Subj : New Defects reported by Coverity Scan for Synchronet To : All From : scan-admin@coverity.com Date : Thu Jan 08 2026 13:44:45 ----==_mimepart_695fb4cd3c9f7_2053bf2c2daae15998453fd Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Hi, Please find the latest report on new defect(s) introduced to Synchronet found with Coverity Scan. 1 new defect(s) introduced to Synchronet found with Coverity Scan. 2 defect(s), reported by Coverity Scan earlier, were marked fixed in the recent build analyzed by Coverity Scan. New defect(s) Reported-by: Coverity Scan Showing 1 of 1 defect(s) ** CID 640932: Insecure data handling (INTEGER_OVERFLOW) /atcodes.cpp: 1664 in sbbs_t::atcode(const char *, char *, unsigned long, int *, bool, JSObject *)() _____________________________________________________________________________________________ *** CID 640932: Insecure data handling (INTEGER_OVERFLOW) /atcodes.cpp: 1664 in sbbs_t::atcode(const char *, char *, unsigned long, int *, bool, JSObject *)() 1658 if (!strcmp(sp, "BYTESLEFT")) { 1659 safe_snprintf(str, maxlen, "%" PRIu64, user_available_credits(&useron)); 1660 return str; 1661 } 1662 1663 if (code_match(sp, "CDTLEFT", ¶m)) >>> CID 640932: Insecure data handling (INTEGER_OVERFLOW) >>> The cast of "user_available_credits(&this->useron)" to a signed type could result in a negative number. 1664 return byte_count(user_available_credits(&useron), str, maxlen, param, BYTE_COUNT_VERBAL); 1665 1666 if (code_match(sp, "CREDITS", ¶m)) 1667 return byte_count(useron.cdt, str, maxlen, param, BYTE_COUNT_BYTES); 1668 1669 if (code_match(sp, "FREECDT", ¶m)) ________________________________________________________________________________________________________ To view the defects in Coverity Scan visit, https://scan.coverity.com/projects/synchronet?tab=overview ----==_mimepart_695fb4cd3c9f7_2053bf2c2daae15998453fd Content-Type: text/html; charset=us-ascii Content-Transfer-Encoding: 7bit New Defects Reported - Synchronet

Hi,

Please find the latest report on new defect(s) introduced to Synchronet found with Coverity Scan.

Defect Details

** CID 640932:       Insecure data handling  (INTEGER_OVERFLOW)
/atcodes.cpp: 1664           in sbbs_t::atcode(const char *, char *, unsigned long, int *, bool, JSObject *)()


_____________________________________________________________________________________________
*** CID 640932:         Insecure data handling  (INTEGER_OVERFLOW)
/atcodes.cpp: 1664             in sbbs_t::atcode(const char *, char *, unsigned long, int *, bool, JSObject *)()
1658     	if (!strcmp(sp, "BYTESLEFT")) {
1659     		safe_snprintf(str, maxlen, "%" PRIu64, user_available_credits(&useron));
1660     		return str;
1661     	}
1662
1663     	if (code_match(sp, "CDTLEFT", &param))
>>>     CID 640932:         Insecure data handling  (INTEGER_OVERFLOW)
>>>     The cast of "user_available_credits(&this->useron)" to a signed type could result in a negative number.
1664     		return byte_count(user_available_credits(&useron), str, maxlen, param, BYTE_COUNT_VERBAL);
1665
1666     	if (code_match(sp, "CREDITS", &param))
1667     		return byte_count(useron.cdt, str, maxlen, param, BYTE_COUNT_BYTES);
1668
1669     	if (code_match(sp, "FREECDT", &param))

View Defects in Coverity Scan

Best regards,

The Coverity Scan Admin Team

----==_mimepart_695fb4cd3c9f7_2053bf2c2daae15998453fd-- --- þ Synchronet þ Vertrauen þ Home of Synchronet þ [vert/cvs/bbs].synchro.net .