Insecure malloc function is used instead of calloc in Rollbar

[Gautam]

We are getting error in PEN Test for iOS application which used rollbar.
PEN Test check for the security performance of app. We used mobSF (https://mobsf.github.io/Mobile-Security-Framework-MobSF/) tool for the PEN Test.

We get following error in Security PEN Test-

1. Insecure malloc function is used instead of calloc :-

malloc is insecure to use and we have calloc as safe alternative of it which should be used.
Do you have any plan for updating this function in your library?
If yes then will it be available in next release or any ETA will be very helpful for me.

[Gautam]

Hi Team,
I am waiting for your reply for the issue.
Could you update on it ASAP?

[Cyrus Radfar]

Hi there! We are looking into this so we can follow up.

[Andrey Kornich (Wide Spectrum Computing LLC)]

@Gautam-zodape, may i ask you to provide the location of the malloc call(s) in the SDK codebase?

[Gautam]

Thanks for the reply..

Following are the locations and line number of the malloc function in Rollbar code -
KSKrashMonitor_NSException : Line Number 71
KSKrashMonitor_Signal : Line Number 131, 148
KSKrashMonitor_System : Line Number 130, 142
KSKrashReport : Line Number 1829
KSKrashReport_Fixer : Line Number 332, 335
KSString : Line Number 79
KSFileUtils : Line Number 171, 289
KSJSONCodecObjC : Line Number 130
KSLogger : Line Number 307

[Gautam]

Hi Team
do you have any update on this ticket?

[Gautam]

Please provide an update on it.