Insecure source code functions have been used in the binary

tmthecoder / Argon2Swift

An Argon2 Wrapper for Swift

https://docs.tmthecoder.dev/Argon2Swift/

MIT License

27 stars 17 forks source link

Insecure source code functions have been used in the binary #8

Open KompoD opened 8 months ago

KompoD commented 8 months ago

Hello!

We are using Argon2Swift in our iOS app. We got warning about using insecure API(s) from the penetration testing: The binary may contain the following insecure API calls: _printf, _memcpy, _strlen, _sscanf, _fopen, _strncpy.

Could you remove these from the library in your upcoming release or if it is required, could you let us know why it is required?

vinodiOS commented 4 months ago

@KompoD this apis are being used in https://github.com/P-H-C/phc-winner-argon2 and Argon2Swift is wrapper around this to use in Swift language.