MidnightBSD Magus

security/skipfish

Fully automated, active web application security reconnaissance tool

Flavor Version Run OSVersion Arch License Restricted Status
2.10b_3 504 3.0 amd64 apache2 0 fail

License Permissions:

Events

Machine Type Time Message
m3064b info 2023-01-04 10:39:27.826421 Test Started
m3064b fail 2023-01-04 10:39:33.72385 make build returned non-zero: 1
m3064b fail 2023-01-04 10:39:33.772058 Test complete.

Log

===>  Building for skipfish-2.10b_3
gmake[1]: Entering directory '/magus/work/usr/mports/security/skipfish/work/skipfish-2.10b'
cc   -fstack-protector-strong -L/usr/local/lib src/skipfish.c -o skipfish \
        -O3 -Wno-format -Wall -funsigned-char -g -ggdb -I/usr/local/include/ -O2 -pipe -fstack-protector-strong -fno-strict-aliasing -DVERSION=\"2.10b\" src/http_client.c src/database.c src/crawler.c src/analysis.c src/report.c src/checks.c src/signatures.c src/auth.c src/options.c -lcrypto -lssl -lidn -lz -lpcre
src/http_client.c:1966:10: error: incomplete definition of type 'struct ssl_cipher_st'
  if(!(cp->algo_strength & SSL_MEDIUM) && !(cp->algo_strength & SSL_HIGH))
       ~~^
/usr/include/openssl/ssl.h:212:16: note: forward declaration of 'struct ssl_cipher_st'
typedef struct ssl_cipher_st SSL_CIPHER;
               ^
src/http_client.c:1966:47: error: incomplete definition of type 'struct ssl_cipher_st'
  if(!(cp->algo_strength & SSL_MEDIUM) && !(cp->algo_strength & SSL_HIGH))
                                            ~~^
/usr/include/openssl/ssl.h:212:16: note: forward declaration of 'struct ssl_cipher_st'
typedef struct ssl_cipher_st SSL_CIPHER;
               ^
src/http_client.c:1983:34: error: incomplete definition of type 'struct x509_st'
    if (ASN1_UTCTIME_cmp_time_t(p->cert_info->validity->notBefore, cur_time)
                                ~^
/usr/include/openssl/ossl_typ.h:121:16: note: forward declaration of 'struct x509_st'
typedef struct x509_st X509;
               ^
src/http_client.c:1985:34: error: incomplete definition of type 'struct x509_st'
        ASN1_UTCTIME_cmp_time_t(p->cert_info->validity->notAfter, cur_time)
                                ~^
/usr/include/openssl/ossl_typ.h:121:16: note: forward declaration of 'struct x509_st'
typedef struct x509_st X509;
               ^
src/http_client.c:1992:33: error: incomplete definition of type 'struct x509_st'
    issuer = X509_NAME_oneline(p->cert_info->issuer,NULL,0);
                               ~^
/usr/include/openssl/ossl_typ.h:121:16: note: forward declaration of 'struct x509_st'
typedef struct x509_st X509;
               ^
src/http_client.c:1994:22: error: incomplete definition of type 'struct x509_st'
    if (!issuer || !p->name || !strcmp(issuer, p->name))
                    ~^
/usr/include/openssl/ossl_typ.h:121:16: note: forward declaration of 'struct x509_st'
typedef struct x509_st X509;
               ^
src/http_client.c:1994:49: error: incomplete definition of type 'struct x509_st'
    if (!issuer || !p->name || !strcmp(issuer, p->name))
                                               ~^
/usr/include/openssl/ossl_typ.h:121:16: note: forward declaration of 'struct x509_st'
typedef struct x509_st X509;
               ^
src/http_client.c:2007:21: error: incomplete definition of type 'struct x509_st'
    host = strrchr(p->name, '=');
                   ~^
/usr/include/openssl/ossl_typ.h:121:16: note: forward declaration of 'struct x509_st'
typedef struct x509_st X509;
               ^
src/http_client.c:2028:24: warning: 'ASN1_STRING_data' is deprecated [-Wdeprecated-declarations]
          buf = (char*)ASN1_STRING_data(name->d.dNSName);
                       ^
/usr/include/openssl/asn1.h:554:1: note: 'ASN1_STRING_data' has been explicitly marked deprecated here
DEPRECATEDIN_1_1_0(unsigned char *ASN1_STRING_data(ASN1_STRING *x))
^
/usr/include/openssl/opensslconf.h:152:34: note: expanded from macro 'DEPRECATEDIN_1_1_0'
# define DEPRECATEDIN_1_1_0(f)   DECLARE_DEPRECATED(f)
                                 ^
/usr/include/openssl/opensslconf.h:110:55: note: expanded from macro 'DECLARE_DEPRECATED'
#   define DECLARE_DEPRECATED(f)    f __attribute__ ((deprecated));
                                                      ^
src/http_client.c:2785:31: warning: adding 'u32' (aka 'unsigned int') to a string does not append to the string [-Wstring-plus-int]
        SAY("%s%s\n", p, SP70 + l);
        ~~~~~~~~~~~~~~~~~~~~~~^~~~
src/debug.h:75:26: note: expanded from macro 'SAY'
#define SAY(x...) printf(x)
                         ^
src/http_client.c:2785:31: note: use array indexing to silence this warning
        SAY("%s%s\n", p, SP70 + l);
                              ^
                         &    [
src/debug.h:75:26: note: expanded from macro 'SAY'
#define SAY(x...) printf(x)
                         ^
src/http_client.c:2790:45: warning: adding 'int' to a string does not append to the string [-Wstring-plus-int]
    } else SAY(cLGN "%s\n", SP70 + 11);
           ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~^~~~~
src/debug.h:75:26: note: expanded from macro 'SAY'
#define SAY(x...) printf(x)
                         ^
src/http_client.c:2790:45: note: use array indexing to silence this warning
    } else SAY(cLGN "%s\n", SP70 + 11);
                                            ^
                                       &    [
src/debug.h:75:26: note: expanded from macro 'SAY'
#define SAY(x...) printf(x)
                         ^
3 warnings and 8 errors generated.
src/analysis.c:490:49: warning: while loop has empty body [-Wempty-body]
        FIND_AND_MOVE(tag_name, cur_str, "name");
                                                ^
src/analysis.c:490:49: note: put the semicolon on a separate line to silence this warning
src/analysis.c:491:51: warning: while loop has empty body [-Wempty-body]
        FIND_AND_MOVE(tag_value, cur_str, "value");
                                                  ^
src/analysis.c:491:51: note: put the semicolon on a separate line to silence this warning
src/analysis.c:662:46: warning: while loop has empty body [-Wempty-body]
  FIND_AND_MOVE(dirty_url, cur_str, "action");
                                             ^
src/analysis.c:662:46: note: put the semicolon on a separate line to silence this warning
3 warnings generated.
src/report.c:450:7: warning: misleading indentation; statement is not part of the previous 'for' [-Wmisleading-indentation]
      if (i == m_samp_cnt) {
      ^
src/report.c:447:5: note: previous statement is here
    for (i=0;i Compilation failed unexpectedly.
Try to set MAKE_JOBS_UNSAFE=yes and rebuild before reporting the failure to
the maintainer.
*** Error code 1

Stop.
make: stopped in /usr/mports/security/skipfish

Links

Depends On

Depend Of

Nothing

Categories

CVEs

  • Loading CVE information...

LLM Analysis