The following issues were found
src/third_party/icu4c-57.1/source/common/unistr_cnv.cpp
1 issues
Line: 281
Column: 9
CWE codes:
119
120
Suggestion:
Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length
// if an overflow occurs, then get the preflighting length
if(errorCode==U_BUFFER_OVERFLOW_ERROR) {
char buffer[1024];
destLimit=buffer+sizeof(buffer);
do {
dest=buffer;
errorCode=U_ZERO_ERROR;
Reported by FlawFinder.
src/third_party/icu4c-57.1/source/common/ures_cnv.c
1 issues
Line: 32
Column: 5
CWE codes:
119
120
Suggestion:
Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length
const char *localeID,
UErrorCode *status)
{
char pathBuffer[1024];
int32_t length;
char *path = pathBuffer;
if(status==NULL || U_FAILURE(*status)) {
return NULL;
Reported by FlawFinder.
src/third_party/boost/boost/random/detail/uniform_int_float.hpp
1 issues
Line: 27
Column: 11
CWE codes:
327
Suggestion:
Use a more secure technique for acquiring random values
#include <boost/random/detail/disable_warnings.hpp>
namespace boost {
namespace random {
namespace detail {
template<class URNG>
class uniform_int_float
{
Reported by FlawFinder.
src/third_party/icu4c-57.1/source/common/ustr_imp.h
1 issues
Line: 112
Column: 5
CWE codes:
119
120
Suggestion:
Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length
#if !UCONFIG_NO_BREAK_ITERATION
UBreakIterator *iter; /* We adopt the iterator, so we own it. */
#endif
char locale[32];
int32_t locCache;
uint32_t options;
};
#ifndef __UCASEMAP_H__
Reported by FlawFinder.
src/third_party/boost/boost/random/detail/sobol_table.hpp
1 issues
Line: 16
Column: 11
CWE codes:
327
Suggestion:
Use a more secure technique for acquiring random values
#include <cstddef>
namespace boost {
namespace random {
namespace detail {
namespace qrng_tables {
// Maximum allowed space dimension
Reported by FlawFinder.
src/third_party/icu4c-57.1/source/common/uts46.cpp
1 issues
Line: 428
Column: 9
CWE codes:
119
120
Suggestion:
Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length
int32_t labelStart=0;
if(srcLength<=256) { // length of stackArray[]
// ASCII fastpath
char stackArray[256];
int32_t destCapacity;
char *destArray=dest.GetAppendBuffer(srcLength, srcLength+20,
stackArray, UPRV_LENGTHOF(stackArray), &destCapacity);
UBool disallowNonLDHDot=(options&UIDNA_USE_STD3_RULES)!=0;
int32_t i;
Reported by FlawFinder.
src/third_party/boost/boost/random/detail/qrng_base.hpp
1 issues
Line: 33
Column: 11
CWE codes:
327
Suggestion:
Use a more secure technique for acquiring random values
//!Describes the quasi-random number generator base class template.
namespace boost {
namespace random {
namespace qrng_detail {
// If the seed is a signed integer type, then we need to
// check that the value is positive:
Reported by FlawFinder.
src/third_party/boost/boost/random/detail/ptr_helper.hpp
1 issues
Line: 21
Column: 11
CWE codes:
327
Suggestion:
Use a more secure technique for acquiring random values
namespace boost {
namespace random {
namespace detail {
// type_traits could help here, but I don't want to depend on type_traits.
template<class T>
struct ptr_helper
Reported by FlawFinder.
src/third_party/icu4c-57.1/source/i18n/bocsu.cpp
1 issues
Line: 100
Column: 5
CWE codes:
119
120
Suggestion:
Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length
*/
U_CFUNC UChar32
u_writeIdenticalLevelRun(UChar32 prev, const UChar *s, int32_t length, icu::ByteSink &sink) {
char scratch[64];
int32_t capacity;
int32_t i=0;
while(i<length) {
char *buffer=sink.GetAppendBuffer(1, length*2, scratch, (int32_t)sizeof(scratch), &capacity);
Reported by FlawFinder.
src/third_party/boost/boost/random/detail/polynomial.hpp
1 issues
Line: 24
Column: 11
CWE codes:
327
Suggestion:
Use a more secure technique for acquiring random values
#include <boost/cstdint.hpp>
namespace boost {
namespace random {
namespace detail {
class polynomial_ops {
public:
typedef unsigned long digit_t;
Reported by FlawFinder.