Loading...

XML

Word

Printable

Type: Bug
Resolution: Done
Priority: Major
Fix Version/s: 7.1.0.DR14
Affects Version/s: 7.1.0.DR11
Component/s: Security
Labels:
- password
- static_analysis

CDW devel_ack:
CDW docs_ack:
CDW pm_ack:
CDW qa_ack:
CDW release:
Target Release:

7.1.0.GA

SFDC Cases Counter:
SFDC Cases Open:
SFDC Cases Links:

Seems if statement will never be true, because invKeyPerm is of type byte[]. And permitted values for byte are -128...127.

BSDUnixDESCryptPasswordImpl.java

outBit = invKeyPerm[inBit];
if (outBit == 255) {
    continue;
}

https://scan7.coverity.com/reports.htm#v23632/p11778/fileInstanceId=8553812&defectInstanceId=2138962&mergedDefectId=1377479&fileStart=1&fileEnd=250

is cloned by

ELY-960 Coverity static analysis: Suspicious integer expression in BSDUnixDESCryptPasswordImpl (Elytron)

Resolved

Assignee:: Ilia Vassilev

Reporter:: Martin Choma

Tester:: Martin Choma

QA Contact:: Martin Choma

Votes:: 0 Vote for this issue

Watchers:: 3 Start watching this issue

Created:: 2017/01/25 7:57 AM

Updated:: 2024/09/02 4:49 PM

Resolved:: 2017/03/14 3:18 PM