Skip to content

Refs/heads/master ci move around - #1

Open
hummeltech wants to merge 10 commits into
masterfrom
master-CI-MoveAround
Open

Refs/heads/master ci move around#1
hummeltech wants to merge 10 commits into
masterfrom
master-CI-MoveAround

Organizing

a1ec017
Select commit
Loading
Failed to load commit list.
GitHub Advanced Security / Flawfinder failed Mar 29, 2026 in 5s

8 new alerts including 1 error

New alerts in code changed by this pull request

  • 1 error
  • 7 notes

See annotations below for details.

View all branch alerts.

Annotations

Check failure on line 125 in src/renderd.c

See this annotation in the file changed.

Code scanning / Flawfinder

Does not check for buffer overflows when copying to destination [MS-banned] (CWE-120). Error

buffer/strcpy:Does not check for buffer overflows when copying to destination [MS-banned] (CWE-120).

Check notice on line 1177 in src/mod_tile.c

See this annotation in the file changed.

Code scanning / Flawfinder

Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). Note

buffer/strlen:Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126).

Check notice on line 1189 in src/mod_tile.c

See this annotation in the file changed.

Code scanning / Flawfinder

Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). Note

buffer/strlen:Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126).

Check notice on line 86 in src/protocol_helper.c

See this annotation in the file changed.

Code scanning / Flawfinder

Function accepts input from outside program (CWE-20). Note

input/recv:Function accepts input from outside program (CWE-20).

Check notice on line 90 in src/protocol_helper.c

See this annotation in the file changed.

Code scanning / Flawfinder

Function accepts input from outside program (CWE-20). Note

input/recv:Function accepts input from outside program (CWE-20).

Check notice on line 314 in src/renderd.c

See this annotation in the file changed.

Code scanning / Flawfinder

If format strings can be influenced by an attacker, they can be exploited, and note that sprintf variations do not always \0-terminate (CWE-134). Note

format/snprintf:If format strings can be influenced by an attacker, they can be exploited, and note that sprintf variations do not always \0-terminate (CWE-134).

Check notice on line 858 in src/renderd.c

See this annotation in the file changed.

Code scanning / Flawfinder

Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). Note

misc/fopen:Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362).

Check notice on line 221 in src/store_file.c

See this annotation in the file changed.

Code scanning / Flawfinder

Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). Note

buffer/strlen:Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126).