First Flight #16: Mafia Takedown

Summary

The test coverage is such that very few active codepaths or use cases are actually tested.

Vulnerability Details

Most of the findings would have been discovered if there was decent test coverage test. The lack of testing and overall engineering rigour displayed in this project is sadly indicative of the lack of professionalism in the modern day criminal class.

Impact

Many high rated bugs have been let slip into production because of the lack of testing. Some other findings already add test cases for things that need fixing.

Tools Used

It is already installed as part of this codebase, so there really is no excuse, unless there was a mafia "deadline" for the poor developer.

Recommendations

Write more tests for all the functions, even the copied Kernel code, given there are problems here too.