hfiref0x

/Build/openssl-1.1.0f/crypto/asn1/a_gentm.c	116	warn	V560 A part of conditional expression is always false: (n < min[i]).
/Build/openssl-1.1.0f/crypto/asn1/a_int.c	547	warn	V560 A part of conditional expression is always false: r > 0x7fffffffffffffffL.
/Build/openssl-1.1.0f/crypto/asn1/a_int.c	547	warn	V560 A part of conditional expression is always false: r < (- 0x7fffffffffffffffL - 1L).
/Build/openssl-1.1.0f/crypto/asn1/a_int.c	590	warn	V560 A part of conditional expression is always false: r > 0x7fffffffffffffffL.
/Build/openssl-1.1.0f/crypto/asn1/a_int.c	590	warn	V560 A part of conditional expression is always false: r < (- 0x7fffffffffffffffL - 1L).
/Build/openssl-1.1.0f/crypto/asn1/a_utctm.c	90	warn	V560 A part of conditional expression is always false: (n < min[i]).
/Build/openssl-1.1.0f/crypto/asn1/asn1_gen.c	597	warn	V560 A part of conditional expression is always true: str.
/Build/openssl-1.1.0f/crypto/asn1/asn1_par.c	236	warn	V547 Expression '!nl' is always true.
/Build/openssl-1.1.0f/crypto/asn1/

hfiref0x

/Build/Transmission/build/third-party/utp/src/utp/utypes.h	10	warn	V677 Custom declaration of a standard 'uint' type. The declaration from system header files should be used instead.
/Build/Transmission/build/third-party/utp/src/utp/templates.h	116	warn	V701 realloc() possible leak: when realloc() fails in allocating memory, original pointer 'mem' is lost. Consider assigning realloc() to a temporary pointer.
/Build/Transmission/build/third-party/utp/src/utp/utp.cpp	163	err	V512 A call of the 'memset' function will lead to underflow of the buffer 'sin'.
/Build/Transmission/build/third-party/utp/src/utp/utp.cpp	168	warn	V641 The size of the '& sa' buffer is not a multiple of the element size of the type 'sockaddr_in6'.
/Build/Transmission/build/third-party/utp/src/utp/utp.cpp	378	warn	V522 There might be dereferencing of a potential null pointer 'buf'. Check lines: 378, 372.
/Build/Transmission/build/third-party/utp/src/utp/templates.h	116	warn	V701 Instantiation of Array < RST_Info >: realloc() possible leak: 

hfiref0x

/Build/vlc-3.0.6/include/vlc_arrays.h	347	warn	V701 realloc() possible leak: when realloc() fails in allocating memory, original pointer 'pp' is lost. Consider assigning realloc() to a temporary pointer.
/Build/vlc-3.0.6/include/vlc_arrays.h	532	warn	V522 There might be dereferencing of a potential null pointer 'p_entry'. Check lines: 532, 531.
/Build/vlc-3.0.6/include/vlc_charset.h	271	warn	V769 The 'utf8' pointer in the 'utf8 ++' expression could be nullptr. In such case, resulting value will be senseless and it should not be used. Check lines: 271, 261.
/Build/vlc-3.0.6/include/vlc_vlm.h	238	warn	V701 realloc() possible leak: when realloc() fails in allocating memory, original pointer 'p_dst->ppsz_input' is lost. Consider assigning realloc() to a temporary pointer.
/Build/vlc-3.0.6/include/vlc_vlm.h	240	warn	V701 realloc() possible leak: when realloc() fails in allocating memory, original pointer 'p_dst->ppsz_option' is lost. Consider assigning realloc() to a temporary pointer.
/Build/vlc-3.0.6/src/config/

hfiref0x

#include <iostream>
#include <conio.h>
#include <Windows.h>

typedef LONG(WINAPI *pNtUserCreateActivationObject)(
    HWND hwnd,
    ULONG_PTR Irrelevant1,
    LUID *Luid);

HCRYPTPROV g_hCryptoProvider = NULL;

hfiref0x

{0000031A-0000-0000-C000-000000000046}: CLSID
{0000002F-0000-0000-C000-000000000046}: CLSID CLSID_RecordInfo
{00000100-0000-0010-8000-00AA006D2EA4}: CLSID DAO.DBEngine.36
{00000101-0000-0010-8000-00AA006D2EA4}: CLSID DAO.PrivateDBEngine.36
{00000103-0000-0010-8000-00AA006D2EA4}: CLSID DAO.TableDef.36
{00000104-0000-0010-8000-00AA006D2EA4}: CLSID DAO.Field.36
{00000105-0000-0010-8000-00AA006D2EA4}: CLSID DAO.Index.36
{00000106-0000-0010-8000-00AA006D2EA4}: CLSID DAO.Group.36
{00000107-0000-0010-8000-00AA006D2EA4}: CLSID DAO.User.36
{00000108-0000-0010-8000-00AA006D2EA4}: CLSID DAO.QueryDef.36

hfiref0x

typedef struct tagCREATELINKDATA {
    ULONG  dwFlags;
    WCHAR szLinkName[MAX_PATH];     // + 0x20C
    WCHAR szExeName[MAX_PATH];      // + 0x414
    WCHAR szParams[MAX_PATH];       // + 0x61C
    WCHAR szWorkingDir[MAX_PATH];   // + 0x824
    WCHAR szOriginalName[MAX_PATH]; // + 0xA2C
    WCHAR szExpExeName[MAX_PATH];   // + 0xC34
    WCHAR szProgDesc[MAX_PATH];     // + 0xE3C
    WCHAR szFolder[MAX_PATH];       // + 0x1044

hfiref0x

#include <Windows.h>
#include <msdelta.h>

#pragma comment(lib, "msdelta.lib")

BOOL load_file(LPCTSTR FileName, LPDWORD BytesRead, LPVOID *AllocatedBuffer)
{
	HANDLE			f;
	LARGE_INTEGER	fsz;
	LPVOID			buffer = NULL;

hfiref0x

//
// Ref = src
// https://www.blackhat.com/docs/eu-17/materials/eu-17-Liberman-Lost-In-Transaction-Process-Doppelganging.pdf
//
// Credits:
//  Vyacheslav Rusakov @swwwolf
//  Tom Bonner @thomas_bonner
//

#include <Windows.h>

hfiref0x

/*

Win32k NtUserOpenDesktop->OpenDesktop Denial Of Service feature.

Working range: x64 Windows 8 (9200) up to Windows 10 RS4 (17046).

x86 versions not tested.

Feature:

hfiref0x

typedef interface IFwCplLua IFwCplLua;

typedef struct IFwCplLuaInterfaceVtbl {

    BEGIN_INTERFACE

        HRESULT(STDMETHODCALLTYPE *QueryInterface)(
            __RPC__in IFwCplLua * This,
            __RPC__in REFIID riid,
            _COM_Outptr_  void **ppvObject);