insecure-api-strcpy-stpcpy-strcat.yaml

rules:
  - id: raptor-insecure-api-strcpy-stpcpy-strcat
    metadata:
      author: Marco Ivaldi <raptor@0xdeadbeef.info>
      references:
        - https://cwe.mitre.org/data/definitions/676
        - https://cwe.mitre.org/data/definitions/120
        - https://cwe.mitre.org/data/definitions/787
        - https://g.co/kgs/PCHQjJ
      confidence: HIGH
      # NOTE: see also cpp.strings.unbounded-copy-to-stack-buffer.unbounded-copy-to-stack-buffer.
    message: >-
      A buffer overflow condition exists when a program attempts to put
      more data in a buffer than it can hold, or when a program attempts to
      put data in a memory area outside of the boundaries of a buffer.
    severity: ERROR
    languages:
      - c
      - cpp
    patterns:
      - pattern-either:
        - pattern: strcpy(...)
        - pattern: stpcpy(...)
        - pattern: strcat(...)
        - pattern: wcscpy(...)
        - pattern: wcpcpy(...)
        - pattern: wcscat(...)
      - pattern-not: $FUN($BUF, "...", ...)