Package: nessus-plugins
Version: 2.2.4-2

I've a filter that looks for certain compiler warnings that are
generated on 64-bit systems.  This filter reported the following issues
with nessus-plugins:

Function `get_tcp_svcs' implicitly converted to pointer at 
nessus_tcp_scanner.c:143
Function `stream_get_ssl' implicitly converted to pointer at ssl_ciphers.c:145
Function `bpf_next_tv' implicitly converted to pointer at synscan.c:433

This means pointers are being truncated, and will likely cause a
segfault.  Including the appropriate header files should fix this
problem.
-- 
dann frazier <[EMAIL PROTECTED]>
--- Begin Message ---
>>>>> On Mon, 02 May 2005 14:17:32 -0600, dann frazier <[EMAIL PROTECTED]> said:

  Dann> This one I can't figure out - I can't find a header files with
  Dann> the appropriate definitions in it.  However, it looks like
  Dann> there is an explicit cast for the return value for each of
  Dann> these calls.

  Dann> Bad coding maybe, but is this technically a bug?

Definitely a bug.  Rememer that:

 extern int foo ();
  :
 ptr = (void *) foo ();

effectively means:

 ptr = (void *) (int) foo ();

Thus, the top 32 bits returned by foo() are definitely lost -> major badness.

get_tcp_svcs() seems to come from nessus-libraries-2.2.4, where it is
declared in libnessus/services.h.  Perhaps this file needs to be
installed somewhere so the offending file can include it?

Similar goes for stream_get_ssl() and bpf_next_tv(), except that they
don't appear to be declared at all.

        --david

--- End Message ---

Reply via email to