CWE-467
Use of sizeof() on a Pointer Type
The code calls sizeof() on a pointer type, which can be an incorrect calculation if the programmer intended to determine the size of the data that is being pointed to.
Impactr finds and proves whether CWE-467 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.