=========================================================== .___ __ __ _________________ __ __ __| _/|__|/ |_ / ___\_` __ \__ \ | | \/ __ | | \\_ __\ / /_/ > | \// __ \| | / /_/ | | || | \___ /|__| (____ /____/\____ | |__||__| /_____/ \/ \/ grep rough audit - static analysis tool v2.8 written by @Wireghoul =================================[justanotherhacker.com]=== r-cran-httpuv-1.5.4+dfsg/README.md-50- r-cran-httpuv-1.5.4+dfsg/README.md:51:The `startServer()` function takes an _app object_, which is a named list with functions that are invoked in response to certain events. In the example above, the list contains a function `call`. This function is invoked when a complete HTTP request is received by the server, and it is passed an environment object `req`, which contains information about HTTP request. `req$PATH_INFO` is the path requested (if the request was for http://127.0.0.1:5000/foo, it would be `"/foo"`). r-cran-httpuv-1.5.4+dfsg/README.md-52- ############################################## r-cran-httpuv-1.5.4+dfsg/src/http.cpp-150- if (family == AF_INET6) { r-cran-httpuv-1.5.4+dfsg/src/http.cpp:151: r = uv_ip6_addr(host.c_str(), port, &addr6); r-cran-httpuv-1.5.4+dfsg/src/http.cpp-152- pAddress = reinterpret_cast<sockaddr*>(&addr6); r-cran-httpuv-1.5.4+dfsg/src/http.cpp-153- } else if (family == AF_INET){ r-cran-httpuv-1.5.4+dfsg/src/http.cpp:154: r = uv_ip4_addr(host.c_str(), port, &addr4); r-cran-httpuv-1.5.4+dfsg/src/http.cpp-155- pAddress = reinterpret_cast<sockaddr*>(&addr4); ############################################## r-cran-httpuv-1.5.4+dfsg/src/httprequest.cpp-638- uv_buf_t buffers[3]; r-cran-httpuv-1.5.4+dfsg/src/httprequest.cpp:639: buffers[0] = uv_buf_init(safe_vec_addr(*pSend->pHeader), pSend->pHeader->size()); r-cran-httpuv-1.5.4+dfsg/src/httprequest.cpp:640: buffers[1] = uv_buf_init(safe_vec_addr(*pSend->pData), pSend->pData->size()); r-cran-httpuv-1.5.4+dfsg/src/httprequest.cpp:641: buffers[2] = uv_buf_init(safe_vec_addr(*pSend->pFooter), pSend->pFooter->size()); r-cran-httpuv-1.5.4+dfsg/src/httprequest.cpp-642- ############################################## r-cran-httpuv-1.5.4+dfsg/src/httprequest.cpp-756- // Schedule on background thread: r-cran-httpuv-1.5.4+dfsg/src/httprequest.cpp:757: // p_wsc->read(safe_vec_addr(*req_buffer), req_buffer->size()) r-cran-httpuv-1.5.4+dfsg/src/httprequest.cpp-758- boost::function<void (void)> cb( ############################################## r-cran-httpuv-1.5.4+dfsg/src/httprequest.cpp-760- p_wsc, r-cran-httpuv-1.5.4+dfsg/src/httprequest.cpp:761: safe_vec_addr(*req_buffer), r-cran-httpuv-1.5.4+dfsg/src/httprequest.cpp-762- req_buffer->size() ############################################## r-cran-httpuv-1.5.4+dfsg/src/httprequest.cpp-847- r-cran-httpuv-1.5.4+dfsg/src/httprequest.cpp:848: this->_parse_http_data(safe_vec_addr(req_buffer), req_buffer.size()); r-cran-httpuv-1.5.4+dfsg/src/httprequest.cpp-849-} ############################################## r-cran-httpuv-1.5.4+dfsg/src/websockets-ietf.cpp-26- reid_SHA1_Init(&ctx); r-cran-httpuv-1.5.4+dfsg/src/websockets-ietf.cpp:27: reid_SHA1_Update(&ctx, (const uint8_t*)safe_str_addr(clear), clear.size()); r-cran-httpuv-1.5.4+dfsg/src/websockets-ietf.cpp-28- r-cran-httpuv-1.5.4+dfsg/src/websockets-ietf.cpp-29- std::vector<uint8_t> digest(SHA1_DIGEST_SIZE); r-cran-httpuv-1.5.4+dfsg/src/websockets-ietf.cpp:30: reid_SHA1_Final(&ctx, safe_vec_addr(digest)); r-cran-httpuv-1.5.4+dfsg/src/websockets-ietf.cpp-31- ############################################## r-cran-httpuv-1.5.4+dfsg/src/utils.h-83-template <typename T> r-cran-httpuv-1.5.4+dfsg/src/utils.h:84:T* safe_vec_addr(std::vector<T>& vec) { r-cran-httpuv-1.5.4+dfsg/src/utils.h-85- return vec.size() ? &vec[0] : NULL; ############################################## r-cran-httpuv-1.5.4+dfsg/src/utils.h-88-// Indexing into an empty vector causes assertion failures on some platforms r-cran-httpuv-1.5.4+dfsg/src/utils.h:89:inline const char* safe_str_addr(const std::string& str) { r-cran-httpuv-1.5.4+dfsg/src/utils.h-90- return str.size() ? &str[0] : NULL; ############################################## r-cran-httpuv-1.5.4+dfsg/src/websockets-hybi03.cpp-81- pResponse->resize(16, 0); r-cran-httpuv-1.5.4+dfsg/src/websockets-hybi03.cpp:82: MD5_Final(safe_vec_addr(*pResponse), &ctx); r-cran-httpuv-1.5.4+dfsg/src/websockets-hybi03.cpp-83- ############################################## r-cran-httpuv-1.5.4+dfsg/src/websockets.cpp-52- inf.maskingKey.resize(4); r-cran-httpuv-1.5.4+dfsg/src/websockets.cpp:53: maskingKey(safe_vec_addr(inf.maskingKey)); r-cran-httpuv-1.5.4+dfsg/src/websockets.cpp-54- } ############################################## r-cran-httpuv-1.5.4+dfsg/src/websockets.cpp-174- r-cran-httpuv-1.5.4+dfsg/src/websockets.cpp:175: WSHyBiFrameHeader frame(_pProto, safe_vec_addr(_header), _header.size()); r-cran-httpuv-1.5.4+dfsg/src/websockets.cpp-176- ############################################## r-cran-httpuv-1.5.4+dfsg/src/websockets.cpp-266- _pParser->createFrameHeaderFooter(opcode, false, length, 0, r-cran-httpuv-1.5.4+dfsg/src/websockets.cpp:267: safe_vec_addr(header), &headerLength, r-cran-httpuv-1.5.4+dfsg/src/websockets.cpp:268: safe_vec_addr(footer), &footerLength); r-cran-httpuv-1.5.4+dfsg/src/websockets.cpp-269- header.resize(headerLength); ############################################## r-cran-httpuv-1.5.4+dfsg/src/websockets.cpp-271- r-cran-httpuv-1.5.4+dfsg/src/websockets.cpp:272: _pCallbacks->sendWSFrame(safe_vec_addr(header), header.size(), r-cran-httpuv-1.5.4+dfsg/src/websockets.cpp-273- pData, length, r-cran-httpuv-1.5.4+dfsg/src/websockets.cpp:274: safe_vec_addr(footer), footer.size()); r-cran-httpuv-1.5.4+dfsg/src/websockets.cpp-275-} ############################################## r-cran-httpuv-1.5.4+dfsg/src/websockets.cpp-317- if (_connState == WS_CLOSED) return; r-cran-httpuv-1.5.4+dfsg/src/websockets.cpp:318: read(safe_vec_addr(*buf), buf->size()); r-cran-httpuv-1.5.4+dfsg/src/websockets.cpp-319-} ############################################## r-cran-httpuv-1.5.4+dfsg/src/websockets.cpp-361- _pCallbacks->onWSMessage(_incompleteContentHeader.opcode == Binary, r-cran-httpuv-1.5.4+dfsg/src/websockets.cpp:362: safe_vec_addr(_incompleteContentPayload), _incompleteContentPayload.size()); r-cran-httpuv-1.5.4+dfsg/src/websockets.cpp-363- ############################################## r-cran-httpuv-1.5.4+dfsg/src/websockets.cpp-368- case Binary: { r-cran-httpuv-1.5.4+dfsg/src/websockets.cpp:369: _pCallbacks->onWSMessage(_header.opcode == Binary, safe_vec_addr(_payload), _payload.size()); r-cran-httpuv-1.5.4+dfsg/src/websockets.cpp-370- break; ############################################## r-cran-httpuv-1.5.4+dfsg/src/websockets.cpp-383- _connState = WS_CLOSED; r-cran-httpuv-1.5.4+dfsg/src/websockets.cpp:384: sendWSMessage(Close, safe_vec_addr(_payload), _payload.size()); r-cran-httpuv-1.5.4+dfsg/src/websockets.cpp-385- } ############################################## r-cran-httpuv-1.5.4+dfsg/src/websockets.cpp-396- // Send back a pong r-cran-httpuv-1.5.4+dfsg/src/websockets.cpp:397: sendWSMessage(Pong, safe_vec_addr(_payload), _payload.size()); r-cran-httpuv-1.5.4+dfsg/src/websockets.cpp-398- break; ############################################## r-cran-httpuv-1.5.4+dfsg/src/httpresponse.cpp-97- r-cran-httpuv-1.5.4+dfsg/src/httpresponse.cpp:98: uv_buf_t headerBuf = uv_buf_init(safe_vec_addr(_responseHeader), _responseHeader.size()); r-cran-httpuv-1.5.4+dfsg/src/httpresponse.cpp-99- uv_write_t* pWriteReq = (uv_write_t*)malloc(sizeof(uv_write_t)); ############################################## r-cran-httpuv-1.5.4+dfsg/src/httpuv.cpp-205- mode, r-cran-httpuv-1.5.4+dfsg/src/httpuv.cpp:206: safe_vec_addr(*str), r-cran-httpuv-1.5.4+dfsg/src/httpuv.cpp-207- str->size() ############################################## r-cran-httpuv-1.5.4+dfsg/src/httpuv.cpp-701- boost::function<void(Rcpp::List)>* callback_wrapper = r-cran-httpuv-1.5.4+dfsg/src/httpuv.cpp:702: (boost::function<void(Rcpp::List)>*)(R_ExternalPtrAddr(callback_xptr)); r-cran-httpuv-1.5.4+dfsg/src/httpuv.cpp-703- ############################################## r-cran-httpuv-1.5.4+dfsg/NEWS.md-38- r-cran-httpuv-1.5.4+dfsg/NEWS.md:39:* If an application's `$call()` method is missing, it will now give a 404 response instead of a 500 response. (#237) r-cran-httpuv-1.5.4+dfsg/NEWS.md-40- ############################################## r-cran-httpuv-1.5.4+dfsg/NEWS.md-109- r-cran-httpuv-1.5.4+dfsg/NEWS.md:110:* The Rook `req` environment now includes an item `req$HEADERS`, which is a named character vector of request headers. (#143) r-cran-httpuv-1.5.4+dfsg/NEWS.md-111- ############################################## r-cran-httpuv-1.5.4+dfsg/debian/tests/run-unit-test-8-if [ "$AUTOPKGTEST_TMP" = "" ] ; then r-cran-httpuv-1.5.4+dfsg/debian/tests/run-unit-test:9: AUTOPKGTEST_TMP=`mktemp -d /tmp/${debname}-test.XXXXXX` r-cran-httpuv-1.5.4+dfsg/debian/tests/run-unit-test-10- trap "rm -rf $AUTOPKGTEST_TMP" 0 INT QUIT ABRT PIPE TERM ############################################## r-cran-httpuv-1.5.4+dfsg/.pc/use_debian_packages_libuv1.patch/src/httpresponse.cpp-97- r-cran-httpuv-1.5.4+dfsg/.pc/use_debian_packages_libuv1.patch/src/httpresponse.cpp:98: uv_buf_t headerBuf = uv_buf_init(safe_vec_addr(_responseHeader), _responseHeader.size()); r-cran-httpuv-1.5.4+dfsg/.pc/use_debian_packages_libuv1.patch/src/httpresponse.cpp-99- uv_write_t* pWriteReq = (uv_write_t*)malloc(sizeof(uv_write_t)); ############################################## r-cran-httpuv-1.5.4+dfsg/.pc/use_debian_packages_libuv1.patch/src/httpuv.cpp-205- mode, r-cran-httpuv-1.5.4+dfsg/.pc/use_debian_packages_libuv1.patch/src/httpuv.cpp:206: safe_vec_addr(*str), r-cran-httpuv-1.5.4+dfsg/.pc/use_debian_packages_libuv1.patch/src/httpuv.cpp-207- str->size() ############################################## r-cran-httpuv-1.5.4+dfsg/.pc/use_debian_packages_libuv1.patch/src/httpuv.cpp-701- boost::function<void(Rcpp::List)>* callback_wrapper = r-cran-httpuv-1.5.4+dfsg/.pc/use_debian_packages_libuv1.patch/src/httpuv.cpp:702: (boost::function<void(Rcpp::List)>*)(R_ExternalPtrAddr(callback_xptr)); r-cran-httpuv-1.5.4+dfsg/.pc/use_debian_packages_libuv1.patch/src/httpuv.cpp-703-