security/skipfish
Fully automated, active web application security reconnaissance tool
| Flavor | Version | Run | OSVersion | Arch | License | Restricted | Status | |
|---|---|---|---|---|---|---|---|---|
| 2.10b_3 | 504 | 3.0 | amd64 | apache2 | 0 | fail |
License Permissions:
Events
| Machine | Type | Time | Message |
|---|---|---|---|
| m3064b | info | 2023-01-04 10:39:27.826421 | Test Started |
| m3064b | fail | 2023-01-04 10:39:33.72385 | make build returned non-zero: 1 |
| m3064b | fail | 2023-01-04 10:39:33.772058 | Test complete. |
Log
[1m===> Building for skipfish-2.10b_3[0m
gmake[1]: Entering directory '/magus/work/usr/mports/security/skipfish/work/skipfish-2.10b'
cc -fstack-protector-strong -L/usr/local/lib src/skipfish.c -o skipfish \
-O3 -Wno-format -Wall -funsigned-char -g -ggdb -I/usr/local/include/ -O2 -pipe -fstack-protector-strong -fno-strict-aliasing -DVERSION=\"2.10b\" src/http_client.c src/database.c src/crawler.c src/analysis.c src/report.c src/checks.c src/signatures.c src/auth.c src/options.c -lcrypto -lssl -lidn -lz -lpcre
src/http_client.c:1966:10: error: incomplete definition of type 'struct ssl_cipher_st'
if(!(cp->algo_strength & SSL_MEDIUM) && !(cp->algo_strength & SSL_HIGH))
~~^
/usr/include/openssl/ssl.h:212:16: note: forward declaration of 'struct ssl_cipher_st'
typedef struct ssl_cipher_st SSL_CIPHER;
^
src/http_client.c:1966:47: error: incomplete definition of type 'struct ssl_cipher_st'
if(!(cp->algo_strength & SSL_MEDIUM) && !(cp->algo_strength & SSL_HIGH))
~~^
/usr/include/openssl/ssl.h:212:16: note: forward declaration of 'struct ssl_cipher_st'
typedef struct ssl_cipher_st SSL_CIPHER;
^
src/http_client.c:1983:34: error: incomplete definition of type 'struct x509_st'
if (ASN1_UTCTIME_cmp_time_t(p->cert_info->validity->notBefore, cur_time)
~^
/usr/include/openssl/ossl_typ.h:121:16: note: forward declaration of 'struct x509_st'
typedef struct x509_st X509;
^
src/http_client.c:1985:34: error: incomplete definition of type 'struct x509_st'
ASN1_UTCTIME_cmp_time_t(p->cert_info->validity->notAfter, cur_time)
~^
/usr/include/openssl/ossl_typ.h:121:16: note: forward declaration of 'struct x509_st'
typedef struct x509_st X509;
^
src/http_client.c:1992:33: error: incomplete definition of type 'struct x509_st'
issuer = X509_NAME_oneline(p->cert_info->issuer,NULL,0);
~^
/usr/include/openssl/ossl_typ.h:121:16: note: forward declaration of 'struct x509_st'
typedef struct x509_st X509;
^
src/http_client.c:1994:22: error: incomplete definition of type 'struct x509_st'
if (!issuer || !p->name || !strcmp(issuer, p->name))
~^
/usr/include/openssl/ossl_typ.h:121:16: note: forward declaration of 'struct x509_st'
typedef struct x509_st X509;
^
src/http_client.c:1994:49: error: incomplete definition of type 'struct x509_st'
if (!issuer || !p->name || !strcmp(issuer, p->name))
~^
/usr/include/openssl/ossl_typ.h:121:16: note: forward declaration of 'struct x509_st'
typedef struct x509_st X509;
^
src/http_client.c:2007:21: error: incomplete definition of type 'struct x509_st'
host = strrchr(p->name, '=');
~^
/usr/include/openssl/ossl_typ.h:121:16: note: forward declaration of 'struct x509_st'
typedef struct x509_st X509;
^
src/http_client.c:2028:24: warning: 'ASN1_STRING_data' is deprecated [-Wdeprecated-declarations]
buf = (char*)ASN1_STRING_data(name->d.dNSName);
^
/usr/include/openssl/asn1.h:554:1: note: 'ASN1_STRING_data' has been explicitly marked deprecated here
DEPRECATEDIN_1_1_0(unsigned char *ASN1_STRING_data(ASN1_STRING *x))
^
/usr/include/openssl/opensslconf.h:152:34: note: expanded from macro 'DEPRECATEDIN_1_1_0'
# define DEPRECATEDIN_1_1_0(f) DECLARE_DEPRECATED(f)
^
/usr/include/openssl/opensslconf.h:110:55: note: expanded from macro 'DECLARE_DEPRECATED'
# define DECLARE_DEPRECATED(f) f __attribute__ ((deprecated));
^
src/http_client.c:2785:31: warning: adding 'u32' (aka 'unsigned int') to a string does not append to the string [-Wstring-plus-int]
SAY("%s%s\n", p, SP70 + l);
~~~~~~~~~~~~~~~~~~~~~~^~~~
src/debug.h:75:26: note: expanded from macro 'SAY'
#define SAY(x...) printf(x)
^
src/http_client.c:2785:31: note: use array indexing to silence this warning
SAY("%s%s\n", p, SP70 + l);
^
& [
src/debug.h:75:26: note: expanded from macro 'SAY'
#define SAY(x...) printf(x)
^
src/http_client.c:2790:45: warning: adding 'int' to a string does not append to the string [-Wstring-plus-int]
} else SAY(cLGN "%s\n", SP70 + 11);
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~^~~~~
src/debug.h:75:26: note: expanded from macro 'SAY'
#define SAY(x...) printf(x)
^
src/http_client.c:2790:45: note: use array indexing to silence this warning
} else SAY(cLGN "%s\n", SP70 + 11);
^
& [
src/debug.h:75:26: note: expanded from macro 'SAY'
#define SAY(x...) printf(x)
^
3 warnings and 8 errors generated.
src/analysis.c:490:49: warning: while loop has empty body [-Wempty-body]
FIND_AND_MOVE(tag_name, cur_str, "name");
^
src/analysis.c:490:49: note: put the semicolon on a separate line to silence this warning
src/analysis.c:491:51: warning: while loop has empty body [-Wempty-body]
FIND_AND_MOVE(tag_value, cur_str, "value");
^
src/analysis.c:491:51: note: put the semicolon on a separate line to silence this warning
src/analysis.c:662:46: warning: while loop has empty body [-Wempty-body]
FIND_AND_MOVE(dirty_url, cur_str, "action");
^
src/analysis.c:662:46: note: put the semicolon on a separate line to silence this warning
3 warnings generated.
src/report.c:450:7: warning: misleading indentation; statement is not part of the previous 'for' [-Wmisleading-indentation]
if (i == m_samp_cnt) {
^
src/report.c:447:5: note: previous statement is here
for (i=0;i Compilation failed unexpectedly.
Try to set MAKE_JOBS_UNSAFE=yes and rebuild before reporting the failure to
the maintainer.
*** Error code 1
Stop.
make: stopped in /usr/mports/security/skipfish
Links
Depends On
- devel/gmake (build)
- security/openssl (build)
- devel/pcre (lib)
- dns/libidn (lib)
- security/openssl (run)
Depend Of
NothingCategories
CVEs
- Loading CVE information...
MidnightBSD Magus