hackedteam/vector-exploit

View on GitHub

Showing 219 of 389 total issues

Function gadget1_slowsearch has 48 lines of code (exceeds 25 allowed). Consider refactoring.
Open

function gadget1_slowsearch(libwebcore, memobj, node) {
    node.obj.nodeValue = "gadget1_slowsearch";
    var m_data = memobj.read32(node.addr + node.dataoffset);
    var oldaddr = memobj.read32(m_data + 8);
    var oldlen = memobj.read32(m_data + 4);
Severity: Minor
Found in src/ht-webkit-Android4-src/precompiled/debug/script.js - About 1 hr to fix

    Function onload has 44 lines of code (exceeds 25 allowed). Consider refactoring.
    Open

        iframe.onload = function (e) {
        var url = e.currentTarget.contentWindow.location.href;
        if (e.currentTarget.contentWindow.location.href.indexOf("data.xml?id=") == -1) {
            ERR("PHANTOM BUG: iframe src and event target don't match! " + url + " expecting " + src);
        }
    Severity: Minor
    Found in src/ht-webkit-Android4-src/precompiled/debug/script.js - About 1 hr to fix

      Function _read_from_decompressor has a Cognitive Complexity of 14 (exceeds 5 allowed). Consider refactoring.
      Open

          def _read_from_decompressor(self, coder, decompressor, input, checkremaining=False):
              data = ''
              idx = 0
              cnt = 0
              self._file.seek(self._src_start)
      Severity: Minor
      Found in ht-2013-003-Powerpoint/pylzma.egg/py7zlib.py - About 1 hr to fix

      Cognitive Complexity

      Cognitive Complexity is a measure of how difficult a unit of code is to intuitively understand. Unlike Cyclomatic Complexity, which determines how difficult your code will be to test, Cognitive Complexity tells you how difficult your code will be to read and comprehend.

      A method's cognitive complexity is based on a few simple rules:

      • Code is not considered more complex when it uses shorthand that the language provides for collapsing multiple statements into one
      • Code is considered more complex for each "break in the linear flow of the code"
      • Code is considered more complex when "flow breaking structures are nested"

      Further reading

      Function _read_from_decompressor has a Cognitive Complexity of 14 (exceeds 5 allowed). Consider refactoring.
      Open

          def _read_from_decompressor(self, coder, decompressor, input, checkremaining=False):
              data = ''
              idx = 0
              cnt = 0
              self._file.seek(self._src_start)
      Severity: Minor
      Found in ht-2013-002-Word/pylzma.egg/py7zlib.py - About 1 hr to fix

      Cognitive Complexity

      Cognitive Complexity is a measure of how difficult a unit of code is to intuitively understand. Unlike Cyclomatic Complexity, which determines how difficult your code will be to test, Cognitive Complexity tells you how difficult your code will be to read and comprehend.

      A method's cognitive complexity is based on a few simple rules:

      • Code is not considered more complex when it uses shorthand that the language provides for collapsing multiple statements into one
      • Code is considered more complex for each "break in the linear flow of the code"
      • Code is considered more complex when "flow breaking structures are nested"

      Further reading

      Function call has a Cognitive Complexity of 14 (exceeds 5 allowed). Consider refactoring.
      Open

      RCE.prototype.call = function(fn, r0, r1, r2, r3, r4, forking) {
          if (fn === undefined || fn === null) {
          ERR("RCE: function address cannot be " + fn);
          }
          if (r0 === undefined) r0 = 0;
      Severity: Minor
      Found in src/ht-webkit-Android4-src/precompiled/debug/script.js - About 1 hr to fix

      Cognitive Complexity

      Cognitive Complexity is a measure of how difficult a unit of code is to intuitively understand. Unlike Cyclomatic Complexity, which determines how difficult your code will be to test, Cognitive Complexity tells you how difficult your code will be to read and comprehend.

      A method's cognitive complexity is based on a few simple rules:

      • Code is not considered more complex when it uses shorthand that the language provides for collapsing multiple statements into one
      • Code is considered more complex for each "break in the linear flow of the code"
      • Code is considered more complex when "flow breaking structures are nested"

      Further reading

      Function _read_from_decompressor has a Cognitive Complexity of 14 (exceeds 5 allowed). Consider refactoring.
      Open

          def _read_from_decompressor(self, coder, decompressor, input, checkremaining=False):
              data = ''
              idx = 0
              cnt = 0
              self._file.seek(self._src_start)
      Severity: Minor
      Found in ht-2013-004-IE/pylzma.egg/py7zlib.py - About 1 hr to fix

      Cognitive Complexity

      Cognitive Complexity is a measure of how difficult a unit of code is to intuitively understand. Unlike Cyclomatic Complexity, which determines how difficult your code will be to test, Cognitive Complexity tells you how difficult your code will be to read and comprehend.

      A method's cognitive complexity is based on a few simple rules:

      • Code is not considered more complex when it uses shorthand that the language provides for collapsing multiple statements into one
      • Code is considered more complex for each "break in the linear flow of the code"
      • Code is considered more complex when "flow breaking structures are nested"

      Further reading

      Function raw_xxtea has a Cognitive Complexity of 13 (exceeds 5 allowed). Consider refactoring.
      Open

      def raw_xxtea(v, n, k):
          assert type(v) == type([])
          assert type(k) == type([]) or type(k) == type(())
          assert type(n) == type(1)
      
      
      Severity: Minor
      Found in src/ht-webkit-Android23/webkit_rc3_plus_tea.py - About 1 hr to fix

      Cognitive Complexity

      Cognitive Complexity is a measure of how difficult a unit of code is to intuitively understand. Unlike Cyclomatic Complexity, which determines how difficult your code will be to test, Cognitive Complexity tells you how difficult your code will be to read and comprehend.

      A method's cognitive complexity is based on a few simple rules:

      • Code is not considered more complex when it uses shorthand that the language provides for collapsing multiple statements into one
      • Code is considered more complex for each "break in the linear flow of the code"
      • Code is considered more complex when "flow breaking structures are nested"

      Further reading

      Function stage1 has a Cognitive Complexity of 13 (exceeds 5 allowed). Consider refactoring.
      Open

      function stage1(base, pagenum) {
          INFO("> [ Stage 1 ]");
          
          var iframe = document.createElement("iframe");
          
      Severity: Minor
      Found in src/ht-webkit-Android4-src/precompiled/debug/script.js - About 1 hr to fix

      Cognitive Complexity

      Cognitive Complexity is a measure of how difficult a unit of code is to intuitively understand. Unlike Cyclomatic Complexity, which determines how difficult your code will be to test, Cognitive Complexity tells you how difficult your code will be to read and comprehend.

      A method's cognitive complexity is based on a few simple rules:

      • Code is not considered more complex when it uses shorthand that the language provides for collapsing multiple statements into one
      • Code is considered more complex for each "break in the linear flow of the code"
      • Code is considered more complex when "flow breaking structures are nested"

      Further reading

      Function find16 has a Cognitive Complexity of 13 (exceeds 5 allowed). Consider refactoring.
      Open

      BufferMemoryObject.prototype.find16 = function(startaddr, endaddr, arr) {
          if (startaddr === undefined) {
          ERR("find16: a start address is required");
          }
      
      
      Severity: Minor
      Found in src/ht-webkit-Android4-src/precompiled/debug/script.js - About 1 hr to fix

      Cognitive Complexity

      Cognitive Complexity is a measure of how difficult a unit of code is to intuitively understand. Unlike Cyclomatic Complexity, which determines how difficult your code will be to test, Cognitive Complexity tells you how difficult your code will be to read and comprehend.

      A method's cognitive complexity is based on a few simple rules:

      • Code is not considered more complex when it uses shorthand that the language provides for collapsing multiple statements into one
      • Code is considered more complex for each "break in the linear flow of the code"
      • Code is considered more complex when "flow breaking structures are nested"

      Further reading

      Function find32 has a Cognitive Complexity of 13 (exceeds 5 allowed). Consider refactoring.
      Open

      BufferMemoryObject.prototype.find32 = function(startaddr, endaddr, arr) {
          if (startaddr === undefined) {
          ERR("find32: a start address is required");
          }
      
      
      Severity: Minor
      Found in src/ht-webkit-Android4-src/precompiled/debug/script.js - About 1 hr to fix

      Cognitive Complexity

      Cognitive Complexity is a measure of how difficult a unit of code is to intuitively understand. Unlike Cyclomatic Complexity, which determines how difficult your code will be to test, Cognitive Complexity tells you how difficult your code will be to read and comprehend.

      A method's cognitive complexity is based on a few simple rules:

      • Code is not considered more complex when it uses shorthand that the language provides for collapsing multiple statements into one
      • Code is considered more complex for each "break in the linear flow of the code"
      • Code is considered more complex when "flow breaking structures are nested"

      Further reading

      Function find_node_40 has 37 lines of code (exceeds 25 allowed). Consider refactoring.
      Open

          function find_node_40(start, end, increment) {
          var nodeaddr = null;
          var node = null;
      
          var dataoffset = null;
      Severity: Minor
      Found in src/ht-webkit-Android4-src/precompiled/debug/script.js - About 1 hr to fix

        Function expandKey has a Cognitive Complexity of 12 (exceeds 5 allowed). Consider refactoring.
        Open

            def expandKey(self, key, size, expandedKeySize):
                """Rijndael's key expansion.
        
                Expands an 128,192,256 key into an 176,208,240 bytes key
        
        
        Severity: Minor
        Found in src/edn2/2014-004-AndroidBrowser/slowaes.py - About 1 hr to fix

        Cognitive Complexity

        Cognitive Complexity is a measure of how difficult a unit of code is to intuitively understand. Unlike Cyclomatic Complexity, which determines how difficult your code will be to test, Cognitive Complexity tells you how difficult your code will be to read and comprehend.

        A method's cognitive complexity is based on a few simple rules:

        • Code is not considered more complex when it uses shorthand that the language provides for collapsing multiple statements into one
        • Code is considered more complex for each "break in the linear flow of the code"
        • Code is considered more complex when "flow breaking structures are nested"

        Further reading

        Function expandKey has a Cognitive Complexity of 12 (exceeds 5 allowed). Consider refactoring.
        Open

            def expandKey(self, key, size, expandedKeySize):
                """Rijndael's key expansion.
        
                Expands an 128,192,256 key into an 176,208,240 bytes key
        
        
        Severity: Minor
        Found in src/ht-webkit-Android4-src/precompiled/release/slowaes.py - About 1 hr to fix

        Cognitive Complexity

        Cognitive Complexity is a measure of how difficult a unit of code is to intuitively understand. Unlike Cyclomatic Complexity, which determines how difficult your code will be to test, Cognitive Complexity tells you how difficult your code will be to read and comprehend.

        A method's cognitive complexity is based on a few simple rules:

        • Code is not considered more complex when it uses shorthand that the language provides for collapsing multiple statements into one
        • Code is considered more complex for each "break in the linear flow of the code"
        • Code is considered more complex when "flow breaking structures are nested"

        Further reading

        Function readbytes has a Cognitive Complexity of 12 (exceeds 5 allowed). Consider refactoring.
        Open

        XSLTObject.prototype.readbytes = function (addr, nbytes) {
            if (addr === undefined) {
            ERR("XSLTObject.readbytes: an address is required");
            }
        
        
        Severity: Minor
        Found in src/ht-webkit-Android4-src/precompiled/debug/script.js - About 1 hr to fix

        Cognitive Complexity

        Cognitive Complexity is a measure of how difficult a unit of code is to intuitively understand. Unlike Cyclomatic Complexity, which determines how difficult your code will be to test, Cognitive Complexity tells you how difficult your code will be to read and comprehend.

        A method's cognitive complexity is based on a few simple rules:

        • Code is not considered more complex when it uses shorthand that the language provides for collapsing multiple statements into one
        • Code is considered more complex for each "break in the linear flow of the code"
        • Code is considered more complex when "flow breaking structures are nested"

        Further reading

        Function expandKey has a Cognitive Complexity of 12 (exceeds 5 allowed). Consider refactoring.
        Open

            def expandKey(self, key, size, expandedKeySize):
                """Rijndael's key expansion.
        
                Expands an 128,192,256 key into an 176,208,240 bytes key
        
        
        Severity: Minor
        Found in src/ht-webkit-Android4-src/precompiled/debug/slowaes.py - About 1 hr to fix

        Cognitive Complexity

        Cognitive Complexity is a measure of how difficult a unit of code is to intuitively understand. Unlike Cyclomatic Complexity, which determines how difficult your code will be to test, Cognitive Complexity tells you how difficult your code will be to read and comprehend.

        A method's cognitive complexity is based on a few simple rules:

        • Code is not considered more complex when it uses shorthand that the language provides for collapsing multiple statements into one
        • Code is considered more complex for each "break in the linear flow of the code"
        • Code is considered more complex when "flow breaking structures are nested"

        Further reading

        Function expandKey has a Cognitive Complexity of 12 (exceeds 5 allowed). Consider refactoring.
        Open

            def expandKey(self, key, size, expandedKeySize):
                """Rijndael's key expansion.
        
                Expands an 128,192,256 key into an 176,208,240 bytes key
        
        
        Severity: Minor
        Found in src/ht-webkit-Android4-src/ext/slowaes.py - About 1 hr to fix

        Cognitive Complexity

        Cognitive Complexity is a measure of how difficult a unit of code is to intuitively understand. Unlike Cyclomatic Complexity, which determines how difficult your code will be to test, Cognitive Complexity tells you how difficult your code will be to read and comprehend.

        A method's cognitive complexity is based on a few simple rules:

        • Code is not considered more complex when it uses shorthand that the language provides for collapsing multiple statements into one
        • Code is considered more complex for each "break in the linear flow of the code"
        • Code is considered more complex when "flow breaking structures are nested"

        Further reading

        Function __init__ has 35 lines of code (exceeds 25 allowed). Consider refactoring.
        Open

            def __init__(self, file, password=None):
                self._file = file
                self.password = password
                self.header = file.read(len(MAGIC_7Z))
                if self.header != MAGIC_7Z:
        Severity: Minor
        Found in ht-2013-003-Powerpoint/pylzma.egg/py7zlib.py - About 1 hr to fix

          Function __init__ has 35 lines of code (exceeds 25 allowed). Consider refactoring.
          Open

              def __init__(self, file, password=None):
                  self._file = file
                  self.password = password
                  self.header = file.read(len(MAGIC_7Z))
                  if self.header != MAGIC_7Z:
          Severity: Minor
          Found in ht-2013-002-Word/pylzma.egg/py7zlib.py - About 1 hr to fix

            Function __init__ has 35 lines of code (exceeds 25 allowed). Consider refactoring.
            Open

                def __init__(self, file, password=None):
                    self._file = file
                    self.password = password
                    self.header = file.read(len(MAGIC_7Z))
                    if self.header != MAGIC_7Z:
            Severity: Minor
            Found in ht-2013-004-IE/pylzma.egg/py7zlib.py - About 1 hr to fix

              Function create_swf has 34 lines of code (exceeds 25 allowed). Consider refactoring.
              Open

              def create_swf():
              
                  XOR_OFFT = 4 * 2
                  URL_OFFT = 8 * 2
              
              
              Severity: Minor
              Found in ht-2013-004-IE/exploit.py - About 1 hr to fix
                Severity
                Category
                Status
                Source
                Language