containers / containers/bubblewrap

Code issues

Open
#358 5 comments 0 reactions 0 assignees View on GitHub
Dominant language
C
Stars
8.7k
Forks
386
Avg merge
3d 17h
Merged PRs (30d)
11

Description

Running bubblewrap through the static code analytics tool sonarqube revealed some areas that need a closer look: https://sonarcloud.io/dashboard?id=noppnopp_bubblewrap

If I am not mistaken, the "vulnerabilities" listed regarding strcpy and strcat are not exploitable since the checks are done manually. On the other hand I am not aware of any reason not to use strncpy instead to be save.

There are some other areas that indicate further issues.
I hope this can be helpful to impove the quality of the code.

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.