Skip to content

fix: buffer overflow in multipart body proc #141

fix: buffer overflow in multipart body proc

fix: buffer overflow in multipart body proc #141

Triggered via pull request April 13, 2026 12:59
Status Success
Total duration 19m 21s
Artifacts

ci_new.yml

on: pull_request
Static analysis (cppcheck)
14m 52s
Static analysis (cppcheck)
Static analysis (cppcheck, Linux, debian:sid)
19m 14s
Static analysis (cppcheck, Linux, debian:sid)
Matrix: build-linux
Matrix: build-macos
Matrix: build-windows
Fit to window
Zoom out
Zoom in

Annotations

60 warnings
Windows (x64, without libxml)
'initializing': conversion from '__int64' to 'int', possible loss of data [D:\a\ModSecurity\ModSecurity\build\win32\build\regression_tests.vcxproj]
Windows (x64, without libxml)
] [D:\a\ModSecurity\ModSecurity\build\win32\build\regression_tests.vcxproj]
Windows (x64, without libxml)
_Ty=int [D:\a\ModSecurity\ModSecurity\build\win32\build\regression_tests.vcxproj]
Windows (x64, without libxml)
[ [D:\a\ModSecurity\ModSecurity\build\win32\build\regression_tests.vcxproj]
Windows (x64, without libxml)
with [D:\a\ModSecurity\ModSecurity\build\win32\build\regression_tests.vcxproj]
Windows (x64, without libxml)
'=': conversion from '__int64' to '_Ty', possible loss of data [D:\a\ModSecurity\ModSecurity\build\win32\build\regression_tests.vcxproj]
Windows (x64, without libxml)
'fopen': This function or variable may be unsafe. Consider using fopen_s instead. To disable deprecation, use _CRT_SECURE_NO_WARNINGS. See online help for details. [C:\Users\runneradmin\.conan2\p\b\poco344a95db2c5b2\b\build\NetSSL_OpenSSL\NetSSL.vcxproj]
Windows (x64, without libxml)
'argument': conversion from 'std::streamoff' to 'DWORD', possible loss of data [C:\Users\runneradmin\.conan2\p\b\poco344a95db2c5b2\b\build\Net\Net.vcxproj]
Windows (x64, without libxml)
'strncpy': This function or variable may be unsafe. Consider using strncpy_s instead. To disable deprecation, use _CRT_SECURE_NO_WARNINGS. See online help for details. [C:\Users\runneradmin\.conan2\p\b\poco344a95db2c5b2\b\build\Data\PostgreSQL\DataPostgreSQL.vcxproj]
Windows (x64, without libxml)
'=': conversion from 'Poco::Int64' to 'long', possible loss of data [C:\Users\runneradmin\.conan2\p\b\poco344a95db2c5b2\b\build\Data\PostgreSQL\DataPostgreSQL.vcxproj]
Windows (x64, with lmdb)
'initializing': conversion from '__int64' to 'int', possible loss of data [D:\a\ModSecurity\ModSecurity\build\win32\build\regression_tests.vcxproj]
Windows (x64, with lmdb)
] [D:\a\ModSecurity\ModSecurity\build\win32\build\regression_tests.vcxproj]
Windows (x64, with lmdb)
_Ty=int [D:\a\ModSecurity\ModSecurity\build\win32\build\regression_tests.vcxproj]
Windows (x64, with lmdb)
[ [D:\a\ModSecurity\ModSecurity\build\win32\build\regression_tests.vcxproj]
Windows (x64, with lmdb)
with [D:\a\ModSecurity\ModSecurity\build\win32\build\regression_tests.vcxproj]
Windows (x64, with lmdb)
'=': conversion from '__int64' to '_Ty', possible loss of data [D:\a\ModSecurity\ModSecurity\build\win32\build\regression_tests.vcxproj]
Windows (x64, with lmdb)
'fopen': This function or variable may be unsafe. Consider using fopen_s instead. To disable deprecation, use _CRT_SECURE_NO_WARNINGS. See online help for details. [C:\Users\runneradmin\.conan2\p\b\pocod81e5e9801428\b\build\NetSSL_OpenSSL\NetSSL.vcxproj]
Windows (x64, with lmdb)
'argument': conversion from 'std::streamoff' to 'DWORD', possible loss of data [C:\Users\runneradmin\.conan2\p\b\pocod81e5e9801428\b\build\Net\Net.vcxproj]
Windows (x64, with lmdb)
'strncpy': This function or variable may be unsafe. Consider using strncpy_s instead. To disable deprecation, use _CRT_SECURE_NO_WARNINGS. See online help for details. [C:\Users\runneradmin\.conan2\p\b\pocod81e5e9801428\b\build\Data\PostgreSQL\DataPostgreSQL.vcxproj]
Windows (x64, with lmdb)
'=': conversion from 'Poco::Int64' to 'long', possible loss of data [C:\Users\runneradmin\.conan2\p\b\pocod81e5e9801428\b\build\Data\PostgreSQL\DataPostgreSQL.vcxproj]
Windows (x64, without curl)
'initializing': conversion from '__int64' to 'int', possible loss of data [D:\a\ModSecurity\ModSecurity\build\win32\build\regression_tests.vcxproj]
Windows (x64, without curl)
] [D:\a\ModSecurity\ModSecurity\build\win32\build\regression_tests.vcxproj]
Windows (x64, without curl)
_Ty=int [D:\a\ModSecurity\ModSecurity\build\win32\build\regression_tests.vcxproj]
Windows (x64, without curl)
[ [D:\a\ModSecurity\ModSecurity\build\win32\build\regression_tests.vcxproj]
Windows (x64, without curl)
with [D:\a\ModSecurity\ModSecurity\build\win32\build\regression_tests.vcxproj]
Windows (x64, without curl)
'=': conversion from '__int64' to '_Ty', possible loss of data [D:\a\ModSecurity\ModSecurity\build\win32\build\regression_tests.vcxproj]
Windows (x64, without curl)
'fopen': This function or variable may be unsafe. Consider using fopen_s instead. To disable deprecation, use _CRT_SECURE_NO_WARNINGS. See online help for details. [C:\Users\runneradmin\.conan2\p\b\poco0f9f5b198b152\b\build\NetSSL_OpenSSL\NetSSL.vcxproj]
Windows (x64, without curl)
'argument': conversion from 'std::streamoff' to 'DWORD', possible loss of data [C:\Users\runneradmin\.conan2\p\b\poco0f9f5b198b152\b\build\Net\Net.vcxproj]
Windows (x64, without curl)
'strncpy': This function or variable may be unsafe. Consider using strncpy_s instead. To disable deprecation, use _CRT_SECURE_NO_WARNINGS. See online help for details. [C:\Users\runneradmin\.conan2\p\b\poco0f9f5b198b152\b\build\Data\PostgreSQL\DataPostgreSQL.vcxproj]
Windows (x64, without curl)
'=': conversion from 'Poco::Int64' to 'long', possible loss of data [C:\Users\runneradmin\.conan2\p\b\poco0f9f5b198b152\b\build\Data\PostgreSQL\DataPostgreSQL.vcxproj]
Windows (x64, without lua)
'initializing': conversion from '__int64' to 'int', possible loss of data [D:\a\ModSecurity\ModSecurity\build\win32\build\regression_tests.vcxproj]
Windows (x64, without lua)
] [D:\a\ModSecurity\ModSecurity\build\win32\build\regression_tests.vcxproj]
Windows (x64, without lua)
_Ty=int [D:\a\ModSecurity\ModSecurity\build\win32\build\regression_tests.vcxproj]
Windows (x64, without lua)
[ [D:\a\ModSecurity\ModSecurity\build\win32\build\regression_tests.vcxproj]
Windows (x64, without lua)
with [D:\a\ModSecurity\ModSecurity\build\win32\build\regression_tests.vcxproj]
Windows (x64, without lua)
'=': conversion from '__int64' to '_Ty', possible loss of data [D:\a\ModSecurity\ModSecurity\build\win32\build\regression_tests.vcxproj]
Windows (x64, without lua)
'fopen': This function or variable may be unsafe. Consider using fopen_s instead. To disable deprecation, use _CRT_SECURE_NO_WARNINGS. See online help for details. [C:\Users\runneradmin\.conan2\p\b\poco46079de5a27d4\b\build\NetSSL_OpenSSL\NetSSL.vcxproj]
Windows (x64, without lua)
'argument': conversion from 'std::streamoff' to 'DWORD', possible loss of data [C:\Users\runneradmin\.conan2\p\b\poco46079de5a27d4\b\build\Net\Net.vcxproj]
Windows (x64, without lua)
'strncpy': This function or variable may be unsafe. Consider using strncpy_s instead. To disable deprecation, use _CRT_SECURE_NO_WARNINGS. See online help for details. [C:\Users\runneradmin\.conan2\p\b\poco46079de5a27d4\b\build\Data\PostgreSQL\DataPostgreSQL.vcxproj]
Windows (x64, without lua)
'=': conversion from 'Poco::Int64' to 'long', possible loss of data [C:\Users\runneradmin\.conan2\p\b\poco46079de5a27d4\b\build\Data\PostgreSQL\DataPostgreSQL.vcxproj]
Windows (x64, without maxmind)
'initializing': conversion from '__int64' to 'int', possible loss of data [D:\a\ModSecurity\ModSecurity\build\win32\build\regression_tests.vcxproj]
Windows (x64, without maxmind)
] [D:\a\ModSecurity\ModSecurity\build\win32\build\regression_tests.vcxproj]
Windows (x64, without maxmind)
_Ty=int [D:\a\ModSecurity\ModSecurity\build\win32\build\regression_tests.vcxproj]
Windows (x64, without maxmind)
[ [D:\a\ModSecurity\ModSecurity\build\win32\build\regression_tests.vcxproj]
Windows (x64, without maxmind)
with [D:\a\ModSecurity\ModSecurity\build\win32\build\regression_tests.vcxproj]
Windows (x64, without maxmind)
'=': conversion from '__int64' to '_Ty', possible loss of data [D:\a\ModSecurity\ModSecurity\build\win32\build\regression_tests.vcxproj]
Windows (x64, without maxmind)
'fopen': This function or variable may be unsafe. Consider using fopen_s instead. To disable deprecation, use _CRT_SECURE_NO_WARNINGS. See online help for details. [C:\Users\runneradmin\.conan2\p\b\poco1f5437f5121b9\b\build\NetSSL_OpenSSL\NetSSL.vcxproj]
Windows (x64, without maxmind)
'argument': conversion from 'std::streamoff' to 'DWORD', possible loss of data [C:\Users\runneradmin\.conan2\p\b\poco1f5437f5121b9\b\build\Net\Net.vcxproj]
Windows (x64, without maxmind)
'strncpy': This function or variable may be unsafe. Consider using strncpy_s instead. To disable deprecation, use _CRT_SECURE_NO_WARNINGS. See online help for details. [C:\Users\runneradmin\.conan2\p\b\poco1f5437f5121b9\b\build\Data\PostgreSQL\DataPostgreSQL.vcxproj]
Windows (x64, without maxmind)
'=': conversion from 'Poco::Int64' to 'long', possible loss of data [C:\Users\runneradmin\.conan2\p\b\poco1f5437f5121b9\b\build\Data\PostgreSQL\DataPostgreSQL.vcxproj]
Windows (x64, full)
'initializing': conversion from '__int64' to 'int', possible loss of data [D:\a\ModSecurity\ModSecurity\build\win32\build\regression_tests.vcxproj]
Windows (x64, full)
] [D:\a\ModSecurity\ModSecurity\build\win32\build\regression_tests.vcxproj]
Windows (x64, full)
_Ty=int [D:\a\ModSecurity\ModSecurity\build\win32\build\regression_tests.vcxproj]
Windows (x64, full)
[ [D:\a\ModSecurity\ModSecurity\build\win32\build\regression_tests.vcxproj]
Windows (x64, full)
with [D:\a\ModSecurity\ModSecurity\build\win32\build\regression_tests.vcxproj]
Windows (x64, full)
'=': conversion from '__int64' to '_Ty', possible loss of data [D:\a\ModSecurity\ModSecurity\build\win32\build\regression_tests.vcxproj]
Windows (x64, full)
'fopen': This function or variable may be unsafe. Consider using fopen_s instead. To disable deprecation, use _CRT_SECURE_NO_WARNINGS. See online help for details. [C:\Users\runneradmin\.conan2\p\b\poco7c917e719a508\b\build\NetSSL_OpenSSL\NetSSL.vcxproj]
Windows (x64, full)
'argument': conversion from 'std::streamoff' to 'DWORD', possible loss of data [C:\Users\runneradmin\.conan2\p\b\poco7c917e719a508\b\build\Net\Net.vcxproj]
Windows (x64, full)
'strncpy': This function or variable may be unsafe. Consider using strncpy_s instead. To disable deprecation, use _CRT_SECURE_NO_WARNINGS. See online help for details. [C:\Users\runneradmin\.conan2\p\b\poco7c917e719a508\b\build\Data\PostgreSQL\DataPostgreSQL.vcxproj]
Windows (x64, full)
'=': conversion from 'Poco::Int64' to 'long', possible loss of data [C:\Users\runneradmin\.conan2\p\b\poco7c917e719a508\b\build\Data\PostgreSQL\DataPostgreSQL.vcxproj]