maskit opened a new issue, #10330:
URL: https://github.com/apache/trafficserver/issues/10330

   ```
   2. Condition !regex_path->empty(), taking true branch.
        7. Condition !regex_path->empty(), taking true branch.
   1336    if (!regex_path.empty()) {
        8. identity_transfer: Passing strp as argument 1 to constructor for 
class CacheScan, which sets cs.stripe to that argument. [[show 
details](https://scan6.scan.coverity.com/eventId=34751303-41&modelId=34751303-1&fileInstanceId=164122410&filePath=%2Fsrc%2Ftraffic_cache_tool%2FCacheScan.h&fileStart=46&fileEnd=51)]
   1337      CacheScan cs(strp, regex_path);
        
   CID 1518614 (#2 of 2): Untrusted loop bound (TAINTED_SCALAR)
   9. tainted_data: Passing tainted expression cs.stripe to Scan, which uses it 
as a loop boundary. [[show 
details](https://scan6.scan.coverity.com/eventId=34751303-44&modelId=34751303-2&fileInstanceId=164122409&filePath=%2Fsrc%2Ftraffic_cache_tool%2FCacheScan.cc&fileStart=37&fileEnd=77)]
        Ensure that tainted values are properly sanitized, by checking that 
their values are within a permissible range.
   1338      cs.Scan(true);
        3. Falling through to end of if statement.
   1339    } else {
   ```


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to