blob: 2184fbe5ed6213f1d9f44c802e32957011eafbce [file] [log] [blame]
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>clang_version</key>
<string>clang version 3.9.0 (trunk 258573)</string>
<key>diagnostics</key>
<array>
<dict>
<key>HTMLDiagnostics_files</key>
<array>
<string>report-680a14.html</string>
</array>
<key>category</key>
<string>Security</string>
<key>check_name</key>
<string>security.insecureAPI.strcpy</string>
<key>description</key>
<string>Call to function 'strcpy' is insecure as it does not provide bounding of the memory buffer. Replace unbounded copy functions with analogous functions that support length arguments such as 'strlcpy'. CWE-119</string>
<key>issue_context</key>
<string>TS_check_status_info</string>
<key>issue_context_kind</key>
<string>function</string>
<key>issue_hash_content_of_line_in_context</key>
<string>91cadc75de7a29a1ba394cf1e08888a8</string>
<key>issue_hash_function_offset</key>
<string>30</string>
<key>location</key>
<dict>
<key>col</key>
<integer>21</integer>
<key>file</key>
<integer>0</integer>
<key>line</key>
<integer>525</integer>
</dict>
<key>path</key>
<array>
<dict>
<key>depth</key>
<integer>0</integer>
<key>extended_message</key>
<string>Call to function 'strcpy' is insecure as it does not provide bounding of the memory buffer. Replace unbounded copy functions with analogous functions that support length arguments such as 'strlcpy'. CWE-119</string>
<key>kind</key>
<string>event</string>
<key>location</key>
<dict>
<key>col</key>
<integer>21</integer>
<key>file</key>
<integer>0</integer>
<key>line</key>
<integer>525</integer>
</dict>
<key>message</key>
<string>Call to function 'strcpy' is insecure as it does not provide bounding of the memory buffer. Replace unbounded copy functions with analogous functions that support length arguments such as 'strlcpy'. CWE-119</string>
<key>ranges</key>
<array>
<array>
<dict>
<key>col</key>
<integer>21</integer>
<key>file</key>
<integer>0</integer>
<key>line</key>
<integer>525</integer>
</dict>
<dict>
<key>col</key>
<integer>45</integer>
<key>file</key>
<integer>0</integer>
<key>line</key>
<integer>525</integer>
</dict>
</array>
</array>
</dict>
</array>
<key>type</key>
<string>Potential insecure memory buffer bounds restriction in call 'strcpy'</string>
</dict>
<dict>
<key>HTMLDiagnostics_files</key>
<array>
<string>report-054584.html</string>
</array>
<key>category</key>
<string>Security</string>
<key>check_name</key>
<string>security.insecureAPI.strcpy</string>
<key>description</key>
<string>Call to function 'strcat' is insecure as it does not provide bounding of the memory buffer. Replace unbounded copy functions with analogous functions that support length arguments such as 'strlcat'. CWE-119</string>
<key>issue_context</key>
<string>TS_check_status_info</string>
<key>issue_context_kind</key>
<string>function</string>
<key>issue_hash_content_of_line_in_context</key>
<string>1ab8c644bcfdf4acaba6eb93f6bbf5ad</string>
<key>issue_hash_function_offset</key>
<string>33</string>
<key>location</key>
<dict>
<key>col</key>
<integer>17</integer>
<key>file</key>
<integer>0</integer>
<key>line</key>
<integer>528</integer>
</dict>
<key>path</key>
<array>
<dict>
<key>depth</key>
<integer>0</integer>
<key>extended_message</key>
<string>Call to function 'strcat' is insecure as it does not provide bounding of the memory buffer. Replace unbounded copy functions with analogous functions that support length arguments such as 'strlcat'. CWE-119</string>
<key>kind</key>
<string>event</string>
<key>location</key>
<dict>
<key>col</key>
<integer>17</integer>
<key>file</key>
<integer>0</integer>
<key>line</key>
<integer>528</integer>
</dict>
<key>message</key>
<string>Call to function 'strcat' is insecure as it does not provide bounding of the memory buffer. Replace unbounded copy functions with analogous functions that support length arguments such as 'strlcat'. CWE-119</string>
<key>ranges</key>
<array>
<array>
<dict>
<key>col</key>
<integer>17</integer>
<key>file</key>
<integer>0</integer>
<key>line</key>
<integer>528</integer>
</dict>
<dict>
<key>col</key>
<integer>61</integer>
<key>file</key>
<integer>0</integer>
<key>line</key>
<integer>528</integer>
</dict>
</array>
</array>
</dict>
</array>
<key>type</key>
<string>Potential insecure memory buffer bounds restriction in call 'strcat'</string>
</dict>
<dict>
<key>HTMLDiagnostics_files</key>
<array>
<string>report-b46bd2.html</string>
</array>
<key>category</key>
<string>Security</string>
<key>check_name</key>
<string>security.insecureAPI.strcpy</string>
<key>description</key>
<string>Call to function 'strcpy' is insecure as it does not provide bounding of the memory buffer. Replace unbounded copy functions with analogous functions that support length arguments such as 'strlcpy'. CWE-119</string>
<key>issue_context</key>
<string>TS_check_status_info</string>
<key>issue_context_kind</key>
<string>function</string>
<key>issue_hash_content_of_line_in_context</key>
<string>c528fd387b04d2b2450cd893c008bba2</string>
<key>issue_hash_function_offset</key>
<string>38</string>
<key>location</key>
<dict>
<key>col</key>
<integer>9</integer>
<key>file</key>
<integer>0</integer>
<key>line</key>
<integer>533</integer>
</dict>
<key>path</key>
<array>
<dict>
<key>depth</key>
<integer>0</integer>
<key>extended_message</key>
<string>Call to function 'strcpy' is insecure as it does not provide bounding of the memory buffer. Replace unbounded copy functions with analogous functions that support length arguments such as 'strlcpy'. CWE-119</string>
<key>kind</key>
<string>event</string>
<key>location</key>
<dict>
<key>col</key>
<integer>9</integer>
<key>file</key>
<integer>0</integer>
<key>line</key>
<integer>533</integer>
</dict>
<key>message</key>
<string>Call to function 'strcpy' is insecure as it does not provide bounding of the memory buffer. Replace unbounded copy functions with analogous functions that support length arguments such as 'strlcpy'. CWE-119</string>
<key>ranges</key>
<array>
<array>
<dict>
<key>col</key>
<integer>9</integer>
<key>file</key>
<integer>0</integer>
<key>line</key>
<integer>533</integer>
</dict>
<dict>
<key>col</key>
<integer>43</integer>
<key>file</key>
<integer>0</integer>
<key>line</key>
<integer>533</integer>
</dict>
</array>
</array>
</dict>
</array>
<key>type</key>
<string>Potential insecure memory buffer bounds restriction in call 'strcpy'</string>
</dict>
<dict>
<key>HTMLDiagnostics_files</key>
<array>
<string>report-f43065.html</string>
</array>
<key>category</key>
<string>Logic error</string>
<key>check_name</key>
<string>core.NullDereference</string>
<key>description</key>
<string>Access to field 'cert_info' results in a dereference of a null pointer (loaded from variable 'signer')</string>
<key>issue_context</key>
<string>TS_check_signer_name</string>
<key>issue_context_kind</key>
<string>function</string>
<key>issue_hash_content_of_line_in_context</key>
<string>2974577f3bcf92f9b68abf65576a860d</string>
<key>issue_hash_function_offset</key>
<string>7</string>
<key>location</key>
<dict>
<key>col</key>
<integer>12</integer>
<key>file</key>
<integer>0</integer>
<key>line</key>
<integer>703</integer>
</dict>
<key>path</key>
<array>
<dict>
<key>edges</key>
<array>
<dict>
<key>end</key>
<array>
<dict>
<key>col</key>
<integer>5</integer>
<key>file</key>
<integer>0</integer>
<key>line</key>
<integer>408</integer>
</dict>
<dict>
<key>col</key>
<integer>6</integer>
<key>file</key>
<integer>0</integer>
<key>line</key>
<integer>408</integer>
</dict>
</array>
<key>start</key>
<array>
<dict>
<key>col</key>
<integer>5</integer>
<key>file</key>
<integer>0</integer>
<key>line</key>
<integer>406</integer>
</dict>
<dict>
<key>col</key>
<integer>15</integer>
<key>file</key>
<integer>0</integer>
<key>line</key>
<integer>406</integer>
</dict>
</array>
</dict>
</array>
<key>kind</key>
<string>control</string>
</dict>
<dict>
<key>edges</key>
<array>
<dict>
<key>end</key>
<array>
<dict>
<key>col</key>
<integer>9</integer>
<key>file</key>
<integer>0</integer>
<key>line</key>
<integer>408</integer>
</dict>
<dict>
<key>col</key>
<integer>16</integer>
<key>file</key>
<integer>0</integer>
<key>line</key>
<integer>408</integer>
</dict>
</array>
<key>start</key>
<array>
<dict>
<key>col</key>
<integer>5</integer>
<key>file</key>
<integer>0</integer>
<key>line</key>
<integer>408</integer>
</dict>
<dict>
<key>col</key>
<integer>6</integer>
<key>file</key>
<integer>0</integer>
<key>line</key>
<integer>408</integer>
</dict>
</array>
</dict>
</array>
<key>kind</key>
<string>control</string>
</dict>
<dict>
<key>depth</key>
<integer>0</integer>
<key>extended_message</key>
<string>Assuming 'tst_info' is non-null</string>
<key>kind</key>
<string>event</string>
<key>location</key>
<dict>
<key>col</key>
<integer>9</integer>
<key>file</key>
<integer>0</integer>
<key>line</key>
<integer>408</integer>
</dict>
<key>message</key>
<string>Assuming 'tst_info' is non-null</string>
<key>ranges</key>
<array>
<array>
<dict>
<key>col</key>
<integer>9</integer>
<key>file</key>
<integer>0</integer>
<key>line</key>
<integer>408</integer>
</dict>
<dict>
<key>col</key>
<integer>16</integer>
<key>file</key>
<integer>0</integer>
<key>line</key>
<integer>408</integer>
</dict>
</array>
</array>
</dict>
<dict>
<key>edges</key>
<array>
<dict>
<key>end</key>
<array>
<dict>
<key>col</key>
<integer>9</integer>
<key>file</key>
<integer>0</integer>
<key>line</key>
<integer>409</integer>
</dict>
<dict>
<key>col</key>
<integer>11</integer>
<key>file</key>
<integer>0</integer>
<key>line</key>
<integer>409</integer>
</dict>
</array>
<key>start</key>
<array>
<dict>
<key>col</key>
<integer>9</integer>
<key>file</key>
<integer>0</integer>
<key>line</key>
<integer>408</integer>
</dict>
<dict>
<key>col</key>
<integer>16</integer>
<key>file</key>
<integer>0</integer>
<key>line</key>
<integer>408</integer>
</dict>
</array>
</dict>
</array>
<key>kind</key>
<string>control</string>
</dict>
<dict>
<key>edges</key>
<array>
<dict>
<key>end</key>
<array>
<dict>
<key>col</key>
<integer>15</integer>
<key>file</key>
<integer>0</integer>
<key>line</key>
<integer>409</integer>
</dict>
<dict>
<key>col</key>
<integer>38</integer>
<key>file</key>
<integer>0</integer>
<key>line</key>
<integer>409</integer>
</dict>
</array>
<key>start</key>
<array>
<dict>
<key>col</key>
<integer>9</integer>
<key>file</key>
<integer>0</integer>
<key>line</key>
<integer>409</integer>
</dict>
<dict>
<key>col</key>
<integer>11</integer>
<key>file</key>
<integer>0</integer>
<key>line</key>
<integer>409</integer>
</dict>
</array>
</dict>
</array>
<key>kind</key>
<string>control</string>
</dict>
<dict>
<key>depth</key>
<integer>0</integer>
<key>extended_message</key>
<string>Calling 'int_TS_RESP_verify_token'</string>
<key>kind</key>
<string>event</string>
<key>location</key>
<dict>
<key>col</key>
<integer>15</integer>
<key>file</key>
<integer>0</integer>
<key>line</key>
<integer>409</integer>
</dict>
<key>message</key>
<string>Calling 'int_TS_RESP_verify_token'</string>
<key>ranges</key>
<array>
<array>
<dict>
<key>col</key>
<integer>15</integer>
<key>file</key>
<integer>0</integer>
<key>line</key>
<integer>409</integer>
</dict>
<dict>
<key>col</key>
<integer>60</integer>
<key>file</key>
<integer>0</integer>
<key>line</key>
<integer>409</integer>
</dict>
</array>
</array>
</dict>
<dict>
<key>depth</key>
<integer>1</integer>
<key>extended_message</key>
<string>Entered call from 'TS_RESP_verify_token'</string>
<key>kind</key>
<string>event</string>
<key>location</key>
<dict>
<key>col</key>
<integer>1</integer>
<key>file</key>
<integer>0</integer>
<key>line</key>
<integer>427</integer>
</dict>
<key>message</key>
<string>Entered call from 'TS_RESP_verify_token'</string>
</dict>
<dict>
<key>edges</key>
<array>
<dict>
<key>end</key>
<array>
<dict>
<key>col</key>
<integer>5</integer>
<key>file</key>
<integer>0</integer>
<key>line</key>
<integer>430</integer>
</dict>
<dict>
<key>col</key>
<integer>8</integer>
<key>file</key>
<integer>0</integer>
<key>line</key>
<integer>430</integer>
</dict>
</array>
<key>start</key>
<array>
<dict>
<key>col</key>
<integer>1</integer>
<key>file</key>
<integer>0</integer>
<key>line</key>
<integer>427</integer>
</dict>
<dict>
<key>col</key>
<integer>6</integer>
<key>file</key>
<integer>0</integer>
<key>line</key>
<integer>427</integer>
</dict>
</array>
</dict>
</array>
<key>kind</key>
<string>control</string>
</dict>
<dict>
<key>depth</key>
<integer>1</integer>
<key>extended_message</key>
<string>'signer' initialized to a null pointer value</string>
<key>kind</key>
<string>event</string>
<key>location</key>
<dict>
<key>col</key>
<integer>5</integer>
<key>file</key>
<integer>0</integer>
<key>line</key>
<integer>430</integer>
</dict>
<key>message</key>
<string>'signer' initialized to a null pointer value</string>
<key>ranges</key>
<array>
<array>
<dict>
<key>col</key>
<integer>5</integer>
<key>file</key>
<integer>0</integer>
<key>line</key>
<integer>430</integer>
</dict>
<dict>
<key>col</key>
<integer>16</integer>
<key>file</key>
<integer>0</integer>
<key>line</key>
<integer>430</integer>
</dict>
</array>
</array>
</dict>
<dict>
<key>edges</key>
<array>
<dict>
<key>end</key>
<array>
<dict>
<key>col</key>
<integer>5</integer>
<key>file</key>
<integer>0</integer>
<key>line</key>
<integer>480</integer>
</dict>
<dict>
<key>col</key>
<integer>6</integer>
<key>file</key>
<integer>0</integer>
<key>line</key>
<integer>480</integer>
</dict>
</array>
<key>start</key>
<array>
<dict>
<key>col</key>
<integer>5</integer>
<key>file</key>
<integer>0</integer>
<key>line</key>
<integer>430</integer>
</dict>
<dict>
<key>col</key>
<integer>8</integer>
<key>file</key>
<integer>0</integer>
<key>line</key>
<integer>430</integer>
</dict>
</array>
</dict>
</array>
<key>kind</key>
<string>control</string>
</dict>
<dict>
<key>edges</key>
<array>
<dict>
<key>end</key>
<array>
<dict>
<key>col</key>
<integer>49</integer>
<key>file</key>
<integer>0</integer>
<key>line</key>
<integer>481</integer>
</dict>
<dict>
<key>col</key>
<integer>54</integer>
<key>file</key>
<integer>0</integer>
<key>line</key>
<integer>481</integer>
</dict>
</array>
<key>start</key>
<array>
<dict>
<key>col</key>
<integer>5</integer>
<key>file</key>
<integer>0</integer>
<key>line</key>
<integer>480</integer>
</dict>
<dict>
<key>col</key>
<integer>6</integer>
<key>file</key>
<integer>0</integer>
<key>line</key>
<integer>480</integer>
</dict>
</array>
</dict>
</array>
<key>kind</key>
<string>control</string>
</dict>
<dict>
<key>depth</key>
<integer>1</integer>
<key>extended_message</key>
<string>Passing null pointer value via 2nd parameter 'signer'</string>
<key>kind</key>
<string>event</string>
<key>location</key>
<dict>
<key>col</key>
<integer>49</integer>
<key>file</key>
<integer>0</integer>
<key>line</key>
<integer>481</integer>
</dict>
<key>message</key>
<string>Passing null pointer value via 2nd parameter 'signer'</string>
<key>ranges</key>
<array>
<array>
<dict>
<key>col</key>
<integer>49</integer>
<key>file</key>
<integer>0</integer>
<key>line</key>
<integer>481</integer>
</dict>
<dict>
<key>col</key>
<integer>54</integer>
<key>file</key>
<integer>0</integer>
<key>line</key>
<integer>481</integer>
</dict>
</array>
</array>
</dict>
<dict>
<key>edges</key>
<array>
<dict>
<key>end</key>
<array>
<dict>
<key>col</key>
<integer>13</integer>
<key>file</key>
<integer>0</integer>
<key>line</key>
<integer>481</integer>
</dict>
<dict>
<key>col</key>
<integer>32</integer>
<key>file</key>
<integer>0</integer>
<key>line</key>
<integer>481</integer>
</dict>
</array>
<key>start</key>
<array>
<dict>
<key>col</key>
<integer>49</integer>
<key>file</key>
<integer>0</integer>
<key>line</key>
<integer>481</integer>
</dict>
<dict>
<key>col</key>
<integer>54</integer>
<key>file</key>
<integer>0</integer>
<key>line</key>
<integer>481</integer>
</dict>
</array>
</dict>
</array>
<key>kind</key>
<string>control</string>
</dict>
<dict>
<key>depth</key>
<integer>1</integer>
<key>extended_message</key>
<string>Calling 'TS_check_signer_name'</string>
<key>kind</key>
<string>event</string>
<key>location</key>
<dict>
<key>col</key>
<integer>13</integer>
<key>file</key>
<integer>0</integer>
<key>line</key>
<integer>481</integer>
</dict>
<key>message</key>
<string>Calling 'TS_check_signer_name'</string>
<key>ranges</key>
<array>
<array>
<dict>
<key>col</key>
<integer>13</integer>
<key>file</key>
<integer>0</integer>
<key>line</key>
<integer>481</integer>
</dict>
<dict>
<key>col</key>
<integer>55</integer>
<key>file</key>
<integer>0</integer>
<key>line</key>
<integer>481</integer>
</dict>
</array>
</array>
</dict>
<dict>
<key>depth</key>
<integer>2</integer>
<key>extended_message</key>
<string>Entered call from 'int_TS_RESP_verify_token'</string>
<key>kind</key>
<string>event</string>
<key>location</key>
<dict>
<key>col</key>
<integer>1</integer>
<key>file</key>
<integer>0</integer>
<key>line</key>
<integer>695</integer>
</dict>
<key>message</key>
<string>Entered call from 'int_TS_RESP_verify_token'</string>
</dict>
<dict>
<key>edges</key>
<array>
<dict>
<key>end</key>
<array>
<dict>
<key>col</key>
<integer>5</integer>
<key>file</key>
<integer>0</integer>
<key>line</key>
<integer>697</integer>
</dict>
<dict>
<key>col</key>
<integer>12</integer>
<key>file</key>
<integer>0</integer>
<key>line</key>
<integer>697</integer>
</dict>
</array>
<key>start</key>
<array>
<dict>
<key>col</key>
<integer>1</integer>
<key>file</key>
<integer>0</integer>
<key>line</key>
<integer>695</integer>
</dict>
<dict>
<key>col</key>
<integer>6</integer>
<key>file</key>
<integer>0</integer>
<key>line</key>
<integer>695</integer>
</dict>
</array>
</dict>
</array>
<key>kind</key>
<string>control</string>
</dict>
<dict>
<key>edges</key>
<array>
<dict>
<key>end</key>
<array>
<dict>
<key>col</key>
<integer>5</integer>
<key>file</key>
<integer>0</integer>
<key>line</key>
<integer>702</integer>
</dict>
<dict>
<key>col</key>
<integer>6</integer>
<key>file</key>
<integer>0</integer>
<key>line</key>
<integer>702</integer>
</dict>
</array>
<key>start</key>
<array>
<dict>
<key>col</key>
<integer>5</integer>
<key>file</key>
<integer>0</integer>
<key>line</key>
<integer>697</integer>
</dict>
<dict>
<key>col</key>
<integer>12</integer>
<key>file</key>
<integer>0</integer>
<key>line</key>
<integer>697</integer>
</dict>
</array>
</dict>
</array>
<key>kind</key>
<string>control</string>
</dict>
<dict>
<key>edges</key>
<array>
<dict>
<key>end</key>
<array>
<dict>
<key>col</key>
<integer>9</integer>
<key>file</key>
<integer>0</integer>
<key>line</key>
<integer>702</integer>
</dict>
<dict>
<key>col</key>
<integer>16</integer>
<key>file</key>
<integer>0</integer>
<key>line</key>
<integer>702</integer>
</dict>
</array>
<key>start</key>
<array>
<dict>
<key>col</key>
<integer>5</integer>
<key>file</key>
<integer>0</integer>
<key>line</key>
<integer>702</integer>
</dict>
<dict>
<key>col</key>
<integer>6</integer>
<key>file</key>
<integer>0</integer>
<key>line</key>
<integer>702</integer>
</dict>
</array>
</dict>
</array>
<key>kind</key>
<string>control</string>
</dict>
<dict>
<key>edges</key>
<array>
<dict>
<key>end</key>
<array>
<dict>
<key>col</key>
<integer>12</integer>
<key>file</key>
<integer>0</integer>
<key>line</key>
<integer>703</integer>
</dict>
<dict>
<key>col</key>
<integer>24</integer>
<key>file</key>
<integer>0</integer>
<key>line</key>
<integer>703</integer>
</dict>
</array>
<key>start</key>
<array>
<dict>
<key>col</key>
<integer>9</integer>
<key>file</key>
<integer>0</integer>
<key>line</key>
<integer>702</integer>
</dict>
<dict>
<key>col</key>
<integer>16</integer>
<key>file</key>
<integer>0</integer>
<key>line</key>
<integer>702</integer>
</dict>
</array>
</dict>
</array>
<key>kind</key>
<string>control</string>
</dict>
<dict>
<key>depth</key>
<integer>2</integer>
<key>extended_message</key>
<string>Access to field 'cert_info' results in a dereference of a null pointer (loaded from variable 'signer')</string>
<key>kind</key>
<string>event</string>
<key>location</key>
<dict>
<key>col</key>
<integer>12</integer>
<key>file</key>
<integer>0</integer>
<key>line</key>
<integer>703</integer>
</dict>
<key>message</key>
<string>Access to field 'cert_info' results in a dereference of a null pointer (loaded from variable 'signer')</string>
<key>ranges</key>
<array>
<array>
<dict>
<key>col</key>
<integer>12</integer>
<key>file</key>
<integer>0</integer>
<key>line</key>
<integer>703</integer>
</dict>
<dict>
<key>col</key>
<integer>70</integer>
<key>file</key>
<integer>0</integer>
<key>line</key>
<integer>703</integer>
</dict>
</array>
</array>
</dict>
</array>
<key>type</key>
<string>Dereference of null pointer</string>
</dict>
</array>
<key>files</key>
<array>
<string>ts_rsp_verify.c</string>
</array>
</dict>
</plist>