... #53
AleksArt000Annotations
2 errors and 10 warnings
|
/include/libspm.h:57:34 [clang-diagnostic-error]:
include/libspm.h#L57
use of undeclared identifier 'PATH_MAX'
|
|
/include/libspm.h:57:59 [clang-diagnostic-error]:
include/libspm.h#L57
use of undeclared identifier 'PATH_MAX'
|
|
/include/libspm.h:206:5 [readability-redundant-declaration]:
include/libspm.h#L206
redundant 'update' declaration
|
|
/src/link.c:17:5 [clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling]:
src/link.c#L17
Call to function 'sprintf' is insecure as it does not provide bounding of the memory buffer or security checks introduced in the C11 standard. Replace with analogous functions that support length arguments or provides boundary checks such as 'sprintf_s' in case of C11
|
|
/src/link.c:29:12 [cppcoreguidelines-init-variables]:
src/link.c#L29
variable 'links' is not initialized
|
|
/src/link.c:42:9 [clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling]:
src/link.c#L42
Call to function 'sprintf' is insecure as it does not provide bounding of the memory buffer or security checks introduced in the C11 standard. Replace with analogous functions that support length arguments or provides boundary checks such as 'sprintf_s' in case of C11
|
|
/src/link.c:44:9 [clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling]:
src/link.c#L44
Call to function 'sprintf' is insecure as it does not provide bounding of the memory buffer or security checks introduced in the C11 standard. Replace with analogous functions that support length arguments or provides boundary checks such as 'sprintf_s' in case of C11
|
|
/src/link.c:48:9 [clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling]:
src/link.c#L48
Call to function 'sprintf' is insecure as it does not provide security checks introduced in the C11 standard. Replace with analogous functions that support length arguments or provides boundary checks such as 'sprintf_s' in case of C11
|
|
/src/link.c:49:9 [clang-analyzer-security.insecureAPI.strcpy]:
src/link.c#L49
Call to function 'strcat' is insecure as it does not provide bounding of the memory buffer. Replace unbounded copy functions with analogous functions that support length arguments such as 'strlcat'. CWE-119
|
|
/src/link.c:52:9 [clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling]:
src/link.c#L52
Call to function 'sprintf' is insecure as it does not provide bounding of the memory buffer or security checks introduced in the C11 standard. Replace with analogous functions that support length arguments or provides boundary checks such as 'sprintf_s' in case of C11
|
|
/src/link.c:52:25 [clang-diagnostic-format-security]:
src/link.c#L52
format string is not a string literal (potentially insecure)
|
|
/src/link.c:55:15 [clang-analyzer-deadcode.DeadStores]:
src/link.c#L55
Value stored to 'tmp' during its initialization is never read
|