Integer Overflow or Wraparound

[ovidiu-benea]

Ran a Veracode (https://www.veracode.com) static scan of our application windows 32-bit binaries that are using poco library.
Used the following compiler/linker flags, see "Compilation Instructions for C/C++ on Windows" here:
https://help.veracode.com/reader/4EKhlLSMHm5jC8P8j3XccQ/3Lu03OATx74TyUh~WCn8wQ
It found 1 very high security issue in poco library:
Integer Overflow or Wraparound in: foundation/src/sha1engine.cpp line: 53

poco version: 1.7.8-all (2017-02-22)

Operating system: Windows 10 Pro

Expected: No very high security issues.

[obiltschnig]

I would categorize this as false positive. The function does what it's supposed to do, although it may be more appropriate to use Poco::ByteOrder methods.