@codacy/tools-flawfinder-2 0.4.0 → 0.6.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/index.js +249 -53
- package/dist/metadata.d.ts +13 -0
- package/dist/metadata.js +39 -0
- package/package.json +13 -3
package/dist/index.js
CHANGED
|
@@ -38,7 +38,6 @@ var import_tooling2 = require("@codacy/tooling");
|
|
|
38
38
|
// src/adapter.ts
|
|
39
39
|
var import_tooling = require("@codacy/tooling");
|
|
40
40
|
var import_path = __toESM(require("path"));
|
|
41
|
-
var import_promises = __toESM(require("fs/promises"));
|
|
42
41
|
|
|
43
42
|
// src/patterns.json
|
|
44
43
|
var patterns_default = [
|
|
@@ -48,6 +47,7 @@ var patterns_default = [
|
|
|
48
47
|
severityLevel: "High",
|
|
49
48
|
title: "Detect Potential Security Flaws in access() Calls",
|
|
50
49
|
enabled: false,
|
|
50
|
+
languages: ["C", "CPP"],
|
|
51
51
|
parameters: []
|
|
52
52
|
},
|
|
53
53
|
{
|
|
@@ -56,6 +56,7 @@ var patterns_default = [
|
|
|
56
56
|
severityLevel: "High",
|
|
57
57
|
title: "Avoid AddAccessAllowedAce calls without setting inheritance bits",
|
|
58
58
|
enabled: false,
|
|
59
|
+
languages: ["C", "CPP"],
|
|
59
60
|
parameters: []
|
|
60
61
|
},
|
|
61
62
|
{
|
|
@@ -64,6 +65,7 @@ var patterns_default = [
|
|
|
64
65
|
severityLevel: "High",
|
|
65
66
|
title: "Avoid unsafe usage of atoi",
|
|
66
67
|
enabled: false,
|
|
68
|
+
languages: ["C", "CPP"],
|
|
67
69
|
parameters: []
|
|
68
70
|
},
|
|
69
71
|
{
|
|
@@ -72,6 +74,7 @@ var patterns_default = [
|
|
|
72
74
|
severityLevel: "High",
|
|
73
75
|
title: "Avoid unchecked use of atol",
|
|
74
76
|
enabled: false,
|
|
77
|
+
languages: ["C", "CPP"],
|
|
75
78
|
parameters: []
|
|
76
79
|
},
|
|
77
80
|
{
|
|
@@ -80,6 +83,7 @@ var patterns_default = [
|
|
|
80
83
|
severityLevel: "High",
|
|
81
84
|
title: "Avoid unsafe use of bcopy",
|
|
82
85
|
enabled: false,
|
|
86
|
+
languages: ["C", "CPP"],
|
|
83
87
|
parameters: []
|
|
84
88
|
},
|
|
85
89
|
{
|
|
@@ -88,6 +92,7 @@ var patterns_default = [
|
|
|
88
92
|
severityLevel: "High",
|
|
89
93
|
title: "Detect Potential Security Problems in char Array Usage",
|
|
90
94
|
enabled: false,
|
|
95
|
+
languages: ["C", "CPP"],
|
|
91
96
|
parameters: []
|
|
92
97
|
},
|
|
93
98
|
{
|
|
@@ -96,6 +101,7 @@ var patterns_default = [
|
|
|
96
101
|
severityLevel: "High",
|
|
97
102
|
title: "Avoid Race Condition in chgrp Calls",
|
|
98
103
|
enabled: false,
|
|
104
|
+
languages: ["C", "CPP"],
|
|
99
105
|
parameters: []
|
|
100
106
|
},
|
|
101
107
|
{
|
|
@@ -104,6 +110,7 @@ var patterns_default = [
|
|
|
104
110
|
severityLevel: "High",
|
|
105
111
|
title: "Avoid insecure use of chmod with filename arguments",
|
|
106
112
|
enabled: false,
|
|
113
|
+
languages: ["C", "CPP"],
|
|
107
114
|
parameters: []
|
|
108
115
|
},
|
|
109
116
|
{
|
|
@@ -112,6 +119,7 @@ var patterns_default = [
|
|
|
112
119
|
severityLevel: "High",
|
|
113
120
|
title: "Avoid insecure use of chown calls",
|
|
114
121
|
enabled: false,
|
|
122
|
+
languages: ["C", "CPP"],
|
|
115
123
|
parameters: []
|
|
116
124
|
},
|
|
117
125
|
{
|
|
@@ -120,6 +128,7 @@ var patterns_default = [
|
|
|
120
128
|
severityLevel: "High",
|
|
121
129
|
title: "Detect Potential Security Issues in chroot Calls",
|
|
122
130
|
enabled: false,
|
|
131
|
+
languages: ["C", "CPP"],
|
|
123
132
|
parameters: []
|
|
124
133
|
},
|
|
125
134
|
{
|
|
@@ -128,6 +137,7 @@ var patterns_default = [
|
|
|
128
137
|
severityLevel: "Error",
|
|
129
138
|
title: "Avoid failing CoImpersonateClient calls",
|
|
130
139
|
enabled: false,
|
|
140
|
+
languages: ["C", "CPP"],
|
|
131
141
|
parameters: []
|
|
132
142
|
},
|
|
133
143
|
{
|
|
@@ -136,6 +146,7 @@ var patterns_default = [
|
|
|
136
146
|
severityLevel: "Error",
|
|
137
147
|
title: "Avoid Unsafe CopyMemory Calls",
|
|
138
148
|
enabled: false,
|
|
149
|
+
languages: ["C", "CPP"],
|
|
139
150
|
parameters: []
|
|
140
151
|
},
|
|
141
152
|
{
|
|
@@ -144,6 +155,7 @@ var patterns_default = [
|
|
|
144
155
|
severityLevel: "High",
|
|
145
156
|
title: "Avoid Unsafe Use of CreateProcess Calls",
|
|
146
157
|
enabled: false,
|
|
158
|
+
languages: ["C", "CPP"],
|
|
147
159
|
parameters: []
|
|
148
160
|
},
|
|
149
161
|
{
|
|
@@ -152,6 +164,7 @@ var patterns_default = [
|
|
|
152
164
|
severityLevel: "High",
|
|
153
165
|
title: "Avoid Unsafe Use of CreateProcessAsUser",
|
|
154
166
|
enabled: false,
|
|
167
|
+
languages: ["C", "CPP"],
|
|
155
168
|
parameters: []
|
|
156
169
|
},
|
|
157
170
|
{
|
|
@@ -160,6 +173,7 @@ var patterns_default = [
|
|
|
160
173
|
severityLevel: "Error",
|
|
161
174
|
title: "Avoid Unsafe Use of CreateProcessWithLogon",
|
|
162
175
|
enabled: false,
|
|
176
|
+
languages: ["C", "CPP"],
|
|
163
177
|
parameters: []
|
|
164
178
|
},
|
|
165
179
|
{
|
|
@@ -168,6 +182,7 @@ var patterns_default = [
|
|
|
168
182
|
severityLevel: "High",
|
|
169
183
|
title: "Avoid Using Weak crypt() Function",
|
|
170
184
|
enabled: false,
|
|
185
|
+
languages: ["C", "CPP"],
|
|
171
186
|
parameters: []
|
|
172
187
|
},
|
|
173
188
|
{
|
|
@@ -176,6 +191,7 @@ var patterns_default = [
|
|
|
176
191
|
severityLevel: "High",
|
|
177
192
|
title: "Avoid Using crypt_r with Weak Hashing Algorithm",
|
|
178
193
|
enabled: false,
|
|
194
|
+
languages: ["C", "CPP"],
|
|
179
195
|
parameters: []
|
|
180
196
|
},
|
|
181
197
|
{
|
|
@@ -184,6 +200,7 @@ var patterns_default = [
|
|
|
184
200
|
severityLevel: "High",
|
|
185
201
|
title: "Avoid Using curl_getenv with Untrusted Environment Variables",
|
|
186
202
|
enabled: false,
|
|
203
|
+
languages: ["C", "CPP"],
|
|
187
204
|
parameters: []
|
|
188
205
|
},
|
|
189
206
|
{
|
|
@@ -192,6 +209,7 @@ var patterns_default = [
|
|
|
192
209
|
severityLevel: "High",
|
|
193
210
|
title: "Avoid use of cuserid() function",
|
|
194
211
|
enabled: false,
|
|
212
|
+
languages: ["C", "CPP"],
|
|
195
213
|
parameters: []
|
|
196
214
|
},
|
|
197
215
|
{
|
|
@@ -200,6 +218,7 @@ var patterns_default = [
|
|
|
200
218
|
severityLevel: "High",
|
|
201
219
|
title: "Avoid Using drand48 for Security-Sensitive Randomness",
|
|
202
220
|
enabled: false,
|
|
221
|
+
languages: ["C", "CPP"],
|
|
203
222
|
parameters: []
|
|
204
223
|
},
|
|
205
224
|
{
|
|
@@ -208,6 +227,7 @@ var patterns_default = [
|
|
|
208
227
|
severityLevel: "High",
|
|
209
228
|
title: "Avoid unsafe use of equal calls",
|
|
210
229
|
enabled: false,
|
|
230
|
+
languages: ["C", "CPP"],
|
|
211
231
|
parameters: []
|
|
212
232
|
},
|
|
213
233
|
{
|
|
@@ -216,6 +236,7 @@ var patterns_default = [
|
|
|
216
236
|
severityLevel: "High",
|
|
217
237
|
title: "Avoid Using erand48 for Security-Critical Randomness",
|
|
218
238
|
enabled: false,
|
|
239
|
+
languages: ["C", "CPP"],
|
|
219
240
|
parameters: []
|
|
220
241
|
},
|
|
221
242
|
{
|
|
@@ -224,6 +245,7 @@ var patterns_default = [
|
|
|
224
245
|
severityLevel: "High",
|
|
225
246
|
title: "Avoid Use of EVP_des_cbc (DES with CBC mode)",
|
|
226
247
|
enabled: false,
|
|
248
|
+
languages: ["C", "CPP"],
|
|
227
249
|
parameters: []
|
|
228
250
|
},
|
|
229
251
|
{
|
|
@@ -232,6 +254,7 @@ var patterns_default = [
|
|
|
232
254
|
severityLevel: "Error",
|
|
233
255
|
title: "Avoid Using EVP_des_cfb Due to Weak DES Encryption",
|
|
234
256
|
enabled: false,
|
|
257
|
+
languages: ["C", "CPP"],
|
|
235
258
|
parameters: []
|
|
236
259
|
},
|
|
237
260
|
{
|
|
@@ -240,6 +263,7 @@ var patterns_default = [
|
|
|
240
263
|
severityLevel: "High",
|
|
241
264
|
title: "Avoid Using EVP_des_ecb for Encryption",
|
|
242
265
|
enabled: false,
|
|
266
|
+
languages: ["C", "CPP"],
|
|
243
267
|
parameters: []
|
|
244
268
|
},
|
|
245
269
|
{
|
|
@@ -248,6 +272,7 @@ var patterns_default = [
|
|
|
248
272
|
severityLevel: "High",
|
|
249
273
|
title: "Avoid Using EVP_des_ofb with DES",
|
|
250
274
|
enabled: false,
|
|
275
|
+
languages: ["C", "CPP"],
|
|
251
276
|
parameters: []
|
|
252
277
|
},
|
|
253
278
|
{
|
|
@@ -256,6 +281,7 @@ var patterns_default = [
|
|
|
256
281
|
severityLevel: "Error",
|
|
257
282
|
title: "Avoid Using EVP_desx_cbc with DES Encryption",
|
|
258
283
|
enabled: false,
|
|
284
|
+
languages: ["C", "CPP"],
|
|
259
285
|
parameters: []
|
|
260
286
|
},
|
|
261
287
|
{
|
|
@@ -264,6 +290,7 @@ var patterns_default = [
|
|
|
264
290
|
severityLevel: "High",
|
|
265
291
|
title: "Avoid Using EVP_rc2_40_cbc with Small Key Sizes",
|
|
266
292
|
enabled: false,
|
|
293
|
+
languages: ["C", "CPP"],
|
|
267
294
|
parameters: []
|
|
268
295
|
},
|
|
269
296
|
{
|
|
@@ -272,6 +299,7 @@ var patterns_default = [
|
|
|
272
299
|
severityLevel: "High",
|
|
273
300
|
title: "Avoid Using EVP_rc2_64_cbc with Small Key Sizes",
|
|
274
301
|
enabled: false,
|
|
302
|
+
languages: ["C", "CPP"],
|
|
275
303
|
parameters: []
|
|
276
304
|
},
|
|
277
305
|
{
|
|
@@ -280,6 +308,7 @@ var patterns_default = [
|
|
|
280
308
|
severityLevel: "High",
|
|
281
309
|
title: "Avoid Using EVP_rc4_40 with Small Key Sizes",
|
|
282
310
|
enabled: false,
|
|
311
|
+
languages: ["C", "CPP"],
|
|
283
312
|
parameters: []
|
|
284
313
|
},
|
|
285
314
|
{
|
|
@@ -288,6 +317,7 @@ var patterns_default = [
|
|
|
288
317
|
severityLevel: "Error",
|
|
289
318
|
title: "Avoid unsafe use of execl calls",
|
|
290
319
|
enabled: false,
|
|
320
|
+
languages: ["C", "CPP"],
|
|
291
321
|
parameters: []
|
|
292
322
|
},
|
|
293
323
|
{
|
|
@@ -296,6 +326,7 @@ var patterns_default = [
|
|
|
296
326
|
severityLevel: "High",
|
|
297
327
|
title: "Avoid insecure use of execle calls",
|
|
298
328
|
enabled: false,
|
|
329
|
+
languages: ["C", "CPP"],
|
|
299
330
|
parameters: []
|
|
300
331
|
},
|
|
301
332
|
{
|
|
@@ -304,6 +335,7 @@ var patterns_default = [
|
|
|
304
335
|
severityLevel: "High",
|
|
305
336
|
title: "Avoid Unsafe Use of execlp Calls",
|
|
306
337
|
enabled: false,
|
|
338
|
+
languages: ["C", "CPP"],
|
|
307
339
|
parameters: []
|
|
308
340
|
},
|
|
309
341
|
{
|
|
@@ -312,6 +344,7 @@ var patterns_default = [
|
|
|
312
344
|
severityLevel: "High",
|
|
313
345
|
title: "Avoid Unsafe execv Calls",
|
|
314
346
|
enabled: false,
|
|
347
|
+
languages: ["C", "CPP"],
|
|
315
348
|
parameters: []
|
|
316
349
|
},
|
|
317
350
|
{
|
|
@@ -320,6 +353,7 @@ var patterns_default = [
|
|
|
320
353
|
severityLevel: "High",
|
|
321
354
|
title: "Avoid Unsafe Use of execvp",
|
|
322
355
|
enabled: false,
|
|
356
|
+
languages: ["C", "CPP"],
|
|
323
357
|
parameters: []
|
|
324
358
|
},
|
|
325
359
|
{
|
|
@@ -328,6 +362,7 @@ var patterns_default = [
|
|
|
328
362
|
severityLevel: "High",
|
|
329
363
|
title: "Check Buffer Boundaries in fgetc Calls",
|
|
330
364
|
enabled: true,
|
|
365
|
+
languages: ["C", "CPP"],
|
|
331
366
|
parameters: []
|
|
332
367
|
},
|
|
333
368
|
{
|
|
@@ -336,6 +371,7 @@ var patterns_default = [
|
|
|
336
371
|
severityLevel: "High",
|
|
337
372
|
title: "Avoid Unsafe fopen Calls",
|
|
338
373
|
enabled: false,
|
|
374
|
+
languages: ["C", "CPP"],
|
|
339
375
|
parameters: []
|
|
340
376
|
},
|
|
341
377
|
{
|
|
@@ -344,6 +380,7 @@ var patterns_default = [
|
|
|
344
380
|
severityLevel: "Error",
|
|
345
381
|
title: "Avoid Unsafe fprintf Usage",
|
|
346
382
|
enabled: false,
|
|
383
|
+
languages: ["C", "CPP"],
|
|
347
384
|
parameters: []
|
|
348
385
|
},
|
|
349
386
|
{
|
|
@@ -352,6 +389,7 @@ var patterns_default = [
|
|
|
352
389
|
severityLevel: "High",
|
|
353
390
|
title: "Detect Potential Security Issues in fread Calls",
|
|
354
391
|
enabled: false,
|
|
392
|
+
languages: ["C", "CPP"],
|
|
355
393
|
parameters: []
|
|
356
394
|
},
|
|
357
395
|
{
|
|
@@ -360,6 +398,7 @@ var patterns_default = [
|
|
|
360
398
|
severityLevel: "Error",
|
|
361
399
|
title: "Avoid unsafe fscanf %s usage",
|
|
362
400
|
enabled: false,
|
|
401
|
+
languages: ["C", "CPP"],
|
|
363
402
|
parameters: []
|
|
364
403
|
},
|
|
365
404
|
{
|
|
@@ -368,6 +407,7 @@ var patterns_default = [
|
|
|
368
407
|
severityLevel: "High",
|
|
369
408
|
title: "Avoid unsafe use of _ftcscat",
|
|
370
409
|
enabled: false,
|
|
410
|
+
languages: ["C", "CPP"],
|
|
371
411
|
parameters: []
|
|
372
412
|
},
|
|
373
413
|
{
|
|
@@ -376,6 +416,7 @@ var patterns_default = [
|
|
|
376
416
|
severityLevel: "Error",
|
|
377
417
|
title: "Avoid unsafe _ftcscpy usage",
|
|
378
418
|
enabled: false,
|
|
419
|
+
languages: ["C", "CPP"],
|
|
379
420
|
parameters: []
|
|
380
421
|
},
|
|
381
422
|
{
|
|
@@ -384,6 +425,7 @@ var patterns_default = [
|
|
|
384
425
|
severityLevel: "Error",
|
|
385
426
|
title: "Avoid Unsafe _ftprintf Calls",
|
|
386
427
|
enabled: false,
|
|
428
|
+
languages: ["C", "CPP"],
|
|
387
429
|
parameters: []
|
|
388
430
|
},
|
|
389
431
|
{
|
|
@@ -392,6 +434,7 @@ var patterns_default = [
|
|
|
392
434
|
severityLevel: "High",
|
|
393
435
|
title: "Avoid unsafe _ftscanf %s usage",
|
|
394
436
|
enabled: false,
|
|
437
|
+
languages: ["C", "CPP"],
|
|
395
438
|
parameters: []
|
|
396
439
|
},
|
|
397
440
|
{
|
|
@@ -400,6 +443,7 @@ var patterns_default = [
|
|
|
400
443
|
severityLevel: "Error",
|
|
401
444
|
title: "Avoid insecure use of fvwprintf",
|
|
402
445
|
enabled: false,
|
|
446
|
+
languages: ["C", "CPP"],
|
|
403
447
|
parameters: []
|
|
404
448
|
},
|
|
405
449
|
{
|
|
@@ -408,6 +452,7 @@ var patterns_default = [
|
|
|
408
452
|
severityLevel: "Error",
|
|
409
453
|
title: "Avoid insecure usage of fwprintf with attacker-controlled format strings",
|
|
410
454
|
enabled: false,
|
|
455
|
+
languages: ["C", "CPP"],
|
|
411
456
|
parameters: []
|
|
412
457
|
},
|
|
413
458
|
{
|
|
@@ -416,6 +461,7 @@ var patterns_default = [
|
|
|
416
461
|
severityLevel: "High",
|
|
417
462
|
title: "Avoid unsafe usage of fwscanf with %s specifier",
|
|
418
463
|
enabled: false,
|
|
464
|
+
languages: ["C", "CPP"],
|
|
419
465
|
parameters: []
|
|
420
466
|
},
|
|
421
467
|
{
|
|
@@ -424,6 +470,7 @@ var patterns_default = [
|
|
|
424
470
|
severityLevel: "High",
|
|
425
471
|
title: "Avoid Unsafe Use of getc",
|
|
426
472
|
enabled: true,
|
|
473
|
+
languages: ["C", "CPP"],
|
|
427
474
|
parameters: []
|
|
428
475
|
},
|
|
429
476
|
{
|
|
@@ -432,6 +479,7 @@ var patterns_default = [
|
|
|
432
479
|
severityLevel: "High",
|
|
433
480
|
title: "Avoid Unsafe Use of getchar()",
|
|
434
481
|
enabled: true,
|
|
482
|
+
languages: ["C", "CPP"],
|
|
435
483
|
parameters: []
|
|
436
484
|
},
|
|
437
485
|
{
|
|
@@ -440,6 +488,7 @@ var patterns_default = [
|
|
|
440
488
|
severityLevel: "High",
|
|
441
489
|
title: "Avoid Unsafe Use of getenv",
|
|
442
490
|
enabled: false,
|
|
491
|
+
languages: ["C", "CPP"],
|
|
443
492
|
parameters: []
|
|
444
493
|
},
|
|
445
494
|
{
|
|
@@ -448,6 +497,7 @@ var patterns_default = [
|
|
|
448
497
|
severityLevel: "High",
|
|
449
498
|
title: "Avoid Using getlogin() for Security-Related Purposes",
|
|
450
499
|
enabled: false,
|
|
500
|
+
languages: ["C", "CPP"],
|
|
451
501
|
parameters: []
|
|
452
502
|
},
|
|
453
503
|
{
|
|
@@ -456,6 +506,7 @@ var patterns_default = [
|
|
|
456
506
|
severityLevel: "High",
|
|
457
507
|
title: "Avoid Unsafe getopt Calls",
|
|
458
508
|
enabled: false,
|
|
509
|
+
languages: ["C", "CPP"],
|
|
459
510
|
parameters: []
|
|
460
511
|
},
|
|
461
512
|
{
|
|
@@ -464,6 +515,7 @@ var patterns_default = [
|
|
|
464
515
|
severityLevel: "High",
|
|
465
516
|
title: "Avoid Unsafe getopt_long Calls",
|
|
466
517
|
enabled: false,
|
|
518
|
+
languages: ["C", "CPP"],
|
|
467
519
|
parameters: []
|
|
468
520
|
},
|
|
469
521
|
{
|
|
@@ -472,6 +524,7 @@ var patterns_default = [
|
|
|
472
524
|
severityLevel: "High",
|
|
473
525
|
title: "Avoid Using Obsolete getpass Function",
|
|
474
526
|
enabled: false,
|
|
527
|
+
languages: ["C", "CPP"],
|
|
475
528
|
parameters: []
|
|
476
529
|
},
|
|
477
530
|
{
|
|
@@ -480,6 +533,7 @@ var patterns_default = [
|
|
|
480
533
|
severityLevel: "High",
|
|
481
534
|
title: "Avoid Using getpw Function",
|
|
482
535
|
enabled: false,
|
|
536
|
+
languages: ["C", "CPP"],
|
|
483
537
|
parameters: []
|
|
484
538
|
},
|
|
485
539
|
{
|
|
@@ -488,6 +542,7 @@ var patterns_default = [
|
|
|
488
542
|
severityLevel: "Error",
|
|
489
543
|
title: "Avoid using gets function",
|
|
490
544
|
enabled: false,
|
|
545
|
+
languages: ["C", "CPP"],
|
|
491
546
|
parameters: []
|
|
492
547
|
},
|
|
493
548
|
{
|
|
@@ -496,6 +551,7 @@ var patterns_default = [
|
|
|
496
551
|
severityLevel: "High",
|
|
497
552
|
title: "Check buffer boundaries in _gettc calls",
|
|
498
553
|
enabled: true,
|
|
554
|
+
languages: ["C", "CPP"],
|
|
499
555
|
parameters: []
|
|
500
556
|
},
|
|
501
557
|
{
|
|
@@ -504,6 +560,7 @@ var patterns_default = [
|
|
|
504
560
|
severityLevel: "High",
|
|
505
561
|
title: "Avoid insecure use of GetTempFileName",
|
|
506
562
|
enabled: false,
|
|
563
|
+
languages: ["C", "CPP"],
|
|
507
564
|
parameters: []
|
|
508
565
|
},
|
|
509
566
|
{
|
|
@@ -512,6 +569,7 @@ var patterns_default = [
|
|
|
512
569
|
severityLevel: "Error",
|
|
513
570
|
title: "Avoid _getts Calls",
|
|
514
571
|
enabled: false,
|
|
572
|
+
languages: ["C", "CPP"],
|
|
515
573
|
parameters: []
|
|
516
574
|
},
|
|
517
575
|
{
|
|
@@ -520,6 +578,7 @@ var patterns_default = [
|
|
|
520
578
|
severityLevel: "High",
|
|
521
579
|
title: "Avoid Using getwd Calls",
|
|
522
580
|
enabled: false,
|
|
581
|
+
languages: ["C", "CPP"],
|
|
523
582
|
parameters: []
|
|
524
583
|
},
|
|
525
584
|
{
|
|
@@ -528,6 +587,7 @@ var patterns_default = [
|
|
|
528
587
|
severityLevel: "High",
|
|
529
588
|
title: "Avoid Using g_get_home_dir Due to Untrusted Input",
|
|
530
589
|
enabled: false,
|
|
590
|
+
languages: ["C", "CPP"],
|
|
531
591
|
parameters: []
|
|
532
592
|
},
|
|
533
593
|
{
|
|
@@ -536,6 +596,7 @@ var patterns_default = [
|
|
|
536
596
|
severityLevel: "High",
|
|
537
597
|
title: "Avoid Using g_get_tmp_dir for Temporary Directory Retrieval",
|
|
538
598
|
enabled: false,
|
|
599
|
+
languages: ["C", "CPP"],
|
|
539
600
|
parameters: []
|
|
540
601
|
},
|
|
541
602
|
{
|
|
@@ -544,6 +605,7 @@ var patterns_default = [
|
|
|
544
605
|
severityLevel: "High",
|
|
545
606
|
title: "Avoid Using g_rand_boolean for Security-Sensitive Randomness",
|
|
546
607
|
enabled: false,
|
|
608
|
+
languages: ["C", "CPP"],
|
|
547
609
|
parameters: []
|
|
548
610
|
},
|
|
549
611
|
{
|
|
@@ -552,6 +614,7 @@ var patterns_default = [
|
|
|
552
614
|
severityLevel: "High",
|
|
553
615
|
title: "Avoid using g_rand_double for security-related randomness",
|
|
554
616
|
enabled: false,
|
|
617
|
+
languages: ["C", "CPP"],
|
|
555
618
|
parameters: []
|
|
556
619
|
},
|
|
557
620
|
{
|
|
@@ -560,6 +623,7 @@ var patterns_default = [
|
|
|
560
623
|
severityLevel: "Error",
|
|
561
624
|
title: "Avoid use of g_rand_double_range for security-sensitive randomness",
|
|
562
625
|
enabled: false,
|
|
626
|
+
languages: ["C", "CPP"],
|
|
563
627
|
parameters: []
|
|
564
628
|
},
|
|
565
629
|
{
|
|
@@ -568,6 +632,7 @@ var patterns_default = [
|
|
|
568
632
|
severityLevel: "Error",
|
|
569
633
|
title: "Avoid Using g_rand_int for Security-Critical Randomness",
|
|
570
634
|
enabled: false,
|
|
635
|
+
languages: ["C", "CPP"],
|
|
571
636
|
parameters: []
|
|
572
637
|
},
|
|
573
638
|
{
|
|
@@ -576,6 +641,7 @@ var patterns_default = [
|
|
|
576
641
|
severityLevel: "Error",
|
|
577
642
|
title: "Avoid Using g_rand_int_range for Security-Critical Randomness",
|
|
578
643
|
enabled: false,
|
|
644
|
+
languages: ["C", "CPP"],
|
|
579
645
|
parameters: []
|
|
580
646
|
},
|
|
581
647
|
{
|
|
@@ -584,6 +650,7 @@ var patterns_default = [
|
|
|
584
650
|
severityLevel: "High",
|
|
585
651
|
title: "Avoid Using g_random_boolean for Security-Sensitive Randomness",
|
|
586
652
|
enabled: false,
|
|
653
|
+
languages: ["C", "CPP"],
|
|
587
654
|
parameters: []
|
|
588
655
|
},
|
|
589
656
|
{
|
|
@@ -592,6 +659,7 @@ var patterns_default = [
|
|
|
592
659
|
severityLevel: "High",
|
|
593
660
|
title: "Avoid Using g_random_double for Security-Critical Randomness",
|
|
594
661
|
enabled: false,
|
|
662
|
+
languages: ["C", "CPP"],
|
|
595
663
|
parameters: []
|
|
596
664
|
},
|
|
597
665
|
{
|
|
@@ -600,6 +668,7 @@ var patterns_default = [
|
|
|
600
668
|
severityLevel: "High",
|
|
601
669
|
title: "Avoid Using g_random_double_range for Security-Critical Randomness",
|
|
602
670
|
enabled: false,
|
|
671
|
+
languages: ["C", "CPP"],
|
|
603
672
|
parameters: []
|
|
604
673
|
},
|
|
605
674
|
{
|
|
@@ -608,6 +677,7 @@ var patterns_default = [
|
|
|
608
677
|
severityLevel: "High",
|
|
609
678
|
title: "Avoid Using g_random_int for Security-Sensitive Randomness",
|
|
610
679
|
enabled: false,
|
|
680
|
+
languages: ["C", "CPP"],
|
|
611
681
|
parameters: []
|
|
612
682
|
},
|
|
613
683
|
{
|
|
@@ -616,6 +686,7 @@ var patterns_default = [
|
|
|
616
686
|
severityLevel: "High",
|
|
617
687
|
title: "Avoid Using g_random_int_range for Security-Critical Randomness",
|
|
618
688
|
enabled: false,
|
|
689
|
+
languages: ["C", "CPP"],
|
|
619
690
|
parameters: []
|
|
620
691
|
},
|
|
621
692
|
{
|
|
@@ -624,6 +695,7 @@ var patterns_default = [
|
|
|
624
695
|
severityLevel: "High",
|
|
625
696
|
title: "Avoid use of obsolete gsignal functions",
|
|
626
697
|
enabled: false,
|
|
698
|
+
languages: ["C", "CPP"],
|
|
627
699
|
parameters: []
|
|
628
700
|
},
|
|
629
701
|
{
|
|
@@ -632,6 +704,7 @@ var patterns_default = [
|
|
|
632
704
|
severityLevel: "High",
|
|
633
705
|
title: "Detect Potential Security Issues in ImpersonateDdeClientWindow Calls",
|
|
634
706
|
enabled: false,
|
|
707
|
+
languages: ["C", "CPP"],
|
|
635
708
|
parameters: []
|
|
636
709
|
},
|
|
637
710
|
{
|
|
@@ -640,6 +713,7 @@ var patterns_default = [
|
|
|
640
713
|
severityLevel: "High",
|
|
641
714
|
title: "Detect potential security problems in ImpersonateLoggedOnUser calls",
|
|
642
715
|
enabled: false,
|
|
716
|
+
languages: ["C", "CPP"],
|
|
643
717
|
parameters: []
|
|
644
718
|
},
|
|
645
719
|
{
|
|
@@ -648,6 +722,7 @@ var patterns_default = [
|
|
|
648
722
|
severityLevel: "High",
|
|
649
723
|
title: "Detect Potential Security Issues in ImpersonateNamedPipeClient Calls",
|
|
650
724
|
enabled: false,
|
|
725
|
+
languages: ["C", "CPP"],
|
|
651
726
|
parameters: []
|
|
652
727
|
},
|
|
653
728
|
{
|
|
@@ -656,6 +731,7 @@ var patterns_default = [
|
|
|
656
731
|
severityLevel: "High",
|
|
657
732
|
title: "Detect Potential Security Issues in ImpersonateSecurityContext Calls",
|
|
658
733
|
enabled: false,
|
|
734
|
+
languages: ["C", "CPP"],
|
|
659
735
|
parameters: []
|
|
660
736
|
},
|
|
661
737
|
{
|
|
@@ -664,6 +740,7 @@ var patterns_default = [
|
|
|
664
740
|
severityLevel: "High",
|
|
665
741
|
title: "Avoid Exceptions in InitializeCriticalSection Calls",
|
|
666
742
|
enabled: false,
|
|
743
|
+
languages: ["C", "CPP"],
|
|
667
744
|
parameters: []
|
|
668
745
|
},
|
|
669
746
|
{
|
|
@@ -672,6 +749,7 @@ var patterns_default = [
|
|
|
672
749
|
severityLevel: "High",
|
|
673
750
|
title: "Avoid unsafe use of is_permutation that may cause iterator over-read",
|
|
674
751
|
enabled: false,
|
|
752
|
+
languages: ["C", "CPP"],
|
|
675
753
|
parameters: []
|
|
676
754
|
},
|
|
677
755
|
{
|
|
@@ -680,6 +758,7 @@ var patterns_default = [
|
|
|
680
758
|
severityLevel: "High",
|
|
681
759
|
title: "Avoid Using jrand48 for Security-Related Randomness",
|
|
682
760
|
enabled: false,
|
|
761
|
+
languages: ["C", "CPP"],
|
|
683
762
|
parameters: []
|
|
684
763
|
},
|
|
685
764
|
{
|
|
@@ -688,6 +767,7 @@ var patterns_default = [
|
|
|
688
767
|
severityLevel: "High",
|
|
689
768
|
title: "Avoid Using lcong48 for Security-Critical Randomness",
|
|
690
769
|
enabled: false,
|
|
770
|
+
languages: ["C", "CPP"],
|
|
691
771
|
parameters: []
|
|
692
772
|
},
|
|
693
773
|
{
|
|
@@ -696,6 +776,7 @@ var patterns_default = [
|
|
|
696
776
|
severityLevel: "High",
|
|
697
777
|
title: "Ensure Full Path in LoadLibrary Calls",
|
|
698
778
|
enabled: false,
|
|
779
|
+
languages: ["C", "CPP"],
|
|
699
780
|
parameters: []
|
|
700
781
|
},
|
|
701
782
|
{
|
|
@@ -704,6 +785,7 @@ var patterns_default = [
|
|
|
704
785
|
severityLevel: "High",
|
|
705
786
|
title: "Ensure Full Path in LoadLibraryEx Calls",
|
|
706
787
|
enabled: false,
|
|
788
|
+
languages: ["C", "CPP"],
|
|
707
789
|
parameters: []
|
|
708
790
|
},
|
|
709
791
|
{
|
|
@@ -712,6 +794,7 @@ var patterns_default = [
|
|
|
712
794
|
severityLevel: "High",
|
|
713
795
|
title: "Avoid using lrand48 for security-sensitive randomness",
|
|
714
796
|
enabled: false,
|
|
797
|
+
languages: ["C", "CPP"],
|
|
715
798
|
parameters: []
|
|
716
799
|
},
|
|
717
800
|
{
|
|
@@ -720,6 +803,7 @@ var patterns_default = [
|
|
|
720
803
|
severityLevel: "Error",
|
|
721
804
|
title: "Avoid Unsafe Use of lstrcat",
|
|
722
805
|
enabled: false,
|
|
806
|
+
languages: ["C", "CPP"],
|
|
723
807
|
parameters: []
|
|
724
808
|
},
|
|
725
809
|
{
|
|
@@ -728,6 +812,7 @@ var patterns_default = [
|
|
|
728
812
|
severityLevel: "Error",
|
|
729
813
|
title: "Avoid Unsafe Use of lstrcatA",
|
|
730
814
|
enabled: false,
|
|
815
|
+
languages: ["C", "CPP"],
|
|
731
816
|
parameters: []
|
|
732
817
|
},
|
|
733
818
|
{
|
|
@@ -736,6 +821,7 @@ var patterns_default = [
|
|
|
736
821
|
severityLevel: "High",
|
|
737
822
|
title: "Avoid Incorrect Usage of lstrcatn",
|
|
738
823
|
enabled: true,
|
|
824
|
+
languages: ["C", "CPP"],
|
|
739
825
|
parameters: []
|
|
740
826
|
},
|
|
741
827
|
{
|
|
@@ -744,6 +830,7 @@ var patterns_default = [
|
|
|
744
830
|
severityLevel: "Error",
|
|
745
831
|
title: "Avoid Unsafe Use of lstrcatnA",
|
|
746
832
|
enabled: false,
|
|
833
|
+
languages: ["C", "CPP"],
|
|
747
834
|
parameters: []
|
|
748
835
|
},
|
|
749
836
|
{
|
|
@@ -752,6 +839,7 @@ var patterns_default = [
|
|
|
752
839
|
severityLevel: "High",
|
|
753
840
|
title: "Avoid unsafe use of lstrcatnW",
|
|
754
841
|
enabled: false,
|
|
842
|
+
languages: ["C", "CPP"],
|
|
755
843
|
parameters: []
|
|
756
844
|
},
|
|
757
845
|
{
|
|
@@ -760,6 +848,7 @@ var patterns_default = [
|
|
|
760
848
|
severityLevel: "High",
|
|
761
849
|
title: "Avoid unsafe usage of lstrcatW",
|
|
762
850
|
enabled: false,
|
|
851
|
+
languages: ["C", "CPP"],
|
|
763
852
|
parameters: []
|
|
764
853
|
},
|
|
765
854
|
{
|
|
@@ -768,6 +857,7 @@ var patterns_default = [
|
|
|
768
857
|
severityLevel: "High",
|
|
769
858
|
title: "Avoid unsafe use of lstrcpy",
|
|
770
859
|
enabled: false,
|
|
860
|
+
languages: ["C", "CPP"],
|
|
771
861
|
parameters: []
|
|
772
862
|
},
|
|
773
863
|
{
|
|
@@ -776,6 +866,7 @@ var patterns_default = [
|
|
|
776
866
|
severityLevel: "Error",
|
|
777
867
|
title: "Avoid unsafe use of lstrcpyA",
|
|
778
868
|
enabled: false,
|
|
869
|
+
languages: ["C", "CPP"],
|
|
779
870
|
parameters: []
|
|
780
871
|
},
|
|
781
872
|
{
|
|
@@ -784,6 +875,7 @@ var patterns_default = [
|
|
|
784
875
|
severityLevel: "High",
|
|
785
876
|
title: "Avoid Incorrect Use of lstrcpyn",
|
|
786
877
|
enabled: true,
|
|
878
|
+
languages: ["C", "CPP"],
|
|
787
879
|
parameters: []
|
|
788
880
|
},
|
|
789
881
|
{
|
|
@@ -792,6 +884,7 @@ var patterns_default = [
|
|
|
792
884
|
severityLevel: "Error",
|
|
793
885
|
title: "Avoid insecure use of lstrcpynA calls",
|
|
794
886
|
enabled: false,
|
|
887
|
+
languages: ["C", "CPP"],
|
|
795
888
|
parameters: []
|
|
796
889
|
},
|
|
797
890
|
{
|
|
@@ -800,6 +893,7 @@ var patterns_default = [
|
|
|
800
893
|
severityLevel: "Error",
|
|
801
894
|
title: "Avoid unsafe use of lstrcpynW",
|
|
802
895
|
enabled: false,
|
|
896
|
+
languages: ["C", "CPP"],
|
|
803
897
|
parameters: []
|
|
804
898
|
},
|
|
805
899
|
{
|
|
@@ -808,6 +902,7 @@ var patterns_default = [
|
|
|
808
902
|
severityLevel: "Error",
|
|
809
903
|
title: "Avoid Unsafe Use of lstrcpyW",
|
|
810
904
|
enabled: false,
|
|
905
|
+
languages: ["C", "CPP"],
|
|
811
906
|
parameters: []
|
|
812
907
|
},
|
|
813
908
|
{
|
|
@@ -816,6 +911,7 @@ var patterns_default = [
|
|
|
816
911
|
severityLevel: "High",
|
|
817
912
|
title: "Avoid unsafe use of lstrncat",
|
|
818
913
|
enabled: false,
|
|
914
|
+
languages: ["C", "CPP"],
|
|
819
915
|
parameters: []
|
|
820
916
|
},
|
|
821
917
|
{
|
|
@@ -824,6 +920,7 @@ var patterns_default = [
|
|
|
824
920
|
severityLevel: "Error",
|
|
825
921
|
title: "Avoid unsafe use of _mbccat function",
|
|
826
922
|
enabled: false,
|
|
923
|
+
languages: ["C", "CPP"],
|
|
827
924
|
parameters: []
|
|
828
925
|
},
|
|
829
926
|
{
|
|
@@ -832,6 +929,7 @@ var patterns_default = [
|
|
|
832
929
|
severityLevel: "Error",
|
|
833
930
|
title: "Avoid _mbccpy Calls Without Buffer Overflow Checks",
|
|
834
931
|
enabled: false,
|
|
932
|
+
languages: ["C", "CPP"],
|
|
835
933
|
parameters: []
|
|
836
934
|
},
|
|
837
935
|
{
|
|
@@ -840,6 +938,7 @@ var patterns_default = [
|
|
|
840
938
|
severityLevel: "High",
|
|
841
939
|
title: "Avoid Unsafe _mbscat Calls",
|
|
842
940
|
enabled: false,
|
|
941
|
+
languages: ["C", "CPP"],
|
|
843
942
|
parameters: []
|
|
844
943
|
},
|
|
845
944
|
{
|
|
@@ -848,6 +947,7 @@ var patterns_default = [
|
|
|
848
947
|
severityLevel: "High",
|
|
849
948
|
title: "Avoid _mbscpy Calls",
|
|
850
949
|
enabled: false,
|
|
950
|
+
languages: ["C", "CPP"],
|
|
851
951
|
parameters: []
|
|
852
952
|
},
|
|
853
953
|
{
|
|
@@ -856,6 +956,7 @@ var patterns_default = [
|
|
|
856
956
|
severityLevel: "High",
|
|
857
957
|
title: "Avoid Unsafe _mbslen Calls",
|
|
858
958
|
enabled: true,
|
|
959
|
+
languages: ["C", "CPP"],
|
|
859
960
|
parameters: []
|
|
860
961
|
},
|
|
861
962
|
{
|
|
@@ -864,6 +965,7 @@ var patterns_default = [
|
|
|
864
965
|
severityLevel: "High",
|
|
865
966
|
title: "Avoid Unsafe Use of _mbsnbcat",
|
|
866
967
|
enabled: true,
|
|
968
|
+
languages: ["C", "CPP"],
|
|
867
969
|
parameters: []
|
|
868
970
|
},
|
|
869
971
|
{
|
|
@@ -872,6 +974,7 @@ var patterns_default = [
|
|
|
872
974
|
severityLevel: "High",
|
|
873
975
|
title: "Avoid Incorrect Use of _mbsnbcpy",
|
|
874
976
|
enabled: true,
|
|
977
|
+
languages: ["C", "CPP"],
|
|
875
978
|
parameters: []
|
|
876
979
|
},
|
|
877
980
|
{
|
|
@@ -880,6 +983,7 @@ var patterns_default = [
|
|
|
880
983
|
severityLevel: "Error",
|
|
881
984
|
title: "Avoid unsafe use of _mbsncpy",
|
|
882
985
|
enabled: false,
|
|
986
|
+
languages: ["C", "CPP"],
|
|
883
987
|
parameters: []
|
|
884
988
|
},
|
|
885
989
|
{
|
|
@@ -888,6 +992,7 @@ var patterns_default = [
|
|
|
888
992
|
severityLevel: "High",
|
|
889
993
|
title: "Avoid Unsafe memalign Usage",
|
|
890
994
|
enabled: true,
|
|
995
|
+
languages: ["C", "CPP"],
|
|
891
996
|
parameters: []
|
|
892
997
|
},
|
|
893
998
|
{
|
|
@@ -896,6 +1001,7 @@ var patterns_default = [
|
|
|
896
1001
|
severityLevel: "Error",
|
|
897
1002
|
title: "Avoid Unsafe memcpy Usage",
|
|
898
1003
|
enabled: false,
|
|
1004
|
+
languages: ["C", "CPP"],
|
|
899
1005
|
parameters: []
|
|
900
1006
|
},
|
|
901
1007
|
{
|
|
@@ -904,6 +1010,7 @@ var patterns_default = [
|
|
|
904
1010
|
severityLevel: "High",
|
|
905
1011
|
title: "Avoid Unsafe Usage of std::mismatch",
|
|
906
1012
|
enabled: false,
|
|
1013
|
+
languages: ["C", "CPP"],
|
|
907
1014
|
parameters: []
|
|
908
1015
|
},
|
|
909
1016
|
{
|
|
@@ -912,6 +1019,7 @@ var patterns_default = [
|
|
|
912
1019
|
severityLevel: "High",
|
|
913
1020
|
title: "Detect Potential Security Vulnerabilities in mkstemp Calls",
|
|
914
1021
|
enabled: false,
|
|
1022
|
+
languages: ["C", "CPP"],
|
|
915
1023
|
parameters: []
|
|
916
1024
|
},
|
|
917
1025
|
{
|
|
@@ -920,6 +1028,7 @@ var patterns_default = [
|
|
|
920
1028
|
severityLevel: "Error",
|
|
921
1029
|
title: "Avoid insecure mktemp usage",
|
|
922
1030
|
enabled: false,
|
|
1031
|
+
languages: ["C", "CPP"],
|
|
923
1032
|
parameters: []
|
|
924
1033
|
},
|
|
925
1034
|
{
|
|
@@ -928,6 +1037,7 @@ var patterns_default = [
|
|
|
928
1037
|
severityLevel: "High",
|
|
929
1038
|
title: "Avoid using mrand48 for security-related randomness",
|
|
930
1039
|
enabled: false,
|
|
1040
|
+
languages: ["C", "CPP"],
|
|
931
1041
|
parameters: []
|
|
932
1042
|
},
|
|
933
1043
|
{
|
|
@@ -936,6 +1046,7 @@ var patterns_default = [
|
|
|
936
1046
|
severityLevel: "High",
|
|
937
1047
|
title: "Ensure MultiByteToWideChar Maximum Length Is in Characters",
|
|
938
1048
|
enabled: false,
|
|
1049
|
+
languages: ["C", "CPP"],
|
|
939
1050
|
parameters: []
|
|
940
1051
|
},
|
|
941
1052
|
{
|
|
@@ -944,6 +1055,7 @@ var patterns_default = [
|
|
|
944
1055
|
severityLevel: "High",
|
|
945
1056
|
title: "Avoid Using nrand48 for Security-Critical Randomness",
|
|
946
1057
|
enabled: false,
|
|
1058
|
+
languages: ["C", "CPP"],
|
|
947
1059
|
parameters: []
|
|
948
1060
|
},
|
|
949
1061
|
{
|
|
@@ -952,6 +1064,7 @@ var patterns_default = [
|
|
|
952
1064
|
severityLevel: "High",
|
|
953
1065
|
title: "Detect Potential Security Issues in open() Calls",
|
|
954
1066
|
enabled: false,
|
|
1067
|
+
languages: ["C", "CPP"],
|
|
955
1068
|
parameters: []
|
|
956
1069
|
},
|
|
957
1070
|
{
|
|
@@ -960,6 +1073,7 @@ var patterns_default = [
|
|
|
960
1073
|
severityLevel: "Error",
|
|
961
1074
|
title: "Avoid Unsafe Use of popen",
|
|
962
1075
|
enabled: false,
|
|
1076
|
+
languages: ["C", "CPP"],
|
|
963
1077
|
parameters: []
|
|
964
1078
|
},
|
|
965
1079
|
{
|
|
@@ -968,6 +1082,7 @@ var patterns_default = [
|
|
|
968
1082
|
severityLevel: "Error",
|
|
969
1083
|
title: "Avoid Unsafe Use of printf with Untrusted Format Strings",
|
|
970
1084
|
enabled: false,
|
|
1085
|
+
languages: ["C", "CPP"],
|
|
971
1086
|
parameters: []
|
|
972
1087
|
},
|
|
973
1088
|
{
|
|
@@ -976,6 +1091,7 @@ var patterns_default = [
|
|
|
976
1091
|
severityLevel: "High",
|
|
977
1092
|
title: "Avoid Using Insufficiently Random Functions for Security",
|
|
978
1093
|
enabled: false,
|
|
1094
|
+
languages: ["C", "CPP"],
|
|
979
1095
|
parameters: []
|
|
980
1096
|
},
|
|
981
1097
|
{
|
|
@@ -984,6 +1100,7 @@ var patterns_default = [
|
|
|
984
1100
|
severityLevel: "Error",
|
|
985
1101
|
title: "Check Buffer Boundaries in read Calls",
|
|
986
1102
|
enabled: true,
|
|
1103
|
+
languages: ["C", "CPP"],
|
|
987
1104
|
parameters: []
|
|
988
1105
|
},
|
|
989
1106
|
{
|
|
@@ -992,6 +1109,7 @@ var patterns_default = [
|
|
|
992
1109
|
severityLevel: "High",
|
|
993
1110
|
title: "Avoid insecure use of readlink",
|
|
994
1111
|
enabled: false,
|
|
1112
|
+
languages: ["C", "CPP"],
|
|
995
1113
|
parameters: []
|
|
996
1114
|
},
|
|
997
1115
|
{
|
|
@@ -1000,6 +1118,7 @@ var patterns_default = [
|
|
|
1000
1118
|
severityLevel: "High",
|
|
1001
1119
|
title: "Detect Potential Security Issues in readv Calls",
|
|
1002
1120
|
enabled: false,
|
|
1121
|
+
languages: ["C", "CPP"],
|
|
1003
1122
|
parameters: []
|
|
1004
1123
|
},
|
|
1005
1124
|
{
|
|
@@ -1008,6 +1127,7 @@ var patterns_default = [
|
|
|
1008
1127
|
severityLevel: "Error",
|
|
1009
1128
|
title: "Avoid unsafe realpath usage",
|
|
1010
1129
|
enabled: false,
|
|
1130
|
+
languages: ["C", "CPP"],
|
|
1011
1131
|
parameters: []
|
|
1012
1132
|
},
|
|
1013
1133
|
{
|
|
@@ -1016,6 +1136,7 @@ var patterns_default = [
|
|
|
1016
1136
|
severityLevel: "High",
|
|
1017
1137
|
title: "Detect Potential Security Issues in recv Calls",
|
|
1018
1138
|
enabled: false,
|
|
1139
|
+
languages: ["C", "CPP"],
|
|
1019
1140
|
parameters: []
|
|
1020
1141
|
},
|
|
1021
1142
|
{
|
|
@@ -1024,6 +1145,7 @@ var patterns_default = [
|
|
|
1024
1145
|
severityLevel: "High",
|
|
1025
1146
|
title: "Avoid unsafe usage of recvfrom calls",
|
|
1026
1147
|
enabled: false,
|
|
1148
|
+
languages: ["C", "CPP"],
|
|
1027
1149
|
parameters: []
|
|
1028
1150
|
},
|
|
1029
1151
|
{
|
|
@@ -1032,6 +1154,7 @@ var patterns_default = [
|
|
|
1032
1154
|
severityLevel: "High",
|
|
1033
1155
|
title: "Detect Potential Security Issues in recvmsg Calls",
|
|
1034
1156
|
enabled: false,
|
|
1157
|
+
languages: ["C", "CPP"],
|
|
1035
1158
|
parameters: []
|
|
1036
1159
|
},
|
|
1037
1160
|
{
|
|
@@ -1040,6 +1163,7 @@ var patterns_default = [
|
|
|
1040
1163
|
severityLevel: "High",
|
|
1041
1164
|
title: "Check RpcImpersonateClient Call Success",
|
|
1042
1165
|
enabled: false,
|
|
1166
|
+
languages: ["C", "CPP"],
|
|
1043
1167
|
parameters: []
|
|
1044
1168
|
},
|
|
1045
1169
|
{
|
|
@@ -1048,6 +1172,7 @@ var patterns_default = [
|
|
|
1048
1172
|
severityLevel: "Error",
|
|
1049
1173
|
title: "Avoid Unsafe scanf %s Usage",
|
|
1050
1174
|
enabled: false,
|
|
1175
|
+
languages: ["C", "CPP"],
|
|
1051
1176
|
parameters: []
|
|
1052
1177
|
},
|
|
1053
1178
|
{
|
|
@@ -1056,6 +1181,7 @@ var patterns_default = [
|
|
|
1056
1181
|
severityLevel: "High",
|
|
1057
1182
|
title: "Avoid Using seed48 for Security-Critical Randomness",
|
|
1058
1183
|
enabled: false,
|
|
1184
|
+
languages: ["C", "CPP"],
|
|
1059
1185
|
parameters: []
|
|
1060
1186
|
},
|
|
1061
1187
|
{
|
|
@@ -1064,6 +1190,7 @@ var patterns_default = [
|
|
|
1064
1190
|
severityLevel: "Error",
|
|
1065
1191
|
title: "Avoid Creating NULL ACLs with SetSecurityDescriptorDacl",
|
|
1066
1192
|
enabled: false,
|
|
1193
|
+
languages: ["C", "CPP"],
|
|
1067
1194
|
parameters: []
|
|
1068
1195
|
},
|
|
1069
1196
|
{
|
|
@@ -1072,6 +1199,7 @@ var patterns_default = [
|
|
|
1072
1199
|
severityLevel: "High",
|
|
1073
1200
|
title: "Avoid using setstate for security-related randomness",
|
|
1074
1201
|
enabled: false,
|
|
1202
|
+
languages: ["C", "CPP"],
|
|
1075
1203
|
parameters: []
|
|
1076
1204
|
},
|
|
1077
1205
|
{
|
|
@@ -1080,6 +1208,7 @@ var patterns_default = [
|
|
|
1080
1208
|
severityLevel: "High",
|
|
1081
1209
|
title: "Detect Potential Security Issues in SetThreadToken Calls",
|
|
1082
1210
|
enabled: false,
|
|
1211
|
+
languages: ["C", "CPP"],
|
|
1083
1212
|
parameters: []
|
|
1084
1213
|
},
|
|
1085
1214
|
{
|
|
@@ -1088,6 +1217,7 @@ var patterns_default = [
|
|
|
1088
1217
|
severityLevel: "High",
|
|
1089
1218
|
title: "Avoid Unsafe ShellExecute Calls",
|
|
1090
1219
|
enabled: false,
|
|
1220
|
+
languages: ["C", "CPP"],
|
|
1091
1221
|
parameters: []
|
|
1092
1222
|
},
|
|
1093
1223
|
{
|
|
@@ -1096,6 +1226,7 @@ var patterns_default = [
|
|
|
1096
1226
|
severityLevel: "Error",
|
|
1097
1227
|
title: "Avoid insecure usage of snprintf",
|
|
1098
1228
|
enabled: false,
|
|
1229
|
+
languages: ["C", "CPP"],
|
|
1099
1230
|
parameters: []
|
|
1100
1231
|
},
|
|
1101
1232
|
{
|
|
@@ -1104,6 +1235,7 @@ var patterns_default = [
|
|
|
1104
1235
|
severityLevel: "Error",
|
|
1105
1236
|
title: "Detect Potential Security Issues in _snprintf Calls",
|
|
1106
1237
|
enabled: false,
|
|
1238
|
+
languages: ["C", "CPP"],
|
|
1107
1239
|
parameters: []
|
|
1108
1240
|
},
|
|
1109
1241
|
{
|
|
@@ -1112,6 +1244,7 @@ var patterns_default = [
|
|
|
1112
1244
|
severityLevel: "Error",
|
|
1113
1245
|
title: "Avoid Unsafe Use of _sntprintf",
|
|
1114
1246
|
enabled: false,
|
|
1247
|
+
languages: ["C", "CPP"],
|
|
1115
1248
|
parameters: []
|
|
1116
1249
|
},
|
|
1117
1250
|
{
|
|
@@ -1120,6 +1253,7 @@ var patterns_default = [
|
|
|
1120
1253
|
severityLevel: "Error",
|
|
1121
1254
|
title: "Avoid Unsafe Use of sprintf",
|
|
1122
1255
|
enabled: false,
|
|
1256
|
+
languages: ["C", "CPP"],
|
|
1123
1257
|
parameters: []
|
|
1124
1258
|
},
|
|
1125
1259
|
{
|
|
@@ -1128,6 +1262,7 @@ var patterns_default = [
|
|
|
1128
1262
|
severityLevel: "High",
|
|
1129
1263
|
title: "Avoid Using srand for Security-Sensitive Randomness",
|
|
1130
1264
|
enabled: false,
|
|
1265
|
+
languages: ["C", "CPP"],
|
|
1131
1266
|
parameters: []
|
|
1132
1267
|
},
|
|
1133
1268
|
{
|
|
@@ -1136,6 +1271,7 @@ var patterns_default = [
|
|
|
1136
1271
|
severityLevel: "High",
|
|
1137
1272
|
title: "Avoid Using srandom for Security-Sensitive Randomness",
|
|
1138
1273
|
enabled: false,
|
|
1274
|
+
languages: ["C", "CPP"],
|
|
1139
1275
|
parameters: []
|
|
1140
1276
|
},
|
|
1141
1277
|
{
|
|
@@ -1144,6 +1280,7 @@ var patterns_default = [
|
|
|
1144
1280
|
severityLevel: "Error",
|
|
1145
1281
|
title: "Avoid unsafe usage of sscanf with %s specifier",
|
|
1146
1282
|
enabled: false,
|
|
1283
|
+
languages: ["C", "CPP"],
|
|
1147
1284
|
parameters: []
|
|
1148
1285
|
},
|
|
1149
1286
|
{
|
|
@@ -1152,6 +1289,7 @@ var patterns_default = [
|
|
|
1152
1289
|
severityLevel: "High",
|
|
1153
1290
|
title: "Avoid usage of ssignal function",
|
|
1154
1291
|
enabled: false,
|
|
1292
|
+
languages: ["C", "CPP"],
|
|
1155
1293
|
parameters: []
|
|
1156
1294
|
},
|
|
1157
1295
|
{
|
|
@@ -1160,6 +1298,7 @@ var patterns_default = [
|
|
|
1160
1298
|
severityLevel: "High",
|
|
1161
1299
|
title: "Avoid unsafe use of _stprintf",
|
|
1162
1300
|
enabled: false,
|
|
1301
|
+
languages: ["C", "CPP"],
|
|
1163
1302
|
parameters: []
|
|
1164
1303
|
},
|
|
1165
1304
|
{
|
|
@@ -1168,6 +1307,7 @@ var patterns_default = [
|
|
|
1168
1307
|
severityLevel: "Error",
|
|
1169
1308
|
title: "Avoid unsafe use of strcadd",
|
|
1170
1309
|
enabled: true,
|
|
1310
|
+
languages: ["C", "CPP"],
|
|
1171
1311
|
parameters: []
|
|
1172
1312
|
},
|
|
1173
1313
|
{
|
|
@@ -1176,6 +1316,7 @@ var patterns_default = [
|
|
|
1176
1316
|
severityLevel: "Error",
|
|
1177
1317
|
title: "Avoid unsafe use of strcat",
|
|
1178
1318
|
enabled: false,
|
|
1319
|
+
languages: ["C", "CPP"],
|
|
1179
1320
|
parameters: []
|
|
1180
1321
|
},
|
|
1181
1322
|
{
|
|
@@ -1184,6 +1325,7 @@ var patterns_default = [
|
|
|
1184
1325
|
severityLevel: "Error",
|
|
1185
1326
|
title: "Avoid Unsafe Use of strcat",
|
|
1186
1327
|
enabled: false,
|
|
1328
|
+
languages: ["C", "CPP"],
|
|
1187
1329
|
parameters: []
|
|
1188
1330
|
},
|
|
1189
1331
|
{
|
|
@@ -1192,6 +1334,7 @@ var patterns_default = [
|
|
|
1192
1334
|
severityLevel: "High",
|
|
1193
1335
|
title: "Avoid unsafe use of StrCatA",
|
|
1194
1336
|
enabled: false,
|
|
1337
|
+
languages: ["C", "CPP"],
|
|
1195
1338
|
parameters: []
|
|
1196
1339
|
},
|
|
1197
1340
|
{
|
|
@@ -1200,6 +1343,7 @@ var patterns_default = [
|
|
|
1200
1343
|
severityLevel: "Error",
|
|
1201
1344
|
title: "Avoid Unsafe Use of strCatBuff",
|
|
1202
1345
|
enabled: false,
|
|
1346
|
+
languages: ["C", "CPP"],
|
|
1203
1347
|
parameters: []
|
|
1204
1348
|
},
|
|
1205
1349
|
{
|
|
@@ -1208,6 +1352,7 @@ var patterns_default = [
|
|
|
1208
1352
|
severityLevel: "Error",
|
|
1209
1353
|
title: "Avoid unsafe use of StrCatBuffA",
|
|
1210
1354
|
enabled: false,
|
|
1355
|
+
languages: ["C", "CPP"],
|
|
1211
1356
|
parameters: []
|
|
1212
1357
|
},
|
|
1213
1358
|
{
|
|
@@ -1216,6 +1361,7 @@ var patterns_default = [
|
|
|
1216
1361
|
severityLevel: "High",
|
|
1217
1362
|
title: "Avoid unsafe usage of StrCatBuffW",
|
|
1218
1363
|
enabled: false,
|
|
1364
|
+
languages: ["C", "CPP"],
|
|
1219
1365
|
parameters: []
|
|
1220
1366
|
},
|
|
1221
1367
|
{
|
|
@@ -1224,6 +1370,7 @@ var patterns_default = [
|
|
|
1224
1370
|
severityLevel: "High",
|
|
1225
1371
|
title: "Avoid Unsafe Use of StrCatChainW",
|
|
1226
1372
|
enabled: false,
|
|
1373
|
+
languages: ["C", "CPP"],
|
|
1227
1374
|
parameters: []
|
|
1228
1375
|
},
|
|
1229
1376
|
{
|
|
@@ -1232,6 +1379,7 @@ var patterns_default = [
|
|
|
1232
1379
|
severityLevel: "Error",
|
|
1233
1380
|
title: "Avoid unsafe use of StrCatN",
|
|
1234
1381
|
enabled: false,
|
|
1382
|
+
languages: ["C", "CPP"],
|
|
1235
1383
|
parameters: []
|
|
1236
1384
|
},
|
|
1237
1385
|
{
|
|
@@ -1240,6 +1388,7 @@ var patterns_default = [
|
|
|
1240
1388
|
severityLevel: "Error",
|
|
1241
1389
|
title: "Avoid unsafe use of StrCatNA",
|
|
1242
1390
|
enabled: false,
|
|
1391
|
+
languages: ["C", "CPP"],
|
|
1243
1392
|
parameters: []
|
|
1244
1393
|
},
|
|
1245
1394
|
{
|
|
@@ -1248,6 +1397,7 @@ var patterns_default = [
|
|
|
1248
1397
|
severityLevel: "High",
|
|
1249
1398
|
title: "Avoid unsafe use of StrCatNW",
|
|
1250
1399
|
enabled: false,
|
|
1400
|
+
languages: ["C", "CPP"],
|
|
1251
1401
|
parameters: []
|
|
1252
1402
|
},
|
|
1253
1403
|
{
|
|
@@ -1256,6 +1406,7 @@ var patterns_default = [
|
|
|
1256
1406
|
severityLevel: "Error",
|
|
1257
1407
|
title: "Avoid unsafe use of StrcatW",
|
|
1258
1408
|
enabled: false,
|
|
1409
|
+
languages: ["C", "CPP"],
|
|
1259
1410
|
parameters: []
|
|
1260
1411
|
},
|
|
1261
1412
|
{
|
|
@@ -1264,6 +1415,7 @@ var patterns_default = [
|
|
|
1264
1415
|
severityLevel: "High",
|
|
1265
1416
|
title: "Avoid unsafe use of strccpy",
|
|
1266
1417
|
enabled: true,
|
|
1418
|
+
languages: ["C", "CPP"],
|
|
1267
1419
|
parameters: []
|
|
1268
1420
|
},
|
|
1269
1421
|
{
|
|
@@ -1272,6 +1424,7 @@ var patterns_default = [
|
|
|
1272
1424
|
severityLevel: "Error",
|
|
1273
1425
|
title: "Avoid unsafe use of strcpy",
|
|
1274
1426
|
enabled: false,
|
|
1427
|
+
languages: ["C", "CPP"],
|
|
1275
1428
|
parameters: []
|
|
1276
1429
|
},
|
|
1277
1430
|
{
|
|
@@ -1280,6 +1433,7 @@ var patterns_default = [
|
|
|
1280
1433
|
severityLevel: "Error",
|
|
1281
1434
|
title: "Avoid Using strcpy to Prevent Buffer Overflows",
|
|
1282
1435
|
enabled: false,
|
|
1436
|
+
languages: ["C", "CPP"],
|
|
1283
1437
|
parameters: []
|
|
1284
1438
|
},
|
|
1285
1439
|
{
|
|
@@ -1288,6 +1442,7 @@ var patterns_default = [
|
|
|
1288
1442
|
severityLevel: "Error",
|
|
1289
1443
|
title: "Avoid unsafe strcpyA calls",
|
|
1290
1444
|
enabled: false,
|
|
1445
|
+
languages: ["C", "CPP"],
|
|
1291
1446
|
parameters: []
|
|
1292
1447
|
},
|
|
1293
1448
|
{
|
|
@@ -1296,6 +1451,7 @@ var patterns_default = [
|
|
|
1296
1451
|
severityLevel: "Error",
|
|
1297
1452
|
title: "Avoid unsafe use of StrCpyA calls",
|
|
1298
1453
|
enabled: false,
|
|
1454
|
+
languages: ["C", "CPP"],
|
|
1299
1455
|
parameters: []
|
|
1300
1456
|
},
|
|
1301
1457
|
{
|
|
@@ -1304,6 +1460,7 @@ var patterns_default = [
|
|
|
1304
1460
|
severityLevel: "High",
|
|
1305
1461
|
title: "Avoid unsafe StrCpyN calls",
|
|
1306
1462
|
enabled: false,
|
|
1463
|
+
languages: ["C", "CPP"],
|
|
1307
1464
|
parameters: []
|
|
1308
1465
|
},
|
|
1309
1466
|
{
|
|
@@ -1312,6 +1469,7 @@ var patterns_default = [
|
|
|
1312
1469
|
severityLevel: "Error",
|
|
1313
1470
|
title: "Avoid unsafe usage of strcpynA",
|
|
1314
1471
|
enabled: false,
|
|
1472
|
+
languages: ["C", "CPP"],
|
|
1315
1473
|
parameters: []
|
|
1316
1474
|
},
|
|
1317
1475
|
{
|
|
@@ -1320,6 +1478,7 @@ var patterns_default = [
|
|
|
1320
1478
|
severityLevel: "High",
|
|
1321
1479
|
title: "Avoid Unsafe Use of StrCpyNA",
|
|
1322
1480
|
enabled: false,
|
|
1481
|
+
languages: ["C", "CPP"],
|
|
1323
1482
|
parameters: []
|
|
1324
1483
|
},
|
|
1325
1484
|
{
|
|
@@ -1328,6 +1487,7 @@ var patterns_default = [
|
|
|
1328
1487
|
severityLevel: "High",
|
|
1329
1488
|
title: "Avoid Unsafe Use of StrCpyNW",
|
|
1330
1489
|
enabled: false,
|
|
1490
|
+
languages: ["C", "CPP"],
|
|
1331
1491
|
parameters: []
|
|
1332
1492
|
},
|
|
1333
1493
|
{
|
|
@@ -1336,6 +1496,7 @@ var patterns_default = [
|
|
|
1336
1496
|
severityLevel: "Error",
|
|
1337
1497
|
title: "Avoid unsafe strcpyW usage",
|
|
1338
1498
|
enabled: false,
|
|
1499
|
+
languages: ["C", "CPP"],
|
|
1339
1500
|
parameters: []
|
|
1340
1501
|
},
|
|
1341
1502
|
{
|
|
@@ -1344,6 +1505,7 @@ var patterns_default = [
|
|
|
1344
1505
|
severityLevel: "High",
|
|
1345
1506
|
title: "Avoid Using streadd Function",
|
|
1346
1507
|
enabled: false,
|
|
1508
|
+
languages: ["C", "CPP"],
|
|
1347
1509
|
parameters: []
|
|
1348
1510
|
},
|
|
1349
1511
|
{
|
|
@@ -1352,6 +1514,7 @@ var patterns_default = [
|
|
|
1352
1514
|
severityLevel: "High",
|
|
1353
1515
|
title: "Avoid Using strecpy Function",
|
|
1354
1516
|
enabled: false,
|
|
1517
|
+
languages: ["C", "CPP"],
|
|
1355
1518
|
parameters: []
|
|
1356
1519
|
},
|
|
1357
1520
|
{
|
|
@@ -1360,6 +1523,7 @@ var patterns_default = [
|
|
|
1360
1523
|
severityLevel: "High",
|
|
1361
1524
|
title: "Avoid using strfry for security-related randomness",
|
|
1362
1525
|
enabled: false,
|
|
1526
|
+
languages: ["C", "CPP"],
|
|
1363
1527
|
parameters: []
|
|
1364
1528
|
},
|
|
1365
1529
|
{
|
|
@@ -1368,6 +1532,7 @@ var patterns_default = [
|
|
|
1368
1532
|
severityLevel: "Error",
|
|
1369
1533
|
title: "Avoid unsafe usage of strlen on non-null-terminated strings",
|
|
1370
1534
|
enabled: true,
|
|
1535
|
+
languages: ["C", "CPP"],
|
|
1371
1536
|
parameters: []
|
|
1372
1537
|
},
|
|
1373
1538
|
{
|
|
@@ -1376,6 +1541,7 @@ var patterns_default = [
|
|
|
1376
1541
|
severityLevel: "High",
|
|
1377
1542
|
title: "Avoid Incorrect Use of strncat",
|
|
1378
1543
|
enabled: true,
|
|
1544
|
+
languages: ["C", "CPP"],
|
|
1379
1545
|
parameters: []
|
|
1380
1546
|
},
|
|
1381
1547
|
{
|
|
@@ -1384,6 +1550,7 @@ var patterns_default = [
|
|
|
1384
1550
|
severityLevel: "Error",
|
|
1385
1551
|
title: "Avoid unsafe strncat usage",
|
|
1386
1552
|
enabled: false,
|
|
1553
|
+
languages: ["C", "CPP"],
|
|
1387
1554
|
parameters: []
|
|
1388
1555
|
},
|
|
1389
1556
|
{
|
|
@@ -1392,6 +1559,7 @@ var patterns_default = [
|
|
|
1392
1559
|
severityLevel: "Error",
|
|
1393
1560
|
title: "Avoid Unsafe Use of StrNCatA",
|
|
1394
1561
|
enabled: false,
|
|
1562
|
+
languages: ["C", "CPP"],
|
|
1395
1563
|
parameters: []
|
|
1396
1564
|
},
|
|
1397
1565
|
{
|
|
@@ -1400,6 +1568,7 @@ var patterns_default = [
|
|
|
1400
1568
|
severityLevel: "High",
|
|
1401
1569
|
title: "Avoid unsafe StrNCatW calls",
|
|
1402
1570
|
enabled: false,
|
|
1571
|
+
languages: ["C", "CPP"],
|
|
1403
1572
|
parameters: []
|
|
1404
1573
|
},
|
|
1405
1574
|
{
|
|
@@ -1408,6 +1577,7 @@ var patterns_default = [
|
|
|
1408
1577
|
severityLevel: "Error",
|
|
1409
1578
|
title: "Avoid Incorrect Use of strncpy",
|
|
1410
1579
|
enabled: true,
|
|
1580
|
+
languages: ["C", "CPP"],
|
|
1411
1581
|
parameters: []
|
|
1412
1582
|
},
|
|
1413
1583
|
{
|
|
@@ -1416,6 +1586,7 @@ var patterns_default = [
|
|
|
1416
1586
|
severityLevel: "Error",
|
|
1417
1587
|
title: "Avoid unsafe usage of strncpy",
|
|
1418
1588
|
enabled: false,
|
|
1589
|
+
languages: ["C", "CPP"],
|
|
1419
1590
|
parameters: []
|
|
1420
1591
|
},
|
|
1421
1592
|
{
|
|
@@ -1424,6 +1595,7 @@ var patterns_default = [
|
|
|
1424
1595
|
severityLevel: "High",
|
|
1425
1596
|
title: "Avoid unsafe use of StrNCpyA calls",
|
|
1426
1597
|
enabled: false,
|
|
1598
|
+
languages: ["C", "CPP"],
|
|
1427
1599
|
parameters: []
|
|
1428
1600
|
},
|
|
1429
1601
|
{
|
|
@@ -1432,6 +1604,7 @@ var patterns_default = [
|
|
|
1432
1604
|
severityLevel: "Error",
|
|
1433
1605
|
title: "Avoid Unsafe Use of StrNCpyW",
|
|
1434
1606
|
enabled: false,
|
|
1607
|
+
languages: ["C", "CPP"],
|
|
1435
1608
|
parameters: []
|
|
1436
1609
|
},
|
|
1437
1610
|
{
|
|
@@ -1440,6 +1613,7 @@ var patterns_default = [
|
|
|
1440
1613
|
severityLevel: "High",
|
|
1441
1614
|
title: "Avoid Unsafe strtrns Calls",
|
|
1442
1615
|
enabled: false,
|
|
1616
|
+
languages: ["C", "CPP"],
|
|
1443
1617
|
parameters: []
|
|
1444
1618
|
},
|
|
1445
1619
|
{
|
|
@@ -1448,6 +1622,7 @@ var patterns_default = [
|
|
|
1448
1622
|
severityLevel: "High",
|
|
1449
1623
|
title: "Detect Potential Buffer Overflow in swprintf Calls",
|
|
1450
1624
|
enabled: false,
|
|
1625
|
+
languages: ["C", "CPP"],
|
|
1451
1626
|
parameters: []
|
|
1452
1627
|
},
|
|
1453
1628
|
{
|
|
@@ -1456,6 +1631,7 @@ var patterns_default = [
|
|
|
1456
1631
|
severityLevel: "Error",
|
|
1457
1632
|
title: "Avoid Untrusted Input in syslog Format Strings",
|
|
1458
1633
|
enabled: false,
|
|
1634
|
+
languages: ["C", "CPP"],
|
|
1459
1635
|
parameters: []
|
|
1460
1636
|
},
|
|
1461
1637
|
{
|
|
@@ -1464,6 +1640,7 @@ var patterns_default = [
|
|
|
1464
1640
|
severityLevel: "High",
|
|
1465
1641
|
title: "Avoid Using system() Calls",
|
|
1466
1642
|
enabled: false,
|
|
1643
|
+
languages: ["C", "CPP"],
|
|
1467
1644
|
parameters: []
|
|
1468
1645
|
},
|
|
1469
1646
|
{
|
|
@@ -1472,6 +1649,7 @@ var patterns_default = [
|
|
|
1472
1649
|
severityLevel: "High",
|
|
1473
1650
|
title: "Avoid unsafe use of _tccat calls",
|
|
1474
1651
|
enabled: false,
|
|
1652
|
+
languages: ["C", "CPP"],
|
|
1475
1653
|
parameters: []
|
|
1476
1654
|
},
|
|
1477
1655
|
{
|
|
@@ -1480,6 +1658,7 @@ var patterns_default = [
|
|
|
1480
1658
|
severityLevel: "High",
|
|
1481
1659
|
title: "Avoid using _tccpy to prevent buffer overflows",
|
|
1482
1660
|
enabled: false,
|
|
1661
|
+
languages: ["C", "CPP"],
|
|
1483
1662
|
parameters: []
|
|
1484
1663
|
},
|
|
1485
1664
|
{
|
|
@@ -1488,6 +1667,7 @@ var patterns_default = [
|
|
|
1488
1667
|
severityLevel: "High",
|
|
1489
1668
|
title: "Avoid Potential Security Problems in TCHAR Calls",
|
|
1490
1669
|
enabled: false,
|
|
1670
|
+
languages: ["C", "CPP"],
|
|
1491
1671
|
parameters: []
|
|
1492
1672
|
},
|
|
1493
1673
|
{
|
|
@@ -1496,6 +1676,7 @@ var patterns_default = [
|
|
|
1496
1676
|
severityLevel: "Error",
|
|
1497
1677
|
title: "Avoid unsafe use of _tcscat",
|
|
1498
1678
|
enabled: false,
|
|
1679
|
+
languages: ["C", "CPP"],
|
|
1499
1680
|
parameters: []
|
|
1500
1681
|
},
|
|
1501
1682
|
{
|
|
@@ -1504,6 +1685,7 @@ var patterns_default = [
|
|
|
1504
1685
|
severityLevel: "High",
|
|
1505
1686
|
title: "Avoid Unsafe _tcscpy Usage",
|
|
1506
1687
|
enabled: false,
|
|
1688
|
+
languages: ["C", "CPP"],
|
|
1507
1689
|
parameters: []
|
|
1508
1690
|
},
|
|
1509
1691
|
{
|
|
@@ -1512,6 +1694,7 @@ var patterns_default = [
|
|
|
1512
1694
|
severityLevel: "High",
|
|
1513
1695
|
title: "Avoid Unsafe Use of _tcslen",
|
|
1514
1696
|
enabled: true,
|
|
1697
|
+
languages: ["C", "CPP"],
|
|
1515
1698
|
parameters: []
|
|
1516
1699
|
},
|
|
1517
1700
|
{
|
|
@@ -1520,6 +1703,7 @@ var patterns_default = [
|
|
|
1520
1703
|
severityLevel: "High",
|
|
1521
1704
|
title: "Avoid Incorrect Usage of _tcsncat",
|
|
1522
1705
|
enabled: true,
|
|
1706
|
+
languages: ["C", "CPP"],
|
|
1523
1707
|
parameters: []
|
|
1524
1708
|
},
|
|
1525
1709
|
{
|
|
@@ -1528,6 +1712,7 @@ var patterns_default = [
|
|
|
1528
1712
|
severityLevel: "High",
|
|
1529
1713
|
title: "Avoid Incorrect Use of _tcsncpy",
|
|
1530
1714
|
enabled: true,
|
|
1715
|
+
languages: ["C", "CPP"],
|
|
1531
1716
|
parameters: []
|
|
1532
1717
|
},
|
|
1533
1718
|
{
|
|
@@ -1536,6 +1721,7 @@ var patterns_default = [
|
|
|
1536
1721
|
severityLevel: "High",
|
|
1537
1722
|
title: "Avoid Using tempnam for Temporary File Creation",
|
|
1538
1723
|
enabled: false,
|
|
1724
|
+
languages: ["C", "CPP"],
|
|
1539
1725
|
parameters: []
|
|
1540
1726
|
},
|
|
1541
1727
|
{
|
|
@@ -1544,6 +1730,7 @@ var patterns_default = [
|
|
|
1544
1730
|
severityLevel: "High",
|
|
1545
1731
|
title: "Avoid Using tmpfile() Function",
|
|
1546
1732
|
enabled: false,
|
|
1733
|
+
languages: ["C", "CPP"],
|
|
1547
1734
|
parameters: []
|
|
1548
1735
|
},
|
|
1549
1736
|
{
|
|
@@ -1552,6 +1739,7 @@ var patterns_default = [
|
|
|
1552
1739
|
severityLevel: "Error",
|
|
1553
1740
|
title: "Avoid Using tmpnam Function",
|
|
1554
1741
|
enabled: false,
|
|
1742
|
+
languages: ["C", "CPP"],
|
|
1555
1743
|
parameters: []
|
|
1556
1744
|
},
|
|
1557
1745
|
{
|
|
@@ -1560,6 +1748,7 @@ var patterns_default = [
|
|
|
1560
1748
|
severityLevel: "Error",
|
|
1561
1749
|
title: "Avoid unsafe usage of _tscanf with %s specifier",
|
|
1562
1750
|
enabled: false,
|
|
1751
|
+
languages: ["C", "CPP"],
|
|
1563
1752
|
parameters: []
|
|
1564
1753
|
},
|
|
1565
1754
|
{
|
|
@@ -1568,6 +1757,7 @@ var patterns_default = [
|
|
|
1568
1757
|
severityLevel: "High",
|
|
1569
1758
|
title: "Avoid Using Obsolete ulimit C Routine",
|
|
1570
1759
|
enabled: true,
|
|
1760
|
+
languages: ["C", "CPP"],
|
|
1571
1761
|
parameters: []
|
|
1572
1762
|
},
|
|
1573
1763
|
{
|
|
@@ -1576,6 +1766,7 @@ var patterns_default = [
|
|
|
1576
1766
|
severityLevel: "High",
|
|
1577
1767
|
title: "Enforce Restrictive umask Settings",
|
|
1578
1768
|
enabled: true,
|
|
1769
|
+
languages: ["C", "CPP"],
|
|
1579
1770
|
parameters: []
|
|
1580
1771
|
},
|
|
1581
1772
|
{
|
|
@@ -1584,6 +1775,7 @@ var patterns_default = [
|
|
|
1584
1775
|
severityLevel: "High",
|
|
1585
1776
|
title: "Avoid using usleep function",
|
|
1586
1777
|
enabled: true,
|
|
1778
|
+
languages: ["C", "CPP"],
|
|
1587
1779
|
parameters: []
|
|
1588
1780
|
},
|
|
1589
1781
|
{
|
|
@@ -1592,6 +1784,7 @@ var patterns_default = [
|
|
|
1592
1784
|
severityLevel: "High",
|
|
1593
1785
|
title: "Avoid Unsafe Use of vfork",
|
|
1594
1786
|
enabled: false,
|
|
1787
|
+
languages: ["C", "CPP"],
|
|
1595
1788
|
parameters: []
|
|
1596
1789
|
},
|
|
1597
1790
|
{
|
|
@@ -1600,6 +1793,7 @@ var patterns_default = [
|
|
|
1600
1793
|
severityLevel: "Error",
|
|
1601
1794
|
title: "Avoid Unsafe vfprintf Usage",
|
|
1602
1795
|
enabled: false,
|
|
1796
|
+
languages: ["C", "CPP"],
|
|
1603
1797
|
parameters: []
|
|
1604
1798
|
},
|
|
1605
1799
|
{
|
|
@@ -1608,6 +1802,7 @@ var patterns_default = [
|
|
|
1608
1802
|
severityLevel: "High",
|
|
1609
1803
|
title: "Avoid unsafe vfscanf %s usage without length limit",
|
|
1610
1804
|
enabled: false,
|
|
1805
|
+
languages: ["C", "CPP"],
|
|
1611
1806
|
parameters: []
|
|
1612
1807
|
},
|
|
1613
1808
|
{
|
|
@@ -1616,6 +1811,7 @@ var patterns_default = [
|
|
|
1616
1811
|
severityLevel: "Error",
|
|
1617
1812
|
title: "Avoid unsafe _vftprintf calls",
|
|
1618
1813
|
enabled: false,
|
|
1814
|
+
languages: ["C", "CPP"],
|
|
1619
1815
|
parameters: []
|
|
1620
1816
|
},
|
|
1621
1817
|
{
|
|
@@ -1624,6 +1820,7 @@ var patterns_default = [
|
|
|
1624
1820
|
severityLevel: "Error",
|
|
1625
1821
|
title: "Avoid unsafe vfwprintf usage",
|
|
1626
1822
|
enabled: false,
|
|
1823
|
+
languages: ["C", "CPP"],
|
|
1627
1824
|
parameters: []
|
|
1628
1825
|
},
|
|
1629
1826
|
{
|
|
@@ -1632,6 +1829,7 @@ var patterns_default = [
|
|
|
1632
1829
|
severityLevel: "Error",
|
|
1633
1830
|
title: "Avoid unsafe usage of vfwscanf with %s specifier",
|
|
1634
1831
|
enabled: false,
|
|
1832
|
+
languages: ["C", "CPP"],
|
|
1635
1833
|
parameters: []
|
|
1636
1834
|
},
|
|
1637
1835
|
{
|
|
@@ -1640,6 +1838,7 @@ var patterns_default = [
|
|
|
1640
1838
|
severityLevel: "Error",
|
|
1641
1839
|
title: "Avoid insecure use of vprintf format strings",
|
|
1642
1840
|
enabled: false,
|
|
1841
|
+
languages: ["C", "CPP"],
|
|
1643
1842
|
parameters: []
|
|
1644
1843
|
},
|
|
1645
1844
|
{
|
|
@@ -1648,6 +1847,7 @@ var patterns_default = [
|
|
|
1648
1847
|
severityLevel: "Error",
|
|
1649
1848
|
title: "Avoid Unsafe vscanf Usage",
|
|
1650
1849
|
enabled: false,
|
|
1850
|
+
languages: ["C", "CPP"],
|
|
1651
1851
|
parameters: []
|
|
1652
1852
|
},
|
|
1653
1853
|
{
|
|
@@ -1656,6 +1856,7 @@ var patterns_default = [
|
|
|
1656
1856
|
severityLevel: "High",
|
|
1657
1857
|
title: "Avoid insecure usage of vsnprintf",
|
|
1658
1858
|
enabled: false,
|
|
1859
|
+
languages: ["C", "CPP"],
|
|
1659
1860
|
parameters: []
|
|
1660
1861
|
},
|
|
1661
1862
|
{
|
|
@@ -1664,6 +1865,7 @@ var patterns_default = [
|
|
|
1664
1865
|
severityLevel: "High",
|
|
1665
1866
|
title: "Detect Potential Security Issues in _vsntprintf Calls",
|
|
1666
1867
|
enabled: false,
|
|
1868
|
+
languages: ["C", "CPP"],
|
|
1667
1869
|
parameters: []
|
|
1668
1870
|
},
|
|
1669
1871
|
{
|
|
@@ -1672,6 +1874,7 @@ var patterns_default = [
|
|
|
1672
1874
|
severityLevel: "Error",
|
|
1673
1875
|
title: "Avoid using vsprintf",
|
|
1674
1876
|
enabled: false,
|
|
1877
|
+
languages: ["C", "CPP"],
|
|
1675
1878
|
parameters: []
|
|
1676
1879
|
},
|
|
1677
1880
|
{
|
|
@@ -1680,6 +1883,7 @@ var patterns_default = [
|
|
|
1680
1883
|
severityLevel: "High",
|
|
1681
1884
|
title: "Avoid Unsafe vsscanf Usage",
|
|
1682
1885
|
enabled: false,
|
|
1886
|
+
languages: ["C", "CPP"],
|
|
1683
1887
|
parameters: []
|
|
1684
1888
|
},
|
|
1685
1889
|
{
|
|
@@ -1688,6 +1892,7 @@ var patterns_default = [
|
|
|
1688
1892
|
severityLevel: "Error",
|
|
1689
1893
|
title: "Avoid Unsafe _vstprintf Calls",
|
|
1690
1894
|
enabled: false,
|
|
1895
|
+
languages: ["C", "CPP"],
|
|
1691
1896
|
parameters: []
|
|
1692
1897
|
},
|
|
1693
1898
|
{
|
|
@@ -1696,6 +1901,7 @@ var patterns_default = [
|
|
|
1696
1901
|
severityLevel: "High",
|
|
1697
1902
|
title: "Avoid Unsafe vswprintf Usage",
|
|
1698
1903
|
enabled: false,
|
|
1904
|
+
languages: ["C", "CPP"],
|
|
1699
1905
|
parameters: []
|
|
1700
1906
|
},
|
|
1701
1907
|
{
|
|
@@ -1704,6 +1910,7 @@ var patterns_default = [
|
|
|
1704
1910
|
severityLevel: "High",
|
|
1705
1911
|
title: "Avoid unsafe use of vswscanf with %s specifier",
|
|
1706
1912
|
enabled: false,
|
|
1913
|
+
languages: ["C", "CPP"],
|
|
1707
1914
|
parameters: []
|
|
1708
1915
|
},
|
|
1709
1916
|
{
|
|
@@ -1712,6 +1919,7 @@ var patterns_default = [
|
|
|
1712
1919
|
severityLevel: "Error",
|
|
1713
1920
|
title: "Avoid Unsafe Use of _vtprintf Calls",
|
|
1714
1921
|
enabled: false,
|
|
1922
|
+
languages: ["C", "CPP"],
|
|
1715
1923
|
parameters: []
|
|
1716
1924
|
},
|
|
1717
1925
|
{
|
|
@@ -1720,6 +1928,7 @@ var patterns_default = [
|
|
|
1720
1928
|
severityLevel: "High",
|
|
1721
1929
|
title: "Avoid Unsafe vwprintf Calls",
|
|
1722
1930
|
enabled: false,
|
|
1931
|
+
languages: ["C", "CPP"],
|
|
1723
1932
|
parameters: []
|
|
1724
1933
|
},
|
|
1725
1934
|
{
|
|
@@ -1728,6 +1937,7 @@ var patterns_default = [
|
|
|
1728
1937
|
severityLevel: "Error",
|
|
1729
1938
|
title: "Avoid unsafe vwscanf calls without length limit",
|
|
1730
1939
|
enabled: false,
|
|
1940
|
+
languages: ["C", "CPP"],
|
|
1731
1941
|
parameters: []
|
|
1732
1942
|
},
|
|
1733
1943
|
{
|
|
@@ -1736,6 +1946,7 @@ var patterns_default = [
|
|
|
1736
1946
|
severityLevel: "High",
|
|
1737
1947
|
title: "Avoid Unsafe Usage of wchar_t Arrays",
|
|
1738
1948
|
enabled: false,
|
|
1949
|
+
languages: ["C", "CPP"],
|
|
1739
1950
|
parameters: []
|
|
1740
1951
|
},
|
|
1741
1952
|
{
|
|
@@ -1744,6 +1955,7 @@ var patterns_default = [
|
|
|
1744
1955
|
severityLevel: "Error",
|
|
1745
1956
|
title: "Avoid Unsafe Use of wcscat",
|
|
1746
1957
|
enabled: false,
|
|
1958
|
+
languages: ["C", "CPP"],
|
|
1747
1959
|
parameters: []
|
|
1748
1960
|
},
|
|
1749
1961
|
{
|
|
@@ -1752,6 +1964,7 @@ var patterns_default = [
|
|
|
1752
1964
|
severityLevel: "Error",
|
|
1753
1965
|
title: "Avoid unsafe use of wcscpy",
|
|
1754
1966
|
enabled: false,
|
|
1967
|
+
languages: ["C", "CPP"],
|
|
1755
1968
|
parameters: []
|
|
1756
1969
|
},
|
|
1757
1970
|
{
|
|
@@ -1760,6 +1973,7 @@ var patterns_default = [
|
|
|
1760
1973
|
severityLevel: "High",
|
|
1761
1974
|
title: "Avoid unsafe wcslen calls",
|
|
1762
1975
|
enabled: true,
|
|
1976
|
+
languages: ["C", "CPP"],
|
|
1763
1977
|
parameters: []
|
|
1764
1978
|
},
|
|
1765
1979
|
{
|
|
@@ -1768,6 +1982,7 @@ var patterns_default = [
|
|
|
1768
1982
|
severityLevel: "Error",
|
|
1769
1983
|
title: "Avoid Incorrect Use of wcsncat",
|
|
1770
1984
|
enabled: true,
|
|
1985
|
+
languages: ["C", "CPP"],
|
|
1771
1986
|
parameters: []
|
|
1772
1987
|
},
|
|
1773
1988
|
{
|
|
@@ -1776,6 +1991,7 @@ var patterns_default = [
|
|
|
1776
1991
|
severityLevel: "High",
|
|
1777
1992
|
title: "Avoid Incorrect Usage of wcsncpy",
|
|
1778
1993
|
enabled: true,
|
|
1994
|
+
languages: ["C", "CPP"],
|
|
1779
1995
|
parameters: []
|
|
1780
1996
|
},
|
|
1781
1997
|
{
|
|
@@ -1784,6 +2000,7 @@ var patterns_default = [
|
|
|
1784
2000
|
severityLevel: "High",
|
|
1785
2001
|
title: "Avoid Unsafe Use of WinExec",
|
|
1786
2002
|
enabled: false,
|
|
2003
|
+
languages: ["C", "CPP"],
|
|
1787
2004
|
parameters: []
|
|
1788
2005
|
},
|
|
1789
2006
|
{
|
|
@@ -1792,6 +2009,7 @@ var patterns_default = [
|
|
|
1792
2009
|
severityLevel: "Error",
|
|
1793
2010
|
title: "Avoid unsafe wprintf usage",
|
|
1794
2011
|
enabled: false,
|
|
2012
|
+
languages: ["C", "CPP"],
|
|
1795
2013
|
parameters: []
|
|
1796
2014
|
},
|
|
1797
2015
|
{
|
|
@@ -1800,6 +2018,7 @@ var patterns_default = [
|
|
|
1800
2018
|
severityLevel: "High",
|
|
1801
2019
|
title: "Avoid unsafe usage of wscanf with %s specifier",
|
|
1802
2020
|
enabled: false,
|
|
2021
|
+
languages: ["C", "CPP"],
|
|
1803
2022
|
parameters: []
|
|
1804
2023
|
},
|
|
1805
2024
|
{
|
|
@@ -1808,6 +2027,7 @@ var patterns_default = [
|
|
|
1808
2027
|
severityLevel: "High",
|
|
1809
2028
|
title: "Avoid unchecked use of _wtoi",
|
|
1810
2029
|
enabled: false,
|
|
2030
|
+
languages: ["C", "CPP"],
|
|
1811
2031
|
parameters: []
|
|
1812
2032
|
},
|
|
1813
2033
|
{
|
|
@@ -1816,10 +2036,23 @@ var patterns_default = [
|
|
|
1816
2036
|
severityLevel: "High",
|
|
1817
2037
|
title: "Avoid unchecked use of _wtoi64",
|
|
1818
2038
|
enabled: false,
|
|
2039
|
+
languages: ["C", "CPP"],
|
|
1819
2040
|
parameters: []
|
|
1820
2041
|
}
|
|
1821
2042
|
];
|
|
1822
2043
|
|
|
2044
|
+
// src/metadata.ts
|
|
2045
|
+
var descriptor = {
|
|
2046
|
+
id: "flawfinder",
|
|
2047
|
+
displayName: "Flawfinder",
|
|
2048
|
+
preferredVersion: "2.0.19",
|
|
2049
|
+
languages: ["C", "CPP"],
|
|
2050
|
+
filePatterns: ["**/*.c", "**/*.h", "**/*.cpp", "**/*.cc", "**/*.cxx", "**/*.hpp"],
|
|
2051
|
+
supportedOS: ["linux", "darwin"],
|
|
2052
|
+
supportedArch: ["x64", "arm64"],
|
|
2053
|
+
supportedRunners: ["local", "container"]
|
|
2054
|
+
};
|
|
2055
|
+
|
|
1823
2056
|
// src/adapter.ts
|
|
1824
2057
|
var TOOL_ID = "flawfinder";
|
|
1825
2058
|
var PIP_PACKAGE = "flawfinder==2.0.19";
|
|
@@ -1841,37 +2074,6 @@ function extractFunctionName(ruleName) {
|
|
|
1841
2074
|
const slashIdx = ruleName.lastIndexOf("/");
|
|
1842
2075
|
return slashIdx >= 0 ? ruleName.slice(slashIdx + 1) : ruleName;
|
|
1843
2076
|
}
|
|
1844
|
-
function getLineContent(lines, lineNumber) {
|
|
1845
|
-
return lines[lineNumber - 1] ?? "";
|
|
1846
|
-
}
|
|
1847
|
-
async function readFileLines(filePath) {
|
|
1848
|
-
try {
|
|
1849
|
-
const content = await import_promises.default.readFile(filePath, "utf-8");
|
|
1850
|
-
return content.split("\n");
|
|
1851
|
-
} catch {
|
|
1852
|
-
return [];
|
|
1853
|
-
}
|
|
1854
|
-
}
|
|
1855
|
-
function buildResult(startedAt, completedAt, issues, errors, filesAnalyzed) {
|
|
1856
|
-
const durationMs = completedAt.getTime() - startedAt.getTime();
|
|
1857
|
-
return {
|
|
1858
|
-
metadata: {
|
|
1859
|
-
startedAt: startedAt.toISOString(),
|
|
1860
|
-
completedAt: completedAt.toISOString(),
|
|
1861
|
-
durationMs
|
|
1862
|
-
},
|
|
1863
|
-
issues,
|
|
1864
|
-
errors,
|
|
1865
|
-
summary: {
|
|
1866
|
-
toolId: TOOL_ID,
|
|
1867
|
-
status: errors.some((e) => e.level === "error") ? "partial" : "success",
|
|
1868
|
-
issueCount: issues.length,
|
|
1869
|
-
errorCount: errors.length,
|
|
1870
|
-
durationMs,
|
|
1871
|
-
filesAnalyzed
|
|
1872
|
-
}
|
|
1873
|
-
};
|
|
1874
|
-
}
|
|
1875
2077
|
async function getVersionFromBinary(binaryPath) {
|
|
1876
2078
|
try {
|
|
1877
2079
|
const { stdout, stderr, exitCode } = await (0, import_tooling.spawnTool)(binaryPath, ["--version"], {
|
|
@@ -1893,16 +2095,9 @@ async function resolveBinaryPath(ctx) {
|
|
|
1893
2095
|
return BINARY;
|
|
1894
2096
|
}
|
|
1895
2097
|
var adapter = {
|
|
1896
|
-
|
|
1897
|
-
displayName: "Flawfinder",
|
|
1898
|
-
preferredVersion: "2.0.19",
|
|
2098
|
+
...descriptor,
|
|
1899
2099
|
compatibleVersions: ">=2.0.0",
|
|
1900
2100
|
website: "https://dwheeler.com/flawfinder/",
|
|
1901
|
-
languages: ["C", "CPP"],
|
|
1902
|
-
filePatterns: ["**/*.c", "**/*.h", "**/*.cpp", "**/*.cc", "**/*.cxx", "**/*.hpp"],
|
|
1903
|
-
supportedOS: ["linux", "darwin"],
|
|
1904
|
-
supportedArch: ["x64", "arm64"],
|
|
1905
|
-
supportedRunners: ["local", "container"],
|
|
1906
2101
|
prerequisites: [
|
|
1907
2102
|
{
|
|
1908
2103
|
name: "Python",
|
|
@@ -2065,13 +2260,7 @@ var adapter = {
|
|
|
2065
2260
|
const issues = [];
|
|
2066
2261
|
const errors = [];
|
|
2067
2262
|
if (ctx.targetFiles.length === 0) {
|
|
2068
|
-
return buildResult(startedAt, /* @__PURE__ */ new Date(), issues, errors, 0);
|
|
2069
|
-
}
|
|
2070
|
-
if (!(codacyConfig.useLocalConfigurationFile && codacyConfig.localConfigurationFile) && codacyConfig.patterns.length === 0) {
|
|
2071
|
-
ctx.logger.info("Skipping analysis: no local config and no patterns enabled", {
|
|
2072
|
-
toolId: TOOL_ID
|
|
2073
|
-
});
|
|
2074
|
-
return buildResult(startedAt, /* @__PURE__ */ new Date(), issues, errors, ctx.targetFiles.length);
|
|
2263
|
+
return (0, import_tooling.buildResult)(TOOL_ID, startedAt, /* @__PURE__ */ new Date(), issues, errors, 0);
|
|
2075
2264
|
}
|
|
2076
2265
|
const binary = await resolveBinaryPath(ctx);
|
|
2077
2266
|
const absoluteFiles = ctx.targetFiles.map((f) => import_path.default.resolve(ctx.repositoryRoot, f));
|
|
@@ -2089,10 +2278,10 @@ var adapter = {
|
|
|
2089
2278
|
message: `flawfinder exited with code ${exitCode}${stderr ? `: ${stderr.trim()}` : ""}`,
|
|
2090
2279
|
level: "error"
|
|
2091
2280
|
});
|
|
2092
|
-
return buildResult(startedAt, /* @__PURE__ */ new Date(), issues, errors, ctx.targetFiles.length);
|
|
2281
|
+
return (0, import_tooling.buildResult)(TOOL_ID, startedAt, /* @__PURE__ */ new Date(), issues, errors, ctx.targetFiles.length);
|
|
2093
2282
|
}
|
|
2094
2283
|
if (!stdout.trim()) {
|
|
2095
|
-
return buildResult(startedAt, /* @__PURE__ */ new Date(), issues, errors, ctx.targetFiles.length);
|
|
2284
|
+
return (0, import_tooling.buildResult)(TOOL_ID, startedAt, /* @__PURE__ */ new Date(), issues, errors, ctx.targetFiles.length);
|
|
2096
2285
|
}
|
|
2097
2286
|
let sarif;
|
|
2098
2287
|
try {
|
|
@@ -2105,7 +2294,7 @@ var adapter = {
|
|
|
2105
2294
|
message: `Failed to parse flawfinder SARIF output: ${err instanceof Error ? err.message : String(err)}`,
|
|
2106
2295
|
level: "error"
|
|
2107
2296
|
});
|
|
2108
|
-
return buildResult(startedAt, /* @__PURE__ */ new Date(), issues, errors, ctx.targetFiles.length);
|
|
2297
|
+
return (0, import_tooling.buildResult)(TOOL_ID, startedAt, /* @__PURE__ */ new Date(), issues, errors, ctx.targetFiles.length);
|
|
2109
2298
|
}
|
|
2110
2299
|
const run = sarif.runs?.[0];
|
|
2111
2300
|
const results = run?.results ?? [];
|
|
@@ -2131,7 +2320,7 @@ var adapter = {
|
|
|
2131
2320
|
resultsByFile.set(absoluteFilePath, list);
|
|
2132
2321
|
}
|
|
2133
2322
|
for (const [absoluteFilePath, fileResults] of resultsByFile) {
|
|
2134
|
-
const lines = await readFileLines(absoluteFilePath);
|
|
2323
|
+
const lines = await (0, import_tooling.readFileLines)(absoluteFilePath);
|
|
2135
2324
|
const relPath = import_path.default.relative(ctx.repositoryRoot, absoluteFilePath);
|
|
2136
2325
|
for (const { result: result2, functionName, line, column } of fileResults) {
|
|
2137
2326
|
const patternId = (0, import_tooling.buildPatternId)(TOOL_ID, functionName);
|
|
@@ -2146,7 +2335,7 @@ var adapter = {
|
|
|
2146
2335
|
line,
|
|
2147
2336
|
column,
|
|
2148
2337
|
message: result2.message.text,
|
|
2149
|
-
lineContent: getLineContent(lines, line),
|
|
2338
|
+
lineContent: (0, import_tooling.getLineContent)(lines, line),
|
|
2150
2339
|
category: meta.category,
|
|
2151
2340
|
severity: meta.severity
|
|
2152
2341
|
});
|
|
@@ -2170,7 +2359,14 @@ var adapter = {
|
|
|
2170
2359
|
level: "error"
|
|
2171
2360
|
});
|
|
2172
2361
|
}
|
|
2173
|
-
const result =
|
|
2362
|
+
const result = (0, import_tooling.buildResult)(
|
|
2363
|
+
TOOL_ID,
|
|
2364
|
+
startedAt,
|
|
2365
|
+
/* @__PURE__ */ new Date(),
|
|
2366
|
+
issues,
|
|
2367
|
+
errors,
|
|
2368
|
+
ctx.targetFiles.length
|
|
2369
|
+
);
|
|
2174
2370
|
ctx.logger.info("Analysis complete", {
|
|
2175
2371
|
toolId: TOOL_ID,
|
|
2176
2372
|
issueCount: result.summary.issueCount,
|