ANSSI-FR/polichombr

View on GitHub

Showing 1,243 of 1,244 total issues

Line is too long. [444/80]
Open

                  ['md2', ["\x29\x2e\x43\xc9\xa2\xd8\x7c\x01\x3d\x36\x54\xa1\xec\xf0\x06\x13\x62\xa7\x05\xf3\xc0\xc7\x73\x8c\x98\x93\x2b\xd9\xbc\x4c\x82\xca\x1e\x9b\x57\x3c\xfd\xd4\xe0\x16\x67\x42\x6f\x18\x8a\x17\xe5\x12\xbe\x4e\xc4\xd6\xda\x9e\xde\x49\xa0\xfb\xf5\x8e\xbb\x2f\xee\x7a\xa9\x68\x79\x91\x15\xb2\x07\x3f\x94\xc2\x10\x89\x0b\x22\x5f\x21\x80\x7f\x5d\x9a\x5a\x90\x32\x27\x35\x3e\xcc\xe7\xbf\xf7\x97\x03\xff\x19\x30\xb3\x48\xa5\xb5"]],

Avoid more than 3 levels of block nesting.
Open

          if orifunc
            entrypoints.each do |ep|
              printCallTree(dasm.normalize(ep), orifunc) if isFuncTreeLink(dasm.normalize(ep), orifunc)
            end
          end

This cop checks for excessive nesting of conditional and looping constructs.

You can configure if blocks are considered using the CountBlocks option. When set to false (the default) blocks are not counted towards the nesting level. Set to true to count blocks as well.

The maximum level of nesting allowed is configurable.

Line is too long. [1104/80]
Open

                  ['Twofish_mds', ["\x75\x32\xbc\xbc\xf3\x21\xec\xec\xc6\x43\x20\x20\xf4\xc9\xb3\xb3\xdb\x03\xda\xda\x7b\x8b\x02\x02\xfb\x2b\xe2\xe2\xc8\xfa\x9e\x9e\x4a\xec\xc9\xc9\xd3\x09\xd4\xd4\xe6\x6b\x18\x18\x6b\x9f\x1e\x1e\x45\x0e\x98\x98\x7d\x38\xb2\xb2\xe8\xd2\xa6\xa6\x4b\xb7\x26\x26\xd6\x57\x3c\x3c\x32\x8a\x93\x93\xd8\xee\x82\x82\xfd\x98\x52\x52\x37\xd4\x7b\x7b\x71\x37\xbb\xbb\xf1\x97\x5b\x5b\xe1\x83\x47\x47\x30\x3c\x24\x24\x0f\xe2\x51\x51\xf8\xc6\xba\xba\x1b\xf3\x4a\x4a\x87\x48\xbf\xbf\xfa\x70\x0d\x0d\x06\xb3\xb0\xb0\x3f\xde\x75\x75\x5e\xfd\xd2\xd2\xba\x20\x7d\x7d\xae\x31\x66\x66\x5b\xa3\x3a\x3a\x8a\x1c\x59\x59\x00\x00\x00\x00\xbc\x93\xcd\xcd\x9d\xe0\x1a\x1a\x6d\x2c\xae\xae\xc1\xab\x7f\x7f\xb1\xc7\x2b\x2b\x0e\xb9\xbe\xbe\x80\xa0\xe0\xe0\x5d\x10\x8a\x8a\xd2\x52\x3b\x3b\xd5\xba\x64\x64\xa0\x88\xd8\xd8\x84\xa5\xe7\xe7\x07\xe8\x5f\x5f\x14\x11\x1b\x1b\xb5\xc2\x2c\x2c\x90\xb4\xfc\xfc\x2c\x27\x31\x31\xa3\x65\x80\x80\xb2\x2a\x73\x73\x73\x81\x0c\x0c\x4c\x5f\x79\x79\x54\x41\x6b\x6b\x92\x02\x4b\x4b\x74\x69\x53\x53\x36\x8f\x94\x94\x51\x1f\x83\x83\x38\x36\x2a\x2a\xb0\x9c\xc4\xc4\xbd\xc8"]],

Line is too long. [229/80]
Open

                  ['MD5mac_t', ["\x97\xef\x45\xac\x29\x0f\x43\xcd\x45\x7e\x1b\x55\x1c\x80\x11\x34\xb1\x77\xce\x96\x2e\x72\x8e\x7c\x5f\x5a\xab\x0a\x36\x43\xbe\x18\x9d\x21\xb4\x21\xbc\x87\xb9\x4d\xa2\x9d\x27\xbd\xc7\x5b\xd7\xc3"]],

Line is too long. [550/80]
Open

                  ['HAVAL_wi2', ["\x05\x00\x00\x00\x0e\x00\x00\x00\x1a\x00\x00\x00\x12\x00\x00\x00\x0b\x00\x00\x00\x1c\x00\x00\x00\x07\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x17\x00\x00\x00\x14\x00\x00\x00\x16\x00\x00\x00\x01\x00\x00\x00\x0a\x00\x00\x00\x04\x00\x00\x00\x08\x00\x00\x00\x1e\x00\x00\x00\x03\x00\x00\x00\x15\x00\x00\x00\x09\x00\x00\x00\x11\x00\x00\x00\x18\x00\x00\x00\x1d\x00\x00\x00\x06\x00\x00\x00\x13\x00\x00\x00\x0c\x00\x00\x00\x0f\x00\x00\x00\x0d\x00\x00\x00\x02\x00\x00\x00\x19\x00\x00\x00\x1f\x00\x00\x00\x1b\x00\x00\x00"]],

Line is too long. [227/80]
Open

                  ['DES_ei', ["\x20\x01\x02\x03\x04\x05\x04\x05\x06\x07\x08\x09\x08\x09\x0a\x0b\x0c\x0d\x0c\x0d\x0e\x0f\x10\x11\x10\x11\x12\x13\x14\x15\x14\x15\x16\x17\x18\x19\x18\x19\x1a\x1b\x1c\x1d\x1c\x1d\x1e\x1f\x20\x01"]],

Line is too long. [116/80]
Open

                  ['PKCS_sha384', ["\x30\x41\x30\x0d\x06\x09\x60\x86\x48\x01\x65\x03\x04\x02\x02\x05\x00\x04\x30"]],

Line is too long. [460/80]
Open

                  ['CAST256_t_m', ["\x99\x79\x82\x5a\xa1\xd6\x51\xd1\xa9\x33\x21\x48\xb1\x90\xf0\xbe\xb9\xed\xbf\x35\xc1\x4a\x8f\xac\xc9\xa7\x5e\x23\xd1\x04\x2e\x9a\xd9\x61\xfd\x10\xe1\xbe\xcc\x87\xe9\x1b\x9c\xfe\xf1\x78\x6b\x75\xf9\xd5\x3a\xec\x01\x33\x0a\x63\x09\x90\xd9\xd9\x11\xed\xa8\x50\x19\x4a\x78\xc7\x21\xa7\x47\x3e\x29\x04\x17\xb5\x31\x61\xe6\x2b\x39\xbe\xb5\xa2\x41\x1b\x85\x19\x49\x78\x54\x90\x51\xd5\x23\x07\x3a\x65\x5c\xc9\x42\xc2\x2b\x40\x4a"]],

Line is too long. [466/80]
Open

                  ['SHARK_decrpytion_cbox', ["\xf3\xaf\x55\x5e\xf0\x6a\x12\xe6\x35\x08\x0b\x31\x3f\x89\x6c\x4b\x57\x8d\xfc\xeb\x84\x0e\x4c\xaa\x0d\x09\xb3\xf3\x7b\x5c\x9b\xfb\xe2\x5c\xba\xcc\xa9\xa6\x08\x45\xe9\xbd\xc6\x4d\x06\xd2\xd1\xe5\xde\xed\x88\x52\x75\x43\x83\x34\x0c\x25\x6b\xe4\x5d\x50\x84\xb6\xe8\x91\x1e\x5a\x20\xde\xce\xa8\xcc\x6a\xfa\xf9\x46\x9b\xb8\x40\xba\x80\xb0\xfa\x1a\xec\xe1\x8e\x45\x0a\x8e\x40\xb7\xd6\x77\xde\x02\x58\x45\x2e\x4c\x18\x3e\x9a"]],

Non-local exit from iterator, without return value. next, break, Array#find, Array#any?, etc. is preferred.
Open

    return if @glinestree < 1

This cop checks for non-local exits from iterators without a return value. It registers an offense under these conditions:

  • No value is returned,
  • the block is preceded by a method chain,
  • the block has arguments,
  • the method which receives the block is not define_method or define_singleton_method,
  • the return is not contained in an inner scope, e.g. a lambda or a method definition.

Example:

class ItemApi
  rescue_from ValidationError do |e| # non-iteration block with arg
    return { message: 'validation error' } unless e.errors # allowed
    error_array = e.errors.map do |error| # block with method chain
      return if error.suppress? # warned
      return "#{error.param}: invalid" unless error.message # allowed
      "#{error.param}: #{error.message}"
    end
    { message: 'validation error', errors: error_array }
  end

  def update_items
    transaction do # block without arguments
      return unless update_necessary? # allowed
      find_each do |item| # block without method chain
        return if item.stock == 0 # false-negative...
        item.update!(foobar: true)
      end
    end
  end
end

Avoid more than 3 levels of block nesting.
Open

        if strArg.casecmp('{00021401-0000-0000-C000-000000000046}') == 0
          strArg += ' (CLSID_LNK)'
          @tbComments[xrefCall] += ' (CLSID_LNK)'
        end

This cop checks for excessive nesting of conditional and looping constructs.

You can configure if blocks are considered using the CountBlocks option. When set to false (the default) blocks are not counted towards the nesting level. Set to true to count blocks as well.

The maximum level of nesting allowed is configurable.

Avoid more than 3 levels of block nesting.
Open

          if orifunc
            entrypoints.each do |ep|
              printCallTree(dasm.normalize(ep), orifunc) if isFuncTreeLink(dasm.normalize(ep), orifunc)
            end
          end

This cop checks for excessive nesting of conditional and looping constructs.

You can configure if blocks are considered using the CountBlocks option. When set to false (the default) blocks are not counted towards the nesting level. Set to true to count blocks as well.

The maximum level of nesting allowed is configurable.

Line is too long. [332/80]
Open

                  ['Blowfish_p_init', ["\x88\x6a\x3f\x24\xd3\x08\xa3\x85\x2e\x8a\x19\x13\x44\x73\x70\x03\x22\x38\x09\xa4\xd0\x31\x9f\x29\x98\xfa\x2e\x08\x89\x6c\x4e\xec\xe6\x21\x28\x45\x77\x13\xd0\x38\xcf\x66\x54\xbe\x6c\x0c\xe9\x34\xb7\x29\xac\xc0\xdd\x50\x7c\xc9\xb5\xd5\x84\x3f\x17\x09\x47\xb5\xd9\xd5\x16\x92\x1b\xfb\x79\x89"]],

Line is too long. [514/80]
Open

                  ['SHARK_encrpytion_cbox', ["\x65\xa3\xf3\x16\x8f\x83\x0d\x06\xf6\x56\xae\x5c\xee\x57\x88\xa6\x89\x4d\x2c\x3c\x35\x16\xf5\xeb\xdc\x5b\xe8\x88\xbe\x74\x21\x65\x21\x79\xc1\x86\x80\x9a\x4e\x0d\xa1\x58\xfa\xcf\x33\x7d\xba\x27\x30\xb5\x37\xa2\x04\xe1\xd9\x88\x16\xe8\xfb\xa4\x55\x87\x3b\x69\xa0\x54\xb2\x26\x18\x59\xc9\xda\xf3\x6a\x33\xfb\x69\xe3\xc2\x45\xf4\x4e\x3e\x7b\xb8\x1f\x6e\xa9\xf0\x7e\xeb\x35\x14\x8f\x57\xb7\x74\x6f\x05\x32\x0b\xf8\x9a\x83\x7a\x27\x1f\xc7\x5c\xf5\x37\xae\xd5\x37\xff\xfd"]],

Line is too long. [165/80]
Open

                  ['DES_p32i', ["\x10\x07\x14\x15\x1d\x0c\x1c\x11\x01\x0f\x17\x1a\x05\x12\x1f\x0a\x02\x08\x18\x0e\x20\x1b\x03\x09\x13\x0d\x1e\x06\x16\x0b\x04\x19"]],

Line is too long. [550/80]
Open

                  ['HAVAL_mc2', ["\xe6\x21\x28\x45\x77\x13\xd0\x38\xcf\x66\x54\xbe\x6c\x0c\xe9\x34\xb7\x29\xac\xc0\xdd\x50\x7c\xc9\xb5\xd5\x84\x3f\x17\x09\x47\xb5\xd9\xd5\x16\x92\x1b\xfb\x79\x89\xa6\x0b\x31\xd1\xac\xb5\xdf\x98\xdb\x72\xfd\x2f\xb7\xdf\x1a\xd0\xed\xaf\xe1\xb8\x96\x7e\x26\x6a\x45\x90\x7c\xba\x99\x7f\x2c\xf1\x47\x99\xa1\x24\xf7\x6c\x91\xb3\xe2\xf2\x01\x08\x16\xfc\x8e\x85\xd8\x20\x69\x63\x69\x4e\x57\x71\xa3\xfe\x58\xa4\x7e\x3d\x93\xf4\x8f\x74\x95\x0d\x58\xb6\x8e\x72\x58\xcd\x8b\x71\xee\x4a\x15\x82\x1d\xa4\x54\x7b\xb5\x59\x5a\xc2"]],

Line is too long. [449/80]
Open

                  ['rc2_Pi_table', ["\xd9\x78\xf9\xc4\x19\xdd\xb5\xed\x28\xe9\xfd\x79\x4a\xa0\xd8\x9d\xc6\x7e\x37\x83\x2b\x76\x53\x8e\x62\x4c\x64\x88\x44\x8b\xfb\xa2\x17\x9a\x59\xf5\x87\xb3\x4f\x13\x61\x45\x6d\x8d\x09\x81\x7d\x32\xbd\x8f\x40\xeb\x86\xb7\x7b\x0b\xf0\x95\x21\x22\x5c\x6b\x4e\x82\x54\xd6\x65\x93\xce\x60\xb2\x1c\x73\x56\xc0\x14\xa7\x8c\xf1\xdc\x12\x75\xca\x1f\x3b\xbe\xe4\xd1\x42\x3d\xd4\x30\xa3\x3c\xb6\x26\x6f\xbf\x0e\xda\x46\x69"]],

Avoid more than 3 levels of block nesting.
Open

        if strArg.casecmp('{0002df01-0000-0000-c000-000000000046}') == 0
          strArg += ' (CLSID_InternetExplorer)'
          @tbComments[xrefCall] += ' (CLSID_InternetExplorer)'
          AddTagFunction(basefunc, 'Net_') unless basefunc.nil?
        end

This cop checks for excessive nesting of conditional and looping constructs.

You can configure if blocks are considered using the CountBlocks option. When set to false (the default) blocks are not counted towards the nesting level. Set to true to count blocks as well.

The maximum level of nesting allowed is configurable.

Line is too long. [550/80]
Open

                  ['HAVAL_wi4', ["\x18\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x0e\x00\x00\x00\x02\x00\x00\x00\x07\x00\x00\x00\x1c\x00\x00\x00\x17\x00\x00\x00\x1a\x00\x00\x00\x06\x00\x00\x00\x1e\x00\x00\x00\x14\x00\x00\x00\x12\x00\x00\x00\x19\x00\x00\x00\x13\x00\x00\x00\x03\x00\x00\x00\x16\x00\x00\x00\x0b\x00\x00\x00\x1f\x00\x00\x00\x15\x00\x00\x00\x08\x00\x00\x00\x1b\x00\x00\x00\x0c\x00\x00\x00\x09\x00\x00\x00\x01\x00\x00\x00\x1d\x00\x00\x00\x05\x00\x00\x00\x0f\x00\x00\x00\x11\x00\x00\x00\x0a\x00\x00\x00\x10\x00\x00\x00\x0d\x00\x00\x00"]],

Line is too long. [469/80]
Open

                  ['rijndael_te0', ["\xa5\x63\x63\xc6\x84\x7c\x7c\xf8\x99\x77\x77\xee\x8d\x7b\x7b\xf6\x0d\xf2\xf2\xff\xbd\x6b\x6b\xd6\xb1\x6f\x6f\xde\x54\xc5\xc5\x91\x50\x30\x30\x60\x03\x01\x01\x02\xa9\x67\x67\xce\x7d\x2b\x2b\x56\x19\xfe\xfe\xe7\x62\xd7\xd7\xb5\xe6\xab\xab\x4d\x9a\x76\x76\xec\x45\xca\xca\x8f\x9d\x82\x82\x1f\x40\xc9\xc9\x89\x87\x7d\x7d\xfa\x15\xfa\xfa\xef\xeb\x59\x59\xb2\xc9\x47\x47\x8e\x0b\xf0\xf0\xfb\xec\xad\xad\x41\x67\xd4\xd4\xb3\xfd\xa2\xa2"]],
Severity
Category
Status
Source
Language