Hostile ^92% golang Download

github.com/terraform-providers/terraform-provider-aws v1.60.0

HTTP desync probe in dependency

/lib64 path/node path

SHA-2568241742f6ed40084dc0c564b3a86c0855da28bb1bb8c4f2f53ffc2e4028557d6

URLhttps://proxy.golang.org/github.com/terraform-providers/terraform-provider-aws/@v/v1.60.0.zip

MaleculeK₂(AmLi)O(Ca)H₆(Cm₂₄Cr₃Db₁₄F₅Os₅Po₃)Md₄(BkInPa)

Evidence

Native HTTP POST request line test.c · lines 248–265

6… ame= "post identity body world"
,.type= HTTP_REQUEST
,.raw= "POST /post_identity_body_world?q=search#hey HTTP/1.1\r\n"
       "Accept: */*\r\n"
       "Transfer-Encoding: identity\r\n"
⋯5 lines
,.http_major= 1
,.http_minor= 1
,.method= HTTP_POST
,.query_string= "q=search"
,.fragment= "hey"
,.request_path= "/post_identity_body_world"
,.request_url= "/post_identity_body_world?q=search#hey"
,.num_headers=  …

HTTP POST carries a chunking marker test.c · lines 284–293

25… eof= FALSE
,.http_major= 1
,.http_minor= 1
,.method= HTTP_POST
,.query_string= ""
,.fragment= ""
⋯4 lines

Code embeds cleartext HTTP URL literal test.c · lines 623–630

20… minated by a query string"
,.type= HTTP_REQUEST
,.raw= "GET http://hypnotoad.org?hail=all HTTP/1.1\r\n"
       "\r\n"
,.should_keep_alive= TRUE
,.message_complete_on_eof= FALSE
,.http_major= 1
,.htt …

Emits an absolute HTTP Location header test.c · lines 908–913

17… ESPONSE
,.raw= "HTTP/1.1 301 Moved Permanently\r\n"
       "Location: http://www.google.com/\r\n"
       "Content-Type: text/html; charset=UTF-8\r\n"
       "Date: Sun, 26 Apr 2009 11:11:49 GMT\r\n"
       "Expires …

C declares a character or byte buffer test.c · lines 44–61

15… rser_type type;
enum http_method method;
int status_code;
char request_path[MAX_ELEMENT_SIZE];
char request_url[MAX_ELEMENT_SIZE];
char fragment[MAX_ELEMENT_SIZE];
char query_string[MAX_ELEMENT_SIZE];
char body[MAX_ELEMENT_SIZE];
size_t body_size;
uint16_t port;
int num_headers;
enum { NONE=0, FIELD, VALUE } last_header_element;
char headers [MAX_HEADERS][2][MAX_ELEMENT_SIZE];
int should_keep_alive;
58
const char *upgrade; // upgraded body
60
unsigned short http_majo …

Showing the top 5 files — 4 more files (28 regions) not shown.

No evidence locations were recorded for this file. Raw result