skalenetwork / skale-consensus

Running the very core of SKL network, SKALE BFT consensus is universal, modern, modular, high-performance, asynchronous, provably-secure, agent-based Proof-of-Stake blockchain consensus engine in C++ 17. Includes provably secure embedded Oracle. Used by SKALE elastic blockchains. Easy and flexible enough to implement your own blockchain or smart contract platform. BLS signatures and Binary Asynchronous Consensus are main building blocks.
https://docs.skale.network/technology/consensus-spec
GNU Affero General Public License v3.0
78 stars 32 forks source link

Y #814

Closed kladkogex closed 8 months ago

guardrails[bot] commented 11 months ago

:warning: We detected 8 security issues in this pull request:

Hard-Coded Secrets (1)
Severity | Details | Docs :-: | :-- | :-: Medium | Title: **Hex High Entropy String**
https://github.com/skalenetwork/skale-consensus/blob/a80663fa8f6fe0696c24c0b1f20a36486f59bd9a/json/JSONFactory.cpp#L483 | [:books:](https://docs.guardrails.io/docs/en/vulnerabilities/general/hard-coded_secrets.html?utm_source=ghpr#HexHighEntropyString) More info on how to fix Hard-Coded Secrets in [General](https://docs.guardrails.io/docs/en/vulnerabilities/general/hard-coded_secrets.html?utm_source=ghpr). ---
Insecure Processing of Data (7)
Severity | Details | Docs :-: | :-- | :-: Medium | Title: **Pointer subtraction**
https://github.com/skalenetwork/skale-consensus/blob/a80663fa8f6fe0696c24c0b1f20a36486f59bd9a/miniz.c#L1331 | [:books:](https://docs.guardrails.io/docs/en/vulnerabilities/c/insecure_processing_of_data.html?utm_source=ghpr#c.lang.pointer-subtraction) Medium | Title: **Pointer subtraction**
https://github.com/skalenetwork/skale-consensus/blob/a80663fa8f6fe0696c24c0b1f20a36486f59bd9a/miniz.c#L2272 | [:books:](https://docs.guardrails.io/docs/en/vulnerabilities/c/insecure_processing_of_data.html?utm_source=ghpr#c.lang.pointer-subtraction) Medium | Title: **Pointer subtraction**
https://github.com/skalenetwork/skale-consensus/blob/a80663fa8f6fe0696c24c0b1f20a36486f59bd9a/miniz.c#L2339 | [:books:](https://docs.guardrails.io/docs/en/vulnerabilities/c/insecure_processing_of_data.html?utm_source=ghpr#c.lang.pointer-subtraction) Medium | Title: **Pointer subtraction**
https://github.com/skalenetwork/skale-consensus/blob/a80663fa8f6fe0696c24c0b1f20a36486f59bd9a/miniz.c#L2340 | [:books:](https://docs.guardrails.io/docs/en/vulnerabilities/c/insecure_processing_of_data.html?utm_source=ghpr#c.lang.pointer-subtraction) Medium | Title: **Pointer subtraction**
https://github.com/skalenetwork/skale-consensus/blob/a80663fa8f6fe0696c24c0b1f20a36486f59bd9a/miniz.c#L2462 | [:books:](https://docs.guardrails.io/docs/en/vulnerabilities/c/insecure_processing_of_data.html?utm_source=ghpr#c.lang.pointer-subtraction) Medium | Title: **Pointer subtraction**
https://github.com/skalenetwork/skale-consensus/blob/a80663fa8f6fe0696c24c0b1f20a36486f59bd9a/miniz.c#L2463 | [:books:](https://docs.guardrails.io/docs/en/vulnerabilities/c/insecure_processing_of_data.html?utm_source=ghpr#c.lang.pointer-subtraction) High | Title: **NULL Pointer Dereference**
https://github.com/skalenetwork/skale-consensus/blob/a80663fa8f6fe0696c24c0b1f20a36486f59bd9a/crypto/CryptoManager.cpp#L400 | [:books:](https://docs.guardrails.io/docs/en/vulnerabilities/c/insecure_processing_of_data.html?utm_source=ghpr#c.lang.null-ptr-deref) More info on how to fix Insecure Processing of Data in [C/C++](https://docs.guardrails.io/docs/en/vulnerabilities/c/insecure_processing_of_data.html?utm_source=ghpr).

👉 Go to the dashboard for detailed results.

📥 Happy? Share your feedback with us.