Subj : New Defects reported by Coverity Scan for Synchronet
To   : cov-scan@synchro.net
From : scan-admin@coverity.com
Date : Mon Aug 10 2026 13:31:15


----==_mimepart_6a79d2a36a35d_667552b3f398219ac62de
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit

Hi,

Please find the latest report on new defect(s) introduced to Synchronet found with Coverity Scan.

1 new defect(s) introduced to Synchronet found with Coverity Scan.
1 defect(s), reported by Coverity Scan earlier, were marked fixed in the recent build analyzed by Coverity Scan.

New defect(s) Reported-by: Coverity Scan
Showing 1 of 1 defect(s)


** CID 652885:       Integer handling issues  (INTEGER_OVERFLOW)
/useredit.cpp: 167           in sbbs_t::useredit(int)()


_____________________________________________________________________________________________
*** CID 652885:         Integer handling issues  (INTEGER_OVERFLOW)
/useredit.cpp: 167             in sbbs_t::useredit(int)()
161     		bprintf(text[UeditPrompt], user.number, l);
162     		SAFEPRINTF4(str, "QG[]?/{}()%c%c%c%c", TERM_KEY_LEFT, TERM_KEY_RIGHT, TERM_KEY_HOME, TERM_KEY_END);
163     		if (user.level <= useron.level)
164     			SAFECAT(str, "ABCDEFHIJKLMNOPRSTUVWXYZ+~*$#");
165     		l = getkeys(str, l, K_UPPER | K_NOCRLF);
166     		if (l & 0x80000000L) {
>>>     CID 652885:         Integer handling issues  (INTEGER_OVERFLOW)
>>>     Expression "user.number", where "l & 0xffffffff7fffffffL" is known to be equal to -2147483649, overflows the type of "user.number", which is type "int".
167     			user.number = l & ~0x80000000L;
168     			continue;
169     		}
170     		if (IS_ALPHA(l) || strchr("~+*$/", l) != NULL)   // non-alpha commands that prompt
171     			term->newline();
172     		switch (l) {


________________________________________________________________________________________________________
To view the defects in Coverity Scan visit, https://scan.coverity.com/projects/synchronet?tab=overview


----==_mimepart_6a79d2a36a35d_667552b3f398219ac62de
Content-Type: text/html; charset=us-ascii
Content-Transfer-Encoding: 7bit

<!DOCTYPE html>
<html>
<head>
  <meta charset="UTF-8">
  <title>New Defects Reported - Synchronet</title>
  <style>
    body { font-family: Arial, sans-serif; color: #222; line-height: 1.6; }
    .button {
      display: inline-block;
      padding: 10px 20px;
      margin: 20px 0;
      font-size: 16px;
      color: #fff !important;
      background-color: #0056b3;
      text-decoration: none;
      border-radius: 5px;
    }
    pre {
      background: #f8f9fa;
      padding: 10px;
      border-radius: 5px;
      font-size: 14px;
      overflow-x: auto;
    }
  </style>
</head>
<body>
  <p>Hi,</p>

  <p>
    Please find the latest report on new defect(s) introduced to <strong>Synchronet</strong>
     found with Coverity Scan.
  </p>

  <ul>
    <li><strong>New Defects Found:</strong> 1</li>
      <li>
        1 defect(s), reported by Coverity Scan earlier, were marked fixed in the recent build analyzed by Coverity Scan.
      </li>
    <li><strong>Defects Shown:</strong> Showing 1 of 1 defect(s)</li>
  </ul>

  <h3>Defect Details</h3>
  <pre>
** CID 652885:       Integer handling issues  (INTEGER_OVERFLOW)
/useredit.cpp: 167           in sbbs_t::useredit(int)()


_____________________________________________________________________________________________
*** CID 652885:         Integer handling issues  (INTEGER_OVERFLOW)
/useredit.cpp: 167             in sbbs_t::useredit(int)()
161     		bprintf(text[UeditPrompt], user.number, l);
162     		SAFEPRINTF4(str, &quot;QG[]?/{}()%c%c%c%c&quot;, TERM_KEY_LEFT, TERM_KEY_RIGHT, TERM_KEY_HOME, TERM_KEY_END);
163     		if (user.level &lt;= useron.level)
164     			SAFECAT(str, &quot;ABCDEFHIJKLMNOPRSTUVWXYZ+~*$#&quot;);
165     		l = getkeys(str, l, K_UPPER | K_NOCRLF);
166     		if (l &amp; 0x80000000L) {
&gt;&gt;&gt;     CID 652885:         Integer handling issues  (INTEGER_OVERFLOW)
&gt;&gt;&gt;     Expression &quot;user.number&quot;, where &quot;l &amp; 0xffffffff7fffffffL&quot; is known to be equal to -2147483649, overflows the type of &quot;user.number&quot;, which is type &quot;int&quot;.
167     			user.number = l &amp; ~0x80000000L;
168     			continue;
169     		}
170     		if (IS_ALPHA(l) || strchr(&quot;~+*$/&quot;, l) != NULL)   // non-alpha commands that prompt
171     			term-&gt;newline();
172     		switch (l) {

  </pre>

  <p>
    <a href="https://scan.coverity.com/projects/synchronet?tab=overview" class="button">View Defects in Coverity Scan</a>
  </p>

  <p>Best regards,</p>
  <p>The Coverity Scan Admin Team</p>
  <img class="logo" width="140" src="https://scan.coverity.com/assets/BlackDuckLogo-6697adc63e07340464201a2ad534d3d3e44f95d36edda20b140440d34f05372f.svg" />
</body>
</html>
----==_mimepart_6a79d2a36a35d_667552b3f398219ac62de--

--- SBBSecho 3.37-Linux
 * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)

.