55| overflowdestination.cpp:27:2:27:15 | *... = ... | overflowdestination.cpp:30:17:30:20 | *arg1 | provenance | |
66| overflowdestination.cpp:43:8:43:10 | fgets output argument | overflowdestination.cpp:46:15:46:17 | *src | provenance | |
77| overflowdestination.cpp:50:52:50:54 | *src | overflowdestination.cpp:50:52:50:54 | *src | provenance | |
8+ | overflowdestination.cpp:50:52:50:54 | *src | overflowdestination.cpp:50:52:50:54 | *src [Return] | provenance | DataFlowFunction |
89| overflowdestination.cpp:50:52:50:54 | *src | overflowdestination.cpp:53:15:53:17 | *src | provenance | |
10+ | overflowdestination.cpp:50:52:50:54 | *src [Reverse] | overflowdestination.cpp:50:52:50:54 | *src [Return] | provenance | |
11+ | overflowdestination.cpp:57:52:57:54 | *src | overflowdestination.cpp:57:52:57:54 | *src | provenance | |
912| overflowdestination.cpp:57:52:57:54 | *src | overflowdestination.cpp:60:15:60:17 | *src | provenance | |
13+ | overflowdestination.cpp:60:15:60:17 | *src | overflowdestination.cpp:60:15:60:17 | *src [Reverse] | provenance | DataFlowFunction |
1014| overflowdestination.cpp:60:15:60:17 | *src | overflowdestination.cpp:64:16:64:19 | *src2 | provenance | |
15+ | overflowdestination.cpp:60:15:60:17 | *src [Reverse] | overflowdestination.cpp:57:52:57:54 | *src [Return] | provenance | |
1116| overflowdestination.cpp:73:8:73:10 | fgets output argument | overflowdestination.cpp:75:30:75:32 | *src | provenance | |
1217| overflowdestination.cpp:73:8:73:10 | fgets output argument | overflowdestination.cpp:76:30:76:32 | *src | provenance | |
1318| overflowdestination.cpp:75:30:75:32 | *src | overflowdestination.cpp:50:52:50:54 | *src | provenance | |
1419| overflowdestination.cpp:75:30:75:32 | *src | overflowdestination.cpp:75:30:75:32 | overflowdest_test2 output argument | provenance | |
20+ | overflowdestination.cpp:75:30:75:32 | *src | overflowdestination.cpp:75:30:75:32 | overflowdest_test2 output argument | provenance | DataFlowFunction |
1521| overflowdestination.cpp:75:30:75:32 | overflowdest_test2 output argument | overflowdestination.cpp:76:30:76:32 | *src | provenance | |
22+ | overflowdestination.cpp:75:30:75:32 | overflowdest_test2 output argument [Reverse] | overflowdestination.cpp:50:52:50:54 | *src [Reverse] | provenance | |
23+ | overflowdestination.cpp:75:30:75:32 | overflowdest_test2 output argument [Reverse] | overflowdestination.cpp:75:30:75:32 | overflowdest_test2 output argument | provenance | |
1624| overflowdestination.cpp:76:30:76:32 | *src | overflowdestination.cpp:57:52:57:54 | *src | provenance | |
25+ | overflowdestination.cpp:76:30:76:32 | *src | overflowdestination.cpp:76:30:76:32 | overflowdest_test3 output argument | provenance | |
26+ | overflowdestination.cpp:76:30:76:32 | *src | overflowdestination.cpp:76:30:76:32 | overflowdest_test3 output argument | provenance | DataFlowFunction |
27+ | overflowdestination.cpp:76:30:76:32 | overflowdest_test3 output argument | overflowdestination.cpp:75:30:75:32 | overflowdest_test2 output argument [Reverse] | provenance | |
1728nodes
1829| main.cpp:6:27:6:30 | **argv | semmle.label | **argv |
1930| main.cpp:7:33:7:36 | **argv | semmle.label | **argv |
@@ -24,16 +35,28 @@ nodes
2435| overflowdestination.cpp:46:15:46:17 | *src | semmle.label | *src |
2536| overflowdestination.cpp:50:52:50:54 | *src | semmle.label | *src |
2637| overflowdestination.cpp:50:52:50:54 | *src | semmle.label | *src |
38+ | overflowdestination.cpp:50:52:50:54 | *src [Return] | semmle.label | *src [Return] |
39+ | overflowdestination.cpp:50:52:50:54 | *src [Return] | semmle.label | *src [Return] |
40+ | overflowdestination.cpp:50:52:50:54 | *src [Reverse] | semmle.label | *src [Reverse] |
2741| overflowdestination.cpp:53:15:53:17 | *src | semmle.label | *src |
2842| overflowdestination.cpp:57:52:57:54 | *src | semmle.label | *src |
43+ | overflowdestination.cpp:57:52:57:54 | *src | semmle.label | *src |
44+ | overflowdestination.cpp:57:52:57:54 | *src [Return] | semmle.label | *src [Return] |
2945| overflowdestination.cpp:60:15:60:17 | *src | semmle.label | *src |
46+ | overflowdestination.cpp:60:15:60:17 | *src [Reverse] | semmle.label | *src [Reverse] |
3047| overflowdestination.cpp:64:16:64:19 | *src2 | semmle.label | *src2 |
3148| overflowdestination.cpp:73:8:73:10 | fgets output argument | semmle.label | fgets output argument |
3249| overflowdestination.cpp:75:30:75:32 | *src | semmle.label | *src |
3350| overflowdestination.cpp:75:30:75:32 | overflowdest_test2 output argument | semmle.label | overflowdest_test2 output argument |
51+ | overflowdestination.cpp:75:30:75:32 | overflowdest_test2 output argument [Reverse] | semmle.label | overflowdest_test2 output argument [Reverse] |
3452| overflowdestination.cpp:76:30:76:32 | *src | semmle.label | *src |
53+ | overflowdestination.cpp:76:30:76:32 | overflowdest_test3 output argument | semmle.label | overflowdest_test3 output argument |
3554subpaths
3655| overflowdestination.cpp:75:30:75:32 | *src | overflowdestination.cpp:50:52:50:54 | *src | overflowdestination.cpp:50:52:50:54 | *src | overflowdestination.cpp:75:30:75:32 | overflowdest_test2 output argument |
56+ | overflowdestination.cpp:75:30:75:32 | *src | overflowdestination.cpp:50:52:50:54 | *src | overflowdestination.cpp:50:52:50:54 | *src [Return] | overflowdestination.cpp:75:30:75:32 | overflowdest_test2 output argument |
57+ | overflowdestination.cpp:75:30:75:32 | overflowdest_test2 output argument [Reverse] | overflowdestination.cpp:50:52:50:54 | *src [Reverse] | overflowdestination.cpp:50:52:50:54 | *src [Return] | overflowdestination.cpp:75:30:75:32 | overflowdest_test2 output argument |
58+ | overflowdestination.cpp:76:30:76:32 | *src | overflowdestination.cpp:57:52:57:54 | *src | overflowdestination.cpp:57:52:57:54 | *src | overflowdestination.cpp:76:30:76:32 | overflowdest_test3 output argument |
59+ | overflowdestination.cpp:76:30:76:32 | *src | overflowdestination.cpp:57:52:57:54 | *src | overflowdestination.cpp:57:52:57:54 | *src [Return] | overflowdestination.cpp:76:30:76:32 | overflowdest_test3 output argument |
3760#select
3861| overflowdestination.cpp:30:2:30:8 | call to strncpy | main.cpp:6:27:6:30 | **argv | overflowdestination.cpp:30:17:30:20 | *arg1 | To avoid overflow, this operation should be bounded by destination-buffer size, not source-buffer size. |
3962| overflowdestination.cpp:46:2:46:7 | call to memcpy | overflowdestination.cpp:43:8:43:10 | fgets output argument | overflowdestination.cpp:46:15:46:17 | *src | To avoid overflow, this operation should be bounded by destination-buffer size, not source-buffer size. |
0 commit comments