The first warning about strncat() is correct. The code does open up a
possible buffer overflow.
The second warning is valid on the face of it, it is possible to return
from the non-void function without returning an explicit value. But, I
think cmdparse.ypp is produced by lex (or flex.) I'm not sure that needs
to be changed.
Are those the only 2 warnings produced?
--
Mark Miesfeld
On Mon, Dec 9, 2013 at 11:47 AM, Perry Werneck <[email protected]>wrote:
> Hi,
>
> I got a few errors during the validation of the OpenSUSE install package
> for the ooRexx 4.2.0 beta:
>
> [ 189s] I: *Statement might be overflowing a buffer in strncat.* Common
> mistake:
> [ 189s] BAD: strncat(buffer,charptr,sizeof(buffer)) is wrong, it takes
> the left over size as 3rd argument
> [ 189s] GOOD: strncat(buffer,charptr,sizeof(buffer)-strlen(buffer)-1)
> [ 189s] E: ooRexx bufferoverflowstrncat
> ./interpreter/platform/unix/SysFileSystem.cpp:424:55
> [ 189s]
> [ 189s] I: *Program returns random data in a function*
> [ 189s] E: ooRexx no-return-in-nonvoid-function
> ./extensions/hostemu/cmdparse.ypp:289
> [ 189s]
>
>
>
>
> 2013/12/9 Mark Miesfeld <[email protected]>
>
>> All -
>>
>> The Open Object Rexx Project is extremely happy to announce the first
>> ooRexx 4.2.0 beta. The first beta installation packages are available on
>> SourceForge at:
>>
>> https://sourceforge.net/projects/oorexx/files/oorexx/4.2.0%20%28beta%29/?
>>
>> Installer packages are available for a few operating systems now.
>> Additional files will be added shortly, as they become available.
>>
>> ooRexx 4.2.0 is an enhancement and bug fix release. The first new feature
>> release in some time. There are a large number of new feature requests
>> that have been implemented in this release. In addition, many reported
>> bugs have been fixed. Please read the CHANGES document for a list of the
>> bug tracker items fixed and the feature request tracker items that have
>> been implemented.
>>
>> Please test the beta and report any issues uncovered on the SourceForge
>> bug tracker at:
>>
>> https://sourceforge.net/p/oorexx/bugs/
>>
>> Note that the development team is limited both in resources and numbers.
>> Most members of the team run with the 4.2.0 code on their system every day
>> and have been continually testing ooRexx 4.2.0 since the release of ooRexx
>> 4.1.0. The bugs that the developers are likely to find, have been found
>> and fixed. The bugs that currently exist in 4.2.0 need to be found by the
>> users of ooRexx.
>>
>> The users of ooRexx are strongly urged to, at a minimum, run the Rexx
>> programs they use under the beta code. Bugs discovered during the beta
>> phase of ooRexx 4.2.0 will be fixed before the final release of 4.2.0.
>> Bugs discovered the day after the final release will not make it into an
>> official release of ooRexx for quite some time.
>>
>> Thank you,
>> The ooRexx Project Team
>>
>>
>> ------------------------------------------------------------------------------
>> Sponsored by Intel(R) XDK
>> Develop, test and display web and hybrid apps with a single code base.
>> Download it for free now!
>>
>> http://pubads.g.doubleclick.net/gampad/clk?id=111408631&iu=/4140/ostg.clktrk
>> _______________________________________________
>> Oorexx-devel mailing list
>> [email protected]
>> https://lists.sourceforge.net/lists/listinfo/oorexx-devel
>>
>>
>
>
> --
> Perry Werneck
> BrasÃlia/DF
>
>
> ------------------------------------------------------------------------------
> Sponsored by Intel(R) XDK
> Develop, test and display web and hybrid apps with a single code base.
> Download it for free now!
>
> http://pubads.g.doubleclick.net/gampad/clk?id=111408631&iu=/4140/ostg.clktrk
> _______________________________________________
> Oorexx-devel mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/oorexx-devel
>
>
------------------------------------------------------------------------------
Sponsored by Intel(R) XDK
Develop, test and display web and hybrid apps with a single code base.
Download it for free now!
http://pubads.g.doubleclick.net/gampad/clk?id=111408631&iu=/4140/ostg.clktrk
_______________________________________________
Oorexx-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/oorexx-devel
