From f97198122905b07458dee7b81ebbb41399b5ff55 Mon Sep 17 00:00:00 2001 From: raptor Date: Tue, 13 Jan 2026 10:53:46 +0100 Subject: [PATCH] feat: add `mempcpy` and `wmempcpy` to the list of bad functions --- Rhabdomancer.java | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/Rhabdomancer.java b/Rhabdomancer.java index e668566..5a2debd 100644 --- a/Rhabdomancer.java +++ b/Rhabdomancer.java @@ -121,8 +121,8 @@ public class Rhabdomancer extends GhidraScript "wvnsprintf", "wvnsprintfA", "wvnsprintfW", "swprintf", "_swprintf", "vswprintf", "_vswprintf", // memory copying functions can be used insecurely, check if size arg can contain negative numbers - "memcpy", "_memcpy", "memccpy", "memmove", "_memmove", "bcopy", "memset", - "wmemcpy", "_wmemcpy", "wmemmove", "_wmemmove", "RtlCopyMemory", "CopyMemory", + "memcpy", "_memcpy", "memccpy", "mempcpy", "memmove", "_memmove", "bcopy", "memset", + "wmemcpy", "_wmemcpy", "wmempcpy", "wmemmove", "_wmemmove", "RtlCopyMemory", "CopyMemory", "memcpy_s", "wmemcpy_s", "memmove_s", "wmemmove_s", "memset_s", "memset_explicit", // user id and group id functions can be used insecurely, return value must be checked "setuid", "seteuid", "setreuid", "setresuid",