Flawfinder version 2.0.10, (C) 2001-2019 David A. Wheeler.
Number of rules (primarily dangerous function names) in C/C++ ruleset: 223
Examining data/handbrake-1.3.1+ds1/test/parsecsv.c
Examining data/handbrake-1.3.1+ds1/test/test.c
Examining data/handbrake-1.3.1+ds1/test/parsecsv.h
Examining data/handbrake-1.3.1+ds1/test/fakexcode.cpp
Examining data/handbrake-1.3.1+ds1/gtk/src/resources.h
Examining data/handbrake-1.3.1+ds1/gtk/src/appcast.h
Examining data/handbrake-1.3.1+ds1/gtk/src/queuehandler.h
Examining data/handbrake-1.3.1+ds1/gtk/src/main.c
Examining data/handbrake-1.3.1+ds1/gtk/src/jobdict.h
Examining data/handbrake-1.3.1+ds1/gtk/src/settings.h
Examining data/handbrake-1.3.1+ds1/gtk/src/settings.c
Examining data/handbrake-1.3.1+ds1/gtk/src/plist.h
Examining data/handbrake-1.3.1+ds1/gtk/src/plist.c
Examining data/handbrake-1.3.1+ds1/gtk/src/resources.c
Examining data/handbrake-1.3.1+ds1/gtk/src/hb-backend.c
Examining data/handbrake-1.3.1+ds1/gtk/src/hb-backend.h
Examining data/handbrake-1.3.1+ds1/gtk/src/ghbcompat.h
Examining data/handbrake-1.3.1+ds1/gtk/src/audiohandler.c
Examining data/handbrake-1.3.1+ds1/gtk/src/marshalers.c
Examining data/handbrake-1.3.1+ds1/gtk/src/queuehandler.c
Examining data/handbrake-1.3.1+ds1/gtk/src/values.h
Examining data/handbrake-1.3.1+ds1/gtk/src/marshalers.h
Examining data/handbrake-1.3.1+ds1/gtk/src/audiohandler.h
Examining data/handbrake-1.3.1+ds1/gtk/src/icons.h
Examining data/handbrake-1.3.1+ds1/gtk/src/ghb-dvd.c
Examining data/handbrake-1.3.1+ds1/gtk/src/subtitlehandler.h
Examining data/handbrake-1.3.1+ds1/gtk/src/preview.c
Examining data/handbrake-1.3.1+ds1/gtk/src/presets.c
Examining data/handbrake-1.3.1+ds1/gtk/src/preview.h
Examining data/handbrake-1.3.1+ds1/gtk/src/ghbcompat.c
Examining data/handbrake-1.3.1+ds1/gtk/src/renderer_button.h
Examining data/handbrake-1.3.1+ds1/gtk/src/ghb-dvd.h
Examining data/handbrake-1.3.1+ds1/gtk/src/presets.h
Examining data/handbrake-1.3.1+ds1/gtk/src/subtitlehandler.c
Examining data/handbrake-1.3.1+ds1/gtk/src/videohandler.c
Examining data/handbrake-1.3.1+ds1/gtk/src/callbacks.h
Examining data/handbrake-1.3.1+ds1/gtk/src/callbacks.c
Examining data/handbrake-1.3.1+ds1/gtk/src/values.c
Examining data/handbrake-1.3.1+ds1/gtk/src/jobdict.c
Examining data/handbrake-1.3.1+ds1/gtk/src/appcast.c
Examining data/handbrake-1.3.1+ds1/gtk/src/chapters.c
Examining data/handbrake-1.3.1+ds1/gtk/src/titledict.c
Examining data/handbrake-1.3.1+ds1/gtk/src/icons.c
Examining data/handbrake-1.3.1+ds1/gtk/src/renderer_button.c
Examining data/handbrake-1.3.1+ds1/gtk/src/chapters.h
Examining data/handbrake-1.3.1+ds1/gtk/src/videohandler.h
Examining data/handbrake-1.3.1+ds1/gtk/src/titledict.h
Examining data/handbrake-1.3.1+ds1/libhb/rendersub.c
Examining data/handbrake-1.3.1+ds1/libhb/nlmeans.c
Examining data/handbrake-1.3.1+ds1/libhb/dectx3gsub.c
Examining data/handbrake-1.3.1+ds1/libhb/demuxmpeg.c
Examining data/handbrake-1.3.1+ds1/libhb/taskset.c
Examining data/handbrake-1.3.1+ds1/libhb/colorspace.c
Examining data/handbrake-1.3.1+ds1/libhb/compat.c
Examining data/handbrake-1.3.1+ds1/libhb/vfr.c
Examining data/handbrake-1.3.1+ds1/libhb/encx264.c
Examining data/handbrake-1.3.1+ds1/libhb/plist.c
Examining data/handbrake-1.3.1+ds1/libhb/colormap.c
Examining data/handbrake-1.3.1+ds1/libhb/qsv_filter_pp.c
Examining data/handbrake-1.3.1+ds1/libhb/comb_detect.c
Examining data/handbrake-1.3.1+ds1/libhb/muxavformat.c
Examining data/handbrake-1.3.1+ds1/libhb/pad.c
Examining data/handbrake-1.3.1+ds1/libhb/decssasub.c
Examining data/handbrake-1.3.1+ds1/libhb/lapsharp.c
Examining data/handbrake-1.3.1+ds1/libhb/dvd.c
Examining data/handbrake-1.3.1+ds1/libhb/scan.c
Examining data/handbrake-1.3.1+ds1/libhb/enc_qsv.c
Examining data/handbrake-1.3.1+ds1/libhb/ports.c
Examining data/handbrake-1.3.1+ds1/libhb/muxcommon.c
Examining data/handbrake-1.3.1+ds1/libhb/decutf8sub.c
Examining data/handbrake-1.3.1+ds1/libhb/hbavfilter.c
Examining data/handbrake-1.3.1+ds1/libhb/encavcodec.c
Examining data/handbrake-1.3.1+ds1/libhb/work.c
Examining data/handbrake-1.3.1+ds1/libhb/deinterlace.c
Examining data/handbrake-1.3.1+ds1/libhb/eedi2.c
Examining data/handbrake-1.3.1+ds1/libhb/hbffmpeg.c
Examining data/handbrake-1.3.1+ds1/libhb/decavcodec.c
Examining data/handbrake-1.3.1+ds1/libhb/common.c
Examining data/handbrake-1.3.1+ds1/libhb/rotate.c
Examining data/handbrake-1.3.1+ds1/libhb/chroma_smooth.c
Examining data/handbrake-1.3.1+ds1/libhb/bd.c
Examining data/handbrake-1.3.1+ds1/libhb/qsv_common.c
Examining data/handbrake-1.3.1+ds1/libhb/handbrake/common.h
Examining data/handbrake-1.3.1+ds1/libhb/handbrake/audio_resample.h
Examining data/handbrake-1.3.1+ds1/libhb/handbrake/nvenc_common.h
Examining data/handbrake-1.3.1+ds1/libhb/handbrake/decssasub.h
Examining data/handbrake-1.3.1+ds1/libhb/handbrake/qsv_filter.h
Examining data/handbrake-1.3.1+ds1/libhb/handbrake/colormap.h
Examining data/handbrake-1.3.1+ds1/libhb/handbrake/hbavfilter.h
Examining data/handbrake-1.3.1+ds1/libhb/handbrake/plist.h
Examining data/handbrake-1.3.1+ds1/libhb/handbrake/lang.h
Examining data/handbrake-1.3.1+ds1/libhb/handbrake/internal.h
Examining data/handbrake-1.3.1+ds1/libhb/handbrake/compat.h
Examining data/handbrake-1.3.1+ds1/libhb/handbrake/encx264.h
Examining data/handbrake-1.3.1+ds1/libhb/handbrake/decsrtsub.h
Examining data/handbrake-1.3.1+ds1/libhb/handbrake/deccc608sub.h
Examining data/handbrake-1.3.1+ds1/libhb/handbrake/hbffmpeg.h
Examining data/handbrake-1.3.1+ds1/libhb/handbrake/ssautil.h
Examining data/handbrake-1.3.1+ds1/libhb/handbrake/ports.h
Examining data/handbrake-1.3.1+ds1/libhb/handbrake/preset_builtin.h
Examining data/handbrake-1.3.1+ds1/libhb/handbrake/hbtypes.h
Examining data/handbrake-1.3.1+ds1/libhb/handbrake/handbrake.h
Examining data/handbrake-1.3.1+ds1/libhb/handbrake/taskset.h
Examining data/handbrake-1.3.1+ds1/libhb/handbrake/vce_common.h
Examining data/handbrake-1.3.1+ds1/libhb/handbrake/eedi2.h
Examining data/handbrake-1.3.1+ds1/libhb/handbrake/param.h
Examining data/handbrake-1.3.1+ds1/libhb/handbrake/dvd.h
Examining data/handbrake-1.3.1+ds1/libhb/handbrake/preset.h
Examining data/handbrake-1.3.1+ds1/libhb/handbrake/qsv_libav.h
Examining data/handbrake-1.3.1+ds1/libhb/handbrake/avfilter_priv.h
Examining data/handbrake-1.3.1+ds1/libhb/handbrake/nlmeans.h
Examining data/handbrake-1.3.1+ds1/libhb/handbrake/hb_dict.h
Examining data/handbrake-1.3.1+ds1/libhb/handbrake/nal_units.h
Examining data/handbrake-1.3.1+ds1/libhb/handbrake/h265_common.h
Examining data/handbrake-1.3.1+ds1/libhb/handbrake/qsv_memory.h
Examining data/handbrake-1.3.1+ds1/libhb/handbrake/hb_json.h
Examining data/handbrake-1.3.1+ds1/libhb/handbrake/qsv_common.h
Examining data/handbrake-1.3.1+ds1/libhb/handbrake/h264_common.h
Examining data/handbrake-1.3.1+ds1/libhb/handbrake/decomb.h
Examining data/handbrake-1.3.1+ds1/libhb/handbrake/qsv_filter_pp.h
Examining data/handbrake-1.3.1+ds1/libhb/handbrake/audio_remap.h
Examining data/handbrake-1.3.1+ds1/libhb/handbrake/bits.h
Examining data/handbrake-1.3.1+ds1/libhb/stream.c
Examining data/handbrake-1.3.1+ds1/libhb/fifo.c
Examining data/handbrake-1.3.1+ds1/libhb/nal_units.c
Examining data/handbrake-1.3.1+ds1/libhb/param.c
Examining data/handbrake-1.3.1+ds1/libhb/denoise.c
Examining data/handbrake-1.3.1+ds1/libhb/hb.c
Examining data/handbrake-1.3.1+ds1/libhb/enctheora.c
Examining data/handbrake-1.3.1+ds1/libhb/qsv_memory.c
Examining data/handbrake-1.3.1+ds1/libhb/nlmeans_x86.c
Examining data/handbrake-1.3.1+ds1/libhb/audio_resample.c
Examining data/handbrake-1.3.1+ds1/libhb/reader.c
Examining data/handbrake-1.3.1+ds1/libhb/grayscale.c
Examining data/handbrake-1.3.1+ds1/libhb/nvenc_common.c
Examining data/handbrake-1.3.1+ds1/libhb/hb_dict.c
Examining data/handbrake-1.3.1+ds1/libhb/mt_frame_filter.c
Examining data/handbrake-1.3.1+ds1/libhb/detelecine.c
Examining data/handbrake-1.3.1+ds1/libhb/decomb.c
Examining data/handbrake-1.3.1+ds1/libhb/vce_common.c
Examining data/handbrake-1.3.1+ds1/libhb/qsv_filter.c
Examining data/handbrake-1.3.1+ds1/libhb/qsv_libav.c
Examining data/handbrake-1.3.1+ds1/libhb/preset.c
Examining data/handbrake-1.3.1+ds1/libhb/avfilter.c
Examining data/handbrake-1.3.1+ds1/libhb/cropscale.c
Examining data/handbrake-1.3.1+ds1/libhb/encavcodecaudio.c
Examining data/handbrake-1.3.1+ds1/libhb/deblock.c
Examining data/handbrake-1.3.1+ds1/libhb/platform/macosx/encca_aac.c
Examining data/handbrake-1.3.1+ds1/libhb/platform/macosx/vt_common.h
Examining data/handbrake-1.3.1+ds1/libhb/platform/macosx/vt_common.c
Examining data/handbrake-1.3.1+ds1/libhb/decsrtsub.c
Examining data/handbrake-1.3.1+ds1/libhb/declpcm.c
Examining data/handbrake-1.3.1+ds1/libhb/encx265.c
Examining data/handbrake-1.3.1+ds1/libhb/audio_remap.c
Examining data/handbrake-1.3.1+ds1/libhb/batch.c
Examining data/handbrake-1.3.1+ds1/libhb/decpgssub.c
Examining data/handbrake-1.3.1+ds1/libhb/sync.c
Examining data/handbrake-1.3.1+ds1/libhb/hb_json.c
Examining data/handbrake-1.3.1+ds1/libhb/decvobsub.c
Examining data/handbrake-1.3.1+ds1/libhb/encvorbis.c
Examining data/handbrake-1.3.1+ds1/libhb/encvobsub.c
Examining data/handbrake-1.3.1+ds1/libhb/unsharp.c
Examining data/handbrake-1.3.1+ds1/libhb/deccc608sub.c
Examining data/handbrake-1.3.1+ds1/libhb/dvdnav.c
Examining data/handbrake-1.3.1+ds1/libhb/lang.c
Examining data/handbrake-1.3.1+ds1/libhb/ssautil.c
FINAL RESULTS:
data/handbrake-1.3.1+ds1/gtk/src/callbacks.c:1170:21: [4] (race) access:
This usually indicates a security flaw. If an attacker can change anything
along the path between the call to access() and the file's actual use
(e.g., by moving files), the attacker can exploit the race condition
(CWE-362/CWE-367!). Set up the correct permissions (e.g., using setuid())
and try to open the file directly.
access(dirname, W_OK) == 0)
data/handbrake-1.3.1+ds1/gtk/src/callbacks.c:4480:5: [4] (format) vfprintf:
If format strings can be influenced by an attacker, they can be exploited
(CWE-134). Use a constant for the format specification.
vfprintf(stderr, fmt, args);
data/handbrake-1.3.1+ds1/gtk/src/callbacks.c:4488:5: [4] (shell) ShellExecute:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
ShellExecute(NULL, "open", uri, NULL, NULL, SW_SHOWNORMAL);
data/handbrake-1.3.1+ds1/gtk/src/callbacks.c:4901:5: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(drive, "A:" G_DIR_SEPARATOR_S);
data/handbrake-1.3.1+ds1/gtk/src/plist.c:433:5: [4] (format) vfprintf:
If format strings can be influenced by an attacker, they can be exploited
(CWE-134). Use a constant for the format specification.
vfprintf(file, fmt, ap);
data/handbrake-1.3.1+ds1/gtk/src/presets.c:1016:5: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(drive, "A:" G_DIR_SEPARATOR_S);
data/handbrake-1.3.1+ds1/libhb/common.c:3568:5: [4] (format) vsnprintf:
If format strings can be influenced by an attacker, they can be exploited,
and note that sprintf variations do not always \0-terminate (CWE-134). Use
a constant for the format specification.
vsnprintf( string, 180, log, args );
data/handbrake-1.3.1+ds1/libhb/common.c:3634:5: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy( last_string, string );
data/handbrake-1.3.1+ds1/libhb/common.c:4972:5: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(subtitle->iso639_2, lang->iso639_2);
data/handbrake-1.3.1+ds1/libhb/common.c:5345:15: [4] (format) vsnprintf:
If format strings can be influenced by an attacker, they can be exploited,
and note that sprintf variations do not always \0-terminate (CWE-134). Use
a constant for the format specification.
len = vsnprintf( str, size, fmt, copy );
data/handbrake-1.3.1+ds1/libhb/common.c:5401:9: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy( str, s1 );
data/handbrake-1.3.1+ds1/libhb/compat.c:70:9: [4] (format) snprintf:
If format strings can be influenced by an attacker, they can be exploited,
and note that sprintf variations do not always \0-terminate (CWE-134). Use
a constant for the format specification.
if (snprintf(strerrbuf, buflen, errstr) < 0)
data/handbrake-1.3.1+ds1/libhb/decsrtsub.c:171:13: [4] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf.
sprintf(ssa + pos, "%s", ssa_markup);
data/handbrake-1.3.1+ds1/libhb/decssasub.c:307:5: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat( mkvSSA, stripLayerField );
data/handbrake-1.3.1+ds1/libhb/decssasub.c:309:5: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat( mkvSSA, (char *)styleToTextFields );
data/handbrake-1.3.1+ds1/libhb/dvd.c:295:5: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(subtitle->lang, hb_subsource_name(subtitle->source));
data/handbrake-1.3.1+ds1/libhb/dvdnav.c:441:5: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(subtitle->lang, hb_subsource_name(subtitle->source));
data/handbrake-1.3.1+ds1/libhb/handbrake/common.h:39:50: [4] (format) printf:
If format strings can be influenced by an attacker, they can be exploited
(CWE-134). Use a constant for the format specification.
# define HB_WPRINTF(s,v) __attribute__((format(printf,s,v)))
data/handbrake-1.3.1+ds1/libhb/muxavformat.c:833:23: [4] (format) snprintf:
If format strings can be influenced by an attacker, they can be exploited,
and note that sprintf variations do not always \0-terminate (CWE-134). Use
a constant for the format specification.
len = snprintf(subidx, 2048, subidx_fmt,
data/handbrake-1.3.1+ds1/libhb/plist.c:570:5: [4] (format) vfprintf:
If format strings can be influenced by an attacker, they can be exploited
(CWE-134). Use a constant for the format specification.
vfprintf(file, fmt, ap);
data/handbrake-1.3.1+ds1/libhb/ports.c:601:5: [4] (format) vsnprintf:
If format strings can be influenced by an attacker, they can be exploited,
and note that sprintf variations do not always \0-terminate (CWE-134). Use
a constant for the format specification.
vsnprintf( &name[strlen(name)], 1024 - strlen(name), fmt, args );
data/handbrake-1.3.1+ds1/libhb/ssautil.c:881:9: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy((char*)output.buf + out_pos, text);
data/handbrake-1.3.1+ds1/libhb/stream.c:304:9: [4] (format) vsnprintf:
If format strings can be influenced by an attacker, they can be exploited,
and note that sprintf variations do not always \0-terminate (CWE-134). Use
a constant for the format specification.
vsnprintf( msg, sizeof(msg), log, args );
data/handbrake-1.3.1+ds1/libhb/sync.c:2674:15: [4] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf.
len = sprintf((char*)buf->data, "%s\\N{\\r}%s", a->data, text);
data/handbrake-1.3.1+ds1/test/test.c:2450:25: [4] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf.
sprintf( input, "/dev/%s", devName );
data/handbrake-1.3.1+ds1/test/test.c:3014:21: [4] (buffer) sscanf:
The scanf() family's %s operation, without a limit specification, permits
buffer overflows (CWE-120, CWE-20). Specify a limit to %s, or use a
different input function. If the scanf format is influenceable by an
attacker, it's exploitable.
sscanf( start_at_token, "%"SCNd64, &start_at_pts );
data/handbrake-1.3.1+ds1/test/test.c:3041:21: [4] (buffer) sscanf:
The scanf() family's %s operation, without a limit specification, permits
buffer overflows (CWE-120, CWE-20). Specify a limit to %s, or use a
different input function. If the scanf format is influenceable by an
attacker, it's exploitable.
sscanf( stop_at_token, "%"SCNd64, &stop_at_pts );
data/handbrake-1.3.1+ds1/gtk/src/presets.c:662:15: [3] (buffer) g_get_home_dir:
This function is synonymous with 'getenv("HOME")';it returns untrustable
input if the environment can beset by an attacker. It can have any content
and length, and the same variable can be set more than once (CWE-807,
CWE-20). Check environment variables carefully before using them.
dir = g_get_home_dir();
data/handbrake-1.3.1+ds1/libhb/ports.c:560:14: [3] (buffer) getenv:
Environment variables are untrustable input if they can be set by an
attacker. They can have any content and length, and the same variable can
be set more than once (CWE-807, CWE-20). Check environment variables
carefully before using them.
if ((p = getenv("XDG_CONFIG_HOME")) != NULL)
data/handbrake-1.3.1+ds1/libhb/ports.c:566:19: [3] (buffer) getenv:
Environment variables are untrustable input if they can be set by an
attacker. They can have any content and length, and the same variable can
be set more than once (CWE-807, CWE-20). Check environment variables
carefully before using them.
else if ((p = getenv("HOME")) != NULL)
data/handbrake-1.3.1+ds1/libhb/ports.c:626:14: [3] (buffer) getenv:
Environment variables are untrustable input if they can be set by an
attacker. They can have any content and length, and the same variable can
be set more than once (CWE-807, CWE-20). Check environment variables
carefully before using them.
if( (p = getenv( "TMPDIR" ) ) != NULL ||
data/handbrake-1.3.1+ds1/libhb/ports.c:627:14: [3] (buffer) getenv:
Environment variables are untrustable input if they can be set by an
attacker. They can have any content and length, and the same variable can
be set more than once (CWE-807, CWE-20). Check environment variables
carefully before using them.
(p = getenv( "TEMP" ) ) != NULL )
data/handbrake-1.3.1+ds1/libhb/ports.c:1622:16: [3] (buffer) getenv:
Environment variables are untrustable input if they can be set by an
attacker. They can have any content and length, and the same variable can
be set more than once (CWE-807, CWE-20). Check environment variables
carefully before using them.
if ((env = getenv("LIBVA_DRIVER_NAME")) != NULL)
data/handbrake-1.3.1+ds1/test/test.c:2347:13: [3] (buffer) getopt_long:
Some older implementations do not protect against internal buffer overflows
(CWE-120, CWE-20). Check implementation on installation, or limit the size
of all string inputs.
c = getopt_long( argc, argv,
data/handbrake-1.3.1+ds1/gtk/src/callbacks.c:1085:5: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char date[11] = "";
data/handbrake-1.3.1+ds1/gtk/src/callbacks.c:1217:17: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char st[6];
data/handbrake-1.3.1+ds1/gtk/src/callbacks.c:1228:17: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char dt[11];
data/handbrake-1.3.1+ds1/gtk/src/callbacks.c:5323:9: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(&(ud->appcast[ud->appcast_len]), buf, len);
data/handbrake-1.3.1+ds1/gtk/src/callbacks.c:5359:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy( &sock.sin_addr, host->h_addr, host->h_length );
data/handbrake-1.3.1+ds1/gtk/src/ghb-dvd.c:170:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(str, buf, count);
data/handbrake-1.3.1+ds1/gtk/src/ghb-dvd.c:293:13: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
id.fd = open(device, O_RDONLY);
data/handbrake-1.3.1+ds1/gtk/src/hb-backend.c:2588:9: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char idx[4];
data/handbrake-1.3.1+ds1/gtk/src/hb-backend.c:2628:9: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char idx[4];
data/handbrake-1.3.1+ds1/gtk/src/hb-backend.c:3454:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(status, &hb_status, sizeof(ghb_status_t));
data/handbrake-1.3.1+ds1/gtk/src/hb-backend.c:4115:5: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char tooltip[1024];
data/handbrake-1.3.1+ds1/gtk/src/main.c:425:26: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
fd = open(path, O_RDWR);
data/handbrake-1.3.1+ds1/gtk/src/main.c:477:26: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
fd = open(path, O_RDWR);
data/handbrake-1.3.1+ds1/gtk/src/presets.c:818:10: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
fd = open(path, O_RDWR|O_CREAT, S_IRUSR|S_IWUSR);
data/handbrake-1.3.1+ds1/gtk/src/presets.c:852:10: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
fd = open(path, O_RDWR|O_CREAT, S_IRUSR|S_IWUSR);
data/handbrake-1.3.1+ds1/gtk/src/presets.c:889:22: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
fd = open(path, O_RDWR);
data/handbrake-1.3.1+ds1/gtk/src/queuehandler.c:675:5: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char date[40] = "";
data/handbrake-1.3.1+ds1/gtk/src/queuehandler.c:1086:5: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char date[40] = "";
data/handbrake-1.3.1+ds1/libhb/audio_remap.c:89:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(tmp_buf, samples, nchannels * sizeof(uint8_t*));
data/handbrake-1.3.1+ds1/libhb/audio_remap.c:104:9: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(tmp_buf, samples_u8, nchannels * sizeof(uint8_t));
data/handbrake-1.3.1+ds1/libhb/audio_remap.c:121:9: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(tmp_buf, samples_s16, nchannels * sizeof(int16_t));
data/handbrake-1.3.1+ds1/libhb/audio_remap.c:138:9: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(tmp_buf, samples_s32, nchannels * sizeof(int32_t));
data/handbrake-1.3.1+ds1/libhb/audio_remap.c:155:9: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(tmp_buf, samples_flt, nchannels * sizeof(float));
data/handbrake-1.3.1+ds1/libhb/audio_remap.c:172:9: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(tmp_buf, samples_dbl, nchannels * sizeof(double));
data/handbrake-1.3.1+ds1/libhb/audio_resample.c:223:13: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char err_desc[64];
data/handbrake-1.3.1+ds1/libhb/audio_resample.c:305:9: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(out->data, samples[0], out_size);
data/handbrake-1.3.1+ds1/libhb/audio_resample.c:321:13: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(audio_samples + (ii * sample_size),
data/handbrake-1.3.1+ds1/libhb/bd.c:648:9: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char chapter_title[80];
data/handbrake-1.3.1+ds1/libhb/bd.c:662:9: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf( chapter_title, "Chapter %d", chapter->index );
data/handbrake-1.3.1+ds1/libhb/bd.c:1019:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(buf, pkt, 192);
data/handbrake-1.3.1+ds1/libhb/bd.c:1046:13: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(buf, buf + sizeof(buf) - off, off);
data/handbrake-1.3.1+ds1/libhb/chroma_smooth.c:101:13: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(dst, src, stride*height);
data/handbrake-1.3.1+ds1/libhb/comb_detect.c:196:17: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(dstp, mskp, m->plane[pp].width);
data/handbrake-1.3.1+ds1/libhb/common.c:875:9: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
i = atoi(name);
data/handbrake-1.3.1+ds1/libhb/common.c:3353:9: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy( &dst[copied], &buf->data[buf->offset], copying );
data/handbrake-1.3.1+ds1/libhb/common.c:3386:9: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy( &dst[copied], &buf->data[buf->offset], copying );
data/handbrake-1.3.1+ds1/libhb/common.c:3459:5: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char preamble[362];
data/handbrake-1.3.1+ds1/libhb/common.c:3497:10: [2] (buffer) MultiByteToWideChar:
Requires maximum length in CHARACTERS, not bytes (CWE-120).
if (!MultiByteToWideChar(CP_UTF8, 0, string, -1, wstring, len))
data/handbrake-1.3.1+ds1/libhb/common.c:3557:5: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char string[181]; /* 180 chars + \0 */
data/handbrake-1.3.1+ds1/libhb/common.c:3558:5: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char rep_string[181];
data/handbrake-1.3.1+ds1/libhb/common.c:3559:12: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
static char last_string[181];
data/handbrake-1.3.1+ds1/libhb/common.c:3764:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy( job->crop, title->crop, 4 * sizeof( int ) );
data/handbrake-1.3.1+ds1/libhb/common.c:3773:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(uiGeo.crop, title->crop, 4 * sizeof( int ));
data/handbrake-1.3.1+ds1/libhb/common.c:4041:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy( filter_copy, filter, sizeof( hb_filter_object_t ) );
data/handbrake-1.3.1+ds1/libhb/common.c:4282:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(dst + dst_len, src, src_len);
data/handbrake-1.3.1+ds1/libhb/common.c:4558:9: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy( chap, src, sizeof(*chap) );
data/handbrake-1.3.1+ds1/libhb/common.c:4645:9: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(audio, src, sizeof(*audio));
data/handbrake-1.3.1+ds1/libhb/common.c:4809:9: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(subtitle, src, sizeof(*subtitle));
data/handbrake-1.3.1+ds1/libhb/common.c:4813:13: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy( subtitle->extradata, src->extradata, src->extradata_size );
data/handbrake-1.3.1+ds1/libhb/common.c:5305:9: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy( art->data, data, size );
data/handbrake-1.3.1+ds1/libhb/common.c:5425:9: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(attachment, src, sizeof(*attachment));
data/handbrake-1.3.1+ds1/libhb/common.c:5433:13: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy( attachment->data, src->data, src->size );
data/handbrake-1.3.1+ds1/libhb/common.c:5576:5: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char line[80], ascii[19], *p;
data/handbrake-1.3.1+ds1/libhb/common.c:5591:18: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
p += sprintf( p, "%02x", data[ii] );
data/handbrake-1.3.1+ds1/libhb/common.c:5598:18: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
p += sprintf( p, "%02x ", data[ii] );
data/handbrake-1.3.1+ds1/libhb/common.c:5602:18: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
p += sprintf( p, "%02x ", data[ii] );
data/handbrake-1.3.1+ds1/libhb/compat.c:56:5: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char errstr[ERRSTR_LEN];
data/handbrake-1.3.1+ds1/libhb/decavcodec.c:309:9: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char drc_scale[5]; // "?.??\n"
data/handbrake-1.3.1+ds1/libhb/decavcodec.c:626:13: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(audio->priv.config.extradata.bytes, extradata, len);
data/handbrake-1.3.1+ds1/libhb/decavcodec.c:655:12: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
static char codec_name[64];
data/handbrake-1.3.1+ds1/libhb/decavcodec.c:1346:9: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(palette, pv->palette->data, size);
data/handbrake-1.3.1+ds1/libhb/decavcodec.c:1578:17: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(context->extradata, pv->packet_info.data, size);
data/handbrake-1.3.1+ds1/libhb/decavcodec.c:2244:13: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(out->data, avp.data, avp.size);
data/handbrake-1.3.1+ds1/libhb/deccc608sub.c:810:9: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char timeline[128];
data/handbrake-1.3.1+ds1/libhb/deccc608sub.c:812:9: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf (timeline,"%u\r\n",wb->data608->ssa_counter);
data/handbrake-1.3.1+ds1/libhb/deccc608sub.c:951:9: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf((char*)buffer->data, "%d,,Default,,0,0,0,,", ++wb->line);
data/handbrake-1.3.1+ds1/libhb/deccc608sub.c:953:9: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(buffer->data + len, wb->enc_buffer, wb->enc_buffer_used);
data/handbrake-1.3.1+ds1/libhb/deccc608sub.c:1024:13: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(use_buffer->characters[dst], use_buffer->characters[src], CC608_SCREEN_WIDTH+1);
data/handbrake-1.3.1+ds1/libhb/deccc608sub.c:1025:13: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(use_buffer->colors[dst], use_buffer->colors[src], CC608_SCREEN_WIDTH+1);
data/handbrake-1.3.1+ds1/libhb/deccc608sub.c:1026:13: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(use_buffer->fonts[dst], use_buffer->fonts[src], CC608_SCREEN_WIDTH+1);
data/handbrake-1.3.1+ds1/libhb/deccc608sub.c:1045:13: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(use_buffer->characters[dst], use_buffer->characters[src], CC608_SCREEN_WIDTH+1);
data/handbrake-1.3.1+ds1/libhb/deccc608sub.c:1046:13: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(use_buffer->colors[dst], use_buffer->colors[src], CC608_SCREEN_WIDTH+1);
data/handbrake-1.3.1+ds1/libhb/deccc608sub.c:1047:13: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(use_buffer->fonts[dst], use_buffer->fonts[src], CC608_SCREEN_WIDTH+1);
data/handbrake-1.3.1+ds1/libhb/deccc608sub.c:1109:13: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(use_buffer->characters[j], use_buffer->characters[j+1], CC608_SCREEN_WIDTH+1);
data/handbrake-1.3.1+ds1/libhb/deccc608sub.c:1110:13: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(use_buffer->colors[j], use_buffer->colors[j+1], CC608_SCREEN_WIDTH+1);
data/handbrake-1.3.1+ds1/libhb/deccc608sub.c:1111:13: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(use_buffer->fonts[j], use_buffer->fonts[j+1], CC608_SCREEN_WIDTH+1);
data/handbrake-1.3.1+ds1/libhb/deccc608sub.c:1782:13: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(pv->cc608->crop, job->crop, sizeof(int[4]));
data/handbrake-1.3.1+ds1/libhb/declpcm.c:215:9: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(pv->frame + pv->pos, in->data + 6, pv->size - pv->pos);
data/handbrake-1.3.1+ds1/libhb/declpcm.c:225:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy( pv->frame, in->data + off, amt );
data/handbrake-1.3.1+ds1/libhb/decomb.c:793:25: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(dst2, &pv->ref[1]->plane[pp].data[yp], width);
data/handbrake-1.3.1+ds1/libhb/decomb.c:806:21: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(dst2, cur, width);
data/handbrake-1.3.1+ds1/libhb/decomb.c:820:17: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(dst2, cur, width);
data/handbrake-1.3.1+ds1/libhb/decomb.c:897:21: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(dest, ref, width);
data/handbrake-1.3.1+ds1/libhb/decomb.c:1206:13: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(dst, src, buf->plane[pp].stride);
data/handbrake-1.3.1+ds1/libhb/decomb.c:1353:13: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(pdst, psrc, width);
data/handbrake-1.3.1+ds1/libhb/decpgssub.c:360:25: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(data, b->data, b->size);
data/handbrake-1.3.1+ds1/libhb/decsrtsub.c:34:5: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char text[1024];
data/handbrake-1.3.1+ds1/libhb/decsrtsub.c:45:5: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char buf[1024];
data/handbrake-1.3.1+ds1/libhb/decsrtsub.c:48:5: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char utf8_buf[2048];
data/handbrake-1.3.1+ds1/libhb/decsrtsub.c:68:5: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char color[40];
data/handbrake-1.3.1+ds1/libhb/decsrtsub.c:159:5: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf((char*)sub_in->data, "%d,,Default,,0,0,0,,", line);
data/handbrake-1.3.1+ds1/libhb/decsrtsub.c:363:5: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char line_buffer[1024];
data/handbrake-1.3.1+ds1/libhb/decsrtsub.c:443:13: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(q, line_buffer, size);
data/handbrake-1.3.1+ds1/libhb/decsrtsub.c:546:21: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy( buffer->data, pv->current_entry.text, length + 1 );
data/handbrake-1.3.1+ds1/libhb/decsrtsub.c:607:13: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy( buffer->data, pv->current_entry.text, length + 1 );
data/handbrake-1.3.1+ds1/libhb/decssasub.c:305:5: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(mkvSSA, "%d", pv->readOrder++);
data/handbrake-1.3.1+ds1/libhb/dectx3gsub.c:67:9: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(dst, "{\\r}");
data/handbrake-1.3.1+ds1/libhb/dectx3gsub.c:70:5: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(dst, "{\\i%d\\b%d\\u%d\\1c&H%X&\\1a&H%02X&}",
data/handbrake-1.3.1+ds1/libhb/dectx3gsub.c:165:5: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf((char*)dst, "%d,,Default,,0,0,0,,", pv->line);
data/handbrake-1.3.1+ds1/libhb/decvobsub.c:126:13: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy( pv->buf->data, in->data, in->size );
data/handbrake-1.3.1+ds1/libhb/decvobsub.c:142:13: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy( pv->buf->data + pv->size_got, in->data, in->size );
data/handbrake-1.3.1+ds1/libhb/decvobsub.c:592:9: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy( dst, lum_in, realwidth );
data/handbrake-1.3.1+ds1/libhb/decvobsub.c:606:9: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy( dst, alpha_in, realwidth );
data/handbrake-1.3.1+ds1/libhb/demuxmpeg.c:234:13: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy( buf_es->data, d + pos, pes_packet_end - pos );
data/handbrake-1.3.1+ds1/libhb/detelecine.c:265:13: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy( d, s, c->stride[i] );
data/handbrake-1.3.1+ds1/libhb/detelecine.c:937:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy( buf->planes[0], in->plane[0].data, buf->size[0] );
data/handbrake-1.3.1+ds1/libhb/detelecine.c:938:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy( buf->planes[1], in->plane[1].data, buf->size[1] );
data/handbrake-1.3.1+ds1/libhb/detelecine.c:939:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy( buf->planes[2], in->plane[2].data, buf->size[2] );
data/handbrake-1.3.1+ds1/libhb/detelecine.c:1033:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy( out->plane[0].data, frame->buffer->planes[0], frame->buffer->size[0] );
data/handbrake-1.3.1+ds1/libhb/detelecine.c:1034:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy( out->plane[1].data, frame->buffer->planes[1], frame->buffer->size[1] );
data/handbrake-1.3.1+ds1/libhb/detelecine.c:1035:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy( out->plane[2].data, frame->buffer->planes[2], frame->buffer->size[2] );
data/handbrake-1.3.1+ds1/libhb/dvd.c:85:12: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
static char name[1024];
data/handbrake-1.3.1+ds1/libhb/dvd.c:86:14: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
unsigned char unused[1024];
data/handbrake-1.3.1+ds1/libhb/dvd.c:212:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(subtitle->palette, palette, 16 * sizeof(uint32_t));
data/handbrake-1.3.1+ds1/libhb/dvd.c:223:13: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(subtitle->lang, " Large Type");
data/handbrake-1.3.1+ds1/libhb/dvd.c:228:13: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(subtitle->lang, " Children");
data/handbrake-1.3.1+ds1/libhb/dvd.c:233:13: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(subtitle->lang, " Closed Caption");
data/handbrake-1.3.1+ds1/libhb/dvd.c:238:13: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(subtitle->lang, " Closed Caption, Large Type");
data/handbrake-1.3.1+ds1/libhb/dvd.c:244:13: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(subtitle->lang, " Closed Caption, Children");
data/handbrake-1.3.1+ds1/libhb/dvd.c:249:13: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(subtitle->lang, " Forced");
data/handbrake-1.3.1+ds1/libhb/dvd.c:253:13: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(subtitle->lang, " Director's Commentary");
data/handbrake-1.3.1+ds1/libhb/dvd.c:259:13: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(subtitle->lang, " Director's Commentary, Large Type");
data/handbrake-1.3.1+ds1/libhb/dvd.c:265:13: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(subtitle->lang, " Director's Commentary, Children");
data/handbrake-1.3.1+ds1/libhb/dvd.c:279:13: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(subtitle->lang, " (4:3)");
data/handbrake-1.3.1+ds1/libhb/dvd.c:283:13: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(subtitle->lang, " (Wide Screen)");
data/handbrake-1.3.1+ds1/libhb/dvd.c:287:13: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(subtitle->lang, " (Letterbox)");
data/handbrake-1.3.1+ds1/libhb/dvd.c:291:13: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(subtitle->lang, " (Pan & Scan)");
data/handbrake-1.3.1+ds1/libhb/dvd.c:294:5: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(subtitle->lang, " [");
data/handbrake-1.3.1+ds1/libhb/dvd.c:315:5: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char name[1024];
data/handbrake-1.3.1+ds1/libhb/dvd.c:316:14: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
unsigned char unused[1024];
data/handbrake-1.3.1+ds1/libhb/dvd.c:660:9: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char chapter_title[80];
data/handbrake-1.3.1+ds1/libhb/dvd.c:665:9: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf( chapter_title, "Chapter %d", chapter->index );
data/handbrake-1.3.1+ds1/libhb/dvdnav.c:76:12: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
static char name[1024];
data/handbrake-1.3.1+ds1/libhb/dvdnav.c:77:14: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
unsigned char unused[1024];
data/handbrake-1.3.1+ds1/libhb/dvdnav.c:358:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(subtitle->palette, palette, 16 * sizeof(uint32_t));
data/handbrake-1.3.1+ds1/libhb/dvdnav.c:369:13: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(subtitle->lang, " Large Type");
data/handbrake-1.3.1+ds1/libhb/dvdnav.c:374:13: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(subtitle->lang, " Children");
data/handbrake-1.3.1+ds1/libhb/dvdnav.c:379:13: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(subtitle->lang, " Closed Caption");
data/handbrake-1.3.1+ds1/libhb/dvdnav.c:384:13: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(subtitle->lang, " Closed Caption, Large Type");
data/handbrake-1.3.1+ds1/libhb/dvdnav.c:390:13: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(subtitle->lang, " Closed Caption, Children");
data/handbrake-1.3.1+ds1/libhb/dvdnav.c:395:13: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(subtitle->lang, " Forced");
data/handbrake-1.3.1+ds1/libhb/dvdnav.c:399:13: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(subtitle->lang, " Director's Commentary");
data/handbrake-1.3.1+ds1/libhb/dvdnav.c:405:13: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(subtitle->lang, " Director's Commentary, Large Type");
data/handbrake-1.3.1+ds1/libhb/dvdnav.c:411:13: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(subtitle->lang, " Director's Commentary, Children");
data/handbrake-1.3.1+ds1/libhb/dvdnav.c:425:13: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(subtitle->lang, " (4:3)");
data/handbrake-1.3.1+ds1/libhb/dvdnav.c:429:13: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(subtitle->lang, " (Wide Screen)");
data/handbrake-1.3.1+ds1/libhb/dvdnav.c:433:13: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(subtitle->lang, " (Letterbox)");
data/handbrake-1.3.1+ds1/libhb/dvdnav.c:437:13: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(subtitle->lang, " (Pan & Scan)");
data/handbrake-1.3.1+ds1/libhb/dvdnav.c:440:5: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(subtitle->lang, " [");
data/handbrake-1.3.1+ds1/libhb/dvdnav.c:464:5: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char name[1024];
data/handbrake-1.3.1+ds1/libhb/dvdnav.c:465:14: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
unsigned char unused[1024];
data/handbrake-1.3.1+ds1/libhb/dvdnav.c:798:9: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char chapter_title[80];
data/handbrake-1.3.1+ds1/libhb/dvdnav.c:805:9: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(chapter_title, "Chapter %d", chapter->index);
data/handbrake-1.3.1+ds1/libhb/eedi2.c:102:9: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy( dstp, srcp, row_size * height );
data/handbrake-1.3.1+ds1/libhb/eedi2.c:109:13: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy( dstp, srcp, row_size );
data/handbrake-1.3.1+ds1/libhb/eedi2.c:131:7: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy( dst, src, pitch );
data/handbrake-1.3.1+ds1/libhb/eedi2.c:149:7: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy( dstp, srcp, pitch );
data/handbrake-1.3.1+ds1/libhb/eedi2.c:151:7: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy( dstp, srcp, pitch );
data/handbrake-1.3.1+ds1/libhb/enc_qsv.c:1616:9: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char qpi[7], qpp[9], qpb[9];
data/handbrake-1.3.1+ds1/libhb/enc_qsv.c:1968:9: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(buf->data, bs->Data + bs->DataOffset, bs->DataLength);
data/handbrake-1.3.1+ds1/libhb/encavcodec.c:104:5: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char reason[80];
data/handbrake-1.3.1+ds1/libhb/encavcodec.c:336:13: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char quality[7];
data/handbrake-1.3.1+ds1/libhb/encavcodec.c:350:13: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char qualityI[7];
data/handbrake-1.3.1+ds1/libhb/encavcodec.c:351:13: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char quality[7];
data/handbrake-1.3.1+ds1/libhb/encavcodec.c:352:13: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char qualityB[7];
data/handbrake-1.3.1+ds1/libhb/encavcodec.c:381:13: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char quality[7];
data/handbrake-1.3.1+ds1/libhb/encavcodec.c:382:13: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char qualityB[7];
data/handbrake-1.3.1+ds1/libhb/encavcodec.c:585:21: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
strcpy(reason, "unknown -- strerror_r() failed");
data/handbrake-1.3.1+ds1/libhb/encavcodec.c:602:21: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
strcpy(reason, "unknown -- strerror_r() failed");
data/handbrake-1.3.1+ds1/libhb/encavcodec.c:620:25: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
strcpy(reason, "unknown -- strerror_r() failed");
data/handbrake-1.3.1+ds1/libhb/encavcodec.c:690:9: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(w->config->extradata.bytes, context->extradata,
data/handbrake-1.3.1+ds1/libhb/encavcodec.c:840:9: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(out->data, pkt.data, out->size);
data/handbrake-1.3.1+ds1/libhb/encavcodecaudio.c:189:13: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char vbr[8];
data/handbrake-1.3.1+ds1/libhb/encavcodecaudio.c:277:9: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(w->config->extradata.bytes, context->extradata,
data/handbrake-1.3.1+ds1/libhb/encavcodecaudio.c:299:9: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(w->config->extradata.bytes, pv->context->extradata,
data/handbrake-1.3.1+ds1/libhb/encavcodecaudio.c:371:9: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(out->data, pkt.data, out->size);
data/handbrake-1.3.1+ds1/libhb/enctheora.c:34:14: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
unsigned char stat_buf[80];
data/handbrake-1.3.1+ds1/libhb/enctheora.c:174:9: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(header, &op, sizeof(op));
data/handbrake-1.3.1+ds1/libhb/enctheora.c:176:9: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(header->packet, op.packet, op.bytes );
data/handbrake-1.3.1+ds1/libhb/enctheora.c:362:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(buf->data, op.packet, op.bytes);
data/handbrake-1.3.1+ds1/libhb/encvorbis.c:126:9: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(pheader, &header[i], sizeof(ogg_packet));
data/handbrake-1.3.1+ds1/libhb/encvorbis.c:128:9: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(pheader->packet, header[i].packet, header[i].bytes );
data/handbrake-1.3.1+ds1/libhb/encvorbis.c:191:13: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy( buf->data, op.packet, op.bytes );
data/handbrake-1.3.1+ds1/libhb/encx264.c:443:9: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char min[40], max[40];
data/handbrake-1.3.1+ds1/libhb/encx264.c:567:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(w->config->h264.sps, nal[0].p_payload + 4, nal[0].i_payload - 4);
data/handbrake-1.3.1+ds1/libhb/encx264.c:571:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(w->config->h264.pps, nal[1].p_payload + 4, nal[1].i_payload - 4);
data/handbrake-1.3.1+ds1/libhb/encx264.c:672:9: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(buf->data + buf->size, nal[i].p_payload, size);
data/handbrake-1.3.1+ds1/libhb/encx265.c:185:5: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char colorprim[11], transfer[11], colormatrix[11];
data/handbrake-1.3.1+ds1/libhb/encx265.c:237:5: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char sar[22];
data/handbrake-1.3.1+ds1/libhb/encx265.c:257:13: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char pass[2];
data/handbrake-1.3.1+ds1/libhb/encx265.c:269:17: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char slowfirstpass[2];
data/handbrake-1.3.1+ds1/libhb/encx265.c:337:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(w->config->h265.headers, nal->payload, ret);
data/handbrake-1.3.1+ds1/libhb/encx265.c:410:9: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(buf->data + buf->size, nal[i].payload, nal[i].sizeBytes);
data/handbrake-1.3.1+ds1/libhb/fifo.c:458:13: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(tmp, b->data, b->alloc);
data/handbrake-1.3.1+ds1/libhb/fifo.c:478:9: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy( b->data, tmp->data, size );
data/handbrake-1.3.1+ds1/libhb/fifo.c:495:9: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy( buf->data, src->data, src->size );
data/handbrake-1.3.1+ds1/libhb/fifo.c:503:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(&buf->qsv_details, &src->qsv_details, sizeof(src->qsv_details));
data/handbrake-1.3.1+ds1/libhb/fifo.c:517:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy( dst->data, src->data, src->size );
data/handbrake-1.3.1+ds1/libhb/fifo.c:656:17: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(data + pos + ii * stride,
data/handbrake-1.3.1+ds1/libhb/fifo.c:872:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(image->data, buf->data, buf->size);
data/handbrake-1.3.1+ds1/libhb/handbrake/common.h:308:5: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char src_codeset[40];
data/handbrake-1.3.1+ds1/libhb/handbrake/common.h:868:17: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
PRIVATE char description[1024];
data/handbrake-1.3.1+ds1/libhb/handbrake/common.h:869:17: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
PRIVATE char simple[1024];
data/handbrake-1.3.1+ds1/libhb/handbrake/common.h:870:17: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
PRIVATE char iso639_2[4];
data/handbrake-1.3.1+ds1/libhb/handbrake/common.h:973:5: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char lang[1024];
data/handbrake-1.3.1+ds1/libhb/handbrake/common.h:974:5: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char iso639_2[4];
data/handbrake-1.3.1+ds1/libhb/handbrake/deccc608sub.h:56:14: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
unsigned char characters[15][33];
data/handbrake-1.3.1+ds1/libhb/handbrake/deccc608sub.h:57:14: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
unsigned char colors[15][33];
data/handbrake-1.3.1+ds1/libhb/handbrake/deccc608sub.h:58:14: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
unsigned char fonts[15][33]; // Extra char at the end for a 0
data/handbrake-1.3.1+ds1/libhb/handbrake/ports.h:144:38: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
int macOS_get_user_config_directory( char path[512] );
data/handbrake-1.3.1+ds1/libhb/handbrake/ports.h:146:36: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
void hb_get_user_config_directory( char path[512] );
data/handbrake-1.3.1+ds1/libhb/handbrake/ports.h:147:35: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
void hb_get_user_config_filename( char name[1024], char *fmt, ... );
data/handbrake-1.3.1+ds1/libhb/hb.c:465:5: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char reason[80];
data/handbrake-1.3.1+ds1/libhb/hb.c:474:13: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
strcpy(reason, "unknown -- strerror_r() failed");
data/handbrake-1.3.1+ds1/libhb/hb.c:497:25: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
strcpy(reason, "unknown -- strerror_r() failed");
data/handbrake-1.3.1+ds1/libhb/hb.c:520:5: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char reason[80];
data/handbrake-1.3.1+ds1/libhb/hb.c:529:13: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
strcpy(reason, "unknown -- strerror_r() failed");
data/handbrake-1.3.1+ds1/libhb/hb.c:559:25: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
strcpy(reason, "unknown -- strerror_r() failed");
data/handbrake-1.3.1+ds1/libhb/hb.c:581:5: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char filename[1024];
data/handbrake-1.3.1+ds1/libhb/hb.c:1315:5: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char audio_lang[4];
data/handbrake-1.3.1+ds1/libhb/hb.c:1319:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(job_copy, job, sizeof(hb_job_t));
data/handbrake-1.3.1+ds1/libhb/hb.c:1434:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy( job_copy, job, sizeof( hb_job_t ) );
data/handbrake-1.3.1+ds1/libhb/hb.c:1615:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy( s, &h->state, sizeof( hb_state_t ) );
data/handbrake-1.3.1+ds1/libhb/hb.c:1626:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy( s, &h->state, sizeof( hb_state_t ) );
data/handbrake-1.3.1+ds1/libhb/hb.c:1890:5: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char line_buffer[500];
data/handbrake-1.3.1+ds1/libhb/hb.c:1925:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy( &h->state, s, sizeof( hb_state_t ) );
data/handbrake-1.3.1+ds1/libhb/hb_json.c:377:9: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char channel_layout_name[64];
data/handbrake-1.3.1+ds1/libhb/hbffmpeg.c:112:13: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(dst, src, size);
data/handbrake-1.3.1+ds1/libhb/lang.c:260:5: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char code_string[2];
data/handbrake-1.3.1+ds1/libhb/lang.c:286:5: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char code_string[4];
data/handbrake-1.3.1+ds1/libhb/lapsharp.c:167:5: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char *kernel_string[3];
data/handbrake-1.3.1+ds1/libhb/muxavformat.c:78:7: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
const char *metadata_keys[META_LAST][META_MUX_LAST] =
data/handbrake-1.3.1+ds1/libhb/muxavformat.c:254:13: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(priv_data+8, job->config.h264.sps,
data/handbrake-1.3.1+ds1/libhb/muxavformat.c:263:13: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(priv_data+11+job->config.h264.sps_length,
data/handbrake-1.3.1+ds1/libhb/muxavformat.c:288:17: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(priv_data,
data/handbrake-1.3.1+ds1/libhb/muxavformat.c:306:17: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(priv_data,
data/handbrake-1.3.1+ds1/libhb/muxavformat.c:324:17: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(priv_data,
data/handbrake-1.3.1+ds1/libhb/muxavformat.c:368:17: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(priv_data+size, ogg_headers[ii]->packet,
data/handbrake-1.3.1+ds1/libhb/muxavformat.c:399:17: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(priv_data, job->config.h265.headers, priv_size);
data/handbrake-1.3.1+ds1/libhb/muxavformat.c:424:17: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(priv_data,
data/handbrake-1.3.1+ds1/libhb/muxavformat.c:546:21: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(priv_data+size, ogg_headers[jj]->packet,
data/handbrake-1.3.1+ds1/libhb/muxavformat.c:563:21: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(priv_data,
data/handbrake-1.3.1+ds1/libhb/muxavformat.c:581:21: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(priv_data,
data/handbrake-1.3.1+ds1/libhb/muxavformat.c:607:17: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(priv_data,
data/handbrake-1.3.1+ds1/libhb/muxavformat.c:799:9: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char subidx[2048];
data/handbrake-1.3.1+ds1/libhb/muxavformat.c:848:17: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(priv_data, subidx, priv_size);
data/handbrake-1.3.1+ds1/libhb/muxavformat.c:884:25: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(priv_data, subtitle->extradata, priv_size);
data/handbrake-1.3.1+ds1/libhb/muxavformat.c:945:13: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(priv_data, properties, priv_size);
data/handbrake-1.3.1+ds1/libhb/muxavformat.c:1015:17: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(priv_data, attachment->data, priv_size);
data/handbrake-1.3.1+ds1/libhb/muxavformat.c:1097:5: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char tool_string[80];
data/handbrake-1.3.1+ds1/libhb/muxavformat.c:1103:5: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char now_8601[24];
data/handbrake-1.3.1+ds1/libhb/muxavformat.c:1328:25: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char title[1024];
data/handbrake-1.3.1+ds1/libhb/muxavformat.c:1366:25: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char errstr[64];
data/handbrake-1.3.1+ds1/libhb/muxavformat.c:1400:25: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(sub_out + 2, buffer, buffersize);
data/handbrake-1.3.1+ds1/libhb/muxavformat.c:1401:25: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(sub_out + 2 + buffersize, styleatom, stylesize);
data/handbrake-1.3.1+ds1/libhb/muxavformat.c:1460:9: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char errstr[64];
data/handbrake-1.3.1+ds1/libhb/muxavformat.c:1512:13: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char title[1024];
data/handbrake-1.3.1+ds1/libhb/muxavformat.c:1551:21: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(priv_data,
data/handbrake-1.3.1+ds1/libhb/muxcommon.c:187:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(bv1->vec, bv2->vec, words * sizeof(uint32_t));
data/handbrake-1.3.1+ds1/libhb/nal_units.c:24:9: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(buf, hb_annexb_startcode, sizeof(hb_annexb_startcode));
data/handbrake-1.3.1+ds1/libhb/nal_units.c:25:9: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(buf + sizeof(hb_annexb_startcode), nal_unit, nal_unit_size);
data/handbrake-1.3.1+ds1/libhb/nal_units.c:45:9: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(buf, &length[0], sizeof(length));
data/handbrake-1.3.1+ds1/libhb/nal_units.c:46:9: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(buf + sizeof(length), nal_unit, nal_unit_size);
data/handbrake-1.3.1+ds1/libhb/nlmeans.c:203:9: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(image - border - (y+1)*bw, image - border + y*bw, bw);
data/handbrake-1.3.1+ds1/libhb/nlmeans.c:204:9: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(image - border + (y+h)*bw, image - border + (h-y-1)*bw, bw);
data/handbrake-1.3.1+ds1/libhb/nlmeans.c:227:9: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(dst + y * s, image + y * bw, width);
data/handbrake-1.3.1+ds1/libhb/nlmeans.c:248:9: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(image + y * bw, src + y * src_s, src_w);
data/handbrake-1.3.1+ds1/libhb/nlmeans.c:621:13: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(mem_pre + y * bw, mem + y * bw, bw);
data/handbrake-1.3.1+ds1/libhb/nlmeans.c:874:9: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(dst + y*dst_s, src - (y+1)*bw, dst_w);
data/handbrake-1.3.1+ds1/libhb/nlmeans.c:875:9: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(dst + (dst_h-y-1)*dst_s, src + (y+dst_h)*bw, dst_w);
data/handbrake-1.3.1+ds1/libhb/pad.c:75:5: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char x_str[20];
data/handbrake-1.3.1+ds1/libhb/pad.c:76:5: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char y_str[20];
data/handbrake-1.3.1+ds1/libhb/param.c:841:15: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
const char *kernel_string[2];
data/handbrake-1.3.1+ds1/libhb/platform/macosx/encca_aac.c:115:17: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(*buffer, esds, len);
data/handbrake-1.3.1+ds1/libhb/plist.c:544:10: [2] (misc) fopen:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
fd = fopen(filename, "r");
data/handbrake-1.3.1+ds1/libhb/plist.c:671:12: [2] (misc) fopen:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
file = fopen(filename, "w");
data/handbrake-1.3.1+ds1/libhb/plist.c:686:12: [2] (misc) fopen:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
file = fopen(argv[1], "r");
data/handbrake-1.3.1+ds1/libhb/ports.c:127:21: [2] (buffer) MultiByteToWideChar:
Requires maximum length in CHARACTERS, not bytes (CWE-120).
int num_chars = MultiByteToWideChar(CP_UTF8, 0, src, -1, NULL, 0);
data/handbrake-1.3.1+ds1/libhb/ports.c:131:5: [2] (buffer) MultiByteToWideChar:
Requires maximum length in CHARACTERS, not bytes (CWE-120).
MultiByteToWideChar(CP_UTF8, 0, src, -1, tmp, num_chars);
data/handbrake-1.3.1+ds1/libhb/ports.c:153:10: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
fd = open( device, O_RDONLY );
data/handbrake-1.3.1+ds1/libhb/ports.c:239:9: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char buf[48];
data/handbrake-1.3.1+ds1/libhb/ports.c:522:36: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
void hb_get_user_config_directory( char path[512] )
data/handbrake-1.3.1+ds1/libhb/ports.c:589:35: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
void hb_get_user_config_filename( char name[1024], char *fmt, ... )
data/handbrake-1.3.1+ds1/libhb/ports.c:619:13: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
strcpy( base, "c:" ); /* Bad fallback but ... */
data/handbrake-1.3.1+ds1/libhb/ports.c:671:5: [2] (buffer) wchar_t:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
wchar_t path_utf16[MAX_PATH];
data/handbrake-1.3.1+ds1/libhb/ports.c:672:10: [2] (buffer) MultiByteToWideChar:
Requires maximum length in CHARACTERS, not bytes (CWE-120).
if (!MultiByteToWideChar(CP_UTF8, 0, path, -1, path_utf16, MAX_PATH))
data/handbrake-1.3.1+ds1/libhb/ports.c:690:5: [2] (buffer) wchar_t:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
wchar_t path_utf16[MAX_PATH];
data/handbrake-1.3.1+ds1/libhb/ports.c:691:5: [2] (buffer) wchar_t:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
wchar_t mode_utf16[16];
data/handbrake-1.3.1+ds1/libhb/ports.c:692:10: [2] (buffer) MultiByteToWideChar:
Requires maximum length in CHARACTERS, not bytes (CWE-120).
if (!MultiByteToWideChar(CP_UTF8, 0, path, -1, path_utf16, MAX_PATH))
data/handbrake-1.3.1+ds1/libhb/ports.c:694:10: [2] (buffer) MultiByteToWideChar:
Requires maximum length in CHARACTERS, not bytes (CWE-120).
if (!MultiByteToWideChar(CP_UTF8, 0, mode, -1, mode_utf16, 16))
data/handbrake-1.3.1+ds1/libhb/ports.c:701:12: [2] (misc) fopen:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
return fopen(path, mode);
data/handbrake-1.3.1+ds1/libhb/ports.c:709:5: [2] (buffer) wchar_t:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
wchar_t path_utf16[MAX_PATH];
data/handbrake-1.3.1+ds1/libhb/ports.c:711:10: [2] (buffer) MultiByteToWideChar:
Requires maximum length in CHARACTERS, not bytes (CWE-120).
if (!MultiByteToWideChar(CP_UTF8, 0, path, -1, path_utf16, MAX_PATH))
data/handbrake-1.3.1+ds1/libhb/ports.c:791:5: [2] (buffer) wchar_t:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
wchar_t path_utf16[MAX_PATH];
data/handbrake-1.3.1+ds1/libhb/ports.c:792:10: [2] (buffer) MultiByteToWideChar:
Requires maximum length in CHARACTERS, not bytes (CWE-120).
if (!MultiByteToWideChar(CP_UTF8, 0, path, -1, path_utf16, MAX_PATH))
data/handbrake-1.3.1+ds1/libhb/ports.c:1246:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy( &sock.sin_addr, host->h_addr, host->h_length );
data/handbrake-1.3.1+ds1/libhb/ports.c:1511:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(result, src, len);
data/handbrake-1.3.1+ds1/libhb/ports.c:1546:26: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
int fd = open(adapter, O_RDWR);
data/handbrake-1.3.1+ds1/libhb/preset.c:284:9: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(path->index, index, depth * sizeof(int));
data/handbrake-1.3.1+ds1/libhb/preset.c:389:5: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char key[8];
data/handbrake-1.3.1+ds1/libhb/preset.c:642:9: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char key[8];
data/handbrake-1.3.1+ds1/libhb/preset.c:3538:5: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char path[1024];
data/handbrake-1.3.1+ds1/libhb/qsv_common.c:761:5: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char buffer[128] = "";
data/handbrake-1.3.1+ds1/libhb/qsv_common.c:768:13: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(buffer, " breftype");
data/handbrake-1.3.1+ds1/libhb/qsv_common.c:772:13: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(buffer, " bpyramid");
data/handbrake-1.3.1+ds1/libhb/qsv_common.c:780:13: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(buffer, " icq+la");
data/handbrake-1.3.1+ds1/libhb/qsv_common.c:784:13: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(buffer, " la");
data/handbrake-1.3.1+ds1/libhb/qsv_common.c:788:13: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(buffer, "+i");
data/handbrake-1.3.1+ds1/libhb/qsv_common.c:792:13: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(buffer, "+downs");
data/handbrake-1.3.1+ds1/libhb/qsv_common.c:797:9: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(buffer, " icq");
data/handbrake-1.3.1+ds1/libhb/qsv_common.c:801:9: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(buffer, " vsinfo");
data/handbrake-1.3.1+ds1/libhb/qsv_common.c:805:9: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(buffer, " opt1");
data/handbrake-1.3.1+ds1/libhb/qsv_common.c:810:13: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(buffer, " opt2");
data/handbrake-1.3.1+ds1/libhb/qsv_common.c:814:13: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(buffer, "+mbbrc");
data/handbrake-1.3.1+ds1/libhb/qsv_common.c:818:13: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(buffer, "+extbrc");
data/handbrake-1.3.1+ds1/libhb/qsv_common.c:822:13: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(buffer, "+trellis");
data/handbrake-1.3.1+ds1/libhb/qsv_common.c:826:13: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(buffer, "+ib_adapt");
data/handbrake-1.3.1+ds1/libhb/qsv_common.c:830:13: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(buffer, "+nmpslice");
data/handbrake-1.3.1+ds1/libhb/qsv_filter.c:237:13: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(&(qsv_vpp->p_surfaces[i]->Info), &(qsv_vpp->m_mfxVideoParam.vpp.Out), sizeof(mfxFrameInfo));
data/handbrake-1.3.1+ds1/libhb/qsv_filter.c:356:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy( pv->crop, init->crop, sizeof( int[4] ) );
data/handbrake-1.3.1+ds1/libhb/qsv_filter.c:377:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy( init->crop, pv->crop, sizeof( int[4] ) );
data/handbrake-1.3.1+ds1/libhb/qsv_filter_pp.c:130:9: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy( &qsv_vpp->m_mfxVideoParam.vpp, &prev_vpp->m_mfxVideoParam.vpp, sizeof(prev_vpp->m_mfxVideoParam.vpp));
data/handbrake-1.3.1+ds1/libhb/qsv_filter_pp.c:183:9: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(&(qsv_vpp->p_surfaces[i]->Info), &(qsv_vpp->m_mfxVideoParam.vpp.Out), sizeof(mfxFrameInfo));
data/handbrake-1.3.1+ds1/libhb/qsv_libav.c:94:17: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(&(space->p_surfaces[i]->Info), info,
data/handbrake-1.3.1+ds1/libhb/reader.c:387:17: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(b->data + pos, buf->data, buf->size);
data/handbrake-1.3.1+ds1/libhb/reader.c:585:17: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(buf_copy->data, buf->data, buf->size);
data/handbrake-1.3.1+ds1/libhb/scan.c:51:12: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
static char arstr[32];
data/handbrake-1.3.1+ds1/libhb/scan.c:53:9: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(arstr, "%.2f:1", aspect);
data/handbrake-1.3.1+ds1/libhb/scan.c:55:9: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(arstr, "1:%.2f", 1. / aspect );
data/handbrake-1.3.1+ds1/libhb/scan.c:1351:9: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(desc, " (%d.%d ch)", channels - lfes, lfes);
data/handbrake-1.3.1+ds1/libhb/scan.c:1362:21: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(audio->config.lang.description, " (Dolby Surround)");
data/handbrake-1.3.1+ds1/libhb/scan.c:1365:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(audio->config.lang.description, " (Lt/Rt)");
data/handbrake-1.3.1+ds1/libhb/scan.c:1368:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(audio->config.lang.description, " (Dolby Pro Logic II)");
data/handbrake-1.3.1+ds1/libhb/scan.c:1371:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(audio->config.lang.description, " (Dolby Pro Logic IIx)");
data/handbrake-1.3.1+ds1/libhb/scan.c:1374:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(audio->config.lang.description, " (Dolby Pro Logic IIz)");
data/handbrake-1.3.1+ds1/libhb/scan.c:1377:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(audio->config.lang.description, " (Dolby Digital EX)");
data/handbrake-1.3.1+ds1/libhb/scan.c:1380:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(audio->config.lang.description, " (Dolby Headphone)");
data/handbrake-1.3.1+ds1/libhb/scan.c:1391:9: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char in_bitrate_str[19];
data/handbrake-1.3.1+ds1/libhb/ssautil.c:905:9: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(ctx->style_atoms.buf + 4, "styl", 4);
data/handbrake-1.3.1+ds1/libhb/stream.c:152:5: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char codec_name[80];
data/handbrake-1.3.1+ds1/libhb/stream.c:302:9: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char msg[256];
data/handbrake-1.3.1+ds1/libhb/stream.c:1890:12: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
static char codec_name_caps[80];
data/handbrake-1.3.1+ds1/libhb/stream.c:2585:17: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char code[3];
data/handbrake-1.3.1+ds1/libhb/stream.c:2770:13: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(stream->pmt_info.tablebuf + stream->pmt_info.tablepos, buf + 4 + adapt_len + pointer_len, amount_to_copy);
data/handbrake-1.3.1+ds1/libhb/stream.c:2800:14: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
unsigned char tablebuf[1024];
data/handbrake-1.3.1+ds1/libhb/stream.c:2836:13: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(tablebuf + tablepos, buf + 4 + adapt_len + pointer_len, 184 - adapt_len - pointer_len);
data/handbrake-1.3.1+ds1/libhb/stream.c:2842:13: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(tablebuf + tablepos, buf + 4 + adapt_len + 1, pointer_len - 1);
data/handbrake-1.3.1+ds1/libhb/stream.c:3566:17: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy( &stream->pes.list[jj], &stream->pes.list[ii],
data/handbrake-1.3.1+ds1/libhb/stream.c:3578:13: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy( &stream->pes.list[ii], &stream->pes.list[same_stream],
data/handbrake-1.3.1+ds1/libhb/stream.c:3650:13: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy( &stream->ts.list[jj], &stream->ts.list[ii],
data/handbrake-1.3.1+ds1/libhb/stream.c:4098:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy( pes->probe_buf->data + pes->probe_buf->size, buf->data, buf->size );
data/handbrake-1.3.1+ds1/libhb/stream.c:4681:9: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(buf->data, tdat, es_size);
data/handbrake-1.3.1+ds1/libhb/stream.c:4709:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(stream->ts.list[idx].buf->data + stream->ts.list[idx].buf->size,
data/handbrake-1.3.1+ds1/libhb/stream.c:4867:17: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(&summary[2], pkt+4+adapt_len+9, 6);
data/handbrake-1.3.1+ds1/libhb/stream.c:4906:13: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(&ts_stream->pkt_summary[2],
data/handbrake-1.3.1+ds1/libhb/stream.c:5254:13: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(audio->priv.config.extradata.bytes, codecpar->extradata, len);
data/handbrake-1.3.1+ds1/libhb/stream.c:5294:13: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(audio->priv.config.extradata.bytes, codecpar->extradata, len);
data/handbrake-1.3.1+ds1/libhb/stream.c:5340:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy( lines, codecpar->extradata, codecpar->extradata_size );
data/handbrake-1.3.1+ds1/libhb/stream.c:5529:9: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(subtitle->extradata,
data/handbrake-1.3.1+ds1/libhb/stream.c:5606:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy( attachment->data, codecpar->extradata, codecpar->extradata_size );
data/handbrake-1.3.1+ds1/libhb/stream.c:5835:21: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char chapter_title[80];
data/handbrake-1.3.1+ds1/libhb/stream.c:5836:21: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf( chapter_title, "Chapter %d", chapter->index );
data/handbrake-1.3.1+ds1/libhb/stream.c:5944:17: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char errstr[80];
data/handbrake-1.3.1+ds1/libhb/stream.c:5989:9: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy( buf->data, stream->ffmpeg_pkt.data, stream->ffmpeg_pkt.size );
data/handbrake-1.3.1+ds1/libhb/stream.c:5998:13: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy( buf->palette->data, palette, size );
data/handbrake-1.3.1+ds1/libhb/sync.c:2680:9: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(buf->data, a->data, a->size);
data/handbrake-1.3.1+ds1/libhb/unsharp.c:107:13: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(dst, src, stride*height);
data/handbrake-1.3.1+ds1/libhb/work.c:1556:9: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(init.crop, title->crop, sizeof(int[4]));
data/handbrake-1.3.1+ds1/libhb/work.c:1578:9: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(job->crop, init.crop, sizeof(int[4]));
data/handbrake-1.3.1+ds1/test/parsecsv.h:28:5: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char cell_text[1024];
data/handbrake-1.3.1+ds1/test/test.c:364:9: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char buf[257];
data/handbrake-1.3.1+ds1/test/test.c:2385:29: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
debug = atoi( optarg );
data/handbrake-1.3.1+ds1/test/test.c:2466:30: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
titleindex = atoi( optarg );
data/handbrake-1.3.1+ds1/test/test.c:2496:25: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
angle = atoi( optarg );
data/handbrake-1.3.1+ds1/test/test.c:2632:34: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
srtdefault = atoi( optarg );
data/handbrake-1.3.1+ds1/test/test.c:2642:31: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
srtburn = atoi( optarg );
data/handbrake-1.3.1+ds1/test/test.c:2661:34: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
ssadefault = atoi( optarg );
data/handbrake-1.3.1+ds1/test/test.c:2671:31: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
ssaburn = atoi( optarg );
data/handbrake-1.3.1+ds1/test/test.c:2828:43: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
keep_display_aspect = atoi(optarg);
data/handbrake-1.3.1+ds1/test/test.c:2838:37: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
display_width = atoi(optarg);
data/handbrake-1.3.1+ds1/test/test.c:2850:31: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
modulus = atoi(optarg);
data/handbrake-1.3.1+ds1/test/test.c:2865:25: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
width = atoi( optarg );
data/handbrake-1.3.1+ds1/test/test.c:2868:26: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
height = atoi( optarg );
data/handbrake-1.3.1+ds1/test/test.c:2888:34: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
loose_crop = atoi(optarg);
data/handbrake-1.3.1+ds1/test/test.c:2915:28: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
vbitrate = atoi( optarg );
data/handbrake-1.3.1+ds1/test/test.c:2976:29: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
maxHeight = atoi( optarg );
data/handbrake-1.3.1+ds1/test/test.c:2979:28: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
maxWidth = atoi (optarg );
data/handbrake-1.3.1+ds1/test/test.c:2997:36: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
start_at_preview = atoi( optarg );
data/handbrake-1.3.1+ds1/test/test.c:3009:38: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
start_at_frame = atoi(start_at_token);
data/handbrake-1.3.1+ds1/test/test.c:3036:37: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
stop_at_frame = atoi(stop_at_token);
data/handbrake-1.3.1+ds1/test/test.c:3082:35: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
qsv_async_depth = atoi(optarg);
data/handbrake-1.3.1+ds1/test/test.c:3802:34: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
hb_value_int(atoi(abitrates[ii])));
data/handbrake-1.3.1+ds1/test/test.c:3832:42: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
hb_value_int(atoi(abitrates[last_bitrate])));
data/handbrake-1.3.1+ds1/test/test.c:3910:35: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
hb_value_bool(atoi(normalize_mix_level[ii])));
data/handbrake-1.3.1+ds1/test/test.c:3923:29: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
atoi(normalize_mix_level[last])));
data/handbrake-1.3.1+ds1/test/test.c:4868:32: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
abitrate = atoi(abitrates[ii]);
data/handbrake-1.3.1+ds1/test/test.c:5035:24: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
norm = atoi(nmls[ii]);
data/handbrake-1.3.1+ds1/gtk/src/appcast.c:255:11: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
len = strlen(start);
data/handbrake-1.3.1+ds1/gtk/src/callbacks.c:1086:30: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if (metaValue != NULL && strlen(metaValue) > 1)
data/handbrake-1.3.1+ds1/gtk/src/callbacks.c:1158:47: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
(!strncasecmp(p, "{source-path}", strlen("{source-path}")) ||
data/handbrake-1.3.1+ds1/gtk/src/callbacks.c:1159:47: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
!strncasecmp(p, "{source_path}", strlen("{source_path}"))))
data/handbrake-1.3.1+ds1/gtk/src/callbacks.c:1176:18: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
p += strlen("{source-path}");
data/handbrake-1.3.1+ds1/gtk/src/callbacks.c:1180:45: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if (!strncasecmp(p, "{source}", strlen("{source}")))
data/handbrake-1.3.1+ds1/gtk/src/callbacks.c:1185:22: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
p += strlen("{source}");
data/handbrake-1.3.1+ds1/gtk/src/callbacks.c:1187:49: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
else if (!strncasecmp(p, "{title}", strlen("{title}")))
data/handbrake-1.3.1+ds1/gtk/src/callbacks.c:1192:22: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
p += strlen("{title}");
data/handbrake-1.3.1+ds1/gtk/src/callbacks.c:1194:50: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
else if (!strncasecmp(p, "{preset}", strlen("{preset}")))
data/handbrake-1.3.1+ds1/gtk/src/callbacks.c:1199:22: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
p += strlen("{preset}");
data/handbrake-1.3.1+ds1/gtk/src/callbacks.c:1201:52: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
else if (!strncasecmp(p, "{chapters}", strlen("{chapters}")))
data/handbrake-1.3.1+ds1/gtk/src/callbacks.c:1213:22: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
p += strlen("{chapters}");
data/handbrake-1.3.1+ds1/gtk/src/callbacks.c:1215:48: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
else if (!strncasecmp(p, "{time}", strlen("{time}")))
data/handbrake-1.3.1+ds1/gtk/src/callbacks.c:1224:22: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
p += strlen("{time}");
data/handbrake-1.3.1+ds1/gtk/src/callbacks.c:1226:48: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
else if (!strncasecmp(p, "{date}", strlen("{date}")))
data/handbrake-1.3.1+ds1/gtk/src/callbacks.c:1235:22: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
p += strlen("{date}");
data/handbrake-1.3.1+ds1/gtk/src/callbacks.c:1237:57: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
else if (!strncasecmp(p, "{creation-date}", strlen("{creation-date}")))
data/handbrake-1.3.1+ds1/gtk/src/callbacks.c:1243:22: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
p += strlen("{creation-date}");
data/handbrake-1.3.1+ds1/gtk/src/callbacks.c:1246:57: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
else if (!strncasecmp(p, "{creation-time}", strlen("{creation-time}")))
data/handbrake-1.3.1+ds1/gtk/src/callbacks.c:1252:22: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
p += strlen("{creation-time}");
data/handbrake-1.3.1+ds1/gtk/src/callbacks.c:1255:51: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
else if (!strncasecmp(p, "{quality}", strlen("{quality}")))
data/handbrake-1.3.1+ds1/gtk/src/callbacks.c:1267:22: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
p += strlen("{quality}");
data/handbrake-1.3.1+ds1/gtk/src/callbacks.c:1269:51: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
else if (!strncasecmp(p, "{bitrate}", strlen("{bitrate}")))
data/handbrake-1.3.1+ds1/gtk/src/callbacks.c:1277:22: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
p += strlen("{bitrate}");
data/handbrake-1.3.1+ds1/gtk/src/callbacks.c:1984:16: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
for (end = strlen(dest)-1; end > 0; end--)
data/handbrake-1.3.1+ds1/gtk/src/callbacks.c:5415:42: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
g_io_channel_write_chars(ioc, query, strlen(query), &len, &gerror);
data/handbrake-1.3.1+ds1/gtk/src/ghb-dvd.c:120:15: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
buf_len = read(fd, buffer, len);
data/handbrake-1.3.1+ds1/gtk/src/ghb-dvd.c:174:10: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
ii = strlen((gchar*)str);
data/handbrake-1.3.1+ds1/gtk/src/hb-backend.c:2158:21: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
end = &base[strlen(base) - 1];
data/handbrake-1.3.1+ds1/gtk/src/hb-backend.c:4128:19: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
int len = strlen(keys[ii]) + 3;
data/handbrake-1.3.1+ds1/libhb/bd.c:115:14: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
strlen(lang->native_name) ? lang->native_name : lang->eng_name,
data/handbrake-1.3.1+ds1/libhb/bd.c:202:15: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
strlen( lang->native_name ) ? lang->native_name : lang->eng_name );
data/handbrake-1.3.1+ds1/libhb/bd.c:219:17: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
int ii, jj, equal;
data/handbrake-1.3.1+ds1/libhb/bd.c:240:15: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
if ( !equal )
data/handbrake-1.3.1+ds1/libhb/common.c:2596:34: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
strlen(audio_encoder->name) - 9);
data/handbrake-1.3.1+ds1/libhb/common.c:3488:11: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
len = strlen(string) + 1;
data/handbrake-1.3.1+ds1/libhb/common.c:4269:21: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
src_len = len = strlen(src) + 1;
data/handbrake-1.3.1+ds1/libhb/common.c:4272:19: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
dst_len = strlen(dst);
data/handbrake-1.3.1+ds1/libhb/common.c:4495:20: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
int last = strlen(value) - 1;
data/handbrake-1.3.1+ds1/libhb/common.c:4906:32: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
subtitle->extradata_size = strlen((char*)subtitle->extradata) + 1;
data/handbrake-1.3.1+ds1/libhb/common.c:4970:14: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
strlen(lang->native_name) ? lang->native_name : lang->eng_name,
data/handbrake-1.3.1+ds1/libhb/common.c:5390:16: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
len += strlen( s1 );
data/handbrake-1.3.1+ds1/libhb/common.c:5392:21: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
len += MAX( strlen( s2 ), n );
data/handbrake-1.3.1+ds1/libhb/common.c:5403:9: [1] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant character.
strcpy( str, "" );
data/handbrake-1.3.1+ds1/libhb/common.c:5407:9: [1] (buffer) strncat:
Easily used incorrectly (e.g., incorrectly computing the correct maximum
size to add) [MS-banned] (CWE-120). Consider strcat_s, strlcat, snprintf,
or automatically resizing strings.
strncat( str, s2, n );
data/handbrake-1.3.1+ds1/libhb/common.c:5654:19: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
int str_len = strlen( str );
data/handbrake-1.3.1+ds1/libhb/common.c:5709:40: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
ret[i] = strndup_quote(pos, quote, strlen(pos));
data/handbrake-1.3.1+ds1/libhb/decavcodec.c:656:19: [1] (buffer) strncpy:
Easily used incorrectly; doesn't always \0-terminate or check for invalid
pointers [MS-banned] (CWE-120).
info->name = strncpy( codec_name, codec->name, sizeof(codec_name)-1 );
data/handbrake-1.3.1+ds1/libhb/decavcodec.c:1097:26: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
strlen(lang->native_name) ? lang->native_name :
data/handbrake-1.3.1+ds1/libhb/deccc608sub.c:952:15: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
len = strlen((char*)buffer->data);
data/handbrake-1.3.1+ds1/libhb/decsrtsub.c:160:11: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
pos = strlen((char*)sub_in->data);
data/handbrake-1.3.1+ds1/libhb/decsrtsub.c:167:19: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
len = strlen(ssa_markup);
data/handbrake-1.3.1+ds1/libhb/decsrtsub.c:441:19: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
len = strlen( line_buffer );
data/handbrake-1.3.1+ds1/libhb/decsrtsub.c:464:17: [1] (buffer) strncat:
Easily used incorrectly (e.g., incorrectly computing the correct maximum
size to add) [MS-banned] (CWE-120). Consider strcat_s, strlcat, snprintf,
or automatically resizing strings. Risk is low because the source is a
constant character.
strncat(pv->current_entry.text, " ", sizeof(pv->current_entry.text) - strlen(pv->current_entry.text) - 1);
data/handbrake-1.3.1+ds1/libhb/decsrtsub.c:464:87: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
strncat(pv->current_entry.text, " ", sizeof(pv->current_entry.text) - strlen(pv->current_entry.text) - 1);
data/handbrake-1.3.1+ds1/libhb/decssasub.c:56:25: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
int events_len = strlen(events_tag);;
data/handbrake-1.3.1+ds1/libhb/decssasub.c:57:25: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
int format_len = strlen(format_tag);;
data/handbrake-1.3.1+ds1/libhb/decssasub.c:109:36: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
pv->subtitle->extradata_size = strlen(header) + 1;
data/handbrake-1.3.1+ds1/libhb/decssasub.c:306:5: [1] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant character.
strcat( mkvSSA, "," );
data/handbrake-1.3.1+ds1/libhb/decssasub.c:308:5: [1] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant character.
strcat( mkvSSA, "," );
data/handbrake-1.3.1+ds1/libhb/decssasub.c:311:27: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
out->size = strlen(mkvSSA) + 1;
data/handbrake-1.3.1+ds1/libhb/dectx3gsub.c:68:16: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
return strlen(dst);
data/handbrake-1.3.1+ds1/libhb/dectx3gsub.c:77:12: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
return strlen(dst);
data/handbrake-1.3.1+ds1/libhb/dectx3gsub.c:166:12: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
dst += strlen((char*)dst);
data/handbrake-1.3.1+ds1/libhb/dvd.c:200:14: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
strlen(lang->native_name) ? lang->native_name : lang->eng_name);
data/handbrake-1.3.1+ds1/libhb/dvd.c:296:5: [1] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant character.
strcat(subtitle->lang, "]");
data/handbrake-1.3.1+ds1/libhb/dvd.c:571:19: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
strlen( lang->native_name ) ? lang->native_name : lang->eng_name );
data/handbrake-1.3.1+ds1/libhb/dvd.c:1420:25: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
return dvd_methods->read(d);
data/handbrake-1.3.1+ds1/libhb/dvdnav.c:346:14: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
strlen(lang->native_name) ? lang->native_name : lang->eng_name);
data/handbrake-1.3.1+ds1/libhb/dvdnav.c:442:5: [1] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant character.
strcat(subtitle->lang, "]");
data/handbrake-1.3.1+ds1/libhb/dvdnav.c:710:19: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
strlen( lang->native_name ) ? lang->native_name : lang->eng_name );
data/handbrake-1.3.1+ds1/libhb/encx264.c:96:43: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if (!strncmp(entry->d_name, name, strlen(name)))
data/handbrake-1.3.1+ds1/libhb/handbrake/common.h:53:26: [1] (buffer) getc:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
# define getc_unlocked getc
data/handbrake-1.3.1+ds1/libhb/handbrake/dvd.h:107:22: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
hb_buffer_t * (* read) ( hb_dvd_t * );
data/handbrake-1.3.1+ds1/libhb/hb.c:1351:17: [1] (buffer) strncpy:
Easily used incorrectly; doesn't always \0-terminate or check for invalid
pointers [MS-banned] (CWE-120).
strncpy( audio_lang, audio->config.lang.iso639_2, sizeof( audio_lang ) );
data/handbrake-1.3.1+ds1/libhb/hb_dict.c:257:23: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
int len = strlen(r);
data/handbrake-1.3.1+ds1/libhb/hb_dict.c:315:23: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
int len = strlen(r);
data/handbrake-1.3.1+ds1/libhb/hb_dict.c:456:22: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
int ii, len = strlen(key);
data/handbrake-1.3.1+ds1/libhb/hb_json.c:1669:17: [1] (buffer) strncpy:
Easily used incorrectly; doesn't always \0-terminate or check for invalid
pointers [MS-banned] (CWE-120).
strncpy(sub_config.src_codeset, srtcodeset, 39);
data/handbrake-1.3.1+ds1/libhb/hb_json.c:1911:22: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
base64size = strlen(plane_base64);
data/handbrake-1.3.1+ds1/libhb/muxavformat.c:1392:38: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
buffersize = strlen((char*)buffer);
data/handbrake-1.3.1+ds1/libhb/plist.c:103:15: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
int len = strlen(str);
data/handbrake-1.3.1+ds1/libhb/plist.c:470:15: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
pos = strlen(pd->value);
data/handbrake-1.3.1+ds1/libhb/plist.c:476:5: [1] (buffer) strncpy:
Easily used incorrectly; doesn't always \0-terminate or check for invalid
pointers [MS-banned] (CWE-120).
strncpy(pd->value + pos, text, len);
data/handbrake-1.3.1+ds1/libhb/ports.c:222:5: [1] (obsolete) usleep:
This C routine is considered obsolete (as opposed to the shell command by
the same name). The interaction of this function with SIGALRM and other
timer functions such as sleep(), alarm(), setitimer(), and nanosleep() is
unspecified (CWE-676). Use nanosleep(2) or setitimer(2) instead.
usleep( 1000 * delay );
data/handbrake-1.3.1+ds1/libhb/ports.c:562:9: [1] (buffer) strncpy:
Easily used incorrectly; doesn't always \0-terminate or check for invalid
pointers [MS-banned] (CWE-120).
strncpy(path, p, 511);
data/handbrake-1.3.1+ds1/libhb/ports.c:568:9: [1] (buffer) strncpy:
Easily used incorrectly; doesn't always \0-terminate or check for invalid
pointers [MS-banned] (CWE-120).
strncpy(path, p, 511);
data/handbrake-1.3.1+ds1/libhb/ports.c:570:19: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
int len = strlen(path);
data/handbrake-1.3.1+ds1/libhb/ports.c:571:9: [1] (buffer) strncpy:
Easily used incorrectly; doesn't always \0-terminate or check for invalid
pointers [MS-banned] (CWE-120). Risk is low because the source is a
constant string.
strncpy(path + len, "/.config", 511 - len - 1);
data/handbrake-1.3.1+ds1/libhb/ports.c:595:5: [1] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant character.
strcat( name, "\\" );
data/handbrake-1.3.1+ds1/libhb/ports.c:597:5: [1] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant character.
strcat( name, "/" );
data/handbrake-1.3.1+ds1/libhb/ports.c:601:22: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
vsnprintf( &name[strlen(name)], 1024 - strlen(name), fmt, args );
data/handbrake-1.3.1+ds1/libhb/ports.c:601:44: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
vsnprintf( &name[strlen(name)], 1024 - strlen(name), fmt, args );
data/handbrake-1.3.1+ds1/libhb/ports.c:633:14: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if( base[strlen(base)-1] == '/' )
data/handbrake-1.3.1+ds1/libhb/ports.c:634:14: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
base[strlen(base)-1] = '\0';
data/handbrake-1.3.1+ds1/libhb/ports.c:1268:37: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
return send( n->socket, buffer, strlen( buffer ), 0 );
data/handbrake-1.3.1+ds1/libhb/ports.c:1442:9: [1] (buffer) fgetc:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
c = fgetc(fp);
data/handbrake-1.3.1+ds1/libhb/ports.c:1477:13: [1] (buffer) fgetc:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
c = fgetc(fp);
data/handbrake-1.3.1+ds1/libhb/ports.c:1537:34: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
int len = strlen(name);
data/handbrake-1.3.1+ds1/libhb/preset.c:119:15: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
len = strlen(name);
data/handbrake-1.3.1+ds1/libhb/preset.c:124:9: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if (strlen(preset_name) > len)
data/handbrake-1.3.1+ds1/libhb/preset.c:125:15: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
len = strlen(preset_name);
data/handbrake-1.3.1+ds1/libhb/preset.c:3914:40: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if (strcmp(".json", filename + strlen(filename) - 5))
data/handbrake-1.3.1+ds1/libhb/qsv_filter.c:404:19: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
int len = strlen(info->human_readable_desc);
data/handbrake-1.3.1+ds1/libhb/scan.c:1321:9: [1] (buffer) strncat:
Easily used incorrectly (e.g., incorrectly computing the correct maximum
size to add) [MS-banned] (CWE-120). Consider strcat_s, strlcat, snprintf,
or automatically resizing strings. Risk is low because the source is a
constant string.
strncat(audio->config.lang.description, " (Visually Impaired)",
data/handbrake-1.3.1+ds1/libhb/scan.c:1323:17: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
strlen(audio->config.lang.description) - 1);
data/handbrake-1.3.1+ds1/libhb/scan.c:1327:9: [1] (buffer) strncat:
Easily used incorrectly (e.g., incorrectly computing the correct maximum
size to add) [MS-banned] (CWE-120). Consider strcat_s, strlcat, snprintf,
or automatically resizing strings. Risk is low because the source is a
constant string.
strncat(audio->config.lang.description, " (Director's Commentary 1)",
data/handbrake-1.3.1+ds1/libhb/scan.c:1329:17: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
strlen(audio->config.lang.description) - 1);
data/handbrake-1.3.1+ds1/libhb/scan.c:1333:9: [1] (buffer) strncat:
Easily used incorrectly (e.g., incorrectly computing the correct maximum
size to add) [MS-banned] (CWE-120). Consider strcat_s, strlcat, snprintf,
or automatically resizing strings. Risk is low because the source is a
constant string.
strncat(audio->config.lang.description, " (Director's Commentary 2)",
data/handbrake-1.3.1+ds1/libhb/scan.c:1335:17: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
strlen(audio->config.lang.description) - 1);
data/handbrake-1.3.1+ds1/libhb/scan.c:1339:9: [1] (buffer) strncat:
Easily used incorrectly (e.g., incorrectly computing the correct maximum
size to add) [MS-banned] (CWE-120). Consider strcat_s, strlcat, snprintf,
or automatically resizing strings. Risk is low because the source is a
constant string.
strncat(audio->config.lang.description, " (Secondary)",
data/handbrake-1.3.1+ds1/libhb/scan.c:1341:17: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
strlen(audio->config.lang.description) - 1);
data/handbrake-1.3.1+ds1/libhb/scan.c:1350:25: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
strlen(audio->config.lang.description);
data/handbrake-1.3.1+ds1/libhb/scan.c:1393:9: [1] (buffer) strncat:
Easily used incorrectly (e.g., incorrectly computing the correct maximum
size to add) [MS-banned] (CWE-120). Consider strcat_s, strlcat, snprintf,
or automatically resizing strings.
strncat(audio->config.lang.description, in_bitrate_str,
data/handbrake-1.3.1+ds1/libhb/scan.c:1394:58: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
sizeof(audio->config.lang.description) - strlen(audio->config.lang.description) - 1);
data/handbrake-1.3.1+ds1/libhb/ssautil.c:234:24: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
char *out = malloc(strlen(in) + 1); // out will never be longer than in
data/handbrake-1.3.1+ds1/libhb/ssautil.c:475:26: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if (value == NULL || strlen(value) < 3)
data/handbrake-1.3.1+ds1/libhb/ssautil.c:491:26: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if (value == NULL || strlen(value) < 3)
data/handbrake-1.3.1+ds1/libhb/ssautil.c:506:26: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if (value == NULL || strlen(value) < 3)
data/handbrake-1.3.1+ds1/libhb/ssautil.c:521:26: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if (value == NULL || strlen(value) < 3)
data/handbrake-1.3.1+ds1/libhb/stream.c:1940:15: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
strlen( lang->native_name ) ? lang->native_name : lang->eng_name );
data/handbrake-1.3.1+ds1/libhb/stream.c:1999:14: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
strlen(lang->native_name) ? lang->native_name : lang->eng_name,
data/handbrake-1.3.1+ds1/libhb/stream.c:2601:17: [1] (buffer) strncpy:
Easily used incorrectly; doesn't always \0-terminate or check for invalid
pointers [MS-banned] (CWE-120). Risk is low because the source is a
constant string.
strncpy(stream->pes.list[pes_idx].codec_name,
data/handbrake-1.3.1+ds1/libhb/stream.c:2612:17: [1] (buffer) strncpy:
Easily used incorrectly; doesn't always \0-terminate or check for invalid
pointers [MS-banned] (CWE-120). Risk is low because the source is a
constant string.
strncpy(stream->pes.list[pes_idx].codec_name,
data/handbrake-1.3.1+ds1/libhb/stream.c:3838:21: [1] (buffer) strncpy:
Easily used incorrectly; doesn't always \0-terminate or check for invalid
pointers [MS-banned] (CWE-120). Risk is low because the source is a
constant string.
strncpy(stream->pes.list[idx].codec_name,
data/handbrake-1.3.1+ds1/libhb/stream.c:3988:9: [1] (buffer) strncpy:
Easily used incorrectly; doesn't always \0-terminate or check for invalid
pointers [MS-banned] (CWE-120).
strncpy(pes->codec_name, profile_name, 80);
data/handbrake-1.3.1+ds1/libhb/stream.c:4224:13: [1] (buffer) strncpy:
Easily used incorrectly; doesn't always \0-terminate or check for invalid
pointers [MS-banned] (CWE-120).
strncpy(pes->codec_name, codec->name, 79);
data/handbrake-1.3.1+ds1/libhb/stream.c:5516:14: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
strlen(lang->native_name) ? lang->native_name : lang->eng_name,
data/handbrake-1.3.1+ds1/libhb/stream.c:5518:5: [1] (buffer) strncpy:
Easily used incorrectly; doesn't always \0-terminate or check for invalid
pointers [MS-banned] (CWE-120).
strncpy(subtitle->iso639_2, lang->iso639_2, 3);
data/handbrake-1.3.1+ds1/libhb/stream.c:5578:30: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
int len = name ? strlen( name ) : 0;
data/handbrake-1.3.1+ds1/libhb/stream.c:5829:23: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
strlen( tag->value ) > 11 ) )
data/handbrake-1.3.1+ds1/libhb/sync.c:2662:15: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
len = strlen((char*)a->data);
data/handbrake-1.3.1+ds1/test/parsecsv.c:165:16: [1] (buffer) fgetc:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
byte = fgetc( file->fileref );
data/handbrake-1.3.1+ds1/test/parsecsv.c:222:14: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
for( i = strlen(text) - 1; i >= 0 && is_white(text[i]) ; i-- )
data/handbrake-1.3.1+ds1/test/test.c:378:20: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
read( STDIN_FILENO, &buf[size], 1 ) > 0 )
data/handbrake-1.3.1+ds1/test/test.c:1169:19: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
int len = strlen(keys[ii]) + 3;
data/handbrake-1.3.1+ds1/test/test.c:1253:27: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
int len = strlen(split[ii]) + 1;
data/handbrake-1.3.1+ds1/test/test.c:1439:21: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if (i + strlen(rate->name) > 32)
data/handbrake-1.3.1+ds1/test/test.c:1445:18: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
i += strlen(rate->name);
data/handbrake-1.3.1+ds1/test/test.c:1948:19: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
int src_len = strlen(src);
data/handbrake-1.3.1+ds1/test/test.c:1951:5: [1] (buffer) strncpy:
Easily used incorrectly; doesn't always \0-terminate or check for invalid
pointers [MS-banned] (CWE-120).
strncpy(result, src, alloc - 1);
data/handbrake-1.3.1+ds1/test/test.c:1976:11: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
len = strlen(str);
data/handbrake-1.3.1+ds1/test/test.c:2443:41: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
input = malloc( strlen( "/dev/" ) + strlen( devName ) + 1 );
data/handbrake-1.3.1+ds1/test/test.c:2443:61: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
input = malloc( strlen( "/dev/" ) + strlen( devName ) + 1 );
data/handbrake-1.3.1+ds1/test/test.c:5255:21: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
size_t lenpre = strlen(prefix),
data/handbrake-1.3.1+ds1/test/test.c:5256:21: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
lenstr = strlen(s.f_mntfromname);
ANALYSIS SUMMARY:
Hits = 578
Lines analyzed = 128500 in approximately 6.51 seconds (19725 lines/second)
Physical Source Lines of Code (SLOC) = 104077
Hits@level = [0] 363 [1] 147 [2] 397 [3] 7 [4] 27 [5] 0
Hits@level+ = [0+] 941 [1+] 578 [2+] 431 [3+] 34 [4+] 27 [5+] 0
Hits/KSLOC@level+ = [0+] 9.04138 [1+] 5.55358 [2+] 4.14116 [3+] 0.326681 [4+] 0.259423 [5+] 0
Dot directories skipped = 2 (--followdotdir overrides)
Minimum risk level = 1
Not every hit is necessarily a security vulnerability.
There may be other security vulnerabilities; review your code!
See 'Secure Programming HOWTO'
(https://dwheeler.com/secure-programs) for more information.