Flawfinder version 2.0.10, (C) 2001-2019 David A. Wheeler.
Number of rules (primarily dangerous function names) in C/C++ ruleset: 223
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/bc_dts_types.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/bc_decoder_regs.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/link/bc_defines.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/link/bcm_70012_regs.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/vdec_info.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/DriverFwShare.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/bcm_70015_regs.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/crystalhd_flea_rdb.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_decode_wptbl_0.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_decode_cpuimem_0.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_decode_cpucore2_0.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_sharf_top.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_common.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_avd_cache_0.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_reg_cabac2bins2_0.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_timer.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_armcr4_bridge.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_avd_intr2_0.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_trb_top.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_pri_rts_l2_regs_2.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_int_id_irq0.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_mem_dma.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_decode_wprd_0.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_decode_cpudmem2_0.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_decode_dmamem_0.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_int_id_timer.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_mfd.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_decode_dqnt_0.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_sharf_mem_dma0.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_decode_cpudma_0.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_wakeup_ctrl2.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_xpt_pb0.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_i2c.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_sun_rg.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_mdio.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_bop_gr_bridge.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_mem_dma_secure.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_sentinel.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_int_id_xpt_pb1.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_pri_rts_l2_regs_3.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_pcie_phy.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_decode_sint_0.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_xpt_pcroffset.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_xpt_xpu.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_l1_intr.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_pri_crit_l2_regs_1.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_decode_ind_sdram_regs2_0.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_decode_cpuaux_0.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_vich_0.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_int_id_xpt_rave.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_decode_dblk_0.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_intr.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_xpt_bus_if.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_triple_sec.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_ddr23_ctl_regs_0.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_tgt_rgr_bridge.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_sun_l2.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_mmscram.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_bop_aes.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_pri_arb_sarch_regs.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_pri_arb_wrch_regs.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_clk_gr.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_xpt_rave.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_decode_cpuregs_0.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_irq0.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_decode_cpudma2_0.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_misc1.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_pcie_cfg.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_pri_arb_starch_regs.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_decode_cpuregs2_0.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_wrap_misc_gr_bridge.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_wrap_misc_intr2.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_clk.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_bvnt_gr_bridge.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_avd_gr_0.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_gio.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_sun_top_ctrl.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_cce_rgr_bridge.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_int_id_xpt_pb2.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_pri_arb_control_regs.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_arm_uart.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_pri_arb_mips_l2_regs.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_tmisc.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_pri_client_regs.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_scl_hd.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_i2c_gr_bridge.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_misc_perst.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_decode_ip_shim_0.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_scrub_ctrl.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_decode_spre_0.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_csc.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_misc_gr_bridge.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_ddr23_phy_control_regs.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_sun_gisb_arb.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_pri_arb_arc_l1_regs.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_pri_arb_arch_regs.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_decode_ind_sdram_regs_0.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_decode_rvc_0.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_decode_cpudmem_0.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_decode_dmamem2_0.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_pm_l2.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_pcie_tl.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_wrap_misc_secure_intr2.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_sun_gisb_arb_sec.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_armcr4_bridge_axi_slave.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_xpt_xmemif.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_decode_mcom_0.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_xpt_fe.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_reg_cabac2bins_0.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_pri_crit_l2_regs_3.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_bvnt_intr2.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_misc2.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_decode_main_0.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_pcie_dll.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_pri_arb_trace_regs.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_pri_rts_l2_regs_1.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_ddr23_phy_byte_lane_1.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_xpt_gr.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_pri_crit_l2_regs_2.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_sun_rgr.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_irq1.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_decode_cpuimem2_0.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_int_id_xpt_pb0.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_avd_block_avg_regs_0.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_xpt_pb1.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_decode_sint_oloop_0.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_xpt_pb2.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_decode_cpuaux2_0.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_pri_arb_msa_regs.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_decode_dqnt_8x8_0.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_decode_xfrm_0.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_misc3.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_decode_cpucore_0.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_ddr23_phy_byte_lane_0.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_decode_mb_0.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/flea/70015/magnum/basemodules/chp/70015/rdb/a0/bchp_dnr.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/libcrystalhd_version.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/bc_dts_defs.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/7411d.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/include/bc_dts_glob_lnx.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/filters/gst/gst-plugin/src/decif.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/filters/gst/gst-plugin/src/decif.c
Examining data/crystalhd-0.0~git20110715.fdd2f19/filters/gst/gst-plugin/src/parse.c
Examining data/crystalhd-0.0~git20110715.fdd2f19/filters/gst/gst-plugin/src/version_lnx.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/filters/gst/gst-plugin/src/parse.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/filters/gst/gst-plugin/src/version.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/filters/gst/gst-plugin/src/gstbcmdec.c
Examining data/crystalhd-0.0~git20110715.fdd2f19/filters/gst/gst-plugin/src/gstbcmdec.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/examples/hellobcm.cpp
Examining data/crystalhd-0.0~git20110715.fdd2f19/examples/mpeg2test.cpp
Examining data/crystalhd-0.0~git20110715.fdd2f19/linux_lib/libcrystalhd/libcrystalhd_fwload_if.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/linux_lib/libcrystalhd/libcrystalhd_fwcmds.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/linux_lib/libcrystalhd/libcrystalhd_parser.cpp
Examining data/crystalhd-0.0~git20110715.fdd2f19/linux_lib/libcrystalhd/libcrystalhd_parser.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/linux_lib/libcrystalhd/libcrystalhd_int_if.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/linux_lib/libcrystalhd/libcrystalhd_fwload_if.cpp
Examining data/crystalhd-0.0~git20110715.fdd2f19/linux_lib/libcrystalhd/libcrystalhd_fwcmds.cpp
Examining data/crystalhd-0.0~git20110715.fdd2f19/linux_lib/libcrystalhd/libcrystalhd_if.cpp
Examining data/crystalhd-0.0~git20110715.fdd2f19/linux_lib/libcrystalhd/libcrystalhd_int_if.cpp
Examining data/crystalhd-0.0~git20110715.fdd2f19/linux_lib/libcrystalhd/libcrystalhd_if.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/linux_lib/libcrystalhd/libcrystalhd_priv.cpp
Examining data/crystalhd-0.0~git20110715.fdd2f19/linux_lib/libcrystalhd/libcrystalhd_priv.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/linux_lib/libcrystalhd/libcrystalhd_fwdiag_if.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/linux_lib/libcrystalhd/libcrystalhd_fwdiag_if.cpp
Examining data/crystalhd-0.0~git20110715.fdd2f19/driver/linux/crystalhd_misc.c
Examining data/crystalhd-0.0~git20110715.fdd2f19/driver/linux/FleaDefs.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/driver/linux/crystalhd_cmds.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/driver/linux/crystalhd_hw.c
Examining data/crystalhd-0.0~git20110715.fdd2f19/driver/linux/crystalhd_linkfuncs.c
Examining data/crystalhd-0.0~git20110715.fdd2f19/driver/linux/crystalhd_flea_ddr.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/driver/linux/crystalhd_fw_if.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/driver/linux/crystalhd_lnx.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/driver/linux/crystalhd_misc.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/driver/linux/crystalhd_flea_ddr.c
Examining data/crystalhd-0.0~git20110715.fdd2f19/driver/linux/crystalhd_lnx.c
Examining data/crystalhd-0.0~git20110715.fdd2f19/driver/linux/crystalhd_cmds.c
Examining data/crystalhd-0.0~git20110715.fdd2f19/driver/linux/crystalhd_linkfuncs.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/driver/linux/crystalhd_fleafuncs.c
Examining data/crystalhd-0.0~git20110715.fdd2f19/driver/linux/crystalhd_fleafuncs.h
Examining data/crystalhd-0.0~git20110715.fdd2f19/driver/linux/crystalhd_hw.h
FINAL RESULTS:
data/crystalhd-0.0~git20110715.fdd2f19/linux_lib/libcrystalhd/libcrystalhd_fwdiag_if.cpp:171:3: [5] (buffer) strncat:
Easily used incorrectly (e.g., incorrectly computing the correct maximum
size to add) [MS-banned] (CWE-120). Consider strcat_s, strlcat, snprintf,
or automatically resizing strings. Risk is high; the length parameter
appears to be a constant, instead of computing the number of characters
left.
strncat(fwfile,(const char*)FwBinFile,sizeof(fwfile));
data/crystalhd-0.0~git20110715.fdd2f19/linux_lib/libcrystalhd/libcrystalhd_fwdiag_if.cpp:174:3: [5] (buffer) strncat:
Easily used incorrectly (e.g., incorrectly computing the correct maximum
size to add) [MS-banned] (CWE-120). Consider strcat_s, strlcat, snprintf,
or automatically resizing strings. Risk is high; the length parameter
appears to be a constant, instead of computing the number of characters
left.
strncat(fwfile,"/",sizeof(fwfile));
data/crystalhd-0.0~git20110715.fdd2f19/linux_lib/libcrystalhd/libcrystalhd_fwdiag_if.cpp:175:3: [5] (buffer) strncat:
Easily used incorrectly (e.g., incorrectly computing the correct maximum
size to add) [MS-banned] (CWE-120). Consider strcat_s, strlcat, snprintf,
or automatically resizing strings. Risk is high; the length parameter
appears to be a constant, instead of computing the number of characters
left.
strncat(fwfile,"bcmFWDiag.bin",sizeof(fwfile));
data/crystalhd-0.0~git20110715.fdd2f19/linux_lib/libcrystalhd/libcrystalhd_if.cpp:716:3: [5] (buffer) strncat:
Easily used incorrectly (e.g., incorrectly computing the correct maximum
size to add) [MS-banned] (CWE-120). Consider strcat_s, strlcat, snprintf,
or automatically resizing strings. Risk is high; the length parameter
appears to be a constant, instead of computing the number of characters
left.
strncat(fwfile,(const char*)fname,sizeof(fwfile));
data/crystalhd-0.0~git20110715.fdd2f19/linux_lib/libcrystalhd/libcrystalhd_if.cpp:719:13: [5] (buffer) strncat:
Easily used incorrectly (e.g., incorrectly computing the correct maximum
size to add) [MS-banned] (CWE-120). Consider strcat_s, strlcat, snprintf,
or automatically resizing strings. Risk is high; the length parameter
appears to be a constant, instead of computing the number of characters
left.
strncat(fwfile,FWBINFILE_70015,sizeof(FWBINFILE_70015));
data/crystalhd-0.0~git20110715.fdd2f19/linux_lib/libcrystalhd/libcrystalhd_if.cpp:721:13: [5] (buffer) strncat:
Easily used incorrectly (e.g., incorrectly computing the correct maximum
size to add) [MS-banned] (CWE-120). Consider strcat_s, strlcat, snprintf,
or automatically resizing strings. Risk is high; the length parameter
appears to be a constant, instead of computing the number of characters
left.
strncat(fwfile,FWBINFILE_70012,sizeof(FWBINFILE_70012));
data/crystalhd-0.0~git20110715.fdd2f19/linux_lib/libcrystalhd/libcrystalhd_priv.h:50:43: [4] (format) printf:
If format strings can be influenced by an attacker, they can be exploited
(CWE-134). Use a constant for the format specification.
#define DebugLog_Trace(_tl, fmt, args...) printf(fmt, ##args);
data/crystalhd-0.0~git20110715.fdd2f19/driver/linux/crystalhd_fw_if.h:113:14: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
unsigned char model_values[3][MAX_FGT_VALUE_INTERVAL][MAX_FGT_MODEL_VALUE];
data/crystalhd-0.0~git20110715.fdd2f19/driver/linux/crystalhd_fw_if.h:114:14: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
unsigned char upper_bound[3][MAX_FGT_VALUE_INTERVAL];
data/crystalhd-0.0~git20110715.fdd2f19/driver/linux/crystalhd_fw_if.h:115:14: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
unsigned char lower_bound[3][MAX_FGT_VALUE_INTERVAL];
data/crystalhd-0.0~git20110715.fdd2f19/driver/linux/crystalhd_fw_if.h:132:14: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
unsigned char comp_flag[3]; /* Components [0,2] parameters present flag. */
data/crystalhd-0.0~git20110715.fdd2f19/driver/linux/crystalhd_fw_if.h:133:14: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
unsigned char num_intervals_minus1[3]; /* Number of intensity level intervals. */
data/crystalhd-0.0~git20110715.fdd2f19/driver/linux/crystalhd_fw_if.h:134:14: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
unsigned char num_model_values[3]; /* Number of model values. */
data/crystalhd-0.0~git20110715.fdd2f19/driver/linux/crystalhd_hw.c:1074:2: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(stats, &hw->stats, sizeof(*stats));
data/crystalhd-0.0~git20110715.fdd2f19/driver/linux/crystalhd_lnx.h:58:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char name[32];
data/crystalhd-0.0~git20110715.fdd2f19/examples/hellobcm.cpp:73:12: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
inFile.open("/tmp/test_video.264", std::ios::in | std::ios::binary);
data/crystalhd-0.0~git20110715.fdd2f19/examples/mpeg2test.cpp:79:12: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
inFile.open("/tmp/test.mpeg2", std::ios::in | std::ios::binary);
data/crystalhd-0.0~git20110715.fdd2f19/filters/gst/gst-plugin/src/gstbcmdec.c:532:6: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(bcmdec->codec_params.sps_pps_buf,
data/crystalhd-0.0~git20110715.fdd2f19/filters/gst/gst-plugin/src/gstbcmdec.c:549:8: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(bcmdec->codec_params.sps_pps_buf, info.data, bcmdec->codec_params.pps_size);
data/crystalhd-0.0~git20110715.fdd2f19/filters/gst/gst-plugin/src/gstbcmdec.c:636:18: [2] (misc) fopen:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
bcmdec->fhnd = fopen("dump2.264", "a+");
data/crystalhd-0.0~git20110715.fdd2f19/filters/gst/gst-plugin/src/gstbcmdec.c:2170:3: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(bcmdec->codec_params.sps_pps_buf + bcmdec->codec_params.pps_size, data, nal_size);
data/crystalhd-0.0~git20110715.fdd2f19/filters/gst/gst-plugin/src/gstbcmdec.c:2212:3: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(bcmdec->codec_params.sps_pps_buf + bcmdec->codec_params.pps_size, data, nal_size);
data/crystalhd-0.0~git20110715.fdd2f19/include/vdec_info.h:125:14: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
unsigned char model_values[3][MAX_FGT_VALUE_INTERVAL][MAX_FGT_MODEL_VALUE];
data/crystalhd-0.0~git20110715.fdd2f19/include/vdec_info.h:126:14: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
unsigned char upper_bound[3][MAX_FGT_VALUE_INTERVAL];
data/crystalhd-0.0~git20110715.fdd2f19/include/vdec_info.h:127:14: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
unsigned char lower_bound[3][MAX_FGT_VALUE_INTERVAL];
data/crystalhd-0.0~git20110715.fdd2f19/include/vdec_info.h:144:14: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
unsigned char comp_flag[3]; /**< Components [0,2] parameters present flag. */
data/crystalhd-0.0~git20110715.fdd2f19/include/vdec_info.h:145:14: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
unsigned char num_intervals_minus1[3]; /**< Number of intensity level intervals. */
data/crystalhd-0.0~git20110715.fdd2f19/include/vdec_info.h:146:14: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
unsigned char num_model_values[3]; /**< Number of model values. */
data/crystalhd-0.0~git20110715.fdd2f19/linux_lib/libcrystalhd/libcrystalhd_fwcmds.cpp:1234:2: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(temp, buffer, Length);
data/crystalhd-0.0~git20110715.fdd2f19/linux_lib/libcrystalhd/libcrystalhd_fwcmds.cpp:1286:2: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(temp, buffer, Length);
data/crystalhd-0.0~git20110715.fdd2f19/linux_lib/libcrystalhd/libcrystalhd_fwdiag_if.cpp:147:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char fwfile[MAX_PATH+1];
data/crystalhd-0.0~git20110715.fdd2f19/linux_lib/libcrystalhd/libcrystalhd_fwload_if.cpp:146:7: [2] (misc) fopen:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
fp = fopen(FwBinFile,"rb");
data/crystalhd-0.0~git20110715.fdd2f19/linux_lib/libcrystalhd/libcrystalhd_fwload_if.cpp:191:7: [2] (misc) fopen:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
fp = fopen(FwBinFile,"rb");
data/crystalhd-0.0~git20110715.fdd2f19/linux_lib/libcrystalhd/libcrystalhd_if.cpp:51:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(dest, src, count);
data/crystalhd-0.0~git20110715.fdd2f19/linux_lib/libcrystalhd/libcrystalhd_if.cpp:454:13: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
drvHandle =open(CRYSTALHD_API_DEV_NAME, O_RDWR);
data/crystalhd-0.0~git20110715.fdd2f19/linux_lib/libcrystalhd/libcrystalhd_if.cpp:704:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char fwfile[MAX_PATH+1];
data/crystalhd-0.0~git20110715.fdd2f19/linux_lib/libcrystalhd/libcrystalhd_if.cpp:729:9: [2] (misc) fopen:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
fhnd = fopen((const char *)fwfile, "rb");
data/crystalhd-0.0~git20110715.fdd2f19/linux_lib/libcrystalhd/libcrystalhd_if.cpp:1076:3: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(Ctx->VidParams.pMetaData, pInputFormat->pMetaData, pInputFormat->metaDataSz);
data/crystalhd-0.0~git20110715.fdd2f19/linux_lib/libcrystalhd/libcrystalhd_if.cpp:1948:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(alignBuf, pDeliverBuf, ulDeliverBytes);
data/crystalhd-0.0~git20110715.fdd2f19/linux_lib/libcrystalhd/libcrystalhd_if.cpp:1987:4: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(alignBuf,(uint8_t *)b_pes_header, 9);
data/crystalhd-0.0~git20110715.fdd2f19/linux_lib/libcrystalhd/libcrystalhd_if.cpp:2012:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(alignBuf + j, pPrivData, 16);
data/crystalhd-0.0~git20110715.fdd2f19/linux_lib/libcrystalhd/libcrystalhd_if.cpp:2019:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(alignBuf + j, pExtData, nExtDataLen);
data/crystalhd-0.0~git20110715.fdd2f19/linux_lib/libcrystalhd/libcrystalhd_if.cpp:2030:4: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(alignBuf + j, pDeliverBuf, ulUsedDataBytes);
data/crystalhd-0.0~git20110715.fdd2f19/linux_lib/libcrystalhd/libcrystalhd_int_if.cpp:573:2: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(info,pciInfo->pci_cfg_space,PCI_CFG_SIZE);
data/crystalhd-0.0~git20110715.fdd2f19/linux_lib/libcrystalhd/libcrystalhd_int_if.cpp:805:2: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(Buffer,pXferBuff,BuffSz);
data/crystalhd-0.0~git20110715.fdd2f19/linux_lib/libcrystalhd/libcrystalhd_int_if.cpp:868:2: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(pXferBuff,Buffer,BuffSz);
data/crystalhd-0.0~git20110715.fdd2f19/linux_lib/libcrystalhd/libcrystalhd_int_if.cpp:1041:2: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(pDrvStat, pIntDrvStat, 128);
data/crystalhd-0.0~git20110715.fdd2f19/linux_lib/libcrystalhd/libcrystalhd_int_if.cpp:1258:4: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(pDest,pSrc,dstWidthInPixels);
data/crystalhd-0.0~git20110715.fdd2f19/linux_lib/libcrystalhd/libcrystalhd_int_if.cpp:1265:3: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(Vout->Ybuff, Vin->Ybuff, dstHeightInPixels * dstWidthInPixels);
data/crystalhd-0.0~git20110715.fdd2f19/linux_lib/libcrystalhd/libcrystalhd_int_if.cpp:1318:4: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(pDest,pSrc,dstWidthInPixels);
data/crystalhd-0.0~git20110715.fdd2f19/linux_lib/libcrystalhd/libcrystalhd_int_if.cpp:1404:4: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(pDest,pSrc,dstWidthInPixels);
data/crystalhd-0.0~git20110715.fdd2f19/linux_lib/libcrystalhd/libcrystalhd_int_if.cpp:1412:4: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(pDest,pSrc,dstWidthInPixels);
data/crystalhd-0.0~git20110715.fdd2f19/linux_lib/libcrystalhd/libcrystalhd_int_if.cpp:1418:3: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(Vout->Ybuff, Vin->Ybuff, dstHeightInPixels * dstWidthInPixels);
data/crystalhd-0.0~git20110715.fdd2f19/linux_lib/libcrystalhd/libcrystalhd_int_if.cpp:1420:3: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(Vout->UVbuff, Vin->UVbuff, dstHeightInPixels/2 * dstWidthInPixels);
data/crystalhd-0.0~git20110715.fdd2f19/linux_lib/libcrystalhd/libcrystalhd_int_if.cpp:2161:2: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(pXferBuff, Buffer, BuffSz);
data/crystalhd-0.0~git20110715.fdd2f19/linux_lib/libcrystalhd/libcrystalhd_int_if.cpp:2233:22: [2] (misc) fopen:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
if(!(pOutputFile = fopen("hdfile_dump.ts","wb")) )
data/crystalhd-0.0~git20110715.fdd2f19/linux_lib/libcrystalhd/libcrystalhd_parser.cpp:204:3: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(Ctx->PESConvParams.m_pSpsPpsBuf, Ctx->VidParams.pMetaData, Ctx->PESConvParams.m_iSpsPpsLen);
data/crystalhd-0.0~git20110715.fdd2f19/linux_lib/libcrystalhd/libcrystalhd_parser.cpp:216:4: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(Ctx->PESConvParams.m_pSpsPpsBuf, b_asf_vc1_sm_codein_seqhdr, Ctx->PESConvParams.m_iSpsPpsLen);
data/crystalhd-0.0~git20110715.fdd2f19/linux_lib/libcrystalhd/libcrystalhd_parser.cpp:219:4: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(Ctx->PESConvParams.m_pSpsPpsBuf + 21, Ctx->VidParams.pMetaData, 4);
data/crystalhd-0.0~git20110715.fdd2f19/linux_lib/libcrystalhd/libcrystalhd_parser.cpp:229:4: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(Ctx->PESConvParams.m_pSpsPpsBuf, b_asf_vc1_sm_seqhdr, Ctx->PESConvParams.m_iSpsPpsLen);
data/crystalhd-0.0~git20110715.fdd2f19/linux_lib/libcrystalhd/libcrystalhd_parser.cpp:232:4: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(Ctx->PESConvParams.m_pSpsPpsBuf + 8, Ctx->VidParams.pMetaData, 4);
data/crystalhd-0.0~git20110715.fdd2f19/linux_lib/libcrystalhd/libcrystalhd_parser.cpp:361:6: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(pDes, pSrc, iSize);
data/crystalhd-0.0~git20110715.fdd2f19/linux_lib/libcrystalhd/libcrystalhd_parser.cpp:586:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(pPendCurrentPos, pStart, lDataRemained);
data/crystalhd-0.0~git20110715.fdd2f19/linux_lib/libcrystalhd/libcrystalhd_parser.cpp:615:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(pPendCurrentPos, pStart, Ctx->PESConvParams.m_lStartCodeDataSize);
data/crystalhd-0.0~git20110715.fdd2f19/linux_lib/libcrystalhd/libcrystalhd_parser.cpp:749:3: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(Ctx->PESConvParams.pStartcodePendBuff + iCount, (uint8_t *)b_asf_vc1_frame_scode, lStartCodeSize);
data/crystalhd-0.0~git20110715.fdd2f19/linux_lib/libcrystalhd/libcrystalhd_parser.cpp:753:3: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(Ctx->PESConvParams.pStartcodePendBuff + iCount, (uint8_t *)*ppBuffer, *pUlDataSize);
data/crystalhd-0.0~git20110715.fdd2f19/linux_lib/libcrystalhd/libcrystalhd_parser.cpp:779:4: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(pDst, b_asf_vc1_sm_codein_header, 16);
data/crystalhd-0.0~git20110715.fdd2f19/linux_lib/libcrystalhd/libcrystalhd_parser.cpp:783:4: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(pDst + 16, (uint8_t *)b_asf_vc1_sm_codein_data_suffix, 1);
data/crystalhd-0.0~git20110715.fdd2f19/linux_lib/libcrystalhd/libcrystalhd_parser.cpp:784:4: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(pDst + 17, pData, *pUlDataSize);
data/crystalhd-0.0~git20110715.fdd2f19/linux_lib/libcrystalhd/libcrystalhd_parser.cpp:790:4: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(pDst, b_asf_vc1_sm_picheader_scode, 4);
data/crystalhd-0.0~git20110715.fdd2f19/linux_lib/libcrystalhd/libcrystalhd_parser.cpp:791:4: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(pDst + 4, pData, *pUlDataSize);
data/crystalhd-0.0~git20110715.fdd2f19/linux_lib/libcrystalhd/libcrystalhd_priv.cpp:526:3: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy((uint32_t*)&pOut->PicInfo,(uint32_t*)(pOut->Ybuff + 4), sizeof(BC_PIC_INFO_BLOCK));
data/crystalhd-0.0~git20110715.fdd2f19/linux_lib/libcrystalhd/libcrystalhd_priv.cpp:580:3: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy((uint32_t*)&pOut->PicInfo,(uint32_t*)(pPicInfoLine + 4), sizeof(BC_PIC_INFO_BLOCK));
data/crystalhd-0.0~git20110715.fdd2f19/linux_lib/libcrystalhd/libcrystalhd_priv.cpp:1762:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char fwfile[MAX_PATH + 1];
data/crystalhd-0.0~git20110715.fdd2f19/linux_lib/libcrystalhd/libcrystalhd_priv.cpp:1763:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char fwfilepath[MAX_PATH + 1];
data/crystalhd-0.0~git20110715.fdd2f19/linux_lib/libcrystalhd/libcrystalhd_priv.cpp:2372:2: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(txBuf->basePointer + txBuf->writePointer, bufToPush, mcpySz);
data/crystalhd-0.0~git20110715.fdd2f19/linux_lib/libcrystalhd/libcrystalhd_priv.cpp:2388:3: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(txBuf->basePointer, bufRemain, mcpySz);
data/crystalhd-0.0~git20110715.fdd2f19/linux_lib/libcrystalhd/libcrystalhd_priv.cpp:2421:2: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(bufToPop, txBuf->basePointer + txBuf->readPointer, popSz);
data/crystalhd-0.0~git20110715.fdd2f19/linux_lib/libcrystalhd/libcrystalhd_priv.cpp:2437:3: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(bufRemain, txBuf->basePointer, popSz);
data/crystalhd-0.0~git20110715.fdd2f19/linux_lib/libcrystalhd/libcrystalhd_priv.cpp:2646:13: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
drvHandle =open(CRYSTALHD_API_DEV_NAME, O_RDWR);
data/crystalhd-0.0~git20110715.fdd2f19/linux_lib/libcrystalhd/libcrystalhd_priv.h:250:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char StreamFile[MAX_PATH+1];
data/crystalhd-0.0~git20110715.fdd2f19/linux_lib/libcrystalhd/libcrystalhd_priv.h:251:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char VidInner[MAX_PATH+1];
data/crystalhd-0.0~git20110715.fdd2f19/linux_lib/libcrystalhd/libcrystalhd_priv.h:252:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char VidOuter[MAX_PATH+1];
data/crystalhd-0.0~git20110715.fdd2f19/linux_lib/libcrystalhd/libcrystalhd_priv.h:282:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char FwBinFile[MAX_PATH+1]; /* Firmware Bin file place holder */
data/crystalhd-0.0~git20110715.fdd2f19/linux_lib/libcrystalhd/libcrystalhd_priv.h:288:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char DilPath[MAX_PATH+1]; /* DIL runtime Location.. */
data/crystalhd-0.0~git20110715.fdd2f19/examples/hellobcm.cpp:129:18: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
inFile.read((char*)input, inputLen);
data/crystalhd-0.0~git20110715.fdd2f19/examples/hellobcm.cpp:150:9: [1] (obsolete) usleep:
This C routine is considered obsolete (as opposed to the shell command by
the same name). The interaction of this function with SIGALRM and other
timer functions such as sleep(), alarm(), setitimer(), and nanosleep() is
unspecified (CWE-676). Use nanosleep(2) or setitimer(2) instead.
usleep(1000);
data/crystalhd-0.0~git20110715.fdd2f19/examples/mpeg2test.cpp:135:18: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
inFile.read((char*)input, inputLen);
data/crystalhd-0.0~git20110715.fdd2f19/examples/mpeg2test.cpp:156:9: [1] (obsolete) usleep:
This C routine is considered obsolete (as opposed to the shell command by
the same name). The interaction of this function with SIGALRM and other
timer functions such as sleep(), alarm(), setitimer(), and nanosleep() is
unspecified (CWE-676). Use nanosleep(2) or setitimer(2) instead.
usleep(1000);
data/crystalhd-0.0~git20110715.fdd2f19/filters/gst/gst-plugin/src/gstbcmdec.c:1238:3: [1] (obsolete) usleep:
This C routine is considered obsolete (as opposed to the shell command by
the same name). The interaction of this function with SIGALRM and other
timer functions such as sleep(), alarm(), setitimer(), and nanosleep() is
unspecified (CWE-676). Use nanosleep(2) or setitimer(2) instead.
usleep(10);
data/crystalhd-0.0~git20110715.fdd2f19/filters/gst/gst-plugin/src/gstbcmdec.c:1423:5: [1] (obsolete) usleep:
This C routine is considered obsolete (as opposed to the shell command by
the same name). The interaction of this function with SIGALRM and other
timer functions such as sleep(), alarm(), setitimer(), and nanosleep() is
unspecified (CWE-676). Use nanosleep(2) or setitimer(2) instead.
usleep(5 * 1000);
data/crystalhd-0.0~git20110715.fdd2f19/filters/gst/gst-plugin/src/gstbcmdec.c:1435:7: [1] (obsolete) usleep:
This C routine is considered obsolete (as opposed to the shell command by
the same name). The interaction of this function with SIGALRM and other
timer functions such as sleep(), alarm(), setitimer(), and nanosleep() is
unspecified (CWE-676). Use nanosleep(2) or setitimer(2) instead.
usleep(30 * 1000);
data/crystalhd-0.0~git20110715.fdd2f19/filters/gst/gst-plugin/src/gstbcmdec.c:1450:7: [1] (obsolete) usleep:
This C routine is considered obsolete (as opposed to the shell command by
the same name). The interaction of this function with SIGALRM and other
timer functions such as sleep(), alarm(), setitimer(), and nanosleep() is
unspecified (CWE-676). Use nanosleep(2) or setitimer(2) instead.
usleep(10 * 1000);
data/crystalhd-0.0~git20110715.fdd2f19/filters/gst/gst-plugin/src/gstbcmdec.c:1458:7: [1] (obsolete) usleep:
This C routine is considered obsolete (as opposed to the shell command by
the same name). The interaction of this function with SIGALRM and other
timer functions such as sleep(), alarm(), setitimer(), and nanosleep() is
unspecified (CWE-676). Use nanosleep(2) or setitimer(2) instead.
usleep(10 * 1000);
data/crystalhd-0.0~git20110715.fdd2f19/filters/gst/gst-plugin/src/gstbcmdec.c:1546:6: [1] (obsolete) usleep:
This C routine is considered obsolete (as opposed to the shell command by
the same name). The interaction of this function with SIGALRM and other
timer functions such as sleep(), alarm(), setitimer(), and nanosleep() is
unspecified (CWE-676). Use nanosleep(2) or setitimer(2) instead.
usleep(1000);
data/crystalhd-0.0~git20110715.fdd2f19/filters/gst/gst-plugin/src/gstbcmdec.c:2435:4: [1] (obsolete) usleep:
This C routine is considered obsolete (as opposed to the shell command by
the same name). The interaction of this function with SIGALRM and other
timer functions such as sleep(), alarm(), setitimer(), and nanosleep() is
unspecified (CWE-676). Use nanosleep(2) or setitimer(2) instead.
usleep(100 * 1000);
data/crystalhd-0.0~git20110715.fdd2f19/filters/gst/gst-plugin/src/gstbcmdec.c:2450:6: [1] (obsolete) usleep:
This C routine is considered obsolete (as opposed to the shell command by
the same name). The interaction of this function with SIGALRM and other
timer functions such as sleep(), alarm(), setitimer(), and nanosleep() is
unspecified (CWE-676). Use nanosleep(2) or setitimer(2) instead.
usleep(100 * 1000); /* we have enought buffers from the renderer */
data/crystalhd-0.0~git20110715.fdd2f19/filters/gst/gst-plugin/src/gstbcmdec.c:2462:5: [1] (obsolete) usleep:
This C routine is considered obsolete (as opposed to the shell command by
the same name). The interaction of this function with SIGALRM and other
timer functions such as sleep(), alarm(), setitimer(), and nanosleep() is
unspecified (CWE-676). Use nanosleep(2) or setitimer(2) instead.
usleep(100 * 1000); // Sleep since we have buffers queued up
data/crystalhd-0.0~git20110715.fdd2f19/filters/gst/gst-plugin/src/gstbcmdec.c:2471:6: [1] (obsolete) usleep:
This C routine is considered obsolete (as opposed to the shell command by
the same name). The interaction of this function with SIGALRM and other
timer functions such as sleep(), alarm(), setitimer(), and nanosleep() is
unspecified (CWE-676). Use nanosleep(2) or setitimer(2) instead.
usleep(30 * 1000);
data/crystalhd-0.0~git20110715.fdd2f19/filters/gst/gst-plugin/src/gstbcmdec.c:2481:4: [1] (obsolete) usleep:
This C routine is considered obsolete (as opposed to the shell command by
the same name). The interaction of this function with SIGALRM and other
timer functions such as sleep(), alarm(), setitimer(), and nanosleep() is
unspecified (CWE-676). Use nanosleep(2) or setitimer(2) instead.
usleep(5 * 1000);
data/crystalhd-0.0~git20110715.fdd2f19/linux_lib/libcrystalhd/libcrystalhd_if.cpp:1778:3: [1] (obsolete) usleep:
This C routine is considered obsolete (as opposed to the shell command by
the same name). The interaction of this function with SIGALRM and other
timer functions such as sleep(), alarm(), setitimer(), and nanosleep() is
unspecified (CWE-676). Use nanosleep(2) or setitimer(2) instead.
usleep(5 * 1000);
data/crystalhd-0.0~git20110715.fdd2f19/linux_lib/libcrystalhd/libcrystalhd_if.cpp:2813:2: [1] (buffer) strncpy:
Easily used incorrectly; doesn't always \0-terminate or check for invalid
pointers [MS-banned] (CWE-120).
strncpy(DilPath, Ctx->DilPath, sizeof(Ctx->DilPath));
data/crystalhd-0.0~git20110715.fdd2f19/linux_lib/libcrystalhd/libcrystalhd_int_if.cpp:1184:3: [1] (buffer) strncpy:
Easily used incorrectly; doesn't always \0-terminate or check for invalid
pointers [MS-banned] (CWE-120).
strncpy(StreamFName, Ctx->StreamFile, MAX_PATH);
data/crystalhd-0.0~git20110715.fdd2f19/linux_lib/libcrystalhd/libcrystalhd_int_if.cpp:1185:3: [1] (buffer) strncpy:
Easily used incorrectly; doesn't always \0-terminate or check for invalid
pointers [MS-banned] (CWE-120).
strncpy(VDecOuter, Ctx->VidOuter, MAX_PATH);
data/crystalhd-0.0~git20110715.fdd2f19/linux_lib/libcrystalhd/libcrystalhd_int_if.cpp:1186:3: [1] (buffer) strncpy:
Easily used incorrectly; doesn't always \0-terminate or check for invalid
pointers [MS-banned] (CWE-120).
strncpy(VDecInner, Ctx->VidInner, MAX_PATH );
data/crystalhd-0.0~git20110715.fdd2f19/linux_lib/libcrystalhd/libcrystalhd_priv.cpp:1088:4: [1] (obsolete) usleep:
This C routine is considered obsolete (as opposed to the shell command by
the same name). The interaction of this function with SIGALRM and other
timer functions such as sleep(), alarm(), setitimer(), and nanosleep() is
unspecified (CWE-676). Use nanosleep(2) or setitimer(2) instead.
usleep(100);
data/crystalhd-0.0~git20110715.fdd2f19/linux_lib/libcrystalhd/libcrystalhd_priv.cpp:1463:3: [1] (obsolete) usleep:
This C routine is considered obsolete (as opposed to the shell command by
the same name). The interaction of this function with SIGALRM and other
timer functions such as sleep(), alarm(), setitimer(), and nanosleep() is
unspecified (CWE-676). Use nanosleep(2) or setitimer(2) instead.
usleep(100 * 1000);
data/crystalhd-0.0~git20110715.fdd2f19/linux_lib/libcrystalhd/libcrystalhd_priv.cpp:1747:3: [1] (buffer) strncpy:
Easily used incorrectly; doesn't always \0-terminate or check for invalid
pointers [MS-banned] (CWE-120).
strncpy((char*)data, info->dlpi_name,dilpath_len);
data/crystalhd-0.0~git20110715.fdd2f19/linux_lib/libcrystalhd/libcrystalhd_priv.cpp:1771:22: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
fwfile_len = strlen(FWBINFILE_70015);
data/crystalhd-0.0~git20110715.fdd2f19/linux_lib/libcrystalhd/libcrystalhd_priv.cpp:1772:9: [1] (buffer) strncpy:
Easily used incorrectly; doesn't always \0-terminate or check for invalid
pointers [MS-banned] (CWE-120).
strncpy(fwfile, FWBINFILE_70015, fwfile_len);
data/crystalhd-0.0~git20110715.fdd2f19/linux_lib/libcrystalhd/libcrystalhd_priv.cpp:1774:22: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
fwfile_len = strlen(FWBINFILE_70012);
data/crystalhd-0.0~git20110715.fdd2f19/linux_lib/libcrystalhd/libcrystalhd_priv.cpp:1775:9: [1] (buffer) strncpy:
Easily used incorrectly; doesn't always \0-terminate or check for invalid
pointers [MS-banned] (CWE-120).
strncpy(fwfile, FWBINFILE_70012, fwfile_len);
data/crystalhd-0.0~git20110715.fdd2f19/linux_lib/libcrystalhd/libcrystalhd_priv.cpp:1778:7: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ((strlen(fwdir) + fwfile_len) > (MAX_PATH + 1)) {
data/crystalhd-0.0~git20110715.fdd2f19/linux_lib/libcrystalhd/libcrystalhd_priv.cpp:1783:2: [1] (buffer) strncpy:
Easily used incorrectly; doesn't always \0-terminate or check for invalid
pointers [MS-banned] (CWE-120).
strncpy(fwfilepath, fwdir, strlen(fwdir) + 1);
data/crystalhd-0.0~git20110715.fdd2f19/linux_lib/libcrystalhd/libcrystalhd_priv.cpp:1783:29: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
strncpy(fwfilepath, fwdir, strlen(fwdir) + 1);
data/crystalhd-0.0~git20110715.fdd2f19/linux_lib/libcrystalhd/libcrystalhd_priv.cpp:1784:5: [1] (buffer) strncat:
Easily used incorrectly (e.g., incorrectly computing the correct maximum
size to add) [MS-banned] (CWE-120). Consider strcat_s, strlcat, snprintf,
or automatically resizing strings.
strncat(fwfilepath, fwfile, fwfile_len);
data/crystalhd-0.0~git20110715.fdd2f19/linux_lib/libcrystalhd/libcrystalhd_priv.cpp:1785:16: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
fwfilepath[strlen(fwdir) + fwfile_len] = '\0';
data/crystalhd-0.0~git20110715.fdd2f19/linux_lib/libcrystalhd/libcrystalhd_priv.cpp:1786:5: [1] (buffer) strncpy:
Easily used incorrectly; doesn't always \0-terminate or check for invalid
pointers [MS-banned] (CWE-120).
strncpy(Ctx->FwBinFile, fwfilepath, strlen(fwdir) + fwfile_len);
data/crystalhd-0.0~git20110715.fdd2f19/linux_lib/libcrystalhd/libcrystalhd_priv.cpp:1786:41: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
strncpy(Ctx->FwBinFile, fwfilepath, strlen(fwdir) + fwfile_len);
data/crystalhd-0.0~git20110715.fdd2f19/linux_lib/libcrystalhd/libcrystalhd_priv.cpp:2510:4: [1] (obsolete) usleep:
This C routine is considered obsolete (as opposed to the shell command by
the same name). The interaction of this function with SIGALRM and other
timer functions such as sleep(), alarm(), setitimer(), and nanosleep() is
unspecified (CWE-676). Use nanosleep(2) or setitimer(2) instead.
usleep(2 * 1000);
data/crystalhd-0.0~git20110715.fdd2f19/linux_lib/libcrystalhd/libcrystalhd_priv.cpp:2519:4: [1] (obsolete) usleep:
This C routine is considered obsolete (as opposed to the shell command by
the same name). The interaction of this function with SIGALRM and other
timer functions such as sleep(), alarm(), setitimer(), and nanosleep() is
unspecified (CWE-676). Use nanosleep(2) or setitimer(2) instead.
usleep(30 * 1000);
data/crystalhd-0.0~git20110715.fdd2f19/linux_lib/libcrystalhd/libcrystalhd_priv.cpp:2534:4: [1] (obsolete) usleep:
This C routine is considered obsolete (as opposed to the shell command by
the same name). The interaction of this function with SIGALRM and other
timer functions such as sleep(), alarm(), setitimer(), and nanosleep() is
unspecified (CWE-676). Use nanosleep(2) or setitimer(2) instead.
usleep(30 * 1000);
data/crystalhd-0.0~git20110715.fdd2f19/linux_lib/libcrystalhd/libcrystalhd_priv.cpp:2555:5: [1] (obsolete) usleep:
This C routine is considered obsolete (as opposed to the shell command by
the same name). The interaction of this function with SIGALRM and other
timer functions such as sleep(), alarm(), setitimer(), and nanosleep() is
unspecified (CWE-676). Use nanosleep(2) or setitimer(2) instead.
usleep(1000 * 1000);
data/crystalhd-0.0~git20110715.fdd2f19/linux_lib/libcrystalhd/libcrystalhd_priv.cpp:2564:5: [1] (obsolete) usleep:
This C routine is considered obsolete (as opposed to the shell command by
the same name). The interaction of this function with SIGALRM and other
timer functions such as sleep(), alarm(), setitimer(), and nanosleep() is
unspecified (CWE-676). Use nanosleep(2) or setitimer(2) instead.
usleep(1000 * 1000);
data/crystalhd-0.0~git20110715.fdd2f19/linux_lib/libcrystalhd/libcrystalhd_priv.cpp:2572:5: [1] (obsolete) usleep:
This C routine is considered obsolete (as opposed to the shell command by
the same name). The interaction of this function with SIGALRM and other
timer functions such as sleep(), alarm(), setitimer(), and nanosleep() is
unspecified (CWE-676). Use nanosleep(2) or setitimer(2) instead.
usleep(1000 * 1000);
data/crystalhd-0.0~git20110715.fdd2f19/linux_lib/libcrystalhd/libcrystalhd_priv.cpp:2580:5: [1] (obsolete) usleep:
This C routine is considered obsolete (as opposed to the shell command by
the same name). The interaction of this function with SIGALRM and other
timer functions such as sleep(), alarm(), setitimer(), and nanosleep() is
unspecified (CWE-676). Use nanosleep(2) or setitimer(2) instead.
usleep(1000 * 1000);
data/crystalhd-0.0~git20110715.fdd2f19/linux_lib/libcrystalhd/libcrystalhd_priv.cpp:2607:5: [1] (obsolete) usleep:
This C routine is considered obsolete (as opposed to the shell command by
the same name). The interaction of this function with SIGALRM and other
timer functions such as sleep(), alarm(), setitimer(), and nanosleep() is
unspecified (CWE-676). Use nanosleep(2) or setitimer(2) instead.
usleep(3000);
data/crystalhd-0.0~git20110715.fdd2f19/linux_lib/libcrystalhd/libcrystalhd_priv.cpp:2616:5: [1] (obsolete) usleep:
This C routine is considered obsolete (as opposed to the shell command by
the same name). The interaction of this function with SIGALRM and other
timer functions such as sleep(), alarm(), setitimer(), and nanosleep() is
unspecified (CWE-676). Use nanosleep(2) or setitimer(2) instead.
usleep(5 * 1000);
data/crystalhd-0.0~git20110715.fdd2f19/linux_lib/libcrystalhd/libcrystalhd_priv.cpp:2630:4: [1] (obsolete) usleep:
This C routine is considered obsolete (as opposed to the shell command by
the same name). The interaction of this function with SIGALRM and other
timer functions such as sleep(), alarm(), setitimer(), and nanosleep() is
unspecified (CWE-676). Use nanosleep(2) or setitimer(2) instead.
usleep(5 * 1000);
data/crystalhd-0.0~git20110715.fdd2f19/linux_lib/libcrystalhd/libcrystalhd_priv.h:54:24: [1] (obsolete) usleep:
This C routine is considered obsolete (as opposed to the shell command by
the same name). The interaction of this function with SIGALRM and other
timer functions such as sleep(), alarm(), setitimer(), and nanosleep() is
unspecified (CWE-676). Use nanosleep(2) or setitimer(2) instead.
#define bc_sleep_ms(x) usleep(1000*x)
ANALYSIS SUMMARY:
Hits = 130
Lines analyzed = 155169 in approximately 4.77 seconds (32497 lines/second)
Physical Source Lines of Code (SLOC) = 76670
Hits@level = [0] 98 [1] 45 [2] 78 [3] 0 [4] 1 [5] 6
Hits@level+ = [0+] 228 [1+] 130 [2+] 85 [3+] 7 [4+] 7 [5+] 6
Hits/KSLOC@level+ = [0+] 2.97378 [1+] 1.69558 [2+] 1.10865 [3+] 0.0913004 [4+] 0.0913004 [5+] 0.0782575
Dot directories skipped = 1 (--followdotdir overrides)
Minimum risk level = 1
Not every hit is necessarily a security vulnerability.
There may be other security vulnerabilities; review your code!
See 'Secure Programming HOWTO'
(https://dwheeler.com/secure-programs) for more information.