Veracode should not treat Microsoft code gs_report.c TerminateProcess() as a flaw.

Xiaowei_Li (Community Member) asked a question.

January 6, 2021 at 7:54 PM

https://github.com/leelwh/clib/blob/master/c/gs_report.c

This is authentic Microsoft code. The last line 319 TerminateProcess(GetCurrentProcess(), STATUS_STACK_BUFFER_OVERRUN); Becasue when BUFFER_OVERRUN happens, it is better to terminate the process, than keep it running w/o a notice. Can veracode team see this post? And allow gs_report.c to have TerminateProcess()?

This content is a preview of a link.

github.com

https://github.com/leelwh/clib/blob/master/c/gs_report.c

VCode likes this.

Anthony Fielding (Veracode)
6 years ago
Hi @Xiaowei_Li (Community Member),
Thanks for reaching out about this. I would recommend you contact our technical support team about this. Please include a link to the scan as well as an indication of the flaw numbers so we can investigate further. Here's how you can log a case:
Navigate to the upper right corner of any page in the Community, click on your user avatar.
Select Contact Support from the drop-down menu.

Thanks,
Anthony Fielding
Expand Post