Task #118741 - added.err

back to task #118741
download 
Error: GCC_ANALYZER_WARNING (CWE-823):
cracklib-2.10.3/lib/packlib.c:507:16: warning[-Wanalyzer-tainted-offset]: use of attacker-controlled value as offset without upper-bounds checking
cracklib-2.10.3/lib/packlib.c:442:8: branch_false: following 'false' branch...
cracklib-2.10.3/lib/packlib.c:448:10: branch_false: ...to here
cracklib-2.10.3/lib/packlib.c:448:8: branch_false: following 'false' branch...
cracklib-2.10.3/lib/packlib.c:459:9: branch_false: ...to here
cracklib-2.10.3/lib/packlib.c:470:8: branch_false: following 'false' branch...
cracklib-2.10.3/lib/packlib.c:477:5: branch_false: ...to here
cracklib-2.10.3/lib/packlib.c:479:8: branch_false: following 'false' branch...
cracklib-2.10.3/lib/packlib.c:487:46: branch_false: ...to here
cracklib-2.10.3/lib/packlib.c:489:8: branch_false: following 'false' branch (when 'r != 0')...
cracklib-2.10.3/lib/packlib.c:497:10: branch_false: ...to here
cracklib-2.10.3/lib/packlib.c:497:35: branch_false: following 'false' branch...
cracklib-2.10.3/lib/packlib.c:497:35: branch_false: ...to here
cracklib-2.10.3/lib/packlib.c:501:17: branch_true: following 'true' branch (when 'i != 16')...
cracklib-2.10.3/lib/packlib.c:503:9: branch_true: ...to here
cracklib-2.10.3/lib/packlib.c:507:16: branch_true: following 'true' branch...
cracklib-2.10.3/lib/packlib.c:507:16: branch_true: ...to here
cracklib-2.10.3/lib/packlib.c:507:16: danger: use of attacker-controlled value as offset without upper-bounds checking
#  505|   
#  506|           ostr = nstr + *(bptr++);
#  507|->         while ((*(ostr++) = *(bptr++)));
#  508|   
#  509|           ostr = nstr;