Hi,
Bug created: https://sourceforge.net/p/oorexx/bugs/1220/
Thanks!!!
2013/12/9 Mark Miesfeld <[email protected]>
> We can fix the first one. Can you open a bug for them. Just put in the
> warning text.
>
> hostemu is mostly David's area. He can decide how he wants to handle it.
>
> --
> Mark Miesfeld
>
>
> On Mon, Dec 9, 2013 at 12:46 PM, Perry Werneck <[email protected]>wrote:
>
>> Hi,
>>
>> It´s the only errors for now. Probably it will show a few other warning
>> when they´re fixed because the package build just stops with this erros.
>>
>> I was able to "fix" the second error just adding a "return 0;" line in
>> the last line of the affected method (not sure if it´s the right thing to
>> do but, at least, the return isn´t random anymore).
>>
>> The first one it´s a little trick to me because seens like they´re macro
>> calls.
>>
>>
>>
>> 2013/12/9 Mark Miesfeld <[email protected]>
>>
>>> The first warning about strncat() is correct. The code does open up a
>>> possible buffer overflow.
>>>
>>> The second warning is valid on the face of it, it is possible to return
>>> from the non-void function without returning an explicit value. But, I
>>> think cmdparse.ypp is produced by lex (or flex.) I'm not sure that
>>> needs to be changed.
>>>
>>> Are those the only 2 warnings produced?
>>>
>>> --
>>> Mark Miesfeld
>>>
>>>
>>>
>>> On Mon, Dec 9, 2013 at 11:47 AM, Perry Werneck
>>> <[email protected]>wrote:
>>>
>>>> Hi,
>>>>
>>>> I got a few errors during the validation of the OpenSUSE install
>>>> package for the ooRexx 4.2.0 beta:
>>>>
>>>> [ 189s] I: *Statement might be overflowing a buffer in strncat.*Common
>>>> mistake:
>>>> [ 189s] BAD: strncat(buffer,charptr,sizeof(buffer)) is wrong, it
>>>> takes the left over size as 3rd argument
>>>> [ 189s] GOOD:
>>>> strncat(buffer,charptr,sizeof(buffer)-strlen(buffer)-1)
>>>> [ 189s] E: ooRexx bufferoverflowstrncat
>>>> ./interpreter/platform/unix/SysFileSystem.cpp:424:55
>>>> [ 189s]
>>>> [ 189s] I: *Program returns random data in a function*
>>>> [ 189s] E: ooRexx no-return-in-nonvoid-function
>>>> ./extensions/hostemu/cmdparse.ypp:289
>>>> [ 189s]
>>>>
>>>>
>>>>
>>>>
>>>> 2013/12/9 Mark Miesfeld <[email protected]>
>>>>
>>>>> All -
>>>>>
>>>>> The Open Object Rexx Project is extremely happy to announce the first
>>>>> ooRexx 4.2.0 beta. The first beta installation packages are available
>>>>> on SourceForge at:
>>>>>
>>>>>
>>>>> https://sourceforge.net/projects/oorexx/files/oorexx/4.2.0%20%28beta%29/?
>>>>>
>>>>> Installer packages are available for a few operating systems now.
>>>>> Additional files will be added shortly, as they become available.
>>>>>
>>>>> ooRexx 4.2.0 is an enhancement and bug fix release. The first new feature
>>>>> release in some time. There are a large number of new feature requests
>>>>> that have been implemented in this release. In addition, many reported
>>>>> bugs have been fixed. Please read the CHANGES document for a list of the
>>>>> bug tracker items fixed and the feature request tracker items that have
>>>>> been implemented.
>>>>>
>>>>> Please test the beta and report any issues uncovered on the SourceForge
>>>>> bug tracker at:
>>>>>
>>>>> https://sourceforge.net/p/oorexx/bugs/
>>>>>
>>>>> Note that the development team is limited both in resources and
>>>>> numbers. Most members of the team run with the 4.2.0 code on their system
>>>>> every day and have been continually testing ooRexx 4.2.0 since the release
>>>>> of ooRexx 4.1.0. The bugs that the developers are likely to find, have
>>>>> been found and fixed. The bugs that currently exist in 4.2.0 need to be
>>>>> found by the users of ooRexx.
>>>>>
>>>>> The users of ooRexx are strongly urged to, at a minimum, run the Rexx
>>>>> programs they use under the beta code. Bugs discovered during the beta
>>>>> phase of ooRexx 4.2.0 will be fixed before the final release of 4.2.0.
>>>>> Bugs discovered the day after the final release will not make it into an
>>>>> official release of ooRexx for quite some time.
>>>>>
>>>>> Thank you,
>>>>> The ooRexx Project Team
>>>>>
>>>>>
>>>>> ------------------------------------------------------------------------------
>>>>> Sponsored by Intel(R) XDK
>>>>> Develop, test and display web and hybrid apps with a single code base.
>>>>> Download it for free now!
>>>>>
>>>>> http://pubads.g.doubleclick.net/gampad/clk?id=111408631&iu=/4140/ostg.clktrk
>>>>> _______________________________________________
>>>>> Oorexx-devel mailing list
>>>>> [email protected]
>>>>> https://lists.sourceforge.net/lists/listinfo/oorexx-devel
>>>>>
>>>>>
>>>>
>>>>
>>>> --
>>>> Perry Werneck
>>>> Brasília/DF
>>>>
>>>>
>>>> ------------------------------------------------------------------------------
>>>> Sponsored by Intel(R) XDK
>>>> Develop, test and display web and hybrid apps with a single code base.
>>>> Download it for free now!
>>>>
>>>> http://pubads.g.doubleclick.net/gampad/clk?id=111408631&iu=/4140/ostg.clktrk
>>>> _______________________________________________
>>>> Oorexx-devel mailing list
>>>> [email protected]
>>>> https://lists.sourceforge.net/lists/listinfo/oorexx-devel
>>>>
>>>>
>>>
>>>
>>> ------------------------------------------------------------------------------
>>> Sponsored by Intel(R) XDK
>>> Develop, test and display web and hybrid apps with a single code base.
>>> Download it for free now!
>>>
>>> http://pubads.g.doubleclick.net/gampad/clk?id=111408631&iu=/4140/ostg.clktrk
>>> _______________________________________________
>>> Oorexx-devel mailing list
>>> [email protected]
>>> https://lists.sourceforge.net/lists/listinfo/oorexx-devel
>>>
>>>
>>
>>
>> --
>> Perry Werneck
>> Brasília/DF
>>
>>
>> ------------------------------------------------------------------------------
>> Sponsored by Intel(R) XDK
>> Develop, test and display web and hybrid apps with a single code base.
>> Download it for free now!
>>
>> http://pubads.g.doubleclick.net/gampad/clk?id=111408631&iu=/4140/ostg.clktrk
>> _______________________________________________
>> Oorexx-devel mailing list
>> [email protected]
>> https://lists.sourceforge.net/lists/listinfo/oorexx-devel
>>
>>
>
>
> ------------------------------------------------------------------------------
> Sponsored by Intel(R) XDK
> Develop, test and display web and hybrid apps with a single code base.
> Download it for free now!
>
> http://pubads.g.doubleclick.net/gampad/clk?id=111408631&iu=/4140/ostg.clktrk
> _______________________________________________
> Oorexx-devel mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/oorexx-devel
>
>
--
Perry Werneck
Brasília/DF
------------------------------------------------------------------------------
Sponsored by Intel(R) XDK
Develop, test and display web and hybrid apps with a single code base.
Download it for free now!
http://pubads.g.doubleclick.net/gampad/clk?id=111408631&iu=/4140/ostg.clktrk
_______________________________________________
Oorexx-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/oorexx-devel
