CX Jailbrake_File_Referenced_By_Name @ iGoat-Swift/iGoat-Swift/ThirdParty/YapDatabase/YapDatabase.m [master]

[tsunez]

Jailbrake_File_Referenced_By_Name issue exists @ iGoat-Swift/iGoat-Swift/ThirdParty/YapDatabase/YapDatabase.m in branch master

A method moveItemAtPath:toPath:error: at line 368 of iGoat-Swift\iGoat-Swift\ThirdParty\YapDatabase\YapDatabase.m accessing a file by filename.

Severity: Low

CWE:668

Vulnerability details and guidance

Checkmarx

Recommended Fix

Lines: 450 482 2642 2857 443 396 2686

---

Code (Line #450):

                        renamed = [[NSFileManager defaultManager] moveItemAtPath:databasePath

---

Code (Line #482):

                BOOL deleted = [[NSFileManager defaultManager] removeItemAtPath:path error:&error];

---

Code (Line #2642):

            NSDictionary *walAttr = [[NSFileManager defaultManager] attributesOfItemAtPath:walFilePath error:NULL];

---

Code (Line #2857):

                NSDictionary *walAttr = [[NSFileManager defaultManager] attributesOfItemAtPath:walFilePath error:NULL];

---

Code (Line #443):

                    if ([[NSFileManager defaultManager] fileExistsAtPath:newDatabasePath])

---

Code (Line #396):

        __block BOOL isNewDatabaseFile = ![[NSFileManager defaultManager] fileExistsAtPath:databasePath];

---

Code (Line #2686):

            NSDictionary *walAttr = [[NSFileManager defaultManager] attributesOfItemAtPath:walFilePath error:NULL];

---

[tsunez]

Issue still exists.

SUMMARY

Issue has 7 vulnerability/vulnerabilities left to be fixed (Please scroll to the top for more information)

[tsunez]

Issue still exists.

SUMMARY

Issue has 7 vulnerability/vulnerabilities left to be fixed (Please scroll to the top for more information)