Package: nessus-plugins
Version: 2.2.4-2
I've a filter that looks for certain compiler warnings that are
generated on 64-bit systems. This filter reported the following issues
with nessus-plugins:
Function `get_tcp_svcs' implicitly converted to pointer at
nessus_tcp_scanner.c:143
Function `stream_get_ssl' implicitly converted to pointer at ssl_ciphers.c:145
Function `bpf_next_tv' implicitly converted to pointer at synscan.c:433
This means pointers are being truncated, and will likely cause a
segfault. Including the appropriate header files should fix this
problem.
--
dann frazier <[EMAIL PROTECTED]>
--- Begin Message ---
>>>>> On Mon, 02 May 2005 14:17:32 -0600, dann frazier <[EMAIL PROTECTED]> said:
Dann> This one I can't figure out - I can't find a header files with
Dann> the appropriate definitions in it. However, it looks like
Dann> there is an explicit cast for the return value for each of
Dann> these calls.
Dann> Bad coding maybe, but is this technically a bug?
Definitely a bug. Rememer that:
extern int foo ();
:
ptr = (void *) foo ();
effectively means:
ptr = (void *) (int) foo ();
Thus, the top 32 bits returned by foo() are definitely lost -> major badness.
get_tcp_svcs() seems to come from nessus-libraries-2.2.4, where it is
declared in libnessus/services.h. Perhaps this file needs to be
installed somewhere so the offending file can include it?
Similar goes for stream_get_ssl() and bpf_next_tv(), except that they
don't appear to be declared at all.
--david
--- End Message ---