0.16.0.0/src/rpc/rpc_payment_costs.h
Examining data/monero-0.16.0.0/src/rpc/rpc_payment_signature.cpp
Examining data/monero-0.16.0.0/src/rpc/rpc_payment_signature.h
Examining data/monero-0.16.0.0/src/rpc/rpc_version_str.cpp
Examining data/monero-0.16.0.0/src/rpc/rpc_version_str.h
Examining data/monero-0.16.0.0/src/rpc/zmq_server.cpp
Examining data/monero-0.16.0.0/src/rpc/zmq_server.h
Examining data/monero-0.16.0.0/src/serialization/binary_archive.h
Examining data/monero-0.16.0.0/src/serialization/binary_utils.h
Examining data/monero-0.16.0.0/src/serialization/container.h
Examining data/monero-0.16.0.0/src/serialization/crypto.h
Examining data/monero-0.16.0.0/src/serialization/debug_archive.h
Examining data/monero-0.16.0.0/src/serialization/deque.h
Examining data/monero-0.16.0.0/src/serialization/difficulty_type.h
Examining data/monero-0.16.0.0/src/serialization/json_archive.h
Examining data/monero-0.16.0.0/src/serialization/json_object.cpp
Examining data/monero-0.16.0.0/src/serialization/json_object.h
Examining data/monero-0.16.0.0/src/serialization/json_utils.h
Examining data/monero-0.16.0.0/src/serialization/list.h
Examining data/monero-0.16.0.0/src/serialization/pair.h
Examining data/monero-0.16.0.0/src/serialization/serialization.h
Examining data/monero-0.16.0.0/src/serialization/set.h
Examining data/monero-0.16.0.0/src/serialization/string.h
Examining data/monero-0.16.0.0/src/serialization/unordered_set.h
Examining data/monero-0.16.0.0/src/serialization/variant.h
Examining data/monero-0.16.0.0/src/serialization/vector.h
Examining data/monero-0.16.0.0/src/simplewallet/simplewallet.cpp
Examining data/monero-0.16.0.0/src/simplewallet/simplewallet.h
Examining data/monero-0.16.0.0/src/version.h
Examining data/monero-0.16.0.0/src/wallet/api/address_book.cpp
Examining data/monero-0.16.0.0/src/wallet/api/address_book.h
Examining data/monero-0.16.0.0/src/wallet/api/common_defines.h
Examining data/monero-0.16.0.0/src/wallet/api/pending_transaction.cpp
Examining data/monero-0.16.0.0/src/wallet/api/pending_transaction.h
Examining data/monero-0.16.0.0/src/wallet/api/subaddress.cpp
Examining data/monero-0.16.0.0/src/wallet/api/subaddress.h
Examining data/monero-0.16.0.0/src/wallet/api/subaddress_account.cpp
Examining data/monero-0.16.0.0/src/wallet/api/subaddress_account.h
Examining data/monero-0.16.0.0/src/wallet/api/transaction_history.cpp
Examining data/monero-0.16.0.0/src/wallet/api/transaction_history.h
Examining data/monero-0.16.0.0/src/wallet/api/transaction_info.cpp
Examining data/monero-0.16.0.0/src/wallet/api/transaction_info.h
Examining data/monero-0.16.0.0/src/wallet/api/unsigned_transaction.cpp
Examining data/monero-0.16.0.0/src/wallet/api/unsigned_transaction.h
Examining data/monero-0.16.0.0/src/wallet/api/utils.cpp
Examining data/monero-0.16.0.0/src/wallet/api/wallet.cpp
Examining data/monero-0.16.0.0/src/wallet/api/wallet.h
Examining data/monero-0.16.0.0/src/wallet/api/wallet2_api.h
Examining data/monero-0.16.0.0/src/wallet/api/wallet_manager.cpp
Examining data/monero-0.16.0.0/src/wallet/api/wallet_manager.h
Examining data/monero-0.16.0.0/src/wallet/message_store.cpp
Examining data/monero-0.16.0.0/src/wallet/message_store.h
Examining data/monero-0.16.0.0/src/wallet/message_transporter.cpp
Examining data/monero-0.16.0.0/src/wallet/message_transporter.h
Examining data/monero-0.16.0.0/src/wallet/node_rpc_proxy.cpp
Examining data/monero-0.16.0.0/src/wallet/node_rpc_proxy.h
Examining data/monero-0.16.0.0/src/wallet/ringdb.cpp
Examining data/monero-0.16.0.0/src/wallet/ringdb.h
Examining data/monero-0.16.0.0/src/wallet/wallet2.cpp
Examining data/monero-0.16.0.0/src/wallet/wallet2.h
Examining data/monero-0.16.0.0/src/wallet/wallet_args.cpp
Examining data/monero-0.16.0.0/src/wallet/wallet_args.h
Examining data/monero-0.16.0.0/src/wallet/wallet_errors.h
Examining data/monero-0.16.0.0/src/wallet/wallet_light_rpc.h
Examining data/monero-0.16.0.0/src/wallet/wallet_rpc_helpers.h
Examining data/monero-0.16.0.0/src/wallet/wallet_rpc_payments.cpp
Examining data/monero-0.16.0.0/src/wallet/wallet_rpc_server.cpp
Examining data/monero-0.16.0.0/src/wallet/wallet_rpc_server.h
Examining data/monero-0.16.0.0/src/wallet/wallet_rpc_server_commands_defs.h
Examining data/monero-0.16.0.0/src/wallet/wallet_rpc_server_error_codes.h
Examining data/monero-0.16.0.0/tests/block_weight/block_weight.cpp
Examining data/monero-0.16.0.0/tests/core_proxy/core_proxy.cpp
Examining data/monero-0.16.0.0/tests/core_proxy/core_proxy.h
Examining data/monero-0.16.0.0/tests/core_tests/block_reward.cpp
Examining data/monero-0.16.0.0/tests/core_tests/block_reward.h
Examining data/monero-0.16.0.0/tests/core_tests/block_validation.cpp
Examining data/monero-0.16.0.0/tests/core_tests/block_validation.h
Examining data/monero-0.16.0.0/tests/core_tests/bulletproofs.cpp
Examining data/monero-0.16.0.0/tests/core_tests/bulletproofs.h
Examining data/monero-0.16.0.0/tests/core_tests/chain_split_1.cpp
Examining data/monero-0.16.0.0/tests/core_tests/chain_split_1.h
Examining data/monero-0.16.0.0/tests/core_tests/chain_switch_1.cpp
Examining data/monero-0.16.0.0/tests/core_tests/chain_switch_1.h
Examining data/monero-0.16.0.0/tests/core_tests/chaingen.cpp
Examining data/monero-0.16.0.0/tests/core_tests/chaingen.h
Examining data/monero-0.16.0.0/tests/core_tests/chaingen001.cpp
Examining data/monero-0.16.0.0/tests/core_tests/chaingen_main.cpp
Examining data/monero-0.16.0.0/tests/core_tests/chaingen_tests_list.h
Examining data/monero-0.16.0.0/tests/core_tests/double_spend.cpp
Examining data/monero-0.16.0.0/tests/core_tests/double_spend.h
Examining data/monero-0.16.0.0/tests/core_tests/integer_overflow.cpp
Examining data/monero-0.16.0.0/tests/core_tests/integer_overflow.h
Examining data/monero-0.16.0.0/tests/core_tests/multisig.cpp
Examining data/monero-0.16.0.0/tests/core_tests/multisig.h
Examining data/monero-0.16.0.0/tests/core_tests/rct.cpp
Examining data/monero-0.16.0.0/tests/core_tests/rct.h
Examining data/monero-0.16.0.0/tests/core_tests/ring_signature_1.cpp
Examining data/monero-0.16.0.0/tests/core_tests/ring_signature_1.h
Examining data/monero-0.16.0.0/tests/core_tests/transaction_tests.cpp
Examining data/monero-0.16.0.0/tests/core_tests/transaction_tests.h
Examining data/monero-0.16.0.0/tests/core_tests/tx_pool.cpp
Examining data/monero-0.16.0.0/tests/core_tests/tx_pool.h
Examining data/monero-0.16.0.0/tests/core_tests/tx_validation.cpp
Examining data/monero-0.16.0.0/tests/core_tests/tx_validation.h
Examining data/monero-0.16.0.0/tests/core_tests/v2_tests.cpp
Examining data/monero-0.16.0.0/tests/core_tests/v2_tests.h
Examining data/monero-0.16.0.0/tests/core_tests/wallet_tools.cpp
Examining data/monero-0.16.0.0/tests/core_tests/wallet_tools.h
Examining data/monero-0.16.0.0/tests/crypto/cnv4-jit.c
Examining data/monero-0.16.0.0/tests/crypto/crypto-ops-data.c
Examining data/monero-0.16.0.0/tests/crypto/crypto-ops.c
Examining data/monero-0.16.0.0/tests/crypto/crypto-tests.h
Examining data/monero-0.16.0.0/tests/crypto/crypto.cpp
Examining data/monero-0.16.0.0/tests/crypto/hash.c
Examining data/monero-0.16.0.0/tests/crypto/main.cpp
Examining data/monero-0.16.0.0/tests/crypto/random.c
Examining data/monero-0.16.0.0/tests/daemon_tests/transfers.cpp
Examining data/monero-0.16.0.0/tests/difficulty/difficulty.cpp
Examining data/monero-0.16.0.0/tests/functional_tests/main.cpp
Examining data/monero-0.16.0.0/tests/functional_tests/make_test_signature.cc
Examining data/monero-0.16.0.0/tests/functional_tests/transactions_flow_test.cpp
Examining data/monero-0.16.0.0/tests/functional_tests/transactions_flow_test.h
Examining data/monero-0.16.0.0/tests/functional_tests/transactions_generation_from_blockchain.cpp
Examining data/monero-0.16.0.0/tests/functional_tests/transactions_generation_from_blockchain.h
Examining data/monero-0.16.0.0/tests/fuzz/base58.cpp
Examining data/monero-0.16.0.0/tests/fuzz/block.cpp
Examining data/monero-0.16.0.0/tests/fuzz/bulletproof.cpp
Examining data/monero-0.16.0.0/tests/fuzz/cold-outputs.cpp
Examining data/monero-0.16.0.0/tests/fuzz/cold-transaction.cpp
Examining data/monero-0.16.0.0/tests/fuzz/fuzzer.cpp
Examining data/monero-0.16.0.0/tests/fuzz/fuzzer.h
Examining data/monero-0.16.0.0/tests/fuzz/http-client.cpp
Examining data/monero-0.16.0.0/tests/fuzz/levin.cpp
Examining data/monero-0.16.0.0/tests/fuzz/load_from_binary.cpp
Examining data/monero-0.16.0.0/tests/fuzz/load_from_json.cpp
Examining data/monero-0.16.0.0/tests/fuzz/parse_url.cpp
Examining data/monero-0.16.0.0/tests/fuzz/signature.cpp
Examining data/monero-0.16.0.0/tests/fuzz/transaction.cpp
Examining data/monero-0.16.0.0/tests/gtest/include/gtest/gtest-death-test.h
Examining data/monero-0.16.0.0/tests/gtest/include/gtest/gtest-message.h
Examining data/monero-0.16.0.0/tests/gtest/include/gtest/gtest-param-test.h
Examining data/monero-0.16.0.0/tests/gtest/include/gtest/gtest-printers.h
Examining data/monero-0.16.0.0/tests/gtest/include/gtest/gtest-spi.h
Examining data/monero-0.16.0.0/tests/gtest/include/gtest/gtest-test-part.h
Examining data/monero-0.16.0.0/tests/gtest/include/gtest/gtest-typed-test.h
Examining data/monero-0.16.0.0/tests/gtest/include/gtest/gtest.h
Examining data/monero-0.16.0.0/tests/gtest/include/gtest/gtest_pred_impl.h
Examining data/monero-0.16.0.0/tests/gtest/include/gtest/gtest_prod.h
Examining data/monero-0.16.0.0/tests/gtest/include/gtest/internal/custom/gtest-port.h
Examining data/monero-0.16.0.0/tests/gtest/include/gtest/internal/custom/gtest-printers.h
Examining data/monero-0.16.0.0/tests/gtest/include/gtest/internal/custom/gtest.h
Examining data/monero-0.16.0.0/tests/gtest/include/gtest/internal/gtest-death-test-internal.h
Examining data/monero-0.16.0.0/tests/gtest/include/gtest/internal/gtest-filepath.h
Examining data/monero-0.16.0.0/tests/gtest/include/gtest/internal/gtest-internal.h
Examining data/monero-0.16.0.0/tests/gtest/include/gtest/internal/gtest-linked_ptr.h
Examining data/monero-0.16.0.0/tests/gtest/include/gtest/internal/gtest-param-util-generated.h
Examining data/monero-0.16.0.0/tests/gtest/include/gtest/internal/gtest-param-util.h
Examining data/monero-0.16.0.0/tests/gtest/include/gtest/internal/gtest-port-arch.h
Examining data/monero-0.16.0.0/tests/gtest/include/gtest/internal/gtest-port.h
Examining data/monero-0.16.0.0/tests/gtest/include/gtest/internal/gtest-string.h
Examining data/monero-0.16.0.0/tests/gtest/include/gtest/internal/gtest-tuple.h
Examining data/monero-0.16.0.0/tests/gtest/include/gtest/internal/gtest-type-util.h
Examining data/monero-0.16.0.0/tests/gtest/src/gtest-all.cc
Examining data/monero-0.16.0.0/tests/gtest/src/gtest-death-test.cc
Examining data/monero-0.16.0.0/tests/gtest/src/gtest-filepath.cc
Examining data/monero-0.16.0.0/tests/gtest/src/gtest-internal-inl.h
Examining data/monero-0.16.0.0/tests/gtest/src/gtest-port.cc
Examining data/monero-0.16.0.0/tests/gtest/src/gtest-printers.cc
Examining data/monero-0.16.0.0/tests/gtest/src/gtest-test-part.cc
Examining data/monero-0.16.0.0/tests/gtest/src/gtest-typed-test.cc
Examining data/monero-0.16.0.0/tests/gtest/src/gtest.cc
Examining data/monero-0.16.0.0/tests/gtest/src/gtest_main.cc
Examining data/monero-0.16.0.0/tests/hash-target.cpp
Examining data/monero-0.16.0.0/tests/hash/main.cpp
Examining data/monero-0.16.0.0/tests/io.h
Examining data/monero-0.16.0.0/tests/libwallet_api_tests/main.cpp
Examining data/monero-0.16.0.0/tests/net_load_tests/clt.cpp
Examining data/monero-0.16.0.0/tests/net_load_tests/net_load_tests.h
Examining data/monero-0.16.0.0/tests/net_load_tests/srv.cpp
Examining data/monero-0.16.0.0/tests/performance_tests/bulletproof.h
Examining data/monero-0.16.0.0/tests/performance_tests/check_hash.h
Examining data/monero-0.16.0.0/tests/performance_tests/check_tx_signature.h
Examining data/monero-0.16.0.0/tests/performance_tests/cn_fast_hash.h
Examining data/monero-0.16.0.0/tests/performance_tests/cn_slow_hash.h
Examining data/monero-0.16.0.0/tests/performance_tests/construct_tx.h
Examining data/monero-0.16.0.0/tests/performance_tests/crypto_ops.h
Examining data/monero-0.16.0.0/tests/performance_tests/derive_public_key.h
Examining data/monero-0.16.0.0/tests/performance_tests/derive_secret_key.h
Examining data/monero-0.16.0.0/tests/performance_tests/equality.h
Examining data/monero-0.16.0.0/tests/performance_tests/ge_frombytes_vartime.h
Examining data/monero-0.16.0.0/tests/performance_tests/ge_tobytes.h
Examining data/monero-0.16.0.0/tests/performance_tests/generate_key_derivation.h
Examining data/monero-0.16.0.0/tests/performance_tests/generate_key_image.h
Examining data/monero-0.16.0.0/tests/performance_tests/generate_key_image_helper.h
Examining data/monero-0.16.0.0/tests/performance_tests/generate_keypair.h
Examining data/monero-0.16.0.0/tests/performance_tests/is_out_to_acc.h
Examining data/monero-0.16.0.0/tests/performance_tests/main.cpp
Examining data/monero-0.16.0.0/tests/performance_tests/multi_tx_test_base.h
Examining data/monero-0.16.0.0/tests/performance_tests/multiexp.h
Examining data/monero-0.16.0.0/tests/performance_tests/performance_tests.h
Examining data/monero-0.16.0.0/tests/performance_tests/performance_utils.h
Examining data/monero-0.16.0.0/tests/performance_tests/range_proof.h
Examining data/monero-0.16.0.0/tests/performance_tests/rct_mlsag.h
Examining data/monero-0.16.0.0/tests/performance_tests/sc_check.h
Examining data/monero-0.16.0.0/tests/performance_tests/sc_reduce32.h
Examining data/monero-0.16.0.0/tests/performance_tests/signature.h
Examining data/monero-0.16.0.0/tests/performance_tests/single_tx_test_base.h
Examining data/monero-0.16.0.0/tests/performance_tests/subaddress_expand.h
Examining data/monero-0.16.0.0/tests/trezor/daemon.cpp
Examining data/monero-0.16.0.0/tests/trezor/daemon.h
Examining data/monero-0.16.0.0/tests/trezor/tools.cpp
Examining data/monero-0.16.0.0/tests/trezor/tools.h
Examining data/monero-0.16.0.0/tests/trezor/trezor_tests.cpp
Examining data/monero-0.16.0.0/tests/trezor/trezor_tests.h
Examining data/monero-0.16.0.0/tests/unit_tests/account.cpp
Examining data/monero-0.16.0.0/tests/unit_tests/address_from_url.cpp
Examining data/monero-0.16.0.0/tests/unit_tests/aligned.cpp
Examining data/monero-0.16.0.0/tests/unit_tests/apply_permutation.cpp
Examining data/monero-0.16.0.0/tests/unit_tests/base58.cpp
Examining data/monero-0.16.0.0/tests/unit_tests/block_queue.cpp
Examining data/monero-0.16.0.0/tests/unit_tests/block_reward.cpp
Examining data/monero-0.16.0.0/tests/unit_tests/blockchain_db.cpp
Examining data/monero-0.16.0.0/tests/unit_tests/bootstrap_node_selector.cpp
Examining data/monero-0.16.0.0/tests/unit_tests/bulletproofs.cpp
Examining data/monero-0.16.0.0/tests/unit_tests/canonical_amounts.cpp
Examining data/monero-0.16.0.0/tests/unit_tests/chacha.cpp
Examining data/monero-0.16.0.0/tests/unit_tests/checkpoints.cpp
Examining data/monero-0.16.0.0/tests/unit_tests/command_line.cpp
Examining data/monero-0.16.0.0/tests/unit_tests/crypto.cpp
Examining data/monero-0.16.0.0/tests/unit_tests/decompose_amount_into_digits.cpp
Examining data/monero-0.16.0.0/tests/unit_tests/device.cpp
Examining data/monero-0.16.0.0/tests/unit_tests/difficulty.cpp
Examining data/monero-0.16.0.0/tests/unit_tests/dns_resolver.cpp
Examining data/monero-0.16.0.0/tests/unit_tests/epee_boosted_tcp_server.cpp
Examining data/monero-0.16.0.0/tests/unit_tests/epee_levin_protocol_handler_async.cpp
Examining data/monero-0.16.0.0/tests/unit_tests/epee_utils.cpp
Examining data/monero-0.16.0.0/tests/unit_tests/expect.cpp
Examining data/monero-0.16.0.0/tests/unit_tests/fee.cpp
Examining data/monero-0.16.0.0/tests/unit_tests/get_xtype_from_string.cpp
Examining data/monero-0.16.0.0/tests/unit_tests/hardfork.cpp
Examining data/monero-0.16.0.0/tests/unit_tests/hashchain.cpp
Examining data/monero-0.16.0.0/tests/unit_tests/hmac_keccak.cpp
Examining data/monero-0.16.0.0/tests/unit_tests/http.cpp
Examining data/monero-0.16.0.0/tests/unit_tests/is_hdd.cpp
Examining data/monero-0.16.0.0/tests/unit_tests/json_serialization.cpp
Examining data/monero-0.16.0.0/tests/unit_tests/keccak.cpp
Examining data/monero-0.16.0.0/tests/unit_tests/levin.cpp
Examining data/monero-0.16.0.0/tests/unit_tests/lmdb.cpp
Examining data/monero-0.16.0.0/tests/unit_tests/logging.cpp
Examining data/monero-0.16.0.0/tests/unit_tests/long_term_block_weight.cpp
Examining data/monero-0.16.0.0/tests/unit_tests/main.cpp
Examining data/monero-0.16.0.0/tests/unit_tests/memwipe.cpp
Examining data/monero-0.16.0.0/tests/unit_tests/mlocker.cpp
Examining data/monero-0.16.0.0/tests/unit_tests/mnemonics.cpp
Examining data/monero-0.16.0.0/tests/unit_tests/mul_div.cpp
Examining data/monero-0.16.0.0/tests/unit_tests/multiexp.cpp
Examining data/monero-0.16.0.0/tests/unit_tests/multisig.cpp
Examining data/monero-0.16.0.0/tests/unit_tests/net.cpp
Examining data/monero-0.16.0.0/tests/unit_tests/node_server.cpp
Examining data/monero-0.16.0.0/tests/unit_tests/notify.cpp
Examining data/monero-0.16.0.0/tests/unit_tests/output_distribution.cpp
Examining data/monero-0.16.0.0/tests/unit_tests/output_selection.cpp
Examining data/monero-0.16.0.0/tests/unit_tests/parse_amount.cpp
Examining data/monero-0.16.0.0/tests/unit_tests/pruning.cpp
Examining data/monero-0.16.0.0/tests/unit_tests/random.cpp
Examining data/monero-0.16.0.0/tests/unit_tests/ringct.cpp
Examining data/monero-0.16.0.0/tests/unit_tests/ringdb.cpp
Examining data/monero-0.16.0.0/tests/unit_tests/rolling_median.cpp
Examining data/monero-0.16.0.0/tests/unit_tests/rpc_version_str.cpp
Examining data/monero-0.16.0.0/tests/unit_tests/serialization.cpp
Examining data/monero-0.16.0.0/tests/unit_tests/sha256.cpp
Examining data/monero-0.16.0.0/tests/unit_tests/slow_memmem.cpp
Examining data/monero-0.16.0.0/tests/unit_tests/subaddress.cpp
Examining data/monero-0.16.0.0/tests/unit_tests/test_notifier.cpp
Examining data/monero-0.16.0.0/tests/unit_tests/test_peerlist.cpp
Examining data/monero-0.16.0.0/tests/unit_tests/test_protocol_pack.cpp
Examining data/monero-0.16.0.0/tests/unit_tests/test_tx_utils.cpp
Examining data/monero-0.16.0.0/tests/unit_tests/threadpool.cpp
Examining data/monero-0.16.0.0/tests/unit_tests/unbound.cpp
Examining data/monero-0.16.0.0/tests/unit_tests/unit_tests_utils.h
Examining data/monero-0.16.0.0/tests/unit_tests/uri.cpp
Examining data/monero-0.16.0.0/tests/unit_tests/varint.cpp
Examining data/monero-0.16.0.0/tests/unit_tests/vercmp.cpp
Examining data/monero-0.16.0.0/tests/unit_tests/wipeable_string.cpp
Examining data/monero-0.16.0.0/tests/unit_tests/zmq_rpc.cpp
Examining data/monero-0.16.0.0/translations/generate_translations_header.c
FINAL RESULTS:
data/monero-0.16.0.0/external/db_drivers/liblmdb/mdb.c:5253:4: [5] (misc) SetSecurityDescriptorDacl:
Never create NULL ACLs; an attacker can set it to Everyone (Deny All
Access), which would even forbid administrator access (CWE-732).
SetSecurityDescriptorDacl(&mdb_null_sd, TRUE, 0, FALSE);
data/monero-0.16.0.0/external/db_drivers/liblmdb/mdb.c:5253:4: [5] (misc) SetSecurityDescriptorDacl:
Never create NULL ACLs; an attacker can set it to Everyone (Deny All
Access), which would even forbid administrator access (CWE-732).
SetSecurityDescriptorDacl(&mdb_null_sd, TRUE, 0, FALSE);
data/monero-0.16.0.0/contrib/epee/include/file_io_utils.h:109:10: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
boost::system::error_code ec;
data/monero-0.16.0.0/contrib/epee/include/file_io_utils.h:120:10: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
boost::system::error_code ec;
data/monero-0.16.0.0/contrib/epee/include/misc_log_ex.h:232:48: [4] (format) printf:
If format strings can be influenced by an attacker, they can be exploited
(CWE-134). Use a constant for the format specification.
#define ATTRIBUTE_PRINTF __attribute__((format(printf, 2, 3)))
data/monero-0.16.0.0/contrib/epee/include/misc_os_dependent.h:104:8: [4] (shell) popen:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
fp = popen(cmd.c_str(), "r");
data/monero-0.16.0.0/contrib/epee/include/net/abstract_tcp_server2.h:153:38: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
void handle_receive(const boost::system::error_code& e,
data/monero-0.16.0.0/contrib/epee/include/net/abstract_tcp_server2.h:157:35: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
void handle_read(const boost::system::error_code& e,
data/monero-0.16.0.0/contrib/epee/include/net/abstract_tcp_server2.h:161:36: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
void handle_write(const boost::system::error_code& e, size_t cb);
data/monero-0.16.0.0/contrib/epee/include/net/abstract_tcp_server2.h:355:42: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
void handle_accept_ipv4(const boost::system::error_code& e);
data/monero-0.16.0.0/contrib/epee/include/net/abstract_tcp_server2.h:356:42: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
void handle_accept_ipv6(const boost::system::error_code& e);
data/monero-0.16.0.0/contrib/epee/include/net/abstract_tcp_server2.h:357:37: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
void handle_accept(const boost::system::error_code& e, bool ipv6 = false);
data/monero-0.16.0.0/contrib/epee/include/net/connection_basic.hpp:170:54: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
void do_send_handler_write_from_queue(const boost::system::error_code& e, size_t cb , int q_len); // from handle_write, sending next part
data/monero-0.16.0.0/contrib/epee/include/net/levin_protocol_handler_async.h:191:70: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
m_timer.async_wait([&con, command, cb, timeout](const boost::system::error_code& ec)
data/monero-0.16.0.0/contrib/epee/include/net/levin_protocol_handler_async.h:240:16: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
boost::system::error_code ignored_ec;
data/monero-0.16.0.0/contrib/epee/include/net/levin_protocol_handler_async.h:247:14: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
boost::system::error_code ignored_ec;
data/monero-0.16.0.0/contrib/epee/include/net/levin_protocol_handler_async.h:255:70: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
m_timer.async_wait([&con, cb, command, timeout](const boost::system::error_code& ec)
data/monero-0.16.0.0/contrib/epee/include/net/net_helper.h:84:25: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
handler_obj(boost::system::error_code& error, size_t& bytes_transferred):ref_error(error), ref_bytes_transferred(bytes_transferred)
data/monero-0.16.0.0/contrib/epee/include/net/net_helper.h:89:13: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
boost::system::error_code& ref_error;
data/monero-0.16.0.0/contrib/epee/include/net/net_helper.h:92:35: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
void operator()(const boost::system::error_code& error, // Result of operation.
data/monero-0.16.0.0/contrib/epee/include/net/net_helper.h:185:16: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
boost::system::error_code ignored_ec;
data/monero-0.16.0.0/contrib/epee/include/net/net_helper.h:236:23: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
catch(const boost::system::system_error& er)
data/monero-0.16.0.0/contrib/epee/include/net/net_helper.h:268:23: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
catch(const boost::system::system_error& /*er*/)
data/monero-0.16.0.0/contrib/epee/include/net/net_helper.h:295:12: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
boost::system::error_code ec = boost::asio::error::would_block;
data/monero-0.16.0.0/contrib/epee/include/net/net_helper.h:322:23: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
catch(const boost::system::system_error& er)
data/monero-0.16.0.0/contrib/epee/include/net/net_helper.h:363:12: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
boost::system::error_code ec;
data/monero-0.16.0.0/contrib/epee/include/net/net_helper.h:379:23: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
catch(const boost::system::system_error& er)
data/monero-0.16.0.0/contrib/epee/include/net/net_helper.h:426:12: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
boost::system::error_code ec = boost::asio::error::would_block;
data/monero-0.16.0.0/contrib/epee/include/net/net_helper.h:472:23: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
catch(const boost::system::system_error& er)
data/monero-0.16.0.0/contrib/epee/include/net/net_helper.h:513:12: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
boost::system::error_code ec = boost::asio::error::would_block;
data/monero-0.16.0.0/contrib/epee/include/net/net_helper.h:546:23: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
catch(const boost::system::system_error& er)
data/monero-0.16.0.0/contrib/epee/include/net/net_helper.h:566:11: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
boost::system::error_code ec;
data/monero-0.16.0.0/contrib/epee/include/net/net_helper.h:630:11: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
boost::system::error_code ec = boost::asio::error::would_block;
data/monero-0.16.0.0/contrib/epee/include/net/net_helper.h:651:50: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
bool write(const void* data, size_t sz, boost::system::error_code& ec)
data/monero-0.16.0.0/contrib/epee/include/net/net_helper.h:661:56: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
void async_write(const void* data, size_t sz, boost::system::error_code& ec)
data/monero-0.16.0.0/contrib/epee/include/net/net_helper.h:749:12: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
boost::system::error_code ec;
data/monero-0.16.0.0/contrib/epee/include/net/net_helper.h:763:23: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
catch(const boost::system::system_error& er)
data/monero-0.16.0.0/contrib/epee/include/net/smtp.h:85:36: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
void handleResolve(const boost::system::error_code& err,tcp::resolver::iterator endpoint_iterator)
data/monero-0.16.0.0/contrib/epee/include/net/smtp.h:113:36: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
void handleConnect(const boost::system::error_code& err,tcp::resolver::iterator endpoint_iterator)
data/monero-0.16.0.0/contrib/epee/src/connection_basic.cpp:151:15: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
try { boost::system::error_code e; remote_addr_str = socket().remote_endpoint(e).address().to_string(); } catch(...){} ;
data/monero-0.16.0.0/contrib/epee/src/connection_basic.cpp:174:15: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
try { boost::system::error_code e; remote_addr_str = socket().remote_endpoint(e).address().to_string(); } catch(...){} ;
data/monero-0.16.0.0/contrib/epee/src/connection_basic.cpp:183:15: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
try { boost::system::error_code e; remote_addr_str = socket().remote_endpoint(e).address().to_string(); } catch(...){} ;
data/monero-0.16.0.0/contrib/epee/src/connection_basic.cpp:272:71: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
void connection_basic::do_send_handler_write_from_queue( const boost::system::error_code& e, size_t cb, int q_len ) {
data/monero-0.16.0.0/contrib/epee/src/mlog.cpp:191:18: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
boost::system::error_code ec;
data/monero-0.16.0.0/contrib/epee/src/mlog.cpp:211:20: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
boost::system::error_code ec;
data/monero-0.16.0.0/contrib/epee/src/mlog.cpp:484:10: [4] (format) vsnprintf:
If format strings can be influenced by an attacker, they can be exploited,
and note that sprintf variations do not always \0-terminate (CWE-134). Use
a constant for the format specification.
size = vsnprintf(p, size, format, apc);
data/monero-0.16.0.0/contrib/epee/src/mlog.cpp:494:10: [4] (format) vsnprintf:
If format strings can be influenced by an attacker, they can be exploited,
and note that sprintf variations do not always \0-terminate (CWE-134). Use
a constant for the format specification.
size = vsnprintf(p, size, format, ap);
data/monero-0.16.0.0/contrib/epee/src/net_helper.cpp:18:10: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
boost::system::error_code resolve_error;
data/monero-0.16.0.0/contrib/epee/src/net_helper.cpp:31:23: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
catch (const boost::system::system_error& e)
data/monero-0.16.0.0/contrib/epee/src/net_helper.cpp:45:18: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
throw boost::system::system_error{boost::asio::error::fault, "Failed to resolve " + addr};
data/monero-0.16.0.0/contrib/epee/src/net_helper.cpp:61:39: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
timeout.async_wait([shared] (boost::system::error_code error)
data/monero-0.16.0.0/contrib/epee/src/net_helper.cpp:63:24: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
if (error != boost::system::errc::operation_canceled && shared && shared->socket_.is_open())
data/monero-0.16.0.0/contrib/epee/src/net_helper.cpp:69:61: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
shared->socket_.async_connect(*iterator, [shared] (boost::system::error_code error)
data/monero-0.16.0.0/contrib/epee/src/net_helper.cpp:74:43: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
shared->result_.set_exception(boost::system::system_error{error});
data/monero-0.16.0.0/contrib/epee/src/net_ssl.cpp:106:10: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
boost::system::error_code load_ca_file(boost::asio::ssl::context& ctx, const std::string& path)
data/monero-0.16.0.0/contrib/epee/src/net_ssl.cpp:114:21: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
return boost::system::error_code{
data/monero-0.16.0.0/contrib/epee/src/net_ssl.cpp:118:19: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
return boost::system::error_code{};
data/monero-0.16.0.0/contrib/epee/src/net_ssl.cpp:346:22: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
const boost::system::error_code err = load_ca_file(ssl_context, ca_path);
data/monero-0.16.0.0/contrib/epee/src/net_ssl.cpp:348:24: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
throw boost::system::system_error{err, "Failed to load user CA file at " + ca_path};
data/monero-0.16.0.0/contrib/epee/src/net_ssl.cpp:525:46: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
deadline.async_wait([&socket](const boost::system::error_code& error) {
data/monero-0.16.0.0/contrib/epee/src/net_ssl.cpp:532:10: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
boost::system::error_code ec = boost::asio::error::would_block;
data/monero-0.16.0.0/contrib/epee/tests/src/net/test_net.h:324:200: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
bool r = srv.connect_async("127.0.0.1", string_tools::num_to_string_fast(port), 5000, [&srv, &port, &wait_event, &i, &cntxt_local](const net_utils::connection_context_base& cntxt, const boost::system::error_code& ec)
data/monero-0.16.0.0/external/db_drivers/liblmdb/mdb.c:4371:3: [4] (race) access:
This usually indicates a security flaw. If an attacker can change anything
along the path between the call to access() and the file's actual use
(e.g., by moving files), the attacker can exploit the race condition
(CWE-362/CWE-367!). Set up the correct permissions (e.g., using setuid())
and try to open the file directly.
access |= SECTION_MAP_WRITE;
data/monero-0.16.0.0/external/db_drivers/liblmdb/mdb.c:4384:28: [4] (race) access:
This usually indicates a security flaw. If an attacker can change anything
along the path between the call to access() and the file's actual use
(e.g., by moving files), the attacker can exploit the race condition
(CWE-362/CWE-367!). Set up the correct permissions (e.g., using setuid())
and try to open the file directly.
rc = NtCreateSection(&mh, access, NULL, NULL, secprot, SEC_RESERVE, env->me_fd);
data/monero-0.16.0.0/external/db_drivers/liblmdb/mdb.c:4544:23: [4] (buffer) wcscpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using a function version that stops copying at the end
of the buffer.
# define mdb_name_cpy wcscpy
data/monero-0.16.0.0/external/db_drivers/liblmdb/mdb.c:4549:23: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
# define mdb_name_cpy strcpy /**< Copy name (#mdb_nchar_t string) */
data/monero-0.16.0.0/external/db_drivers/liblmdb/mdb.c:4588:3: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(fname->mn_val, path);
data/monero-0.16.0.0/external/db_drivers/liblmdb/mdb.c:5143:2: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(nm, MUTEXNAME_PREFIX);
data/monero-0.16.0.0/external/db_drivers/liblmdb/mdb.c:11000:4: [4] (format) sprintf:
Potential format string problem (CWE-134). Make format string constant.
sprintf(buf, txnid == (txnid_t)-1 ?
data/monero-0.16.0.0/external/db_drivers/liblmdb/mdb_load.c:113:8: [4] (buffer) sscanf:
The scanf() family's %s operation, without a limit specification, permits
buffer overflows (CWE-120, CWE-20). Specify a limit to %s, or use a
different input function. If the scanf format is influenceable by an
attacker, it's exploitable.
i = sscanf((char *)dbuf.mv_data+STRLENOF("mapsize="),
data/monero-0.16.0.0/external/db_drivers/liblmdb/mdb_stat.c:197:7: [4] (format) printf:
If format strings can be influenced by an attacker, they can be exploited
(CWE-134). Use a constant for the format specification.
printf(span>1 ? " %9"Yu"[%"Z"d]\n" : " %9"Yu"\n",
data/monero-0.16.0.0/external/db_drivers/liblmdb/mtest.c:21:53: [4] (format) fprintf:
If format strings can be influenced by an attacker, they can be exploited
(CWE-134). Use a constant for the format specification.
#define CHECK(test, msg) ((test) ? (void)0 : ((void)fprintf(stderr, \
data/monero-0.16.0.0/external/db_drivers/liblmdb/mtest2.c:24:53: [4] (format) fprintf:
If format strings can be influenced by an attacker, they can be exploited
(CWE-134). Use a constant for the format specification.
#define CHECK(test, msg) ((test) ? (void)0 : ((void)fprintf(stderr, \
data/monero-0.16.0.0/external/db_drivers/liblmdb/mtest3.c:24:53: [4] (format) fprintf:
If format strings can be influenced by an attacker, they can be exploited
(CWE-134). Use a constant for the format specification.
#define CHECK(test, msg) ((test) ? (void)0 : ((void)fprintf(stderr, \
data/monero-0.16.0.0/external/db_drivers/liblmdb/mtest4.c:24:53: [4] (format) fprintf:
If format strings can be influenced by an attacker, they can be exploited
(CWE-134). Use a constant for the format specification.
#define CHECK(test, msg) ((test) ? (void)0 : ((void)fprintf(stderr, \
data/monero-0.16.0.0/external/db_drivers/liblmdb/mtest5.c:24:53: [4] (format) fprintf:
If format strings can be influenced by an attacker, they can be exploited
(CWE-134). Use a constant for the format specification.
#define CHECK(test, msg) ((test) ? (void)0 : ((void)fprintf(stderr, \
data/monero-0.16.0.0/external/db_drivers/liblmdb/mtest6.c:24:53: [4] (format) fprintf:
If format strings can be influenced by an attacker, they can be exploited
(CWE-134). Use a constant for the format specification.
#define CHECK(test, msg) ((test) ? (void)0 : ((void)fprintf(stderr, \
data/monero-0.16.0.0/external/easylogging++/easylogging++.cc:1170:15: [4] (shell) popen:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
if ((proc = popen(command, "r")) == nullptr) {
data/monero-0.16.0.0/external/easylogging++/easylogging++.h:267:29: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
# define STRCAT(a, b, len) strcat(a, b)
data/monero-0.16.0.0/external/easylogging++/easylogging++.h:268:29: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
# define STRCPY(a, b, len) strcpy(a, b)
data/monero-0.16.0.0/src/blockchain_utilities/blockchain_ancestry.cpp:432:9: [4] (buffer) sscanf:
The scanf() family's %s operation, without a limit specification, permits
buffer overflows (CWE-120, CWE-20). Specify a limit to %s, or use a
different input function. If the scanf format is influenceable by an
attacker, it's exploitable.
if (sscanf(opt_output_string.c_str(), "%" SCNu64 "/%" SCNu64, &output_amount, &output_offset) != 2)
data/monero-0.16.0.0/src/blockchain_utilities/blockchain_blackball.cpp:1084:9: [4] (buffer) sscanf:
The scanf() family's %s operation, without a limit specification, permits
buffer overflows (CWE-120, CWE-20). Specify a limit to %s, or use a
different input function. If the scanf format is influenceable by an
attacker, it's exploitable.
if (sscanf(s, "@%" PRIu64, &amount) == 1)
data/monero-0.16.0.0/src/blockchain_utilities/blockchain_blackball.cpp:1093:9: [4] (buffer) sscanf:
The scanf() family's %s operation, without a limit specification, permits
buffer overflows (CWE-120, CWE-20). Specify a limit to %s, or use a
different input function. If the scanf format is influenceable by an
attacker, it's exploitable.
if (sscanf(s, "%" PRIu64 "*%" PRIu64, &offset, &num_offsets) == 2 && num_offsets < std::numeric_limits<uint64_t>::max() - offset)
data/monero-0.16.0.0/src/blockchain_utilities/blockchain_blackball.cpp:1098:14: [4] (buffer) sscanf:
The scanf() family's %s operation, without a limit specification, permits
buffer overflows (CWE-120, CWE-20). Specify a limit to %s, or use a
different input function. If the scanf format is influenceable by an
attacker, it's exploitable.
else if (sscanf(s, "%" PRIu64, &offset) == 1)
data/monero-0.16.0.0/src/blockchain_utilities/blockchain_import.cpp:223:10: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
boost::system::error_code ec;
data/monero-0.16.0.0/src/blockchain_utilities/blockchain_prune_known_spent_data.cpp:71:9: [4] (buffer) sscanf:
The scanf() family's %s operation, without a limit specification, permits
buffer overflows (CWE-120, CWE-20). Specify a limit to %s, or use a
different input function. If the scanf format is influenceable by an
attacker, it's exploitable.
if (sscanf(s, "@%" PRIu64, &amount) == 1)
data/monero-0.16.0.0/src/blockchain_utilities/blockchain_prune_known_spent_data.cpp:80:9: [4] (buffer) sscanf:
The scanf() family's %s operation, without a limit specification, permits
buffer overflows (CWE-120, CWE-20). Specify a limit to %s, or use a
different input function. If the scanf format is influenceable by an
attacker, it's exploitable.
if (sscanf(s, "%" PRIu64 "*%" PRIu64, &offset, &num_offsets) == 2 && num_offsets < std::numeric_limits<uint64_t>::max() - offset)
data/monero-0.16.0.0/src/blockchain_utilities/blockchain_prune_known_spent_data.cpp:84:14: [4] (buffer) sscanf:
The scanf() family's %s operation, without a limit specification, permits
buffer overflows (CWE-120, CWE-20). Specify a limit to %s, or use a
different input function. If the scanf format is influenceable by an
attacker, it's exploitable.
else if (sscanf(s, "%" PRIu64, &offset) == 1)
data/monero-0.16.0.0/src/blockchain_utilities/bootstrap_file.cpp:448:10: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
boost::system::error_code ec;
data/monero-0.16.0.0/src/checkpoints/checkpoints.cpp:221:12: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
boost::system::error_code errcode;
data/monero-0.16.0.0/src/common/i18n.cpp:153:10: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
boost::system::error_code ignored_ec;
data/monero-0.16.0.0/src/common/util.cpp:232:14: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
boost::system::error_code ec{};
data/monero-0.16.0.0/src/common/util.cpp:628:12: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
boost::system::error_code ec;
data/monero-0.16.0.0/src/crypto/oaes_lib.c:466:3: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat( buf, _temp );
data/monero-0.16.0.0/src/crypto/random.c:50:40: [4] (format) fprintf:
If format strings can be influenced by an attacker, they can be exploited
(CWE-134). Use a constant for the format specification.
#define must_succeed(x) do if (!(x)) { fprintf(stderr, "Failed: " #x); _exit(1); } while (0)
data/monero-0.16.0.0/src/cryptonote_protocol/levin_notify.cpp:321:36: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
void operator()(const boost::system::error_code error)
data/monero-0.16.0.0/src/cryptonote_protocol/levin_notify.cpp:331:31: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
if (error != boost::system::errc::operation_canceled)
data/monero-0.16.0.0/src/cryptonote_protocol/levin_notify.cpp:332:26: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
throw boost::system::system_error{error, "fluff_flush timer failed"};
data/monero-0.16.0.0/src/cryptonote_protocol/levin_notify.cpp:604:30: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
void operator()(boost::system::error_code error)
data/monero-0.16.0.0/src/cryptonote_protocol/levin_notify.cpp:609:38: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
if (error && error != boost::system::errc::operation_canceled)
data/monero-0.16.0.0/src/cryptonote_protocol/levin_notify.cpp:610:24: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
throw boost::system::system_error{error, "send_noise timer failed"};
data/monero-0.16.0.0/src/cryptonote_protocol/levin_notify.cpp:666:36: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
void operator()(const boost::system::error_code error = {})
data/monero-0.16.0.0/src/cryptonote_protocol/levin_notify.cpp:671:38: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
if (error && error != boost::system::errc::operation_canceled)
data/monero-0.16.0.0/src/cryptonote_protocol/levin_notify.cpp:672:24: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
throw boost::system::system_error{error, "start_epoch timer failed"};
data/monero-0.16.0.0/src/daemon/main.cpp:197:12: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
boost::system::error_code ec;
data/monero-0.16.0.0/src/device_trezor/trezor/transport.cpp:669:16: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
boost::system::error_code ec;
data/monero-0.16.0.0/src/device_trezor/trezor/transport.cpp:694:66: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
ssize_t UdpTransport::receive(void * buff, size_t size, boost::system::error_code * error_code, bool no_throw, boost::posix_time::time_duration timeout){
data/monero-0.16.0.0/src/device_trezor/trezor/transport.cpp:695:12: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
boost::system::error_code ec;
data/monero-0.16.0.0/src/device_trezor/trezor/transport.cpp:778:50: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
void UdpTransport::handle_receive(const boost::system::error_code &ec, std::size_t length,
data/monero-0.16.0.0/src/device_trezor/trezor/transport.cpp:779:44: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
boost::system::error_code *out_ec, std::size_t *out_length) {
data/monero-0.16.0.0/src/device_trezor/trezor/transport.hpp:236:54: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
ssize_t receive(void * buff, size_t size, boost::system::error_code * error_code=nullptr, bool no_throw=false, boost::posix_time::time_duration timeout=boost::posix_time::seconds(10));
data/monero-0.16.0.0/src/device_trezor/trezor/transport.hpp:238:45: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
static void handle_receive(const boost::system::error_code& ec, std::size_t length,
data/monero-0.16.0.0/src/device_trezor/trezor/transport.hpp:239:39: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
boost::system::error_code* out_ec, std::size_t* out_length);
data/monero-0.16.0.0/src/net/parse.cpp:78:16: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
boost::system::error_code ec;
data/monero-0.16.0.0/src/net/socks.cpp:88:40: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
struct socks_category : boost::system::error_category
data/monero-0.16.0.0/src/net/socks.cpp:91:24: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
: boost::system::error_category()
data/monero-0.16.0.0/src/net/socks.cpp:123:20: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
boost::system::error_condition default_error_condition(int value) const noexcept override
data/monero-0.16.0.0/src/net/socks.cpp:129:35: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
return boost::system::errc::io_error;
data/monero-0.16.0.0/src/net/socks.cpp:131:35: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
return boost::system::errc::protocol_error;
data/monero-0.16.0.0/src/net/socks.cpp:136:35: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
return boost::system::errc::protocol_error;
data/monero-0.16.0.0/src/net/socks.cpp:138:31: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
return boost::system::error_condition{value, *this};
data/monero-0.16.0.0/src/net/socks.cpp:143:18: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
const boost::system::error_category& error_category() noexcept
data/monero-0.16.0.0/src/net/socks.cpp:153:38: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
void operator()(const boost::system::error_code error, const std::size_t bytes) const
data/monero-0.16.0.0/src/net/socks.cpp:171:38: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
self.done(boost::system::error_code{}, std::move(self_));
data/monero-0.16.0.0/src/net/socks.cpp:186:38: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
void operator()(const boost::system::error_code error, const std::size_t bytes)
data/monero-0.16.0.0/src/net/socks.cpp:210:38: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
void operator()(const boost::system::error_code error)
data/monero-0.16.0.0/src/net/socks.cpp:316:49: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
void client::async_close::operator()(boost::system::error_code error)
data/monero-0.16.0.0/src/net/socks.cpp:318:38: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
if (self_ && error != boost::system::errc::operation_canceled)
data/monero-0.16.0.0/src/net/socks.h:84:18: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
const boost::system::error_category& error_category() noexcept;
data/monero-0.16.0.0/src/net/socks.h:87:19: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
inline boost::system::error_code make_error_code(error value) noexcept
data/monero-0.16.0.0/src/net/socks.h:89:23: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
return boost::system::error_code{int(value), socks::error_category()};
data/monero-0.16.0.0/src/net/socks.h:112:34: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
virtual void done(boost::system::error_code error, std::shared_ptr<client> self) = 0;
data/monero-0.16.0.0/src/net/socks.h:202:36: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
void operator()(boost::system::error_code error = boost::system::error_code{});
data/monero-0.16.0.0/src/net/socks.h:202:70: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
void operator()(boost::system::error_code error = boost::system::error_code{});
data/monero-0.16.0.0/src/net/socks.h:211:34: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
virtual void done(boost::system::error_code error, std::shared_ptr<client>) override
data/monero-0.16.0.0/src/net/socks.h:235:11: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
namespace system
data/monero-0.16.0.0/src/net/socks_connect.cpp:53:36: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
void operator()(boost::system::error_code error, boost::asio::ip::tcp::socket&& socket)
data/monero-0.16.0.0/src/net/socks_connect.cpp:56:50: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
result_.set_exception(boost::system::system_error{error});
data/monero-0.16.0.0/src/p2p/net_node.cpp:327:48: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
using client_result = std::pair<boost::system::error_code, socket_type>;
data/monero-0.16.0.0/src/p2p/net_node.cpp:333:36: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
void operator()(boost::system::error_code error, socket_type&& sock)
data/monero-0.16.0.0/src/p2p/net_peerlist.h:186:40: [4] (race) access:
This usually indicates a security flaw. If an attacker can change anything
along the path between the call to access() and the file's actual use
(e.g., by moving files), the attacker can exploit the race condition
(CWE-362/CWE-367!). Set up the correct permissions (e.g., using setuid())
and try to open the file directly.
friend class boost::serialization::access;
data/monero-0.16.0.0/src/rpc/rpc_args.cpp:145:14: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
boost::system::error_code ec{};
data/monero-0.16.0.0/src/rpc/rpc_args.cpp:173:14: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
boost::system::error_code ec{};
data/monero-0.16.0.0/src/rpc/rpc_payment.cpp:334:14: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
boost::system::error_code ec;
data/monero-0.16.0.0/src/rpc/rpc_payment_signature.cpp:51:15: [4] (format) snprintf:
If format strings can be influenced by an attacker, they can be exploited,
and note that sprintf variations do not always \0-terminate (CWE-134). Use
a constant for the format specification.
int ret = snprintf(ts, sizeof(ts), "%16.16" PRIx64, now);
data/monero-0.16.0.0/src/simplewallet/simplewallet.cpp:639:12: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
boost::system::error_code errcode;
data/monero-0.16.0.0/src/simplewallet/simplewallet.cpp:2013:9: [4] (buffer) sscanf:
The scanf() family's %s operation, without a limit specification, permits
buffer overflows (CWE-120, CWE-20). Specify a limit to %s, or use a
different input function. If the scanf format is influenceable by an
attacker, it's exploitable.
if (sscanf(args[0].c_str(), "%" PRIu64 "/%" PRIu64, &amount, &offset) == 2)
data/monero-0.16.0.0/src/simplewallet/simplewallet.cpp:2034:15: [4] (buffer) sscanf:
The scanf() family's %s operation, without a limit specification, permits
buffer overflows (CWE-120, CWE-20). Specify a limit to %s, or use a
different input function. If the scanf format is influenceable by an
attacker, it's exploitable.
if (sscanf(str, "@%" PRIu64, &amount) == 1)
data/monero-0.16.0.0/src/simplewallet/simplewallet.cpp:2043:15: [4] (buffer) sscanf:
The scanf() family's %s operation, without a limit specification, permits
buffer overflows (CWE-120, CWE-20). Specify a limit to %s, or use a
different input function. If the scanf format is influenceable by an
attacker, it's exploitable.
if (sscanf(str, "%" PRIu64 "*%" PRIu64, &offset, &num_offsets) == 2 && num_offsets <= std::numeric_limits<uint64_t>::max() - offset)
data/monero-0.16.0.0/src/simplewallet/simplewallet.cpp:2048:20: [4] (buffer) sscanf:
The scanf() family's %s operation, without a limit specification, permits
buffer overflows (CWE-120, CWE-20). Specify a limit to %s, or use a
different input function. If the scanf format is influenceable by an
attacker, it's exploitable.
else if (sscanf(str, "%" PRIu64, &offset) == 1)
data/monero-0.16.0.0/src/simplewallet/simplewallet.cpp:2100:7: [4] (buffer) sscanf:
The scanf() family's %s operation, without a limit specification, permits
buffer overflows (CWE-120, CWE-20). Specify a limit to %s, or use a
different input function. If the scanf format is influenceable by an
attacker, it's exploitable.
if (sscanf(args[0].c_str(), "%" PRIu64 "/%" PRIu64, &output.first, &output.second) != 2)
data/monero-0.16.0.0/src/simplewallet/simplewallet.cpp:2127:7: [4] (buffer) sscanf:
The scanf() family's %s operation, without a limit specification, permits
buffer overflows (CWE-120, CWE-20). Specify a limit to %s, or use a
different input function. If the scanf format is influenceable by an
attacker, it's exploitable.
if (sscanf(args[0].c_str(), "%" PRIu64 "/%" PRIu64, &output.first, &output.second) != 2)
data/monero-0.16.0.0/src/wallet/api/pending_transaction.cpp:88:16: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
boost::system::error_code ignore;
data/monero-0.16.0.0/src/wallet/api/wallet.cpp:2315:13: [4] (buffer) sscanf:
The scanf() family's %s operation, without a limit specification, permits
buffer overflows (CWE-120, CWE-20). Specify a limit to %s, or use a
different input function. If the scanf format is influenceable by an
attacker, it's exploitable.
if (sscanf(str.c_str(), "@%" PRIu64, &amount) == 1)
data/monero-0.16.0.0/src/wallet/api/wallet.cpp:2322:13: [4] (buffer) sscanf:
The scanf() family's %s operation, without a limit specification, permits
buffer overflows (CWE-120, CWE-20). Specify a limit to %s, or use a
different input function. If the scanf format is influenceable by an
attacker, it's exploitable.
if (sscanf(str.c_str(), "%" PRIu64 "*%" PRIu64, &offset, &num_offsets) == 2 && num_offsets <= std::numeric_limits<uint64_t>::max() - offset)
data/monero-0.16.0.0/src/wallet/api/wallet.cpp:2327:18: [4] (buffer) sscanf:
The scanf() family's %s operation, without a limit specification, permits
buffer overflows (CWE-120, CWE-20). Specify a limit to %s, or use a
different input function. If the scanf format is influenceable by an
attacker, it's exploitable.
else if (sscanf(str.c_str(), "%" PRIu64, &offset) == 1)
data/monero-0.16.0.0/src/wallet/message_store.cpp:777:10: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
boost::system::error_code ignored_ec;
data/monero-0.16.0.0/src/wallet/wallet2.cpp:294:10: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
boost::system::error_code e;
data/monero-0.16.0.0/src/wallet/wallet2.cpp:464:12: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
boost::system::error_code error{};
data/monero-0.16.0.0/src/wallet/wallet2.cpp:4590:12: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
boost::system::error_code ignored_ec;
data/monero-0.16.0.0/src/wallet/wallet2.cpp:4678:12: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
boost::system::error_code ignored_ec;
data/monero-0.16.0.0/src/wallet/wallet2.cpp:4762:12: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
boost::system::error_code ignored_ec;
data/monero-0.16.0.0/src/wallet/wallet2.cpp:4799:12: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
boost::system::error_code ignored_ec;
data/monero-0.16.0.0/src/wallet/wallet2.cpp:4828:10: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
boost::system::error_code ignored_ec;
data/monero-0.16.0.0/src/wallet/wallet2.cpp:5392:10: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
boost::system::error_code ignored_ec;
data/monero-0.16.0.0/src/wallet/wallet2.cpp:5406:10: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
boost::system::error_code ignored_ec;
data/monero-0.16.0.0/src/wallet/wallet2.cpp:5419:10: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
boost::system::error_code ignore;
data/monero-0.16.0.0/src/wallet/wallet2.cpp:5563:10: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
boost::system::error_code e;
data/monero-0.16.0.0/src/wallet/wallet2.cpp:5813:14: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
boost::system::error_code ec;
data/monero-0.16.0.0/src/wallet/wallet2.cpp:6587:10: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
boost::system::error_code errcode;
data/monero-0.16.0.0/src/wallet/wallet2.cpp:6866:10: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
boost::system::error_code errcode;
data/monero-0.16.0.0/src/wallet/wallet2.cpp:6887:10: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
boost::system::error_code errcode;
data/monero-0.16.0.0/src/wallet/wallet2.cpp:7118:10: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
boost::system::error_code errcode;
data/monero-0.16.0.0/src/wallet/wallet_args.cpp:166:16: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
boost::system::error_code ec;
data/monero-0.16.0.0/src/wallet/wallet_rpc_server.cpp:3398:16: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
boost::system::error_code ignored_ec;
data/monero-0.16.0.0/src/wallet/wallet_rpc_server.cpp:3557:16: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
boost::system::error_code ignored_ec;
data/monero-0.16.0.0/tests/core_tests/chaingen.h:74:38: [4] (race) access:
This usually indicates a security flaw. If an attacker can change anything
along the path between the call to access() and the file's actual use
(e.g., by moving files), the attacker can exploit the race condition
(CWE-362/CWE-367!). Set up the correct permissions (e.g., using setuid())
and try to open the file directly.
friend class boost::serialization::access;
data/monero-0.16.0.0/tests/core_tests/chaingen.h:99:38: [4] (race) access:
This usually indicates a security flaw. If an attacker can change anything
along the path between the call to access() and the file's actual use
(e.g., by moving files), the attacker can exploit the race condition
(CWE-362/CWE-367!). Set up the correct permissions (e.g., using setuid())
and try to open the file directly.
friend class boost::serialization::access;
data/monero-0.16.0.0/tests/core_tests/chaingen.h:129:38: [4] (race) access:
This usually indicates a security flaw. If an attacker can change anything
along the path between the call to access() and the file's actual use
(e.g., by moving files), the attacker can exploit the race condition
(CWE-362/CWE-367!). Set up the correct permissions (e.g., using setuid())
and try to open the file directly.
friend class boost::serialization::access;
data/monero-0.16.0.0/tests/core_tests/chaingen.h:146:38: [4] (race) access:
This usually indicates a security flaw. If an attacker can change anything
along the path between the call to access() and the file's actual use
(e.g., by moving files), the attacker can exploit the race condition
(CWE-362/CWE-367!). Set up the correct permissions (e.g., using setuid())
and try to open the file directly.
friend class boost::serialization::access;
data/monero-0.16.0.0/tests/core_tests/chaingen.h:207:40: [4] (race) access:
This usually indicates a security flaw. If an attacker can change anything
along the path between the call to access() and the file's actual use
(e.g., by moving files), the attacker can exploit the race condition
(CWE-362/CWE-367!). Set up the correct permissions (e.g., using setuid())
and try to open the file directly.
friend class boost::serialization::access;
data/monero-0.16.0.0/tests/core_tests/chaingen.h:267:38: [4] (race) access:
This usually indicates a security flaw. If an attacker can change anything
along the path between the call to access() and the file's actual use
(e.g., by moving files), the attacker can exploit the race condition
(CWE-362/CWE-367!). Set up the correct permissions (e.g., using setuid())
and try to open the file directly.
friend class boost::serialization::access;
data/monero-0.16.0.0/tests/core_tests/chaingen.h:397:38: [4] (race) access:
This usually indicates a security flaw. If an attacker can change anything
along the path between the call to access() and the file's actual use
(e.g., by moving files), the attacker can exploit the race condition
(CWE-362/CWE-367!). Set up the correct permissions (e.g., using setuid())
and try to open the file directly.
friend class boost::serialization::access;
data/monero-0.16.0.0/tests/gtest/include/gtest/internal/gtest-death-test-internal.h:165:5: [4] (format) fprintf:
If format strings can be influenced by an attacker, they can be exploited
(CWE-134). Use a constant for the format specification.
fprintf(\
data/monero-0.16.0.0/tests/gtest/include/gtest/internal/gtest-port.h:2354:20: [4] (buffer) StrNCpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
inline const char* StrNCpy(char* dest, const char* src, size_t n) {
data/monero-0.16.0.0/tests/gtest/include/gtest/internal/gtest-port.h:2425:26: [4] (format) _snprintf:
If format strings can be influenced by an attacker, they can be exploited,
and note that sprintf variations do not always \0-terminate (CWE-134). Use
a constant for the format specification.
# define GTEST_SNPRINTF_ _snprintf
data/monero-0.16.0.0/tests/gtest/include/gtest/internal/gtest-port.h:2427:26: [4] (format) snprintf:
If format strings can be influenced by an attacker, they can be exploited,
and note that sprintf variations do not always \0-terminate (CWE-134). Use
a constant for the format specification.
# define GTEST_SNPRINTF_ snprintf
data/monero-0.16.0.0/tests/gtest/src/gtest.cc:146:10: [4] (format) vsnprintf:
If format strings can be influenced by an attacker, they can be exploited,
and note that sprintf variations do not always \0-terminate (CWE-134). Use
a constant for the format specification.
# define vsnprintf _vsnprintf
data/monero-0.16.0.0/tests/gtest/src/gtest.cc:2969:5: [4] (format) vprintf:
If format strings can be influenced by an attacker, they can be exploited
(CWE-134). Use a constant for the format specification.
vprintf(fmt, args);
data/monero-0.16.0.0/tests/gtest/src/gtest.cc:2989:3: [4] (format) vprintf:
If format strings can be influenced by an attacker, they can be exploited
(CWE-134). Use a constant for the format specification.
vprintf(fmt, args);
data/monero-0.16.0.0/tests/gtest/src/gtest.cc:2996:3: [4] (format) vprintf:
If format strings can be influenced by an attacker, they can be exploited
(CWE-134). Use a constant for the format specification.
vprintf(fmt, args);
data/monero-0.16.0.0/tests/net_load_tests/clt.cpp:90:143: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
bool r = m_tcp_server.connect_async("127.0.0.1", srv_port, CONNECTION_TIMEOUT, [=](const test_connection_context& context, const boost::system::error_code& ec) {
data/monero-0.16.0.0/tests/net_load_tests/clt.cpp:150:143: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
bool r = m_tcp_server.connect_async("127.0.0.1", srv_port, CONNECTION_TIMEOUT, [=](const test_connection_context& context, const boost::system::error_code& ec) {
data/monero-0.16.0.0/tests/net_load_tests/clt.cpp:206:146: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
ASSERT_TRUE(m_tcp_server.connect_async("127.0.0.1", srv_port, CONNECTION_TIMEOUT, [&](const test_connection_context& context, const boost::system::error_code& ec) {
data/monero-0.16.0.0/tests/net_load_tests/clt.cpp:254:132: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
tcp_server.connect_async("127.0.0.1", srv_port, CONNECTION_TIMEOUT, [&](const test_connection_context& context, const boost::system::error_code& ec) {
data/monero-0.16.0.0/tests/net_load_tests/srv.cpp:193:50: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
sh_deadline->async_wait([=](const boost::system::error_code& ec)
data/monero-0.16.0.0/tests/trezor/trezor_tests.h:140:38: [4] (race) access:
This usually indicates a security flaw. If an attacker can change anything
along the path between the call to access() and the file's actual use
(e.g., by moving files), the attacker can exploit the race condition
(CWE-362/CWE-367!). Set up the correct permissions (e.g., using setuid())
and try to open the file directly.
friend class boost::serialization::access;
data/monero-0.16.0.0/tests/unit_tests/net.cpp:962:58: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
acceptor.async_accept(server, [this] (boost::system::error_code error) {
data/monero-0.16.0.0/tests/unit_tests/net.cpp:965:34: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
throw boost::system::system_error{error};
data/monero-0.16.0.0/tests/unit_tests/net.cpp:982:32: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
void operator()(boost::system::error_code error, net::socks::client::stream_type::socket&&) const
data/monero-0.16.0.0/tests/unit_tests/net.cpp:1105:34: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
virtual void done(boost::system::error_code error, std::shared_ptr<client> self) override
data/monero-0.16.0.0/tests/unit_tests/net.cpp:1237:47: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
EXPECT_THROW(sock.get().is_open(), boost::system::system_error);
data/monero-0.16.0.0/tests/unit_tests/net.cpp:1250:47: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
EXPECT_THROW(sock.get().is_open(), boost::system::system_error);
data/monero-0.16.0.0/contrib/epee/include/winobj.h:44:3: [3] (misc) InitializeCriticalSection:
Exceptions can be thrown in low-memory situations. Use
InitializeCriticalSectionAndSpinCount instead.
InitializeCriticalSection( &m_section );
data/monero-0.16.0.0/contrib/epee/include/winobj.h:48:3: [3] (misc) InitializeCriticalSection:
Exceptions can be thrown in low-memory situations. Use
InitializeCriticalSectionAndSpinCount instead.
InitializeCriticalSection( &m_section );
data/monero-0.16.0.0/contrib/epee/include/winobj.h:56:3: [3] (misc) EnterCriticalSection:
On some versions of Windows, exceptions can be thrown in low-memory
situations. Use InitializeCriticalSectionAndSpinCount instead.
EnterCriticalSection( &m_section );
data/monero-0.16.0.0/contrib/epee/src/mlog.cpp:153:28: [3] (buffer) getenv:
Environment variables are untrustable input if they can be set by an
attacker. They can have any content and length, and the same variable can
be set more than once (CWE-807, CWE-20). Check environment variables
carefully before using them.
const char *log_format = getenv("MONERO_LOG_FORMAT");
data/monero-0.16.0.0/contrib/epee/src/mlog.cpp:227:28: [3] (buffer) getenv:
Environment variables are untrustable input if they can be set by an
attacker. They can have any content and length, and the same variable can
be set more than once (CWE-807, CWE-20). Check environment variables
carefully before using them.
const char *monero_log = getenv("MONERO_LOGS");
data/monero-0.16.0.0/external/db_drivers/liblmdb/mdb_drop.c:57:14: [3] (buffer) getopt:
Some older implementations do not protect against internal buffer overflows
(CWE-120, CWE-20). Check implementation on installation, or limit the size
of all string inputs.
while ((i = getopt(argc, argv, "dns:V")) != EOF) {
data/monero-0.16.0.0/external/db_drivers/liblmdb/mdb_dump.c:184:14: [3] (buffer) getopt:
Some older implementations do not protect against internal buffer overflows
(CWE-120, CWE-20). Check implementation on installation, or limit the size
of all string inputs.
while ((i = getopt(argc, argv, "af:lnps:V")) != EOF) {
data/monero-0.16.0.0/external/db_drivers/liblmdb/mdb_load.c:314:14: [3] (buffer) getopt:
Some older implementations do not protect against internal buffer overflows
(CWE-120, CWE-20). Check implementation on installation, or limit the size
of all string inputs.
while ((i = getopt(argc, argv, "af:ns:NTV")) != EOF) {
data/monero-0.16.0.0/external/db_drivers/liblmdb/mdb_stat.c:68:14: [3] (buffer) getopt:
Some older implementations do not protect against internal buffer overflows
(CWE-120, CWE-20). Check implementation on installation, or limit the size
of all string inputs.
while ((i = getopt(argc, argv, "Vaefnrs:")) != EOF) {
data/monero-0.16.0.0/external/db_drivers/liblmdb/mtest.c:38:2: [3] (random) srand:
This function is not sufficiently random for security-related functions
such as key and nonce creation (CWE-327). Use a more secure technique for
acquiring random values.
srand(time(NULL));
data/monero-0.16.0.0/external/db_drivers/liblmdb/mtest2.c:40:2: [3] (random) srand:
This function is not sufficiently random for security-related functions
such as key and nonce creation (CWE-327). Use a more secure technique for
acquiring random values.
srand(time(NULL));
data/monero-0.16.0.0/external/db_drivers/liblmdb/mtest3.c:41:2: [3] (random) srand:
This function is not sufficiently random for security-related functions
such as key and nonce creation (CWE-327). Use a more secure technique for
acquiring random values.
srand(time(NULL));
data/monero-0.16.0.0/external/db_drivers/liblmdb/mtest5.c:41:2: [3] (random) srand:
This function is not sufficiently random for security-related functions
such as key and nonce creation (CWE-327). Use a more secure technique for
acquiring random values.
srand(time(NULL));
data/monero-0.16.0.0/external/db_drivers/liblmdb/mtest6.c:43:2: [3] (random) srand:
This function is not sufficiently random for security-related functions
such as key and nonce creation (CWE-327). Use a more secure technique for
acquiring random values.
srand(time(NULL));
data/monero-0.16.0.0/external/easylogging++/easylogging++.cc:1195:21: [3] (buffer) getenv:
Environment variables are untrustable input if they can be set by an
attacker. They can have any content and length, and the same variable can
be set more than once (CWE-807, CWE-20). Check environment variables
carefully before using them.
const char* val = getenv(variableName);
data/monero-0.16.0.0/external/easylogging++/easylogging++.h:940:5: [3] (misc) InitializeCriticalSection:
Exceptions can be thrown in low-memory situations. Use
InitializeCriticalSectionAndSpinCount instead.
InitializeCriticalSection(&m_underlyingMutex);
data/monero-0.16.0.0/external/easylogging++/easylogging++.h:956:5: [3] (misc) EnterCriticalSection:
On some versions of Windows, exceptions can be thrown in low-memory
situations. Use InitializeCriticalSectionAndSpinCount instead.
EnterCriticalSection(&m_underlyingMutex);
data/monero-0.16.0.0/src/common/dns_utils.cpp:248:28: [3] (buffer) getenv:
Environment variables are untrustable input if they can be set by an
attacker. They can have any content and length, and the same variable can
be set more than once (CWE-807, CWE-20). Check environment variables
carefully before using them.
const char *DNS_PUBLIC = getenv("DNS_PUBLIC");
data/monero-0.16.0.0/src/common/i18n.cpp:56:7: [3] (buffer) getenv:
Environment variables are untrustable input if they can be set by an
attacker. They can have any content and length, and the same variable can
be set more than once (CWE-807, CWE-20). Check environment variables
carefully before using them.
e = getenv("LANG");
data/monero-0.16.0.0/src/common/i18n.cpp:59:9: [3] (buffer) getenv:
Environment variables are untrustable input if they can be set by an
attacker. They can have any content and length, and the same variable can
be set more than once (CWE-807, CWE-20). Check environment variables
carefully before using them.
e = getenv("LC_ALL");
data/monero-0.16.0.0/src/common/util.cpp:162:10: [3] (misc) AddAccessAllowedAce:
This doesn't set the inheritance bits in the access control entry (ACE)
header (CWE-732). Make sure that you set inheritance by hand if you wish it
to inherit.
if (!AddAccessAllowedAce(reinterpret_cast<PACL>(dacl.get()), ACL_REVISION, (READ_CONTROL | FILE_GENERIC_READ | DELETE), psid))
data/monero-0.16.0.0/src/common/util.cpp:614:21: [3] (buffer) getenv:
Environment variables are untrustable input if they can be set by an
attacker. They can have any content and length, and the same variable can
be set more than once (CWE-807, CWE-20). Check environment variables
carefully before using them.
char* pszHome = getenv("HOME");
data/monero-0.16.0.0/src/crypto/crypto_ops_builder/include/sodium/randombytes.h:21:19: [3] (random) random:
This function is not sufficiently random for security-related functions
such as key and nonce creation (CWE-327). Use a more secure technique for
acquiring random values.
uint32_t (*random)(void); /* required */
data/monero-0.16.0.0/src/crypto/oaes_lib.c:920:3: [3] (random) srand:
This function is not sufficiently random for security-related functions
such as key and nonce creation (CWE-327). Use a more secure technique for
acquiring random values.
srand( oaes_get_seed() );
data/monero-0.16.0.0/src/crypto/rx-slow-hash.c:86:21: [3] (buffer) getenv:
Environment variables are untrustable input if they can be set by an
attacker. They can have any content and length, and the same variable can
be set more than once (CWE-807, CWE-20). Check environment variables
carefully before using them.
const char *env = getenv("MONERO_RANDOMX_UMASK");
data/monero-0.16.0.0/src/crypto/slow-hash.c:76:21: [3] (buffer) getenv:
Environment variables are untrustable input if they can be set by an
attacker. They can have any content and length, and the same variable can
be set more than once (CWE-807, CWE-20). Check environment variables
carefully before using them.
const char *env = getenv("MONERO_USE_CNV4_JIT");
data/monero-0.16.0.0/src/crypto/slow-hash.c:508:21: [3] (buffer) getenv:
Environment variables are untrustable input if they can be set by an
attacker. They can have any content and length, and the same variable can
be set more than once (CWE-807, CWE-20). Check environment variables
carefully before using them.
const char *env = getenv("MONERO_USE_SOFTWARE_AES");
data/monero-0.16.0.0/src/daemon/main.cpp:298:67: [3] (buffer) getenv:
Environment variables are untrustable input if they can be set by an
attacker. They can have any content and length, and the same variable can
be set more than once (CWE-807, CWE-20). Check environment variables
carefully before using them.
const bool use_rpc_env = !has_rpc_arg && (env_rpc_login = getenv("RPC_LOGIN")) != nullptr && strlen(env_rpc_login) > 0;
data/monero-0.16.0.0/src/daemonizer/posix_fork.cpp:119:24: [3] (buffer) getenv:
Environment variables are untrustable input if they can be set by an
attacker. They can have any content and length, and the same variable can
be set more than once (CWE-807, CWE-20). Check environment variables
carefully before using them.
const char *tmpdir = getenv("TMPDIR");
data/monero-0.16.0.0/src/device_trezor/device_trezor.cpp:689:40: [3] (buffer) getenv:
Environment variables are untrustable input if they can be set by an
attacker. They can have any content and length, and the same variable can
be set more than once (CWE-807, CWE-20). Check environment variables
carefully before using them.
if ((env_trezor_client_version = getenv("TREZOR_CLIENT_VERSION")) != nullptr){
data/monero-0.16.0.0/src/device_trezor/trezor/transport.cpp:342:46: [3] (buffer) getenv:
Environment variables are untrustable input if they can be set by an
attacker. They can have any content and length, and the same variable can
be set more than once (CWE-807, CWE-20). Check environment variables
carefully before using them.
if (!bridge_host && (env_bridge_port = getenv("TREZOR_BRIDGE_PORT")) != nullptr)
data/monero-0.16.0.0/src/device_trezor/trezor/transport.cpp:538:35: [3] (buffer) getenv:
Environment variables are untrustable input if they can be set by an
attacker. They can have any content and length, and the same variable can
be set more than once (CWE-807, CWE-20). Check environment variables
carefully before using them.
} else if ((env_trezor_path = getenv("TREZOR_PATH")) != nullptr && boost::starts_with(env_trezor_path, UdpTransport::PATH_PREFIX)){
data/monero-0.16.0.0/src/device_trezor/trezor/transport.cpp:1190:35: [3] (buffer) getenv:
Environment variables are untrustable input if they can be set by an
attacker. They can have any content and length, and the same variable can
be set more than once (CWE-807, CWE-20). Check environment variables
carefully before using them.
const char *env_trezor_path = getenv("TREZOR_PATH");
data/monero-0.16.0.0/src/rpc/rpc_args.cpp:194:63: [3] (buffer) getenv:
Environment variables are untrustable input if they can be set by an
attacker. They can have any content and length, and the same variable can
be set more than once (CWE-807, CWE-20). Check environment variables
carefully before using them.
const bool use_rpc_env = !has_rpc_arg && (env_rpc_login = getenv("RPC_LOGIN")) != nullptr && strlen(env_rpc_login) > 0;
data/monero-0.16.0.0/src/serialization/binary_archive.h:150:15: [3] (random) setstate:
This function is not sufficiently random for security-related functions
such as key and nonce creation (CWE-327). Use a more secure technique for
acquiring random values.
stream_.setstate(std::ios_base::failbit);
data/monero-0.16.0.0/src/serialization/container.h:75:17: [3] (random) setstate:
This function is not sufficiently random for security-related functions
such as key and nonce creation (CWE-327). Use a more secure technique for
acquiring random values.
ar.stream().setstate(std::ios::failbit);
data/monero-0.16.0.0/src/serialization/crypto.h:50:17: [3] (random) setstate:
This function is not sufficiently random for security-related functions
such as key and nonce creation (CWE-327). Use a more secure technique for
acquiring random values.
ar.stream().setstate(std::ios::failbit);
data/monero-0.16.0.0/src/serialization/string.h:42:17: [3] (random) setstate:
This function is not sufficiently random for security-related functions
such as key and nonce creation (CWE-327). Use a more secure technique for
acquiring random values.
ar.stream().setstate(std::ios::failbit);
data/monero-0.16.0.0/src/serialization/variant.h:77:21: [3] (random) setstate:
This function is not sufficiently random for security-related functions
such as key and nonce creation (CWE-327). Use a more secure technique for
acquiring random values.
ar.stream().setstate(std::ios::failbit);
data/monero-0.16.0.0/src/serialization/variant.h:98:17: [3] (random) setstate:
This function is not sufficiently random for security-related functions
such as key and nonce creation (CWE-327). Use a more secure technique for
acquiring random values.
ar.stream().setstate(std::ios::failbit);
data/monero-0.16.0.0/src/serialization/variant.h:119:19: [3] (random) setstate:
This function is not sufficiently random for security-related functions
such as key and nonce creation (CWE-327). Use a more secure technique for
acquiring random values.
ar.stream().setstate(std::ios::failbit);
data/monero-0.16.0.0/src/serialization/variant.h:146:21: [3] (random) setstate:
This function is not sufficiently random for security-related functions
such as key and nonce creation (CWE-327). Use a more secure technique for
acquiring random values.
ar.stream().setstate(std::ios::failbit);
data/monero-0.16.0.0/src/wallet/message_store.cpp:342:17: [3] (random) random:
This function is not sufficiently random for security-related functions
such as key and nonce creation (CWE-327). Use a more secure technique for
acquiring random values.
unsigned char random[AUTO_CONFIG_TOKEN_BYTES];
data/monero-0.16.0.0/src/wallet/message_store.cpp:343:41: [3] (random) random:
This function is not sufficiently random for security-related functions
such as key and nonce creation (CWE-327). Use a more secure technique for
acquiring random values.
crypto::rand(AUTO_CONFIG_TOKEN_BYTES, random);
data/monero-0.16.0.0/src/wallet/message_store.cpp:345:30: [3] (random) random:
This function is not sufficiently random for security-related functions
such as key and nonce creation (CWE-327). Use a more secure technique for
acquiring random values.
token_bytes.append((char *)random, AUTO_CONFIG_TOKEN_BYTES);
data/monero-0.16.0.0/src/wallet/wallet_args.cpp:214:26: [3] (buffer) getenv:
Environment variables are untrustable input if they can be set by an
attacker. They can have any content and length, and the same variable can
be set more than once (CWE-807, CWE-20). Check environment variables
carefully before using them.
const char *logs = getenv("MONERO_LOGS");
data/monero-0.16.0.0/tests/functional_tests/transactions_flow_test.cpp:54:17: [3] (random) random:
This function is not sufficiently random for security-related functions
such as key and nonce creation (CWE-327). Use a more secure technique for
acquiring random values.
inline uint64_t random(const uint64_t max_value) {
data/monero-0.16.0.0/tests/functional_tests/transactions_flow_test.cpp:76:19: [3] (random) random:
This function is not sufficiently random for security-related functions
such as key and nonce creation (CWE-327). Use a more secure technique for
acquiring random values.
de.amount = random(max_part);
data/monero-0.16.0.0/tests/gtest/include/gtest/gtest.h:925:39: [3] (random) random:
This function is not sufficiently random for security-related functions
such as key and nonce creation (CWE-327). Use a more secure technique for
acquiring random values.
void ShuffleTests(internal::Random* random);
data/monero-0.16.0.0/tests/gtest/include/gtest/internal/gtest-port.h:2393:27: [3] (buffer) getenv:
Environment variables are untrustable input if they can be set by an
attacker. They can have any content and length, and the same variable can
be set more than once (CWE-807, CWE-20). Check environment variables
carefully before using them.
const char* const env = getenv(name);
data/monero-0.16.0.0/tests/gtest/include/gtest/internal/gtest-port.h:2396:10: [3] (buffer) getenv:
Environment variables are untrustable input if they can be set by an
attacker. They can have any content and length, and the same variable can
be set more than once (CWE-807, CWE-20). Check environment variables
carefully before using them.
return getenv(name);
data/monero-0.16.0.0/tests/gtest/src/gtest-internal-inl.h:312:37: [3] (random) random:
This function is not sufficiently random for security-related functions
such as key and nonce creation (CWE-327). Use a more secure technique for
acquiring random values.
void ShuffleRange(internal::Random* random, int begin, int end,
data/monero-0.16.0.0/tests/gtest/src/gtest-internal-inl.h:333:39: [3] (random) random:
This function is not sufficiently random for security-related functions
such as key and nonce creation (CWE-327). Use a more secure technique for
acquiring random values.
inline void Shuffle(internal::Random* random, std::vector<E>* v) {
data/monero-0.16.0.0/tests/gtest/src/gtest-internal-inl.h:334:16: [3] (random) random:
This function is not sufficiently random for security-related functions
such as key and nonce creation (CWE-327). Use a more secure technique for
acquiring random values.
ShuffleRange(random, 0, static_cast<int>(v->size()), v);
data/monero-0.16.0.0/tests/gtest/src/gtest-internal-inl.h:792:21: [3] (random) random:
This function is not sufficiently random for security-related functions
such as key and nonce creation (CWE-327). Use a more secure technique for
acquiring random values.
internal::Random* random() { return &random_; }
data/monero-0.16.0.0/tests/gtest/src/gtest-port.cc:243:5: [3] (misc) InitializeCriticalSection:
Exceptions can be thrown in low-memory situations. Use
InitializeCriticalSectionAndSpinCount instead.
::InitializeCriticalSection(critical_section_);
data/monero-0.16.0.0/tests/gtest/src/gtest-port.cc:261:5: [3] (misc) EnterCriticalSection:
On some versions of Windows, exceptions can be thrown in low-memory
situations. Use InitializeCriticalSectionAndSpinCount instead.
::EnterCriticalSection(critical_section_);
data/monero-0.16.0.0/tests/gtest/src/gtest-port.cc:293:11: [3] (misc) InitializeCriticalSection:
Exceptions can be thrown in low-memory situations. Use
InitializeCriticalSectionAndSpinCount instead.
::InitializeCriticalSection(critical_section_);
data/monero-0.16.0.0/tests/gtest/src/gtest.cc:194:44: [3] (buffer) getenv:
Environment variables are untrustable input if they can be set by an
attacker. They can have any content and length, and the same variable can
be set more than once (CWE-807, CWE-20). Check environment variables
carefully before using them.
const char* const testbridge_test_only = getenv(GTEST_TEST_FILTER_ENV_VAR_);
data/monero-0.16.0.0/tests/gtest/src/gtest.cc:2793:47: [3] (random) random:
This function is not sufficiently random for security-related functions
such as key and nonce creation (CWE-327). Use a more secure technique for
acquiring random values.
void TestCase::ShuffleTests(internal::Random* random) {
data/monero-0.16.0.0/tests/gtest/src/gtest.cc:2794:11: [3] (random) random:
This function is not sufficiently random for security-related functions
such as key and nonce creation (CWE-327). Use a more secure technique for
acquiring random values.
Shuffle(random, &test_indices_);
data/monero-0.16.0.0/tests/gtest/src/gtest.cc:4625:7: [3] (random) random:
This function is not sufficiently random for security-related functions
such as key and nonce creation (CWE-327). Use a more secure technique for
acquiring random values.
random()->Reseed(random_seed_);
data/monero-0.16.0.0/tests/gtest/src/gtest.cc:4939:16: [3] (random) random:
This function is not sufficiently random for security-related functions
such as key and nonce creation (CWE-327). Use a more secure technique for
acquiring random values.
ShuffleRange(random(), 0, last_death_test_case_ + 1, &test_case_indices_);
data/monero-0.16.0.0/tests/gtest/src/gtest.cc:4942:16: [3] (random) random:
This function is not sufficiently random for security-related functions
such as key and nonce creation (CWE-327). Use a more secure technique for
acquiring random values.
ShuffleRange(random(), last_death_test_case_ + 1,
data/monero-0.16.0.0/tests/gtest/src/gtest.cc:4947:34: [3] (random) random:
This function is not sufficiently random for security-related functions
such as key and nonce creation (CWE-327). Use a more secure technique for
acquiring random values.
test_cases_[i]->ShuffleTests(random());
data/monero-0.16.0.0/tests/io.h:69:11: [3] (random) setstate:
This function is not sufficiently random for security-related functions
such as key and nonce creation (CWE-327). Use a more secure technique for
acquiring random values.
input.setstate(std::ios_base::failbit);
data/monero-0.16.0.0/tests/io.h:83:11: [3] (random) setstate:
This function is not sufficiently random for security-related functions
such as key and nonce creation (CWE-327). Use a more secure technique for
acquiring random values.
input.setstate(std::ios_base::failbit);
data/monero-0.16.0.0/tests/io.h:99:11: [3] (random) setstate:
This function is not sufficiently random for security-related functions
such as key and nonce creation (CWE-327). Use a more secure technique for
acquiring random values.
input.setstate(std::ios_base::failbit);
data/monero-0.16.0.0/tests/io.h:104:13: [3] (random) setstate:
This function is not sufficiently random for security-related functions
such as key and nonce creation (CWE-327). Use a more secure technique for
acquiring random values.
input.setstate(std::ios_base::failbit);
data/monero-0.16.0.0/tests/libwallet_api_tests/main.cpp:1147:45: [3] (buffer) getenv:
Environment variables are untrustable input if they can be set by an
attacker. They can have any content and length, and the same variable can
be set more than once (CWE-807, CWE-20). Check environment variables
carefully before using them.
const char * testnet_daemon_addr = std::getenv("TESTNET_DAEMON_ADDRESS");
data/monero-0.16.0.0/tests/libwallet_api_tests/main.cpp:1152:45: [3] (buffer) getenv:
Environment variables are untrustable input if they can be set by an
attacker. They can have any content and length, and the same variable can
be set more than once (CWE-807, CWE-20). Check environment variables
carefully before using them.
const char * mainnet_daemon_addr = std::getenv("MAINNET_DAEMON_ADDRESS");
data/monero-0.16.0.0/tests/libwallet_api_tests/main.cpp:1159:42: [3] (buffer) getenv:
Environment variables are untrustable input if they can be set by an
attacker. They can have any content and length, and the same variable can
be set more than once (CWE-807, CWE-20). Check environment variables
carefully before using them.
const char * wallets_root_dir = std::getenv("WALLETS_ROOT_DIR");
data/monero-0.16.0.0/tests/trezor/daemon.cpp:63:30: [3] (buffer) getenv:
Environment variables are untrustable input if they can be set by an
attacker. They can have any content and length, and the same variable can
be set more than once (CWE-807, CWE-20). Check environment variables
carefully before using them.
const char *test_mainnet = getenv("TEST_MAINNET");
data/monero-0.16.0.0/tests/trezor/daemon.cpp:70:31: [3] (buffer) getenv:
Environment variables are untrustable input if they can be set by an
attacker. They can have any content and length, and the same variable can
be set more than once (CWE-807, CWE-20). Check environment variables
carefully before using them.
const char *test_p2p_port = getenv("TEST_P2P_PORT");
data/monero-0.16.0.0/tests/trezor/daemon.cpp:74:31: [3] (buffer) getenv:
Environment variables are untrustable input if they can be set by an
attacker. They can have any content and length, and the same variable can
be set more than once (CWE-807, CWE-20). Check environment variables
carefully before using them.
const char *test_rpc_port = getenv("TEST_RPC_PORT");
data/monero-0.16.0.0/tests/trezor/daemon.cpp:78:31: [3] (buffer) getenv:
Environment variables are untrustable input if they can be set by an
attacker. They can have any content and length, and the same variable can
be set more than once (CWE-807, CWE-20). Check environment variables
carefully before using them.
const char *test_zmq_port = getenv("TEST_ZMQ_PORT");
data/monero-0.16.0.0/tests/trezor/trezor_tests.cpp:90:26: [3] (buffer) getenv:
Environment variables are untrustable input if they can be set by an
attacker. They can have any content and length, and the same variable can
be set more than once (CWE-807, CWE-20). Check environment variables
carefully before using them.
const char *env_data = getenv(flag_name);
data/monero-0.16.0.0/tests/unit_tests/mnemonics.cpp:165:3: [3] (random) srand:
This function is not sufficiently random for security-related functions
such as key and nonce creation (CWE-327). Use a more secure technique for
acquiring random values.
srand(time(NULL));
data/monero-0.16.0.0/tests/unit_tests/notify.cpp:47:21: [3] (buffer) getenv:
Environment variables are untrustable input if they can be set by an
attacker. They can have any content and length, and the same variable can
be set more than once (CWE-807, CWE-20). Check environment variables
carefully before using them.
const char *tmp = getenv("TEMP");
data/monero-0.16.0.0/tests/unit_tests/ringdb.cpp:92:16: [3] (tmpfile) tempnam:
Temporary file race condition (CWE-377).
filename = tempnam(path.string().c_str(), "monero-ringdb-test-");
data/monero-0.16.0.0/tests/unit_tests/rolling_median.cpp:85:25: [3] (random) random:
This function is not sufficiently random for security-related functions
such as key and nonce creation (CWE-327). Use a more secure technique for
acquiring random values.
std::vector<uint64_t> random, median;
data/monero-0.16.0.0/tests/unit_tests/rolling_median.cpp:86:3: [3] (random) random:
This function is not sufficiently random for security-related functions
such as key and nonce creation (CWE-327). Use a more secure technique for
acquiring random values.
random.reserve(10000);
data/monero-0.16.0.0/tests/unit_tests/rolling_median.cpp:90:5: [3] (random) random:
This function is not sufficiently random for security-related functions
such as key and nonce creation (CWE-327). Use a more secure technique for
acquiring random values.
random.push_back(crypto::rand<uint64_t>());
data/monero-0.16.0.0/tests/unit_tests/rolling_median.cpp:91:14: [3] (random) random:
This function is not sufficiently random for security-related functions
such as key and nonce creation (CWE-327). Use a more secure technique for
acquiring random values.
m.insert(random.back());
data/monero-0.16.0.0/tests/unit_tests/rolling_median.cpp:97:14: [3] (random) random:
This function is not sufficiently random for security-related functions
such as key and nonce creation (CWE-327). Use a more secure technique for
acquiring random values.
m.insert(random[i]);
data/monero-0.16.0.0/tests/unit_tests/rolling_median.cpp:105:25: [3] (random) random:
This function is not sufficiently random for security-related functions
such as key and nonce creation (CWE-327). Use a more secure technique for
acquiring random values.
std::vector<uint64_t> random, median;
data/monero-0.16.0.0/tests/unit_tests/rolling_median.cpp:106:3: [3] (random) random:
This function is not sufficiently random for security-related functions
such as key and nonce creation (CWE-327). Use a more secure technique for
acquiring random values.
random.reserve(10000);
data/monero-0.16.0.0/tests/unit_tests/rolling_median.cpp:110:5: [3] (random) random:
This function is not sufficiently random for security-related functions
such as key and nonce creation (CWE-327). Use a more secure technique for
acquiring random values.
random.push_back(crypto::rand<uint64_t>());
data/monero-0.16.0.0/tests/unit_tests/rolling_median.cpp:111:14: [3] (random) random:
This function is not sufficiently random for security-related functions
such as key and nonce creation (CWE-327). Use a more secure technique for
acquiring random values.
m.insert(random.back());
data/monero-0.16.0.0/tests/unit_tests/rolling_median.cpp:117:14: [3] (random) random:
This function is not sufficiently random for security-related functions
such as key and nonce creation (CWE-327). Use a more secure technique for
acquiring random values.
m.insert(random[i]);
data/monero-0.16.0.0/tests/unit_tests/rolling_median.cpp:125:25: [3] (random) random:
This function is not sufficiently random for security-related functions
such as key and nonce creation (CWE-327). Use a more secure technique for
acquiring random values.
std::vector<uint64_t> random;
data/monero-0.16.0.0/tests/unit_tests/rolling_median.cpp:126:3: [3] (random) random:
This function is not sufficiently random for security-related functions
such as key and nonce creation (CWE-327). Use a more secure technique for
acquiring random values.
random.reserve(1000);
data/monero-0.16.0.0/tests/unit_tests/rolling_median.cpp:129:5: [3] (random) random:
This function is not sufficiently random for security-related functions
such as key and nonce creation (CWE-327). Use a more secure technique for
acquiring random values.
random.push_back(crypto::rand<uint64_t>());
data/monero-0.16.0.0/tests/unit_tests/rolling_median.cpp:130:14: [3] (random) random:
This function is not sufficiently random for security-related functions
such as key and nonce creation (CWE-327). Use a more secure technique for
acquiring random values.
m.insert(random.back());
data/monero-0.16.0.0/tests/unit_tests/rolling_median.cpp:134:13: [3] (random) random:
This function is not sufficiently random for security-related functions
such as key and nonce creation (CWE-327). Use a more secure technique for
acquiring random values.
std::sort(random.begin(), random.end(), [](uint64_t a, uint64_t b) { return a < b; });
data/monero-0.16.0.0/tests/unit_tests/rolling_median.cpp:134:29: [3] (random) random:
This function is not sufficiently random for security-related functions
such as key and nonce creation (CWE-327). Use a more secure technique for
acquiring random values.
std::sort(random.begin(), random.end(), [](uint64_t a, uint64_t b) { return a < b; });
data/monero-0.16.0.0/tests/unit_tests/rolling_median.cpp:137:14: [3] (random) random:
This function is not sufficiently random for security-related functions
such as key and nonce creation (CWE-327). Use a more secure technique for
acquiring random values.
m.insert(random[i]);
data/monero-0.16.0.0/tests/unit_tests/rolling_median.cpp:140:13: [3] (random) random:
This function is not sufficiently random for security-related functions
such as key and nonce creation (CWE-327). Use a more secure technique for
acquiring random values.
std::sort(random.begin(), random.end(), [](uint64_t a, uint64_t b) { return a > b; });
data/monero-0.16.0.0/tests/unit_tests/rolling_median.cpp:140:29: [3] (random) random:
This function is not sufficiently random for security-related functions
such as key and nonce creation (CWE-327). Use a more secure technique for
acquiring random values.
std::sort(random.begin(), random.end(), [](uint64_t a, uint64_t b) { return a > b; });
data/monero-0.16.0.0/tests/unit_tests/rolling_median.cpp:143:14: [3] (random) random:
This function is not sufficiently random for security-related functions
such as key and nonce creation (CWE-327). Use a more secure technique for
acquiring random values.
m.insert(random[i]);
data/monero-0.16.0.0/tests/unit_tests/rolling_median.cpp:146:16: [3] (random) random:
This function is not sufficiently random for security-related functions
such as key and nonce creation (CWE-327). Use a more secure technique for
acquiring random values.
std::shuffle(random.begin(), random.end(), crypto::random_device{});
data/monero-0.16.0.0/tests/unit_tests/rolling_median.cpp:146:32: [3] (random) random:
This function is not sufficiently random for security-related functions
such as key and nonce creation (CWE-327). Use a more secure technique for
acquiring random values.
std::shuffle(random.begin(), random.end(), crypto::random_device{});
data/monero-0.16.0.0/tests/unit_tests/rolling_median.cpp:149:14: [3] (random) random:
This function is not sufficiently random for security-related functions
such as key and nonce creation (CWE-327). Use a more secure technique for
acquiring random values.
m.insert(random[i]);
data/monero-0.16.0.0/contrib/epee/include/byte_stream.h:126:12: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
std::memcpy(tellp(), ptr, length);
data/monero-0.16.0.0/contrib/epee/include/file_io_utils.h:93:12: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
fstream.open(path_to_file, std::ios_base::binary | std::ios_base::out | std::ios_base::trunc);
data/monero-0.16.0.0/contrib/epee/include/file_io_utils.h:155:12: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
fstream.open(path_to_file, std::ios_base::binary | std::ios_base::in | std::ios::ate);
data/monero-0.16.0.0/contrib/epee/include/file_io_utils.h:186:12: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
fstream.open(path_to_file.c_str(), std::ios_base::binary | std::ios_base::out | std::ios_base::app);
data/monero-0.16.0.0/contrib/epee/include/file_io_utils.h:219:12: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
fstream.open(path_to_file, std::ios_base::binary | std::ios_base::in | std::ios::ate);
data/monero-0.16.0.0/contrib/epee/include/gzip_encoding.h:125:13: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
static char dummy_head[2] =
data/monero-0.16.0.0/contrib/epee/include/hmac-md5.h:66:31: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
void hmac_md5(const unsigned char *text, int text_len,
data/monero-0.16.0.0/contrib/epee/include/hmac-md5.h:67:18: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
const unsigned char *key, int key_len,
data/monero-0.16.0.0/contrib/epee/include/hmac-md5.h:68:12: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
unsigned char digest[HMAC_MD5_SIZE]);
data/monero-0.16.0.0/contrib/epee/include/hmac-md5.h:88:31: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
void hmac_md5_final(unsigned char digest[HMAC_MD5_SIZE],
data/monero-0.16.0.0/contrib/epee/include/int-util.h:230:3: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(dst, src, 2 * n);
data/monero-0.16.0.0/contrib/epee/include/int-util.h:233:3: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(dst, src, 4 * n);
data/monero-0.16.0.0/contrib/epee/include/int-util.h:236:3: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(dst, src, 8 * n);
data/monero-0.16.0.0/contrib/epee/include/md5_l.h:71:12: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
unsigned char buffer[64]; /* input buffer */
data/monero-0.16.0.0/contrib/epee/include/md5_l.h:76:34: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
static void MD5Final ( unsigned char digest[16], MD5_CTX *context );
data/monero-0.16.0.0/contrib/epee/include/md5_l.h:80:28: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
inline bool md5( unsigned char *input, int ilen, unsigned char output[16] )
data/monero-0.16.0.0/contrib/epee/include/md5_l.h:80:60: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
inline bool md5( unsigned char *input, int ilen, unsigned char output[16] )
data/monero-0.16.0.0/contrib/epee/include/misc_os_dependent.h:100:3: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char path[1000] = {0};
data/monero-0.16.0.0/contrib/epee/include/net/abstract_http_client.h:39:28: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
static constexpr const char hexVals[16] = {'0','1','2','3','4','5','6','7','8','9','A','B','C','D','E','F'};
data/monero-0.16.0.0/contrib/epee/include/net/abstract_tcp_server.h:139:3: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char buff[1000] = {0};
data/monero-0.16.0.0/contrib/epee/include/net/abstract_tcp_server_cp.h:85:4: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char Buffer[1];
data/monero-0.16.0.0/contrib/epee/include/net/abstract_tcp_server_cp.h:148:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(m_psend_data->DataBuf.buf, ptr, cb);
data/monero-0.16.0.0/contrib/epee/include/net/http_client_via_api_helper.h:113:6: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char buff[100000] = {0};
data/monero-0.16.0.0/contrib/epee/include/net/levin_protocol_handler_async.h:467:18: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
std::memcpy(std::addressof(m_current_head), std::addressof(temp[0]), sizeof(bucket_head2));
data/monero-0.16.0.0/contrib/epee/include/net/munin_connection_handler.h:192:5: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char hostname[64] = {0};
data/monero-0.16.0.0/contrib/epee/include/rolling_median.h:143:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(this, &m, sizeof(rolling_median_t));
data/monero-0.16.0.0/contrib/epee/include/rolling_median.h:149:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(this, &m, sizeof(rolling_median_t));
data/monero-0.16.0.0/contrib/epee/include/service_impl_base.h:105:3: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char sz_path[MAX_PATH];
data/monero-0.16.0.0/contrib/epee/include/storages/levin_abstract_invoke2.h:48:5: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char buf[32];
data/monero-0.16.0.0/contrib/epee/include/storages/parserse_base_utils.h:70:37: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
static const constexpr unsigned char isx[256] =
data/monero-0.16.0.0/contrib/epee/include/storages/portable_storage_from_bin.h:101:7: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(target, m_ptr, count);
data/monero-0.16.0.0/contrib/epee/include/string_coding.h:148:12: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
unsigned char char_array_3[3];
data/monero-0.16.0.0/contrib/epee/include/string_coding.h:149:12: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
unsigned char char_array_4[4];
data/monero-0.16.0.0/contrib/epee/include/string_coding.h:204:12: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
unsigned char char_array_4[4], char_array_3[3];
data/monero-0.16.0.0/contrib/epee/include/string_tools.h:200:5: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char pname [5000] = {0};
data/monero-0.16.0.0/contrib/epee/include/string_tools.h:329:21: [2] (buffer) MultiByteToWideChar:
Requires maximum length in CHARACTERS, not bytes (CWE-120).
int wstr_size = MultiByteToWideChar(CP_UTF8, 0, &str[0], str.size(), NULL, 0);
data/monero-0.16.0.0/contrib/epee/include/string_tools.h:335:10: [2] (buffer) MultiByteToWideChar:
Requires maximum length in CHARACTERS, not bytes (CWE-120).
if (!MultiByteToWideChar(CP_UTF8, 0, &str[0], str.size(), &wstr[0], wstr_size))
data/monero-0.16.0.0/contrib/epee/include/time_helper.h:60:3: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char tmpbuf[200] = {0};
data/monero-0.16.0.0/contrib/epee/include/time_helper.h:82:3: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char tmpbuf[200] = {0};
data/monero-0.16.0.0/contrib/epee/include/time_helper.h:110:3: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char tmpbuf[200] = {0};
data/monero-0.16.0.0/contrib/epee/include/zlib_helper.h:88:11: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
static char dummy_head[2] =
data/monero-0.16.0.0/contrib/epee/src/buffer.cpp:68:9: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(new_storage.data(), storage.data() + offset, storage.size() - offset);
data/monero-0.16.0.0/contrib/epee/src/byte_slice.cpp:160:14: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
std::memcpy(out.data(), source.data(), source.size());
data/monero-0.16.0.0/contrib/epee/src/levin_base.cpp:66:10: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
std::memcpy(std::addressof(buffer[0]), std::addressof(head), sizeof(head));
data/monero-0.16.0.0/contrib/epee/src/mlog.cpp:59:3: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char tmp[200];
data/monero-0.16.0.0/contrib/epee/src/network_throttle-detail.cpp:229:14: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
file.open(filename.c_str(), std::ios::app | std::ios::out );
data/monero-0.16.0.0/contrib/epee/src/readline_buffer.cpp:117:3: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char lbuf[2] = {0,0};
data/monero-0.16.0.0/contrib/epee/src/wipeable_string.cpp:66:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(buffer.data(), other.c_str(), size());
data/monero-0.16.0.0/contrib/epee/src/wipeable_string.cpp:73:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(buffer.data(), other.c_str(), size());
data/monero-0.16.0.0/contrib/epee/src/wipeable_string.cpp:85:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(buffer.data(), s, size());
data/monero-0.16.0.0/contrib/epee/src/wipeable_string.cpp:91:3: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(buffer.data(), s, len);
data/monero-0.16.0.0/contrib/epee/src/wipeable_string.cpp:120:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(tmp.get(), buffer.data(), old_sz * sizeof(char));
data/monero-0.16.0.0/contrib/epee/src/wipeable_string.cpp:127:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(buffer.data(), tmp.get(), old_sz * sizeof(char));
data/monero-0.16.0.0/contrib/epee/src/wipeable_string.cpp:149:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(data() + orgsz, ptr, len);
data/monero-0.16.0.0/external/boost/archive/portable_binary_iarchive.hpp:284:10: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
std::memcpy(t, cn.data(), cn.size());
data/monero-0.16.0.0/external/boost/archive/portable_binary_iarchive.hpp:301:10: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
std::memcpy(t, cn.data(), cn.size());
data/monero-0.16.0.0/external/db_drivers/liblmdb/mdb.c:682:15: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
#define DKBUF char kbuf[DKBUF_MAXKEYSIZE*2+1]
data/monero-0.16.0.0/external/db_drivers/liblmdb/mdb.c:818:3: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char pad[(sizeof(MDB_rxbody)+CACHELINE-1) & ~(CACHELINE-1)];
data/monero-0.16.0.0/external/db_drivers/liblmdb/mdb.c:880:3: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char pad[(sizeof(MDB_txbody)+CACHELINE-1) & ~(CACHELINE-1)];
data/monero-0.16.0.0/external/db_drivers/liblmdb/mdb.c:891:3: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char pad[(MNAME_LEN+CACHELINE-1) & ~(CACHELINE-1)];
data/monero-0.16.0.0/external/db_drivers/liblmdb/mdb.c:1084:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char mn_data[1]; /**< key and data are appended here */
data/monero-0.16.0.0/external/db_drivers/liblmdb/mdb.c:1234:3: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char mm_pad[PAGEHDRSZ];
data/monero-0.16.0.0/external/db_drivers/liblmdb/mdb.c:1527:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char me_mutexname[sizeof(MUTEXNAME_PREFIX) + 11];
data/monero-0.16.0.0/external/db_drivers/liblmdb/mdb.c:1710:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char buf[MSGSIZE+PADSIZE], *ptr = buf;
data/monero-0.16.0.0/external/db_drivers/liblmdb/mdb.c:1766:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char buf[400];
data/monero-0.16.0.0/external/db_drivers/liblmdb/mdb.c:1767:2: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(buf, "%.100s:%d: Assertion '%.200s' failed in %.40s()",
data/monero-0.16.0.0/external/db_drivers/liblmdb/mdb.c:1811:10: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
ptr += sprintf(ptr, "%02x", *c++);
data/monero-0.16.0.0/external/db_drivers/liblmdb/mdb.c:1813:2: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(buf, "%.*s", key->mv_size, key->mv_data);
data/monero-0.16.0.0/external/db_drivers/liblmdb/mdb.c:1821:9: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
static char *const tp[2][2] = {{"", ": DB"}, {": sub-page", ": sub-DB"}};
data/monero-0.16.0.0/external/db_drivers/liblmdb/mdb.c:2630:3: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(dst, src, (lower + PAGEBASE + (Align-1)) & -Align);
data/monero-0.16.0.0/external/db_drivers/liblmdb/mdb.c:2631:3: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy((pgno_t *)((char *)dst+upper), (pgno_t *)((char *)src+upper),
data/monero-0.16.0.0/external/db_drivers/liblmdb/mdb.c:2634:3: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(dst, src, psize - unused);
data/monero-0.16.0.0/external/db_drivers/liblmdb/mdb.c:2674:6: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(np, mp, num * env->me_psize);
data/monero-0.16.0.0/external/db_drivers/liblmdb/mdb.c:3076:3: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(txn->mt_dbiseqs, env->me_dbiseqs, env->me_maxdbs * sizeof(unsigned int));
data/monero-0.16.0.0/external/db_drivers/liblmdb/mdb.c:3080:2: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(txn->mt_dbs, meta->mm_dbs, CORE_DBS * sizeof(MDB_db));
data/monero-0.16.0.0/external/db_drivers/liblmdb/mdb.c:3206:3: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(txn->mt_dbs, parent->mt_dbs, txn->mt_numdbs * sizeof(MDB_db));
data/monero-0.16.0.0/external/db_drivers/liblmdb/mdb.c:3217:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(env->me_pghead, ntxn->mnt_pgstate.mf_pghead, size);
data/monero-0.16.0.0/external/db_drivers/liblmdb/mdb.c:3535:4: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(data.mv_data, free_pgs, data.mv_size);
data/monero-0.16.0.0/external/db_drivers/liblmdb/mdb.c:3856:3: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(parent->mt_dbs, txn->mt_dbs, txn->mt_numdbs * sizeof(MDB_db));
data/monero-0.16.0.0/external/db_drivers/liblmdb/mdb.c:4689:7: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
fd = open(fname->mn_val, which & MDB_O_MASK, mode);
data/monero-0.16.0.0/external/db_drivers/liblmdb/mdb.c:4779:10: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
i = atoi(uts.release+7);
data/monero-0.16.0.0/external/db_drivers/liblmdb/mdb.c:4783:10: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
i = atoi(uts.release+7);
data/monero-0.16.0.0/external/db_drivers/liblmdb/mdb.c:4788:9: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
i = atoi(uts.release+2);
data/monero-0.16.0.0/external/db_drivers/liblmdb/mdb.c:4792:10: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
i = atoi(uts.release+4);
data/monero-0.16.0.0/external/db_drivers/liblmdb/mdb.c:4796:10: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
i = atoi(uts.release+4);
data/monero-0.16.0.0/external/db_drivers/liblmdb/mdb.c:6051:21: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
p = (MDB_page *)((char *)tl[x].mptr + rem * env->me_psize);
data/monero-0.16.0.0/external/db_drivers/liblmdb/mdb.c:6472:6: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(&flags, ((char *) data.mv_data + offsetof(MDB_db, md_flags)),
data/monero-0.16.0.0/external/db_drivers/liblmdb/mdb.c:6479:6: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(mc->mc_db, data.mv_data, sizeof(MDB_db));
data/monero-0.16.0.0/external/db_drivers/liblmdb/mdb.c:7577:4: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(ptr, key->mv_data, ksize);
data/monero-0.16.0.0/external/db_drivers/liblmdb/mdb.c:7636:20: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
dkey.mv_data = memcpy(fp+1, olddata.mv_data, olddata.mv_size);
data/monero-0.16.0.0/external/db_drivers/liblmdb/mdb.c:7717:6: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(METADATA(mp), METADATA(fp), NUMKEYS(fp) * fp->mp_pad);
data/monero-0.16.0.0/external/db_drivers/liblmdb/mdb.c:7719:6: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy((char *)mp + mp->mp_upper + PAGEBASE, (char *)fp + fp->mp_upper + PAGEBASE,
data/monero-0.16.0.0/external/db_drivers/liblmdb/mdb.c:7721:6: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy((char *)(&mp->mp_ptrs), (char *)(&fp->mp_ptrs), NUMKEYS(fp) * sizeof(mp->mp_ptrs[0]));
data/monero-0.16.0.0/external/db_drivers/liblmdb/mdb.c:7787:7: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy((size_t *)((char *)np + off),
data/monero-0.16.0.0/external/db_drivers/liblmdb/mdb.c:7791:6: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(np, omp, sz); /* Copy beginning of page */
data/monero-0.16.0.0/external/db_drivers/liblmdb/mdb.c:7798:6: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(METADATA(omp), data->mv_data, data->mv_size);
data/monero-0.16.0.0/external/db_drivers/liblmdb/mdb.c:7812:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(olddata.mv_data, data->mv_data, data->mv_size);
data/monero-0.16.0.0/external/db_drivers/liblmdb/mdb.c:7814:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(NODEKEY(leaf), key->mv_data, key->mv_size);
data/monero-0.16.0.0/external/db_drivers/liblmdb/mdb.c:7913:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(db, &mc->mc_xcursor->mx_db, sizeof(MDB_db));
data/monero-0.16.0.0/external/db_drivers/liblmdb/mdb.c:7935:25: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
data[0].mv_data = (char *)data[0].mv_data + data[0].mv_size;
data/monero-0.16.0.0/external/db_drivers/liblmdb/mdb.c:7995:6: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(db, &mc->mc_xcursor->mx_db, sizeof(MDB_db));
data/monero-0.16.0.0/external/db_drivers/liblmdb/mdb.c:8183:3: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(ptr, key->mv_data, ksize);
data/monero-0.16.0.0/external/db_drivers/liblmdb/mdb.c:8243:3: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(NODEKEY(node), key->mv_data, key->mv_size);
data/monero-0.16.0.0/external/db_drivers/liblmdb/mdb.c:8249:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(ndata, data->mv_data, sizeof(pgno_t));
data/monero-0.16.0.0/external/db_drivers/liblmdb/mdb.c:8253:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(ndata, data->mv_data, data->mv_size);
data/monero-0.16.0.0/external/db_drivers/liblmdb/mdb.c:8255:4: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(ndata, &ofp->mp_pgno, sizeof(pgno_t));
data/monero-0.16.0.0/external/db_drivers/liblmdb/mdb.c:8260:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(ndata, data->mv_data, data->mv_size);
data/monero-0.16.0.0/external/db_drivers/liblmdb/mdb.c:8421:3: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(&mx->mx_db, NODEDATA(node), sizeof(MDB_db));
data/monero-0.16.0.0/external/db_drivers/liblmdb/mdb.c:8662:3: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char kbuf2[DKBUF_MAXKEYSIZE*2+1];
data/monero-0.16.0.0/external/db_drivers/liblmdb/mdb.c:8708:3: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(NODEKEY(node), key->mv_data, key->mv_size);
data/monero-0.16.0.0/external/db_drivers/liblmdb/mdb.c:9586:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(rp->mp_ptrs, split, rsize);
data/monero-0.16.0.0/external/db_drivers/liblmdb/mdb.c:9589:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(ins, newkey->mv_data, ksize);
data/monero-0.16.0.0/external/db_drivers/liblmdb/mdb.c:9594:6: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(rp->mp_ptrs, split, x * ksize);
data/monero-0.16.0.0/external/db_drivers/liblmdb/mdb.c:9596:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(ins, newkey->mv_data, ksize);
data/monero-0.16.0.0/external/db_drivers/liblmdb/mdb.c:9597:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(ins+ksize, split + x * ksize, rsize - x * ksize);
data/monero-0.16.0.0/external/db_drivers/liblmdb/mdb.c:9795:3: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(NODEPTR(mp, nkeys-1), NODEPTR(copy, nkeys-1),
data/monero-0.16.0.0/external/db_drivers/liblmdb/mdb.c:9934:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char *mc_wbuf[2];
data/monero-0.16.0.0/external/db_drivers/liblmdb/mdb.c:9935:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char *mc_over[2];
data/monero-0.16.0.0/external/db_drivers/liblmdb/mdb.c:10113:7: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(NODEDATA(ni), &my->mc_next_pgno, sizeof(pgno_t));
data/monero-0.16.0.0/external/db_drivers/liblmdb/mdb.c:10124:7: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(mo, omp, my->mc_env->me_psize);
data/monero-0.16.0.0/external/db_drivers/liblmdb/mdb.c:10153:7: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(NODEDATA(ni), &db, sizeof(db));
data/monero-0.16.0.0/external/db_drivers/liblmdb/mdb.c:10729:3: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(&txn->mt_dbs[slot], data.mv_data, sizeof(MDB_db));
data/monero-0.16.0.0/external/db_drivers/liblmdb/mdb.c:10987:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char buf[64];
data/monero-0.16.0.0/external/db_drivers/liblmdb/mdb.c:11182:10: [2] (buffer) MultiByteToWideChar:
Requires maximum length in CHARACTERS, not bytes (CWE-120).
need = MultiByteToWideChar(CP_UTF8, 0, src, -1, result, need);
data/monero-0.16.0.0/external/db_drivers/liblmdb/mdb_dump.c:282:4: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(str, key.mv_data, key.mv_size);
data/monero-0.16.0.0/external/db_drivers/liblmdb/mdb_load.c:72:12: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
version=atoi((char *)dbuf.mv_data+STRLENOF("VERSION="));
data/monero-0.16.0.0/external/db_drivers/liblmdb/mdb_load.c:437:7: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(prevk.mv_data, key.mv_data, key.mv_size);
data/monero-0.16.0.0/external/db_drivers/liblmdb/mdb_stat.c:236:4: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(str, key.mv_data, key.mv_size);
data/monero-0.16.0.0/external/db_drivers/liblmdb/midl.c:180:2: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(&ids[ids[0]+1], &app[1], app[0] * sizeof(MDB_ID));
data/monero-0.16.0.0/external/db_drivers/liblmdb/midl.h:68:34: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
#define MDB_IDL_CPY( dst, src ) (memcpy( dst, src, MDB_IDL_SIZEOF( src ) ))
data/monero-0.16.0.0/external/db_drivers/liblmdb/mtest.c:36:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char sval[32] = "";
data/monero-0.16.0.0/external/db_drivers/liblmdb/mtest.c:60:4: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(sval, "%03x %d foo bar", values[i], values[i]);
data/monero-0.16.0.0/external/db_drivers/liblmdb/mtest.c:91:4: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(sval, "%03x ", values[i]);
data/monero-0.16.0.0/external/db_drivers/liblmdb/mtest2.c:38:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char sval[32] = "";
data/monero-0.16.0.0/external/db_drivers/liblmdb/mtest2.c:63:3: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(sval, "%03x %d foo bar", values[i], values[i]);
data/monero-0.16.0.0/external/db_drivers/liblmdb/mtest2.c:90:3: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(sval, "%03x ", values[i]);
data/monero-0.16.0.0/external/db_drivers/liblmdb/mtest3.c:38:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char sval[32];
data/monero-0.16.0.0/external/db_drivers/liblmdb/mtest3.c:39:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char kval[sizeof(int)];
data/monero-0.16.0.0/external/db_drivers/liblmdb/mtest3.c:68:4: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(kval, "%03x", values[i]);
data/monero-0.16.0.0/external/db_drivers/liblmdb/mtest3.c:69:3: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(sval, "%03x %d foo bar", values[i], values[i]);
data/monero-0.16.0.0/external/db_drivers/liblmdb/mtest3.c:94:3: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(kval, "%03x", values[i & ~0x0f]);
data/monero-0.16.0.0/external/db_drivers/liblmdb/mtest3.c:95:3: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(sval, "%03x %d foo bar", values[i], values[i]);
data/monero-0.16.0.0/external/db_drivers/liblmdb/mtest4.c:38:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char sval[8];
data/monero-0.16.0.0/external/db_drivers/liblmdb/mtest4.c:39:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char kval[sizeof(int)];
data/monero-0.16.0.0/external/db_drivers/liblmdb/mtest4.c:64:2: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
strcpy(kval, "001");
data/monero-0.16.0.0/external/db_drivers/liblmdb/mtest4.c:66:3: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(sval, "%07x", values[i]);
data/monero-0.16.0.0/external/db_drivers/liblmdb/mtest4.c:98:2: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(sval, "%07x", values[3]+1);
data/monero-0.16.0.0/external/db_drivers/liblmdb/mtest4.c:103:2: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(sval, "%07x", values[255]+1);
data/monero-0.16.0.0/external/db_drivers/liblmdb/mtest4.c:108:2: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(sval, "%07x", values[500]+1);
data/monero-0.16.0.0/external/db_drivers/liblmdb/mtest4.c:130:3: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(sval, "%07x", values[i]);
data/monero-0.16.0.0/external/db_drivers/liblmdb/mtest5.c:38:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char sval[32];
data/monero-0.16.0.0/external/db_drivers/liblmdb/mtest5.c:39:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char kval[sizeof(int)];
data/monero-0.16.0.0/external/db_drivers/liblmdb/mtest5.c:69:4: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(kval, "%03x", values[i]);
data/monero-0.16.0.0/external/db_drivers/liblmdb/mtest5.c:70:3: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(sval, "%03x %d foo bar", values[i], values[i]);
data/monero-0.16.0.0/external/db_drivers/liblmdb/mtest5.c:96:3: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(kval, "%03x", values[i & ~0x0f]);
data/monero-0.16.0.0/external/db_drivers/liblmdb/mtest5.c:97:3: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(sval, "%03x %d foo bar", values[i], values[i]);
data/monero-0.16.0.0/external/db_drivers/liblmdb/mtest6.c:27:1: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char dkbuf[1024];
data/monero-0.16.0.0/external/db_drivers/liblmdb/mtest6.c:64:3: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(sval, "%08x", kval);
data/monero-0.16.0.0/external/db_drivers/liblmdb/mtest6.c:71:3: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(sval, "%08x", kval);
data/monero-0.16.0.0/external/db_drivers/liblmdb/mtest6.c:78:3: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(sval, "%08x", kval);
data/monero-0.16.0.0/external/db_drivers/liblmdb/mtest6.c:100:3: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(kval, "%03x", values[i & ~0x0f]);
data/monero-0.16.0.0/external/db_drivers/liblmdb/mtest6.c:101:3: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(sval, "%03x %d foo bar", values[i], values[i]);
data/monero-0.16.0.0/external/easylogging++/easylogging++.cc:1087:3: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char localBuff[10] = "";
data/monero-0.16.0.0/external/easylogging++/easylogging++.cc:1138:10: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
static char buffer[bufferLen];
data/monero-0.16.0.0/external/easylogging++/easylogging++.cc:1147:3: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char propVal[PROP_VALUE_MAX + 1];
data/monero-0.16.0.0/external/easylogging++/easylogging++.cc:1174:3: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char hBuff[4096];
data/monero-0.16.0.0/external/easylogging++/easylogging++.cc:1289:3: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char buff_[kBuffSize] = "";
data/monero-0.16.0.0/external/easylogging++/easylogging++.cc:1838:10: [2] (integer) atol:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
return atol(confVal.c_str());
data/monero-0.16.0.0/external/easylogging++/easylogging++.cc:1932:9: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
fs->open(fname, std::fstream::out | std::fstream::trunc);
data/monero-0.16.0.0/external/easylogging++/easylogging++.cc:2231:5: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char baseFilename[base::consts::kSourceFilenameMaxLength] = "";
data/monero-0.16.0.0/external/easylogging++/easylogging++.cc:2251:52: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
setLevel(static_cast<base::type::VerboseLevel>(atoi(commandLineArgs->getParamValue("--v"))));
data/monero-0.16.0.0/external/easylogging++/easylogging++.cc:2253:52: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
setLevel(static_cast<base::type::VerboseLevel>(atoi(commandLineArgs->getParamValue("--V"))));
data/monero-0.16.0.0/external/easylogging++/easylogging++.cc:2386:21: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
int userInput = atoi(m_commandLineArgs.getParamValue(base::consts::kLoggingFlagsParam));
data/monero-0.16.0.0/external/easylogging++/easylogging++.cc:2487:5: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char wbuf[8], *wptr;
data/monero-0.16.0.0/external/easylogging++/easylogging++.cc:2762:3: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char buff[base::consts::kSourceFilenameMaxLength + base::consts::kSourceLineMaxLength] = "";
data/monero-0.16.0.0/external/easylogging++/easylogging++.cc:3043:5: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char buff[256];
data/monero-0.16.0.0/external/easylogging++/easylogging++.h:190:3: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
{ char buff[256]; strerror_s(buff, 256, errno); \
data/monero-0.16.0.0/src/blockchain_db/blockchain_db.h:631:16: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
virtual void open(const std::string& filename, const int db_flags = 0) = 0;
data/monero-0.16.0.0/src/blockchain_db/lmdb/db_lmdb.cpp:111:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(data.get(), bd.data(), bd.size());
data/monero-0.16.0.0/src/blockchain_db/lmdb/db_lmdb.cpp:128:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(mv_data, s, size);
data/monero-0.16.0.0/src/blockchain_db/lmdb/db_lmdb.cpp:241:7: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
const char zerokey[8] = {0};
data/monero-0.16.0.0/src/blockchain_db/lmdb/db_lmdb.cpp:1290:22: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
void BlockchainLMDB::open(const std::string& filename, const int db_flags)
data/monero-0.16.0.0/src/blockchain_db/lmdb/db_lmdb.cpp:3373:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(&ret, &okp->data, sizeof(pre_rct_output_data_t));
data/monero-0.16.0.0/src/blockchain_db/lmdb/db_lmdb.cpp:4092:7: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(&data, &okp->data, sizeof(pre_rct_output_data_t));
data/monero-0.16.0.0/src/blockchain_db/lmdb/db_lmdb.cpp:4349:3: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(val.get(), &data, sizeof(alt_block_data_t));
data/monero-0.16.0.0/src/blockchain_db/lmdb/db_lmdb.cpp:4350:3: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(val.get() + sizeof(alt_block_data_t), blob.data(), blob.size());
data/monero-0.16.0.0/src/blockchain_db/lmdb/db_lmdb.h:188:16: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
virtual void open(const std::string& filename, const int mdb_flags=0);
data/monero-0.16.0.0/src/blockchain_db/testdb.h:45:16: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
virtual void open(const std::string& filename, const int db_flags = 0) override { }
data/monero-0.16.0.0/src/blockchain_utilities/blockchain_ancestry.cpp:467:9: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
db->open(filename, DBF_RDONLY);
data/monero-0.16.0.0/src/blockchain_utilities/blockchain_ancestry.cpp:486:17: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
state_data_in.open(state_file_path, std::ios_base::binary | std::ios_base::in);
data/monero-0.16.0.0/src/blockchain_utilities/blockchain_ancestry.cpp:605:20: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
state_data_out.open(state_file_path, std::ios_base::binary | std::ios_base::out | std::ios::trunc);
data/monero-0.16.0.0/src/blockchain_utilities/blockchain_blackball.cpp:52:14: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
static const char zerokey[8] = {0};
data/monero-0.16.0.0/src/blockchain_utilities/blockchain_blackball.cpp:314:3: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char s[12], *ptr = s;
data/monero-0.16.0.0/src/blockchain_utilities/blockchain_blackball.cpp:1061:7: [2] (misc) fopen:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
f = fopen(filename.c_str(), "r");
data/monero-0.16.0.0/src/blockchain_utilities/blockchain_blackball.cpp:1069:5: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char s[256];
data/monero-0.16.0.0/src/blockchain_utilities/blockchain_blackball.cpp:1114:13: [2] (misc) fopen:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
FILE *f = fopen(filename.c_str(), "w");
data/monero-0.16.0.0/src/blockchain_utilities/blockchain_depth.cpp:154:9: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
db->open(filename, DBF_RDONLY);
data/monero-0.16.0.0/src/blockchain_utilities/blockchain_export.cpp:154:9: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
db->open(filename, DBF_RDONLY);
data/monero-0.16.0.0/src/blockchain_utilities/blockchain_import.cpp:251:15: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
import_file.open(import_file_path, std::ios_base::binary | std::ifstream::in);
data/monero-0.16.0.0/src/blockchain_utilities/blockchain_import.cpp:266:3: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char buffer1[1024];
data/monero-0.16.0.0/src/blockchain_utilities/blockchain_import.cpp:267:3: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char buffer_block[BUFFER_SIZE];
data/monero-0.16.0.0/src/blockchain_utilities/blockchain_prune.cpp:63:13: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
static void open(MDB_env *&env, const boost::filesystem::path &path, uint64_t db_flags, bool readonly)
data/monero-0.16.0.0/src/blockchain_utilities/blockchain_prune.cpp:570:11: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
db->open(paths[n].string(), n == 0 ? DBF_RDONLY : 0);
data/monero-0.16.0.0/src/blockchain_utilities/blockchain_prune.cpp:599:3: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
open(env0, paths[0], db_flags, true);
data/monero-0.16.0.0/src/blockchain_utilities/blockchain_prune.cpp:600:3: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
open(env1, paths[1], db_flags, false);
data/monero-0.16.0.0/src/blockchain_utilities/blockchain_prune_known_spent_data.cpp:51:7: [2] (misc) fopen:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
f = fopen(filename.c_str(), "r");
data/monero-0.16.0.0/src/blockchain_utilities/blockchain_prune_known_spent_data.cpp:59:5: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char s[256];
data/monero-0.16.0.0/src/blockchain_utilities/blockchain_prune_known_spent_data.cpp:178:9: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
db->open(filename, 0);
data/monero-0.16.0.0/src/blockchain_utilities/blockchain_stats.cpp:140:9: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
db->open(filename, DBF_RDONLY);
data/monero-0.16.0.0/src/blockchain_utilities/blockchain_stats.cpp:187:5: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char buf[8];
data/monero-0.16.0.0/src/blockchain_utilities/blockchain_stats.cpp:190:7: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(buf, "\t%02u:00", i);
data/monero-0.16.0.0/src/blockchain_utilities/blockchain_stats.cpp:218:5: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char timebuf[64];
data/monero-0.16.0.0/src/blockchain_utilities/blockchain_usage.cpp:169:9: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
db->open(filename, DBF_RDONLY);
data/monero-0.16.0.0/src/blockchain_utilities/blocksdat_file.cpp:73:20: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
m_raw_data_file->open(file_path.string(), std::ios_base::binary | std::ios_base::out | std::ios::trunc);
data/monero-0.16.0.0/src/blockchain_utilities/blocksdat_file.cpp:86:12: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
unsigned char nblocksc[4];
data/monero-0.16.0.0/src/blockchain_utilities/bootstrap_file.cpp:97:22: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
m_raw_data_file->open(file_path.string(), std::ios_base::binary | std::ios_base::out | std::ios::trunc);
data/monero-0.16.0.0/src/blockchain_utilities/bootstrap_file.cpp:99:22: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
m_raw_data_file->open(file_path.string(), std::ios_base::binary | std::ios_base::out | std::ios::app | std::ios::ate);
data/monero-0.16.0.0/src/blockchain_utilities/bootstrap_file.cpp:331:3: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char buf1[2048];
data/monero-0.16.0.0/src/blockchain_utilities/bootstrap_file.cpp:383:3: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char buf1[sizeof(chunk_size)];
data/monero-0.16.0.0/src/blockchain_utilities/bootstrap_file.cpp:455:15: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
import_file.open(import_file_path, std::ios_base::binary | std::ifstream::in);
data/monero-0.16.0.0/src/common/aligned.c:117:3: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(ptr2, ptr, ctrl->bytes);
data/monero-0.16.0.0/src/common/base58.cpp:111:9: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(reinterpret_cast<uint8_t*>(&res) + sizeof(uint64_t) - size, data, size);
data/monero-0.16.0.0/src/common/base58.cpp:120:9: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(data, reinterpret_cast<uint8_t*>(&num_be) + sizeof(uint64_t) - size, size);
data/monero-0.16.0.0/src/common/boost_serialization_helper.h:75:15: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
data_file.open(file_path , std::ios_base::binary | std::ios_base::out| std::ios::trunc);
data/monero-0.16.0.0/src/common/boost_serialization_helper.h:101:15: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
data_file.open( file_path, std::ios_base::binary | std::ios_base::in);
data/monero-0.16.0.0/src/common/boost_serialization_helper.h:115:17: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
data_file.open( file_path, std::ios_base::binary | std::ios_base::in);
data/monero-0.16.0.0/src/common/compat/glibc_compat.cpp:16:18: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
extern "C" void* memcpy(void* a, const void* b, size_t c)
data/monero-0.16.0.0/src/common/download.cpp:88:9: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
f.open(control->path, mode);
data/monero-0.16.0.0/src/common/download.cpp:139:17: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
f.open(control->path, std::ios_base::out | std::ios_base::binary | std::ios_base::trunc);
data/monero-0.16.0.0/src/common/expect.cpp:51:17: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char buff[256] = {0};
data/monero-0.16.0.0/src/common/i18n.cpp:43:23: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
static const unsigned char qm_magic[16] = {0x3c, 0xb8, 0x64, 0x18, 0xca, 0xef, 0x9c, 0x95, 0xcd, 0x21, 0x1c, 0xbf, 0x60, 0xa1, 0xbd, 0xdd};
data/monero-0.16.0.0/src/common/password.cpp:95:7: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char utf8_ch[8] = {0};
data/monero-0.16.0.0/src/common/perf_timer.cpp:153:5: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char s[12];
data/monero-0.16.0.0/src/common/stack_trace.cpp:127:3: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char sym[512], *dsym;
data/monero-0.16.0.0/src/common/timings.cc:33:13: [2] (misc) fopen:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
FILE *f = fopen(filename.c_str(), "r");
data/monero-0.16.0.0/src/common/timings.cc:41:5: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char s[4096];
data/monero-0.16.0.0/src/common/timings.cc:63:11: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
i.t = atoi(fields[idx++].c_str());
data/monero-0.16.0.0/src/common/timings.cc:64:17: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
i.npoints = atoi(fields[idx++].c_str());
data/monero-0.16.0.0/src/common/timings.cc:74:27: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
i.deciles.push_back(atoi(fields[idx++].c_str()));
data/monero-0.16.0.0/src/common/timings.cc:87:13: [2] (misc) fopen:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
FILE *f = fopen(filename.c_str(), "w");
data/monero-0.16.0.0/src/common/utf8.h:45:5: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char wbuf[8], *wptr;
data/monero-0.16.0.0/src/common/util.cpp:197:21: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
const int fdr = open(name.c_str(), (O_RDONLY | O_CREAT), S_IRUSR);
data/monero-0.16.0.0/src/common/util.cpp:207:23: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
const int fdw = open(name.c_str(), O_RDWR);
data/monero-0.16.0.0/src/common/util.cpp:269:12: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
m_fd = open(filename.c_str(), O_RDWR | O_CREAT | O_CLOEXEC, 0666);
data/monero-0.16.0.0/src/common/util.cpp:312:5: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char pszOS[BUFSIZE] = {0};
data/monero-0.16.0.0/src/common/util.cpp:532:7: [2] (buffer) TCHAR:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
TCHAR buf[80];
data/monero-0.16.0.0/src/common/util.cpp:833:9: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
f.open(attr_path, std::ios_base::in);
data/monero-0.16.0.0/src/common/util.cpp:925:17: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
int f0i = atoi(f0[i].c_str()), f1i = atoi(f1[i].c_str());
data/monero-0.16.0.0/src/common/util.cpp:925:44: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
int f0i = atoi(f0[i].c_str()), f1i = atoi(f1[i].c_str());
data/monero-0.16.0.0/src/common/util.cpp:951:7: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
f.open(filename, std::ios_base::binary | std::ios_base::in | std::ios::ate);
data/monero-0.16.0.0/src/common/util.cpp:962:7: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char buf[4096];
data/monero-0.16.0.0/src/common/util.cpp:1024:5: [2] (buffer) wchar_t:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
wchar_t buffer[1024];
data/monero-0.16.0.0/src/common/util.cpp:1062:5: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char buffer[64];
data/monero-0.16.0.0/src/common/util.cpp:1171:5: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char wbuf[8], *wptr;
data/monero-0.16.0.0/src/crypto/CryptonightR_JIT.c:54:3: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(JIT_code, (src), (size)); \
data/monero-0.16.0.0/src/crypto/blake256.c:162:9: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy((void *) (S->buf + left), (void *) data, fill);
data/monero-0.16.0.0/src/crypto/blake256.c:180:9: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy((void *) (S->buf + left), (void *) data, datalen >> 3);
data/monero-0.16.0.0/src/crypto/chacha.c:49:3: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char tmp[64];
data/monero-0.16.0.0/src/crypto/chacha.c:73:7: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(tmp, data, length);
data/monero-0.16.0.0/src/crypto/chacha.c:164:9: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(ctarget, cipher, length);
data/monero-0.16.0.0/src/crypto/chacha.h:79:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(&unwrap(unwrap(key)), pwd_hash.data(), sizeof(key));
data/monero-0.16.0.0/src/crypto/chacha.h:88:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(&unwrap(unwrap(key)), pwd_hash.data(), sizeof(key));
data/monero-0.16.0.0/src/crypto/crypto-ops.c:328:12: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
unsigned char s[32];
data/monero-0.16.0.0/src/crypto/crypto-ops.c:336:12: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
unsigned char s[32];
data/monero-0.16.0.0/src/crypto/crypto-ops.c:1197:10: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
signed char aslide[256];
data/monero-0.16.0.0/src/crypto/crypto-ops.c:1198:10: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
signed char bslide[256];
data/monero-0.16.0.0/src/crypto/crypto-ops.c:1238:10: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
signed char aslide[256];
data/monero-0.16.0.0/src/crypto/crypto-ops.c:1239:10: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
signed char bslide[256];
data/monero-0.16.0.0/src/crypto/crypto-ops.c:1590:10: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
signed char e[64];
data/monero-0.16.0.0/src/crypto/crypto-ops.c:1989:10: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
signed char e[64];
data/monero-0.16.0.0/src/crypto/crypto-ops.c:2049:10: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
signed char e[64];
data/monero-0.16.0.0/src/crypto/crypto-ops.c:2113:10: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
signed char aslide[256];
data/monero-0.16.0.0/src/crypto/crypto-ops.c:2114:10: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
signed char bslide[256];
data/monero-0.16.0.0/src/crypto/crypto-ops.c:2152:10: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
signed char aslide[256];
data/monero-0.16.0.0/src/crypto/crypto-ops.c:2153:10: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
signed char bslide[256];
data/monero-0.16.0.0/src/crypto/crypto.cpp:125:27: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
static const unsigned char limit[32] = { 0xe3, 0x6a, 0x67, 0x72, 0x8b, 0xce, 0x13, 0x29, 0x8f, 0x30, 0x82, 0x8c, 0x0b, 0xa4, 0x10, 0x39, 0x01, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0xf0 };
data/monero-0.16.0.0/src/crypto/crypto.cpp:202:7: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char output_index[(sizeof(size_t) * 8 + 6) / 7];
data/monero-0.16.0.0/src/crypto/crypto.h:56:5: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char data[32];
data/monero-0.16.0.0/src/crypto/crypto.h:60:5: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char data[32];
data/monero-0.16.0.0/src/crypto/crypto_ops_builder/crypto-ops-old.c:341:12: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
unsigned char s[32];
data/monero-0.16.0.0/src/crypto/crypto_ops_builder/crypto-ops-old.c:350:12: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
unsigned char s[32];
data/monero-0.16.0.0/src/crypto/crypto_ops_builder/crypto-ops-old.c:1218:10: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
signed char aslide[256];
data/monero-0.16.0.0/src/crypto/crypto_ops_builder/crypto-ops-old.c:1219:10: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
signed char bslide[256];
data/monero-0.16.0.0/src/crypto/crypto_ops_builder/crypto-ops-old.c:1581:10: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
signed char e[64];
data/monero-0.16.0.0/src/crypto/crypto_ops_builder/crypto-ops-old.c:2018:10: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
signed char e[64];
data/monero-0.16.0.0/src/crypto/crypto_ops_builder/crypto-ops-old.c:2079:10: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
signed char aslide[256];
data/monero-0.16.0.0/src/crypto/crypto_ops_builder/crypto-ops-old.c:2080:10: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
signed char bslide[256];
data/monero-0.16.0.0/src/crypto/crypto_ops_builder/randombytes.c:17:27: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
ed25519_random_fd = open("/dev/urandom",O_RDONLY);
data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10/fe_isnegative.c:13:12: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
unsigned char s[32];
data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10/fe_isnonzero.c:12:23: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
static const unsigned char zero[32];
data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10/fe_isnonzero.c:16:12: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
unsigned char s[32];
data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10/ge_double_scalarmult.c:48:10: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
signed char aslide[256];
data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10/ge_double_scalarmult.c:49:10: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
signed char bslide[256];
data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10/ge_scalarmult_base.c:66:10: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
signed char e[64];
data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10/keypair.c:9:12: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
unsigned char az[64];
data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10/open.c:14:12: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
unsigned char pkcopy[32];
data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10/open.c:15:12: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
unsigned char rcopy[32];
data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10/open.c:16:12: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
unsigned char scopy[32];
data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10/open.c:17:12: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
unsigned char h[64];
data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10/open.c:18:12: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
unsigned char rcheck[32];
data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10/sign.c:13:12: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
unsigned char pk[32];
data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10/sign.c:14:12: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
unsigned char az[64];
data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10/sign.c:15:12: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
unsigned char nonce[64];
data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10/sign.c:16:12: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
unsigned char hram[64];
data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10CommentedCombined/fe_isnegative.c:13:12: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
unsigned char s[32];
data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10CommentedCombined/fe_isnonzero.c:12:23: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
static const unsigned char zero[32];
data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10CommentedCombined/fe_isnonzero.c:16:12: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
unsigned char s[32];
data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10CommentedCombined/ge_double_scalarmult.c:48:10: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
signed char aslide[256];
data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10CommentedCombined/ge_double_scalarmult.c:49:10: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
signed char bslide[256];
data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10CommentedCombined/ge_scalarmult_base.c:66:10: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
signed char e[64];
data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10CommentedCombined/keypair.c:9:12: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
unsigned char az[64];
data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10CommentedCombined/open.c:14:12: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
unsigned char pkcopy[32];
data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10CommentedCombined/open.c:15:12: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
unsigned char rcopy[32];
data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10CommentedCombined/open.c:16:12: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
unsigned char scopy[32];
data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10CommentedCombined/open.c:17:12: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
unsigned char h[64];
data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10CommentedCombined/open.c:18:12: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
unsigned char rcheck[32];
data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10CommentedCombined/sign.c:13:12: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
unsigned char pk[32];
data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10CommentedCombined/sign.c:14:12: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
unsigned char az[64];
data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10CommentedCombined/sign.c:15:12: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
unsigned char nonce[64];
data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10CommentedCombined/sign.c:16:12: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
unsigned char hram[64];
data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10CommentedCombined/xmrSpecificOld.c:9:12: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
unsigned char s[32];
data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10CommentedCombined/xmrSpecificOld.c:40:10: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
signed char aslide[256];
data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10CommentedCombined/xmrSpecificOld.c:41:10: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
signed char bslide[256];
data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10CommentedCombined/xmrSpecificOld.c:259:10: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
signed char e[64];
data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10CommentedCombined/xmrSpecificOld.c:320:10: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
signed char aslide[256];
data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10CommentedCombined/xmrSpecificOld.c:321:10: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
signed char bslide[256];
data/monero-0.16.0.0/src/crypto/crypto_ops_builder/sha512-hash.c:13:23: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
static const unsigned char iv[64] = {
data/monero-0.16.0.0/src/crypto/crypto_ops_builder/sha512-hash.c:28:12: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
unsigned char h[64];
data/monero-0.16.0.0/src/crypto/crypto_ops_builder/sha512-hash.c:29:12: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
unsigned char padded[256];
data/monero-0.16.0.0/src/crypto/hash-ops.h:89:22: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
void tree_hash(const char (*hashes)[HASH_SIZE], size_t count, char *root_hash);
data/monero-0.16.0.0/src/crypto/hash.c:56:3: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(hash, &state, HASH_SIZE);
data/monero-0.16.0.0/src/crypto/hash.h:49:5: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char data[HASH_SIZE];
data/monero-0.16.0.0/src/crypto/hash.h:52:5: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char data[8];
data/monero-0.16.0.0/src/crypto/hash.h:82:38: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
tree_hash(reinterpret_cast<const char (*)[HASH_SIZE]>(hashes), count, reinterpret_cast<char *>(&root_hash));
data/monero-0.16.0.0/src/crypto/jh.c:37:11: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
unsigned char buffer[64]; /*the 512-bit message block to be hashed;*/
data/monero-0.16.0.0/src/crypto/jh.c:42:16: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
const unsigned char JH224_H0[128]={0x2d,0xfe,0xdd,0x62,0xf9,0x9a,0x98,0xac,0xae,0x7c,0xac,0xd6,0x19,0xd6,0x34,0xe7,0xa4,0x83,0x10,0x5,0xbc,0x30,0x12,0x16,0xb8,0x60,0x38,0xc6,0xc9,0x66,0x14,0x94,0x66,0xd9,0x89,0x9f,0x25,0x80,0x70,0x6f,0xce,0x9e,0xa3,0x1b,0x1d,0x9b,0x1a,0xdc,0x11,0xe8,0x32,0x5f,0x7b,0x36,0x6e,0x10,0xf9,0x94,0x85,0x7f,0x2,0xfa,0x6,0xc1,0x1b,0x4f,0x1b,0x5c,0xd8,0xc8,0x40,0xb3,0x97,0xf6,0xa1,0x7f,0x6e,0x73,0x80,0x99,0xdc,0xdf,0x93,0xa5,0xad,0xea,0xa3,0xd3,0xa4,0x31,0xe8,0xde,0xc9,0x53,0x9a,0x68,0x22,0xb4,0xa9,0x8a,0xec,0x86,0xa1,0xe4,0xd5,0x74,0xac,0x95,0x9c,0xe5,0x6c,0xf0,0x15,0x96,0xd,0xea,0xb5,0xab,0x2b,0xbf,0x96,0x11,0xdc,0xf0,0xdd,0x64,0xea,0x6e};
data/monero-0.16.0.0/src/crypto/jh.c:43:16: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
const unsigned char JH256_H0[128]={0xeb,0x98,0xa3,0x41,0x2c,0x20,0xd3,0xeb,0x92,0xcd,0xbe,0x7b,0x9c,0xb2,0x45,0xc1,0x1c,0x93,0x51,0x91,0x60,0xd4,0xc7,0xfa,0x26,0x0,0x82,0xd6,0x7e,0x50,0x8a,0x3,0xa4,0x23,0x9e,0x26,0x77,0x26,0xb9,0x45,0xe0,0xfb,0x1a,0x48,0xd4,0x1a,0x94,0x77,0xcd,0xb5,0xab,0x26,0x2,0x6b,0x17,0x7a,0x56,0xf0,0x24,0x42,0xf,0xff,0x2f,0xa8,0x71,0xa3,0x96,0x89,0x7f,0x2e,0x4d,0x75,0x1d,0x14,0x49,0x8,0xf7,0x7d,0xe2,0x62,0x27,0x76,0x95,0xf7,0x76,0x24,0x8f,0x94,0x87,0xd5,0xb6,0x57,0x47,0x80,0x29,0x6c,0x5c,0x5e,0x27,0x2d,0xac,0x8e,0xd,0x6c,0x51,0x84,0x50,0xc6,0x57,0x5,0x7a,0xf,0x7b,0xe4,0xd3,0x67,0x70,0x24,0x12,0xea,0x89,0xe3,0xab,0x13,0xd3,0x1c,0xd7,0x69};
data/monero-0.16.0.0/src/crypto/jh.c:44:16: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
const unsigned char JH384_H0[128]={0x48,0x1e,0x3b,0xc6,0xd8,0x13,0x39,0x8a,0x6d,0x3b,0x5e,0x89,0x4a,0xde,0x87,0x9b,0x63,0xfa,0xea,0x68,0xd4,0x80,0xad,0x2e,0x33,0x2c,0xcb,0x21,0x48,0xf,0x82,0x67,0x98,0xae,0xc8,0x4d,0x90,0x82,0xb9,0x28,0xd4,0x55,0xea,0x30,0x41,0x11,0x42,0x49,0x36,0xf5,0x55,0xb2,0x92,0x48,0x47,0xec,0xc7,0x25,0xa,0x93,0xba,0xf4,0x3c,0xe1,0x56,0x9b,0x7f,0x8a,0x27,0xdb,0x45,0x4c,0x9e,0xfc,0xbd,0x49,0x63,0x97,0xaf,0xe,0x58,0x9f,0xc2,0x7d,0x26,0xaa,0x80,0xcd,0x80,0xc0,0x8b,0x8c,0x9d,0xeb,0x2e,0xda,0x8a,0x79,0x81,0xe8,0xf8,0xd5,0x37,0x3a,0xf4,0x39,0x67,0xad,0xdd,0xd1,0x7a,0x71,0xa9,0xb4,0xd3,0xbd,0xa4,0x75,0xd3,0x94,0x97,0x6c,0x3f,0xba,0x98,0x42,0x73,0x7f};
data/monero-0.16.0.0/src/crypto/jh.c:45:16: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
const unsigned char JH512_H0[128]={0x6f,0xd1,0x4b,0x96,0x3e,0x0,0xaa,0x17,0x63,0x6a,0x2e,0x5,0x7a,0x15,0xd5,0x43,0x8a,0x22,0x5e,0x8d,0xc,0x97,0xef,0xb,0xe9,0x34,0x12,0x59,0xf2,0xb3,0xc3,0x61,0x89,0x1d,0xa0,0xc1,0x53,0x6f,0x80,0x1e,0x2a,0xa9,0x5,0x6b,0xea,0x2b,0x6d,0x80,0x58,0x8e,0xcc,0xdb,0x20,0x75,0xba,0xa6,0xa9,0xf,0x3a,0x76,0xba,0xf8,0x3b,0xf7,0x1,0x69,0xe6,0x5,0x41,0xe3,0x4a,0x69,0x46,0xb5,0x8a,0x8e,0x2e,0x6f,0xe6,0x5a,0x10,0x47,0xa7,0xd0,0xc1,0x84,0x3c,0x24,0x3b,0x6e,0x71,0xb1,0x2d,0x5a,0xc1,0x99,0xcf,0x57,0xf6,0xec,0x9d,0xb1,0xf8,0x56,0xa7,0x6,0x88,0x7c,0x57,0x16,0xb1,0x56,0xe3,0xc2,0xfc,0xdf,0xe6,0x85,0x17,0xfb,0x54,0x5a,0x46,0x78,0xcc,0x8c,0xdd,0x4b};
data/monero-0.16.0.0/src/crypto/jh.c:48:16: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
const unsigned char E8_bitslice_roundconstant[42][32]={
data/monero-0.16.0.0/src/crypto/jh.c:240:23: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
case 224: memcpy(state->x,JH224_H0,128); break;
data/monero-0.16.0.0/src/crypto/jh.c:241:23: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
case 256: memcpy(state->x,JH256_H0,128); break;
data/monero-0.16.0.0/src/crypto/jh.c:242:23: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
case 384: memcpy(state->x,JH384_H0,128); break;
data/monero-0.16.0.0/src/crypto/jh.c:243:23: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
case 512: memcpy(state->x,JH512_H0,128); break;
data/monero-0.16.0.0/src/crypto/jh.c:264:18: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(state->buffer + (state->datasize_in_buffer >> 3), data, 64-(state->datasize_in_buffer >> 3)) ;
data/monero-0.16.0.0/src/crypto/jh.c:266:18: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
else memcpy(state->buffer + (state->datasize_in_buffer >> 3), data, 64-(state->datasize_in_buffer >> 3)+1) ;
data/monero-0.16.0.0/src/crypto/jh.c:273:10: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy( state->buffer + (state->datasize_in_buffer >> 3), data, 64-(state->datasize_in_buffer >> 3) ) ;
data/monero-0.16.0.0/src/crypto/jh.c:282:13: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(state->buffer, data+index, 64);
data/monero-0.16.0.0/src/crypto/jh.c:289:19: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(state->buffer, data+index, (databitlen & 0x1ff) >> 3);
data/monero-0.16.0.0/src/crypto/jh.c:291:19: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(state->buffer, data+index, ((databitlen & 0x1ff) >> 3)+1);
data/monero-0.16.0.0/src/crypto/jh.c:342:23: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
case 224: memcpy(hashval,(unsigned char*)state->x+64+36,28); break;
data/monero-0.16.0.0/src/crypto/jh.c:343:23: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
case 256: memcpy(hashval,(unsigned char*)state->x+64+32,32); break;
data/monero-0.16.0.0/src/crypto/jh.c:344:23: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
case 384: memcpy(hashval,(unsigned char*)state->x+64+16,48); break;
data/monero-0.16.0.0/src/crypto/jh.c:345:23: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
case 512: memcpy(hashval,(unsigned char*)state->x+64,64); break;
data/monero-0.16.0.0/src/crypto/keccak.c:110:9: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(&ina, in + i * 8, 8);
data/monero-0.16.0.0/src/crypto/keccak.c:123:7: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(temp, in, inlen);
data/monero-0.16.0.0/src/crypto/keccak.c:172:9: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy((char*)ctx->message + idx, in, (inlen < left ? inlen : left));
data/monero-0.16.0.0/src/crypto/keccak.c:187:13: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(ctx->message, in, KECCAK_BLOCKLEN);
data/monero-0.16.0.0/src/crypto/keccak.c:196:9: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(ctx->message, in, inlen);
data/monero-0.16.0.0/src/crypto/oaes_lib.c:302:2: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy( _temp, word + 1, OAES_COL_LEN - 1 );
data/monero-0.16.0.0/src/crypto/oaes_lib.c:304:2: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy( word, _temp, OAES_COL_LEN );
data/monero-0.16.0.0/src/crypto/oaes_lib.c:332:2: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy( block, _temp, OAES_BLOCK_SIZE );
data/monero-0.16.0.0/src/crypto/oaes_lib.c:360:2: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy( block, _temp, OAES_BLOCK_SIZE );
data/monero-0.16.0.0/src/crypto/oaes_lib.c:415:2: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy( word, _temp, OAES_COL_LEN );
data/monero-0.16.0.0/src/crypto/oaes_lib.c:435:2: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy( word, _temp, OAES_COL_LEN );
data/monero-0.16.0.0/src/crypto/oaes_lib.c:444:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char _temp[4];
data/monero-0.16.0.0/src/crypto/oaes_lib.c:465:3: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf( _temp, "%02x ", data[_i] );
data/monero-0.16.0.0/src/crypto/oaes_lib.c:475:28: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
static void oaes_get_seed( char buf[RANDSIZ + 1] )
data/monero-0.16.0.0/src/crypto/oaes_lib.c:485:2: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf( buf, "%04d%02d%02d%02d%02d%02d%03d%p%d",
data/monero-0.16.0.0/src/crypto/oaes_lib.c:497:2: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf( buf, "%04d%02d%02d%02d%02d%02d%03d%p%d",
data/monero-0.16.0.0/src/crypto/oaes_lib.c:591:2: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy( _ctx->key->exp_data, _ctx->key->data, _ctx->key->data_len );
data/monero-0.16.0.0/src/crypto/oaes_lib.c:598:3: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy( _temp,
data/monero-0.16.0.0/src/crypto/oaes_lib.c:715:2: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy( data, oaes_header, OAES_BLOCK_SIZE );
data/monero-0.16.0.0/src/crypto/oaes_lib.c:718:2: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy( data + OAES_BLOCK_SIZE, _ctx->key->data, _ctx->key->data_len );
data/monero-0.16.0.0/src/crypto/oaes_lib.c:747:2: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy( data, _ctx->key->data, *data_len );
data/monero-0.16.0.0/src/crypto/oaes_lib.c:830:2: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy( _ctx->key->data, data + OAES_BLOCK_SIZE, _key_length );
data/monero-0.16.0.0/src/crypto/oaes_lib.c:882:2: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy( _ctx->key->data, data, data_len );
data/monero-0.16.0.0/src/crypto/oaes_lib.c:904:3: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char _seed[RANDSIZ + 1];
data/monero-0.16.0.0/src/crypto/oaes_lib.c:916:3: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy( _ctx->rctx->randrsl, _seed, RANDSIZ );
data/monero-0.16.0.0/src/crypto/oaes_lib.c:980:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy( _ctx->iv, value, OAES_BLOCK_SIZE );
data/monero-0.16.0.0/src/crypto/oaes_lib.c:1293:2: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(c, oaes_header, OAES_BLOCK_SIZE );
data/monero-0.16.0.0/src/crypto/oaes_lib.c:1294:2: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(c + 6, &_ctx->options, sizeof(_ctx->options));
data/monero-0.16.0.0/src/crypto/oaes_lib.c:1295:2: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(c + 8, &_flags, sizeof(_flags));
data/monero-0.16.0.0/src/crypto/oaes_lib.c:1297:2: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(c + OAES_BLOCK_SIZE, _ctx->iv, OAES_BLOCK_SIZE );
data/monero-0.16.0.0/src/crypto/oaes_lib.c:1299:2: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(c + 2 * OAES_BLOCK_SIZE, m, m_len );
data/monero-0.16.0.0/src/crypto/oaes_lib.c:1306:3: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy( _block, c + 2 * OAES_BLOCK_SIZE + _i, _block_size );
data/monero-0.16.0.0/src/crypto/oaes_lib.c:1321:3: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy( c + 2 * OAES_BLOCK_SIZE + _i, _block, OAES_BLOCK_SIZE );
data/monero-0.16.0.0/src/crypto/oaes_lib.c:1324:4: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy( _ctx->iv, _block, OAES_BLOCK_SIZE );
data/monero-0.16.0.0/src/crypto/oaes_lib.c:1413:2: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy( _iv, c + OAES_BLOCK_SIZE, OAES_BLOCK_SIZE);
data/monero-0.16.0.0/src/crypto/oaes_lib.c:1415:2: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy( m, c + 2 * OAES_BLOCK_SIZE, *m_len );
data/monero-0.16.0.0/src/crypto/oaes_lib.c:1420:4: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy( _iv, c + OAES_BLOCK_SIZE + _i, OAES_BLOCK_SIZE );
data/monero-0.16.0.0/src/crypto/random.c:72:13: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
if ((fd = open("/dev/urandom", O_RDONLY | O_NOCTTY | O_CLOEXEC)) < 0) {
data/monero-0.16.0.0/src/crypto/random.c:136:7: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(result, &state, n);
data/monero-0.16.0.0/src/crypto/random.c:143:7: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(result, &state, HASH_DATA_AREA);
data/monero-0.16.0.0/src/crypto/rx-slow-hash.c:54:3: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char rs_hash[HASH_SIZE];
data/monero-0.16.0.0/src/crypto/rx-slow-hash.c:239:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(rx_sp->rs_hash, seedhash, HASH_SIZE);
data/monero-0.16.0.0/src/crypto/skein.c:1258:9: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(ctx->X,cfg.b,sizeof(cfg.b)); /* copy over into ctx->X[] */
data/monero-0.16.0.0/src/crypto/skein.c:1307:17: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(&ctx->b[ctx->h.bCnt],msg,n);
data/monero-0.16.0.0/src/crypto/skein.c:1331:9: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(&ctx->b[ctx->h.bCnt],msg,msgByteCnt);
data/monero-0.16.0.0/src/crypto/skein.c:1368:9: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(ctx->X,X,sizeof(X)); /* restore the counter mode key for next time */
data/monero-0.16.0.0/src/crypto/skein.c:1458:9: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(ctx->X,cfg.b,sizeof(cfg.b)); /* copy over into ctx->X[] */
data/monero-0.16.0.0/src/crypto/skein.c:1507:17: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(&ctx->b[ctx->h.bCnt],msg,n);
data/monero-0.16.0.0/src/crypto/skein.c:1531:9: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(&ctx->b[ctx->h.bCnt],msg,msgByteCnt);
data/monero-0.16.0.0/src/crypto/skein.c:1568:9: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(ctx->X,X,sizeof(X)); /* restore the counter mode key for next time */
data/monero-0.16.0.0/src/crypto/skein.c:1656:9: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(ctx->X,cfg.b,sizeof(cfg.b)); /* copy over into ctx->X[] */
data/monero-0.16.0.0/src/crypto/skein.c:1705:17: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(&ctx->b[ctx->h.bCnt],msg,n);
data/monero-0.16.0.0/src/crypto/skein.c:1729:9: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(&ctx->b[ctx->h.bCnt],msg,msgByteCnt);
data/monero-0.16.0.0/src/crypto/skein.c:1766:9: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(ctx->X,X,sizeof(X)); /* restore the counter mode key for next time */
data/monero-0.16.0.0/src/crypto/skein.c:1857:9: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(ctx->X,X,sizeof(X)); /* restore the counter mode key for next time */
data/monero-0.16.0.0/src/crypto/skein.c:1886:9: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(ctx->X,X,sizeof(X)); /* restore the counter mode key for next time */
data/monero-0.16.0.0/src/crypto/skein.c:1915:9: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(ctx->X,X,sizeof(X)); /* restore the counter mode key for next time */
data/monero-0.16.0.0/src/crypto/skein_port.h:151:49: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
#define Skein_Put64_LSB_First(dst08,src64,bCnt) memcpy(dst08,src64,bCnt)
data/monero-0.16.0.0/src/crypto/skein_port.h:152:49: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
#define Skein_Get64_LSB_First(dst64,src08,wCnt) memcpy(dst64,src08,8*(wCnt))
data/monero-0.16.0.0/src/crypto/slow-hash.c:148:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(b + AES_BLOCK_SIZE, state.hs.b + 64, AES_BLOCK_SIZE); \
data/monero-0.16.0.0/src/crypto/slow-hash.c:284:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy((dst), (src), sizeof(v4_reg)); \
data/monero-0.16.0.0/src/crypto/slow-hash.c:312:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(t, b, sizeof(uint64_t)); \
data/monero-0.16.0.0/src/crypto/slow-hash.c:319:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(b, t, sizeof(uint64_t)); \
data/monero-0.16.0.0/src/crypto/slow-hash.c:332:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(t, a, sizeof(uint64_t) * 2); \
data/monero-0.16.0.0/src/crypto/slow-hash.c:341:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(a, t, sizeof(uint64_t) * 2); \
data/monero-0.16.0.0/src/crypto/slow-hash.c:902:9: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(&state.hs, data, length);
data/monero-0.16.0.0/src/crypto/slow-hash.c:906:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(text, state.init, INIT_SIZE_BYTE);
data/monero-0.16.0.0/src/crypto/slow-hash.c:922:13: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(&local_hp_state[i * INIT_SIZE_BYTE], text, INIT_SIZE_BYTE);
data/monero-0.16.0.0/src/crypto/slow-hash.c:934:13: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(&local_hp_state[i * INIT_SIZE_BYTE], text, INIT_SIZE_BYTE);
data/monero-0.16.0.0/src/crypto/slow-hash.c:975:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(text, state.init, INIT_SIZE_BYTE);
data/monero-0.16.0.0/src/crypto/slow-hash.c:1006:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(state.init, text, INIT_SIZE_BYTE);
data/monero-0.16.0.0/src/crypto/slow-hash.c:1276:9: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(&state.hs, data, length);
data/monero-0.16.0.0/src/crypto/slow-hash.c:1280:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(text, state.init, INIT_SIZE_BYTE);
data/monero-0.16.0.0/src/crypto/slow-hash.c:1294:9: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(&local_hp_state[i * INIT_SIZE_BYTE], text, INIT_SIZE_BYTE);
data/monero-0.16.0.0/src/crypto/slow-hash.c:1323:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(text, state.init, INIT_SIZE_BYTE);
data/monero-0.16.0.0/src/crypto/slow-hash.c:1339:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(state.init, text, INIT_SIZE_BYTE);
data/monero-0.16.0.0/src/crypto/slow-hash.c:1430:3: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(dst, src, AES_BLOCK_SIZE);
data/monero-0.16.0.0/src/crypto/slow-hash.c:1492:9: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(&state.hs, data, length);
data/monero-0.16.0.0/src/crypto/slow-hash.c:1496:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(text, state.init, INIT_SIZE_BYTE);
data/monero-0.16.0.0/src/crypto/slow-hash.c:1506:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(expandedKey, aes_ctx->key->exp_data, aes_ctx->key->exp_data_len);
data/monero-0.16.0.0/src/crypto/slow-hash.c:1511:9: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(&long_state[i * INIT_SIZE_BYTE], text, INIT_SIZE_BYTE);
data/monero-0.16.0.0/src/crypto/slow-hash.c:1558:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(text, state.init, INIT_SIZE_BYTE);
data/monero-0.16.0.0/src/crypto/slow-hash.c:1560:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(expandedKey, aes_ctx->key->exp_data, aes_ctx->key->exp_data_len);
data/monero-0.16.0.0/src/crypto/slow-hash.c:1571:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(state.init, text, INIT_SIZE_BYTE);
data/monero-0.16.0.0/src/crypto/slow-hash.c:1629:3: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(dst, src, AES_BLOCK_SIZE);
data/monero-0.16.0.0/src/crypto/slow-hash.c:1688:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(&state.hs, data, length);
data/monero-0.16.0.0/src/crypto/slow-hash.c:1692:3: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(text, state.init, INIT_SIZE_BYTE);
data/monero-0.16.0.0/src/crypto/slow-hash.c:1693:3: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(aes_key, state.hs.b, AES_KEY_SIZE);
data/monero-0.16.0.0/src/crypto/slow-hash.c:1705:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(&long_state[i * INIT_SIZE_BYTE], text, INIT_SIZE_BYTE);
data/monero-0.16.0.0/src/crypto/slow-hash.c:1748:3: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(text, state.init, INIT_SIZE_BYTE);
data/monero-0.16.0.0/src/crypto/slow-hash.c:1756:3: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(state.init, text, INIT_SIZE_BYTE);
data/monero-0.16.0.0/src/crypto/tree-hash.c:62:22: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
void tree_hash(const char (*hashes)[HASH_SIZE], size_t count, char *root_hash) {
data/monero-0.16.0.0/src/crypto/tree-hash.c:78:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(root_hash, hashes, HASH_SIZE);
data/monero-0.16.0.0/src/crypto/tree-hash.c:89:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(ints, hashes, (2 * cnt - count) * HASH_SIZE);
data/monero-0.16.0.0/src/crypto/variant4_random_math.h:202:2: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(data, &tmp, sizeof(uint64_t));
data/monero-0.16.0.0/src/crypto/variant4_random_math.h:384:6: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(&t, data + data_index, sizeof(uint32_t));
data/monero-0.16.0.0/src/cryptonote_basic/account.cpp:69:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(data.data(), &base_key, sizeof(base_key));
data/monero-0.16.0.0/src/cryptonote_basic/cryptonote_format_utils.cpp:708:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(&tx_extra[pos], tx_extra_str.data(), tx_extra_str.size());
data/monero-0.16.0.0/src/cryptonote_basic/cryptonote_format_utils.cpp:724:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(&tx_extra[start_pos], extra_nonce.data(), extra_nonce.size());
data/monero-0.16.0.0/src/cryptonote_basic/miner.cpp:1084:24: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
const int fd = open(dev_apm, O_RDONLY);
data/monero-0.16.0.0/src/cryptonote_core/cryptonote_core.cpp:601:11: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
db->open(filename, db_flags);
data/monero-0.16.0.0/src/daemon/rpc_command_executor.cpp:67:5: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char buf[16];
data/monero-0.16.0.0/src/daemon/rpc_command_executor.cpp:135:5: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char buffer[24];
data/monero-0.16.0.0/src/daemonizer/posix_fork.cpp:43:13: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
pidrifs.open(pidfile, std::fstream::in);
data/monero-0.16.0.0/src/daemonizer/posix_fork.cpp:54:12: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
pidofs.open(pidfile, std::fstream::out | std::fstream::trunc);
data/monero-0.16.0.0/src/daemonizer/posix_fork.cpp:112:7: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
if (open("/dev/null", O_RDONLY) < 0)
data/monero-0.16.0.0/src/daemonizer/posix_fork.cpp:126:7: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
if (open(output.c_str(), flags, mode) < 0)
data/monero-0.16.0.0/src/daemonizer/posix_fork.cpp:131:7: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
if (open("/dev/null", O_WRONLY) < 0)
data/monero-0.16.0.0/src/device/device_default.cpp:106:13: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(data.data(), &view_key, sizeof(view_key));
data/monero-0.16.0.0/src/device/device_default.cpp:107:13: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(data.data() + sizeof(view_key), &spend_key, sizeof(spend_key));
data/monero-0.16.0.0/src/device/device_default.cpp:197:13: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char data[sizeof(config::HASH_KEY_SUBADDRESS) + sizeof(crypto::secret_key) + 2 * sizeof(uint32_t)];
data/monero-0.16.0.0/src/device/device_default.cpp:198:13: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(data, config::HASH_KEY_SUBADDRESS, sizeof(config::HASH_KEY_SUBADDRESS));
data/monero-0.16.0.0/src/device/device_default.cpp:199:13: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(data + sizeof(config::HASH_KEY_SUBADDRESS), &a, sizeof(crypto::secret_key));
data/monero-0.16.0.0/src/device/device_default.cpp:201:13: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(data + sizeof(config::HASH_KEY_SUBADDRESS) + sizeof(crypto::secret_key), &idx, sizeof(uint32_t));
data/monero-0.16.0.0/src/device/device_default.cpp:203:13: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(data + sizeof(config::HASH_KEY_SUBADDRESS) + sizeof(crypto::secret_key) + sizeof(uint32_t), &idx, sizeof(uint32_t));
data/monero-0.16.0.0/src/device/device_default.cpp:342:13: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char data[33]; /* A hash, and an extra byte */
data/monero-0.16.0.0/src/device/device_default.cpp:347:13: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(data, &derivation, 32);
data/monero-0.16.0.0/src/device/device_io_hid.cpp:87:9: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char strbuffer[1024];
data/monero-0.16.0.0/src/device/device_io_hid.cpp:180:16: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
unsigned char buffer[400];
data/monero-0.16.0.0/src/device/device_io_hid.cpp:181:16: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
unsigned char padding_buffer[MAX_BLOCK+1];
data/monero-0.16.0.0/src/device/device_io_hid.cpp:198:9: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(padding_buffer+1, buffer + offset, block_size);
data/monero-0.16.0.0/src/device/device_io_hid.cpp:267:7: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(out + offset_out, command + offset, block_size);
data/monero-0.16.0.0/src/device/device_io_hid.cpp:282:9: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(out + offset_out, command + offset, block_size);
data/monero-0.16.0.0/src/device/device_io_hid.cpp:330:7: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(out + offset_out, data + offset, block_size);
data/monero-0.16.0.0/src/device/device_io_hid.cpp:352:9: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(out + offset_out, data + offset, block_size);
data/monero-0.16.0.0/src/device/device_ledger.cpp:141:9: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(this->sec, s, 32);
data/monero-0.16.0.0/src/device/device_ledger.cpp:142:9: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(this->hmac, h, 32);
data/monero-0.16.0.0/src/device/device_ledger.cpp:151:11: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(hmac, hmacs[i].hmac, 32);
data/monero-0.16.0.0/src/device/device_ledger.cpp:374:9: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char strbuffer[1024];
data/monero-0.16.0.0/src/device/device_ledger.cpp:390:9: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char strbuffer[1024];
data/monero-0.16.0.0/src/device/device_ledger.cpp:427:52: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
void device_ledger::send_secret(const unsigned char sec[32], int &offset) {
data/monero-0.16.0.0/src/device/device_ledger.cpp:439:49: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
void device_ledger::receive_secret(unsigned char sec[32], int &offset) {
data/monero-0.16.0.0/src/device/device_ledger.cpp:662:9: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char prekey[200];
data/monero-0.16.0.0/src/device/device_ledger.cpp:1404:18: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
unsigned char tmp[32];
data/monero-0.16.0.0/src/device/device_ledger.hpp:164:18: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
unsigned char buffer_send[BUFFER_SEND_SIZE];
data/monero-0.16.0.0/src/device/device_ledger.hpp:166:18: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
unsigned char buffer_recv[BUFFER_RECV_SIZE];
data/monero-0.16.0.0/src/device/device_ledger.hpp:177:41: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
void send_secret(const unsigned char sec[32], int &offset);
data/monero-0.16.0.0/src/device/device_ledger.hpp:178:38: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
void receive_secret(unsigned char sec[32], int &offset);
data/monero-0.16.0.0/src/device/log.cpp:41:7: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(to_buff+2*i, "%.02x", (unsigned char)buff[i]);
data/monero-0.16.0.0/src/device/log.cpp:46:5: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char logstr[1025];
data/monero-0.16.0.0/src/device/log.cpp:140:7: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char dd[32];
data/monero-0.16.0.0/src/device/log.cpp:141:7: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char logstr[128];
data/monero-0.16.0.0/src/device_trezor/device_trezor.cpp:193:9: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(viewkey.data, res->watch_key().data(), 32);
data/monero-0.16.0.0/src/device_trezor/device_trezor.cpp:342:9: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char buff[sizeof(ki.data)*3];
data/monero-0.16.0.0/src/device_trezor/device_trezor.cpp:352:9: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(sig.c.data, buff + sizeof(ki.data), sizeof(ki.data));
data/monero-0.16.0.0/src/device_trezor/device_trezor.cpp:353:9: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(sig.r.data, buff + 2*sizeof(ki.data), sizeof(ki.data));
data/monero-0.16.0.0/src/device_trezor/device_trezor_base.cpp:140:22: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
m_transport->open();
data/monero-0.16.0.0/src/device_trezor/device_trezor_base.hpp:160:26: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
m_transport->open();
data/monero-0.16.0.0/src/device_trezor/trezor/debug_link.cpp:48:18: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
m_transport->open();
data/monero-0.16.0.0/src/device_trezor/trezor/protocol.cpp:260:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(ki.data, buff, 32);
data/monero-0.16.0.0/src/device_trezor/trezor/protocol.cpp:261:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(sig.c.data, buff + 32, 32);
data/monero-0.16.0.0/src/device_trezor/trezor/protocol.cpp:262:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(sig.r.data, buff + 64, 32);
data/monero-0.16.0.0/src/device_trezor/trezor/protocol.cpp:318:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(spend.data, spend_key.data(), 32);
data/monero-0.16.0.0/src/device_trezor/trezor/protocol.cpp:319:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(view.data, view_key.data(), 32);
data/monero-0.16.0.0/src/device_trezor/trezor/protocol.cpp:324:5: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char buff[64+8+1];
data/monero-0.16.0.0/src/device_trezor/trezor/protocol.cpp:327:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(buff + offset, spend_key->data, 32); offset += 32;
data/monero-0.16.0.0/src/device_trezor/trezor/protocol.cpp:328:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(buff + offset, view_key->data, 32); offset += 32;
data/monero-0.16.0.0/src/device_trezor/trezor/protocol.cpp:331:7: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(buff + offset, (uint8_t*) &(amount.get()), sizeof(amount.get())); offset += sizeof(amount.get());
data/monero-0.16.0.0/src/device_trezor/trezor/protocol.cpp:357:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(res.data, hash, sizeof(hash));
data/monero-0.16.0.0/src/device_trezor/trezor/protocol.cpp:770:7: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(ecdh.amount.bytes, ack->ecdh_info().data(), 8);
data/monero-0.16.0.0/src/device_trezor/trezor/protocol.cpp:984:9: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char buff[32];
data/monero-0.16.0.0/src/device_trezor/trezor/protocol.cpp:1134:7: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(tx_keys[i].data, plaintext.get() + 32 * i, 32);
data/monero-0.16.0.0/src/device_trezor/trezor/transport.cpp:168:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(buff, (void *) &wire_tag, 2);
data/monero-0.16.0.0/src/device_trezor/trezor/transport.cpp:169:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy((uint8_t*)buff + 2, (void *) &wire_len, 4);
data/monero-0.16.0.0/src/device_trezor/trezor/transport.cpp:175:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(&wire_tag, buff, 2);
data/monero-0.16.0.0/src/device_trezor/trezor/transport.cpp:176:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(&wire_len, (uint8_t*)buff + 2, 4);
data/monero-0.16.0.0/src/device_trezor/trezor/transport.cpp:226:7: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(chunk_buff_raw + 1, req_buff_raw + offset, to_copy);
data/monero-0.16.0.0/src/device_trezor/trezor/transport.cpp:400:25: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
void BridgeTransport::open() {
data/monero-0.16.0.0/src/device_trezor/trezor/transport.cpp:572:7: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char res[8];
data/monero-0.16.0.0/src/device_trezor/trezor/transport.cpp:589:10: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
t->open();
data/monero-0.16.0.0/src/device_trezor/trezor/transport.cpp:600:22: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
void UdpTransport::open() {
data/monero-0.16.0.0/src/device_trezor/trezor/transport.cpp:610:15: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
m_socket->open(udp::v4());
data/monero-0.16.0.0/src/device_trezor/trezor/transport.cpp:862:7: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(desc, descriptor.get(), sizeof(libusb_device_descriptor));
data/monero-0.16.0.0/src/device_trezor/trezor/transport.cpp:952:25: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
void WebUsbTransport::open() {
data/monero-0.16.0.0/src/device_trezor/trezor/transport.hpp:154:18: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
virtual void open(){};
data/monero-0.16.0.0/src/device_trezor/trezor/transport.hpp:184:10: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
void open() override;
data/monero-0.16.0.0/src/device_trezor/trezor/transport.hpp:222:10: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
void open() override;
data/monero-0.16.0.0/src/device_trezor/trezor/transport.hpp:270:10: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
void open() override;
data/monero-0.16.0.0/src/gen_ssl_cert/gen_ssl_cert.cpp:73:12: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
unsigned char md[EVP_MAX_MD_SIZE];
data/monero-0.16.0.0/src/lmdb/key_stream.h:137:18: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
std::memcpy(std::addressof(out), key.data(), sizeof(out));
data/monero-0.16.0.0/src/lmdb/table.cpp:31:28: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
expect<MDB_dbi> table::open(MDB_txn& write_txn) const noexcept
data/monero-0.16.0.0/src/lmdb/table.h:22:25: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
expect<MDB_dbi> open(MDB_txn& write_txn) const noexcept;
data/monero-0.16.0.0/src/lmdb/table.h:65:18: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
std::memcpy(std::addressof(out), static_cast<char*>(value.mv_data) + offset, sizeof(out));
data/monero-0.16.0.0/src/lmdb/util.h:121:14: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
std::memcpy(std::addressof(left_val), static_cast<char*>(left->mv_data) + offset, sizeof(T));
data/monero-0.16.0.0/src/lmdb/util.h:122:14: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
std::memcpy(std::addressof(right_val), static_cast<char*>(right->mv_data) + offset, sizeof(T));
data/monero-0.16.0.0/src/lmdb/value_stream.h:171:18: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
std::memcpy(std::addressof(value), values.data() + uoffset, sizeof(value));
data/monero-0.16.0.0/src/mnemonics/chinese_simplified.h:77:30: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
static constexpr const char * const words[NWORDS] =
data/monero-0.16.0.0/src/mnemonics/dutch.h:54:30: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
static constexpr const char * const words[NWORDS] =
data/monero-0.16.0.0/src/mnemonics/english.h:54:30: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
static constexpr const char * const words[NWORDS] =
data/monero-0.16.0.0/src/mnemonics/english_old.h:56:30: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
static constexpr const char * const words[NWORDS] =
data/monero-0.16.0.0/src/mnemonics/esperanto.h:63:30: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
static constexpr const char * const words[NWORDS] =
data/monero-0.16.0.0/src/mnemonics/french.h:54:30: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
static constexpr const char * const words[NWORDS] =
data/monero-0.16.0.0/src/mnemonics/german.h:56:30: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
static constexpr const char * const words[NWORDS] =
data/monero-0.16.0.0/src/mnemonics/italian.h:56:30: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
static constexpr const char * const words[NWORDS] =
data/monero-0.16.0.0/src/mnemonics/japanese.h:76:30: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
static constexpr const char * const words[NWORDS] =
data/monero-0.16.0.0/src/mnemonics/lojban.h:61:30: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
static constexpr const char * const words[NWORDS] =
data/monero-0.16.0.0/src/mnemonics/portuguese.h:77:30: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
static constexpr const char * const words[NWORDS] =
data/monero-0.16.0.0/src/mnemonics/russian.h:56:30: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
static constexpr const char * const words[NWORDS] =
data/monero-0.16.0.0/src/mnemonics/spanish.h:77:30: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
static constexpr const char * const words[NWORDS] =
data/monero-0.16.0.0/src/multisig/multisig.cpp:50:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(multisig_salt.bytes, config::HASH_KEY_MULTISIG, sizeof(rct::key));
data/monero-0.16.0.0/src/net/i2p_address.cpp:90:14: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
std::memcpy(host_, host.data(), length);
data/monero-0.16.0.0/src/net/i2p_address.cpp:103:14: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
std::memcpy(host_, unknown_host, sizeof(unknown_host));
data/monero-0.16.0.0/src/net/i2p_address.cpp:128:18: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
std::memcpy(host_, in.host.data(), in.host.size());
data/monero-0.16.0.0/src/net/i2p_address.cpp:134:14: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
std::memcpy(host_, unknown_host, sizeof(unknown_host)); // include null terminator
data/monero-0.16.0.0/src/net/i2p_address.h:54:9: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char host_[61]; // null-terminated
data/monero-0.16.0.0/src/net/socks.cpp:75:18: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
std::memcpy(out.data(), std::addressof(temp), sizeof(temp));
data/monero-0.16.0.0/src/net/socks.cpp:81:18: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
std::memcpy(out.data(), domain.data(), domain.size());
data/monero-0.16.0.0/src/net/socks.cpp:246:14: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
std::memcpy(std::addressof(buffer_), std::addressof(temp), sizeof(temp));
data/monero-0.16.0.0/src/net/tor_address.cpp:91:14: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
std::memcpy(host_, host.data(), length);
data/monero-0.16.0.0/src/net/tor_address.cpp:104:14: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
std::memcpy(host_, unknown_host, sizeof(unknown_host));
data/monero-0.16.0.0/src/net/tor_address.cpp:130:18: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
std::memcpy(host_, in.host.data(), in.host.size());
data/monero-0.16.0.0/src/net/tor_address.cpp:136:14: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
std::memcpy(host_, unknown_host, sizeof(unknown_host)); // include null terminator
data/monero-0.16.0.0/src/net/tor_address.h:54:9: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char host_[63]; // null-terminated
data/monero-0.16.0.0/src/p2p/net_peerlist.cpp:161:55: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
boost::optional<peerlist_storage> peerlist_storage::open(std::istream& src, const bool new_format)
data/monero-0.16.0.0/src/p2p/net_peerlist.cpp:191:55: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
boost::optional<peerlist_storage> peerlist_storage::open(const std::string& path)
data/monero-0.16.0.0/src/p2p/net_peerlist.cpp:194:14: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
src_file.open( path , std::ios_base::binary | std::ios_base::in);
data/monero-0.16.0.0/src/p2p/net_peerlist.cpp:198:45: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
boost::optional<peerlist_storage> out = open(src_file, true);
data/monero-0.16.0.0/src/p2p/net_peerlist.cpp:204:16: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
src_file.open( path , std::ios_base::binary | std::ios_base::in);
data/monero-0.16.0.0/src/p2p/net_peerlist.cpp:208:13: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
out = open(src_file, false);
data/monero-0.16.0.0/src/p2p/net_peerlist.cpp:243:15: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
dest_file.open( path , std::ios_base::binary | std::ios_base::out| std::ios::trunc);
data/monero-0.16.0.0/src/p2p/net_peerlist.h:70:46: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
static boost::optional<peerlist_storage> open(std::istream& src, const bool new_format);
data/monero-0.16.0.0/src/p2p/net_peerlist.h:73:46: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
static boost::optional<peerlist_storage> open(const std::string& path);
data/monero-0.16.0.0/src/p2p/net_peerlist_boost_serialization.h:174:7: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char host[buffer_size] = {0};
data/monero-0.16.0.0/src/p2p/net_peerlist_boost_serialization.h:196:7: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char host[buffer_size] = {0};
data/monero-0.16.0.0/src/ringct/multiexp.cc:484:14: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
unsigned char bytes33[33];
data/monero-0.16.0.0/src/ringct/multiexp.cc:485:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(bytes33, data[j].scalar.bytes, 32);
data/monero-0.16.0.0/src/ringct/rctOps.cpp:659:9: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char data[38];
data/monero-0.16.0.0/src/ringct/rctOps.cpp:661:9: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(data, "amount", 6);
data/monero-0.16.0.0/src/ringct/rctOps.cpp:662:9: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(data + 6, &k, sizeof(k));
data/monero-0.16.0.0/src/ringct/rctOps.cpp:673:9: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char data[15 + sizeof(key)];
data/monero-0.16.0.0/src/ringct/rctOps.cpp:674:9: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(data, "commitment_mask", 15);
data/monero-0.16.0.0/src/ringct/rctOps.cpp:675:9: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(data + 15, &sk, sizeof(sk));
data/monero-0.16.0.0/src/ringct/rctOps.h:74:37: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
inline void identity(key &Id) { memcpy(&Id, &I, 32); }
data/monero-0.16.0.0/src/ringct/rctOps.h:79:47: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
inline void copy(key &AA, const key &A) { memcpy(&AA, &A, 32); }
data/monero-0.16.0.0/src/ringct/rctOps.h:80:46: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
inline key copy(const key & A) { key AA; memcpy(&AA, &A, 32); return AA; }
data/monero-0.16.0.0/src/ringct/rctTypes.h:87:18: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
unsigned char bytes[32];
data/monero-0.16.0.0/src/rpc/core_rpc_server.cpp:1100:9: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(&spent_key_image, &hash, sizeof(hash)); // a bit dodgy, should be other parse functions somewhere
data/monero-0.16.0.0/src/rpc/rpc_payment.cpp:149:7: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char data[33];
data/monero-0.16.0.0/src/rpc/rpc_payment.cpp:150:7: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(data, &client, 32);
data/monero-0.16.0.0/src/rpc/rpc_payment.cpp:296:10: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
data.open(state_file_path, std::ios_base::binary | std::ios_base::in);
data/monero-0.16.0.0/src/rpc/rpc_payment.cpp:341:10: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
data.open(state_file_path.string(), std::ios_base::binary | std::ios_base::out | std::ios::trunc);
data/monero-0.16.0.0/src/rpc/rpc_payment_signature.cpp:50:5: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char ts[17];
data/monero-0.16.0.0/src/serialization/json_archive.h:135:36: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
unsigned char c = ((unsigned char *)buf)[i];
data/monero-0.16.0.0/src/simplewallet/simplewallet.cpp:1730:5: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char str[4096];
data/monero-0.16.0.0/src/simplewallet/simplewallet.cpp:1731:48: [2] (misc) fopen:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
std::unique_ptr<FILE, tools::close_file> f(fopen(args[0].c_str(), "r"));
data/monero-0.16.0.0/src/simplewallet/simplewallet.cpp:1743:9: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char key_image_str[65], type_str[9];
data/monero-0.16.0.0/src/simplewallet/simplewallet.cpp:2020:7: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char str[256];
data/monero-0.16.0.0/src/simplewallet/simplewallet.cpp:2022:50: [2] (misc) fopen:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
std::unique_ptr<FILE, tools::close_file> f(fopen(args[0].c_str(), "r"));
data/monero-0.16.0.0/src/simplewallet/simplewallet.cpp:2268:7: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char cphs[9];
data/monero-0.16.0.0/src/wallet/api/unsigned_transaction.cpp:276:15: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(payment_id.data, payment_id8.data, 8);
data/monero-0.16.0.0/src/wallet/api/wallet.cpp:699:18: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
bool WalletImpl::open(const std::string &path, const std::string &password)
data/monero-0.16.0.0/src/wallet/api/wallet.h:61:10: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
bool open(const std::string &path, const std::string &password);
data/monero-0.16.0.0/src/wallet/api/wallet_manager.cpp:68:13: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
wallet->open(path, password);
data/monero-0.16.0.0/src/wallet/message_store.cpp:342:12: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
unsigned char random[AUTO_CONFIG_TOKEN_BYTES];
data/monero-0.16.0.0/src/wallet/ringdb.cpp:45:14: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
static const char zerokey[8] = {0};
data/monero-0.16.0.0/src/wallet/ringdb.cpp:110:3: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(buffer, &key_image, sizeof(key_image));
data/monero-0.16.0.0/src/wallet/ringdb.cpp:111:3: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(buffer + sizeof(key_image), &key, sizeof(key));
data/monero-0.16.0.0/src/wallet/ringdb.cpp:112:3: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(buffer + sizeof(key_image) + sizeof(key), config::HASH_KEY_RINGDB, sizeof(config::HASH_KEY_RINGDB));
data/monero-0.16.0.0/src/wallet/ringdb.cpp:113:3: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(buffer + sizeof(key_image) + sizeof(key) + sizeof(config::HASH_KEY_RINGDB), &field, sizeof(field));
data/monero-0.16.0.0/src/wallet/ringdb.cpp:119:3: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(&iv, &hash, CHACHA_IV_SIZE);
data/monero-0.16.0.0/src/wallet/ringdb.cpp:129:3: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(&ciphertext[0], &iv, sizeof(iv));
data/monero-0.16.0.0/src/wallet/wallet2.cpp:1971:15: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(&additional_derivations.back(), rct::identity().bytes, sizeof(crypto::key_derivation));
data/monero-0.16.0.0/src/wallet/wallet2.cpp:2391:13: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(payment_id.data, payment_id8.data, 8);
data/monero-0.16.0.0/src/wallet/wallet2.cpp:3978:3: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(cache_key_data.data(), &key, HASH_SIZE);
data/monero-0.16.0.0/src/wallet/wallet2.cpp:5462:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(payment_id.data, payment_id8.data, 8);
data/monero-0.16.0.0/src/wallet/wallet2.cpp:5881:10: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
ostr.open(new_file, std::ios_base::binary | std::ios_base::out | std::ios_base::trunc);
data/monero-0.16.0.0/src/wallet/wallet2.cpp:6442:9: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(payment_id.data, payment_id8.data, 8);
data/monero-0.16.0.0/src/wallet/wallet2.cpp:6771:9: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(&additional_derivations.back(), rct::identity().bytes, sizeof(crypto::key_derivation));
data/monero-0.16.0.0/src/wallet/wallet2.cpp:11148:7: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(&signatures.back()[j], sig_decoded.data(), sizeof(crypto::signature));
data/monero-0.16.0.0/src/wallet/wallet2.cpp:11570:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(&shared_secret[i], pk_decoded.data(), sizeof(crypto::public_key));
data/monero-0.16.0.0/src/wallet/wallet2.cpp:11571:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(&sig[i], sig_decoded.data(), sizeof(crypto::signature));
data/monero-0.16.0.0/src/wallet/wallet2.cpp:13173:3: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(&ciphertext[0], &iv, sizeof(iv));
data/monero-0.16.0.0/src/wallet/wallet2.cpp:13704:14: [2] (misc) fopen:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
FILE *fp = fopen(path_to_file.c_str(), "w+");
data/monero-0.16.0.0/src/wallet/wallet2.h:2013:13: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(x.m_payment_id.data, payment_id.data, 8);
data/monero-0.16.0.0/src/wallet/wallet_rpc_server.cpp:1708:9: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(payment_id.data, payment_id8.data, 8);
data/monero-0.16.0.0/src/wallet/wallet_rpc_server.cpp:1783:11: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(payment_id.data, payment_id8.data, 8);
data/monero-0.16.0.0/src/wallet/wallet_rpc_server.cpp:3092:13: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
const char *argv[4];
data/monero-0.16.0.0/src/wallet/wallet_rpc_server.cpp:3189:13: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
const char *argv[4];
data/monero-0.16.0.0/src/wallet/wallet_rpc_server.cpp:3412:13: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
const char *argv[4];
data/monero-0.16.0.0/src/wallet/wallet_rpc_server.cpp:3602:13: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
const char *argv[4];
data/monero-0.16.0.0/tests/core_tests/chaingen.cpp:760:10: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
myfile.open (fname);
data/monero-0.16.0.0/tests/core_tests/chaingen.h:280:3: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char buff[10];
data/monero-0.16.0.0/tests/core_tests/rct.cpp:423:32: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
NULL, [](transaction &tx) {memcpy(&boost::get<txin_to_key>(tx.vin[0]).k_image, k_image, 32);});
data/monero-0.16.0.0/tests/core_tests/rct.cpp:434:32: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
NULL, [](transaction &tx) {memcpy(&boost::get<txin_to_key>(tx.vin[0]).k_image, k_image, 32);});
data/monero-0.16.0.0/tests/crypto/cnv4-jit.c:41:3: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char hash0[32], hash1[32];
data/monero-0.16.0.0/tests/crypto/cnv4-jit.c:92:9: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(data + offset, &counter, sizeof(counter));
data/monero-0.16.0.0/tests/crypto/main.cpp:73:9: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
input.open(argv[1], ios_base::in);
data/monero-0.16.0.0/tests/functional_tests/make_test_signature.cc:62:13: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
int i = atoi(argv[2]);
data/monero-0.16.0.0/tests/fuzz/levin.cpp:312:11: [2] (misc) fopen:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
FILE *f=fopen("/tmp/out.levin", "w");
data/monero-0.16.0.0/tests/gtest/include/gtest/internal/gtest-port.h:2366:10: [2] (misc) fopen:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
return fopen(path, mode);
data/monero-0.16.0.0/tests/gtest/src/gtest-death-test.cc:325:3: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char buffer[256];
data/monero-0.16.0.0/tests/gtest/src/gtest-death-test.cc:741:3: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char executable_path[_MAX_PATH + 1]; // NOLINT
data/monero-0.16.0.0/tests/gtest/src/gtest-death-test.cc:1027:22: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
const int cwd_fd = open(".", O_RDONLY);
data/monero-0.16.0.0/tests/gtest/src/gtest-filepath.cc:105:3: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char cwd[GTEST_PATH_MAX_ + 1] = { '\0' };
data/monero-0.16.0.0/tests/gtest/src/gtest-filepath.cc:108:3: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char cwd[GTEST_PATH_MAX_ + 1] = { '\0' };
data/monero-0.16.0.0/tests/gtest/src/gtest-port.cc:139:18: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
const int fd = open("/proc/self/as", O_RDONLY);
data/monero-0.16.0.0/tests/gtest/src/gtest-port.cc:865:3: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(buffer, regex, len);
data/monero-0.16.0.0/tests/gtest/src/gtest-port.cc:938:5: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char temp_dir_path[MAX_PATH + 1] = { '\0' }; // NOLINT
data/monero-0.16.0.0/tests/gtest/src/gtest-port.cc:939:5: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char temp_file_path[MAX_PATH + 1] = { '\0' }; // NOLINT
data/monero-0.16.0.0/tests/gtest/src/gtest-port.cc:976:29: [2] (tmpfile) mkstemp:
Potential for temporary file vulnerability in some circumstances. Some
older Unix-like systems create temp files with permission to write by all
by default, so be sure to set the umask to override this. Also, some older
Unix systems might fail to use O_EXCL when opening the file, so make sure
that O_EXCL is used by the library (CWE-377).
const int captured_fd = mkstemp(name_template);
data/monero-0.16.0.0/tests/gtest/src/gtest-printers.cc:65:3: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char text[5] = "";
data/monero-0.16.0.0/tests/gtest/src/gtest.cc:862:7: [2] (buffer) MultiByteToWideChar:
Requires maximum length in CHARACTERS, not bytes (CWE-120).
MultiByteToWideChar(CP_ACP, 0, ansi, length,
data/monero-0.16.0.0/tests/gtest/src/gtest.cc:865:3: [2] (buffer) MultiByteToWideChar:
Requires maximum length in CHARACTERS, not bytes (CWE-120).
MultiByteToWideChar(CP_ACP, 0, ansi, length,
data/monero-0.16.0.0/tests/gtest/src/gtest.cc:1680:3: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char error_text[kBufSize] = { '\0' };
data/monero-0.16.0.0/tests/gtest/src/gtest.cc:1764:3: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char str[5]; // Big enough for the largest valid code point.
data/monero-0.16.0.0/tests/hash/main.cpp:62:22: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
tree_hash((const char (*)[crypto::HASH_SIZE]) data, length >> 5, hash);
data/monero-0.16.0.0/tests/hash/main.cpp:146:9: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
input.open(argv[2], ios_base::in);
data/monero-0.16.0.0/tests/net_load_tests/clt.cpp:84:10: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
bool open()
data/monero-0.16.0.0/tests/net_load_tests/clt.cpp:357:30: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
while (connection_opener.open());
data/monero-0.16.0.0/tests/net_load_tests/clt.cpp:414:30: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
while (connection_opener.open());
data/monero-0.16.0.0/tests/net_load_tests/clt.cpp:563:30: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
while (connection_opener.open());
data/monero-0.16.0.0/tests/performance_tests/cn_slow_hash.h:46:5: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char data[43];
data/monero-0.16.0.0/tests/performance_tests/equality.h:69:12: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
unsigned char k0[32];
data/monero-0.16.0.0/tests/performance_tests/equality.h:70:12: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
unsigned char k1[32];
data/monero-0.16.0.0/tests/trezor/daemon.cpp:64:24: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
if (!test_mainnet || atoi(test_mainnet) == 0)
data/monero-0.16.0.0/tests/trezor/tools.cpp:50:9: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
const char *argv[2] = {nullptr};
data/monero-0.16.0.0/tests/trezor/trezor_tests.cpp:91:21: [2] (integer) atol:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
return env_data ? atol(env_data) : (def ? def.get() : 0);
data/monero-0.16.0.0/tests/trezor/trezor_tests.cpp:257:15: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
data_file.open( file_path, std::ios_base::binary | std::ios_base::in);
data/monero-0.16.0.0/tests/trezor/trezor_tests.cpp:281:15: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
data_file.open( file_path, std::ios_base::binary | std::ios_base::out | std::ios::trunc);
data/monero-0.16.0.0/tests/trezor/trezor_tests.cpp:493:3: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(payment_id_short.data, payment_id.data(), 8);
data/monero-0.16.0.0/tests/trezor/trezor_tests.cpp:501:3: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(payment_id_long.data, payment_id.data(), 32);
data/monero-0.16.0.0/tests/trezor/trezor_tests.cpp:1594:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(D.data, rct::scalarmultKey(rct::pk2rct(R), rct::sk2rct(m_alice_account.get_keys().m_view_secret_key)).bytes, 32);
data/monero-0.16.0.0/tests/unit_tests/blockchain_db.cpp:245:31: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
ASSERT_NO_THROW(this->m_db->open(dirPath));
data/monero-0.16.0.0/tests/unit_tests/blockchain_db.cpp:249:28: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
ASSERT_THROW(this->m_db->open(dirPath), DB_OPEN_FAILURE);
data/monero-0.16.0.0/tests/unit_tests/blockchain_db.cpp:263:31: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
ASSERT_NO_THROW(this->m_db->open(dirPath));
data/monero-0.16.0.0/tests/unit_tests/blockchain_db.cpp:311:31: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
ASSERT_NO_THROW(this->m_db->open(dirPath));
data/monero-0.16.0.0/tests/unit_tests/crypto.cpp:61:10: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
std::memcpy(addressof(value), source, sizeof(T));
data/monero-0.16.0.0/tests/unit_tests/crypto.cpp:82:3: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char zero[32];
data/monero-0.16.0.0/tests/unit_tests/crypto.cpp:91:12: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
unsigned char k0[32] = {0}, k1[32] = {0};
data/monero-0.16.0.0/tests/unit_tests/epee_levin_protocol_handler_async.cpp:371:8: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
std::memcpy(std::addressof(resp_head), send_data.data(), sizeof(resp_head));
data/monero-0.16.0.0/tests/unit_tests/epee_utils.cpp:247:3: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char data[10];
data/monero-0.16.0.0/tests/unit_tests/epee_utils.cpp:342:21: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
struct some_pod { char value[4]; };
data/monero-0.16.0.0/tests/unit_tests/epee_utils.cpp:359:21: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
struct some_pod { char value[4]; };
data/monero-0.16.0.0/tests/unit_tests/epee_utils.cpp:544:8: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
std::memcpy(adapted.data(), base_string, sizeof(base_string));
data/monero-0.16.0.0/tests/unit_tests/epee_utils.cpp:1270:30: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
struct some_pod { unsigned char data[4]; };
data/monero-0.16.0.0/tests/unit_tests/keccak.cpp:150:33: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
__attribute__ ((aligned(16))) char adata[6000];
data/monero-0.16.0.0/tests/unit_tests/keccak.cpp:158:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(adata, data + offset, 6000);
data/monero-0.16.0.0/tests/unit_tests/lmdb.cpp:44:9: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char data[16];
data/monero-0.16.0.0/tests/unit_tests/memwipe.cpp:42:3: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
strcpy(foo, "bar");
data/monero-0.16.0.0/tests/unit_tests/net.cpp:959:22: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
acceptor.open(boost::asio::ip::tcp::v4());
data/monero-0.16.0.0/tests/unit_tests/node_server.cpp:290:11: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
const char *argv[2] = {nullptr, nullptr};
data/monero-0.16.0.0/tests/unit_tests/notify.cpp:56:12: [2] (tmpfile) mkstemp:
Potential for temporary file vulnerability in some circumstances. Some
older Unix-like systems create temp files with permission to write by all
by default, so be sure to set the umask to override this. Also, some older
Unix systems might fail to use O_EXCL when opening the file, so make sure
that O_EXCL is used by the library (CWE-377).
int fd = mkstemp(name_template);
data/monero-0.16.0.0/tests/unit_tests/random.cpp:39:12: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
unsigned char tmp[32], tmp2[32];
data/monero-0.16.0.0/tests/unit_tests/random.cpp:43:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(tmp2, tmp, 32);
data/monero-0.16.0.0/tests/unit_tests/serialization.cpp:58:3: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char blob[8];
data/monero-0.16.0.0/tests/unit_tests/serialization.cpp:171:10: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
std::memcpy(s.blob, "12345678", 8);
data/monero-0.16.0.0/tests/unit_tests/slow_memmem.cpp:117:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(buf,T[n].buf,T[n].buflen);
data/monero-0.16.0.0/tests/unit_tests/slow_memmem.cpp:119:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(pat,T[n].pat,T[n].patlen);
data/monero-0.16.0.0/tests/unit_tests/test_notifier.cpp:44:13: [2] (misc) fopen:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
FILE *f = fopen(filename, "a+");
data/monero-0.16.0.0/tests/unit_tests/test_peerlist.cpp:130:35: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
nodetool::peerlist_storage::open(stream, true);
data/monero-0.16.0.0/tests/unit_tests/test_peerlist.cpp:198:35: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
nodetool::peerlist_storage::open(stream, true);
data/monero-0.16.0.0/tests/unit_tests/varint.cpp:52:5: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char buf[12];
data/monero-0.16.0.0/translations/generate_translations_header.c:41:17: [2] (misc) fopen:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
if((foutput = fopen("translation_files.h", "w")) == NULL) {
data/monero-0.16.0.0/translations/generate_translations_header.c:50:15: [2] (misc) fopen:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
if ((fp = fopen(argv[i], "rb")) == NULL) {
data/monero-0.16.0.0/contrib/epee/include/file_io_utils.h:166:12: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
fstream.read((char*)target_str.data(), target_str.size());
data/monero-0.16.0.0/contrib/epee/include/net/net_utils_base.h:79:8: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
bool equal(const ipv4_network_address& other) const noexcept;
data/monero-0.16.0.0/contrib/epee/include/net/net_utils_base.h:110:15: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
{ return lhs.equal(rhs); }
data/monero-0.16.0.0/contrib/epee/include/net/net_utils_base.h:112:16: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
{ return !lhs.equal(rhs); }
data/monero-0.16.0.0/contrib/epee/include/net/net_utils_base.h:135:8: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
bool equal(const ipv4_network_subnet& other) const noexcept;
data/monero-0.16.0.0/contrib/epee/include/net/net_utils_base.h:157:15: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
{ return lhs.equal(rhs); }
data/monero-0.16.0.0/contrib/epee/include/net/net_utils_base.h:159:16: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
{ return !lhs.equal(rhs); }
data/monero-0.16.0.0/contrib/epee/include/net/net_utils_base.h:185:8: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
bool equal(const ipv6_network_address& other) const noexcept;
data/monero-0.16.0.0/contrib/epee/include/net/net_utils_base.h:210:15: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
{ return lhs.equal(rhs); }
data/monero-0.16.0.0/contrib/epee/include/net/net_utils_base.h:212:16: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
{ return !lhs.equal(rhs); }
data/monero-0.16.0.0/contrib/epee/include/net/net_utils_base.h:228:17: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
virtual bool equal(const interface&) const = 0;
data/monero-0.16.0.0/contrib/epee/include/net/net_utils_base.h:253:17: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
virtual bool equal(const interface& other) const override
data/monero-0.16.0.0/contrib/epee/include/net/net_utils_base.h:254:19: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
{ return value.equal(cast(other)); }
data/monero-0.16.0.0/contrib/epee/include/net/net_utils_base.h:305:8: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
bool equal(const network_address &other) const;
data/monero-0.16.0.0/contrib/epee/include/net/net_utils_base.h:346:15: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
{ return lhs.equal(rhs); }
data/monero-0.16.0.0/contrib/epee/include/net/net_utils_base.h:348:16: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
{ return !lhs.equal(rhs); }
data/monero-0.16.0.0/contrib/epee/include/storages/portable_storage.h:176:18: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
buf_reader.read(m_root);
data/monero-0.16.0.0/contrib/epee/include/storages/portable_storage_from_bin.h:48:12: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
void read(void* target, size_t count);
data/monero-0.16.0.0/contrib/epee/include/storages/portable_storage_from_bin.h:51:12: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
void read(t_pod_type& pod_val);
data/monero-0.16.0.0/contrib/epee/include/storages/portable_storage_from_bin.h:53:14: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
t_type read();
data/monero-0.16.0.0/contrib/epee/include/storages/portable_storage_from_bin.h:61:12: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
void read(section& sec);
data/monero-0.16.0.0/contrib/epee/include/storages/portable_storage_from_bin.h:62:12: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
void read(std::string& str);
data/monero-0.16.0.0/contrib/epee/include/storages/portable_storage_from_bin.h:63:12: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
void read(array_entry &ae);
data/monero-0.16.0.0/contrib/epee/include/storages/portable_storage_from_bin.h:97:35: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
void throwable_buffer_reader::read(void* target, size_t count)
data/monero-0.16.0.0/contrib/epee/include/storages/portable_storage_from_bin.h:110:7: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
read(name_len);
data/monero-0.16.0.0/contrib/epee/include/storages/portable_storage_from_bin.h:112:7: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
read((void*)sce_name.data(), name_len);
data/monero-0.16.0.0/contrib/epee/include/storages/portable_storage_from_bin.h:116:35: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
void throwable_buffer_reader::read(t_pod_type& pod_val)
data/monero-0.16.0.0/contrib/epee/include/storages/portable_storage_from_bin.h:120:7: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
read(&pod_val, sizeof(pod_val));
data/monero-0.16.0.0/contrib/epee/include/storages/portable_storage_from_bin.h:125:37: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
t_type throwable_buffer_reader::read()
data/monero-0.16.0.0/contrib/epee/include/storages/portable_storage_from_bin.h:129:7: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
read(v);
data/monero-0.16.0.0/contrib/epee/include/storages/portable_storage_from_bin.h:145:30: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
sa.m_array.push_back(read<type_name>());
data/monero-0.16.0.0/contrib/epee/include/storages/portable_storage_from_bin.h:183:45: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
case PORTABLE_RAW_SIZE_MARK_BYTE: v = read<uint8_t>();break;
data/monero-0.16.0.0/contrib/epee/include/storages/portable_storage_from_bin.h:184:45: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
case PORTABLE_RAW_SIZE_MARK_WORD: v = read<uint16_t>();break;
data/monero-0.16.0.0/contrib/epee/include/storages/portable_storage_from_bin.h:185:46: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
case PORTABLE_RAW_SIZE_MARK_DWORD: v = read<uint32_t>();break;
data/monero-0.16.0.0/contrib/epee/include/storages/portable_storage_from_bin.h:186:46: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
case PORTABLE_RAW_SIZE_MARK_INT64: v = read<uint64_t>();break;
data/monero-0.16.0.0/contrib/epee/include/storages/portable_storage_from_bin.h:199:7: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
read(v);
data/monero-0.16.0.0/contrib/epee/include/storages/portable_storage_from_bin.h:207:28: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
return storage_entry(read<std::string>());
data/monero-0.16.0.0/contrib/epee/include/storages/portable_storage_from_bin.h:218:7: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
read(section_entry);
data/monero-0.16.0.0/contrib/epee/include/storages/portable_storage_from_bin.h:227:7: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
read(ent_type);
data/monero-0.16.0.0/contrib/epee/include/storages/portable_storage_from_bin.h:237:7: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
read(ent_type);
data/monero-0.16.0.0/contrib/epee/include/storages/portable_storage_from_bin.h:261:35: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
void throwable_buffer_reader::read(section& sec)
data/monero-0.16.0.0/contrib/epee/include/storages/portable_storage_from_bin.h:275:35: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
void throwable_buffer_reader::read(std::string& str)
data/monero-0.16.0.0/contrib/epee/include/storages/portable_storage_from_bin.h:287:35: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
void throwable_buffer_reader::read(array_entry &ae)
data/monero-0.16.0.0/contrib/epee/src/net_utils_base.cpp:11:29: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
bool ipv4_network_address::equal(const ipv4_network_address& other) const noexcept
data/monero-0.16.0.0/contrib/epee/src/net_utils_base.cpp:24:29: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
bool ipv6_network_address::equal(const ipv6_network_address& other) const noexcept
data/monero-0.16.0.0/contrib/epee/src/net_utils_base.cpp:38:28: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
bool ipv4_network_subnet::equal(const ipv4_network_subnet& other) const noexcept
data/monero-0.16.0.0/contrib/epee/src/net_utils_base.cpp:56:24: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
bool network_address::equal(const network_address& other) const
data/monero-0.16.0.0/contrib/epee/src/net_utils_base.cpp:64:17: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
return self_->equal(*other_self);
data/monero-0.16.0.0/contrib/epee/src/readline_buffer.cpp:195:11: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
len = strlen(text);
data/monero-0.16.0.0/contrib/epee/src/wipeable_string.cpp:83:8: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
grow(strlen(s));
data/monero-0.16.0.0/contrib/epee/src/wipeable_string.cpp:154:13: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
append(s, strlen(s));
data/monero-0.16.0.0/external/db_drivers/liblmdb/mdb.c:4583:18: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
fname->mn_len = strlen(path);
data/monero-0.16.0.0/external/db_drivers/liblmdb/mdb.c:10237:18: [1] (free) memalign:
On some systems (though not Linux-based systems) an attempt to free()
results from memalign() may fail. This may, on a few systems, be
exploitable. Also note that memalign() may not check that the boundary
parameter is correct (CWE-676). Use posix_memalign instead (defined in
POSIX's 1003.1d). Don't switch to valloc(); it is marked as obsolete in BSD
4.3, as legacy in SUSv2, and is no longer defined in SUSv3. In some cases,
malloc()'s alignment may be sufficient.
my.mc_wbuf[0] = memalign(env->me_os_psize, MDB_WBUF*2);
data/monero-0.16.0.0/external/db_drivers/liblmdb/mdb.c:10657:8: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
len = strlen(name);
data/monero-0.16.0.0/external/db_drivers/liblmdb/mdb_load.c:182:7: [1] (buffer) fgetc:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
c = fgetc(stdin);
data/monero-0.16.0.0/external/db_drivers/liblmdb/mdb_load.c:207:8: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
len = strlen((char *)c1);
data/monero-0.16.0.0/external/db_drivers/liblmdb/mdb_load.c:227:9: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
len = strlen((char *)c1);
data/monero-0.16.0.0/external/easylogging++/easylogging++.cc:931:32: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
std::size_t sizeOfFilename = strlen(filename);
data/monero-0.16.0.0/external/easylogging++/easylogging++.cc:946:32: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
std::size_t sizeOfFilename = strlen(filename);
data/monero-0.16.0.0/external/easylogging++/easylogging++.cc:1116:22: [1] (buffer) wcslen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
std::size_t len_ = wcslen(line) + 1;
data/monero-0.16.0.0/external/easylogging++/easylogging++.cc:1177:33: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
const std::size_t buffLen = strlen(hBuff);
data/monero-0.16.0.0/external/easylogging++/easylogging++.cc:1428:25: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if (v != nullptr && strlen(v) > 0) {
data/monero-0.16.0.0/external/easylogging++/easylogging++.cc:1490:3: [1] (obsolete) usleep:
This C routine is considered obsolete (as opposed to the shell command by
the same name). The interaction of this function with SIGALRM and other
timer functions such as sleep(), alarm(), setitimer(), and nanosleep() is
unspecified (CWE-676). Use nanosleep(2) or setitimer(2) instead.
usleep(ms * 1000);
data/monero-0.16.0.0/external/easylogging++/easylogging++.cc:2054:60: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
std::string chr(ss.str().substr(0, ss.str().size() - strlen(prev)));
data/monero-0.16.0.0/external/easylogging++/easylogging++.cc:2059:60: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
std::string chr(ss.str().substr(0, ss.str().size() - strlen(sfx)));
data/monero-0.16.0.0/external/easylogging++/easylogging++.cc:2187:27: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
categories += strlen(LevelHelper::convertToString(level)) - 1;
data/monero-0.16.0.0/external/easylogging++/easylogging++.cc:3309:32: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if (sourceFile != nullptr && strlen(sourceFile) > 0) {
data/monero-0.16.0.0/external/easylogging++/easylogging++.h:528:23: [1] (buffer) wcslen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
# define ELPP_STRLEN wcslen
data/monero-0.16.0.0/external/easylogging++/easylogging++.h:541:23: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
# define ELPP_STRLEN strlen
data/monero-0.16.0.0/src/blockchain_db/lmdb/db_lmdb.cpp:90:46: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
#define MDB_val_str(var, val) MDB_val var = {strlen(val) + 1, (void *)val}
data/monero-0.16.0.0/src/blockchain_db/lmdb/db_lmdb.cpp:123:10: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
size(strlen(s)+1), // include the NUL, makes it easier for compares
data/monero-0.16.0.0/src/blockchain_utilities/blockchain_blackball.cpp:325:82: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
for (std::string::const_iterator i = s.begin(); i != s.cend(); std::advance(i, read))
data/monero-0.16.0.0/src/blockchain_utilities/blockchain_blackball.cpp:330:32: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
CHECK_AND_ASSERT_THROW_MES(read > 0 && read <= 256, "Internal error decompressing ring");
data/monero-0.16.0.0/src/blockchain_utilities/blockchain_blackball.cpp:330:44: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
CHECK_AND_ASSERT_THROW_MES(read > 0 && read <= 256, "Internal error decompressing ring");
data/monero-0.16.0.0/src/blockchain_utilities/blockchain_blackball.cpp:925:15: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
k.mv_size = strlen(key);
data/monero-0.16.0.0/src/blockchain_utilities/blockchain_blackball.cpp:939:15: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
k.mv_size = strlen(key);
data/monero-0.16.0.0/src/blockchain_utilities/blockchain_blackball.cpp:1077:24: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
const size_t len = strlen(s);
data/monero-0.16.0.0/src/blockchain_utilities/blockchain_import.cpp:320:17: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
import_file.read(buffer1, sizeof(chunk_size));
data/monero-0.16.0.0/src/blockchain_utilities/blockchain_import.cpp:350:17: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
import_file.read(buffer_block, chunk_size);
data/monero-0.16.0.0/src/blockchain_utilities/blockchain_prune.cpp:310:15: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
k.mv_size = strlen("pruning_seed") + 1;
data/monero-0.16.0.0/src/blockchain_utilities/blockchain_prune_known_spent_data.cpp:64:24: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
const size_t len = strlen(s);
data/monero-0.16.0.0/src/blockchain_utilities/bootstrap_file.cpp:332:15: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
import_file.read(buf1, sizeof(file_magic));
data/monero-0.16.0.0/src/blockchain_utilities/bootstrap_file.cpp:350:15: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
import_file.read(buf1, sizeof(buflen_file_info));
data/monero-0.16.0.0/src/blockchain_utilities/bootstrap_file.cpp:360:15: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
import_file.read(buf1, buflen_file_info);
data/monero-0.16.0.0/src/blockchain_utilities/bootstrap_file.cpp:388:17: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
import_file.read(buf1, sizeof(chunk_size));
data/monero-0.16.0.0/src/common/base58.cpp:253:11: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
if (read <= 0) return false;
data/monero-0.16.0.0/src/common/base58.cpp:255:31: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
data = addr_data.substr(read);
data/monero-0.16.0.0/src/common/dns_utils.cpp:616:49: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
dns_public_addr.push_back(std::string(s + strlen("tcp://")));
data/monero-0.16.0.0/src/common/expect.h:314:10: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
bool equal(expect<U> const& rhs) const noexcept(noexcept(*std::declval<expect<T>>() == *rhs))
data/monero-0.16.0.0/src/common/expect.h:321:10: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
bool equal(std::error_code const& rhs) const noexcept
data/monero-0.16.0.0/src/common/expect.h:331:10: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
bool equal(U const& rhs) const noexcept(noexcept(*std::declval<expect<T>>() == rhs))
data/monero-0.16.0.0/src/common/expect.h:378:10: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
bool equal(expect const& rhs) const noexcept
data/monero-0.16.0.0/src/common/expect.h:384:10: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
bool equal(std::error_code const& rhs) const noexcept
data/monero-0.16.0.0/src/common/expect.h:401:83: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
bool operator==(expect<T> const& lhs, expect<U> const& rhs) noexcept(noexcept(lhs.equal(rhs)))
data/monero-0.16.0.0/src/common/expect.h:403:16: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
return lhs.equal(rhs);
data/monero-0.16.0.0/src/common/expect.h:408:75: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
bool operator==(expect<T> const& lhs, U const& rhs) noexcept(noexcept(lhs.equal(rhs)))
data/monero-0.16.0.0/src/common/expect.h:410:16: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
return lhs.equal(rhs);
data/monero-0.16.0.0/src/common/expect.h:415:75: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
bool operator==(T const& lhs, expect<U> const& rhs) noexcept(noexcept(rhs.equal(lhs)))
data/monero-0.16.0.0/src/common/expect.h:417:16: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
return rhs.equal(lhs);
data/monero-0.16.0.0/src/common/expect.h:422:83: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
bool operator!=(expect<T> const& lhs, expect<U> const& rhs) noexcept(noexcept(lhs.equal(rhs)))
data/monero-0.16.0.0/src/common/expect.h:424:17: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
return !lhs.equal(rhs);
data/monero-0.16.0.0/src/common/expect.h:429:75: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
bool operator!=(expect<T> const& lhs, U const& rhs) noexcept(noexcept(lhs.equal(rhs)))
data/monero-0.16.0.0/src/common/expect.h:431:17: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
return !lhs.equal(rhs);
data/monero-0.16.0.0/src/common/expect.h:436:75: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
bool operator!=(T const& lhs, expect<U> const& rhs) noexcept(noexcept(rhs.equal(lhs)))
data/monero-0.16.0.0/src/common/expect.h:438:17: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
return !rhs.equal(lhs);
data/monero-0.16.0.0/src/common/password.cpp:69:13: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
DWORD read;
data/monero-0.16.0.0/src/common/password.cpp:71:56: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
r = (TRUE == ::ReadConsoleW(h_cin, &ucs2_ch, 1, &read, NULL));
data/monero-0.16.0.0/src/common/password.cpp:72:18: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
r &= (1 == read);
data/monero-0.16.0.0/src/common/password.cpp:129:14: [1] (buffer) getchar:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
int ch = getchar();
data/monero-0.16.0.0/src/common/util.cpp:526:11: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if( strlen(osvi.szCSDVersion) > 0 )
data/monero-0.16.0.0/src/common/util.cpp:615:28: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if (pszHome == NULL || strlen(pszHome) == 0)
data/monero-0.16.0.0/src/common/util.cpp:809:5: [1] (access) umask:
Ensure that umask is given most restrictive possible setting (e.g., 066 or
077) (CWE-732).
umask(mode);
data/monero-0.16.0.0/src/common/util.cpp:964:9: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
f.read(buf, read_size);
data/monero-0.16.0.0/src/common/util.cpp:1025:11: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
DWORD read;
data/monero-0.16.0.0/src/common/util.cpp:1027:69: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
ReadConsoleW(hConIn, buffer, sizeof(buffer)/sizeof(wchar_t)-1, &read, nullptr);
data/monero-0.16.0.0/src/common/util.cpp:1028:12: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
buffer[read] = 0;
data/monero-0.16.0.0/src/common/varint.h:99:9: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
return read;
data/monero-0.16.0.0/src/common/varint.h:103:9: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
++read;
data/monero-0.16.0.0/src/common/varint.h:118:12: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
return read;
data/monero-0.16.0.0/src/crypto/crypto-ops.c:1538:22: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
static unsigned char equal(signed char b, signed char c) {
data/monero-0.16.0.0/src/crypto/crypto-ops.c:1566:40: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
ge_precomp_cmov(t, &ge_base[pos][0], equal(babs, 1));
data/monero-0.16.0.0/src/crypto/crypto-ops.c:1567:40: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
ge_precomp_cmov(t, &ge_base[pos][1], equal(babs, 2));
data/monero-0.16.0.0/src/crypto/crypto-ops.c:1568:40: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
ge_precomp_cmov(t, &ge_base[pos][2], equal(babs, 3));
data/monero-0.16.0.0/src/crypto/crypto-ops.c:1569:40: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
ge_precomp_cmov(t, &ge_base[pos][3], equal(babs, 4));
data/monero-0.16.0.0/src/crypto/crypto-ops.c:1570:40: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
ge_precomp_cmov(t, &ge_base[pos][4], equal(babs, 5));
data/monero-0.16.0.0/src/crypto/crypto-ops.c:1571:40: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
ge_precomp_cmov(t, &ge_base[pos][5], equal(babs, 6));
data/monero-0.16.0.0/src/crypto/crypto-ops.c:1572:40: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
ge_precomp_cmov(t, &ge_base[pos][6], equal(babs, 7));
data/monero-0.16.0.0/src/crypto/crypto-ops.c:1573:40: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
ge_precomp_cmov(t, &ge_base[pos][7], equal(babs, 8));
data/monero-0.16.0.0/src/crypto/crypto-ops.c:2030:34: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
ge_cached_cmov(&cur, &Ai[0], equal(babs, 1));
data/monero-0.16.0.0/src/crypto/crypto-ops.c:2031:34: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
ge_cached_cmov(&cur, &Ai[1], equal(babs, 2));
data/monero-0.16.0.0/src/crypto/crypto-ops.c:2032:34: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
ge_cached_cmov(&cur, &Ai[2], equal(babs, 3));
data/monero-0.16.0.0/src/crypto/crypto-ops.c:2033:34: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
ge_cached_cmov(&cur, &Ai[3], equal(babs, 4));
data/monero-0.16.0.0/src/crypto/crypto-ops.c:2034:34: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
ge_cached_cmov(&cur, &Ai[4], equal(babs, 5));
data/monero-0.16.0.0/src/crypto/crypto-ops.c:2035:34: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
ge_cached_cmov(&cur, &Ai[5], equal(babs, 6));
data/monero-0.16.0.0/src/crypto/crypto-ops.c:2036:34: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
ge_cached_cmov(&cur, &Ai[6], equal(babs, 7));
data/monero-0.16.0.0/src/crypto/crypto-ops.c:2037:34: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
ge_cached_cmov(&cur, &Ai[7], equal(babs, 8));
data/monero-0.16.0.0/src/crypto/crypto-ops.c:2091:34: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
ge_cached_cmov(&cur, &Ai[0], equal(babs, 1));
data/monero-0.16.0.0/src/crypto/crypto-ops.c:2092:34: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
ge_cached_cmov(&cur, &Ai[1], equal(babs, 2));
data/monero-0.16.0.0/src/crypto/crypto-ops.c:2093:34: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
ge_cached_cmov(&cur, &Ai[2], equal(babs, 3));
data/monero-0.16.0.0/src/crypto/crypto-ops.c:2094:34: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
ge_cached_cmov(&cur, &Ai[3], equal(babs, 4));
data/monero-0.16.0.0/src/crypto/crypto-ops.c:2095:34: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
ge_cached_cmov(&cur, &Ai[4], equal(babs, 5));
data/monero-0.16.0.0/src/crypto/crypto-ops.c:2096:34: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
ge_cached_cmov(&cur, &Ai[5], equal(babs, 6));
data/monero-0.16.0.0/src/crypto/crypto-ops.c:2097:34: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
ge_cached_cmov(&cur, &Ai[6], equal(babs, 7));
data/monero-0.16.0.0/src/crypto/crypto-ops.c:2098:34: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
ge_cached_cmov(&cur, &Ai[7], equal(babs, 8));
data/monero-0.16.0.0/src/crypto/crypto_ops_builder/crypto-ops-old.c:1529:22: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
static unsigned char equal(signed char b, signed char c) {
data/monero-0.16.0.0/src/crypto/crypto_ops_builder/crypto-ops-old.c:1557:40: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
ge_precomp_cmov(t, &ge_base[pos][0], equal(babs, 1));
data/monero-0.16.0.0/src/crypto/crypto_ops_builder/crypto-ops-old.c:1558:40: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
ge_precomp_cmov(t, &ge_base[pos][1], equal(babs, 2));
data/monero-0.16.0.0/src/crypto/crypto_ops_builder/crypto-ops-old.c:1559:40: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
ge_precomp_cmov(t, &ge_base[pos][2], equal(babs, 3));
data/monero-0.16.0.0/src/crypto/crypto_ops_builder/crypto-ops-old.c:1560:40: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
ge_precomp_cmov(t, &ge_base[pos][3], equal(babs, 4));
data/monero-0.16.0.0/src/crypto/crypto_ops_builder/crypto-ops-old.c:1561:40: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
ge_precomp_cmov(t, &ge_base[pos][4], equal(babs, 5));
data/monero-0.16.0.0/src/crypto/crypto_ops_builder/crypto-ops-old.c:1562:40: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
ge_precomp_cmov(t, &ge_base[pos][5], equal(babs, 6));
data/monero-0.16.0.0/src/crypto/crypto_ops_builder/crypto-ops-old.c:1563:40: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
ge_precomp_cmov(t, &ge_base[pos][6], equal(babs, 7));
data/monero-0.16.0.0/src/crypto/crypto_ops_builder/crypto-ops-old.c:1564:40: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
ge_precomp_cmov(t, &ge_base[pos][7], equal(babs, 8));
data/monero-0.16.0.0/src/crypto/crypto_ops_builder/crypto-ops-old.c:2059:34: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
ge_cached_cmov(&cur, &Ai[0], equal(babs, 1));
data/monero-0.16.0.0/src/crypto/crypto_ops_builder/crypto-ops-old.c:2060:34: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
ge_cached_cmov(&cur, &Ai[1], equal(babs, 2));
data/monero-0.16.0.0/src/crypto/crypto_ops_builder/crypto-ops-old.c:2061:34: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
ge_cached_cmov(&cur, &Ai[2], equal(babs, 3));
data/monero-0.16.0.0/src/crypto/crypto_ops_builder/crypto-ops-old.c:2062:34: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
ge_cached_cmov(&cur, &Ai[3], equal(babs, 4));
data/monero-0.16.0.0/src/crypto/crypto_ops_builder/crypto-ops-old.c:2063:34: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
ge_cached_cmov(&cur, &Ai[4], equal(babs, 5));
data/monero-0.16.0.0/src/crypto/crypto_ops_builder/crypto-ops-old.c:2064:34: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
ge_cached_cmov(&cur, &Ai[5], equal(babs, 6));
data/monero-0.16.0.0/src/crypto/crypto_ops_builder/crypto-ops-old.c:2065:34: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
ge_cached_cmov(&cur, &Ai[6], equal(babs, 7));
data/monero-0.16.0.0/src/crypto/crypto_ops_builder/crypto-ops-old.c:2066:34: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
ge_cached_cmov(&cur, &Ai[7], equal(babs, 8));
data/monero-0.16.0.0/src/crypto/crypto_ops_builder/randombytes.c:26:9: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
i = read(ed25519_random_fd,x,i);
data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10/ge_scalarmult_base.c:4:22: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
static unsigned char equal(signed char b,signed char c)
data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10/ge_scalarmult_base.c:41:24: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
cmov(t,&base[pos][0],equal(babs,1));
data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10/ge_scalarmult_base.c:42:24: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
cmov(t,&base[pos][1],equal(babs,2));
data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10/ge_scalarmult_base.c:43:24: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
cmov(t,&base[pos][2],equal(babs,3));
data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10/ge_scalarmult_base.c:44:24: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
cmov(t,&base[pos][3],equal(babs,4));
data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10/ge_scalarmult_base.c:45:24: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
cmov(t,&base[pos][4],equal(babs,5));
data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10/ge_scalarmult_base.c:46:24: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
cmov(t,&base[pos][5],equal(babs,6));
data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10/ge_scalarmult_base.c:47:24: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
cmov(t,&base[pos][6],equal(babs,7));
data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10/ge_scalarmult_base.c:48:24: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
cmov(t,&base[pos][7],equal(babs,8));
data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10CommentedCombined/ge_scalarmult_base.c:4:22: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
static unsigned char equal(signed char b,signed char c)
data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10CommentedCombined/ge_scalarmult_base.c:41:24: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
cmov(t,&base[pos][0],equal(babs,1));
data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10CommentedCombined/ge_scalarmult_base.c:42:24: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
cmov(t,&base[pos][1],equal(babs,2));
data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10CommentedCombined/ge_scalarmult_base.c:43:24: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
cmov(t,&base[pos][2],equal(babs,3));
data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10CommentedCombined/ge_scalarmult_base.c:44:24: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
cmov(t,&base[pos][3],equal(babs,4));
data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10CommentedCombined/ge_scalarmult_base.c:45:24: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
cmov(t,&base[pos][4],equal(babs,5));
data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10CommentedCombined/ge_scalarmult_base.c:46:24: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
cmov(t,&base[pos][5],equal(babs,6));
data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10CommentedCombined/ge_scalarmult_base.c:47:24: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
cmov(t,&base[pos][6],equal(babs,7));
data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10CommentedCombined/ge_scalarmult_base.c:48:24: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
cmov(t,&base[pos][7],equal(babs,8));
data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10CommentedCombined/xmrSpecificOld.c:300:34: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
ge_cached_cmov(&cur, &Ai[0], equal(babs, 1));
data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10CommentedCombined/xmrSpecificOld.c:301:34: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
ge_cached_cmov(&cur, &Ai[1], equal(babs, 2));
data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10CommentedCombined/xmrSpecificOld.c:302:34: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
ge_cached_cmov(&cur, &Ai[2], equal(babs, 3));
data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10CommentedCombined/xmrSpecificOld.c:303:34: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
ge_cached_cmov(&cur, &Ai[3], equal(babs, 4));
data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10CommentedCombined/xmrSpecificOld.c:304:34: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
ge_cached_cmov(&cur, &Ai[4], equal(babs, 5));
data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10CommentedCombined/xmrSpecificOld.c:305:34: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
ge_cached_cmov(&cur, &Ai[5], equal(babs, 6));
data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10CommentedCombined/xmrSpecificOld.c:306:34: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
ge_cached_cmov(&cur, &Ai[6], equal(babs, 7));
data/monero-0.16.0.0/src/crypto/crypto_ops_builder/ref10CommentedCombined/xmrSpecificOld.c:307:34: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
ge_cached_cmov(&cur, &Ai[7], equal(babs, 8));
data/monero-0.16.0.0/src/crypto/initializer.h:48:29: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
#pragma section(".CRT$XCT", read)
data/monero-0.16.0.0/src/crypto/oaes_lib.c:461:2: [1] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant character.
strcpy( buf, "" );
data/monero-0.16.0.0/src/crypto/oaes_lib.c:468:4: [1] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant character.
strcat( buf, "\n" );
data/monero-0.16.0.0/src/crypto/random.c:76:19: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
ssize_t res = read(fd, result, n);
data/monero-0.16.0.0/src/cryptonote_basic/cryptonote_format_utils.cpp:275:9: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
if (read <= 0)
data/monero-0.16.0.0/src/cryptonote_core/blockchain.cpp:2406:7: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
if (read <= 0)
data/monero-0.16.0.0/src/daemon/main.cpp:298:102: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
const bool use_rpc_env = !has_rpc_arg && (env_rpc_login = getenv("RPC_LOGIN")) != nullptr && strlen(env_rpc_login) > 0;
data/monero-0.16.0.0/src/device/device_io_hid.cpp:85:40: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
void device_io_hid::io_hid_log(int read, unsigned char* buffer, int block_len) {
data/monero-0.16.0.0/src/device/device_io_hid.cpp:89:28: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
MDEBUG( "HID " << (read?"<":">") <<" : "<<strbuffer);
data/monero-0.16.0.0/src/device/device_io_hid.hpp:76:27: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
void io_hid_log(int read, unsigned char* buf, int buf_len);
data/monero-0.16.0.0/src/device/device_ledger.cpp:382:28: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
const size_t len = strlen(strbuffer);
data/monero-0.16.0.0/src/device/device_ledger.cpp:392:28: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
const size_t len = strlen(strbuffer);
data/monero-0.16.0.0/src/device/device_ledger.cpp:454:29: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
const size_t verlen = strlen(MONERO_VERSION);
data/monero-0.16.0.0/src/device/device_ledger.cpp:457:17: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
offset += strlen(MONERO_VERSION);
data/monero-0.16.0.0/src/device_trezor/device_trezor_base.cpp:270:30: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
this->get_transport()->read(msg_resp, &msg_resp_type);
data/monero-0.16.0.0/src/device_trezor/trezor/debug_link.hpp:73:20: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
m_transport->read(msg_resp, &msg_resp_type);
data/monero-0.16.0.0/src/device_trezor/trezor/messages_map.cpp:68:49: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
string messageName = messageTypeName.substr(strlen(TYPE_PREFIX));
data/monero-0.16.0.0/src/device_trezor/trezor/transport.cpp:238:20: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
void ProtocolV1::read(Transport & transport, std::shared_ptr<google::protobuf::Message> & msg, messages::MessageType * msg_type){
data/monero-0.16.0.0/src/device_trezor/trezor/transport.cpp:466:25: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
void BridgeTransport::read(std::shared_ptr<google::protobuf::Message> & msg, messages::MessageType * msg_type) {
data/monero-0.16.0.0/src/device_trezor/trezor/transport.cpp:516:26: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
path = path.substr(strlen(UdpTransport::PATH_PREFIX));
data/monero-0.16.0.0/src/device_trezor/trezor/transport.cpp:747:22: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
void UdpTransport::read(std::shared_ptr<google::protobuf::Message> & msg, messages::MessageType * msg_type) {
data/monero-0.16.0.0/src/device_trezor/trezor/transport.cpp:748:14: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
m_proto->read(*this, msg, msg_type);
data/monero-0.16.0.0/src/device_trezor/trezor/transport.cpp:1104:25: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
void WebUsbTransport::read(std::shared_ptr<google::protobuf::Message> & msg, messages::MessageType * msg_type) {
data/monero-0.16.0.0/src/device_trezor/trezor/transport.cpp:1105:14: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
m_proto->read(*this, msg, msg_type);
data/monero-0.16.0.0/src/device_trezor/trezor/transport.cpp:1210:30: [1] (buffer) mismatch:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
const auto mism = std::mismatch(s1->begin(), s1->end(), s2->begin());
data/monero-0.16.0.0/src/device_trezor/trezor/transport.cpp:1224:60: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
return std::make_shared<BridgeTransport>(path.substr(strlen(BridgeTransport::PATH_PREFIX)));
data/monero-0.16.0.0/src/device_trezor/trezor/transport.cpp:1227:57: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
return std::make_shared<UdpTransport>(path.substr(strlen(UdpTransport::PATH_PREFIX)));
data/monero-0.16.0.0/src/device_trezor/trezor/transport.hpp:130:18: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
virtual void read(Transport & transport, std::shared_ptr<google::protobuf::Message> & msg, messages::MessageType * msg_type=nullptr)= 0;
data/monero-0.16.0.0/src/device_trezor/trezor/transport.hpp:139:10: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
void read(Transport & transport, std::shared_ptr<google::protobuf::Message> & msg, messages::MessageType * msg_type=nullptr) override;
data/monero-0.16.0.0/src/device_trezor/trezor/transport.hpp:157:18: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
virtual void read(std::shared_ptr<google::protobuf::Message> & msg, messages::MessageType * msg_type=nullptr) =0;
data/monero-0.16.0.0/src/device_trezor/trezor/transport.hpp:188:10: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
void read(std::shared_ptr<google::protobuf::Message> & msg, messages::MessageType * msg_type=nullptr) override;
data/monero-0.16.0.0/src/device_trezor/trezor/transport.hpp:227:10: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
void read(std::shared_ptr<google::protobuf::Message> & msg, messages::MessageType * msg_type=nullptr) override;
data/monero-0.16.0.0/src/device_trezor/trezor/transport.hpp:275:10: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
void read(std::shared_ptr<google::protobuf::Message> & msg, messages::MessageType * msg_type=nullptr) override;
data/monero-0.16.0.0/src/device_trezor/trezor/transport.hpp:394:15: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
transport.read(msg_resp, &msg_resp_type);
data/monero-0.16.0.0/src/lmdb/key_stream.h:97:14: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
bool equal(key_iterator const& rhs) const noexcept
data/monero-0.16.0.0/src/lmdb/key_stream.h:254:20: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
return lhs.equal(rhs);
data/monero-0.16.0.0/src/lmdb/key_stream.h:261:21: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
return !lhs.equal(rhs);
data/monero-0.16.0.0/src/lmdb/value_stream.h:126:14: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
bool equal(value_iterator const& rhs) const noexcept
data/monero-0.16.0.0/src/lmdb/value_stream.h:277:20: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
return lhs.equal(rhs);
data/monero-0.16.0.0/src/lmdb/value_stream.h:284:21: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
return !lhs.equal(rhs);
data/monero-0.16.0.0/src/net/i2p_address.cpp:167:23: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
bool i2p_address::equal(const i2p_address& rhs) const noexcept
data/monero-0.16.0.0/src/net/i2p_address.cpp:185:46: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
const std::size_t host_length = std::strlen(host_str());
data/monero-0.16.0.0/src/net/i2p_address.h:94:14: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
bool equal(const i2p_address& rhs) const noexcept;
data/monero-0.16.0.0/src/net/i2p_address.h:128:20: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
return lhs.equal(rhs);
data/monero-0.16.0.0/src/net/i2p_address.h:133:21: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
return !lhs.equal(rhs);
data/monero-0.16.0.0/src/net/socks.cpp:176:20: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
struct client::read
data/monero-0.16.0.0/src/net/socks.cpp:218:95: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
boost::asio::async_write(self.proxy_, get_buffer(self), self.strand_.wrap(read{std::move(self_)}));
data/monero-0.16.0.0/src/net/socks.cpp:310:97: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
boost::asio::async_write(alias.proxy_, write::get_buffer(alias), alias.strand_.wrap(read{std::move(self)}));
data/monero-0.16.0.0/src/net/socks.h:119:16: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
struct read;
data/monero-0.16.0.0/src/net/tor_address.cpp:169:23: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
bool tor_address::equal(const tor_address& rhs) const noexcept
data/monero-0.16.0.0/src/net/tor_address.cpp:188:46: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
const std::size_t host_length = std::strlen(host_str());
data/monero-0.16.0.0/src/net/tor_address.h:94:14: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
bool equal(const tor_address& rhs) const noexcept;
data/monero-0.16.0.0/src/net/tor_address.h:128:20: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
return lhs.equal(rhs);
data/monero-0.16.0.0/src/net/tor_address.h:133:21: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
return !lhs.equal(rhs);
data/monero-0.16.0.0/src/p2p/net_peerlist_boost_serialization.h:137:34: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
const size_t length = std::strlen(na.host_str());
data/monero-0.16.0.0/src/p2p/net_peerlist_boost_serialization.h:151:34: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
const size_t length = std::strlen(na.host_str());
data/monero-0.16.0.0/src/rpc/core_rpc_server_commands_defs.h:64:79: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
for (std::string::const_iterator i = s.begin(); i != end; std::advance(i, read))
data/monero-0.16.0.0/src/rpc/core_rpc_server_commands_defs.h:68:34: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
CHECK_AND_ASSERT_THROW_MES(read > 0 && read <= 256, "Error decompressing data");
data/monero-0.16.0.0/src/rpc/core_rpc_server_commands_defs.h:68:46: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
CHECK_AND_ASSERT_THROW_MES(read > 0 && read <= 256, "Error decompressing data");
data/monero-0.16.0.0/src/rpc/rpc_args.cpp:194:98: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
const bool use_rpc_env = !has_rpc_arg && (env_rpc_login = getenv("RPC_LOGIN")) != nullptr && strlen(env_rpc_login) > 0;
data/monero-0.16.0.0/src/rpc/rpc_payment_signature.cpp:54:26: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
CHECK_AND_ASSERT_MES(strlen(ts) == 16, "", "Invalid time conversion");
data/monero-0.16.0.0/src/serialization/binary_archive.h:136:13: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
stream_.read((char *)buf, len);
data/monero-0.16.0.0/src/serialization/variant.h:71:22: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
static inline bool read(Archive &ar, Variant &v, variant_tag_type t)
data/monero-0.16.0.0/src/serialization/variant.h:83:61: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
return variant_reader<Archive, Variant, TNext, TEnd>::read(ar, v, t);
data/monero-0.16.0.0/src/serialization/variant.h:96:22: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
static inline bool read(Archive &ar, Variant &v, variant_tag_type t)
data/monero-0.16.0.0/src/serialization/variant.h:117:48: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
typename boost::mpl::end<types>::type>::read(ar, v, t))
data/monero-0.16.0.0/src/simplewallet/simplewallet.cpp:1738:28: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
const size_t len = strlen(str);
data/monero-0.16.0.0/src/simplewallet/simplewallet.cpp:1745:22: [1] (buffer) sscanf:
It's unclear if the %s limit in the format string is small enough
(CWE-120). Check that the limit is sufficiently small, or use a different
input function.
int fields = sscanf(str, "%64[abcdefABCDEF0123456789] %n%8s %n", key_image_str, &read_after_key_image, type_str, &read);
data/monero-0.16.0.0/src/simplewallet/simplewallet.cpp:1745:123: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
int fields = sscanf(str, "%64[abcdefABCDEF0123456789] %n%8s %n", key_image_str, &read_after_key_image, type_str, &read);
data/monero-0.16.0.0/src/simplewallet/simplewallet.cpp:1765:13: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
if (read < 0 || (size_t)read > strlen(str))
data/monero-0.16.0.0/src/simplewallet/simplewallet.cpp:1765:33: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
if (read < 0 || (size_t)read > strlen(str))
data/monero-0.16.0.0/src/simplewallet/simplewallet.cpp:1765:40: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if (read < 0 || (size_t)read > strlen(str))
data/monero-0.16.0.0/src/simplewallet/simplewallet.cpp:1772:33: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
const char *ptr = str + read;
data/monero-0.16.0.0/src/simplewallet/simplewallet.cpp:1776:58: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
int elements = sscanf(ptr, "%lu %n", &offset, &read);
data/monero-0.16.0.0/src/simplewallet/simplewallet.cpp:1777:32: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
if (elements == 0 || read <= 0 || (size_t)read > strlen(str))
data/monero-0.16.0.0/src/simplewallet/simplewallet.cpp:1777:53: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
if (elements == 0 || read <= 0 || (size_t)read > strlen(str))
data/monero-0.16.0.0/src/simplewallet/simplewallet.cpp:1777:60: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if (elements == 0 || read <= 0 || (size_t)read > strlen(str))
data/monero-0.16.0.0/src/simplewallet/simplewallet.cpp:1784:18: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
ptr += read;
data/monero-0.16.0.0/src/simplewallet/simplewallet.cpp:2029:30: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
const size_t len = strlen(str);
data/monero-0.16.0.0/src/wallet/message_transporter.cpp:51:14: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
uint32_t read;
data/monero-0.16.0.0/src/wallet/message_transporter.cpp:61:20: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
KV_SERIALIZE(read)
data/monero-0.16.0.0/src/wallet/ringdb.cpp:82:82: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
for (std::string::const_iterator i = s.begin(); i != s.cend(); std::advance(i, read))
data/monero-0.16.0.0/src/wallet/ringdb.cpp:87:31: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
THROW_WALLET_EXCEPTION_IF(read <= 0 || read > 256, tools::error::wallet_internal_error, "Internal error decompressing ring");
data/monero-0.16.0.0/src/wallet/ringdb.cpp:87:44: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
THROW_WALLET_EXCEPTION_IF(read <= 0 || read > 256, tools::error::wallet_internal_error, "Internal error decompressing ring");
data/monero-0.16.0.0/src/wallet/wallet2.cpp:5267:29: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
const size_t header_len = strlen("MultisigV1");
data/monero-0.16.0.0/src/wallet/wallet2.cpp:6606:27: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
const size_t magiclen = strlen(UNSIGNED_TX_PREFIX) - 1;
data/monero-0.16.0.0/src/wallet/wallet2.cpp:6890:27: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
const size_t magiclen = strlen(SIGNED_TX_PREFIX) - 1;
data/monero-0.16.0.0/src/wallet/wallet2.cpp:7039:27: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
const size_t magiclen = strlen(MULTISIG_UNSIGNED_TX_PREFIX);
data/monero-0.16.0.0/src/wallet/wallet2.cpp:11763:72: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
THROW_WALLET_EXCEPTION_IF(!tools::base58::decode(sig_str.substr(std::strlen(header)), sig_decoded), error::wallet_internal_error,
data/monero-0.16.0.0/src/wallet/wallet2.cpp:12075:29: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
const size_t header_len = strlen("SigV1");
data/monero-0.16.0.0/src/wallet/wallet2.cpp:12182:50: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
std::string magic(KEY_IMAGE_EXPORT_FILE_MAGIC, strlen(KEY_IMAGE_EXPORT_FILE_MAGIC));
data/monero-0.16.0.0/src/wallet/wallet2.cpp:12273:27: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
const size_t magiclen = strlen(KEY_IMAGE_EXPORT_FILE_MAGIC);
data/monero-0.16.0.0/src/wallet/wallet2.cpp:12735:47: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
std::string magic(OUTPUT_EXPORT_FILE_MAGIC, strlen(OUTPUT_EXPORT_FILE_MAGIC));
data/monero-0.16.0.0/src/wallet/wallet2.cpp:12815:27: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
const size_t magiclen = strlen(OUTPUT_EXPORT_FILE_MAGIC);
data/monero-0.16.0.0/src/wallet/wallet2.cpp:13058:29: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
const size_t magiclen = strlen(MULTISIG_EXPORT_FILE_MAGIC);
data/monero-0.16.0.0/tests/core_tests/chain_switch_1.cpp:175:29: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
CHECK_TEST_CONDITION(std::equal(blocks.begin(), it, m_chain_1.begin()));
data/monero-0.16.0.0/tests/gtest/include/gtest/internal/gtest-port.h:2355:10: [1] (buffer) strncpy:
Easily used incorrectly; doesn't always \0-terminate or check for invalid
pointers [MS-banned] (CWE-120).
return strncpy(dest, src, n);
data/monero-0.16.0.0/tests/gtest/include/gtest/internal/gtest-port.h:2377:27: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
return static_cast<int>(read(fd, buf, count));
data/monero-0.16.0.0/tests/gtest/src/gtest-port.cc:599:33: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
const size_t full_regex_len = strlen(regex) + 10;
data/monero-0.16.0.0/tests/gtest/src/gtest-port.cc:853:22: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
const size_t len = strlen(regex);
data/monero-0.16.0.0/tests/gtest/src/gtest-port.cc:1065:21: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
else if (temp_dir[strlen(temp_dir) - 1] == '\\')
data/monero-0.16.0.0/tests/gtest/src/gtest-printers.cc:325:29: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
PrintCharsAsStringTo(s, strlen(s), os);
data/monero-0.16.0.0/tests/gtest/src/gtest-printers.cc:342:34: [1] (buffer) wcslen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
PrintCharsAsStringTo(s, std::wcslen(s), os);
data/monero-0.16.0.0/tests/gtest/src/gtest.cc:860:22: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
const int length = strlen(ansi);
data/monero-0.16.0.0/tests/gtest/src/gtest.cc:1825:34: [1] (buffer) wcslen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
num_chars = static_cast<int>(wcslen(str));
data/monero-0.16.0.0/tests/gtest/src/gtest.cc:3596:32: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
segment = next_segment + strlen("]]>");
data/monero-0.16.0.0/tests/gtest/src/gtest.cc:3761:18: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
result.reserve(strlen(str) + 1);
data/monero-0.16.0.0/tests/gtest/src/gtest.cc:5000:29: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
const size_t prefix_len = strlen(prefix);
data/monero-0.16.0.0/tests/performance_tests/equality.h:48:27: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
template<typename f, bool equal>
data/monero-0.16.0.0/tests/performance_tests/equality.h:59:15: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
k1[n] = equal ? n : n + 1;
data/monero-0.16.0.0/tests/trezor/daemon.cpp:71:48: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
auto p2p_port = std::string(test_p2p_port && strlen(test_p2p_port) > 0 ? test_p2p_port : "61340");
data/monero-0.16.0.0/tests/trezor/daemon.cpp:75:48: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
auto rpc_port = std::string(test_rpc_port && strlen(test_rpc_port) > 0 ? test_rpc_port : "61341");
data/monero-0.16.0.0/tests/trezor/daemon.cpp:79:48: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
auto zmq_port = std::string(test_zmq_port && strlen(test_zmq_port) > 0 ? test_zmq_port : "61342");
data/monero-0.16.0.0/tests/unit_tests/epee_utils.cpp:300:29: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_TRUE(boost::range::equal(expected, source));
data/monero-0.16.0.0/tests/unit_tests/epee_utils.cpp:301:29: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_TRUE(boost::range::equal(expected, span));
data/monero-0.16.0.0/tests/unit_tests/epee_utils.cpp:485:19: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
boost::range::equal(
data/monero-0.16.0.0/tests/unit_tests/epee_utils.cpp:490:19: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
boost::range::equal(
data/monero-0.16.0.0/tests/unit_tests/epee_utils.cpp:495:19: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
boost::range::equal(
data/monero-0.16.0.0/tests/unit_tests/epee_utils.cpp:517:29: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_TRUE(boost::range::equal(boost::string_ref{base_string}, slice));
data/monero-0.16.0.0/tests/unit_tests/epee_utils.cpp:559:29: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_TRUE(boost::range::equal(base_string, slice));
data/monero-0.16.0.0/tests/unit_tests/epee_utils.cpp:585:29: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_TRUE(boost::range::equal(base_string, slice));
data/monero-0.16.0.0/tests/unit_tests/epee_utils.cpp:589:29: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_TRUE(boost::range::equal(base_string, moved));
data/monero-0.16.0.0/tests/unit_tests/epee_utils.cpp:609:29: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_TRUE(boost::range::equal(base_string, slice));
data/monero-0.16.0.0/tests/unit_tests/epee_utils.cpp:630:29: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_TRUE(boost::range::equal(base_string, slice));
data/monero-0.16.0.0/tests/unit_tests/epee_utils.cpp:633:29: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_TRUE(boost::range::equal(base_string, clone));
data/monero-0.16.0.0/tests/unit_tests/epee_utils.cpp:655:29: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_TRUE(boost::range::equal(base_string, slice));
data/monero-0.16.0.0/tests/unit_tests/epee_utils.cpp:670:29: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_TRUE(boost::range::equal(base_string, original));
data/monero-0.16.0.0/tests/unit_tests/epee_utils.cpp:690:29: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_TRUE(boost::range::equal(base_string, slice));
data/monero-0.16.0.0/tests/unit_tests/epee_utils.cpp:731:29: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_TRUE(boost::range::equal(base_string, original));
data/monero-0.16.0.0/tests/unit_tests/epee_utils.cpp:763:29: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_TRUE(boost::range::equal(base_string, original));
data/monero-0.16.0.0/tests/unit_tests/epee_utils.cpp:779:31: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_TRUE(boost::range::equal(base_string, slice));
data/monero-0.16.0.0/tests/unit_tests/epee_utils.cpp:803:31: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_TRUE(boost::range::equal(base_string, original));
data/monero-0.16.0.0/tests/unit_tests/epee_utils.cpp:850:29: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_TRUE(boost::range::equal(base_string, original));
data/monero-0.16.0.0/tests/unit_tests/epee_utils.cpp:908:23: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
using boost::range::equal;
data/monero-0.16.0.0/tests/unit_tests/epee_utils.cpp:924:15: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_TRUE(equal(bytes, byte_span{stream.data(), stream.size()}));
data/monero-0.16.0.0/tests/unit_tests/epee_utils.cpp:931:15: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_TRUE(equal(bytes, byte_span{stream.data(), stream.size()}));
data/monero-0.16.0.0/tests/unit_tests/epee_utils.cpp:938:15: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_TRUE(equal(bytes, byte_span{stream.data(), stream.size()}));
data/monero-0.16.0.0/tests/unit_tests/epee_utils.cpp:945:15: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_TRUE(equal(bytes, byte_span{stream.data(), stream.size()}));
data/monero-0.16.0.0/tests/unit_tests/epee_utils.cpp:952:15: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_TRUE(equal(bytes, byte_span{stream.data(), stream.size()}));
data/monero-0.16.0.0/tests/unit_tests/epee_utils.cpp:957:23: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
using boost::range::equal;
data/monero-0.16.0.0/tests/unit_tests/epee_utils.cpp:972:15: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_TRUE(equal(bytes, byte_span{stream.data(), stream.size()}));
data/monero-0.16.0.0/tests/unit_tests/epee_utils.cpp:977:23: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
using boost::range::equal;
data/monero-0.16.0.0/tests/unit_tests/epee_utils.cpp:1002:15: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_TRUE(equal(bytes, byte_span{stream.data(), stream.size()}));
data/monero-0.16.0.0/tests/unit_tests/epee_utils.cpp:1007:23: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
using boost::range::equal;
data/monero-0.16.0.0/tests/unit_tests/epee_utils.cpp:1017:15: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_TRUE(equal(source, byte_span{stream.data(), stream.size()}));
data/monero-0.16.0.0/tests/unit_tests/epee_utils.cpp:1025:15: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_TRUE(equal(source, byte_span{buffer.get(), sizeof(source)}));
data/monero-0.16.0.0/tests/unit_tests/epee_utils.cpp:1030:23: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
using boost::range::equal;
data/monero-0.16.0.0/tests/unit_tests/epee_utils.cpp:1054:15: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_TRUE(equal(source, byte_span{stream2.data(), stream2.size()}));
data/monero-0.16.0.0/tests/unit_tests/epee_utils.cpp:1073:15: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_TRUE(equal(source, byte_span{stream.data(), stream.size()}));
data/monero-0.16.0.0/tests/unit_tests/epee_utils.cpp:1085:23: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
using boost::range::equal;
data/monero-0.16.0.0/tests/unit_tests/epee_utils.cpp:1095:15: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_TRUE(equal(source, byte_span{stream.data(), stream.size()}));
data/monero-0.16.0.0/tests/unit_tests/epee_utils.cpp:1103:15: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_TRUE(equal(source, slice));
data/monero-0.16.0.0/tests/unit_tests/epee_utils.cpp:1438:27: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
constexpr static bool equal(const custom_address&) noexcept { return false; }
data/monero-0.16.0.0/tests/unit_tests/expect.cpp:113:56: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_TRUE(noexcept(std::declval<expect<T>>().equal(std::declval<expect<T>>())));
data/monero-0.16.0.0/tests/unit_tests/expect.cpp:227:54: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_TRUE(noexcept(std::declval<expect<int>>().equal(std::declval<expect<unsigned>>())));
data/monero-0.16.0.0/tests/unit_tests/expect.cpp:228:59: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_TRUE(noexcept(std::declval<expect<unsigned>>().equal(std::declval<expect<int>>())));
data/monero-0.16.0.0/tests/unit_tests/expect.cpp:229:54: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_TRUE(noexcept(std::declval<expect<int>>().equal(0)));
data/monero-0.16.0.0/tests/unit_tests/expect.cpp:270:63: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_TRUE(noexcept(std::declval<expect<throw_copies>>().equal(std::declval<expect<throw_copies>>())));
data/monero-0.16.0.0/tests/unit_tests/expect.cpp:271:63: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_TRUE(noexcept(std::declval<expect<throw_copies>>().equal(std::declval<throw_copies>())));
data/monero-0.16.0.0/tests/unit_tests/expect.cpp:278:63: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_TRUE(noexcept(std::declval<expect<throw_copies>>().equal(std::declval<expect<throw_moves>>())));
data/monero-0.16.0.0/tests/unit_tests/expect.cpp:279:63: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_TRUE(noexcept(std::declval<expect<throw_copies>>().equal(std::declval<throw_moves>())));
data/monero-0.16.0.0/tests/unit_tests/expect.cpp:300:63: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_TRUE(!noexcept(std::declval<expect<throw_moves>>().equal(std::declval<expect<throw_moves>>())));
data/monero-0.16.0.0/tests/unit_tests/expect.cpp:301:63: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_TRUE(!noexcept(std::declval<expect<throw_moves>>().equal(std::declval<throw_moves>())));
data/monero-0.16.0.0/tests/unit_tests/expect.cpp:308:63: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_TRUE(!noexcept(std::declval<expect<throw_moves>>().equal(std::declval<expect<throw_copies>>())));
data/monero-0.16.0.0/tests/unit_tests/expect.cpp:309:63: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_TRUE(!noexcept(std::declval<expect<throw_moves>>().equal(std::declval<throw_copies>())));
data/monero-0.16.0.0/tests/unit_tests/expect.cpp:344:23: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_TRUE(!val1.equal(std::error_code{}));
data/monero-0.16.0.0/tests/unit_tests/expect.cpp:345:23: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_TRUE(!val2.equal(std::error_code{}));
data/monero-0.16.0.0/tests/unit_tests/expect.cpp:373:23: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_TRUE(!val1.equal(std::error_code{}));
data/monero-0.16.0.0/tests/unit_tests/expect.cpp:374:23: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_TRUE(!val2.equal(std::error_code{}));
data/monero-0.16.0.0/tests/unit_tests/expect.cpp:402:23: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_TRUE(!val1.equal(std::error_code{}));
data/monero-0.16.0.0/tests/unit_tests/expect.cpp:403:23: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_TRUE(!val2.equal(std::error_code{}));
data/monero-0.16.0.0/tests/unit_tests/expect.cpp:431:22: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_TRUE(val1.equal(common_error::kInvalidArgument));
data/monero-0.16.0.0/tests/unit_tests/expect.cpp:432:23: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_TRUE(!val2.equal(std::error_code{}));
data/monero-0.16.0.0/tests/unit_tests/expect.cpp:461:22: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_TRUE(val1.equal(common_error::kInvalidArgument));
data/monero-0.16.0.0/tests/unit_tests/expect.cpp:462:22: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_TRUE(val2.equal(common_error::kInvalidArgument));
data/monero-0.16.0.0/tests/unit_tests/expect.cpp:492:23: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_TRUE(!val1.equal(std::error_code{}));
data/monero-0.16.0.0/tests/unit_tests/expect.cpp:493:22: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_TRUE(val2.equal(common_error::kInvalidArgument));
data/monero-0.16.0.0/tests/unit_tests/expect.cpp:522:23: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_TRUE(!val1.equal(std::error_code{}));
data/monero-0.16.0.0/tests/unit_tests/expect.cpp:523:23: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_TRUE(!val2.equal(std::error_code{}));
data/monero-0.16.0.0/tests/unit_tests/expect.cpp:600:23: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_TRUE(!val1.equal(val2));
data/monero-0.16.0.0/tests/unit_tests/expect.cpp:601:22: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_TRUE(val1.equal(val3));
data/monero-0.16.0.0/tests/unit_tests/expect.cpp:602:23: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_TRUE(!val2.equal(val1));
data/monero-0.16.0.0/tests/unit_tests/expect.cpp:603:23: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_TRUE(!val2.equal(val3));
data/monero-0.16.0.0/tests/unit_tests/expect.cpp:604:22: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_TRUE(val3.equal(val1));
data/monero-0.16.0.0/tests/unit_tests/expect.cpp:605:23: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_TRUE(!val3.equal(val2));
data/monero-0.16.0.0/tests/unit_tests/expect.cpp:619:22: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_TRUE(val1.equal(""));
data/monero-0.16.0.0/tests/unit_tests/expect.cpp:620:22: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_TRUE(val2.equal("barfoo"));
data/monero-0.16.0.0/tests/unit_tests/expect.cpp:621:22: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_TRUE(val3.equal(""));
data/monero-0.16.0.0/tests/unit_tests/expect.cpp:622:23: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_TRUE(!val1.equal(std::error_code{}));
data/monero-0.16.0.0/tests/unit_tests/expect.cpp:623:23: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_TRUE(!val2.equal(std::error_code{}));
data/monero-0.16.0.0/tests/unit_tests/expect.cpp:624:23: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_TRUE(!val3.equal(std::error_code{}));
data/monero-0.16.0.0/tests/unit_tests/expect.cpp:655:23: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_TRUE(!val1.equal(val2));
data/monero-0.16.0.0/tests/unit_tests/expect.cpp:656:22: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_TRUE(val1.equal(val3));
data/monero-0.16.0.0/tests/unit_tests/expect.cpp:657:23: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_TRUE(!val2.equal(val1));
data/monero-0.16.0.0/tests/unit_tests/expect.cpp:658:23: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_TRUE(!val2.equal(val3));
data/monero-0.16.0.0/tests/unit_tests/expect.cpp:659:22: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_TRUE(val3.equal(val1));
data/monero-0.16.0.0/tests/unit_tests/expect.cpp:660:23: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_TRUE(!val3.equal(val2));
data/monero-0.16.0.0/tests/unit_tests/expect.cpp:674:23: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_TRUE(!val1.equal(common_error::kInvalidArgument));
data/monero-0.16.0.0/tests/unit_tests/expect.cpp:675:22: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_TRUE(val2.equal(common_error::kInvalidArgument));
data/monero-0.16.0.0/tests/unit_tests/expect.cpp:676:23: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_TRUE(!val3.equal(common_error::kInvalidArgument));
data/monero-0.16.0.0/tests/unit_tests/expect.cpp:686:23: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_TRUE(!val1.equal(val2));
data/monero-0.16.0.0/tests/unit_tests/expect.cpp:687:23: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_TRUE(!val1.equal(val3));
data/monero-0.16.0.0/tests/unit_tests/expect.cpp:688:23: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_TRUE(!val2.equal(val1));
data/monero-0.16.0.0/tests/unit_tests/expect.cpp:689:23: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_TRUE(!val2.equal(val3));
data/monero-0.16.0.0/tests/unit_tests/expect.cpp:690:23: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_TRUE(!val3.equal(val1));
data/monero-0.16.0.0/tests/unit_tests/expect.cpp:691:23: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_TRUE(!val3.equal(val2));
data/monero-0.16.0.0/tests/unit_tests/expect.cpp:705:22: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_TRUE(val1.equal("barfoo"));
data/monero-0.16.0.0/tests/unit_tests/expect.cpp:710:23: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_TRUE(!val1.equal(common_error::kInvalidArgument));
data/monero-0.16.0.0/tests/unit_tests/expect.cpp:724:22: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_TRUE(val1.equal(val2));
data/monero-0.16.0.0/tests/unit_tests/expect.cpp:725:22: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_TRUE(val2.equal(val1));
data/monero-0.16.0.0/tests/unit_tests/expect.cpp:726:23: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_TRUE(!val1.equal(std::error_code{}));
data/monero-0.16.0.0/tests/unit_tests/expect.cpp:727:23: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_TRUE(!val2.equal(std::error_code{}));
data/monero-0.16.0.0/tests/unit_tests/expect.cpp:743:23: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_TRUE(!val1.equal(val2));
data/monero-0.16.0.0/tests/unit_tests/expect.cpp:744:23: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_TRUE(!val2.equal(val1));
data/monero-0.16.0.0/tests/unit_tests/expect.cpp:745:23: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_TRUE(!val1.equal(common_error::kInvalidArgument));
data/monero-0.16.0.0/tests/unit_tests/expect.cpp:746:22: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_TRUE(val2.equal(common_error::kInvalidArgument));
data/monero-0.16.0.0/tests/unit_tests/expect.cpp:747:23: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_TRUE(!val2.equal(std::error_code{}));
data/monero-0.16.0.0/tests/unit_tests/expect.cpp:783:22: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_TRUE(val1.equal(val2));
data/monero-0.16.0.0/tests/unit_tests/expect.cpp:784:22: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_TRUE(val2.equal(val1));
data/monero-0.16.0.0/tests/unit_tests/expect.cpp:790:22: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_TRUE(val1.equal(throw_on_copy{}));
data/monero-0.16.0.0/tests/unit_tests/expect.cpp:798:22: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_TRUE(val1.equal(val3));
data/monero-0.16.0.0/tests/unit_tests/expect.cpp:806:23: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_TRUE(!val4.equal(throw_on_copy{}));
data/monero-0.16.0.0/tests/unit_tests/expect.cpp:811:23: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_TRUE(!val4.equal(val3));
data/monero-0.16.0.0/tests/unit_tests/hmac_keccak.cpp:96:28: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
const size_t inp_len = strlen(keccak_hmac_vectors[i].inp)/2;
data/monero-0.16.0.0/tests/unit_tests/hmac_keccak.cpp:97:28: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
const size_t key_len = strlen(keccak_hmac_vectors[i].key)/2;
data/monero-0.16.0.0/tests/unit_tests/lmdb.cpp:210:24: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_TRUE(boost::equal(record.i.data, record_copy.i.data));
data/monero-0.16.0.0/tests/unit_tests/lmdb.cpp:211:24: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_TRUE(boost::equal(record.j.data, record_copy.j.data));
data/monero-0.16.0.0/tests/unit_tests/lmdb.cpp:216:24: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_TRUE(boost::equal(record.j.data, j_copy.data));
data/monero-0.16.0.0/tests/unit_tests/lmdb.cpp:309:23: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_TRUE(test1.equal(test2));
data/monero-0.16.0.0/tests/unit_tests/lmdb.cpp:310:23: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_TRUE(test2.equal(test1));
data/monero-0.16.0.0/tests/unit_tests/lmdb.cpp:396:23: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_TRUE(test1.equal(test2));
data/monero-0.16.0.0/tests/unit_tests/lmdb.cpp:397:23: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_TRUE(test2.equal(test1));
data/monero-0.16.0.0/tests/unit_tests/logging.cpp:73:36: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
str = std::string(ptr + 1, strlen(ptr + 1));
data/monero-0.16.0.0/tests/unit_tests/net.cpp:154:26: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_TRUE(address2.equal(*address1));
data/monero-0.16.0.0/tests/unit_tests/net.cpp:155:27: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_TRUE(address1->equal(address2));
data/monero-0.16.0.0/tests/unit_tests/net.cpp:171:27: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_FALSE(address2.equal(*address1));
data/monero-0.16.0.0/tests/unit_tests/net.cpp:172:28: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_FALSE(address1->equal(address2));
data/monero-0.16.0.0/tests/unit_tests/net.cpp:188:27: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_FALSE(address3.equal(*address1));
data/monero-0.16.0.0/tests/unit_tests/net.cpp:189:28: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_FALSE(address1->equal(address3));
data/monero-0.16.0.0/tests/unit_tests/net.cpp:199:27: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_FALSE(address3.equal(address2));
data/monero-0.16.0.0/tests/unit_tests/net.cpp:200:27: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_FALSE(address2.equal(address3));
data/monero-0.16.0.0/tests/unit_tests/net.cpp:284:24: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
EXPECT_EQ(std::strlen(v2_onion), host.size());
data/monero-0.16.0.0/tests/unit_tests/net.cpp:335:24: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
EXPECT_EQ(std::strlen(v3_onion), host.size());
data/monero-0.16.0.0/tests/unit_tests/net.cpp:386:24: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
EXPECT_EQ(std::strlen(net::tor_address::unknown_str()), host.size());
data/monero-0.16.0.0/tests/unit_tests/net.cpp:609:26: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_TRUE(address2.equal(*address1));
data/monero-0.16.0.0/tests/unit_tests/net.cpp:610:27: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_TRUE(address1->equal(address2));
data/monero-0.16.0.0/tests/unit_tests/net.cpp:626:27: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_FALSE(address2.equal(*address1));
data/monero-0.16.0.0/tests/unit_tests/net.cpp:627:28: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_FALSE(address1->equal(address2));
data/monero-0.16.0.0/tests/unit_tests/net.cpp:643:27: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_FALSE(address3.equal(*address1));
data/monero-0.16.0.0/tests/unit_tests/net.cpp:644:28: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_FALSE(address1->equal(address3));
data/monero-0.16.0.0/tests/unit_tests/net.cpp:654:27: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_FALSE(address3.equal(address2));
data/monero-0.16.0.0/tests/unit_tests/net.cpp:655:27: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
EXPECT_FALSE(address2.equal(address3));
data/monero-0.16.0.0/tests/unit_tests/net.cpp:739:24: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
EXPECT_EQ(std::strlen(b32_i2p), host.size());
data/monero-0.16.0.0/tests/unit_tests/net.cpp:790:24: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
EXPECT_EQ(std::strlen(net::i2p_address::unknown_str()), host.size());
data/monero-0.16.0.0/tests/unit_tests/net.cpp:1044:18: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
boost::asio::read(io.server, boost::asio::buffer(actual_bytes));
data/monero-0.16.0.0/tests/unit_tests/net.cpp:1080:18: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
boost::asio::read(io.server, boost::asio::buffer(actual_bytes));
data/monero-0.16.0.0/tests/unit_tests/net.cpp:1138:18: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
boost::asio::read(io.server, boost::asio::buffer(actual_bytes));
data/monero-0.16.0.0/tests/unit_tests/net.cpp:1151:18: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
boost::asio::read(io.server, boost::asio::buffer(actual_bytes));
data/monero-0.16.0.0/tests/unit_tests/net.cpp:1178:18: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
boost::asio::read(io.server, boost::asio::buffer(actual_bytes));
data/monero-0.16.0.0/tests/unit_tests/net.cpp:1204:18: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
boost::asio::read(io.server, boost::asio::buffer(actual_bytes));
data/monero-0.16.0.0/tests/unit_tests/net.cpp:1230:18: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
boost::asio::read(io.server, boost::asio::buffer(actual_bytes));
data/monero-0.16.0.0/tests/unit_tests/notify.cpp:45:21: [1] (access) umask:
Ensure that umask is given most restrictive possible setting (e.g., 066 or
077) (CWE-732).
mode_t prevmode = umask(077);
data/monero-0.16.0.0/tests/unit_tests/notify.cpp:51:22: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
const size_t len = strlen(tmp) + 1 + strlen(filename);
data/monero-0.16.0.0/tests/unit_tests/notify.cpp:51:40: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
const size_t len = strlen(tmp) + 1 + strlen(filename);
data/monero-0.16.0.0/tests/unit_tests/notify.cpp:58:3: [1] (access) umask:
Ensure that umask is given most restrictive possible setting (e.g., 066 or
077) (CWE-732).
umask(prevmode);
data/monero-0.16.0.0/tests/unit_tests/serialization.cpp:750:27: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
const size_t magiclen = strlen(OUTPUT_EXPORT_FILE_MAGIC);
data/monero-0.16.0.0/tests/unit_tests/serialization.cpp:877:27: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
const size_t magiclen = strlen(UNSIGNED_TX_PREFIX);
data/monero-0.16.0.0/tests/unit_tests/serialization.cpp:1025:27: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
const size_t magiclen = strlen(SIGNED_TX_PREFIX);
data/monero-0.16.0.0/tests/unit_tests/varint.cpp:48:14: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
TEST(varint, equal)
data/monero-0.16.0.0/tests/unit_tests/varint.cpp:61:16: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
ASSERT_EQ (read, bytes);
data/monero-0.16.0.0/tests/unit_tests/wipeable_string.cpp:118:23: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
TEST(wipeable_string, equal)
data/monero-0.16.0.0/translations/generate_translations_header.c:56:25: [1] (buffer) fgetc:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
for (j = 0; (ch = fgetc(fp)) != EOF; j++) {
ANALYSIS SUMMARY:
Hits = 1474
Lines analyzed = 327673 in approximately 8.44 seconds (38803 lines/second)
Physical Source Lines of Code (SLOC) = 244712
Hits@level = [0] 343 [1] 460 [2] 708 [3] 103 [4] 201 [5] 2
Hits@level+ = [0+] 1817 [1+] 1474 [2+] 1014 [3+] 306 [4+] 203 [5+] 2
Hits/KSLOC@level+ = [0+] 7.42505 [1+] 6.02341 [2+] 4.14365 [3+] 1.25045 [4+] 0.829547 [5+] 0.00817287
Symlinks skipped = 1 (--allowlink overrides but see doc for security issue)
Dot directories skipped = 1 (--followdotdir overrides)
Minimum risk level = 1
Not every hit is necessarily a security vulnerability.
There may be other security vulnerabilities; review your code!
See 'Secure Programming HOWTO'
(https://dwheeler.com/secure-programs) for more information.