containers / containers/bubblewrap
Code issues
Open
- Dominant language
- C
- Stars
- 8.7k
- Forks
- 386
- Avg merge
- 3d 17h
- Merged PRs (30d)
- 11
Description
Running bubblewrap through the static code analytics tool sonarqube revealed some areas that need a closer look: https://sonarcloud.io/dashboard?id=noppnopp_bubblewrap
If I am not mistaken, the "vulnerabilities" listed regarding strcpy and strcat are not exploitable since the checks are done manually. On the other hand I am not aware of any reason not to use strncpy instead to be save.
There are some other areas that indicate further issues.
I hope this can be helpful to impove the quality of the code.
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.