Cast wider before shifting.

MACLookup.cc

@@ -188,7 +188,7 @@ const char *MACPrefix2Corp(const u8 *prefix) {
   mac_prefix_init();
 
   /* MA-S: 36 bits (9 nibbles)*/
-  key = ((u64)prefix[0] << 28) + (prefix[1] << 20) + (prefix[2] << 12) + (prefix[3] << 4) + (prefix[4] >> 4);
+  key = ((u64)prefix[0] << 28) + ((u64)prefix[1] << 20) + ((u64)prefix[2] << 12) + ((u64)prefix[3] << 4) + (prefix[4] >> 4);
   corp = findMACEntry(((u64)9 << 36) + key);
   if (corp)
     return corp;

libnetutil/netutil.cc

@@ -975,7 +975,7 @@ int netutil_eth_datalink(const netutil_eth_t *e) {
 #ifdef WIN32
 #define eth_handle(_eth) (_eth->pt)
 #define eth_handle_send pcap_inject
-#define eth_handle_close eth_close
+#define eth_handle_close pcap_close
 #else
 #define eth_handle(_eth) (_eth->ethsd)
 #define eth_handle_send eth_send

nse_libssh2.cc

@@ -850,6 +850,7 @@ struct request_context {
 static int channel_request (lua_State *L, int status, lua_KContext ctx) {
     int rc;
     request_context *req_ctx = (request_context *)ctx;
+    const char* request_str = req_ctx->request;
 
     DO_OR_YIELD((rc = libssh2_channel_process_startup(req_ctx->channel,
                     req_ctx->request, req_ctx->request_len,
@@ -859,7 +860,7 @@ static int channel_request (lua_State *L, int status, lua_KContext ctx) {
     free(req_ctx);
 
     if (rc != 0)
-        return luaL_error(L, "Error sending %s request", req_ctx->request);
+        return luaL_error(L, "Error sending %s request", request_str);
 
     return 0;
 }

nse_zlib.cc

@@ -564,7 +564,10 @@ static int lzstream_decompress(lua_State *L) {
                 success = (l == 0) ? lz_test_eof(L, s) : lz_read_chars(L, s, l);
             }
             else {
-                const char *p = lua_tostring(L, n);
+                size_t l;
+                const char *p = lua_tolstring(L, n, &l);
+                if (l < 2)
+                    return luaL_argerror(L, n, "invalid format");
                 luaL_argcheck(L, p && p[0] == '*', n, "invalid option");
                 switch (p[1]) {
                     case 'l':  /* line */

osscan.h

@@ -245,7 +245,7 @@ struct ObservationPrint {
   FingerPrintScan scan_info;
   std::vector<FingerTest> extra_tests;
   const char *getInfo(FingerPrintScan::Attribute attr) const {
-    if (attr >= FingerPrintScan::MAX_ATTR)
+    if (attr >= FingerPrintScan::MAX_ATTR || attr < 0)
       return NULL;
     return scan_info.values[static_cast<int>(attr)];
   }