Fixed defects
List of Defects
Error: COMPILER_WARNING (CWE-477): [#def1]
libssh-0.10.6/src/ecdh_crypto.c: scope_hint: In function ‘ssh_client_ecdh_init’
libssh-0.10.6/src/ecdh_crypto.c:130:3: warning[-Wdeprecated-declarations]: ‘EC_KEY_new_by_curve_name’ is deprecated: Since OpenSSL 3.0
/usr/include/openssl/ecdh.h:10: included_from: Included from here.
libssh-0.10.6/include/libssh/crypto.h:46: included_from: Included from here.
libssh-0.10.6/include/libssh/dh.h:26: included_from: Included from here.
libssh-0.10.6/src/ecdh_crypto.c:25: included_from: Included from here.
/usr/include/openssl/ec.h:1017:31: note: declared here
# 128| }
# 129|
# 130|-> key = EC_KEY_new_by_curve_name(curve);
# 131| #else
# 132| if (curve == NULL) {
Error: COMPILER_WARNING (CWE-477): [#def2]
libssh-0.10.6/src/ecdh_crypto.c:155:3: warning[-Wdeprecated-declarations]: ‘EC_KEY_get0_group’ is deprecated: Since OpenSSL 3.0
/usr/include/openssl/ec.h:1053:39: note: declared here
# 153| */
# 154| #if 1
# 155|-> group = EC_KEY_get0_group(key);
# 156|
# 157| EC_KEY_generate_key(key);
Error: COMPILER_WARNING (CWE-477): [#def3]
libssh-0.10.6/src/ecdh_crypto.c:157:3: warning[-Wdeprecated-declarations]: ‘EC_KEY_generate_key’ is deprecated: Since OpenSSL 3.0
/usr/include/openssl/ec.h:1120:27: note: declared here
# 155| group = EC_KEY_get0_group(key);
# 156|
# 157|-> EC_KEY_generate_key(key);
# 158|
# 159| pubkey=EC_KEY_get0_public_key(key);
Error: COMPILER_WARNING (CWE-477): [#def4]
libssh-0.10.6/src/ecdh_crypto.c:159:3: warning[-Wdeprecated-declarations]: ‘EC_KEY_get0_public_key’ is deprecated: Since OpenSSL 3.0
/usr/include/openssl/ec.h:1081:39: note: declared here
# 157| EC_KEY_generate_key(key);
# 158|
# 159|-> pubkey=EC_KEY_get0_public_key(key);
# 160| len = EC_POINT_point2oct(group,pubkey,POINT_CONVERSION_UNCOMPRESSED,
# 161| NULL,0,ctx);
Error: COMPILER_WARNING (CWE-477): [#def5]
libssh-0.10.6/src/ecdh_crypto.c:166:7: warning[-Wdeprecated-declarations]: ‘EC_KEY_free’ is deprecated: Since OpenSSL 3.0
/usr/include/openssl/ec.h:1022:28: note: declared here
# 164| if (client_pubkey == NULL) {
# 165| BN_CTX_free(ctx);
# 166|-> EC_KEY_free(key);
# 167| return SSH_ERROR;
# 168| }
Error: COMPILER_WARNING (CWE-477): [#def6]
libssh-0.10.6/src/ecdh_crypto.c:214:7: warning[-Wdeprecated-declarations]: ‘EC_KEY_free’ is deprecated: Since OpenSSL 3.0
/usr/include/openssl/ec.h:1022:28: note: declared here
# 212| */
# 213| #if 1
# 214|-> EC_KEY_free(key);
# 215| #else
# 216| EVP_PKEY_free(key);
Error: COMPILER_WARNING (CWE-477): [#def7]
libssh-0.10.6/src/ecdh_crypto.c: scope_hint: In function ‘ecdh_build_k’
libssh-0.10.6/src/ecdh_crypto.c:241:3: warning[-Wdeprecated-declarations]: ‘EC_KEY_get0_group’ is deprecated: Since OpenSSL 3.0
/usr/include/openssl/ec.h:1053:39: note: declared here
# 239| */
# 240| #if 1
# 241|-> const EC_GROUP *group = EC_KEY_get0_group(next_crypto->ecdh_privkey);
# 242| EC_POINT *pubkey;
# 243| void *buffer;
Error: COMPILER_WARNING (CWE-477): [#def8]
libssh-0.10.6/src/ecdh_crypto.c:281:3: warning[-Wdeprecated-declarations]: ‘ECDH_compute_key’ is deprecated: Since OpenSSL 3.0
/usr/include/openssl/ec.h:1315:27: note: declared here
# 279| }
# 280|
# 281|-> rc = ECDH_compute_key(buffer,
# 282| len,
# 283| pubkey,
Error: COMPILER_WARNING (CWE-477): [#def9]
libssh-0.10.6/src/ecdh_crypto.c:382:7: warning[-Wdeprecated-declarations]: ‘EC_KEY_free’ is deprecated: Since OpenSSL 3.0
/usr/include/openssl/ec.h:1022:28: note: declared here
# 380| */
# 381| #if 1
# 382|-> EC_KEY_free(next_crypto->ecdh_privkey);
# 383| #else
# 384| EVP_PKEY_free(next_crypto->ecdh_privkey);
Error: COMPILER_WARNING (CWE-477): [#def10]
libssh-0.10.6/src/ecdh_crypto.c:394:3: warning[-Wdeprecated-declarations]: ‘EC_KEY_free’ is deprecated: Since OpenSSL 3.0
/usr/include/openssl/ec.h:1022:28: note: declared here
# 392| */
# 393| #if 1
# 394|-> EC_KEY_free(next_crypto->ecdh_privkey);
# 395| #else
# 396| EVP_PKEY_free(next_crypto->ecdh_privkey);
Error: COMPILER_WARNING (CWE-477): [#def11]
libssh-0.10.6/src/ecdh_crypto.c: scope_hint: In function ‘ssh_packet_server_ecdh_init’
libssh-0.10.6/src/ecdh_crypto.c:477:5: warning[-Wdeprecated-declarations]: ‘EC_KEY_new_by_curve_name’ is deprecated: Since OpenSSL 3.0
/usr/include/openssl/ec.h:1017:31: note: declared here
# 475| */
# 476| #if 1
# 477|-> ecdh_key = EC_KEY_new_by_curve_name(curve);
# 478| #else
# 479| ecdh_key = EVP_EC_gen(curve);
Error: COMPILER_WARNING (CWE-477): [#def12]
libssh-0.10.6/src/ecdh_crypto.c:494:9: warning[-Wdeprecated-declarations]: ‘EC_KEY_free’ is deprecated: Since OpenSSL 3.0
/usr/include/openssl/ec.h:1022:28: note: declared here
# 492| ctx = BN_CTX_new();
# 493| if (ctx == NULL) {
# 494|-> EC_KEY_free(ecdh_key);
# 495| return SSH_ERROR;
# 496| }
Error: COMPILER_WARNING (CWE-477): [#def13]
libssh-0.10.6/src/ecdh_crypto.c:498:5: warning[-Wdeprecated-declarations]: ‘EC_KEY_get0_group’ is deprecated: Since OpenSSL 3.0
/usr/include/openssl/ec.h:1053:39: note: declared here
# 496| }
# 497|
# 498|-> group = EC_KEY_get0_group(ecdh_key);
# 499| EC_KEY_generate_key(ecdh_key);
# 500|
Error: COMPILER_WARNING (CWE-477): [#def14]
libssh-0.10.6/src/ecdh_crypto.c:499:5: warning[-Wdeprecated-declarations]: ‘EC_KEY_generate_key’ is deprecated: Since OpenSSL 3.0
/usr/include/openssl/ec.h:1120:27: note: declared here
# 497|
# 498| group = EC_KEY_get0_group(ecdh_key);
# 499|-> EC_KEY_generate_key(ecdh_key);
# 500|
# 501| ecdh_pubkey = EC_KEY_get0_public_key(ecdh_key);
Error: COMPILER_WARNING (CWE-477): [#def15]
libssh-0.10.6/src/ecdh_crypto.c:501:5: warning[-Wdeprecated-declarations]: ‘EC_KEY_get0_public_key’ is deprecated: Since OpenSSL 3.0
/usr/include/openssl/ec.h:1081:39: note: declared here
# 499| EC_KEY_generate_key(ecdh_key);
# 500|
# 501|-> ecdh_pubkey = EC_KEY_get0_public_key(ecdh_key);
# 502| len = EC_POINT_point2oct(group,
# 503| ecdh_pubkey,
Error: COMPILER_WARNING (CWE-477): [#def16]
libssh-0.10.6/src/ecdh_crypto.c:536:9: warning[-Wdeprecated-declarations]: ‘EC_KEY_free’ is deprecated: Since OpenSSL 3.0
/usr/include/openssl/ec.h:1022:28: note: declared here
# 534| */
# 535| #if 1
# 536|-> EC_KEY_free(ecdh_key);
# 537| BN_CTX_free(ctx);
# 538| #else
Error: COMPILER_WARNING (CWE-477): [#def17]
libssh-0.10.6/src/libcrypto.c: scope_hint: In function ‘pki_get_engine’
libssh-0.10.6/src/libcrypto.c:103:9: warning[-Wdeprecated-declarations]: ‘ENGINE_load_builtin_engines’ is deprecated: Since OpenSSL 3.0
libssh-0.10.6/src/libcrypto.c:56: included_from: Included from here.
/usr/include/openssl/engine.h:358:28: note: declared here
# 101|
# 102| if (engine == NULL) {
# 103|-> ENGINE_load_builtin_engines();
# 104|
# 105| engine = ENGINE_by_id("pkcs11");
Error: COMPILER_WARNING (CWE-477): [#def18]
libssh-0.10.6/src/libcrypto.c:105:9: warning[-Wdeprecated-declarations]: ‘ENGINE_by_id’ is deprecated: Since OpenSSL 3.0
/usr/include/openssl/engine.h:336:31: note: declared here
# 103| ENGINE_load_builtin_engines();
# 104|
# 105|-> engine = ENGINE_by_id("pkcs11");
# 106| if (engine == NULL) {
# 107| SSH_LOG(SSH_LOG_WARN,
Error: COMPILER_WARNING (CWE-477): [#def19]
libssh-0.10.6/src/libcrypto.c:114:9: warning[-Wdeprecated-declarations]: ‘ENGINE_init’ is deprecated: Since OpenSSL 3.0
/usr/include/openssl/engine.h:620:27: note: declared here
# 112| SSH_LOG(SSH_LOG_INFO, "Engine loaded successfully");
# 113|
# 114|-> ok = ENGINE_init(engine);
# 115| if (!ok) {
# 116| SSH_LOG(SSH_LOG_WARN,
Error: COMPILER_WARNING (CWE-477): [#def20]
libssh-0.10.6/src/libcrypto.c:119:13: warning[-Wdeprecated-declarations]: ‘ENGINE_free’ is deprecated: Since OpenSSL 3.0
/usr/include/openssl/engine.h:493:27: note: declared here
# 117| "Could not initialize the engine: %s",
# 118| ERR_error_string(ERR_get_error(), NULL));
# 119|-> ENGINE_free(engine);
# 120| return NULL;
# 121| }
Error: COMPILER_WARNING (CWE-477): [#def21]
libssh-0.10.6/src/pki_crypto.c: scope_hint: In function ‘pki_key_clean’
libssh-0.10.6/src/pki_crypto.c:106:5: warning[-Wdeprecated-declarations]: ‘EC_KEY_free’ is deprecated: Since OpenSSL 3.0
/usr/include/openssl/x509.h:33: included_from: Included from here.
/usr/include/openssl/pem.h:23: included_from: Included from here.
libssh-0.10.6/src/pki_crypto.c:34: included_from: Included from here.
/usr/include/openssl/ec.h:1022:28: note: declared here
# 104| */
# 105| #if 1
# 106|-> EC_KEY_free(key->ecdsa);
# 107| key->ecdsa = NULL;
# 108| #endif
Error: COMPILER_WARNING (CWE-477): [#def22]
libssh-0.10.6/src/pki_crypto.c: scope_hint: In function ‘pki_key_ecdsa_to_nid’
libssh-0.10.6/src/pki_crypto.c:122:5: warning[-Wdeprecated-declarations]: ‘EC_KEY_get0_group’ is deprecated: Since OpenSSL 3.0
/usr/include/openssl/ec.h:1053:39: note: declared here
# 120| static int pki_key_ecdsa_to_nid(EC_KEY *k)
# 121| {
# 122|-> const EC_GROUP *g = EC_KEY_get0_group(k);
# 123| int nid;
# 124|
Error: COMPILER_WARNING (CWE-477): [#def23]
libssh-0.10.6/src/pki_crypto.c: scope_hint: In function ‘pki_privkey_build_ecdsa’
libssh-0.10.6/src/pki_crypto.c:302:5: warning[-Wdeprecated-declarations]: ‘EC_KEY_new_by_curve_name’ is deprecated: Since OpenSSL 3.0
/usr/include/openssl/ec.h:1017:31: note: declared here
# 300| */
# 301| #if 1
# 302|-> key->ecdsa = EC_KEY_new_by_curve_name(key->ecdsa_nid);
# 303| if (key->ecdsa == NULL) {
# 304| return -1;
Error: COMPILER_WARNING (CWE-477): [#def24]
libssh-0.10.6/src/pki_crypto.c:307:5: warning[-Wdeprecated-declarations]: ‘EC_KEY_get0_group’ is deprecated: Since OpenSSL 3.0
/usr/include/openssl/ec.h:1053:39: note: declared here
# 305| }
# 306|
# 307|-> g = EC_KEY_get0_group(key->ecdsa);
# 308|
# 309| p = EC_POINT_new(g);
Error: COMPILER_WARNING (CWE-477): [#def25]
libssh-0.10.6/src/pki_crypto.c:325:5: warning[-Wdeprecated-declarations]: ‘EC_KEY_set_public_key’ is deprecated: Since OpenSSL 3.0
/usr/include/openssl/ec.h:1089:27: note: declared here
# 323|
# 324| /* EC_KEY_set_public_key duplicates p */
# 325|-> ok = EC_KEY_set_public_key(key->ecdsa, p);
# 326| EC_POINT_free(p);
# 327| if (!ok) {
Error: COMPILER_WARNING (CWE-477): [#def26]
libssh-0.10.6/src/pki_crypto.c:333:9: warning[-Wdeprecated-declarations]: ‘EC_KEY_free’ is deprecated: Since OpenSSL 3.0
/usr/include/openssl/ec.h:1022:28: note: declared here
# 331| bexp = ssh_make_string_bn(exp);
# 332| if (bexp == NULL) {
# 333|-> EC_KEY_free(key->ecdsa);
# 334| return -1;
# 335| }
Error: COMPILER_WARNING (CWE-477): [#def27]
libssh-0.10.6/src/pki_crypto.c:337:5: warning[-Wdeprecated-declarations]: ‘EC_KEY_set_private_key’ is deprecated: Since OpenSSL 3.0
/usr/include/openssl/ec.h:1075:27: note: declared here
# 335| }
# 336| /* EC_KEY_set_private_key duplicates exp */
# 337|-> ok = EC_KEY_set_private_key(key->ecdsa, bexp);
# 338| BN_free(bexp);
# 339| if (!ok) {
Error: COMPILER_WARNING (CWE-477): [#def28]
libssh-0.10.6/src/pki_crypto.c:340:9: warning[-Wdeprecated-declarations]: ‘EC_KEY_free’ is deprecated: Since OpenSSL 3.0
/usr/include/openssl/ec.h:1022:28: note: declared here
# 338| BN_free(bexp);
# 339| if (!ok) {
# 340|-> EC_KEY_free(key->ecdsa);
# 341| return -1;
# 342| }
Error: COMPILER_WARNING (CWE-477): [#def29]
libssh-0.10.6/src/pki_crypto.c: scope_hint: In function ‘pki_pubkey_build_ecdsa’
libssh-0.10.6/src/pki_crypto.c:396:5: warning[-Wdeprecated-declarations]: ‘EC_KEY_new_by_curve_name’ is deprecated: Since OpenSSL 3.0
/usr/include/openssl/ec.h:1017:31: note: declared here
# 394| */
# 395| #if 1
# 396|-> key->ecdsa = EC_KEY_new_by_curve_name(key->ecdsa_nid);
# 397| if (key->ecdsa == NULL) {
# 398| return -1;
Error: COMPILER_WARNING (CWE-477): [#def30]
libssh-0.10.6/src/pki_crypto.c:401:5: warning[-Wdeprecated-declarations]: ‘EC_KEY_get0_group’ is deprecated: Since OpenSSL 3.0
/usr/include/openssl/ec.h:1053:39: note: declared here
# 399| }
# 400|
# 401|-> g = EC_KEY_get0_group(key->ecdsa);
# 402|
# 403| p = EC_POINT_new(g);
Error: COMPILER_WARNING (CWE-477): [#def31]
libssh-0.10.6/src/pki_crypto.c:419:5: warning[-Wdeprecated-declarations]: ‘EC_KEY_set_public_key’ is deprecated: Since OpenSSL 3.0
/usr/include/openssl/ec.h:1089:27: note: declared here
# 417|
# 418| /* EC_KEY_set_public_key duplicates p */
# 419|-> ok = EC_KEY_set_public_key(key->ecdsa, p);
# 420| EC_POINT_free(p);
# 421| if (!ok) {
Error: COMPILER_WARNING (CWE-477): [#def32]
libssh-0.10.6/src/pki_crypto.c: scope_hint: In function ‘pki_key_dup’
libssh-0.10.6/src/pki_crypto.c:671:13: warning[-Wdeprecated-declarations]: ‘EC_KEY_up_ref’ is deprecated: Since OpenSSL 3.0
/usr/include/openssl/ec.h:1041:27: note: declared here
# 669| }
# 670| new->key = key->key;
# 671|-> rc = EC_KEY_up_ref(key->ecdsa);
# 672| if (rc != 1) {
# 673| goto fail;
Error: COMPILER_WARNING (CWE-477): [#def33]
libssh-0.10.6/src/pki_crypto.c:689:13: warning[-Wdeprecated-declarations]: ‘EC_KEY_new_by_curve_name’ is deprecated: Since OpenSSL 3.0
/usr/include/openssl/ec.h:1017:31: note: declared here
# 687| int ok;
# 688|
# 689|-> new->ecdsa = EC_KEY_new_by_curve_name(key->ecdsa_nid);
# 690| if (new->ecdsa == NULL) {
# 691| goto fail;
Error: COMPILER_WARNING (CWE-477): [#def34]
libssh-0.10.6/src/pki_crypto.c:694:13: warning[-Wdeprecated-declarations]: ‘EC_KEY_get0_public_key’ is deprecated: Since OpenSSL 3.0
/usr/include/openssl/ec.h:1081:39: note: declared here
# 692| }
# 693|
# 694|-> p = EC_KEY_get0_public_key(key->ecdsa);
# 695| if (p == NULL) {
# 696| goto fail;
Error: COMPILER_WARNING (CWE-477): [#def35]
libssh-0.10.6/src/pki_crypto.c:699:13: warning[-Wdeprecated-declarations]: ‘EC_KEY_set_public_key’ is deprecated: Since OpenSSL 3.0
/usr/include/openssl/ec.h:1089:27: note: declared here
# 697| }
# 698|
# 699|-> ok = EC_KEY_set_public_key(new->ecdsa, p);
# 700| if (!ok) {
# 701| goto fail;
Error: COMPILER_WARNING (CWE-477): [#def36]
libssh-0.10.6/src/pki_crypto.c:704:13: warning[-Wdeprecated-declarations]: ‘EC_KEY_up_ref’ is deprecated: Since OpenSSL 3.0
/usr/include/openssl/ec.h:1041:27: note: declared here
# 702| }
# 703| } else {
# 704|-> rc = EC_KEY_up_ref(key->ecdsa);
# 705| if (rc != 1) {
# 706| goto fail;
Error: COMPILER_WARNING (CWE-477): [#def37]
libssh-0.10.6/src/pki_crypto.c: scope_hint: In function ‘pki_key_generate_ecdsa’
libssh-0.10.6/src/pki_crypto.c:928:5: warning[-Wdeprecated-declarations]: ‘EC_KEY_new_by_curve_name’ is deprecated: Since OpenSSL 3.0
/usr/include/openssl/ec.h:1017:31: note: declared here
# 926| */
# 927| #if 1
# 928|-> key->ecdsa = EC_KEY_new_by_curve_name(key->ecdsa_nid);
# 929| if (key->ecdsa == NULL) {
# 930| return SSH_ERROR;
Error: COMPILER_WARNING (CWE-477): [#def38]
libssh-0.10.6/src/pki_crypto.c:944:5: warning[-Wdeprecated-declarations]: ‘EC_KEY_generate_key’ is deprecated: Since OpenSSL 3.0
/usr/include/openssl/ec.h:1120:27: note: declared here
# 942| */
# 943| #if 1
# 944|-> ok = EC_KEY_generate_key(key->ecdsa);
# 945| if (!ok) {
# 946| EC_KEY_free(key->ecdsa);
Error: COMPILER_WARNING (CWE-477): [#def39]
libssh-0.10.6/src/pki_crypto.c:946:9: warning[-Wdeprecated-declarations]: ‘EC_KEY_free’ is deprecated: Since OpenSSL 3.0
/usr/include/openssl/ec.h:1022:28: note: declared here
# 944| ok = EC_KEY_generate_key(key->ecdsa);
# 945| if (!ok) {
# 946|-> EC_KEY_free(key->ecdsa);
# 947| return SSH_ERROR;
# 948| }
Error: COMPILER_WARNING (CWE-477): [#def40]
libssh-0.10.6/src/pki_crypto.c:950:5: warning[-Wdeprecated-declarations]: ‘EC_KEY_set_asn1_flag’ is deprecated: Since OpenSSL 3.0
/usr/include/openssl/ec.h:1106:28: note: declared here
# 948| }
# 949|
# 950|-> EC_KEY_set_asn1_flag(key->ecdsa, OPENSSL_EC_NAMED_CURVE);
# 951| #endif /* OPENSSL_VERSION_NUMBER */
# 952| return SSH_OK;
Error: COMPILER_WARNING (CWE-477): [#def41]
libssh-0.10.6/src/pki_crypto.c: scope_hint: In function ‘pki_key_compare’
libssh-0.10.6/src/pki_crypto.c:1055:17: warning[-Wdeprecated-declarations]: ‘EC_KEY_get0_public_key’ is deprecated: Since OpenSSL 3.0
/usr/include/openssl/ec.h:1081:39: note: declared here
# 1053| #ifdef HAVE_OPENSSL_ECC
# 1054| {
# 1055|-> const EC_POINT *p1 = EC_KEY_get0_public_key(k1->ecdsa);
# 1056| const EC_POINT *p2 = EC_KEY_get0_public_key(k2->ecdsa);
# 1057| const EC_GROUP *g1 = EC_KEY_get0_group(k1->ecdsa);
Error: COMPILER_WARNING (CWE-477): [#def42]
libssh-0.10.6/src/pki_crypto.c:1056:17: warning[-Wdeprecated-declarations]: ‘EC_KEY_get0_public_key’ is deprecated: Since OpenSSL 3.0
/usr/include/openssl/ec.h:1081:39: note: declared here
# 1054| {
# 1055| const EC_POINT *p1 = EC_KEY_get0_public_key(k1->ecdsa);
# 1056|-> const EC_POINT *p2 = EC_KEY_get0_public_key(k2->ecdsa);
# 1057| const EC_GROUP *g1 = EC_KEY_get0_group(k1->ecdsa);
# 1058| const EC_GROUP *g2 = EC_KEY_get0_group(k2->ecdsa);
Error: COMPILER_WARNING (CWE-477): [#def43]
libssh-0.10.6/src/pki_crypto.c:1057:17: warning[-Wdeprecated-declarations]: ‘EC_KEY_get0_group’ is deprecated: Since OpenSSL 3.0
/usr/include/openssl/ec.h:1053:39: note: declared here
# 1055| const EC_POINT *p1 = EC_KEY_get0_public_key(k1->ecdsa);
# 1056| const EC_POINT *p2 = EC_KEY_get0_public_key(k2->ecdsa);
# 1057|-> const EC_GROUP *g1 = EC_KEY_get0_group(k1->ecdsa);
# 1058| const EC_GROUP *g2 = EC_KEY_get0_group(k2->ecdsa);
# 1059|
Error: COMPILER_WARNING (CWE-477): [#def44]
libssh-0.10.6/src/pki_crypto.c:1058:17: warning[-Wdeprecated-declarations]: ‘EC_KEY_get0_group’ is deprecated: Since OpenSSL 3.0
/usr/include/openssl/ec.h:1053:39: note: declared here
# 1056| const EC_POINT *p2 = EC_KEY_get0_public_key(k2->ecdsa);
# 1057| const EC_GROUP *g1 = EC_KEY_get0_group(k1->ecdsa);
# 1058|-> const EC_GROUP *g2 = EC_KEY_get0_group(k2->ecdsa);
# 1059|
# 1060| if (p1 == NULL || p2 == NULL) {
Error: COMPILER_WARNING (CWE-477): [#def45]
libssh-0.10.6/src/pki_crypto.c:1073:21: warning[-Wdeprecated-declarations]: ‘EC_KEY_get0_private_key’ is deprecated: Since OpenSSL 3.0
/usr/include/openssl/ec.h:1067:37: note: declared here
# 1071|
# 1072| if (what == SSH_KEY_CMP_PRIVATE) {
# 1073|-> if (bignum_cmp(EC_KEY_get0_private_key(k1->ecdsa),
# 1074| EC_KEY_get0_private_key(k2->ecdsa))) {
# 1075| return 1;
Error: COMPILER_WARNING (CWE-477): [#def46]
libssh-0.10.6/src/pki_crypto.c: scope_hint: In function ‘pki_private_key_to_pem’
libssh-0.10.6/src/pki_crypto.c:1171:13: warning[-Wdeprecated-declarations]: ‘EVP_PKEY_set1_EC_KEY’ is deprecated: Since OpenSSL 3.0
/usr/include/openssl/pem.h:22: included_from: Included from here.
/usr/include/openssl/evp.h:1389:5: note: declared here
# 1169| }
# 1170|
# 1171|-> rc = EVP_PKEY_set1_EC_KEY(pkey, key->ecdsa);
# 1172| break;
# 1173| #endif /* OPENSSL_VERSION_NUMBER */
Error: COMPILER_WARNING (CWE-477): [#def47]
libssh-0.10.6/src/pki_crypto.c: scope_hint: In function ‘pki_private_key_from_base64’
libssh-0.10.6/src/pki_crypto.c:1357:9: warning[-Wdeprecated-declarations]: ‘EVP_PKEY_get1_EC_KEY’ is deprecated: Since OpenSSL 3.0
/usr/include/openssl/evp.h:1393:19: note: declared here
# 1355| */
# 1356| #if 1
# 1357|-> ecdsa = EVP_PKEY_get1_EC_KEY(pkey);
# 1358| if (ecdsa == NULL) {
# 1359| SSH_LOG(SSH_LOG_WARN,
Error: COMPILER_WARNING (CWE-477): [#def48]
libssh-0.10.6/src/pki_crypto.c:1479:5: warning[-Wdeprecated-declarations]: ‘EC_KEY_free’ is deprecated: Since OpenSSL 3.0
/usr/include/openssl/ec.h:1022:28: note: declared here
# 1477| */
# 1478| #ifdef HAVE_OPENSSL_ECC
# 1479|-> EC_KEY_free(ecdsa);
# 1480| #endif
# 1481| #ifdef HAVE_OPENSSL_ED25519
Error: COMPILER_WARNING (CWE-477): [#def49]
libssh-0.10.6/src/pki_crypto.c: scope_hint: In function ‘pki_publickey_to_blob’
libssh-0.10.6/src/pki_crypto.c:2075:13: warning[-Wdeprecated-declarations]: ‘EC_KEY_get0_public_key’ is deprecated: Since OpenSSL 3.0
/usr/include/openssl/ec.h:1081:39: note: declared here
# 2073| #if 1
# 2074| #ifdef WITH_PKCS11_URI
# 2075|-> if (ssh_key_is_private(key) && !EC_KEY_get0_public_key(key->ecdsa)) {
# 2076| SSH_LOG(SSH_LOG_INFO, "It is mandatory to have separate public"
# 2077| " ECDSA key objects in the PKCS #11 device. Unlike RSA,"
Error: COMPILER_WARNING (CWE-477): [#def50]
libssh-0.10.6/src/pki_crypto.c:2082:17: warning[-Wdeprecated-declarations]: ‘EC_KEY_get0_group’ is deprecated: Since OpenSSL 3.0
/usr/include/openssl/ec.h:1053:39: note: declared here
# 2080| }
# 2081| #endif /* WITH_PKCS11_URI */
# 2082|-> e = make_ecpoint_string(EC_KEY_get0_group(key->ecdsa),
# 2083| EC_KEY_get0_public_key(key->ecdsa));
# 2084| #else
Error: COMPILER_WARNING (CWE-477): [#def51]
libssh-0.10.6/src/pki_crypto.c:2083:41: warning[-Wdeprecated-declarations]: ‘EC_KEY_get0_public_key’ is deprecated: Since OpenSSL 3.0
/usr/include/openssl/ec.h:1081:39: note: declared here
# 2081| #endif /* WITH_PKCS11_URI */
# 2082| e = make_ecpoint_string(EC_KEY_get0_group(key->ecdsa),
# 2083|-> EC_KEY_get0_public_key(key->ecdsa));
# 2084| #else
# 2085| rc = EVP_PKEY_todata(key->key, EVP_PKEY_PUBLIC_KEY, ¶ms);
Error: COMPILER_WARNING (CWE-477): [#def52]
libssh-0.10.6/src/pki_crypto.c: scope_hint: In function ‘pki_key_to_pkey’
libssh-0.10.6/src/pki_crypto.c:2932:9: warning[-Wdeprecated-declarations]: ‘EVP_PKEY_set1_EC_KEY’ is deprecated: Since OpenSSL 3.0
/usr/include/openssl/evp.h:1389:5: note: declared here
# 2930| }
# 2931|
# 2932|-> EVP_PKEY_set1_EC_KEY(pkey, key->ecdsa);
# 2933| break;
# 2934| #endif /* OPENSSL_VERSION_NUMBER */
Error: COMPILER_WARNING (CWE-477): [#def53]
libssh-0.10.6/src/pki_crypto.c: scope_hint: In function ‘pki_uri_import’
libssh-0.10.6/src/pki_crypto.c:3483:9: warning[-Wdeprecated-declarations]: ‘ENGINE_load_private_key’ is deprecated: Since OpenSSL 3.0
libssh-0.10.6/src/pki_crypto.c:36: included_from: Included from here.
/usr/include/openssl/engine.h:638:11: note: declared here
# 3481| switch (key_type) {
# 3482| case SSH_KEY_PRIVATE:
# 3483|-> pkey = ENGINE_load_private_key(engine, uri_name, NULL, NULL);
# 3484| if (pkey == NULL) {
# 3485| SSH_LOG(SSH_LOG_WARN,
Error: COMPILER_WARNING (CWE-477): [#def54]
libssh-0.10.6/src/pki_crypto.c:3492:9: warning[-Wdeprecated-declarations]: ‘ENGINE_load_public_key’ is deprecated: Since OpenSSL 3.0
/usr/include/openssl/engine.h:641:11: note: declared here
# 3490| break;
# 3491| case SSH_KEY_PUBLIC:
# 3492|-> pkey = ENGINE_load_public_key(engine, uri_name, NULL, NULL);
# 3493| if (pkey == NULL) {
# 3494| SSH_LOG(SSH_LOG_WARN,
Error: COMPILER_WARNING (CWE-477): [#def55]
libssh-0.10.6/src/pki_crypto.c:3531:9: warning[-Wdeprecated-declarations]: ‘EVP_PKEY_get1_EC_KEY’ is deprecated: Since OpenSSL 3.0
/usr/include/openssl/evp.h:1393:19: note: declared here
# 3529| */
# 3530| #if 1
# 3531|-> ecdsa = EVP_PKEY_get1_EC_KEY(pkey);
# 3532| if (ecdsa == NULL) {
# 3533| SSH_LOG(SSH_LOG_WARN,
Error: COMPILER_WARNING (CWE-477): [#def56]
libssh-0.10.6/src/pki_crypto.c:3602:5: warning[-Wdeprecated-declarations]: ‘EC_KEY_free’ is deprecated: Since OpenSSL 3.0
/usr/include/openssl/ec.h:1022:28: note: declared here
# 3600| */
# 3601| #ifdef HAVE_OPENSSL_ECC
# 3602|-> EC_KEY_free(ecdsa);
# 3603| #endif
# 3604|
Error: COMPILER_WARNING (CWE-477): [#def57]
libssh-0.10.6/src/wrapper.c: scope_hint: In function ‘crypto_free’
libssh-0.10.6/src/wrapper.c:187:9: warning[-Wdeprecated-declarations]: ‘EC_KEY_free’ is deprecated: Since OpenSSL 3.0
# 187 | EC_KEY_free(crypto->ecdh_privkey);
# | ^~~~~~~~~~~
/usr/include/openssl/ecdh.h:10: included_from: Included from here.
libssh-0.10.6/include/libssh/crypto.h:46: included_from: Included from here.
libssh-0.10.6/src/wrapper.c:47: included_from: Included from here.
/usr/include/openssl/ec.h:1022:28: note: declared here
# 1022 | OSSL_DEPRECATEDIN_3_0 void EC_KEY_free(EC_KEY *key);
# | ^~~~~~~~~~~
# 185| */
# 186| #if 1
# 187|-> EC_KEY_free(crypto->ecdh_privkey);
# 188| #else
# 189| EVP_PKEY_free(crypto->ecdh_privkey);
Scan Properties
| analyzer-version-clang | 18.1.3 |
| analyzer-version-cppcheck | 2.13.0 |
| analyzer-version-gcc | 14.0.1 |
| analyzer-version-gcc-analyzer | 14.0.1 |
| analyzer-version-shellcheck | 0.10.0 |
| diffbase-analyzer-version-clang | 18.1.3 |
| diffbase-analyzer-version-cppcheck | 2.13.0 |
| diffbase-analyzer-version-gcc | 14.0.1 |
| diffbase-analyzer-version-gcc-analyzer | 14.0.1 |
| diffbase-analyzer-version-shellcheck | 0.10.0 |
| diffbase-enabled-plugins | clang, cppcheck, gcc, shellcheck |
| diffbase-exit-code | 0 |
| diffbase-host | ip-172-16-1-253.us-west-2.compute.internal |
| diffbase-mock-config | fedora-41-x86_64 |
| diffbase-project-name | libssh-0.10.6-6.fc41 |
| diffbase-store-results-to | /tmp/tmp4rqd_qe5/libssh-0.10.6-6.fc41.tar.xz |
| diffbase-time-created | 2024-04-22 11:07:56 |
| diffbase-time-finished | 2024-04-22 11:15:24 |
| diffbase-tool | csmock |
| diffbase-tool-args | '/usr/bin/csmock' '-r' 'fedora-41-x86_64' '-t' 'cppcheck,gcc,clang,shellcheck' '-o' '/tmp/tmp4rqd_qe5/libssh-0.10.6-6.fc41.tar.xz' '--gcc-analyze' '/tmp/tmp4rqd_qe5/libssh-0.10.6-6.fc41.src.rpm' |
| diffbase-tool-version | csmock-3.5.3-1.el9 |
| enabled-plugins | clang, cppcheck, gcc, shellcheck |
| exit-code | 0 |
| host | ip-172-16-1-253.us-west-2.compute.internal |
| mock-config | fedora-41-x86_64 |
| project-name | libssh-0.10.6-5.fc40 |
| store-results-to | /tmp/tmp55myl6x4/libssh-0.10.6-5.fc40.tar.xz |
| time-created | 2024-04-22 10:59:37 |
| time-finished | 2024-04-22 11:07:33 |
| title | Fixed defects |
| tool | csmock |
| tool-args | '/usr/bin/csmock' '-r' 'fedora-41-x86_64' '-t' 'cppcheck,gcc,clang,shellcheck' '-o' '/tmp/tmp55myl6x4/libssh-0.10.6-5.fc40.tar.xz' '--gcc-analyze' '/tmp/tmp55myl6x4/libssh-0.10.6-5.fc40.src.rpm' |
| tool-version | csmock-3.5.3-1.el9 |