The following issues were found

src/third_party/mozjs-60/extract/js/public/ProfilingFrameIterator.h
1 issues
char - Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues
Security

Line: 57 Column: 29 CWE codes: 119 120
Suggestion: Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length 

                  Kind kind_;

    static const unsigned StorageSpace = 8 * sizeof(void*);
    alignas(void*) unsigned char storage_[StorageSpace];

    void* storage() { return storage_; }
    const void* storage() const { return storage_; }

    js::wasm::ProfilingFrameIterator& wasmIter() {

Reported by FlawFinder.

src/third_party/mozjs-60/extract/js/src/builtin/DataViewObject.h
1 issues
read - Check buffer boundaries if used in a loop including recursive loops
Security

Line: 162 Column: 17 CWE codes: 120 20 

              
    static bool initClass(JSContext* cx);
    template<typename NativeType>
    static bool read(JSContext* cx, Handle<DataViewObject*> obj, const CallArgs& args,
                     NativeType* val);
    template<typename NativeType>
    static bool write(JSContext* cx, Handle<DataViewObject*> obj, const CallArgs& args);

    void notifyBufferDetached(void* newData);

Reported by FlawFinder.

src/third_party/mozjs-60/extract/js/src/builtin/Eval.cpp
1 issues
There is an unknown macro here somewhere. Configuration is required. If JS_FRIEND_API is a macro then please configure it.
Error

Line: 464 

                                       NullFramePtr() /* evalInFrame */, rval.address());
}

JS_FRIEND_API(bool)
js::ExecuteInGlobalAndReturnScope(JSContext* cx, HandleObject global, HandleScript scriptArg,
                                  MutableHandleObject envArg)
{
    RootedObject varEnv(cx, NonSyntacticVariablesObject::create(cx));
    if (!varEnv)

Reported by Cppcheck.

src/third_party/mozjs-60/extract/js/src/builtin/MapObject.cpp
1 issues
There is an unknown macro here somewhere. Configuration is required. If JS_PUBLIC_API is a macro then please configure it.
Error

Line: 1757 

              
/*** JS public APIs **********************************************************/

JS_PUBLIC_API(JSObject*)
JS::NewMapObject(JSContext* cx)
{
    return MapObject::create(cx);
}

Reported by Cppcheck.

src/third_party/boost/boost/program_options/eof_iterator.hpp
1 issues
equal - Function does not check the second iterator for over-read conditions
Security

Line: 82 Column: 14 CWE codes: 126
Suggestion: This function is often discouraged by most C++ coding standards in favor of its safer alternatives provided since C++14. Consider using a form of this function that checks the second iterator before potentially overflowing it 

                          static_cast<Derived&>(*this).get();
        }

        bool equal(const eof_iterator& other) const
        {
            if (m_at_eof && other.m_at_eof)
                return true;
            else
                return false;

Reported by FlawFinder.

src/third_party/mozjs-60/extract/js/src/builtin/WeakMapObject.cpp
1 issues
There is an unknown macro here somewhere. Configuration is required. If JS_FRIEND_API is a macro then please configure it.
Error

Line: 164 

                  return true;
}

JS_FRIEND_API(bool)
JS_NondeterministicGetWeakMapKeys(JSContext* cx, HandleObject objArg, MutableHandleObject ret)
{
    RootedObject obj(cx, UncheckedUnwrap(objArg));
    if (!obj || !obj->is<WeakMapObject>()) {
        ret.set(nullptr);

Reported by Cppcheck.

src/third_party/mozjs-60/extract/js/src/builtin/WeakSetObject.cpp
1 issues
There is an unknown macro here somewhere. Configuration is required. If JS_FRIEND_API is a macro then please configure it.
Error

Line: 246 

                  return WeakSetObject::initClass(cx, obj);
}

JS_FRIEND_API(bool)
JS_NondeterministicGetWeakSetKeys(JSContext* cx, HandleObject objArg, MutableHandleObject ret)
{
    RootedObject obj(cx, UncheckedUnwrap(objArg));
    if (!obj || !obj->is<WeakSetObject>()) {
        ret.set(nullptr);

Reported by Cppcheck.

src/third_party/boost/boost/optional/optional_io.hpp
1 issues
setstate - This function is not sufficiently random for security-related functions such as key and nonce creation
Security

Line: 84 Column: 10 CWE codes: 327
Suggestion: Use a more secure technique for acquiring random values 

                      }
      }

      in.setstate( std::ios::failbit );
    }
  }

  return in;
}

Reported by FlawFinder.

src/third_party/mozjs-60/extract/js/src/builtin/intl/CommonFunctions.cpp
1 issues
strlen - Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected)
Security

Line: 104 Column: 37 CWE codes: 126 

                      char* p;
        while ((p = strchr(lang.get(), '_')))
            *p = '-';
        a = Atomize(cx, lang.get(), strlen(lang.get()));
        if (!a)
            return false;
        if (!DefineDataProperty(cx, locales, a->asPropertyName(), TrueHandleValue))
            return false;
    }

Reported by FlawFinder.

src/third_party/mozjs-60/extract/js/src/builtin/intl/make_intl_data.py
1 issues
invalid syntax (<unknown>, line 666)
Error

Line: 666 Column: 35 

              
    # Remove unnecessary UTC mappings.
    utcnames = ["Etc/UTC", "Etc/UCT", "Etc/GMT"]
    result = ifilterfalse(lambda (zone, target): zone.name in utcnames, result)

    return sorted(result, key=itemgetter(0))

def findIncorrectICULinks(ianaZones, ianaLinks, icuZones, icuLinks):
    """ Find incorrect ICU link entries. """

Reported by Pylint.