srt-1.5.4-1.fc42

List of Findings

Error: COMPILER_WARNING (CWE-477): [#def1]
srt-1.5.4-build/srt-1.5.4/haicrypt/cryspr-gnutls.c: scope_hint: In function ‘crysprGnuTLS_AES_SetKey’
srt-1.5.4-build/srt-1.5.4/haicrypt/cryspr-gnutls.c:55:9: warning[-Wdeprecated-declarations]: ‘nettle_aes_set_encrypt_key’ is deprecated
srt-1.5.4-build/srt-1.5.4/haicrypt/cryspr-gnutls.h:26: included_from: Included from here.
srt-1.5.4-build/srt-1.5.4/haicrypt/cryspr-config.h:17: included_from: Included from here.
srt-1.5.4-build/srt-1.5.4/haicrypt/cryspr.h:39: included_from: Included from here.
srt-1.5.4-build/srt-1.5.4/haicrypt/hcrypt.h:48: included_from: Included from here.
srt-1.5.4-build/srt-1.5.4/haicrypt/cryspr-gnutls.c:22: included_from: Included from here.
/usr/include/nettle/aes.h:158:1: note: declared here
#   53|             return -1;
#   54|           }
#   55|->         aes_set_encrypt_key (aes_key, kstr_len, kstr);
#   56|       } else {               /* Decrypt key */
#   57|           if (!(kstr_len == 16 || kstr_len == 24 || kstr_len == 32)) {

Error: COMPILER_WARNING (CWE-477): [#def2]
srt-1.5.4-build/srt-1.5.4/haicrypt/cryspr-gnutls.c:61:9: warning[-Wdeprecated-declarations]: ‘nettle_aes_set_decrypt_key’ is deprecated
/usr/include/nettle/aes.h:163:1: note: declared here
#   59|             return -1;
#   60|           }
#   61|->         aes_set_decrypt_key (aes_key, kstr_len, kstr);
#   62|       }
#   63|       return(0);

Error: COMPILER_WARNING (CWE-477): [#def3]
srt-1.5.4-build/srt-1.5.4/haicrypt/cryspr-gnutls.c: scope_hint: In function ‘crysprGnuTLS_AES_EcbCipher’
srt-1.5.4-build/srt-1.5.4/haicrypt/cryspr-gnutls.c:81:13: warning[-Wdeprecated-declarations]: ‘nettle_aes_encrypt’ is deprecated
/usr/include/nettle/aes.h:173:1: note: declared here
#   79|           /* Encrypt packet payload, block by block, in output buffer */
#   80|           for (i=0; i<nblk; i++){
#   81|->             aes_encrypt(aes_key, CRYSPR_AESBLKSZ, &out_txt[(i*CRYSPR_AESBLKSZ)], &indata[(i*CRYSPR_AESBLKSZ)]);
#   82|           }
#   83|           /* Encrypt last incomplete block */

Error: COMPILER_WARNING (CWE-477): [#def4]
srt-1.5.4-build/srt-1.5.4/haicrypt/cryspr-gnutls.c:89:13: warning[-Wdeprecated-declarations]: ‘nettle_aes_encrypt’ is deprecated
/usr/include/nettle/aes.h:173:1: note: declared here
#   87|               memcpy(intxt, &indata[(nblk*CRYSPR_AESBLKSZ)], nmore);
#   88|               memset(intxt+nmore, 0, CRYSPR_AESBLKSZ-nmore);
#   89|->             aes_encrypt(aes_key, CRYSPR_AESBLKSZ, &out_txt[(nblk*CRYSPR_AESBLKSZ)], intxt);
#   90|               nblk++;
#   91|           }

Error: COMPILER_WARNING (CWE-477): [#def5]
srt-1.5.4-build/srt-1.5.4/haicrypt/cryspr-gnutls.c:95:13: warning[-Wdeprecated-declarations]: ‘nettle_aes_decrypt’ is deprecated
/usr/include/nettle/aes.h:177:1: note: declared here
#   93|       } else { /* Decrypt */
#   94|           for (i=0; i<nblk; i++){
#   95|->             aes_decrypt(aes_key, CRYSPR_AESBLKSZ, &out_txt[(i*CRYSPR_AESBLKSZ)], &indata[(i*CRYSPR_AESBLKSZ)]);
#   96|           }
#   97|           /* Encrypt last incomplete block */

Error: COMPILER_WARNING (CWE-477): [#def6]
srt-1.5.4-build/srt-1.5.4/haicrypt/cryspr-gnutls.c: scope_hint: In function ‘crysprGnuTLS_AES_CtrCipher’
srt-1.5.4-build/srt-1.5.4/haicrypt/cryspr-gnutls.c:117:16: warning[-Wdeprecated-declarations]: ‘nettle_aes_encrypt’ is deprecated
/usr/include/nettle/aes.h:173:1: note: declared here
#  115|   
#  116|       ctr_crypt (aes_key,         /* ctx */
#  117|->                (nettle_cipher_func*)aes_encrypt, /* nettle_cipher_func */
#  118|                  CRYSPR_AESBLKSZ,  /* cipher blocksize */
#  119|                  iv,              /* iv */

Error: COMPILER_WARNING: [#def7]
srt-1.5.4-build/srt-1.5.4/srtcore/queue.cpp: scope_hint: In function ‘allocateEntry’
srt-1.5.4-build/srt-1.5.4/srtcore/queue.cpp:113:36: warning[-Walloc-size-larger-than=]: argument 1 value ‘18446744073709551615’ exceeds maximum object size 9223372036854775807
#  113 |         tempu = new CUnit[iNumUnits];
#      |                                    ^
/usr/include/c++/14/new:133:26: note: in a call to allocation function ‘operator new []’ declared here
#  133 | _GLIBCXX_NODISCARD void* operator new[](std::size_t) _GLIBCXX_THROW (std::bad_alloc)
#      |                          ^
#  111|       {
#  112|           tempq = new CQEntry;
#  113|->         tempu = new CUnit[iNumUnits];
#  114|           tempb = new char[iNumUnits * mss];
#  115|       }

Scan Properties