Sink boundary: A write operation reaches a buffer without carrying an inherent proof that the destination is large enough.
The pack does not provide a callable signature for this record; the watched access path is shown directly.
| Arg | Access path | Purpose | Watched |
|---|---|---|---|
| Argument[1] | Argument[1] | The access path Atropos marks for this model. | ▲ sink |
Input is copied into an output buffer without checking that it fits.
A function can introduce a vulnerability when used without its required constraints.
Data is written past the end or before the beginning of its intended buffer.
Input longer than the destination overwrites adjacent memory or truncates unexpectedly.
Atropos identifies Argument[1] as a buffer-write sink. It cannot see whether untrusted data reaches this call in your repository.
Lachesis is the codebase-level step: it traces reachability and guards for this symbol.
Check this symbol in Lachesis →Across languages
No cross-language match.
What neutralizes it
No sanitizer of this kind is modeled.
| Role | Kind | Access path | Model ID | Confidence |
|---|---|---|---|---|
| sink | buffer-write | Argument[1] | c.std.getpw.a1 | medium · corrob. 1 |