Newly introduced findings

List of Findings

Error: COMPILER_WARNING (CWE-681): [#def1]
389-ds-base-3.3.0.202607290918gitcbf7ae78f/ldap/servers/slapd/back-ldbm/ldbm_attrcrypt.c: scope_hint: In function '_back_crypt_crypto_op'
389-ds-base-3.3.0.202607290918gitcbf7ae78f/ldap/servers/slapd/back-ldbm/ldbm_attrcrypt.c:1624:22: warning[-Wpointer-sign]: pointer targets in assignment from 'char *' to 'unsigned char *' differ in signedness
# 1624 |         iv_item.data = ai->ai_attrcrypt->iv->bv_val;
#      |                      ^
# 1622|       iv_item.len = acs->ace->iv_length;           /* length of the array of IV bytes */
# 1623|       if (ai && ai->ai_attrcrypt && ai->ai_attrcrypt->iv) {
# 1624|->         iv_item.data = ai->ai_attrcrypt->iv->bv_val;
# 1625|           if (ai->ai_attrcrypt->iv->bv_len < iv_item.len) {
# 1626|               iv_item.len = ai->ai_attrcrypt->iv->bv_len;

Error: COMPILER_WARNING: [#def2]
389-ds-base-3.3.0.202607290918gitcbf7ae78f/ldap/servers/slapd/csngen.h:20: included_from: Included from here.
389-ds-base-3.3.0.202607290918gitcbf7ae78f/ldap/servers/slapd/slap.h:137: included_from: Included from here.
389-ds-base-3.3.0.202607290918gitcbf7ae78f/ldap/servers/slapd/back-ldbm/back-ldbm.h:78: included_from: Included from here.
389-ds-base-3.3.0.202607290918gitcbf7ae78f/ldap/servers/slapd/back-ldbm/ldbm_attrcrypt.c:16: included_from: Included from here.
389-ds-base-3.3.0.202607290918gitcbf7ae78f/ldap/servers/slapd/back-ldbm/ldbm_attrcrypt.c:1628:27: warning[-Wformat=]: format '%u' expects argument of type 'unsigned int', but argument 5 has type 'ber_len_t' {aka 'long unsigned int'}
# 1628 |                           "Encryption Initialization Vector for attribute %s is too small: %ul/%d\n",
#      |                           ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
# 1629 |                           ai->ai_type, ai->ai_attrcrypt->iv->bv_len, acs->ace->iv_length);
#      |                                        ~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#      |                                                            |
#      |                                                            ber_len_t {aka long unsigned int}
389-ds-base-3.3.0.202607290918gitcbf7ae78f/ldap/servers/slapd/slapi-private.h:44:80: note: in definition of macro 'slapi_log_err'
#   44 | #define slapi_log_err(level, subsystem, ...) slapi_log_error(level, subsystem, __VA_ARGS__)
#      |                                                                                ^~~~~~~~~~~
389-ds-base-3.3.0.202607290918gitcbf7ae78f/ldap/servers/slapd/back-ldbm/ldbm_attrcrypt.c:1628:93: note: format string is defined here
# 1628 |                           "Encryption Initialization Vector for attribute %s is too small: %ul/%d\n",
#      |                                                                                            ~^
#      |                                                                                             |
#      |                                                                                             unsigned int
#      |                                                                                            %lu
# 1626|               iv_item.len = ai->ai_attrcrypt->iv->bv_len;
# 1627|               slapi_log_err(SLAPI_LOG_WARNING, "_back_crypt_crypto_op",
# 1628|->                           "Encryption Initialization Vector for attribute %s is too small: %ul/%d\n",
# 1629|                             ai->ai_type, ai->ai_attrcrypt->iv->bv_len, acs->ace->iv_length);
# 1630|           }

Error: COMPILER_WARNING (CWE-704): [#def3]
389-ds-base-3.3.0.202607290918gitcbf7ae78f/ldap/servers/slapd/back-ldbm/ldbm_attrcrypt_config.c: scope_hint: In function 'ldbm_instance_attrcrypt_init_iv'
389-ds-base-3.3.0.202607290918gitcbf7ae78f/ldap/servers/slapd/back-ldbm/ldbm_attrcrypt_config.c:151:8: warning[-Wdiscarded-qualifiers]: assignment discards 'const' qualifier from pointer target type
#  149|       slapi_entry_attr_find(e, IV_ATTRIBUTE_NAME, &attr);
#  150|       slapi_attr_first_value(attr, &sval);
#  151|->     bv = slapi_value_get_berval(sval);
#  152|   
#  153|       if (bv) {

Scan Properties