Argon2Swift icon indicating copy to clipboard operation
Argon2Swift copied to clipboard

Insecure source code functions have been used in the binary

Open KompoD opened this issue 1 year ago • 1 comments

Hello!

We are using Argon2Swift in our iOS app. We got warning about using insecure API(s) from the penetration testing: The binary may contain the following insecure API calls: _printf, _memcpy, _strlen, _sscanf, _fopen, _strncpy.

Could you remove these from the library in your upcoming release or if it is required, could you let us know why it is required?

KompoD avatar Mar 25 '24 11:03 KompoD

@KompoD this apis are being used in https://github.com/P-H-C/phc-winner-argon2 and Argon2Swift is wrapper around this to use in Swift language.

jpvinod avatar Jul 11 '24 14:07 jpvinod