Line of code being flagged in GoogleDataTransport pod during security scan

Viewed 10

We use Firebase in our iOS app which pulls in GoogleDataTransport pod. Current version being pulled of GDT is 9.2.0.

There is a line in GDTCCTNanopbHelpers.m being flagged by our static security scanner as allowing for a potential buffer overflow - [networkConnectionInfoData getBytes:&logEvent.network_connection_info length:networkConnectionInfoData.length];.

This line is in the latest version of the pod as well.

Has anyone run across this - is this line actually possible to trigger a buffer overflow, is there a fix somewhere, etc. ?

Thanks.

0 Answers
Related