Flawfinder version 2.0.10, (C) 2001-2019 David A. Wheeler.
Number of rules (primarily dangerous function names) in C/C++ ruleset: 223
Examining data/iverilog-11.0/AStatement.cc
Examining data/iverilog-11.0/AStatement.h
Examining data/iverilog-11.0/Attrib.cc
Examining data/iverilog-11.0/Attrib.h
Examining data/iverilog-11.0/HName.cc
Examining data/iverilog-11.0/HName.h
Examining data/iverilog-11.0/Module.cc
Examining data/iverilog-11.0/Module.h
Examining data/iverilog-11.0/PClass.cc
Examining data/iverilog-11.0/PClass.h
Examining data/iverilog-11.0/PDelays.cc
Examining data/iverilog-11.0/PDelays.h
Examining data/iverilog-11.0/PEvent.cc
Examining data/iverilog-11.0/PEvent.h
Examining data/iverilog-11.0/PExpr.cc
Examining data/iverilog-11.0/PExpr.h
Examining data/iverilog-11.0/PFunction.cc
Examining data/iverilog-11.0/PGate.cc
Examining data/iverilog-11.0/PGate.h
Examining data/iverilog-11.0/PGenerate.cc
Examining data/iverilog-11.0/PGenerate.h
Examining data/iverilog-11.0/PModport.cc
Examining data/iverilog-11.0/PModport.h
Examining data/iverilog-11.0/PNamedItem.cc
Examining data/iverilog-11.0/PNamedItem.h
Examining data/iverilog-11.0/PPackage.cc
Examining data/iverilog-11.0/PPackage.h
Examining data/iverilog-11.0/PScope.cc
Examining data/iverilog-11.0/PScope.h
Examining data/iverilog-11.0/PSpec.cc
Examining data/iverilog-11.0/PSpec.h
Examining data/iverilog-11.0/PTask.cc
Examining data/iverilog-11.0/PTask.h
Examining data/iverilog-11.0/PUdp.cc
Examining data/iverilog-11.0/PUdp.h
Examining data/iverilog-11.0/PWire.cc
Examining data/iverilog-11.0/PWire.h
Examining data/iverilog-11.0/Statement.cc
Examining data/iverilog-11.0/Statement.h
Examining data/iverilog-11.0/acc_user.h
Examining data/iverilog-11.0/async.cc
Examining data/iverilog-11.0/cadpli/cadpli.c
Examining data/iverilog-11.0/cadpli/ivl_dlfcn.h
Examining data/iverilog-11.0/compiler.h
Examining data/iverilog-11.0/cprop.cc
Examining data/iverilog-11.0/design_dump.cc
Examining data/iverilog-11.0/discipline.cc
Examining data/iverilog-11.0/discipline.h
Examining data/iverilog-11.0/dosify.c
Examining data/iverilog-11.0/driver-vpi/main.c
Examining data/iverilog-11.0/driver/cfparse_misc.h
Examining data/iverilog-11.0/driver/globals.h
Examining data/iverilog-11.0/driver/main.c
Examining data/iverilog-11.0/driver/substit.c
Examining data/iverilog-11.0/dup_expr.cc
Examining data/iverilog-11.0/elab_anet.cc
Examining data/iverilog-11.0/elab_lval.cc
Examining data/iverilog-11.0/elab_net.cc
Examining data/iverilog-11.0/elab_scope.cc
Examining data/iverilog-11.0/elab_sig.cc
Examining data/iverilog-11.0/elab_sig_analog.cc
Examining data/iverilog-11.0/elab_type.cc
Examining data/iverilog-11.0/elaborate.cc
Examining data/iverilog-11.0/elaborate_analog.cc
Examining data/iverilog-11.0/emit.cc
Examining data/iverilog-11.0/eval.cc
Examining data/iverilog-11.0/eval_attrib.cc
Examining data/iverilog-11.0/eval_tree.cc
Examining data/iverilog-11.0/examples/hello_vpi.c
Examining data/iverilog-11.0/exposenodes.cc
Examining data/iverilog-11.0/expr_synth.cc
Examining data/iverilog-11.0/functor.cc
Examining data/iverilog-11.0/functor.h
Examining data/iverilog-11.0/ivl_alloc.h
Examining data/iverilog-11.0/ivl_assert.h
Examining data/iverilog-11.0/ivl_target.h
Examining data/iverilog-11.0/ivl_target_priv.h
Examining data/iverilog-11.0/ivlpp/globals.h
Examining data/iverilog-11.0/ivlpp/main.c
Examining data/iverilog-11.0/lexor_keyword.h
Examining data/iverilog-11.0/libmisc/LineInfo.cc
Examining data/iverilog-11.0/libmisc/LineInfo.h
Examining data/iverilog-11.0/libmisc/StringHeap.cc
Examining data/iverilog-11.0/libmisc/StringHeap.h
Examining data/iverilog-11.0/libveriuser/a_close.c
Examining data/iverilog-11.0/libveriuser/a_compare_handles.c
Examining data/iverilog-11.0/libveriuser/a_configure.c
Examining data/iverilog-11.0/libveriuser/a_fetch_argc.c
Examining data/iverilog-11.0/libveriuser/a_fetch_argv.c
Examining data/iverilog-11.0/libveriuser/a_fetch_dir.c
Examining data/iverilog-11.0/libveriuser/a_fetch_fullname.c
Examining data/iverilog-11.0/libveriuser/a_fetch_location.c
Examining data/iverilog-11.0/libveriuser/a_fetch_param.c
Examining data/iverilog-11.0/libveriuser/a_fetch_range.c
Examining data/iverilog-11.0/libveriuser/a_fetch_tfarg.c
Examining data/iverilog-11.0/libveriuser/a_fetch_time.c
Examining data/iverilog-11.0/libveriuser/a_fetch_type.c
Examining data/iverilog-11.0/libveriuser/a_fetch_type_str.c
Examining data/iverilog-11.0/libveriuser/a_fetch_value.c
Examining data/iverilog-11.0/libveriuser/a_handle_by_name.c
Examining data/iverilog-11.0/libveriuser/a_handle_hiconn.c
Examining data/iverilog-11.0/libveriuser/a_handle_object.c
Examining data/iverilog-11.0/libveriuser/a_handle_parent.c
Examining data/iverilog-11.0/libveriuser/a_handle_simulated_net.c
Examining data/iverilog-11.0/libveriuser/a_handle_tfarg.c
Examining data/iverilog-11.0/libveriuser/a_initialize.c
Examining data/iverilog-11.0/libveriuser/a_next.c
Examining data/iverilog-11.0/libveriuser/a_next_bit.c
Examining data/iverilog-11.0/libveriuser/a_next_port.c
Examining data/iverilog-11.0/libveriuser/a_next_topmod.c
Examining data/iverilog-11.0/libveriuser/a_object_of_type.c
Examining data/iverilog-11.0/libveriuser/a_product_version.c
Examining data/iverilog-11.0/libveriuser/a_set_value.c
Examining data/iverilog-11.0/libveriuser/a_vcl.c
Examining data/iverilog-11.0/libveriuser/a_version.c
Examining data/iverilog-11.0/libveriuser/asynch.c
Examining data/iverilog-11.0/libveriuser/delay.c
Examining data/iverilog-11.0/libveriuser/exprinfo.c
Examining data/iverilog-11.0/libveriuser/finish.c
Examining data/iverilog-11.0/libveriuser/getcstringp.c
Examining data/iverilog-11.0/libveriuser/getinstance.c
Examining data/iverilog-11.0/libveriuser/getlongp.c
Examining data/iverilog-11.0/libveriuser/getp.c
Examining data/iverilog-11.0/libveriuser/getsimtime.c
Examining data/iverilog-11.0/libveriuser/io_print.c
Examining data/iverilog-11.0/libveriuser/math.c
Examining data/iverilog-11.0/libveriuser/mc_scan_plusargs.c
Examining data/iverilog-11.0/libveriuser/nodeinfo.c
Examining data/iverilog-11.0/libveriuser/nump.c
Examining data/iverilog-11.0/libveriuser/priv.c
Examining data/iverilog-11.0/libveriuser/priv.h
Examining data/iverilog-11.0/libveriuser/putlongp.c
Examining data/iverilog-11.0/libveriuser/putp.c
Examining data/iverilog-11.0/libveriuser/spname.c
Examining data/iverilog-11.0/libveriuser/typep.c
Examining data/iverilog-11.0/libveriuser/veriusertfs.c
Examining data/iverilog-11.0/libveriuser/workarea.c
Examining data/iverilog-11.0/link_const.cc
Examining data/iverilog-11.0/load_module.cc
Examining data/iverilog-11.0/main.cc
Examining data/iverilog-11.0/named.h
Examining data/iverilog-11.0/net_analog.cc
Examining data/iverilog-11.0/net_assign.cc
Examining data/iverilog-11.0/net_design.cc
Examining data/iverilog-11.0/net_event.cc
Examining data/iverilog-11.0/net_expr.cc
Examining data/iverilog-11.0/net_func.cc
Examining data/iverilog-11.0/net_func_eval.cc
Examining data/iverilog-11.0/net_link.cc
Examining data/iverilog-11.0/net_modulo.cc
Examining data/iverilog-11.0/net_nex_input.cc
Examining data/iverilog-11.0/net_nex_output.cc
Examining data/iverilog-11.0/net_proc.cc
Examining data/iverilog-11.0/net_scope.cc
Examining data/iverilog-11.0/net_tran.cc
Examining data/iverilog-11.0/net_udp.cc
Examining data/iverilog-11.0/netclass.cc
Examining data/iverilog-11.0/netclass.h
Examining data/iverilog-11.0/netdarray.cc
Examining data/iverilog-11.0/netdarray.h
Examining data/iverilog-11.0/netenum.cc
Examining data/iverilog-11.0/netenum.h
Examining data/iverilog-11.0/netlist.cc
Examining data/iverilog-11.0/netlist.h
Examining data/iverilog-11.0/netmisc.cc
Examining data/iverilog-11.0/netmisc.h
Examining data/iverilog-11.0/netparray.cc
Examining data/iverilog-11.0/netparray.h
Examining data/iverilog-11.0/netqueue.cc
Examining data/iverilog-11.0/netqueue.h
Examining data/iverilog-11.0/netscalar.cc
Examining data/iverilog-11.0/netscalar.h
Examining data/iverilog-11.0/netstruct.cc
Examining data/iverilog-11.0/netstruct.h
Examining data/iverilog-11.0/nettypes.cc
Examining data/iverilog-11.0/nettypes.h
Examining data/iverilog-11.0/netvector.cc
Examining data/iverilog-11.0/netvector.h
Examining data/iverilog-11.0/nodangle.cc
Examining data/iverilog-11.0/pad_to_width.cc
Examining data/iverilog-11.0/parse_api.h
Examining data/iverilog-11.0/parse_misc.cc
Examining data/iverilog-11.0/parse_misc.h
Examining data/iverilog-11.0/pform.cc
Examining data/iverilog-11.0/pform.h
Examining data/iverilog-11.0/pform_analog.cc
Examining data/iverilog-11.0/pform_class_type.cc
Examining data/iverilog-11.0/pform_disciplines.cc
Examining data/iverilog-11.0/pform_dump.cc
Examining data/iverilog-11.0/pform_package.cc
Examining data/iverilog-11.0/pform_pclass.cc
Examining data/iverilog-11.0/pform_string_type.cc
Examining data/iverilog-11.0/pform_struct_type.cc
Examining data/iverilog-11.0/pform_types.cc
Examining data/iverilog-11.0/pform_types.h
Examining data/iverilog-11.0/property_qual.h
Examining data/iverilog-11.0/sv_vpi_user.h
Examining data/iverilog-11.0/svector.h
Examining data/iverilog-11.0/symbol_search.cc
Examining data/iverilog-11.0/sync.cc
Examining data/iverilog-11.0/synth.cc
Examining data/iverilog-11.0/synth2.cc
Examining data/iverilog-11.0/sys_funcs.cc
Examining data/iverilog-11.0/t-dll-analog.cc
Examining data/iverilog-11.0/t-dll-api.cc
Examining data/iverilog-11.0/t-dll-expr.cc
Examining data/iverilog-11.0/t-dll-proc.cc
Examining data/iverilog-11.0/t-dll.cc
Examining data/iverilog-11.0/t-dll.h
Examining data/iverilog-11.0/target.cc
Examining data/iverilog-11.0/target.h
Examining data/iverilog-11.0/tgt-blif/blif.cc
Examining data/iverilog-11.0/tgt-blif/constants.cc
Examining data/iverilog-11.0/tgt-blif/logic_gate.cc
Examining data/iverilog-11.0/tgt-blif/lpm.cc
Examining data/iverilog-11.0/tgt-blif/lpm_add.cc
Examining data/iverilog-11.0/tgt-blif/lpm_cmp_eq.cc
Examining data/iverilog-11.0/tgt-blif/lpm_cmp_gt.cc
Examining data/iverilog-11.0/tgt-blif/lpm_ff.cc
Examining data/iverilog-11.0/tgt-blif/lpm_mux.cc
Examining data/iverilog-11.0/tgt-blif/lpm_part_vp.cc
Examining data/iverilog-11.0/tgt-blif/lpm_re_logic.cc
Examining data/iverilog-11.0/tgt-blif/lpm_shift.cc
Examining data/iverilog-11.0/tgt-blif/lpm_sign_ext.cc
Examining data/iverilog-11.0/tgt-blif/nex_data.cc
Examining data/iverilog-11.0/tgt-blif/nex_data.h
Examining data/iverilog-11.0/tgt-blif/priv.h
Examining data/iverilog-11.0/tgt-fpga/d-generic-edif.c
Examining data/iverilog-11.0/tgt-fpga/d-generic.c
Examining data/iverilog-11.0/tgt-fpga/d-lpm.c
Examining data/iverilog-11.0/tgt-fpga/d-virtex.c
Examining data/iverilog-11.0/tgt-fpga/d-virtex2.c
Examining data/iverilog-11.0/tgt-fpga/device.h
Examining data/iverilog-11.0/tgt-fpga/edif.c
Examining data/iverilog-11.0/tgt-fpga/edif.h
Examining data/iverilog-11.0/tgt-fpga/fpga.c
Examining data/iverilog-11.0/tgt-fpga/fpga_priv.h
Examining data/iverilog-11.0/tgt-fpga/gates.c
Examining data/iverilog-11.0/tgt-fpga/generic.c
Examining data/iverilog-11.0/tgt-fpga/generic.h
Examining data/iverilog-11.0/tgt-fpga/mangle.c
Examining data/iverilog-11.0/tgt-fpga/tables.c
Examining data/iverilog-11.0/tgt-fpga/xilinx.c
Examining data/iverilog-11.0/tgt-fpga/xilinx.h
Examining data/iverilog-11.0/tgt-null/null.c
Examining data/iverilog-11.0/tgt-pal/dump_final.c
Examining data/iverilog-11.0/tgt-pal/emit_jed.c
Examining data/iverilog-11.0/tgt-pal/enables.c
Examining data/iverilog-11.0/tgt-pal/fit_log.c
Examining data/iverilog-11.0/tgt-pal/fit_reg.c
Examining data/iverilog-11.0/tgt-pal/imain.c
Examining data/iverilog-11.0/tgt-pal/pads.c
Examining data/iverilog-11.0/tgt-pal/priv.h
Examining data/iverilog-11.0/tgt-pcb/footprint.cc
Examining data/iverilog-11.0/tgt-pcb/fp_api.h
Examining data/iverilog-11.0/tgt-pcb/pcb.cc
Examining data/iverilog-11.0/tgt-pcb/pcb_priv.h
Examining data/iverilog-11.0/tgt-pcb/scope.cc
Examining data/iverilog-11.0/tgt-pcb/show_netlist.cc
Examining data/iverilog-11.0/tgt-pcb/show_pcb.cc
Examining data/iverilog-11.0/tgt-sizer/scan_logs.cc
Examining data/iverilog-11.0/tgt-sizer/scan_lpms.cc
Examining data/iverilog-11.0/tgt-sizer/sizer.cc
Examining data/iverilog-11.0/tgt-sizer/sizer_priv.h
Examining data/iverilog-11.0/tgt-stub/classes.c
Examining data/iverilog-11.0/tgt-stub/constant.c
Examining data/iverilog-11.0/tgt-stub/enumerate.c
Examining data/iverilog-11.0/tgt-stub/expression.c
Examining data/iverilog-11.0/tgt-stub/priv.h
Examining data/iverilog-11.0/tgt-stub/statement.c
Examining data/iverilog-11.0/tgt-stub/stub.c
Examining data/iverilog-11.0/tgt-stub/switches.c
Examining data/iverilog-11.0/tgt-stub/types.c
Examining data/iverilog-11.0/tgt-verilog/verilog.c
Examining data/iverilog-11.0/tgt-vhdl/cast.cc
Examining data/iverilog-11.0/tgt-vhdl/expr.cc
Examining data/iverilog-11.0/tgt-vhdl/logic.cc
Examining data/iverilog-11.0/tgt-vhdl/lpm.cc
Examining data/iverilog-11.0/tgt-vhdl/process.cc
Examining data/iverilog-11.0/tgt-vhdl/scope.cc
Examining data/iverilog-11.0/tgt-vhdl/state.cc
Examining data/iverilog-11.0/tgt-vhdl/stmt.cc
Examining data/iverilog-11.0/tgt-vhdl/support.cc
Examining data/iverilog-11.0/tgt-vhdl/vhdl.cc
Examining data/iverilog-11.0/tgt-vhdl/vhdl_element.cc
Examining data/iverilog-11.0/tgt-vhdl/vhdl_syntax.cc
Examining data/iverilog-11.0/tgt-vhdl/vhdl_target.h
Examining data/iverilog-11.0/tgt-vhdl/vhdl_type.cc
Examining data/iverilog-11.0/tgt-vhdl/vhpi/finish.c
Examining data/iverilog-11.0/tgt-vlog95/event.c
Examining data/iverilog-11.0/tgt-vlog95/expr.c
Examining data/iverilog-11.0/tgt-vlog95/logic_lpm.c
Examining data/iverilog-11.0/tgt-vlog95/misc.c
Examining data/iverilog-11.0/tgt-vlog95/numbers.c
Examining data/iverilog-11.0/tgt-vlog95/scope.c
Examining data/iverilog-11.0/tgt-vlog95/stmt.c
Examining data/iverilog-11.0/tgt-vlog95/udp.c
Examining data/iverilog-11.0/tgt-vlog95/vlog95.c
Examining data/iverilog-11.0/tgt-vlog95/vlog95_priv.h
Examining data/iverilog-11.0/tgt-vvp/draw_class.c
Examining data/iverilog-11.0/tgt-vvp/draw_delay.c
Examining data/iverilog-11.0/tgt-vvp/draw_enum.c
Examining data/iverilog-11.0/tgt-vvp/draw_mux.c
Examining data/iverilog-11.0/tgt-vvp/draw_net_input.c
Examining data/iverilog-11.0/tgt-vvp/draw_substitute.c
Examining data/iverilog-11.0/tgt-vvp/draw_switch.c
Examining data/iverilog-11.0/tgt-vvp/draw_ufunc.c
Examining data/iverilog-11.0/tgt-vvp/draw_vpi.c
Examining data/iverilog-11.0/tgt-vvp/eval_bool.c
Examining data/iverilog-11.0/tgt-vvp/eval_condit.c
Examining data/iverilog-11.0/tgt-vvp/eval_expr.c
Examining data/iverilog-11.0/tgt-vvp/eval_object.c
Examining data/iverilog-11.0/tgt-vvp/eval_real.c
Examining data/iverilog-11.0/tgt-vvp/eval_string.c
Examining data/iverilog-11.0/tgt-vvp/eval_vec4.c
Examining data/iverilog-11.0/tgt-vvp/modpath.c
Examining data/iverilog-11.0/tgt-vvp/stmt_assign.c
Examining data/iverilog-11.0/tgt-vvp/vvp.c
Examining data/iverilog-11.0/tgt-vvp/vvp_priv.h
Examining data/iverilog-11.0/tgt-vvp/vvp_process.c
Examining data/iverilog-11.0/tgt-vvp/vvp_scope.c
Examining data/iverilog-11.0/util.h
Examining data/iverilog-11.0/verinum.cc
Examining data/iverilog-11.0/verinum.h
Examining data/iverilog-11.0/verireal.cc
Examining data/iverilog-11.0/verireal.h
Examining data/iverilog-11.0/veriuser.h
Examining data/iverilog-11.0/version.c
Examining data/iverilog-11.0/version_base.h
Examining data/iverilog-11.0/vhdlpp/architec.cc
Examining data/iverilog-11.0/vhdlpp/architec.h
Examining data/iverilog-11.0/vhdlpp/architec_debug.cc
Examining data/iverilog-11.0/vhdlpp/architec_elaborate.cc
Examining data/iverilog-11.0/vhdlpp/architec_emit.cc
Examining data/iverilog-11.0/vhdlpp/compiler.cc
Examining data/iverilog-11.0/vhdlpp/compiler.h
Examining data/iverilog-11.0/vhdlpp/debug.cc
Examining data/iverilog-11.0/vhdlpp/entity.cc
Examining data/iverilog-11.0/vhdlpp/entity.h
Examining data/iverilog-11.0/vhdlpp/entity_elaborate.cc
Examining data/iverilog-11.0/vhdlpp/entity_emit.cc
Examining data/iverilog-11.0/vhdlpp/entity_stream.cc
Examining data/iverilog-11.0/vhdlpp/expression.cc
Examining data/iverilog-11.0/vhdlpp/expression.h
Examining data/iverilog-11.0/vhdlpp/expression_debug.cc
Examining data/iverilog-11.0/vhdlpp/expression_elaborate.cc
Examining data/iverilog-11.0/vhdlpp/expression_emit.cc
Examining data/iverilog-11.0/vhdlpp/expression_evaluate.cc
Examining data/iverilog-11.0/vhdlpp/expression_stream.cc
Examining data/iverilog-11.0/vhdlpp/ivl_assert.h
Examining data/iverilog-11.0/vhdlpp/library.cc
Examining data/iverilog-11.0/vhdlpp/library.h
Examining data/iverilog-11.0/vhdlpp/main.cc
Examining data/iverilog-11.0/vhdlpp/package.cc
Examining data/iverilog-11.0/vhdlpp/package.h
Examining data/iverilog-11.0/vhdlpp/package_emit.cc
Examining data/iverilog-11.0/vhdlpp/parse_api.h
Examining data/iverilog-11.0/vhdlpp/parse_misc.cc
Examining data/iverilog-11.0/vhdlpp/parse_misc.h
Examining data/iverilog-11.0/vhdlpp/parse_types.h
Examining data/iverilog-11.0/vhdlpp/parse_wrap.h
Examining data/iverilog-11.0/vhdlpp/scope.cc
Examining data/iverilog-11.0/vhdlpp/scope.h
Examining data/iverilog-11.0/vhdlpp/sequential.cc
Examining data/iverilog-11.0/vhdlpp/sequential.h
Examining data/iverilog-11.0/vhdlpp/sequential_debug.cc
Examining data/iverilog-11.0/vhdlpp/sequential_elaborate.cc
Examining data/iverilog-11.0/vhdlpp/sequential_emit.cc
Examining data/iverilog-11.0/vhdlpp/std_funcs.cc
Examining data/iverilog-11.0/vhdlpp/std_funcs.h
Examining data/iverilog-11.0/vhdlpp/std_types.cc
Examining data/iverilog-11.0/vhdlpp/std_types.h
Examining data/iverilog-11.0/vhdlpp/subprogram.cc
Examining data/iverilog-11.0/vhdlpp/subprogram.h
Examining data/iverilog-11.0/vhdlpp/subprogram_emit.cc
Examining data/iverilog-11.0/vhdlpp/vhdlint.cc
Examining data/iverilog-11.0/vhdlpp/vhdlint.h
Examining data/iverilog-11.0/vhdlpp/vhdlnum.h
Examining data/iverilog-11.0/vhdlpp/vhdlreal.cc
Examining data/iverilog-11.0/vhdlpp/vhdlreal.h
Examining data/iverilog-11.0/vhdlpp/vsignal.cc
Examining data/iverilog-11.0/vhdlpp/vsignal.h
Examining data/iverilog-11.0/vhdlpp/vtype.cc
Examining data/iverilog-11.0/vhdlpp/vtype.h
Examining data/iverilog-11.0/vhdlpp/vtype_elaborate.cc
Examining data/iverilog-11.0/vhdlpp/vtype_emit.cc
Examining data/iverilog-11.0/vhdlpp/vtype_match.cc
Examining data/iverilog-11.0/vhdlpp/vtype_stream.cc
Examining data/iverilog-11.0/vpi/fastlz.c
Examining data/iverilog-11.0/vpi/fastlz.h
Examining data/iverilog-11.0/vpi/fstapi.c
Examining data/iverilog-11.0/vpi/fstapi.h
Examining data/iverilog-11.0/vpi/libvpi.c
Examining data/iverilog-11.0/vpi/lxt2_write.c
Examining data/iverilog-11.0/vpi/lxt2_write.h
Examining data/iverilog-11.0/vpi/lxt_write.c
Examining data/iverilog-11.0/vpi/lxt_write.h
Examining data/iverilog-11.0/vpi/lz4.c
Examining data/iverilog-11.0/vpi/lz4.h
Examining data/iverilog-11.0/vpi/mt19937int.c
Examining data/iverilog-11.0/vpi/sdf_parse_priv.h
Examining data/iverilog-11.0/vpi/sdf_priv.h
Examining data/iverilog-11.0/vpi/stringheap.c
Examining data/iverilog-11.0/vpi/stringheap.h
Examining data/iverilog-11.0/vpi/sys_clog2.c
Examining data/iverilog-11.0/vpi/sys_convert.c
Examining data/iverilog-11.0/vpi/sys_countdrivers.c
Examining data/iverilog-11.0/vpi/sys_darray.c
Examining data/iverilog-11.0/vpi/sys_deposit.c
Examining data/iverilog-11.0/vpi/sys_display.c
Examining data/iverilog-11.0/vpi/sys_fileio.c
Examining data/iverilog-11.0/vpi/sys_finish.c
Examining data/iverilog-11.0/vpi/sys_fst.c
Examining data/iverilog-11.0/vpi/sys_icarus.c
Examining data/iverilog-11.0/vpi/sys_lxt.c
Examining data/iverilog-11.0/vpi/sys_lxt2.c
Examining data/iverilog-11.0/vpi/sys_plusargs.c
Examining data/iverilog-11.0/vpi/sys_priv.c
Examining data/iverilog-11.0/vpi/sys_priv.h
Examining data/iverilog-11.0/vpi/sys_queue.c
Examining data/iverilog-11.0/vpi/sys_random.c
Examining data/iverilog-11.0/vpi/sys_random.h
Examining data/iverilog-11.0/vpi/sys_random_mti.c
Examining data/iverilog-11.0/vpi/sys_readmem.c
Examining data/iverilog-11.0/vpi/sys_readmem_lex.h
Examining data/iverilog-11.0/vpi/sys_scanf.c
Examining data/iverilog-11.0/vpi/sys_sdf.c
Examining data/iverilog-11.0/vpi/sys_table.c
Examining data/iverilog-11.0/vpi/sys_time.c
Examining data/iverilog-11.0/vpi/sys_vcd.c
Examining data/iverilog-11.0/vpi/sys_vcdoff.c
Examining data/iverilog-11.0/vpi/table_mod.c
Examining data/iverilog-11.0/vpi/table_mod.h
Examining data/iverilog-11.0/vpi/v2005_math.c
Examining data/iverilog-11.0/vpi/v2009_array.c
Examining data/iverilog-11.0/vpi/v2009_bitvec.c
Examining data/iverilog-11.0/vpi/v2009_enum.c
Examining data/iverilog-11.0/vpi/v2009_string.c
Examining data/iverilog-11.0/vpi/v2009_table.c
Examining data/iverilog-11.0/vpi/va_math.c
Examining data/iverilog-11.0/vpi/vams_simparam.c
Examining data/iverilog-11.0/vpi/vcd_priv.c
Examining data/iverilog-11.0/vpi/vcd_priv.h
Examining data/iverilog-11.0/vpi/vcd_priv2.cc
Examining data/iverilog-11.0/vpi/vhdl_table.c
Examining data/iverilog-11.0/vpi/vhdl_textio.c
Examining data/iverilog-11.0/vpi/vpi_debug.c
Examining data/iverilog-11.0/vpi/wavealloca.h
Examining data/iverilog-11.0/vpi_modules.cc
Examining data/iverilog-11.0/vpi_user.h
Examining data/iverilog-11.0/vvp/arith.cc
Examining data/iverilog-11.0/vvp/arith.h
Examining data/iverilog-11.0/vvp/array.cc
Examining data/iverilog-11.0/vvp/array.h
Examining data/iverilog-11.0/vvp/array_common.cc
Examining data/iverilog-11.0/vvp/array_common.h
Examining data/iverilog-11.0/vvp/bufif.cc
Examining data/iverilog-11.0/vvp/bufif.h
Examining data/iverilog-11.0/vvp/class_type.cc
Examining data/iverilog-11.0/vvp/class_type.h
Examining data/iverilog-11.0/vvp/codes.cc
Examining data/iverilog-11.0/vvp/codes.h
Examining data/iverilog-11.0/vvp/compile.cc
Examining data/iverilog-11.0/vvp/compile.h
Examining data/iverilog-11.0/vvp/concat.cc
Examining data/iverilog-11.0/vvp/delay.cc
Examining data/iverilog-11.0/vvp/delay.h
Examining data/iverilog-11.0/vvp/dff.cc
Examining data/iverilog-11.0/vvp/dff.h
Examining data/iverilog-11.0/vvp/draw_tt.c
Examining data/iverilog-11.0/vvp/enum_type.cc
Examining data/iverilog-11.0/vvp/enum_type.h
Examining data/iverilog-11.0/vvp/event.cc
Examining data/iverilog-11.0/vvp/event.h
Examining data/iverilog-11.0/vvp/extend.cc
Examining data/iverilog-11.0/vvp/file_line.cc
Examining data/iverilog-11.0/vvp/island_tran.cc
Examining data/iverilog-11.0/vvp/ivl_dlfcn.h
Examining data/iverilog-11.0/vvp/latch.cc
Examining data/iverilog-11.0/vvp/latch.h
Examining data/iverilog-11.0/vvp/logic.cc
Examining data/iverilog-11.0/vvp/logic.h
Examining data/iverilog-11.0/vvp/main.cc
Examining data/iverilog-11.0/vvp/npmos.cc
Examining data/iverilog-11.0/vvp/npmos.h
Examining data/iverilog-11.0/vvp/parse_misc.cc
Examining data/iverilog-11.0/vvp/parse_misc.h
Examining data/iverilog-11.0/vvp/part.cc
Examining data/iverilog-11.0/vvp/part.h
Examining data/iverilog-11.0/vvp/permaheap.cc
Examining data/iverilog-11.0/vvp/permaheap.h
Examining data/iverilog-11.0/vvp/reduce.cc
Examining data/iverilog-11.0/vvp/resolv.cc
Examining data/iverilog-11.0/vvp/resolv.h
Examining data/iverilog-11.0/vvp/schedule.cc
Examining data/iverilog-11.0/vvp/schedule.h
Examining data/iverilog-11.0/vvp/sfunc.cc
Examining data/iverilog-11.0/vvp/sfunc.h
Examining data/iverilog-11.0/vvp/slab.h
Examining data/iverilog-11.0/vvp/statistics.cc
Examining data/iverilog-11.0/vvp/statistics.h
Examining data/iverilog-11.0/vvp/stop.cc
Examining data/iverilog-11.0/vvp/substitute.cc
Examining data/iverilog-11.0/vvp/symbols.cc
Examining data/iverilog-11.0/vvp/symbols.h
Examining data/iverilog-11.0/vvp/udp.cc
Examining data/iverilog-11.0/vvp/udp.h
Examining data/iverilog-11.0/vvp/ufunc.cc
Examining data/iverilog-11.0/vvp/ufunc.h
Examining data/iverilog-11.0/vvp/vpi_bit.cc
Examining data/iverilog-11.0/vvp/vpi_callback.cc
Examining data/iverilog-11.0/vvp/vpi_cobject.cc
Examining data/iverilog-11.0/vvp/vpi_const.cc
Examining data/iverilog-11.0/vvp/vpi_darray.cc
Examining data/iverilog-11.0/vvp/vpi_event.cc
Examining data/iverilog-11.0/vvp/vpi_iter.cc
Examining data/iverilog-11.0/vvp/vpi_mcd.cc
Examining data/iverilog-11.0/vvp/vpi_modules.cc
Examining data/iverilog-11.0/vvp/vpi_priv.cc
Examining data/iverilog-11.0/vvp/vpi_priv.h
Examining data/iverilog-11.0/vvp/vpi_real.cc
Examining data/iverilog-11.0/vvp/vpi_scope.cc
Examining data/iverilog-11.0/vvp/vpi_signal.cc
Examining data/iverilog-11.0/vvp/vpi_string.cc
Examining data/iverilog-11.0/vvp/vpi_tasks.cc
Examining data/iverilog-11.0/vvp/vpi_time.cc
Examining data/iverilog-11.0/vvp/vpi_vthr_vector.cc
Examining data/iverilog-11.0/vvp/vpip_bin.cc
Examining data/iverilog-11.0/vvp/vpip_format.cc
Examining data/iverilog-11.0/vvp/vpip_hex.cc
Examining data/iverilog-11.0/vvp/vpip_oct.cc
Examining data/iverilog-11.0/vvp/vpip_to_dec.cc
Examining data/iverilog-11.0/vvp/vthread.cc
Examining data/iverilog-11.0/vvp/vthread.h
Examining data/iverilog-11.0/vvp/vvp_cleanup.h
Examining data/iverilog-11.0/vvp/vvp_cobject.cc
Examining data/iverilog-11.0/vvp/vvp_cobject.h
Examining data/iverilog-11.0/vvp/vvp_darray.cc
Examining data/iverilog-11.0/vvp/vvp_darray.h
Examining data/iverilog-11.0/vvp/vvp_island.cc
Examining data/iverilog-11.0/vvp/vvp_island.h
Examining data/iverilog-11.0/vvp/vvp_net.cc
Examining data/iverilog-11.0/vvp/vvp_net.h
Examining data/iverilog-11.0/vvp/vvp_net_sig.cc
Examining data/iverilog-11.0/vvp/vvp_net_sig.h
Examining data/iverilog-11.0/vvp/vvp_object.cc
Examining data/iverilog-11.0/vvp/vvp_object.h
Examining data/iverilog-11.0/vvp/vvp_vpi.cc
Examining data/iverilog-11.0/vvp/vvp_vpi_callback.h
Examining data/iverilog-11.0/vvp/words.cc
Examining data/iverilog-11.0/elab_expr.cc

FINAL RESULTS:

data/iverilog-11.0/driver/main.c:1058:13:  [5] (race) readlink:
  This accepts filename arguments; if an attacker can move those files or
  change the link content, a race condition results. Also, it does not
  terminate with ASCII NUL. (CWE-362, CWE-20). Reconsider approach.
      len = readlink("/proc/self/exe", ivl_root, sizeof ivl_root);
data/iverilog-11.0/design_dump.cc:1637:47:  [4] (race) access:
  This usually indicates a security flaw. If an attacker can change anything
  along the path between the call to access() and the file's actual use
  (e.g., by moving files), the attacker can exploit the race condition
  (CWE-362/CWE-367!). Set up the correct permissions (e.g., using setuid())
  and try to open the file directly.
      o << nature_->name() << "." << nature_->access() << "(";
data/iverilog-11.0/discipline.h:38:59:  [4] (race) access:
  This usually indicates a security flaw. If an attacker can change anything
  along the path between the call to access() and the file's actual use
  (e.g., by moving files), the attacker can exploit the race condition
  (CWE-362/CWE-367!). Set up the correct permissions (e.g., using setuid())
  and try to open the file directly.
      explicit ivl_nature_s(perm_string name, perm_string access);
data/iverilog-11.0/discipline.h:43:19:  [4] (race) access:
  This usually indicates a security flaw. If an attacker can change anything
  along the path between the call to access() and the file's actual use
  (e.g., by moving files), the attacker can exploit the race condition
  (CWE-362/CWE-367!). Set up the correct permissions (e.g., using setuid())
  and try to open the file directly.
      perm_string access() const { return access_; }
data/iverilog-11.0/driver-vpi/main.c:182:3:  [4] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused).
		strcat(*ptr, app);
data/iverilog-11.0/driver-vpi/main.c:219:3:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
		strcpy(*ptr, str);
data/iverilog-11.0/driver-vpi/main.c:592:7:  [4] (shell) system:
  This causes a new program to execute and is difficult to use safely
  (CWE-78). try using a library call that implements the same functionality
  if available.
		if (system(buf)) ++*compile_errors;
data/iverilog-11.0/driver-vpi/main.c:641:9:  [4] (shell) system:
  This causes a new program to execute and is difficult to use safely
  (CWE-78). try using a library call that implements the same functionality
  if available.
	iRet = system(buf);
data/iverilog-11.0/driver/main.c:331:12:  [4] (shell) system:
  This causes a new program to execute and is difficult to use safely
  (CWE-78). try using a library call that implements the same functionality
  if available.
      rc = system(tmp);
data/iverilog-11.0/driver/main.c:339:12:  [4] (shell) system:
  This causes a new program to execute and is difficult to use safely
  (CWE-78). try using a library call that implements the same functionality
  if available.
      rc = system(tmp);
data/iverilog-11.0/driver/main.c:379:7:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
      strcpy(cmd, tmp);
data/iverilog-11.0/driver/main.c:384:6:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
	    strcpy(cmd+ncmd, tmp);
data/iverilog-11.0/driver/main.c:391:12:  [4] (shell) system:
  This causes a new program to execute and is difficult to use safely
  (CWE-78). try using a library call that implements the same functionality
  if available.
      rc = system(cmd);
data/iverilog-11.0/driver/main.c:438:7:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
      strcpy(cmd, tmp);
data/iverilog-11.0/driver/main.c:448:7:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
      strcpy(cmd+ncmd, tmp);
data/iverilog-11.0/driver/main.c:455:6:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
	    strcpy(cmd+ncmd, vv);
data/iverilog-11.0/driver/main.c:463:6:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
	    strcpy(cmd+ncmd, tmp);
data/iverilog-11.0/driver/main.c:470:7:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
      strcpy(cmd+ncmd, tmp);
data/iverilog-11.0/driver/main.c:476:7:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
      strcpy(cmd+ncmd, tmp);
data/iverilog-11.0/driver/main.c:485:7:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
      strcpy(cmd+ncmd, tmp);
data/iverilog-11.0/driver/main.c:493:12:  [4] (shell) system:
  This causes a new program to execute and is difficult to use safely
  (CWE-78). try using a library call that implements the same functionality
  if available.
      rc = system(cmd);
data/iverilog-11.0/driver/main.c:928:11:  [4] (race) access:
  This usually indicates a security flaw. If an attacker can change anything
  along the path between the call to access() and the file's actual use
  (e.g., by moving files), the attacker can exploit the race condition
  (CWE-362/CWE-367!). Set up the correct permissions (e.g., using setuid())
  and try to open the file directly.
      if (access(path, R_OK) == 0)
data/iverilog-11.0/driver/main.c:932:11:  [4] (race) access:
  This usually indicates a security flaw. If an attacker can change anything
  along the path between the call to access() and the file's actual use
  (e.g., by moving files), the attacker can exploit the race condition
  (CWE-362/CWE-367!). Set up the correct permissions (e.g., using setuid())
  and try to open the file directly.
      if (access(path, R_OK) == 0)
data/iverilog-11.0/driver/main.c:958:14:  [4] (race) access:
  This usually indicates a security flaw. If an attacker can change anything
  along the path between the call to access() and the file's actual use
  (e.g., by moving files), the attacker can exploit the race condition
  (CWE-362/CWE-367!). Set up the correct permissions (e.g., using setuid())
  and try to open the file directly.
	    found = access(name, R_OK) == 0;
data/iverilog-11.0/driver/main.c:961:13:  [4] (race) access:
  This usually indicates a security flaw. If an attacker can change anything
  along the path between the call to access() and the file's actual use
  (e.g., by moving files), the attacker can exploit the race condition
  (CWE-362/CWE-367!). Set up the correct permissions (e.g., using setuid())
  and try to open the file directly.
		  found = access(path, R_OK) == 0;
data/iverilog-11.0/driver/main.c:964:12:  [4] (race) access:
  This usually indicates a security flaw. If an attacker can change anything
  along the path between the call to access() and the file's actual use
  (e.g., by moving files), the attacker can exploit the race condition
  (CWE-362/CWE-367!). Set up the correct permissions (e.g., using setuid())
  and try to open the file directly.
			found = access(path, R_OK) == 0;
data/iverilog-11.0/driver/main.c:1013:11:  [4] (race) access:
  This usually indicates a security flaw. If an attacker can change anything
  along the path between the call to access() and the file's actual use
  (e.g., by moving files), the attacker can exploit the race condition
  (CWE-362/CWE-367!). Set up the correct permissions (e.g., using setuid())
  and try to open the file directly.
      if (access(IVL_ROOT, F_OK) != -1) {
data/iverilog-11.0/driver/main.c:1015:6:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
	    strcpy(ivl_root, IVL_ROOT);
data/iverilog-11.0/driver/main.c:1082:7:  [4] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused).
      strcat(ivl_root, s);
data/iverilog-11.0/driver/main.c:1083:7:  [4] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused).
      strcat(ivl_root, ivl_lib_suffix);
data/iverilog-11.0/driver/substit.c:67:5:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
		  strcpy(cp, value);
data/iverilog-11.0/ivlpp/main.c:158:5:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
		  strcpy(buf+1, optarg);
data/iverilog-11.0/ivlpp/main.c:306:3:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
		strcpy(buf+1, optarg);
data/iverilog-11.0/libveriuser/priv.c:49:7:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
      strcpy(string_buffer + string_fill, txt);
data/iverilog-11.0/main.cc:135:6:  [4] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused).
	    strcat(tmp, name);
data/iverilog-11.0/net_link.cc:546:6:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
	    strcpy(name_, tmps.c_str());
data/iverilog-11.0/net_link.cc:557:6:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
	    strcpy(name_, tmps.c_str());
data/iverilog-11.0/parse_misc.cc:60:7:  [4] (format) vfprintf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
      vfprintf(stderr, msg, ap);
data/iverilog-11.0/parse_misc.h:60:83:  [4] (format) printf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
extern void VLerror(const YYLTYPE&loc, const char*msg, ...) __attribute__((format(printf,2,3)));
data/iverilog-11.0/pform.cc:220:16:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
	char *nchar = strcpy(new char [strlen(buf_ptr)+1], buf_ptr);
data/iverilog-11.0/pform.cc:3740:6:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
	    strcpy(cmdline, ivlpp_string);
data/iverilog-11.0/pform.cc:3742:6:  [4] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused).
	    strcat(cmdline, path);
data/iverilog-11.0/pform.cc:3748:17:  [4] (shell) popen:
  This causes a new program to execute and is difficult to use safely
  (CWE-78). try using a library call that implements the same functionality
  if available.
	    vl_input = popen(cmdline, "r");
data/iverilog-11.0/pform_dump.cc:1723:36:  [4] (race) access:
  This usually indicates a security flaw. If an attacker can change anything
  along the path between the call to access() and the file's actual use
  (e.g., by moving files), the attacker can exploit the race condition
  (CWE-362/CWE-367!). Set up the correct permissions (e.g., using setuid())
  and try to open the file directly.
      out << "    access " << nat->access() << ";" << endl;
data/iverilog-11.0/t-dll-api.cc:322:7:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
      strcpy(name_buffer, sn);
data/iverilog-11.0/t-dll-api.cc:325:7:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
      strcpy(tmp, net->name);
data/iverilog-11.0/t-dll-api.cc:1365:7:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
      strcpy(name_buffer, sn);
data/iverilog-11.0/t-dll-api.cc:1368:7:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
      strcpy(tmp, net->name);
data/iverilog-11.0/t-dll-api.cc:2212:6:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
	    strcpy(buf, net->name_);
data/iverilog-11.0/t-dll-api.cc:2218:7:  [4] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused).
      strcat(buf, net->name_);
data/iverilog-11.0/t-dll-api.cc:2455:7:  [4] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused).
      strcat(name_buffer, net->name_);
data/iverilog-11.0/t-dll.cc:674:6:  [4] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf.
	    sprintf(tmp, "%s/%s", basedir, dll_path_);
data/iverilog-11.0/t-dll.cc:2833:6:  [4] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf.
	    sprintf(tmp, "%s/%s", basedir, target_name);
data/iverilog-11.0/tgt-fpga/d-generic-edif.c:55:7:  [4] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused).
      strcat(rec->joined, joint);
data/iverilog-11.0/tgt-fpga/d-generic-edif.c:95:5:  [4] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf.
		  sprintf(jbuf, "(portRef %s)", use_name);
data/iverilog-11.0/tgt-fpga/d-generic-edif.c:105:4:  [4] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf.
			sprintf(jbuf, "(portRef %s_%u)", use_name, pin);
data/iverilog-11.0/tgt-fpga/d-generic-edif.c:252:5:  [4] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf.
		  sprintf(jbuf, "(portRef %s (instanceRef U%u))",
data/iverilog-11.0/tgt-fpga/d-lpm.c:272:4:  [4] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf.
			sprintf(buf, "%s[%u]", name, bit);
data/iverilog-11.0/tgt-fpga/d-lpm.c:416:7:  [4] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf.
      sprintf(name, "fd%s%s%s%s%s%u",
data/iverilog-11.0/tgt-fpga/d-lpm.c:667:7:  [4] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf.
      sprintf(cellname, "%s%u", type, cell_width);
data/iverilog-11.0/tgt-fpga/mangle.c:39:7:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
      strcpy(buf, ivl_scope_basename(net));
data/iverilog-11.0/tgt-fpga/mangle.c:49:7:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
      strcpy(buf+cnt, ivl_logic_basename(net));
data/iverilog-11.0/tgt-fpga/mangle.c:56:7:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
      strcpy(buf+cnt, ivl_lpm_basename(net));
data/iverilog-11.0/tgt-fpga/mangle.c:79:7:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
      strcpy(name, ivl_nexus_name(net));
data/iverilog-11.0/tgt-fpga/xilinx.c:322:4:  [4] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf.
			sprintf(buf, "%s[%u]", name, bit);
data/iverilog-11.0/tgt-fpga/xilinx.c:444:5:  [4] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf.
		  sprintf(name_buf, "%s[%u]", name_str, idx);
data/iverilog-11.0/tgt-pcb/fp_api.h:46:85:  [4] (format) printf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
extern void errormsg(const YYLTYPE&loc, const char*fmt, ...) __attribute__((format (printf, 2, 3)));
data/iverilog-11.0/tgt-pcb/fp_api.h:48:85:  [4] (format) printf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
extern void sorrymsg(const YYLTYPE&loc, const char*fmt, ...) __attribute__((format (printf, 2, 3)));
data/iverilog-11.0/tgt-stub/stub.c:1458:6:  [4] (format) fprintf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
	    fprintf(out, " %" PRIu64 ",%" PRIu64 ",%" PRIu64
data/iverilog-11.0/tgt-vhdl/vhdl.cc:66:9:  [4] (format) vprintf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
   std::vprintf(fmt, args);
data/iverilog-11.0/tgt-vhdl/vhdl.cc:84:12:  [4] (format) vprintf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
      std::vprintf(fmt, args);
data/iverilog-11.0/tgt-vlog95/expr.c:349:5:  [4] (format) fprintf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
		  fprintf(vlog_out, "(%"PRId64, scale);
data/iverilog-11.0/tgt-vlog95/expr.c:351:5:  [4] (format) fprintf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
		  fprintf(vlog_out, "(%u'h%"PRIx64,
data/iverilog-11.0/tgt-vlog95/misc.c:59:5:  [4] (format) fprintf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
		  fprintf(vlog_out, "%"PRIu64, delay);
data/iverilog-11.0/tgt-vlog95/misc.c:397:5:  [4] (format) fprintf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
		  fprintf(vlog_out, "%"PRId64, value);
data/iverilog-11.0/tgt-vlog95/misc.c:414:5:  [4] (format) fprintf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
		  fprintf(vlog_out, "%"PRId64, value);
data/iverilog-11.0/tgt-vlog95/misc.c:797:7:  [4] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused).
      strcat(package_name, name);
data/iverilog-11.0/tgt-vlog95/numbers.c:139:11:  [4] (format) fprintf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
	    else fprintf(vlog_out, "%"PRId32, value);
data/iverilog-11.0/tgt-vlog95/numbers.c:169:5:  [4] (format) fprintf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
		  fprintf(vlog_out, "%"PRId32, value);
data/iverilog-11.0/tgt-vlog95/scope.c:267:13:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
	    (void) strcpy(name, ivl_scope_tname(scope));
data/iverilog-11.0/tgt-vlog95/scope.c:269:13:  [4] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused).
	    (void) strcat(name, ivl_scope_name(scope));
data/iverilog-11.0/tgt-vlog95/scope.c:948:14:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
      (void) strcpy(name_return, name_head);
data/iverilog-11.0/tgt-vlog95/scope.c:949:14:  [4] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused).
      (void) strcat(name_return, name_func);
data/iverilog-11.0/tgt-vlog95/scope.c:950:14:  [4] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused).
      (void) strcat(name_return, name_tail);
data/iverilog-11.0/tgt-vvp/draw_enum.c:51:7:  [4] (format) fprintf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
      fprintf(vvp_out, "%" PRIu64, val);
data/iverilog-11.0/tgt-vvp/draw_net_input.c:219:6:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
	    strcpy(buf, str);
data/iverilog-11.0/tgt-vvp/draw_net_input.c:272:7:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
      strcpy(result, tmp);
data/iverilog-11.0/tgt-vvp/draw_net_input.c:665:5:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
		  strcpy(tmp, pull ? "C8<" : "C4<");
data/iverilog-11.0/tgt-vvp/draw_net_input.c:708:6:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
	    strcpy(nex_private, buf);
data/iverilog-11.0/tgt-vvp/eval_expr.c:307:6:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
	    strcpy(out, in);
data/iverilog-11.0/tgt-vvp/modpath.c:93:6:  [4] (format) fprintf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
	    fprintf(vvp_out,
data/iverilog-11.0/tgt-vvp/vvp_scope.c:83:7:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
      strcpy(out+iout, inp);
data/iverilog-11.0/tgt-vvp/vvp_scope.c:120:7:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
      strcpy(out+iout, inp);
data/iverilog-11.0/veriuser.h:253:30:  [4] (format) printf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
      __attribute__((format (printf,1,2)));
data/iverilog-11.0/veriuser.h:264:30:  [4] (format) printf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
      __attribute__((format (printf,1,2)));
data/iverilog-11.0/veriuser.h:304:30:  [4] (format) printf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
      __attribute__((format (printf,4,5)));
data/iverilog-11.0/veriuser.h:357:30:  [4] (format) printf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
      __attribute__((format (printf,1,2)));
data/iverilog-11.0/vhdlpp/parse_api.h:53:85:  [4] (format) printf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
extern void errormsg(const YYLTYPE&loc, const char*fmt, ...) __attribute__((format (printf, 2, 3)));
data/iverilog-11.0/vhdlpp/parse_api.h:55:85:  [4] (format) printf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
extern void sorrymsg(const YYLTYPE&loc, const char*fmt, ...) __attribute__((format (printf, 2, 3)));
data/iverilog-11.0/vpi/fstapi.c:213:17:  [4] (format) fprintf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
                fprintf(stderr, FST_APIMESS "GetTempPath() failed in " __FILE__ " line %d, exiting.\n", __LINE__);
data/iverilog-11.0/vpi/fstapi.c:221:25:  [4] (format) fprintf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
                        fprintf(stderr, FST_APIMESS "GetTempFileName() failed in " __FILE__ " line %d, exiting.\n", __LINE__);
data/iverilog-11.0/vpi/fstapi.c:831:9:  [4] (format) fprintf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
        fprintf(stderr, FST_APIMESS "Seek to #%" PRId64 " (whence = %d) failed!\n", offset, whence);
data/iverilog-11.0/vpi/fstapi.c:949:1:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
strcpy(vbuf, FST_WRITER_STR);
data/iverilog-11.0/vpi/fstapi.c:955:1:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
strcpy(dbuf, asctime(localtime(&walltime)));
data/iverilog-11.0/vpi/fstapi.c:1714:1:  [4] (format) fprintf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
fprintf(stderr, FST_APIMESS "value chains: %d\n", cnt);
data/iverilog-11.0/vpi/fstapi.c:1790:17:  [4] (format) fprintf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
                fprintf(stderr, FST_APIMESS "<< dump file size limit reached, stopping dumping >>\n");
data/iverilog-11.0/vpi/fstapi.c:2147:17:  [4] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf.
                sprintf(fnam, "%s.hier", xc->filename);
data/iverilog-11.0/vpi/fstapi.c:2179:25:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
                        strcpy(hf, xc->filename);
data/iverilog-11.0/vpi/fstapi.c:2242:9:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
        strcpy(hf, xc->filename);
data/iverilog-11.0/vpi/fstapi.c:2386:9:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
        strcpy(path2, path);
data/iverilog-11.0/vpi/fstapi.c:2560:17:  [4] (format) fprintf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
                fprintf(stderr, FST_APIMESS "fstWriterSetParallelMode(), FST_WRITER_PARALLEL not enabled during compile, exiting.\n");
data/iverilog-11.0/vpi/fstapi.c:2826:19:  [4] (format) sprintf:
  Potential format string problem (CWE-134). Make format string constant.
	elem_count_len = sprintf(elem_count_buf, "%" PRIu32, elem_count);
data/iverilog-11.0/vpi/fstapi.c:2885:2:  [4] (format) fprintf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
	fprintf(stderr, FST_APIMESS "fstWriterCreateEnumTable() total_len: %d, pos: %d\n", total_len, pos);
data/iverilog-11.0/vpi/fstapi.c:2886:2:  [4] (format) fprintf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
	fprintf(stderr, FST_APIMESS "*%s*\n", attr_str);
data/iverilog-11.0/vpi/fstapi.c:2947:41:  [4] (format) fprintf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
                                        fprintf(stderr, FST_APIMESS "Could not realloc() in fstWriterEmitValueChange, exiting.\n");
data/iverilog-11.0/vpi/fstapi.c:3073:33:  [4] (format) fprintf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
                                fprintf(stderr,
data/iverilog-11.0/vpi/fstapi.c:3122:33:  [4] (format) fprintf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
                                fprintf(stderr,
data/iverilog-11.0/vpi/fstapi.c:3182:33:  [4] (format) fprintf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
                                fprintf(stderr, FST_APIMESS "Could not realloc() in fstWriterEmitVariableLengthValueChange, exiting.\n");
data/iverilog-11.0/vpi/fstapi.c:3427:9:  [4] (format) fprintf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
        fprintf(stderr, FST_APIMESS "Seek to #%" PRId64 " (whence = %d) failed!\n", offset, whence);
data/iverilog-11.0/vpi/fstapi.c:3566:17:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
                strcpy(xc->curr_flat_hier_nam + chl + 1, nam);
data/iverilog-11.0/vpi/fstapi.c:3570:17:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
                strcpy(xc->curr_flat_hier_nam, nam);
data/iverilog-11.0/vpi/fstapi.c:3932:9:  [4] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf.
        sprintf(fnam, "%s.hier_%d_%p", xc->filename, getpid(), (void *)xc);
data/iverilog-11.0/vpi/fstapi.c:4563:9:  [4] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf.
        sprintf(hf, "%s.upk_%d_%p", xc->filename, getpid(), (void *)xc);
data/iverilog-11.0/vpi/fstapi.c:4747:49:  [4] (format) fprintf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
                                                fprintf(stderr, FST_APIMESS "fstReaderInit(), geom uncompress rc = %d, exiting.\n", rc);
data/iverilog-11.0/vpi/fstapi.c:5038:17:  [4] (format) fprintf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
                fprintf(stderr, FST_APIMESS "<< EOF >>\n");
data/iverilog-11.0/vpi/fstapi.c:5077:9:  [4] (format) fprintf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
        fprintf(stderr, FST_APIMESS "sec: %u seclen: %d begtim: %d endtim: %d\n",
data/iverilog-11.0/vpi/fstapi.c:5079:9:  [4] (format) fprintf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
        fprintf(stderr, FST_APIMESS "mem_required_for_traversal: %d\n", (int)mem_required_for_traversal);
data/iverilog-11.0/vpi/fstapi.c:5097:9:  [4] (format) fprintf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
        fprintf(stderr, FST_APIMESS "time section unc: %d, com: %d (%d items)\n",
data/iverilog-11.0/vpi/fstapi.c:5117:25:  [4] (format) fprintf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
                        fprintf(stderr, FST_APIMESS "fstReaderIterBlocks2(), tsec uncompress rc = %d, exiting.\n", rc);
data/iverilog-11.0/vpi/fstapi.c:5173:58:  [4] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf.
                                                wx_len = sprintf(wx_buf, "$dump%s $end\n", (xc->blackout_activity[cur_blackout++]) ? "on" : "off");
data/iverilog-11.0/vpi/fstapi.c:5195:41:  [4] (format) fprintf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
                                        fprintf(stderr, FST_APIMESS "fstReaderIterBlocks2(), frame uncompress rc: %d, exiting.\n", rc);
data/iverilog-11.0/vpi/fstapi.c:5335:82:  [4] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf.
                                                                        wx_len = sprintf(wx_buf, "r%.16g %s\n", d, vcdid_buf);
data/iverilog-11.0/vpi/fstapi.c:5358:9:  [4] (format) fprintf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
        fprintf(stderr, FST_APIMESS "frame_uclen: %d, frame_clen: %d, frame_maxhandle: %d\n",
data/iverilog-11.0/vpi/fstapi.c:5360:9:  [4] (format) fprintf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
        fprintf(stderr, FST_APIMESS "vc_maxhandle: %d, packtype: %c\n", (int)vc_maxhandle, packtype);
data/iverilog-11.0/vpi/fstapi.c:5368:9:  [4] (format) fprintf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
        fprintf(stderr, FST_APIMESS "indx_pos: %d (%d bytes)\n", (int)indx_pos, (int)chain_clen);
data/iverilog-11.0/vpi/fstapi.c:5487:9:  [4] (format) fprintf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
        fprintf(stderr, FST_APIMESS "decompressed chain idx len: %" PRIu32 "\n", idx);
data/iverilog-11.0/vpi/fstapi.c:5555:41:  [4] (format) fprintf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
                                        fprintf(stderr, FST_APIMESS "fstReaderIterBlocks2(), fac: %d clen: %d (rc=%d), exiting.\n", (int)i, (int)val, rc);
data/iverilog-11.0/vpi/fstapi.c:5609:58:  [4] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf.
                                                wx_len = sprintf(wx_buf, "$dump%s $end\n", (xc->blackout_activity[cur_blackout++]) ? "on" : "off");
data/iverilog-11.0/vpi/fstapi.c:6109:1:  [4] (format) fprintf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
fprintf(stderr, FST_APIMESS "rvat sec: %u seclen: %d begtim: %d endtim: %d\n",
data/iverilog-11.0/vpi/fstapi.c:6111:1:  [4] (format) fprintf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
fprintf(stderr, FST_APIMESS "mem_required_for_traversal: %d\n", (int)mem_required_for_traversal);
data/iverilog-11.0/vpi/fstapi.c:6130:1:  [4] (format) fprintf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
fprintf(stderr, FST_APIMESS "time section unc: %d, com: %d (%d items)\n",
data/iverilog-11.0/vpi/fstapi.c:6147:17:  [4] (format) fprintf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
                fprintf(stderr, FST_APIMESS "fstReaderGetValueFromHandleAtTime(), tsec uncompress rc = %d, exiting.\n", rc);
data/iverilog-11.0/vpi/fstapi.c:6195:17:  [4] (format) fprintf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
                fprintf(stderr, FST_APIMESS "fstReaderGetValueFromHandleAtTime(), frame decompress rc: %d, exiting.\n", rc);
data/iverilog-11.0/vpi/fstapi.c:6206:1:  [4] (format) fprintf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
fprintf(stderr, FST_APIMESS "frame_uclen: %d, frame_clen: %d, frame_maxhandle: %d\n",
data/iverilog-11.0/vpi/fstapi.c:6208:1:  [4] (format) fprintf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
fprintf(stderr, FST_APIMESS "vc_maxhandle: %d\n", (int)xc->rvat_vc_maxhandle);
data/iverilog-11.0/vpi/fstapi.c:6216:1:  [4] (format) fprintf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
fprintf(stderr, FST_APIMESS "indx_pos: %d (%d bytes)\n", (int)indx_pos, (int)chain_clen);
data/iverilog-11.0/vpi/fstapi.c:6327:1:  [4] (format) fprintf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
fprintf(stderr, FST_APIMESS "decompressed chain idx len: %" PRIu32 "\n", idx);
data/iverilog-11.0/vpi/fstapi.c:6387:25:  [4] (format) fprintf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
                        fprintf(stderr, FST_APIMESS "fstReaderGetValueFromHandleAtTime(), rvat decompress clen: %d (rc=%d), exiting.\n", (int)xc->rvat_chain_len, rc);
data/iverilog-11.0/vpi/libvpi.c:189:37:  [4] (format) vprintf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
      PLI_INT32 rv = vpip_routines->vprintf(fmt, ap);
data/iverilog-11.0/vpi/libvpi.c:196:29:  [4] (format) vprintf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
      return vpip_routines->vprintf(fmt, ap);
data/iverilog-11.0/vpi/lxt2_write.c:489:1:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
strcpy(s->name=(char *)malloc((s->namlen=strlen(name))+1),name);
data/iverilog-11.0/vpi/lxt2_write.c:546:1:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
strcpy(lt->compress_fac_str, str);
data/iverilog-11.0/vpi/lxt2_write.c:1032:2:  [4] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf.
	sprintf(tname, "%s_%03u.lxt", lt->lxtname, ++lt->break_number);
data/iverilog-11.0/vpi/lxt2_write.c:1663:3:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
		strcpy(vcopy, d_buf);
data/iverilog-11.0/vpi/lxt2_write.c:1743:3:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
		strcpy(vcopy, value);
data/iverilog-11.0/vpi/lxt2_write.c:1814:2:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
	strcpy(vfix, value);
data/iverilog-11.0/vpi/lxt2_write.c:1825:3:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
		strcpy(vfix+lendelta, value);
data/iverilog-11.0/vpi/lxt2_write.c:1965:4:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
			strcpy(vcopy, vpnt);
data/iverilog-11.0/vpi/lxt_write.c:553:1:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
strcpy(s->name=(char *)malloc((s->namlen=strlen(name))+1),name);
data/iverilog-11.0/vpi/lxt_write.c:610:1:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
strcpy(lt->compress_fac_str, str);
data/iverilog-11.0/vpi/lxt_write.c:1934:6:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
					strcpy(vcopy, vpnt);
data/iverilog-11.0/vpi/lxt_write.c:2613:7:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
						strcpy(vcopy, vpnt);
data/iverilog-11.0/vpi/stringheap.c:55:7:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
      strcpy(res, txt);
data/iverilog-11.0/vpi/sys_display.c:59:18:  [4] (format) vfprintf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
	    if (fp) r = vfprintf(fp, fmt, ap);
data/iverilog-11.0/vpi/sys_display.c:224:5:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
    strcpy(rtn, value);
data/iverilog-11.0/vpi/sys_display.c:279:3:  [4] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused).
  strcat(rtn, timeformat_info.suff);
data/iverilog-11.0/vpi/sys_display.c:291:3:  [4] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf.
  sprintf(rtn, "%0.*f%s", prec, value, timeformat_info.suff);
data/iverilog-11.0/vpi/sys_display.c:311:3:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
  strcpy(result, fmtb);
data/iverilog-11.0/vpi/sys_display.c:375:15:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
              strcpy(cp+pad, value.value.str);
data/iverilog-11.0/vpi/sys_display.c:389:27:  [4] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf.
          if (ljust == 0) sprintf(result, "%*s", width, cp);
data/iverilog-11.0/vpi/sys_display.c:390:16:  [4] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf.
          else sprintf(result, "%-*s", width, cp);
data/iverilog-11.0/vpi/sys_display.c:480:11:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
          strcpy(cpb+pad, cp);
data/iverilog-11.0/vpi/sys_display.c:495:27:  [4] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf.
          if (ljust == 0) sprintf(result, "%*s", width, tbuf);
data/iverilog-11.0/vpi/sys_display.c:496:16:  [4] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf.
          else sprintf(result, "%-*s", width, tbuf);
data/iverilog-11.0/vpi/sys_display.c:543:6:  [4] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf.
			  sprintf(result, "%s", "nan");
data/iverilog-11.0/vpi/sys_display.c:545:6:  [4] (format) sprintf:
  Potential format string problem (CWE-134). Make format string constant.
			  sprintf(result, fmtb+1, value.value.real);
data/iverilog-11.0/vpi/sys_display.c:547:11:  [4] (format) sprintf:
  Potential format string problem (CWE-134). Make format string constant.
          sprintf(result, fmtb+1, value.value.real);
data/iverilog-11.0/vpi/sys_display.c:578:25:  [4] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf.
        if (ljust == 0) sprintf(result, "%*s", width, cp);
data/iverilog-11.0/vpi/sys_display.c:579:14:  [4] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf.
        else sprintf(result, "%-*s", width, cp);
data/iverilog-11.0/vpi/sys_display.c:612:27:  [4] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf.
          if (ljust == 0) sprintf(result, "%*s", width, value.value.str);
data/iverilog-11.0/vpi/sys_display.c:613:16:  [4] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf.
          else sprintf(result, "%-*s", width, value.value.str);
data/iverilog-11.0/vpi/sys_display.c:708:15:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
              strcpy(cp+pad, tbuf);
data/iverilog-11.0/vpi/sys_display.c:719:27:  [4] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf.
          if (ljust == 0) sprintf(result, "%*s", width, cp);
data/iverilog-11.0/vpi/sys_display.c:720:16:  [4] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf.
          else sprintf(result, "%-*s", width, cp);
data/iverilog-11.0/vpi/sys_display.c:807:13:  [4] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused).
            strcat(rbuf, tbuf);
data/iverilog-11.0/vpi/sys_display.c:810:27:  [4] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf.
          if (ljust == 0) sprintf(result, "%*s", width, rbuf);
data/iverilog-11.0/vpi/sys_display.c:811:16:  [4] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf.
          else sprintf(result, "%-*s", width, rbuf);
data/iverilog-11.0/vpi/sys_display.c:949:7:  [4] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf.
      sprintf(*rtn, "%*s", size, val.value.str);
data/iverilog-11.0/vpi/sys_display.c:996:11:  [4] (format) sprintf:
  Potential format string problem (CWE-134). Make format string constant.
          sprintf(buf, compatible_flag ? "%g" : "%#g", value.value.real);
data/iverilog-11.0/vpi/sys_display.c:1035:9:  [4] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf.
        sprintf(rtn+size-1, "%*s", width, buf);
data/iverilog-11.0/vpi/sys_display.c:1052:9:  [4] (format) sprintf:
  Potential format string problem (CWE-134). Make format string constant.
        sprintf(buf, compatible_flag ? "%g" : "%#g", value.value.real);
data/iverilog-11.0/vpi/sys_display.c:1080:11:  [4] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf.
          sprintf(rtn+size-1, "%*s", width, value.value.str);
data/iverilog-11.0/vpi/sys_display.c:1088:11:  [4] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf.
          sprintf(rtn+size-1, "%*s", width, value.value.str);
data/iverilog-11.0/vpi/sys_display.c:1096:11:  [4] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf.
          sprintf(rtn+size-1, "%*s", width, value.value.str);
data/iverilog-11.0/vpi/sys_display.c:1108:11:  [4] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf.
          sprintf(rtn+size-1, "%*s", width, buf);
data/iverilog-11.0/vpi/sys_fst.c:403:6:  [4] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf.
	    sprintf(scale_buf, "\t%u%s\n", scale, units_names[udx]);
data/iverilog-11.0/vpi/sys_fst.c:600:5:  [4] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf.
		  sprintf(escname, "\\%s", name);
data/iverilog-11.0/vpi/sys_fst.c:621:5:  [4] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf.
		  sprintf(buf, "%s [%i:%i]", escname,
data/iverilog-11.0/vpi/sys_lxt.c:146:6:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
	    strcpy(n2, t->name);
data/iverilog-11.0/vpi/sys_lxt.c:157:7:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
      strcpy(n2, name);
data/iverilog-11.0/vpi/sys_lxt2.c:202:6:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
	    strcpy(n2, t->name);
data/iverilog-11.0/vpi/sys_lxt2.c:213:7:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
      strcpy(n2, name);
data/iverilog-11.0/vpi/sys_priv.c:120:7:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
      strcpy(new_path, path);
data/iverilog-11.0/vpi/sys_priv.c:122:7:  [4] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused).
      strcat(new_path, suff);
data/iverilog-11.0/vpi/v2005_math.c:151:9:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
        strcpy(msg, basemsg);
data/iverilog-11.0/vpi/v2005_math.c:152:9:  [4] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused).
        strcat(msg, post);
data/iverilog-11.0/vpi/va_math.c:178:9:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
        strcpy(msg, basemsg);
data/iverilog-11.0/vpi/va_math.c:179:9:  [4] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused).
        strcat(msg, post);
data/iverilog-11.0/vpi/vhdl_textio.c:243:8:  [4] (buffer) sscanf:
  The scanf() family's %s operation, without a limit specification, permits
  buffer overflows (CWE-120, CWE-20). Specify a limit to %s, or use a
  different input function. If the scanf format is influenceable by an
  attacker, it's exploitable.
    if(sscanf(string, format_str, buf, &processed_chars) != 1)
data/iverilog-11.0/vpi_user.h:431:30:  [4] (format) printf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
      __attribute__((format (printf,2,3)));
data/iverilog-11.0/vpi_user.h:437:30:  [4] (format) printf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
      __attribute__((format (printf,1,2)));
data/iverilog-11.0/vpi_user.h:718:19:  [4] (format) vprintf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
    PLI_INT32   (*vprintf)(const char*, va_list);
data/iverilog-11.0/vvp/symbols.cc:53:7:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
      strcpy(res, str);
data/iverilog-11.0/vvp/vpi_callback.cc:875:5:  [4] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf.
		  sprintf(rbuf, "%s", "nan");
data/iverilog-11.0/vvp/vpi_callback.cc:882:6:  [4] (format) sprintf:
  Potential format string problem (CWE-134). Make format string constant.
	    sprintf(rbuf, "%" PRIx64, (uint64_t)vlg_round(rval));
data/iverilog-11.0/vvp/vpi_const.cc:135:6:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
	    strcpy(rbuf, value_);
data/iverilog-11.0/vvp/vpi_mcd.cc:204:12:  [4] (format) vsnprintf:
  If format strings can be influenced by an attacker, they can be exploited,
  and note that sprintf variations do not always \0-terminate (CWE-134). Use
  a constant for the format specification.
      rc = vsnprintf(buffer, sizeof buffer, fmt, ap);
data/iverilog-11.0/vvp/vpi_mcd.cc:213:11:  [4] (format) vsnprintf:
  If format strings can be influenced by an attacker, they can be exploited,
  and note that sprintf variations do not always \0-terminate (CWE-134). Use
  a constant for the format specification.
	    rc = vsnprintf(buf_ptr, rc+1, fmt, saved_ap);
data/iverilog-11.0/vvp/vpi_modules.cc:117:7:  [4] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused).
      strcat(s, "\\lib\\ivl" IVL_SUFFIX);
data/iverilog-11.0/vvp/vpi_modules.cc:180:8:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
	      strcpy(buf,name);   /* yes copy the name into the buffer */
data/iverilog-11.0/vvp/vpi_priv.cc:155:7:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
      strcpy(res, str);
data/iverilog-11.0/vvp/vpi_priv.cc:955:6:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
	    strcpy(rbuf, val.c_str());
data/iverilog-11.0/vvp/vpi_priv.cc:1356:7:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
      strcpy(&name_buf[0], name);
data/iverilog-11.0/vvp/vpi_priv.cc:1412:7:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
      strcpy(&name_buf[0], name);
data/iverilog-11.0/vvp/vpi_scope.cc:177:7:  [4] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused).
      strcat(buf, ref->scope_name());
data/iverilog-11.0/vvp/vpi_signal.cc:99:16:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
      if (res) strcpy(res,s1);
data/iverilog-11.0/vvp/vpi_signal.cc:122:6:  [4] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused).
	    strcat(res, bn);
data/iverilog-11.0/vvp/vpi_signal.cc:126:7:  [4] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused).
      strcat(res, name);
data/iverilog-11.0/vvp/vpi_signal.cc:129:6:  [4] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused).
	    strcat(res, index);
data/iverilog-11.0/vvp/vpi_string.cc:73:6:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
	    strcpy(rbuf, str.c_str());
data/iverilog-11.0/vvp/vpi_time.cc:165:6:  [4] (format) sprintf:
  Potential format string problem (CWE-134). Make format string constant.
	    sprintf(rbuf, "%" TIME_FMT_U, simtime);
data/iverilog-11.0/vvp/vpi_time.cc:170:6:  [4] (format) sprintf:
  Potential format string problem (CWE-134). Make format string constant.
	    sprintf(rbuf, "%" TIME_FMT_O, simtime);
data/iverilog-11.0/vvp/vpi_time.cc:175:6:  [4] (format) sprintf:
  Potential format string problem (CWE-134). Make format string constant.
	    sprintf(rbuf, "%" TIME_FMT_X, simtime);
data/iverilog-11.0/vvp/vpi_vthr_vector.cc:128:5:  [4] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf.
		  sprintf(rbuf, "%s", "nan");
data/iverilog-11.0/vvp/vpi_vthr_vector.cc:135:6:  [4] (format) sprintf:
  Potential format string problem (CWE-134). Make format string constant.
	    sprintf(rbuf, "%" PRIo64, (uint64_t)vlg_round(val));
data/iverilog-11.0/vvp/vpi_vthr_vector.cc:140:6:  [4] (format) sprintf:
  Potential format string problem (CWE-134). Make format string constant.
	    sprintf(rbuf, "%" PRIx64, (uint64_t)vlg_round(val));
data/iverilog-11.0/vvp/vpi_vthr_vector.cc:265:6:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
	    strcpy(rbuf, val.c_str());
data/iverilog-11.0/cadpli/ivl_dlfcn.h:36:18:  [3] (misc) LoadLibrary:
  Ensure that the full path to the library is specified, or current directory
  may be used (CWE-829, CWE-20). Use registry entry or GetWindowsDirectory to
  find library path, if you aren't already.
{ return (void *)LoadLibrary(name); }
data/iverilog-11.0/driver-vpi/main.c:494:16:  [3] (buffer) getenv:
  Environment variables are untrustable input if they can be set by an
  attacker. They can have any content and length, and the same variable can
  be set more than once (CWE-807, CWE-20). Check environment variables
  carefully before using them.
	append(&path, getenv("PATH"));
data/iverilog-11.0/driver/main.c:79:12:  [3] (buffer) getopt:
  Some older implementations do not protect against internal buffer overflows
  (CWE-120, CWE-20). Check implementation on installation, or limit the size
  of all string inputs.
extern int getopt(int argc, char*argv[], const char*fmt);
data/iverilog-11.0/driver/main.c:289:27:  [3] (buffer) getenv:
  Environment variables are untrustable input if they can be set by an
  attacker. They can have any content and length, and the same variable can
  be set more than once (CWE-807, CWE-20). Check environment variables
  carefully before using them.
      const char*tmpdir = getenv("TMP");
data/iverilog-11.0/driver/main.c:291:15:  [3] (buffer) getenv:
  Environment variables are untrustable input if they can be set by an
  attacker. They can have any content and length, and the same variable can
  be set more than once (CWE-807, CWE-20). Check environment variables
  carefully before using them.
	    tmpdir = getenv("TMPDIR");
data/iverilog-11.0/driver/main.c:293:15:  [3] (buffer) getenv:
  Environment variables are untrustable input if they can be set by an
  attacker. They can have any content and length, and the same variable can
  be set more than once (CWE-807, CWE-20). Check environment variables
  carefully before using them.
	    tmpdir = getenv("TEMP");
data/iverilog-11.0/driver/main.c:305:7:  [3] (random) srand:
  This function is not sufficiently random for security-related functions
  such as key and nonce creation (CWE-327). Use a more secure technique for
  acquiring random values.
      srand(getpid());
data/iverilog-11.0/driver/main.c:344:14:  [3] (buffer) getenv:
  Environment variables are untrustable input if they can be set by an
  attacker. They can have any content and length, and the same variable can
  be set more than once (CWE-807, CWE-20). Check environment variables
  carefully before using them.
      if ( ! getenv("IVERILOG_ICONFIG")) {
data/iverilog-11.0/driver/main.c:395:14:  [3] (buffer) getenv:
  Environment variables are untrustable input if they can be set by an
  attacker. They can have any content and length, and the same variable can
  be set more than once (CWE-807, CWE-20). Check environment variables
  carefully before using them.
      if ( ! getenv("IVERILOG_ICONFIG")) {
data/iverilog-11.0/driver/main.c:494:14:  [3] (buffer) getenv:
  Environment variables are untrustable input if they can be set by an
  attacker. They can have any content and length, and the same variable can
  be set more than once (CWE-807, CWE-20). Check environment variables
  carefully before using them.
      if ( ! getenv("IVERILOG_ICONFIG")) {
data/iverilog-11.0/driver/main.c:883:19:  [3] (buffer) getenv:
  Environment variables are untrustable input if they can be set by an
  attacker. They can have any content and length, and the same variable can
  be set more than once (CWE-807, CWE-20). Check environment variables
  carefully before using them.
      char *var = getenv("IVERILOG_VPI_MODULE_PATH");
data/iverilog-11.0/driver/main.c:1125:28:  [3] (buffer) getenv:
  Environment variables are untrustable input if they can be set by an
  attacker. They can have any content and length, and the same variable can
  be set more than once (CWE-807, CWE-20). Check environment variables
  carefully before using them.
      if ( (iconfig_path = getenv("IVERILOG_ICONFIG")) ) {
data/iverilog-11.0/driver/main.c:1157:21:  [3] (buffer) getopt:
  Some older implementations do not protect against internal buffer overflows
  (CWE-120, CWE-20). Check implementation on installation, or limit the size
  of all string inputs.
      while ((opt = getopt(argc, argv, "B:c:D:d:Ef:g:hl:I:iL:M:m:N:o:P:p:Ss:T:t:uvVW:y:Y:")) != EOF) {
data/iverilog-11.0/driver/substit.c:50:13:  [3] (buffer) getenv:
  Environment variables are untrustable input if they can be set by an
  attacker. They can have any content and length, and the same variable can
  be set more than once (CWE-807, CWE-20). Check environment variables
  carefully before using them.
		  value = getenv(name);
data/iverilog-11.0/ivlpp/main.c:52:12:  [3] (buffer) getopt:
  Some older implementations do not protect against internal buffer overflows
  (CWE-120, CWE-20). Check implementation on installation, or limit the size
  of all string inputs.
extern int getopt(int argc, char*argv[], const char*fmt);
data/iverilog-11.0/ivlpp/main.c:289:19:  [3] (buffer) getopt:
  Some older implementations do not protect against internal buffer overflows
  (CWE-120, CWE-20). Check implementation on installation, or limit the size
  of all string inputs.
      while ((opt=getopt(argc, argv, "F:f:K:Lo:p:P:vVW:")) != EOF) switch (opt) {
data/iverilog-11.0/libveriuser/veriusertfs.c:85:33:  [3] (buffer) getenv:
  Environment variables are untrustable input if they can be set by an
  attacker. They can have any content and length, and the same variable can
  be set more than once (CWE-807, CWE-20). Check environment variables
  carefully before using them.
      if (!pli_trace && (path = getenv("PLI_TRACE"))) {
data/iverilog-11.0/main.cc:66:16:  [3] (buffer) getopt:
  Some older implementations do not protect against internal buffer overflows
  (CWE-120, CWE-20). Check implementation on installation, or limit the size
  of all string inputs.
extern "C" int getopt(int argc, char*argv[], const char*fmt);
data/iverilog-11.0/main.cc:72:16:  [3] (buffer) getopt:
  Some older implementations do not protect against internal buffer overflows
  (CWE-120, CWE-20). Check implementation on installation, or limit the size
  of all string inputs.
extern "C" int getopt(int argc, char*argv[], const char*fmt);
data/iverilog-11.0/main.cc:916:13:  [3] (buffer) getenv:
  Environment variables are untrustable input if they can be set by an
  attacker. They can have any content and length, and the same variable can
  be set more than once (CWE-807, CWE-20). Check environment variables
  carefully before using them.
      if( ::getenv("IVL_WAIT_FOR_DEBUGGER") != 0 ) {
data/iverilog-11.0/main.cc:933:21:  [3] (buffer) getopt:
  Some older implementations do not protect against internal buffer overflows
  (CWE-120, CWE-20). Check implementation on installation, or limit the size
  of all string inputs.
      while ((opt = getopt(argc, argv, "C:F:f:hN:P:p:Vv")) != EOF) switch (opt) {
data/iverilog-11.0/t-dll.cc:43:36:  [3] (misc) LoadLibrary:
  Ensure that the full path to the library is specified, or current directory
  may be used (CWE-829, CWE-20). Use registry entry or GetWindowsDirectory to
  find library path, if you aren't already.
      ivl_dll_t res =  (ivl_dll_t) LoadLibrary(name);
data/iverilog-11.0/vhdlpp/main.cc:137:20:  [3] (buffer) getopt:
  Some older implementations do not protect against internal buffer overflows
  (CWE-120, CWE-20). Check implementation on installation, or limit the size
  of all string inputs.
      while ( (opt=getopt(argc, argv, "D:L:vVw:")) != EOF) switch (opt) {
data/iverilog-11.0/vpi/fstapi.c:218:27:  [3] (tmpfile) GetTempFileName:
  Temporary file race condition in certain cases (e.g., if run as SYSTEM in
  many versions of Windows) (CWE-377).
                uRetVal = GetTempFileName(lpTempPathBuffer, TEXT("FSTW"), 0, szTempFileName);
data/iverilog-11.0/vpi/fstapi.c:306:8:  [3] (buffer) realpath:
  This function does not protect against buffer overflows, and some
  implementations can overflow internally (CWE-120/CWE-785!). Ensure that the
  destination buffer is at least of size MAXPATHLEN, andto protect against
  implementation problems, the input argument should also be checked to
  ensure it is no larger than MAXPATHLEN.
return(realpath(path, resolved_path));
data/iverilog-11.0/vpi/sys_lxt2.c:486:11:  [3] (buffer) getenv:
  Environment variables are untrustable input if they can be set by an
  attacker. They can have any content and length, and the same variable can
  be set more than once (CWE-807, CWE-20). Check environment variables
  carefully before using them.
      if (getenv("LXT_FILE_SIZE_LIMIT")) {
data/iverilog-11.0/vpi/sys_lxt2.c:487:32:  [3] (buffer) getenv:
  Environment variables are untrustable input if they can be set by an
  attacker. They can have any content and length, and the same variable can
  be set more than once (CWE-807, CWE-20). Check environment variables
  carefully before using them.
	    const char*limit_string = getenv("LXT_FILE_SIZE_LIMIT");
data/iverilog-11.0/vpi/sys_table.c:70:16:  [3] (buffer) getenv:
  Environment variables are untrustable input if they can be set by an
  attacker. They can have any content and length, and the same variable can
  be set more than once (CWE-807, CWE-20). Check environment variables
  carefully before using them.
      dumper = getenv("IVERILOG_DUMPER");
data/iverilog-11.0/vvp/ivl_dlfcn.h:43:22:  [3] (misc) LoadLibrary:
  Ensure that the full path to the library is specified, or current directory
  may be used (CWE-829, CWE-20). Use registry entry or GetWindowsDirectory to
  find library path, if you aren't already.
      return (void *)LoadLibrary(full_name);
data/iverilog-11.0/vvp/main.cc:54:16:  [3] (buffer) getopt:
  Some older implementations do not protect against internal buffer overflows
  (CWE-120, CWE-20). Check implementation on installation, or limit the size
  of all string inputs.
extern "C" int getopt(int argc, char*argv[], const char*fmt);
data/iverilog-11.0/vvp/main.cc:265:13:  [3] (buffer) getenv:
  Environment variables are untrustable input if they can be set by an
  attacker. They can have any content and length, and the same variable can
  be set more than once (CWE-807, CWE-20). Check environment variables
  carefully before using them.
      if( ::getenv("VVP_WAIT_FOR_DEBUGGER") != 0 ) {
data/iverilog-11.0/vvp/main.cc:281:21:  [3] (buffer) getopt:
  Some older implementations do not protect against internal buffer overflows
  (CWE-120, CWE-20). Check implementation on installation, or limit the size
  of all string inputs.
      while ((opt = getopt(argc, argv, "+hil:M:m:nNsvV")) != EOF) switch (opt) {
data/iverilog-11.0/vvp/main.cc:369:23:  [3] (buffer) getenv:
  Environment variables are untrustable input if they can be set by an
  attacker. They can have any content and length, and the same variable can
  be set more than once (CWE-807, CWE-20). Check environment variables
  carefully before using them.
      if (char*path = getenv("VVP_DEBUG")) {
data/iverilog-11.0/vvp/vpi_modules.cc:67:25:  [3] (buffer) getenv:
  Environment variables are untrustable input if they can be set by an
  attacker. They can have any content and length, and the same variable can
  be set more than once (CWE-807, CWE-20). Check environment variables
  carefully before using them.
      if (char *var = ::getenv("IVERILOG_VPI_MODULE_PATH")) {
data/iverilog-11.0/vvp/vpi_priv.cc:585:27:  [3] (buffer) getenv:
  Environment variables are untrustable input if they can be set by an
  attacker. They can have any content and length, and the same variable can
  be set more than once (CWE-807, CWE-20). Check environment variables
  carefully before using them.
    if (const char*path = getenv("VPI_TRACE"))  {
data/iverilog-11.0/cadpli/ivl_dlfcn.h:46:10:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
  static char msg[256];
data/iverilog-11.0/dosify.c:42:15:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
      ifile = fopen(argv[1], "rb");
data/iverilog-11.0/dosify.c:48:15:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
      ofile = fopen(argv[2], "wb");
data/iverilog-11.0/driver-vpi/main.c:284:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char message[1024];
data/iverilog-11.0/driver-vpi/main.c:465:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char buffer[1];		/* doesn't matter how big this is, as we don't use the result */
data/iverilog-11.0/driver-vpi/main.c:505:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char path[4096];
data/iverilog-11.0/driver/main.c:144:1:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
char warning_flags[17] = "n";
data/iverilog-11.0/driver/main.c:173:8:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
static char iconfig_common_path[4096] = "";
data/iverilog-11.0/driver/main.c:186:1:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
char line[MAXSIZE];
data/iverilog-11.0/driver/main.c:187:1:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
char tmp[MAXSIZE];
data/iverilog-11.0/driver/main.c:189:8:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
static char ivl_root[MAXSIZE];
data/iverilog-11.0/driver/main.c:257:12:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
      fd = open(path, O_WRONLY|O_CREAT|O_EXCL, 0700);
data/iverilog-11.0/driver/main.c:287:14:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
      static char pathbuf[8192];
data/iverilog-11.0/driver/main.c:945:7:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
      char path[4096];
data/iverilog-11.0/driver/main.c:1050:7:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
      char tmppath[MAXSIZE];
data/iverilog-11.0/driver/main.c:1129:21:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
	    iconfig_file = fopen(iconfig_path, "w");
data/iverilog-11.0/driver/main.c:1374:17:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
	    if (( fp = fopen(command_filename, "r")) == NULL ) {
data/iverilog-11.0/driver/main.c:1441:24:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
            FILE *fd = fopen(depfile, "w");
data/iverilog-11.0/ivlpp/main.c:107:7:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
      char line_buf[2048];
data/iverilog-11.0/ivlpp/main.c:108:17:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
      FILE*fd = fopen(path, "r");
data/iverilog-11.0/ivlpp/main.c:216:7:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
      char line_buf[2048];
data/iverilog-11.0/ivlpp/main.c:218:17:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
      FILE*fd = fopen(path, "r");
data/iverilog-11.0/ivlpp/main.c:333:14:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
		FILE*src = fopen(optarg, "rb");
data/iverilog-11.0/ivlpp/main.c:406:12:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
	    out = fopen(out_path, "w");
data/iverilog-11.0/ivlpp/main.c:416:20:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
	    precomp_out = fopen(precomp_out_path, "wb");
data/iverilog-11.0/ivlpp/main.c:425:22:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
	      depend_file = fopen(dep_path, "a");
data/iverilog-11.0/libmisc/StringHeap.cc:92:7:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
      memcpy(res, text, len);
data/iverilog-11.0/libveriuser/a_fetch_value.c:99:7:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
      char str[4];
data/iverilog-11.0/libveriuser/getsimtime.c:87:14:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
      static char buf[32];
data/iverilog-11.0/libveriuser/priv.c:26:8:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
static char string_buffer[8192];
data/iverilog-11.0/libveriuser/putlongp.c:33:7:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
      char str[20];
data/iverilog-11.0/libveriuser/putlongp.c:55:7:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
      sprintf(str, "%x%08x", highvalue, lowvalue);
data/iverilog-11.0/libveriuser/veriusertfs.c:86:13:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	    static char trace_buf[1024];
data/iverilog-11.0/libveriuser/veriusertfs.c:90:17:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
		  pli_trace = fopen(path, "w");
data/iverilog-11.0/libveriuser/veriusertfs.c:227:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		  memcpy(dp, cb_data.user_data, sizeof(s_pli_data));
data/iverilog-11.0/load_module.cc:59:7:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
      char path[4096];
data/iverilog-11.0/main.cc:600:7:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
      char buf[8*1024];
data/iverilog-11.0/main.cc:603:20:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
      FILE*ifile = fopen(ipath, "r");
data/iverilog-11.0/main.cc:816:7:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
      char line_buf[2048];
data/iverilog-11.0/main.cc:818:17:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
      FILE*fd = fopen(path, "r");
data/iverilog-11.0/main.cc:1023:22:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
	      depend_file = fopen(depfile_name, "a");
data/iverilog-11.0/pform.cc:177:41:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
            verinum *seln = new verinum(atoi(bit_l));
data/iverilog-11.0/pform.cc:717:6:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	    char tmp[32];
data/iverilog-11.0/pform.cc:1676:6:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	    char tmp[16];
data/iverilog-11.0/pform.cc:3741:6:  [2] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused). Risk is low because the
  source is a constant string.
	    strcat(cmdline, " \"");
data/iverilog-11.0/pform.cc:3759:17:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
	    vl_input = fopen(path, "r");
data/iverilog-11.0/pform.cc:3767:6:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	    char unit_name[20];
data/iverilog-11.0/pform.cc:3770:5:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
		  sprintf(unit_name, "$unit#%u", ++nunits);
data/iverilog-11.0/pform.cc:3772:5:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
		  sprintf(unit_name, "$unit");
data/iverilog-11.0/sys_funcs.cc:119:17:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
      FILE*fd = fopen(path, "r");
data/iverilog-11.0/sys_funcs.cc:132:7:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
      char buf[256];
data/iverilog-11.0/t-dll-api.cc:1749:6:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	    char tmp[2 * sizeof(net) + 5];
data/iverilog-11.0/t-dll.cc:60:10:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
  static char msg[256];
data/iverilog-11.0/t-dll.cc:167:7:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
      char buf[1024];
data/iverilog-11.0/t-dll.h:510:6:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	    char bit_[sizeof(char*)];
data/iverilog-11.0/tgt-blif/blif.cc:144:17:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
      FILE*fd = fopen(blif_path, "wt");
data/iverilog-11.0/tgt-blif/lpm_add.cc:66:6:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	    char cin[128];
data/iverilog-11.0/tgt-blif/lpm_add.cc:143:6:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	    char cin[128];
data/iverilog-11.0/tgt-blif/nex_data.cc:75:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		  char buf[64];
data/iverilog-11.0/tgt-fpga/d-generic-edif.c:61:7:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
      char jbuf[1024];
data/iverilog-11.0/tgt-fpga/d-generic-edif.c:218:7:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
      char jbuf[128];
data/iverilog-11.0/tgt-fpga/d-generic-edif.c:294:7:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
      char jbuf[1024];
data/iverilog-11.0/tgt-fpga/d-generic-edif.c:311:6:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
	    sprintf(jbuf, "(portRef O (instanceRef U%u))", edif_uref);
data/iverilog-11.0/tgt-fpga/d-generic-edif.c:315:5:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
		  sprintf(jbuf, "(portRef I%u (instanceRef U%u))",
data/iverilog-11.0/tgt-fpga/d-generic-edif.c:328:6:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
	    sprintf(jbuf, "(portRef O (instanceRef U%u))", edif_uref);
data/iverilog-11.0/tgt-fpga/d-generic-edif.c:331:6:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
	    sprintf(jbuf, "(portRef I (instanceRef U%u))", edif_uref);
data/iverilog-11.0/tgt-fpga/d-generic-edif.c:352:13:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
            sprintf(jbuf, "(portRef O (instanceRef U%u))", edif_uref);
data/iverilog-11.0/tgt-fpga/d-generic-edif.c:355:13:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
            sprintf(jbuf, "(portRef I (instanceRef U%u))", edif_uref);
data/iverilog-11.0/tgt-fpga/d-generic-edif.c:370:6:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
	    sprintf(jbuf, "(portRef O (instanceRef U%u))", edif_uref);
data/iverilog-11.0/tgt-fpga/d-generic-edif.c:374:5:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
		  sprintf(jbuf, "(portRef I%u (instanceRef U%u))",
data/iverilog-11.0/tgt-fpga/d-generic-edif.c:387:7:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
      char jbuf[1024];
data/iverilog-11.0/tgt-fpga/d-generic-edif.c:415:6:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
	    sprintf(jbuf, "(portRef Q (instanceRef U%u))", edif_uref);
data/iverilog-11.0/tgt-fpga/d-generic-edif.c:419:6:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
	    sprintf(jbuf, "(portRef D (instanceRef U%u))", edif_uref);
data/iverilog-11.0/tgt-fpga/d-generic-edif.c:423:6:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
	    sprintf(jbuf, "(portRef C (instanceRef U%u))", edif_uref);
data/iverilog-11.0/tgt-fpga/d-generic-edif.c:427:5:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
		  sprintf(jbuf, "(portRef CE (instanceRef U%u))", edif_uref);
data/iverilog-11.0/tgt-fpga/d-generic-edif.c:432:5:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
		  sprintf(jbuf, "(portRef CLR (instanceRef U%u))", edif_uref);
data/iverilog-11.0/tgt-fpga/d-generic-edif.c:439:8:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
		     sprintf(jbuf, "(portRef PRE (instanceRef U%u))",
data/iverilog-11.0/tgt-fpga/d-generic-edif.c:444:8:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
		     sprintf(jbuf, "(portRef CLR (instanceRef U%u))",
data/iverilog-11.0/tgt-fpga/d-generic.c:120:7:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
      char name[1024];
data/iverilog-11.0/tgt-fpga/d-generic.c:133:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		  char ipin[32];
data/iverilog-11.0/tgt-fpga/d-generic.c:135:5:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
		  sprintf(ipin, "I%u", idx-1);
data/iverilog-11.0/tgt-fpga/d-generic.c:156:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		  char ipin[32];
data/iverilog-11.0/tgt-fpga/d-generic.c:158:5:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
		  sprintf(ipin, "I%u", idx-1);
data/iverilog-11.0/tgt-fpga/d-generic.c:169:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		  char ipin[32];
data/iverilog-11.0/tgt-fpga/d-generic.c:171:5:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
		  sprintf(ipin, "I%u", idx-1);
data/iverilog-11.0/tgt-fpga/d-generic.c:192:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		  char ipin[32];
data/iverilog-11.0/tgt-fpga/d-generic.c:194:5:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
		  sprintf(ipin, "I%u", idx-1);
data/iverilog-11.0/tgt-fpga/d-generic.c:205:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		  char ipin[32];
data/iverilog-11.0/tgt-fpga/d-generic.c:207:5:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
		  sprintf(ipin, "I%u", idx-1);
data/iverilog-11.0/tgt-fpga/d-generic.c:218:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		  char ipin[32];
data/iverilog-11.0/tgt-fpga/d-generic.c:220:5:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
		  sprintf(ipin, "I%u", idx-1);
data/iverilog-11.0/tgt-fpga/d-generic.c:258:7:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
      char name[1024];
data/iverilog-11.0/tgt-fpga/d-generic.c:288:7:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
      char name[1024];
data/iverilog-11.0/tgt-fpga/d-generic.c:360:7:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
      char name[1024];
data/iverilog-11.0/tgt-fpga/d-generic.c:400:7:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
      char name[1024];
data/iverilog-11.0/tgt-fpga/d-lpm.c:113:7:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
      char name[32];
data/iverilog-11.0/tgt-fpga/d-lpm.c:115:7:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
      sprintf(name, "or%u", siz);
data/iverilog-11.0/tgt-fpga/d-lpm.c:126:6:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
	    sprintf(name, "Data%ux0", idx);
data/iverilog-11.0/tgt-fpga/d-lpm.c:141:7:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
      char name[32];
data/iverilog-11.0/tgt-fpga/d-lpm.c:143:7:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
      sprintf(name, "and%u", siz);
data/iverilog-11.0/tgt-fpga/d-lpm.c:154:6:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
	    sprintf(name, "Data%ux0", idx);
data/iverilog-11.0/tgt-fpga/d-lpm.c:169:7:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
      char name[32];
data/iverilog-11.0/tgt-fpga/d-lpm.c:171:7:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
      sprintf(name, "xor%u", siz);
data/iverilog-11.0/tgt-fpga/d-lpm.c:182:6:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
	    sprintf(name, "Data%ux0", idx);
data/iverilog-11.0/tgt-fpga/d-lpm.c:197:7:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
      char name[32];
data/iverilog-11.0/tgt-fpga/d-lpm.c:199:7:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
      sprintf(name, "nor%u", siz);
data/iverilog-11.0/tgt-fpga/d-lpm.c:211:6:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
	    sprintf(name, "Data%ux0", idx);
data/iverilog-11.0/tgt-fpga/d-lpm.c:268:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		  char buf[128];
data/iverilog-11.0/tgt-fpga/d-lpm.c:306:6:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	    char name[32];
data/iverilog-11.0/tgt-fpga/d-lpm.c:309:6:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
	    sprintf(name, "Data%ux0", idx-1);
data/iverilog-11.0/tgt-fpga/d-lpm.c:408:7:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
      char name[64];
data/iverilog-11.0/tgt-fpga/d-lpm.c:446:5:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
		  sprintf(name, "Q%u", idx);
data/iverilog-11.0/tgt-fpga/d-lpm.c:450:5:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
		  sprintf(name, "Data%u", idx);
data/iverilog-11.0/tgt-fpga/d-lpm.c:536:6:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
	    sprintf(name, "Q%u", idx);
data/iverilog-11.0/tgt-fpga/d-lpm.c:542:6:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
	    sprintf(name, "Data%u", idx);
data/iverilog-11.0/tgt-fpga/d-lpm.c:558:7:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
      char cellname[32];
data/iverilog-11.0/tgt-fpga/d-lpm.c:564:7:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
      sprintf(cellname, "mux%u_%u_%u", wid_r, wid_s, wid_z);
data/iverilog-11.0/tgt-fpga/d-lpm.c:574:5:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
		  sprintf(cellname, "Result%u", idx);
data/iverilog-11.0/tgt-fpga/d-lpm.c:581:5:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
		  sprintf(cellname, "Sel%u", idx);
data/iverilog-11.0/tgt-fpga/d-lpm.c:591:4:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
			sprintf(cellname, "Data%ux%u", idx, rdx);
data/iverilog-11.0/tgt-fpga/d-lpm.c:611:6:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
	    sprintf(cellname, "Result%u", idx);
data/iverilog-11.0/tgt-fpga/d-lpm.c:621:6:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
	    sprintf(cellname, "Sel%u", idx);
data/iverilog-11.0/tgt-fpga/d-lpm.c:632:5:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
		  sprintf(cellname, "Data%ux%u", idx, rdx);
data/iverilog-11.0/tgt-fpga/d-lpm.c:645:7:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
      char cellname[32];
data/iverilog-11.0/tgt-fpga/d-lpm.c:677:5:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
		  sprintf(cellname, "Result%u", idx);
data/iverilog-11.0/tgt-fpga/d-lpm.c:681:5:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
		  sprintf(cellname, "DataA%u", idx);
data/iverilog-11.0/tgt-fpga/d-lpm.c:685:5:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
		  sprintf(cellname, "DataB%u", idx);
data/iverilog-11.0/tgt-fpga/d-lpm.c:704:6:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
	    sprintf(cellname, "Result%u", idx);
data/iverilog-11.0/tgt-fpga/d-lpm.c:710:6:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
	    sprintf(cellname, "DataA%u", idx);
data/iverilog-11.0/tgt-fpga/d-lpm.c:716:6:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
	    sprintf(cellname, "DataB%u", idx);
data/iverilog-11.0/tgt-fpga/d-lpm.c:733:7:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
      char name[64];
data/iverilog-11.0/tgt-fpga/d-lpm.c:739:7:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
      sprintf(name, "mult%u", ivl_lpm_width(net));
data/iverilog-11.0/tgt-fpga/d-lpm.c:748:5:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
		  sprintf(name, "Result%u", idx);
data/iverilog-11.0/tgt-fpga/d-lpm.c:753:5:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
		  sprintf(name, "DataA%u", idx);
data/iverilog-11.0/tgt-fpga/d-lpm.c:758:5:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
		  sprintf(name, "DataB%u", idx);
data/iverilog-11.0/tgt-fpga/d-lpm.c:777:6:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
	    sprintf(name, "Result%u", idx);
data/iverilog-11.0/tgt-fpga/d-lpm.c:784:5:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
		  sprintf(name, "DataA%u", idx);
data/iverilog-11.0/tgt-fpga/d-lpm.c:792:5:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
		  sprintf(name, "DataB%u", idx);
data/iverilog-11.0/tgt-fpga/edif.c:140:6:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	    char buf[16];
data/iverilog-11.0/tgt-fpga/edif.c:141:6:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
	    sprintf(buf, "PORT%u", idx);
data/iverilog-11.0/tgt-fpga/fpga.c:109:13:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
      xnf = fopen(path, "w");
data/iverilog-11.0/tgt-fpga/xilinx.c:318:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		  char buf[128];
data/iverilog-11.0/tgt-fpga/xilinx.c:443:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		  char name_buf[128];
data/iverilog-11.0/tgt-pal/emit_jed.c:111:13:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
      jfd = fopen(path, "w");
data/iverilog-11.0/tgt-pcb/show_netlist.cc:29:19:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
      FILE*fnet = fopen(net_path, "w");
data/iverilog-11.0/tgt-pcb/show_pcb.cc:38:19:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
      FILE*fpcb = fopen(pcb_path, "w");
data/iverilog-11.0/tgt-sizer/sizer.cc:80:19:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
      sizer_out = fopen(sizer_path, "wt");
data/iverilog-11.0/tgt-stub/expression.c:399:7:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
      char name[8];
data/iverilog-11.0/tgt-stub/expression.c:539:15:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
			  unsigned char bv[sizeof(double)];
data/iverilog-11.0/tgt-stub/stub.c:1848:13:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
      out = fopen(path, "w");
data/iverilog-11.0/tgt-verilog/verilog.c:418:13:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
      out = fopen(path, "w");
data/iverilog-11.0/tgt-vhdl/vhdl.cc:126:28:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
      int max_depth = std::atoi(ivl_design_flag(des, "depth"));
data/iverilog-11.0/tgt-vlog95/expr.c:818:7:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
      char msg[64];
data/iverilog-11.0/tgt-vlog95/misc.c:796:7:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
      strcpy(package_name, "ivl_package_");
data/iverilog-11.0/tgt-vlog95/numbers.c:197:6:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	    char buffer[32];
data/iverilog-11.0/tgt-vlog95/vlog95.c:167:18:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
      vlog_out = fopen(path, "w");
data/iverilog-11.0/tgt-vvp/draw_delay.c:31:7:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
      char tmp[64];
data/iverilog-11.0/tgt-vvp/draw_delay.c:32:7:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
      char c4_value[69];
data/iverilog-11.0/tgt-vvp/draw_delay.c:58:7:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
      char tmp[64];
data/iverilog-11.0/tgt-vvp/draw_net_input.c:92:7:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
      strcpy(dp, "C4<");
data/iverilog-11.0/tgt-vvp/draw_net_input.c:118:7:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
      strcpy(dp, "C8<");
data/iverilog-11.0/tgt-vvp/draw_net_input.c:232:7:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
      char tmp[32];
data/iverilog-11.0/tgt-vvp/draw_net_input.c:237:13:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
            strcpy(dp, "C4<");
data/iverilog-11.0/tgt-vvp/draw_net_input.c:246:13:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
            char val[4];
data/iverilog-11.0/tgt-vvp/draw_net_input.c:256:13:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
            strcpy(dp, "C8<");
data/iverilog-11.0/tgt-vvp/draw_net_input.c:311:6:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	    char tmp[128];
data/iverilog-11.0/tgt-vvp/draw_net_input.c:318:6:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	    char tmp[128];
data/iverilog-11.0/tgt-vvp/draw_net_input.c:333:6:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	    char tmp[64];
data/iverilog-11.0/tgt-vvp/draw_net_input.c:431:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		  char tmp[128];
data/iverilog-11.0/tgt-vvp/draw_net_input.c:448:7:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
      char result[64];
data/iverilog-11.0/tgt-vvp/draw_net_input.c:562:7:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
      char result[512];
data/iverilog-11.0/tgt-vvp/draw_net_input.c:698:6:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	    char buf[64];
data/iverilog-11.0/tgt-vvp/draw_net_input.c:735:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		  char modpath_label[64];
data/iverilog-11.0/tgt-vvp/draw_net_input.c:764:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		  char modpath_label[64];
data/iverilog-11.0/tgt-vvp/draw_switch.c:55:7:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
      char str_e_buf[4 + 2*sizeof(void*)];
data/iverilog-11.0/tgt-vvp/draw_vpi.c:83:7:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
      char buffer[4096];
data/iverilog-11.0/tgt-vvp/draw_vpi.c:276:7:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
      char buffer[4096];
data/iverilog-11.0/tgt-vvp/draw_vpi.c:496:6:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	    char call_string[1024];
data/iverilog-11.0/tgt-vvp/draw_vpi.c:507:7:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
      char call_string[1024];
data/iverilog-11.0/tgt-vvp/draw_vpi.c:520:7:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
      char call_string[1024];
data/iverilog-11.0/tgt-vvp/draw_vpi.c:532:7:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
      char call_string[1024];
data/iverilog-11.0/tgt-vvp/eval_condit.c:249:6:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	    char opcode[8];
data/iverilog-11.0/tgt-vvp/eval_vec4.c:609:6:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	    char opcode[8];
data/iverilog-11.0/tgt-vvp/modpath.c:150:6:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	    char modpath_label[64];
data/iverilog-11.0/tgt-vvp/vvp.c:200:17:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
      vvp_out = fopen(path, "w");
data/iverilog-11.0/tgt-vvp/vvp_process.c:497:6:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	    char name[256];
data/iverilog-11.0/tgt-vvp/vvp_scope.c:132:14:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
      static char buf[32];
data/iverilog-11.0/tgt-vvp/vvp_scope.c:133:7:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
      sprintf(buf, "%p", sig);
data/iverilog-11.0/tgt-vvp/vvp_scope.c:378:7:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
      char tmp[256];
data/iverilog-11.0/tgt-vvp/vvp_scope.c:418:14:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
      static char result[32];
data/iverilog-11.0/tgt-vvp/vvp_scope.c:1149:7:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
      char tmp[4][32];
data/iverilog-11.0/tgt-vvp/vvp_scope.c:2269:7:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
      char suffix[32];
data/iverilog-11.0/verinum.cc:543:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		  char tmp[5];
data/iverilog-11.0/verinum.cc:549:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		  char tmp[5];
data/iverilog-11.0/veriuser.h:105:7:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
      char  reserved[20];            /* reserved */
data/iverilog-11.0/vhdlpp/expression_emit.cc:991:6:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	    memcpy(&tmp[1], &value_[0], value_.size());
data/iverilog-11.0/vhdlpp/expression_stream.cc:134:7:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
      char buf[4];
data/iverilog-11.0/vhdlpp/main.cc:168:21:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
	    debug_log_file.open(debug_log_path);
data/iverilog-11.0/vhdlpp/scope.cc:322:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char buf[64];
data/iverilog-11.0/vhdlpp/sequential_emit.cc:396:9:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
        char buf[80];
data/iverilog-11.0/vhdlpp/subprogram.cc:262:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char buf[80];
data/iverilog-11.0/vhdlpp/vtype.cc:41:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char buf[16] = {0,};
data/iverilog-11.0/vpi/fstapi.c:190:8:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
return(fopen(nam, mode));
data/iverilog-11.0/vpi/fstapi.c:202:1:  [2] (buffer) TCHAR:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
TCHAR szTempFileName[MAX_PATH];
data/iverilog-11.0/vpi/fstapi.c:203:1:  [2] (buffer) TCHAR:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
TCHAR lpTempPathBuffer[MAX_PATH];
data/iverilog-11.0/vpi/fstapi.c:244:11:  [2] (tmpfile) tmpfile:
  Function tmpfile() has a security flaw on some systems (e.g., older System
  V systems) (CWE-377).
FILE *f = tmpfile(); /* replace with mkstemp() + fopen(), etc if this is not good enough */
data/iverilog-11.0/vpi/fstapi.c:383:10:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
unsigned char buf[8];
data/iverilog-11.0/vpi/fstapi.c:400:10:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
unsigned char buf[sizeof(uint64_t)];
data/iverilog-11.0/vpi/fstapi.c:546:10:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
unsigned char buf[5];
data/iverilog-11.0/vpi/fstapi.c:575:10:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
unsigned char buf[5];
data/iverilog-11.0/vpi/fstapi.c:605:10:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
unsigned char buf[16];
data/iverilog-11.0/vpi/fstapi.c:635:10:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
unsigned char buf[10]; /* ceil(64/7) = 10 */
data/iverilog-11.0/vpi/fstapi.c:683:10:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
unsigned char buf[15]; /* ceil(64/7) = 10 + sign byte padded way up */
data/iverilog-11.0/vpi/fstapi.c:850:1:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
memcpy(pnt, u, sizeof(uint32_t));
data/iverilog-11.0/vpi/fstapi.c:860:1:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
memcpy(pnt, dbuf, siz);
data/iverilog-11.0/vpi/fstapi.c:877:1:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
memcpy(pnt, u, sizeof(uint32_t));
data/iverilog-11.0/vpi/fstapi.c:896:1:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
memcpy(pnt, dbuf, siz);
data/iverilog-11.0/vpi/fstapi.c:909:1:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
char vbuf[FST_HDR_SIM_VERSION_SIZE];
data/iverilog-11.0/vpi/fstapi.c:910:1:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
char dbuf[FST_HDR_DATE_SIZE];
data/iverilog-11.0/vpi/fstapi.c:1073:11:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
FILE *f = fopen("/proc/meminfo", "rb");
data/iverilog-11.0/vpi/fstapi.c:1077:9:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
        char buf[257];
data/iverilog-11.0/vpi/fstapi.c:1087:44:  [2] (integer) atol:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
                                size_t v = atol(s+10);
data/iverilog-11.0/vpi/fstapi.c:1172:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(hf, nam, flen);
data/iverilog-11.0/vpi/fstapi.c:1173:9:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
        strcpy(hf + flen, ".hier");
data/iverilog-11.0/vpi/fstapi.c:1401:41:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
                                        memcpy(scratchpnt, pnt, record_len);
data/iverilog-11.0/vpi/fstapi.c:1412:25:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
                        memcpy(xc->curval_mem + vm4ip[0], vchg_mem + offs + 4 + wrlen, vm4ip[1]); /* checkpoint variable */
data/iverilog-11.0/vpi/fstapi.c:1467:41:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
                                        memcpy(scratchpnt, pnt, vm4ip[1]);
data/iverilog-11.0/vpi/fstapi.c:1841:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(xc2, xc, sizeof(struct fstWriterContext));
data/iverilog-11.0/vpi/fstapi.c:1844:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(xc2->valpos_mem, xc->valpos_mem, xc->maxhandle * 4 * sizeof(uint32_t));
data/iverilog-11.0/vpi/fstapi.c:1849:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(xc2->curval_mem, xc->curval_mem, xc->maxvalpos);
data/iverilog-11.0/vpi/fstapi.c:2180:25:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
                        strcpy(hf+flen, ".pak");
data/iverilog-11.0/vpi/fstapi.c:2181:30:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
                        fp = fopen(hf, "wb");
data/iverilog-11.0/vpi/fstapi.c:2187:33:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
                                char gz_membuf[FST_GZIO_LEN];
data/iverilog-11.0/vpi/fstapi.c:2246:17:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
                strcpy(hf + flen, ".hier");
data/iverilog-11.0/vpi/fstapi.c:2281:9:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
        char s[FST_HDR_DATE_SIZE];
data/iverilog-11.0/vpi/fstapi.c:2287:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(s, dat, (len < FST_HDR_DATE_SIZE) ? len : FST_HDR_DATE_SIZE);
data/iverilog-11.0/vpi/fstapi.c:2300:9:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
        char s[FST_HDR_SIM_VERSION_SIZE];
data/iverilog-11.0/vpi/fstapi.c:2306:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(s, vers, (len < FST_HDR_SIM_VERSION_SIZE) ? len : FST_HDR_SIM_VERSION_SIZE);
data/iverilog-11.0/vpi/fstapi.c:2339:18:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
        unsigned char buf[11]; /* ceil(64/7) = 10 + null term */
data/iverilog-11.0/vpi/fstapi.c:2478:18:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
        int tv = atoi(s);
data/iverilog-11.0/vpi/fstapi.c:2813:1:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
char elem_count_buf[16];
data/iverilog-11.0/vpi/fstapi.c:2853:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(attr_str+pos, name, name_len);
data/iverilog-11.0/vpi/fstapi.c:2857:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(attr_str+pos, elem_count_buf, elem_count_len);
data/iverilog-11.0/vpi/fstapi.c:2960:41:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
                                        memcpy(old_value, buf, len); /* overlay new value */
data/iverilog-11.0/vpi/fstapi.c:2962:41:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
                                        memcpy(xc->curval_mem + offs, buf, len);
data/iverilog-11.0/vpi/fstapi.c:2986:33:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
                                memcpy(xc->curval_mem + offs, buf, len);
data/iverilog-11.0/vpi/fstapi.c:3024:25:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
                        memcpy(xc->curval_mem + offs, buf, len);
data/iverilog-11.0/vpi/fstapi.c:3032:9:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
        char buf[32];
data/iverilog-11.0/vpi/fstapi.c:3043:9:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
        char buf[64];
data/iverilog-11.0/vpi/fstapi.c:3357:1:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
char version[FST_HDR_SIM_VERSION_SIZE + 1];
data/iverilog-11.0/vpi/fstapi.c:3358:1:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
char date[FST_HDR_DATE_SIZE + 1];
data/iverilog-11.0/vpi/fstapi.c:3401:1:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
char str_scope_nam[FST_ID_NAM_SIZ+1];
data/iverilog-11.0/vpi/fstapi.c:3402:1:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
char str_scope_comp[FST_ID_NAM_SIZ+1];
data/iverilog-11.0/vpi/fstapi.c:3411:10:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
unsigned char writex_buf[FST_WRITEX_MAX];
data/iverilog-11.0/vpi/fstapi.c:3450:17:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
                memcpy(xc->writex_buf + xc->writex_pos, s, len);
data/iverilog-11.0/vpi/fstapi.c:3967:18:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
        xc->fh = fopen(fnam, "w+b");
data/iverilog-11.0/vpi/fstapi.c:4281:9:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
        char time_dimension[2] = {0, 0};
data/iverilog-11.0/vpi/fstapi.c:4370:39:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
                        if(!str[0]) { strcpy(str, "\"\""); }
data/iverilog-11.0/vpi/fstapi.c:4481:41:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
                                        char vcdid_buf[16];
data/iverilog-11.0/vpi/fstapi.c:4497:41:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
                                        char vcdid_buf[16];
data/iverilog-11.0/vpi/fstapi.c:4550:9:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
        char gz_membuf[FST_GZIO_LEN];
data/iverilog-11.0/vpi/fstapi.c:4564:17:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
        fcomp = fopen(hf, "w+b");
data/iverilog-11.0/vpi/fstapi.c:4670:58:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
                                                unsigned char rvs_buf[8];
data/iverilog-11.0/vpi/fstapi.c:4864:21:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
if((!nam)||(!(xc->f=fopen(nam, "rb"))))
data/iverilog-11.0/vpi/fstapi.c:4879:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(hf, nam, flen);
data/iverilog-11.0/vpi/fstapi.c:4880:9:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
        strcpy(hf + flen, ".hier");
data/iverilog-11.0/vpi/fstapi.c:4881:18:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
        xc->fh = fopen(hf, "rb");
data/iverilog-11.0/vpi/fstapi.c:5159:33:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
                                char wx_buf[32];
data/iverilog-11.0/vpi/fstapi.c:5164:41:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
					if(dumpvars_state == 1) { wx_len = sprintf(wx_buf, "$end\n"); fstWritex(xc, wx_buf, wx_len); dumpvars_state = 2; }
data/iverilog-11.0/vpi/fstapi.c:5165:50:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
                                        wx_len = sprintf(wx_buf, "#%" PRIu64 "\n", beg_tim);
data/iverilog-11.0/vpi/fstapi.c:5167:37:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
					if(!dumpvars_state) { wx_len = sprintf(wx_buf, "$dumpvars\n"); fstWritex(xc, wx_buf, wx_len); dumpvars_state = 1; }
data/iverilog-11.0/vpi/fstapi.c:5224:73:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
                                                                        char vcd_id[16];
data/iverilog-11.0/vpi/fstapi.c:5244:65:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
                                                                memcpy(xc->temp_signal_value_buf, mu+sig_offs, xc->signal_lens[idx]);
data/iverilog-11.0/vpi/fstapi.c:5252:73:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
                                                                        char vcd_id[16];
data/iverilog-11.0/vpi/fstapi.c:5296:81:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
                                                                                memcpy(clone_d, srcdata, 8);
data/iverilog-11.0/vpi/fstapi.c:5307:73:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
                                                                        sprintf((char *)xc->temp_signal_value_buf, "%.16g", d);
data/iverilog-11.0/vpi/fstapi.c:5315:73:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
                                                                        char vcdid_buf[16];
data/iverilog-11.0/vpi/fstapi.c:5316:73:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
                                                                        char wx_buf[64];
data/iverilog-11.0/vpi/fstapi.c:5322:81:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
                                                                                memcpy(clone_d, srcdata, 8);
data/iverilog-11.0/vpi/fstapi.c:5587:25:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
                        char wx_buf[32];
data/iverilog-11.0/vpi/fstapi.c:5600:40:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
				if(dumpvars_state == 1) { wx_len = sprintf(wx_buf, "$end\n"); fstWritex(xc, wx_buf, wx_len); dumpvars_state = 2; }
data/iverilog-11.0/vpi/fstapi.c:5601:42:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
                                wx_len = sprintf(wx_buf, "#%" PRIu64 "\n", time_table[i]);
data/iverilog-11.0/vpi/fstapi.c:5603:36:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
				if(!dumpvars_state) { wx_len = sprintf(wx_buf, "$dumpvars\n"); fstWritex(xc, wx_buf, wx_len); dumpvars_state = 1; }
data/iverilog-11.0/vpi/fstapi.c:5648:57:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
                                                        char vcd_id[16];
data/iverilog-11.0/vpi/fstapi.c:5694:65:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
                                                                char vcd_id[16];
data/iverilog-11.0/vpi/fstapi.c:5779:57:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
                                                        memcpy(xc->temp_signal_value_buf, vdata, len);
data/iverilog-11.0/vpi/fstapi.c:5799:50:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
                                        unsigned char buf[8];
data/iverilog-11.0/vpi/fstapi.c:5848:65:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
                                                                memcpy(clone_d, srcdata, 8);
data/iverilog-11.0/vpi/fstapi.c:5859:57:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
                                                        sprintf((char *)xc->temp_signal_value_buf, "%.16g", d);
data/iverilog-11.0/vpi/fstapi.c:5867:57:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
                                                        char wx_buf[32];
data/iverilog-11.0/vpi/fstapi.c:5873:65:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
                                                                memcpy(clone_d, srcdata, 8);
data/iverilog-11.0/vpi/fstapi.c:5885:66:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
                                                        wx_len = sprintf(wx_buf, "r%.16g", d);
data/iverilog-11.0/vpi/fstapi.c:5893:41:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
                                        char vcd_id[16];
data/iverilog-11.0/vpi/fstapi.c:5968:17:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
                memcpy(buf, xc->rvat_frame_data + xc->rvat_sig_offs[facidx], xc->signal_lens[facidx]);
data/iverilog-11.0/vpi/fstapi.c:5979:25:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
                        memcpy(clone_d, srcdata, 8);
data/iverilog-11.0/vpi/fstapi.c:5991:17:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
                sprintf((char *)buf, "%.16g", d);
data/iverilog-11.0/vpi/fstapi.c:6537:33:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
                                memcpy(buf, vdata, xc->signal_lens[facidx]);
data/iverilog-11.0/vpi/fstapi.c:6546:34:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
                        unsigned char bufd[8];
data/iverilog-11.0/vpi/fstapi.c:6571:33:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
                                memcpy(clone_d, srcdata, 8);
data/iverilog-11.0/vpi/fstapi.c:6583:25:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
                        sprintf(buf, "r%.16g", d);
data/iverilog-11.0/vpi/fstapi.c:6730:10:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
unsigned char mem[1];
data/iverilog-11.0/vpi/fstapi.c:6767:1:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
memcpy(chain->mem, mem, length);
data/iverilog-11.0/vpi/fstapi.c:6898:10:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
unsigned char val[3];
data/iverilog-11.0/vpi/fstapi.c:6962:12:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
	int cnt = atoi(csp+1);
data/iverilog-11.0/vpi/libvpi.c:247:29:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
      return vpip_routines->fopen(name, mode);
data/iverilog-11.0/vpi/lxt2_write.c:287:10:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
unsigned char buf[1];
data/iverilog-11.0/vpi/lxt2_write.c:299:10:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
unsigned char buf[2];
data/iverilog-11.0/vpi/lxt2_write.c:312:10:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
unsigned char buf[4];
data/iverilog-11.0/vpi/lxt2_write.c:756:27:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
if((!name)||(!(lt->handle=fopen(name, "wb"))))
data/iverilog-11.0/vpi/lxt2_write.c:1023:1:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
char buf[32768];
data/iverilog-11.0/vpi/lxt2_write.c:1036:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(tname, lt->lxtname, i);
data/iverilog-11.0/vpi/lxt2_write.c:1037:2:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
	sprintf(tname+i, "_%03u.lxt", ++lt->break_number);
data/iverilog-11.0/vpi/lxt2_write.c:1040:6:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
f2 = fopen(tname, "wb");
data/iverilog-11.0/vpi/lxt2_write.c:1047:9:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
clone = fopen(lt->lxtname, "rb");
data/iverilog-11.0/vpi/lxt2_write.c:1593:8:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
static char s[33];
data/iverilog-11.0/vpi/lxt2_write.c:1646:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char d_buf[32];
data/iverilog-11.0/vpi/lxt2_write.c:1650:2:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
	sprintf(d_buf, "%.16g", value);
data/iverilog-11.0/vpi/lxt2_write.c:1829:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(vfix, value, s->len);
data/iverilog-11.0/vpi/lxt2_write.c:2104:4:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
			char tmp[16]; /* To get rid of the warning */
data/iverilog-11.0/vpi/lxt2_write.c:2118:5:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
				strcpy(tmp, "UNDEF");
data/iverilog-11.0/vpi/lxt2_write.c:2193:2:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
	sprintf(lt->zmode, "wb%u", depth);
data/iverilog-11.0/vpi/lxt2_write.h:203:1:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
char zmode[4];				/* fills in with "wb0".."wb9" */
data/iverilog-11.0/vpi/lxt2_write.h:205:10:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
unsigned char gzdest[LXT2_WR_GZWRITE_BUFFER + 4];	/* enough for zlib buffering */
data/iverilog-11.0/vpi/lxt_write.c:196:10:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
unsigned char buf[1];
data/iverilog-11.0/vpi/lxt_write.c:208:10:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
unsigned char buf[2];
data/iverilog-11.0/vpi/lxt_write.c:221:10:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
unsigned char buf[3];
data/iverilog-11.0/vpi/lxt_write.c:235:10:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
unsigned char buf[4];
data/iverilog-11.0/vpi/lxt_write.c:290:10:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
unsigned char buf[1];
data/iverilog-11.0/vpi/lxt_write.c:303:10:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
unsigned char buf[2];
data/iverilog-11.0/vpi/lxt_write.c:317:10:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
unsigned char buf[3];
data/iverilog-11.0/vpi/lxt_write.c:332:10:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
unsigned char buf[4];
data/iverilog-11.0/vpi/lxt_write.c:389:10:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
unsigned char buf[1];
data/iverilog-11.0/vpi/lxt_write.c:402:10:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
unsigned char buf[2];
data/iverilog-11.0/vpi/lxt_write.c:416:10:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
unsigned char buf[3];
data/iverilog-11.0/vpi/lxt_write.c:431:10:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
unsigned char buf[4];
data/iverilog-11.0/vpi/lxt_write.c:750:17:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
if(!(lt->handle=fopen(name, "wb")))
data/iverilog-11.0/vpi/lxt_write.c:1645:8:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
static char s[33];
data/iverilog-11.0/vpi/lz4.c:150:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(&val16, memPtr, 2);
data/iverilog-11.0/vpi/lz4.c:171:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(memPtr, &value, 2);
data/iverilog-11.0/vpi/lz4.c:184:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(&val32, memPtr, 4);
data/iverilog-11.0/vpi/lz4.c:191:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(&val64, memPtr, 8);
data/iverilog-11.0/vpi/lz4.c:204:59:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
static void LZ4_copy4(void* dstPtr, const void* srcPtr) { memcpy(dstPtr, srcPtr, 4); }
data/iverilog-11.0/vpi/lz4.c:206:59:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
static void LZ4_copy8(void* dstPtr, const void* srcPtr) { memcpy(dstPtr, srcPtr, 8); }
data/iverilog-11.0/vpi/lz4.c:653:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(op, anchor, lastRun);
data/iverilog-11.0/vpi/lz4.c:889:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(op, anchor, lastRunSize);
data/iverilog-11.0/vpi/lz4.c:1191:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy(op, ip, length);
data/iverilog-11.0/vpi/lz4.c:1233:17:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
                memcpy(op, dictEnd - copySize, copySize);
data/iverilog-11.0/vpi/lz4.c:1244:21:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
                    memcpy(op, lowPrefix, copySize);
data/iverilog-11.0/vpi/sys_clog2.c:96:6:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	    char msg[64];
data/iverilog-11.0/vpi/sys_convert.c:29:15:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	    unsigned char bval[sizeof(double)];
data/iverilog-11.0/vpi/sys_convert.c:59:15:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	    unsigned char bval[sizeof(double)];
data/iverilog-11.0/vpi/sys_display.c:194:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
  char buf[256];
data/iverilog-11.0/vpi/sys_display.c:205:13:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
    size += sprintf(&buf[size], "%d", width);
data/iverilog-11.0/vpi/sys_display.c:207:13:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
    size += sprintf(&buf[size], ".%d", prec);
data/iverilog-11.0/vpi/sys_display.c:790:11:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
          char tbuf[4], *rbuf;
data/iverilog-11.0/vpi/sys_display.c:876:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
  memcpy(*rtn, result, size);
data/iverilog-11.0/vpi/sys_display.c:896:7:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
      memcpy(*rtn+size-1, cp, cnt);
data/iverilog-11.0/vpi/sys_display.c:921:7:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
      memcpy(*rtn+size-1, result, cnt);
data/iverilog-11.0/vpi/sys_display.c:966:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
  char buf[256];
data/iverilog-11.0/vpi/sys_display.c:988:6:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
			  sprintf(buf, "%g", value.value.real);
data/iverilog-11.0/vpi/sys_display.c:991:7:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
				  sprintf(buf, "%.05f", value.value.real);
data/iverilog-11.0/vpi/sys_display.c:993:7:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
				  sprintf(buf, "%#g", value.value.real);
data/iverilog-11.0/vpi/sys_display.c:1004:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(rtn+size-1, result, width);
data/iverilog-11.0/vpi/sys_display.c:1020:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(rtn+size-1, result, width);
data/iverilog-11.0/vpi/sys_display.c:1044:4:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
			sprintf(buf, "%g", value.value.real);
data/iverilog-11.0/vpi/sys_display.c:1047:5:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
				sprintf(buf, "%.05f", value.value.real);
data/iverilog-11.0/vpi/sys_display.c:1049:5:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
				sprintf(buf, "%#g", value.value.real);
data/iverilog-11.0/vpi/sys_display.c:1056:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(rtn+size-1, buf, width);
data/iverilog-11.0/vpi/sys_display.c:1068:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(rtn+size-1, result, width);
data/iverilog-11.0/vpi/sys_display.c:1105:11:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
          sprintf(buf, "%.*f", use_prec, value.value.real);
data/iverilog-11.0/vpi/sys_display.c:1113:11:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
          strcpy(buf, "<?>");
data/iverilog-11.0/vpi/sys_display.c:1116:11:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
          memcpy(rtn+size-1, buf, width);
data/iverilog-11.0/vpi/sys_display.c:1127:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(rtn+size-1, cresult, width);
data/iverilog-11.0/vpi/sys_fst.c:384:6:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	    char scale_buf[65];
data/iverilog-11.0/vpi/sys_fst.c:426:6:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	    char msg[64];
data/iverilog-11.0/vpi/sys_lxt.c:481:6:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	    char msg[64];
data/iverilog-11.0/vpi/sys_lxt2.c:534:6:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	    char msg[64];
data/iverilog-11.0/vpi/sys_plusargs.c:144:7:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
      char msg[64];
data/iverilog-11.0/vpi/sys_priv.c:52:5:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
		  sprintf(&(res[cur]), "\\%03o", arg[idx]);
data/iverilog-11.0/vpi/sys_priv.c:90:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		  char msg[64];
data/iverilog-11.0/vpi/sys_priv.c:132:13:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
            char msg[64];
data/iverilog-11.0/vpi/sys_priv.c:332:6:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	    char msg[64];
data/iverilog-11.0/vpi/sys_readmem.c:302:14:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
      file = fopen(fname, "r");
data/iverilog-11.0/vpi/sys_readmem.c:306:6:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	    char path[4096];
data/iverilog-11.0/vpi/sys_readmem.c:312:17:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
		  if ((file = fopen(path, "r"))) break;
data/iverilog-11.0/vpi/sys_readmem.c:458:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		  char msg[64];
data/iverilog-11.0/vpi/sys_readmem.c:545:14:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
      file = fopen(fname, "w");
data/iverilog-11.0/vpi/sys_sdf.c:66:7:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
      char buffer[128];
data/iverilog-11.0/vpi/sys_sdf.c:297:16:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
      sdf_fd = fopen(fname, "r");
data/iverilog-11.0/vpi/sys_vcd.c:68:8:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
static char vcdid[8] = "!";
data/iverilog-11.0/vpi/sys_vcd.c:407:19:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
      dump_file = fopen(dump_path, "w");
data/iverilog-11.0/vpi/sys_vcd.c:458:6:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	    char msg[64];
data/iverilog-11.0/vpi/table_mod.c:534:7:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
      char msg[64];
data/iverilog-11.0/vpi/table_mod.c:575:12:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
      fp = fopen(table->file.name, "r");
data/iverilog-11.0/vpi/v2005_math.c:153:9:  [2] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused). Risk is low because the
  source is a constant string.
        strcat(msg, ".\n");
data/iverilog-11.0/vpi/v2009_bitvec.c:80:57:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
static PLI_INT32 count_bits_in_expr(vpiHandle expr_arg, char search[4])
data/iverilog-11.0/vpi/v2009_bitvec.c:109:7:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
      char search[4];
data/iverilog-11.0/vpi/va_math.c:180:9:  [2] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused). Risk is low because the
  source is a constant string.
        strcat(msg, ".\n");
data/iverilog-11.0/vpi/vams_simparam.c:87:6:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	    char msg[64];
data/iverilog-11.0/vpi/vams_simparam.c:214:6:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	    char path [MAX_STRING_RESULT];
data/iverilog-11.0/vpi/vams_simparam.c:217:5:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
		  strcpy(path, "<error getting the cwd, is it too long?>");
data/iverilog-11.0/vpi/vhdl_textio.c:188:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char units[2];
data/iverilog-11.0/vpi/vhdl_textio.c:233:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char buf[STRING_BUF_SIZE];
data/iverilog-11.0/vpi/vhdl_textio.c:235:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char format_str[32];
data/iverilog-11.0/vpi/vhdl_textio.c:292:9:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
        sprintf(string, "%" PLI_UINT64_FMT " %cs", period, prefix);
data/iverilog-11.0/vpi/vhdl_textio.c:294:9:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
        sprintf(string, "%" PLI_UINT64_FMT " s", period);
data/iverilog-11.0/vpi/vhdl_textio.c:488:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char buf[STRING_BUF_SIZE];
data/iverilog-11.0/vpi/vhdl_textio.c:712:13:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
            char buf[5];
data/iverilog-11.0/vpi/vhdl_textio.c:836:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char buf[STRING_BUF_SIZE];
data/iverilog-11.0/vpi/vhdl_textio.c:935:13:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
            char tmp[64];
data/iverilog-11.0/vpi_user.h:724:19:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
    PLI_INT32   (*fopen)(const char*, const char*);
data/iverilog-11.0/vvp/array.cc:183:7:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
      char sidx [64];
data/iverilog-11.0/vvp/array.cc:435:7:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
      char sidx [64];
data/iverilog-11.0/vvp/array.cc:541:7:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
      char sidx [64];
data/iverilog-11.0/vvp/array.cc:1430:7:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
      memcpy(value_bits_, tmp_value.value.str, apvword->part_wid);
data/iverilog-11.0/vvp/array.cc:1453:7:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
      memcpy(value_bits_, tmp_value.value.str, apvword->part_wid);
data/iverilog-11.0/vvp/compile.cc:596:6:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	    char ss[32];
data/iverilog-11.0/vvp/delay.cc:854:24:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
      typedef unsigned char map_array_t[12];
data/iverilog-11.0/vvp/ivl_dlfcn.h:37:14:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
      static char full_name[4096];
data/iverilog-11.0/vvp/ivl_dlfcn.h:54:10:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
  static char msg[256];
data/iverilog-11.0/vvp/main.cc:68:8:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
static char log_buffer[4096];
data/iverilog-11.0/vvp/main.cc:81:14:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
	    statm = fopen("/proc/self/statm", "r");
data/iverilog-11.0/vvp/main.cc:145:7:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
      char file_extra[128];
data/iverilog-11.0/vvp/main.cc:370:17:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
	    debug_file.open(path, ios::out);
data/iverilog-11.0/vvp/main.cc:383:15:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
		  logfile = fopen(logfile_name, "w");
data/iverilog-11.0/vvp/permaheap.h:44:6:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	    char bytes[INITIAL_CHUNK_SIZE];
data/iverilog-11.0/vvp/slab.h:30:6:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	    char space[SLAB_SIZE];
data/iverilog-11.0/vvp/stop.cc:50:7:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
      char buf[256];
data/iverilog-11.0/vvp/symbols.cc:36:7:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
      char data[64*1024 - sizeof(struct key_strings*)];
data/iverilog-11.0/vvp/vpi_callback.cc:150:7:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
      memcpy(value_bits_, tmp_value.value.str + value_off_, pobj->width);
data/iverilog-11.0/vvp/vpi_callback.cc:177:7:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
      memcpy(value_bits_, tmp_value.value.str + value_off_, pobj->width);
data/iverilog-11.0/vvp/vpi_callback.cc:877:5:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
		  sprintf(rbuf, "%0.0f", vlg_round(rval));
data/iverilog-11.0/vvp/vpi_const.cc:152:8:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
	      sprintf(rbuf, "%u", uint_value);
data/iverilog-11.0/vvp/vpi_const.cc:592:8:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
	      sprintf(rbuf, "%d", value);
data/iverilog-11.0/vvp/vpi_const.cc:607:8:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
	      sprintf(rbuf, "%08x", value);
data/iverilog-11.0/vvp/vpi_const.cc:613:8:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
	      sprintf(rbuf, "%011x", value);
data/iverilog-11.0/vvp/vpi_darray.cc:86:7:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
      char sidx [64];
data/iverilog-11.0/vvp/vpi_mcd.cc:168:20:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
	mcd_table[i].fp = fopen(name, "w");
data/iverilog-11.0/vvp/vpi_mcd.cc:171:21:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
		mcd_table[i].fp = fopen(name, "w");
data/iverilog-11.0/vvp/vpi_mcd.cc:173:21:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
		mcd_table[i].fp = fopen("nul", "w");
data/iverilog-11.0/vvp/vpi_mcd.cc:190:7:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
      char buffer[4096];
data/iverilog-11.0/vvp/vpi_mcd.cc:312:21:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
	  fd_table[i].fp = fopen(name, mode);
data/iverilog-11.0/vvp/vpi_mcd.cc:315:20:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
		fd_table[i].fp = fopen(name, mode);
data/iverilog-11.0/vvp/vpi_mcd.cc:317:20:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
		fd_table[i].fp = fopen("nul", mode);
data/iverilog-11.0/vvp/vpi_modules.cc:101:7:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
      char basepath[4096], tmp[4096];
data/iverilog-11.0/vvp/vpi_modules.cc:144:7:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
      char buf[4096];
data/iverilog-11.0/vvp/vpi_priv.cc:103:7:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
      char data[64*1024 - sizeof (struct vpip_string_chunk*)];
data/iverilog-11.0/vvp/vpi_priv.cc:288:14:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
      static char buf[32];
data/iverilog-11.0/vvp/vpi_priv.cc:303:6:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
	    sprintf(buf, "%d", (int)code);
data/iverilog-11.0/vvp/vpi_priv.cc:310:14:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
      static char buf[32];
data/iverilog-11.0/vvp/vpi_priv.cc:385:6:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
	    sprintf(buf, "%d", (int)code);
data/iverilog-11.0/vvp/vpi_priv.cc:584:12:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    static char trace_buf[1024];
data/iverilog-11.0/vvp/vpi_priv.cc:589:15:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
		vpi_trace = fopen(path, "w");
data/iverilog-11.0/vvp/vpi_priv.cc:1056:7:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
      memcpy(rtn, val, num_bytes);
data/iverilog-11.0/vvp/vpi_scope.cc:206:7:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
      char buf[4096];  // XXX is a fixed buffer size really reliable?
data/iverilog-11.0/vvp/vpi_signal.cc:58:14:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
extern const char hex_digits[256];
data/iverilog-11.0/vvp/vpi_signal.cc:59:14:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
extern const char oct_digits[64];
data/iverilog-11.0/vvp/vpi_signal.cc:1174:16:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
      unsigned char space[sizeof (struct __vpiSignal)];
data/iverilog-11.0/vvp/vpi_vthr_vector.cc:49:14:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
extern const char hex_digits[256];
data/iverilog-11.0/vvp/vpi_vthr_vector.cc:50:14:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
extern const char oct_digits[64];
data/iverilog-11.0/vvp/vpi_vthr_vector.cc:130:5:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
		  sprintf(rbuf, "%0.0f", vlg_round(val));
data/iverilog-11.0/vvp/vpip_format.cc:23:14:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
static const char str_char1_table[257] = {
data/iverilog-11.0/vvp/vpip_format.cc:33:14:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
static const char str_char2_table[257] = {
data/iverilog-11.0/vvp/vpip_hex.cc:28:14:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
extern const char hex_digits[256];
data/iverilog-11.0/vvp/vpip_oct.cc:28:14:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
extern const char oct_digits[64];
data/iverilog-11.0/vvp/vpip_to_dec.cc:92:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char segment[BDIGITS];
data/iverilog-11.0/vvp/vvp_net.cc:3053:6:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	    memcpy(val_, that.val_, sizeof val_);
data/iverilog-11.0/vvp/vvp_net.cc:3056:6:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	    memcpy(ptr_, that.ptr_, size_);
data/iverilog-11.0/vvp/vvp_net.cc:3126:7:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
      memcpy(ptr_, that.ptr_, size_);
data/iverilog-11.0/vvp/vvp_net.h:946:15:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	    unsigned char val_[sizeof(void*)];
data/iverilog-11.0/cadpli/cadpli.c:53:6:  [1] (buffer) strncpy:
  Easily used incorrectly; doesn't always \0-terminate or check for invalid
  pointers [MS-banned] (CWE-120).
	    strncpy(module, cp, bp-cp);
data/iverilog-11.0/dosify.c:56:20:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
      while ((ch = fgetc(ifile)) != EOF) {
data/iverilog-11.0/driver-vpi/main.c:146:6:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	if (strlen(end) >= strlen(str))
data/iverilog-11.0/driver-vpi/main.c:146:21:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	if (strlen(end) >= strlen(str))
data/iverilog-11.0/driver-vpi/main.c:149:15:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	ext = str + (strlen(str) - strlen(end));
data/iverilog-11.0/driver-vpi/main.c:149:29:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	ext = str + (strlen(str) - strlen(end));
data/iverilog-11.0/driver-vpi/main.c:158:6:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	if (strlen(prefix) >= strlen(str))
data/iverilog-11.0/driver-vpi/main.c:158:24:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	if (strlen(prefix) >= strlen(str))
data/iverilog-11.0/driver-vpi/main.c:161:31:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	return strnicmp(prefix, str, strlen(prefix)) ? 0 : 1;
data/iverilog-11.0/driver-vpi/main.c:169:38:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	char *nptr = (char *) realloc(*ptr, strlen(*ptr) +
data/iverilog-11.0/driver-vpi/main.c:170:62:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
                                            (count ? count : strlen(app)) + 1);
data/iverilog-11.0/driver-vpi/main.c:180:3:  [1] (buffer) strncat:
  Easily used incorrectly (e.g., incorrectly computing the correct maximum
  size to add) [MS-banned] (CWE-120). Consider strcat_s, strlcat, snprintf,
  or automatically resizing strings.
		strncat(*ptr, app, count);
data/iverilog-11.0/driver-vpi/main.c:196:13:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	if ((*str)[strlen(*str)-1] != '\\')
data/iverilog-11.0/driver-vpi/main.c:205:55:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	char *nptr = (char *) realloc(*ptr, (count ? count : strlen(str)) + 1);
data/iverilog-11.0/driver-vpi/main.c:215:3:  [1] (buffer) strncpy:
  Easily used incorrectly; doesn't always \0-terminate or check for invalid
  pointers [MS-banned] (CWE-120).
		strncpy(*ptr, str, count);
data/iverilog-11.0/driver-vpi/main.c:296:16:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	              strlen(value)+1);
data/iverilog-11.0/driver-vpi/main.c:329:15:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
			           strlen(argv[idx])-strlen(dot_c_ext));
data/iverilog-11.0/driver-vpi/main.c:329:33:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
			           strlen(argv[idx])-strlen(dot_c_ext));
data/iverilog-11.0/driver-vpi/main.c:340:15:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
			           strlen(argv[idx])-strlen(dot_cc_ext));
data/iverilog-11.0/driver-vpi/main.c:340:33:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
			           strlen(argv[idx])-strlen(dot_cc_ext));
data/iverilog-11.0/driver-vpi/main.c:351:15:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
			           strlen(argv[idx])-strlen(dot_cpp_ext));
data/iverilog-11.0/driver-vpi/main.c:351:33:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
			           strlen(argv[idx])-strlen(dot_cpp_ext));
data/iverilog-11.0/driver-vpi/main.c:360:15:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
			           strlen(argv[idx])-strlen(dot_o_ext));
data/iverilog-11.0/driver-vpi/main.c:360:33:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
			           strlen(argv[idx])-strlen(dot_o_ext));
data/iverilog-11.0/driver-vpi/main.c:365:12:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
			        strlen(argv[idx])-(sizeof(mingw_option)-1));
data/iverilog-11.0/driver-vpi/main.c:369:12:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
			        strlen(argv[idx])-(sizeof(name_option)-1));
data/iverilog-11.0/driver/main.c:303:15:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
      assert((strlen(tmpdir) + strlen(str)) < sizeof pathbuf - 10);
data/iverilog-11.0/driver/main.c:303:32:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
      assert((strlen(tmpdir) + strlen(str)) < sizeof pathbuf - 10);
data/iverilog-11.0/driver/main.c:377:14:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
      ncmd = strlen(tmp);
data/iverilog-11.0/driver/main.c:383:30:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	    cmd = realloc(cmd, ncmd+strlen(tmp)+1);
data/iverilog-11.0/driver/main.c:385:14:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	    ncmd += strlen(tmp);
data/iverilog-11.0/driver/main.c:434:6:  [1] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant character.
	    strcpy(tmp, "");
data/iverilog-11.0/driver/main.c:436:21:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
      size_t ncmd = strlen(tmp);
data/iverilog-11.0/driver/main.c:446:12:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
      rc = strlen(tmp);
data/iverilog-11.0/driver/main.c:453:11:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	    rc = strlen(vv);
data/iverilog-11.0/driver/main.c:461:11:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	    rc = strlen(tmp);
data/iverilog-11.0/driver/main.c:468:12:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
      rc = strlen(tmp);
data/iverilog-11.0/driver/main.c:474:12:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
      rc = strlen(tmp);
data/iverilog-11.0/driver/main.c:483:12:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
      rc = strlen(tmp);
data/iverilog-11.0/driver/main.c:540:5:  [1] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused). Risk is low because the
  source is a constant character.
		  strcat(warning_flags, "n");
data/iverilog-11.0/driver/main.c:543:5:  [1] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused). Risk is low because the
  source is a constant character.
		  strcat(warning_flags, "f");
data/iverilog-11.0/driver/main.c:546:5:  [1] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused). Risk is low because the
  source is a constant character.
		  strcat(warning_flags, "i");
data/iverilog-11.0/driver/main.c:549:5:  [1] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused). Risk is low because the
  source is a constant character.
		  strcat(warning_flags, "d");
data/iverilog-11.0/driver/main.c:552:5:  [1] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused). Risk is low because the
  source is a constant character.
		  strcat(warning_flags, "r");
data/iverilog-11.0/driver/main.c:555:5:  [1] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused). Risk is low because the
  source is a constant character.
		  strcat(warning_flags, "R");
data/iverilog-11.0/driver/main.c:558:5:  [1] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused). Risk is low because the
  source is a constant character.
		  strcat(warning_flags, "p");
data/iverilog-11.0/driver/main.c:561:5:  [1] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused). Risk is low because the
  source is a constant character.
		  strcat(warning_flags, "s");
data/iverilog-11.0/driver/main.c:564:5:  [1] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused). Risk is low because the
  source is a constant character.
		  strcat(warning_flags, "t");
data/iverilog-11.0/driver/main.c:569:5:  [1] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused). Risk is low because the
  source is a constant character.
		  strcat(warning_flags, "l");
data/iverilog-11.0/driver/main.c:572:5:  [1] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused). Risk is low because the
  source is a constant character.
		  strcat(warning_flags, "v");
data/iverilog-11.0/driver/main.c:575:5:  [1] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused). Risk is low because the
  source is a constant character.
		  strcat(warning_flags, "a");
data/iverilog-11.0/driver/main.c:691:11:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
      if (strlen(name) > 4 && strcasecmp(".sft", name+strlen(name)-4) == 0) {
data/iverilog-11.0/driver/main.c:691:55:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
      if (strlen(name) > 4 && strcasecmp(".sft", name+strlen(name)-4) == 0) {
data/iverilog-11.0/driver/main.c:695:18:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
      } else if (strlen(name) > 4 && strcasecmp(".vpi", name+strlen(name)-4) == 0) {
data/iverilog-11.0/driver/main.c:695:62:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
      } else if (strlen(name) > 4 && strcasecmp(".vpi", name+strlen(name)-4) == 0) {
data/iverilog-11.0/driver/main.c:894:17:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
      end = var+strlen(var);
data/iverilog-11.0/driver/main.c:967:5:  [1] (buffer) strncpy:
  Easily used incorrectly; doesn't always \0-terminate or check for invalid
  pointers [MS-banned] (CWE-120).
		  strncpy(path, name, sizeof(path) - 1);
data/iverilog-11.0/driver/main.c:1014:13:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	    assert(strlen(IVL_ROOT) < sizeof ivl_root);
data/iverilog-11.0/driver/main.c:1079:17:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
      if (len + strlen(s) + strlen(ivl_lib_suffix) >= (ssize_t) sizeof ivl_root) {
data/iverilog-11.0/driver/main.c:1079:29:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
      if (len + strlen(s) + strlen(ivl_lib_suffix) >= (ssize_t) sizeof ivl_root) {
data/iverilog-11.0/driver/substit.c:29:21:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
      size_t nbuf = strlen(str) + 1;
data/iverilog-11.0/driver/substit.c:45:5:  [1] (buffer) strncpy:
  Easily used incorrectly; doesn't always \0-terminate or check for invalid
  pointers [MS-banned] (CWE-120).
		  strncpy(name, str, ep-str);
data/iverilog-11.0/driver/substit.c:60:9:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		  if (strlen(value) >= (nbuf - (cp-buf))) {
data/iverilog-11.0/driver/substit.c:62:24:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
			nbuf = (cp - buf) + strlen(value) + 1;
data/iverilog-11.0/driver/substit.c:68:11:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		  cp += strlen(cp);
data/iverilog-11.0/ivlpp/main.c:118:23:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	    char*tail = cp + strlen(cp);
data/iverilog-11.0/ivlpp/main.c:156:23:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		  char*buf = malloc(strlen(arg) + 2);
data/iverilog-11.0/ivlpp/main.c:226:23:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	    char*tail = cp + strlen(cp);
data/iverilog-11.0/ivlpp/main.c:304:21:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		char*buf = malloc(strlen(optarg) + 2);
data/iverilog-11.0/libmisc/StringHeap.cc:49:22:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
      unsigned len = strlen(text);
data/iverilog-11.0/libveriuser/getlongp.c:53:13:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
      len = strlen(value.value.str);
data/iverilog-11.0/libveriuser/mc_scan_plusargs.c:49:10:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	    if (strlen(a) < strlen(p)) continue;
data/iverilog-11.0/libveriuser/mc_scan_plusargs.c:49:22:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	    if (strlen(a) < strlen(p)) continue;
data/iverilog-11.0/libveriuser/priv.c:42:13:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
      len = strlen(txt);
data/iverilog-11.0/load_module.cc:124:24:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	    unsigned namsiz = strlen(de->d_name);
data/iverilog-11.0/load_module.cc:130:23:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		  unsigned sufsiz = strlen(sufptr);
data/iverilog-11.0/load_module.cc:148:5:  [1] (buffer) strncpy:
  Easily used incorrectly; doesn't always \0-terminate or check for invalid
  pointers [MS-banned] (CWE-120).
		  strncpy(key, de->d_name, namsiz-sufsiz);
data/iverilog-11.0/main.cc:131:11:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
				      strlen(vpi_module_list)
data/iverilog-11.0/main.cc:132:13:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
				      + strlen(name)
data/iverilog-11.0/main.cc:134:6:  [1] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused). Risk is low because the
  source is a constant character.
	    strcat(tmp, ",");
data/iverilog-11.0/main.cc:610:13:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	    assert(strlen(buf) < sizeof buf);
data/iverilog-11.0/main.cc:611:11:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	    if ((strlen(buf) == ((sizeof buf) - 1))
data/iverilog-11.0/main.cc:625:21:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	    char*ep = cp + strlen(cp);
data/iverilog-11.0/main.cc:828:13:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	    assert(strlen(line_buf) < sizeof line_buf);
data/iverilog-11.0/main.cc:829:11:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	    if ((strlen(line_buf) == ((sizeof line_buf) - 1))
data/iverilog-11.0/main.cc:837:23:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	    char*tail = cp + strlen(cp);
data/iverilog-11.0/net_link.cc:545:23:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	    name_ = new char[strlen(tmps.c_str()) + 1];
data/iverilog-11.0/net_link.cc:556:23:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	    name_ = new char[strlen(tmps.c_str()) + 1];
data/iverilog-11.0/net_scope.cc:338:44:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
      const size_t max_pad_attempts = 32 + strlen(prefix);
data/iverilog-11.0/pform.cc:220:33:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	char *nchar = strcpy(new char [strlen(buf_ptr)+1], buf_ptr);
data/iverilog-11.0/pform.cc:3738:35:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	    char*cmdline = (char*)malloc(strlen(ivlpp_string) +
data/iverilog-11.0/pform.cc:3739:14:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
					        strlen(path) + 4);
data/iverilog-11.0/pform.cc:3743:6:  [1] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused). Risk is low because the
  source is a constant character.
	    strcat(cmdline, "\"");
data/iverilog-11.0/t-dll-api.cc:316:23:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
      unsigned need = strlen(sn) + 1 + strlen(net->name) + 1;
data/iverilog-11.0/t-dll-api.cc:316:40:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
      unsigned need = strlen(sn) + 1 + strlen(net->name) + 1;
data/iverilog-11.0/t-dll-api.cc:323:32:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
      char*tmp = name_buffer + strlen(sn);
data/iverilog-11.0/t-dll-api.cc:1359:23:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
      unsigned need = strlen(sn) + 1 + strlen(net->name) + 1;
data/iverilog-11.0/t-dll-api.cc:1359:40:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
      unsigned need = strlen(sn) + 1 + strlen(net->name) + 1;
data/iverilog-11.0/t-dll-api.cc:1366:32:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
      char*tmp = name_buffer + strlen(sn);
data/iverilog-11.0/t-dll-api.cc:2203:13:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	    len += strlen(cur->name_) + 1;
data/iverilog-11.0/t-dll-api.cc:2217:7:  [1] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused). Risk is low because the
  source is a constant character.
      strcat(buf, ".");
data/iverilog-11.0/t-dll-api.cc:2446:18:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
      needlen += strlen(net->name_) + 2;
data/iverilog-11.0/t-dll-api.cc:2454:7:  [1] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused). Risk is low because the
  source is a constant character.
      strcat(name_buffer, ".");
data/iverilog-11.0/t-dll.cc:170:23:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
      char*cp = buf + strlen(buf);
data/iverilog-11.0/t-dll.cc:672:19:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	    size_t len = strlen(basedir) + 1 + strlen(dll_path_) + 1;
data/iverilog-11.0/t-dll.cc:672:41:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	    size_t len = strlen(basedir) + 1 + strlen(dll_path_) + 1;
data/iverilog-11.0/t-dll.cc:2831:19:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	    size_t len = strlen(basedir) + 1 + strlen(target_name) + 1;
data/iverilog-11.0/t-dll.cc:2831:41:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	    size_t len = strlen(basedir) + 1 + strlen(target_name) + 1;
data/iverilog-11.0/tgt-fpga/d-generic-edif.c:52:16:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
      newlen = strlen(rec->joined) + strlen(joint) + 2;
data/iverilog-11.0/tgt-fpga/d-generic-edif.c:52:38:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
      newlen = strlen(rec->joined) + strlen(joint) + 2;
data/iverilog-11.0/tgt-fpga/d-generic-edif.c:54:7:  [1] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused). Risk is low because the
  source is a constant character.
      strcat(rec->joined, " ");
data/iverilog-11.0/tgt-fpga/edif.c:112:48:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
      return (strspn(text, edif_name_chars) == strlen(text));
data/iverilog-11.0/tgt-fpga/mangle.c:40:14:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
      cnt += strlen(buf);
data/iverilog-11.0/tgt-fpga/mangle.c:78:21:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
      name = malloc(strlen(ivl_nexus_name(net)) + 1);
data/iverilog-11.0/tgt-fpga/xilinx.c:423:30:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	    if (tmp == 0) tmp = str+strlen(str);
data/iverilog-11.0/tgt-fpga/xilinx.c:426:6:  [1] (buffer) strncpy:
  Easily used incorrectly; doesn't always \0-terminate or check for invalid
  pointers [MS-banned] (CWE-120).
	    strncpy(pins[idx], str, tmp-str);
data/iverilog-11.0/tgt-stub/enumerate.c:33:24:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	    size_t bits_len = strlen(bits);
data/iverilog-11.0/tgt-vhdl/stmt.cc:375:19:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
   vhdl_var_set_t read;
data/iverilog-11.0/tgt-vhdl/stmt.cc:376:20:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
   expr->find_vars(read);
data/iverilog-11.0/tgt-vhdl/stmt.cc:379:45:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
   for (vhdl_var_set_t::const_iterator it = read.begin();
data/iverilog-11.0/tgt-vhdl/stmt.cc:380:15:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
        it != read.end(); ++it) {
data/iverilog-11.0/tgt-vhdl/vhdl_syntax.cc:278:48:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
void stmt_container::find_vars(vhdl_var_set_t& read,
data/iverilog-11.0/tgt-vhdl/vhdl_syntax.cc:286:24:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
      (*it)->find_vars(read, write);
data/iverilog-11.0/tgt-vhdl/vhdl_syntax.cc:381:48:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
void vhdl_wait_stmt::find_vars(vhdl_var_set_t& read,
data/iverilog-11.0/tgt-vhdl/vhdl_syntax.cc:385:24:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
      expr_->find_vars(read);
data/iverilog-11.0/tgt-vhdl/vhdl_syntax.cc:539:48:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
void vhdl_expr_list::find_vars(vhdl_var_set_t& read)
data/iverilog-11.0/tgt-vhdl/vhdl_syntax.cc:543:24:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
      (*it)->find_vars(read);
data/iverilog-11.0/tgt-vhdl/vhdl_syntax.cc:569:49:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
void vhdl_pcall_stmt::find_vars(vhdl_var_set_t& read,
data/iverilog-11.0/tgt-vhdl/vhdl_syntax.cc:572:21:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
   exprs_.find_vars(read);
data/iverilog-11.0/tgt-vhdl/vhdl_syntax.cc:601:46:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
void vhdl_var_ref::find_vars(vhdl_var_set_t& read)
data/iverilog-11.0/tgt-vhdl/vhdl_syntax.cc:603:4:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
   read.insert(this);
data/iverilog-11.0/tgt-vhdl/vhdl_syntax.cc:631:44:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
void vhdl_fcall::find_vars(vhdl_var_set_t& read)
data/iverilog-11.0/tgt-vhdl/vhdl_syntax.cc:633:21:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
   exprs_.find_vars(read);
data/iverilog-11.0/tgt-vhdl/vhdl_syntax.cc:647:59:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
void vhdl_abstract_assign_stmt::find_vars(vhdl_var_set_t& read,
data/iverilog-11.0/tgt-vhdl/vhdl_syntax.cc:651:20:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
   rhs_->find_vars(read);
data/iverilog-11.0/tgt-vhdl/vhdl_syntax.cc:807:50:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
void vhdl_report_stmt::find_vars(vhdl_var_set_t& read, vhdl_var_set_t&)
data/iverilog-11.0/tgt-vhdl/vhdl_syntax.cc:809:21:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
   text_->find_vars(read);
data/iverilog-11.0/tgt-vhdl/vhdl_syntax.cc:867:46:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
void vhdl_if_stmt::find_vars(vhdl_var_set_t& read,
data/iverilog-11.0/tgt-vhdl/vhdl_syntax.cc:870:21:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
   test_->find_vars(read);
data/iverilog-11.0/tgt-vhdl/vhdl_syntax.cc:872:25:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
   then_part_.find_vars(read, write);
data/iverilog-11.0/tgt-vhdl/vhdl_syntax.cc:873:25:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
   else_part_.find_vars(read, write);
data/iverilog-11.0/tgt-vhdl/vhdl_syntax.cc:877:29:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
      (*it).test->find_vars(read);
data/iverilog-11.0/tgt-vhdl/vhdl_syntax.cc:878:34:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
      (*it).container->find_vars(read, write);
data/iverilog-11.0/tgt-vhdl/vhdl_syntax.cc:903:51:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
void vhdl_unaryop_expr::find_vars(vhdl_var_set_t& read)
data/iverilog-11.0/tgt-vhdl/vhdl_syntax.cc:905:24:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
   operand_->find_vars(read);
data/iverilog-11.0/tgt-vhdl/vhdl_syntax.cc:948:49:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
void vhdl_binop_expr::find_vars(vhdl_var_set_t& read)
data/iverilog-11.0/tgt-vhdl/vhdl_syntax.cc:952:24:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
      (*it)->find_vars(read);
data/iverilog-11.0/tgt-vhdl/vhdl_syntax.cc:1028:48:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
void vhdl_case_stmt::find_vars(vhdl_var_set_t& read,
data/iverilog-11.0/tgt-vhdl/vhdl_syntax.cc:1031:21:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
   test_->find_vars(read);
data/iverilog-11.0/tgt-vhdl/vhdl_syntax.cc:1035:31:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
      (*it)->when_->find_vars(read);
data/iverilog-11.0/tgt-vhdl/vhdl_syntax.cc:1036:31:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
      (*it)->stmts_.find_vars(read, write);
data/iverilog-11.0/tgt-vhdl/vhdl_syntax.cc:1065:49:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
void vhdl_while_stmt::find_vars(vhdl_var_set_t& read,
data/iverilog-11.0/tgt-vhdl/vhdl_syntax.cc:1068:21:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
   test_->find_vars(read);
data/iverilog-11.0/tgt-vhdl/vhdl_syntax.cc:1070:30:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
   vhdl_loop_stmt::find_vars(read, write);
data/iverilog-11.0/tgt-vhdl/vhdl_syntax.cc:1081:48:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
void vhdl_loop_stmt::find_vars(vhdl_var_set_t& read,
data/iverilog-11.0/tgt-vhdl/vhdl_syntax.cc:1084:21:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
   stmts_.find_vars(read, write);
data/iverilog-11.0/tgt-vhdl/vhdl_syntax.cc:1100:47:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
void vhdl_for_stmt::find_vars(vhdl_var_set_t& read,
data/iverilog-11.0/tgt-vhdl/vhdl_syntax.cc:1103:21:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
   from_->find_vars(read);
data/iverilog-11.0/tgt-vhdl/vhdl_syntax.cc:1106:30:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
   vhdl_loop_stmt::find_vars(read, write);
data/iverilog-11.0/tgt-vlog95/expr.c:839:34:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
                            (int)strlen(msg), " ");
data/iverilog-11.0/tgt-vlog95/expr.c:854:34:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
                            (int)strlen(msg), " ");
data/iverilog-11.0/tgt-vlog95/logic_lpm.c:2115:20:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	    unsigned lp = strlen(name) - 1;
data/iverilog-11.0/tgt-vlog95/logic_lpm.c:2213:20:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	    unsigned lp = strlen(name) - 1;
data/iverilog-11.0/tgt-vlog95/misc.c:795:37:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
      package_name = (char *)malloc(strlen(name)+13);
data/iverilog-11.0/tgt-vlog95/numbers.c:206:12:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	    len = strlen(buffer);
data/iverilog-11.0/tgt-vlog95/scope.c:264:19:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	    size_t len = strlen(ivl_scope_name(scope)) +
data/iverilog-11.0/tgt-vlog95/scope.c:265:19:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	                 strlen(ivl_scope_tname(scope)) + 3;
data/iverilog-11.0/tgt-vlog95/scope.c:268:13:  [1] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused). Risk is low because the
  source is a constant character.
	    (void) strcat(name, "[");
data/iverilog-11.0/tgt-vlog95/scope.c:270:13:  [1] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused). Risk is low because the
  source is a constant character.
	    (void) strcat(name, "]");
data/iverilog-11.0/tgt-vlog95/scope.c:944:36:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
      name_return = (char *)malloc(strlen(name_head) +
data/iverilog-11.0/tgt-vlog95/scope.c:945:36:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
                                   strlen(name_func) +
data/iverilog-11.0/tgt-vlog95/scope.c:946:36:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
                                   strlen(name_tail) + 1);
data/iverilog-11.0/tgt-vvp/draw_enum.c:40:22:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
      unsigned len = strlen(bits);
data/iverilog-11.0/tgt-vvp/draw_enum.c:61:23:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
      for (bit = bits+strlen(bits) ; bit > bits ; bit -= 1)
data/iverilog-11.0/tgt-vvp/draw_net_input.c:93:13:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
      dp += strlen(dp);
data/iverilog-11.0/tgt-vvp/draw_net_input.c:102:7:  [1] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant character.
      strcpy(dp, ">");
data/iverilog-11.0/tgt-vvp/draw_net_input.c:119:13:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
      dp += strlen(dp);
data/iverilog-11.0/tgt-vvp/draw_net_input.c:153:7:  [1] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant character.
      strcpy(dp, ">");
data/iverilog-11.0/tgt-vvp/draw_net_input.c:217:20:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
      size_t len = strlen(str);
data/iverilog-11.0/tgt-vvp/draw_net_input.c:238:19:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
            dp += strlen(dp);
data/iverilog-11.0/tgt-vvp/draw_net_input.c:257:19:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
            dp += strlen(dp);
data/iverilog-11.0/tgt-vvp/draw_net_input.c:271:32:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
      result = realloc(result, strlen(tmp)+1);
data/iverilog-11.0/tgt-vvp/draw_net_input.c:498:11:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		  len = strlen(ivl_scope_name(scope));
data/iverilog-11.0/tgt-vvp/draw_net_input.c:666:12:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		  tmp += strlen(tmp);
data/iverilog-11.0/tgt-vvp/draw_net_input.c:707:41:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	    nex_private = realloc(nex_private, strlen(buf)+1);
data/iverilog-11.0/tgt-vvp/draw_vpi.c:320:18:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
			dp = buffer + strlen(buffer);
data/iverilog-11.0/tgt-vvp/draw_vpi.c:337:24:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
			size_t needed_len = strlen(ivl_expr_string(expr)) + 3;
data/iverilog-11.0/tgt-vvp/eval_expr.c:302:26:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
      unsigned str_len = strlen(in);
data/iverilog-11.0/tgt-vvp/vvp.c:87:18:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		  comma = cp + strlen(cp);
data/iverilog-11.0/tgt-vvp/vvp.c:90:6:  [1] (buffer) strncpy:
  Easily used incorrectly; doesn't always \0-terminate or check for invalid
  pointers [MS-banned] (CWE-120).
	    strncpy(buffer, cp, comma-cp);
data/iverilog-11.0/tgt-vvp/vvp.c:138:17:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		  tail = cp + strlen(cp);
data/iverilog-11.0/tgt-vvp/vvp_scope.c:55:26:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	    unsigned int nlen = strlen(id) + 4*(++nesc) + 1;
data/iverilog-11.0/tgt-vvp/vvp_scope.c:61:5:  [1] (buffer) strncpy:
  Easily used incorrectly; doesn't always \0-terminate or check for invalid
  pointers [MS-banned] (CWE-120).
		  strncpy(out+iout, inp, n);
data/iverilog-11.0/tgt-vvp/vvp_scope.c:104:26:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	    unsigned int nlen = strlen(id) + 2*(++nesc) + 1;
data/iverilog-11.0/tgt-vvp/vvp_scope.c:110:5:  [1] (buffer) strncpy:
  Easily used incorrectly; doesn't always \0-terminate or check for invalid
  pointers [MS-banned] (CWE-120).
		  strncpy(out+iout, inp, n);
data/iverilog-11.0/tgt-vvp/vvp_scope.c:1189:4:  [1] (buffer) strncpy:
  Easily used incorrectly; doesn't always \0-terminate or check for invalid
  pointers [MS-banned] (CWE-120).
			strncpy(tmp[sub-idx], draw_input_from_net(nex), sizeof(tmp[0]));
data/iverilog-11.0/tgt-vvp/vvp_scope.c:1207:4:  [1] (buffer) strncpy:
  Easily used incorrectly; doesn't always \0-terminate or check for invalid
  pointers [MS-banned] (CWE-120).
			strncpy(tmp[sub-idx], draw_input_from_net(nex), sizeof(tmp[0]));
data/iverilog-11.0/tgt-vvp/vvp_scope.c:1225:4:  [1] (buffer) strncpy:
  Easily used incorrectly; doesn't always \0-terminate or check for invalid
  pointers [MS-banned] (CWE-120).
			strncpy(tmp[sub-idx], draw_input_from_net(nex), sizeof(tmp[0]));
data/iverilog-11.0/tgt-vvp/vvp_scope.c:1258:4:  [1] (buffer) strncpy:
  Easily used incorrectly; doesn't always \0-terminate or check for invalid
  pointers [MS-banned] (CWE-120).
			strncpy(tmp[idx], draw_input_from_net(nex), sizeof(tmp[0]));
data/iverilog-11.0/tgt-vvp/vvp_scope.c:1267:4:  [1] (buffer) strncpy:
  Easily used incorrectly; doesn't always \0-terminate or check for invalid
  pointers [MS-banned] (CWE-120).
			strncpy(tmp[idx], draw_input_from_net(nex), sizeof(tmp[0]));
data/iverilog-11.0/tgt-vvp/vvp_scope.c:1276:4:  [1] (buffer) strncpy:
  Easily used incorrectly; doesn't always \0-terminate or check for invalid
  pointers [MS-banned] (CWE-120).
			strncpy(tmp[idx], draw_input_from_net(nex), sizeof(tmp[0]));
data/iverilog-11.0/verireal.cc:39:27:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
      char*tmp = new char[strlen(txt)+1];
data/iverilog-11.0/vhdlpp/expression.cc:354:10:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
: value_(strlen(val))
data/iverilog-11.0/vhdlpp/vhdlint.cc:45:28:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    unsigned text_length = strlen(text);
data/iverilog-11.0/vhdlpp/vhdlreal.cc:40:12:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    assert(strlen(text) != 0);
data/iverilog-11.0/vhdlpp/vhdlreal.cc:41:29:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    char* buffer = new char[strlen(text)+1];
data/iverilog-11.0/vpi/fstapi.c:343:9:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
        read(__fd, pnt + i, ((__len - i) >= SSIZE_MAX) ? SSIZE_MAX : (__len - i));
data/iverilog-11.0/vpi/fstapi.c:553:14:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
        ch = fgetc(f);
data/iverilog-11.0/vpi/fstapi.c:582:14:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
        ch = fgetc(f);
data/iverilog-11.0/vpi/fstapi.c:612:14:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
        ch = fgetc(f);
data/iverilog-11.0/vpi/fstapi.c:1169:20:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
        int flen = strlen(nam);
data/iverilog-11.0/vpi/fstapi.c:2057:45:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
                char *fnam = (char *)malloc(strlen(xc->filename) + 5 + 1);
data/iverilog-11.0/vpi/fstapi.c:2176:36:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
                        int flen = strlen(xc->filename);
data/iverilog-11.0/vpi/fstapi.c:2240:20:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
        int flen = strlen(xc->filename);
data/iverilog-11.0/vpi/fstapi.c:2283:19:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
        int len = strlen(dat);
data/iverilog-11.0/vpi/fstapi.c:2302:19:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
        int len = strlen(vers);
data/iverilog-11.0/vpi/fstapi.c:2378:20:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
        int slen = strlen(path);
data/iverilog-11.0/vpi/fstapi.c:2632:16:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
        nlen = strlen(nam);
data/iverilog-11.0/vpi/fstapi.c:2732:38:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
                xc->hier_file_len += strlen(scopename);
data/iverilog-11.0/vpi/fstapi.c:2736:38:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
                xc->hier_file_len += strlen(scopecomp);
data/iverilog-11.0/vpi/fstapi.c:2784:38:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
                xc->hier_file_len += strlen(attrname);
data/iverilog-11.0/vpi/fstapi.c:2825:13:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	name_len = strlen(name);
data/iverilog-11.0/vpi/fstapi.c:2833:21:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		literal_lens[i] = strlen(literal_arr[i]);
data/iverilog-11.0/vpi/fstapi.c:2836:18:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		val_lens[i] =  strlen(val_arr[i]);
data/iverilog-11.0/vpi/fstapi.c:3557:29:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
        int len = chl + 1 + strlen(nam);
data/iverilog-11.0/vpi/fstapi.c:3913:37:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
        char *fnam = (char *)malloc(strlen(xc->filename) + 6 + 16 + 32 + 1);
data/iverilog-11.0/vpi/fstapi.c:4120:19:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
        int tag = fgetc(xc->fh);
data/iverilog-11.0/vpi/fstapi.c:4125:48:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
                        xc->hier.u.scope.typ = fgetc(xc->fh);
data/iverilog-11.0/vpi/fstapi.c:4127:37:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
                        while((ch = fgetc(xc->fh)))
data/iverilog-11.0/vpi/fstapi.c:4135:37:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
                        while((ch = fgetc(xc->fh)))
data/iverilog-11.0/vpi/fstapi.c:4149:47:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
                        xc->hier.u.attr.typ = fgetc(xc->fh);
data/iverilog-11.0/vpi/fstapi.c:4150:51:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
                        xc->hier.u.attr.subtype = fgetc(xc->fh);
data/iverilog-11.0/vpi/fstapi.c:4152:37:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
                        while((ch = fgetc(xc->fh)))
data/iverilog-11.0/vpi/fstapi.c:4210:52:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
                        xc->hier.u.var.direction = fgetc(xc->fh);
data/iverilog-11.0/vpi/fstapi.c:4212:37:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
                        while((ch = fgetc(xc->fh)))
data/iverilog-11.0/vpi/fstapi.c:4339:19:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
        int tag = fgetc(xc->fh);
data/iverilog-11.0/vpi/fstapi.c:4343:37:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
                        scopetype = fgetc(xc->fh);
data/iverilog-11.0/vpi/fstapi.c:4346:37:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
                        while((ch = fgetc(xc->fh)))
data/iverilog-11.0/vpi/fstapi.c:4351:31:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
                        while(fgetc(xc->fh)) { }; /* scopecomp */
data/iverilog-11.0/vpi/fstapi.c:4361:36:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
                        attrtype = fgetc(xc->fh);
data/iverilog-11.0/vpi/fstapi.c:4362:35:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
                        subtype = fgetc(xc->fh);
data/iverilog-11.0/vpi/fstapi.c:4364:37:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
                        while((ch = fgetc(xc->fh)))
data/iverilog-11.0/vpi/fstapi.c:4447:40:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
                        /* vardir = */ fgetc(xc->fh); /* unused in VCD reader, but need to advance read pointer */
data/iverilog-11.0/vpi/fstapi.c:4449:37:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
                        while((ch = fgetc(xc->fh)))
data/iverilog-11.0/vpi/fstapi.c:4545:11:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
sectype = fgetc(xc->f);
data/iverilog-11.0/vpi/fstapi.c:4553:20:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
        int flen = strlen(xc->filename);
data/iverilog-11.0/vpi/fstapi.c:4634:27:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
                sectype = fgetc(xc->f);
data/iverilog-11.0/vpi/fstapi.c:4695:38:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
                                ch = fgetc(xc->f);
data/iverilog-11.0/vpi/fstapi.c:4701:38:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
                                ch = fgetc(xc->f);
data/iverilog-11.0/vpi/fstapi.c:4823:60:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
                                xc->blackout_activity[i] = fgetc(xc->f) != 0;
data/iverilog-11.0/vpi/fstapi.c:4871:20:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
        int flen = strlen(nam);
data/iverilog-11.0/vpi/fstapi.c:5032:19:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
        sectype = fgetc(xc->f);
data/iverilog-11.0/vpi/fstapi.c:5355:20:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
        packtype = fgetc(xc->f);
data/iverilog-11.0/vpi/fstapi.c:6053:19:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
        sectype = fgetc(xc->f);
data/iverilog-11.0/vpi/fstapi.c:6078:35:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
                        sectype = fgetc(xc->f);
data/iverilog-11.0/vpi/fstapi.c:6203:21:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
xc->rvat_packtype = fgetc(xc->f);
data/iverilog-11.0/vpi/fstapi.c:6992:74:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
			newlen = fstUtilityEscToBin(NULL, (unsigned char*)et->literal_arr[i], strlen(et->literal_arr[i]));
data/iverilog-11.0/vpi/fstapi.c:7003:70:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
			newlen = fstUtilityEscToBin(NULL, (unsigned char*)et->val_arr[i], strlen(et->val_arr[i]));
data/iverilog-11.0/vpi/lxt2_write.c:489:42:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
strcpy(s->name=(char *)malloc((s->namlen=strlen(name))+1),name);
data/iverilog-11.0/vpi/lxt2_write.c:524:11:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
int len = strlen(str);
data/iverilog-11.0/vpi/lxt2_write.c:943:9:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
if((len=strlen(name)) > lt->longestname) lt->longestname = len;
data/iverilog-11.0/vpi/lxt2_write.c:987:9:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
if((len=strlen(alias)) > lt->longestname) lt->longestname = len;
data/iverilog-11.0/vpi/lxt2_write.c:1018:20:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
unsigned int len = strlen(lt->lxtname);
data/iverilog-11.0/vpi/lxt2_write.c:1661:23:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		unsigned int vlen = strlen(d_buf)+1;
data/iverilog-11.0/vpi/lxt2_write.c:1741:23:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		unsigned int vlen = strlen(value)+1;
data/iverilog-11.0/vpi/lxt2_write.c:1810:12:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
valuelen = strlen(value);	/* ensure string is proper length */
data/iverilog-11.0/vpi/lxt2_write.c:1963:24:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
			unsigned int vlen = strlen(vpnt)+1;
data/iverilog-11.0/vpi/lxt2_write.c:2001:2:  [1] (buffer) strncpy:
  Easily used incorrectly; doesn't always \0-terminate or check for invalid
  pointers [MS-banned] (CWE-120).
	strncpy(s->value, value, s->len);
data/iverilog-11.0/vpi/lxt2_write.c:2107:26:  [1] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant character.
	                        strcpy(tmp, "x");
data/iverilog-11.0/vpi/lxt_write.c:553:42:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
strcpy(s->name=(char *)malloc((s->namlen=strlen(name))+1),name);
data/iverilog-11.0/vpi/lxt_write.c:588:11:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
int len = strlen(str);
data/iverilog-11.0/vpi/lxt_write.c:1321:9:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
if((len=strlen(name)) > lt->longestname) lt->longestname = len;
data/iverilog-11.0/vpi/lxt_write.c:1364:9:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
if((len=strlen(alias)) > lt->longestname) lt->longestname = len;
data/iverilog-11.0/vpi/lxt_write.c:1931:26:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
					unsigned int vlen = strlen(vpnt)+1;
data/iverilog-11.0/vpi/lxt_write.c:2610:27:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
						unsigned int vlen = strlen(vpnt)+1;
data/iverilog-11.0/vpi/stringheap.c:37:22:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
      unsigned len = strlen(txt);
data/iverilog-11.0/vpi/sys_clog2.c:109:23:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	               (int) strlen(msg), " ", argc, argc == 1 ? "" : "s");
data/iverilog-11.0/vpi/sys_display.c:169:18:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    switch(name[ strlen(name)-1 ]){
data/iverilog-11.0/vpi/sys_display.c:227:7:  [1] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused). Risk is low because the
  source is a constant character.
      strcat(rtn, "0");
data/iverilog-11.0/vpi/sys_display.c:230:19:  [1] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused). Risk is low because the
  source is a constant character.
    if (prec > 0) strcat(rtn, ".");
data/iverilog-11.0/vpi/sys_display.c:232:7:  [1] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused). Risk is low because the
  source is a constant character.
      strcat(rtn, "0");
data/iverilog-11.0/vpi/sys_display.c:238:15:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    int len = strlen(value);
data/iverilog-11.0/vpi/sys_display.c:243:7:  [1] (buffer) strncpy:
  Easily used incorrectly; doesn't always \0-terminate or check for invalid
  pointers [MS-banned] (CWE-120).
      strncpy(rtn, value, head);
data/iverilog-11.0/vpi/sys_display.c:246:9:  [1] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused). Risk is low because the
  source is a constant character.
        strcat(rtn, ".");
data/iverilog-11.0/vpi/sys_display.c:247:9:  [1] (buffer) strncat:
  Easily used incorrectly (e.g., incorrectly computing the correct maximum
  size to add) [MS-banned] (CWE-120). Consider strcat_s, strlcat, snprintf,
  or automatically resizing strings.
        strncat(rtn, &value[head], prec);
data/iverilog-11.0/vpi/sys_display.c:250:11:  [1] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused). Risk is low because the
  source is a constant character.
          strcat(rtn, "0");
data/iverilog-11.0/vpi/sys_display.c:256:7:  [1] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant character.
      strcpy(rtn, "0");
data/iverilog-11.0/vpi/sys_display.c:257:21:  [1] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused). Risk is low because the
  source is a constant character.
      if (prec > 0) strcat(rtn, ".");
data/iverilog-11.0/vpi/sys_display.c:262:9:  [1] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused). Risk is low because the
  source is a constant character.
        strcat(rtn, "0");
data/iverilog-11.0/vpi/sys_display.c:268:9:  [1] (buffer) strncat:
  Easily used incorrectly (e.g., incorrectly computing the correct maximum
  size to add) [MS-banned] (CWE-120). Consider strcat_s, strlcat, snprintf,
  or automatically resizing strings.
        strncat(rtn, value, tail);
data/iverilog-11.0/vpi/sys_display.c:272:11:  [1] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused). Risk is low because the
  source is a constant character.
          strcat(rtn, "0");
data/iverilog-11.0/vpi/sys_display.c:312:10:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
  size = strlen(result) + 1; /* fallback value if errors */
data/iverilog-11.0/vpi/sys_display.c:322:7:  [1] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant character.
      strcpy(result, "%");
data/iverilog-11.0/vpi/sys_display.c:323:14:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
      size = strlen(result) + 1;
data/iverilog-11.0/vpi/sys_display.c:364:29:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
          unsigned swidth = strlen(value.value.str), free_flag = 0;;
data/iverilog-11.0/vpi/sys_display.c:385:18:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
          size = strlen(cp) + 1;
data/iverilog-11.0/vpi/sys_display.c:392:18:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
          size = strlen(result) + 1;
data/iverilog-11.0/vpi/sys_display.c:455:29:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
          unsigned swidth = strlen(value.value.str) +
data/iverilog-11.0/vpi/sys_display.c:491:18:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
          size = strlen(tbuf) + 1;
data/iverilog-11.0/vpi/sys_display.c:498:18:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
          size = strlen(result) + 1;
data/iverilog-11.0/vpi/sys_display.c:549:18:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
          size = strlen(result) + 1;
data/iverilog-11.0/vpi/sys_display.c:574:16:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
        size = strlen(cp) + 1;
data/iverilog-11.0/vpi/sys_display.c:581:14:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
      size = strlen(result) + 1;
data/iverilog-11.0/vpi/sys_display.c:609:18:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
          size = strlen(value.value.str) + 1;
data/iverilog-11.0/vpi/sys_display.c:614:18:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
          size = strlen(result) + 1;
data/iverilog-11.0/vpi/sys_display.c:673:31:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
          unsigned suff_len = strlen(timeformat_info.suff);
data/iverilog-11.0/vpi/sys_display.c:690:20:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
          swidth = strlen(tbuf);
data/iverilog-11.0/vpi/sys_display.c:715:18:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
          size = strlen(tbuf) + 1;
data/iverilog-11.0/vpi/sys_display.c:723:18:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
          size = strlen(result) + 1;
data/iverilog-11.0/vpi/sys_display.c:804:11:  [1] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant character.
          strcpy(rbuf, "");
data/iverilog-11.0/vpi/sys_display.c:808:19:  [1] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused). Risk is low because the
  source is a constant character.
	    if (bit > 0) strcat(rbuf, "_");
data/iverilog-11.0/vpi/sys_display.c:813:18:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
          size = strlen(result) + 1;
data/iverilog-11.0/vpi/sys_display.c:821:14:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
      size = strlen(result) + 1; /* fallback value if errors */
data/iverilog-11.0/vpi/sys_display.c:869:14:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
      size = strlen(result) + 1;
data/iverilog-11.0/vpi/sys_display.c:946:13:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
      min = strlen(val.value.str);
data/iverilog-11.0/vpi/sys_display.c:955:10:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
  return strlen(*rtn);
data/iverilog-11.0/vpi/sys_display.c:999:19:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
          width = strlen(result);
data/iverilog-11.0/vpi/sys_display.c:1032:17:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
        width = strlen(buf);
data/iverilog-11.0/vpi/sys_display.c:1054:17:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
        width = strlen(buf);
data/iverilog-11.0/vpi/sys_display.c:1077:19:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
          width = strlen(value.value.str);
data/iverilog-11.0/vpi/sys_display.c:1085:19:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
          width = strlen(value.value.str);
data/iverilog-11.0/vpi/sys_display.c:1093:19:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
          width = strlen(value.value.str);
data/iverilog-11.0/vpi/sys_display.c:1106:19:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
          width = strlen(buf);
data/iverilog-11.0/vpi/sys_display.c:1114:19:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
          width = strlen(buf);
data/iverilog-11.0/vpi/sys_display.c:1125:17:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
        width = strlen(cresult);
data/iverilog-11.0/vpi/sys_display.c:1654:15:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
  if (size != strlen(val.value.str)) {
data/iverilog-11.0/vpi/sys_display.c:1754:15:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
  if (size != strlen(val.value.str)) {
data/iverilog-11.0/vpi/sys_display.c:2110:17:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		  location += strlen(&dstr[location]);
data/iverilog-11.0/vpi/sys_display.c:2119:23:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
                 (int)strlen(sstr), " ", now64,
data/iverilog-11.0/vpi/sys_fileio.c:102:10:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	    if (strlen(val.value.str) > 3) {
data/iverilog-11.0/vpi/sys_fileio.c:190:21:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
      mode = name + strlen(name) - 1;
data/iverilog-11.0/vpi/sys_fileio.c:425:27:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
      val.value.integer = strlen(text);
data/iverilog-11.0/vpi/sys_fileio.c:542:17:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
	    int byte = fgetc(fp);
data/iverilog-11.0/vpi/sys_fileio.c:927:26:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
	    val.value.integer = fgetc(fp);
data/iverilog-11.0/vpi/sys_fileio.c:1043:23:  [1] (buffer) strncpy:
  Easily used incorrectly; doesn't always \0-terminate or check for invalid
  pointers [MS-banned] (CWE-120).
      if (errno != 0) strncpy(msg, strerror(errno), chars-1);
data/iverilog-11.0/vpi/sys_fileio.c:1044:12:  [1] (buffer) strncpy:
  Easily used incorrectly; doesn't always \0-terminate or check for invalid
  pointers [MS-banned] (CWE-120). Risk is low because the source is a
  constant character.
      else strncpy(msg, "", chars-1);
data/iverilog-11.0/vpi/sys_fst.c:433:23:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	               (int) strlen(msg), " ", dump_path);
data/iverilog-11.0/vpi/sys_fst.c:599:22:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		  escname = malloc(strlen(name) + 2);
data/iverilog-11.0/vpi/sys_fst.c:620:24:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		  char *buf = malloc(strlen(escname) + 65);
data/iverilog-11.0/vpi/sys_lxt.c:92:16:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
      t->len = strlen(name);
data/iverilog-11.0/vpi/sys_lxt.c:138:14:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
      len += strlen(name) + 1;
data/iverilog-11.0/vpi/sys_lxt.c:158:13:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
      n2 += strlen(n2);
data/iverilog-11.0/vpi/sys_lxt.c:488:23:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	               (int) strlen(msg), " ", dump_path);
data/iverilog-11.0/vpi/sys_lxt2.c:148:16:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
      t->len = strlen(name);
data/iverilog-11.0/vpi/sys_lxt2.c:194:14:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
      len += strlen(name) + 1;
data/iverilog-11.0/vpi/sys_lxt2.c:214:13:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
      n2 += strlen(n2);
data/iverilog-11.0/vpi/sys_lxt2.c:541:23:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	               (int) strlen(msg), " ", dump_path);
data/iverilog-11.0/vpi/sys_plusargs.c:45:14:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
      slen = strlen(val.value.str);
data/iverilog-11.0/vpi/sys_plusargs.c:56:12:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	    len = strlen(info.argv[idx]+1);
data/iverilog-11.0/vpi/sys_plusargs.c:165:39:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	    vpi_printf("%*s \"%s\".\n", (int)strlen(msg), " ", fmt.value.str);
data/iverilog-11.0/vpi/sys_plusargs.c:205:39:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	    vpi_printf("%*s \"%s\".\n", (int)strlen(msg), " ", fmt.value.str);
data/iverilog-11.0/vpi/sys_plusargs.c:219:39:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	    vpi_printf("%*s \"%s\".\n", (int)strlen(msg), " ", fmt.value.str);
data/iverilog-11.0/vpi/sys_plusargs.c:234:12:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	    len = strlen(info.argv[idx]+1);
data/iverilog-11.0/vpi/sys_plusargs.c:242:22:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
            sp_len = strlen(sp);
data/iverilog-11.0/vpi/sys_plusargs.c:264:37:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
			vpi_printf("%*s \"%s\".\n", (int)strlen(msg), " ", sp);
data/iverilog-11.0/vpi/sys_plusargs.c:284:37:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
			vpi_printf("%*s \"%s\".\n", (int)strlen(msg), " ", sp);
data/iverilog-11.0/vpi/sys_plusargs.c:306:37:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
			vpi_printf("%*s \"%s\".\n", (int)strlen(msg), " ", sp);
data/iverilog-11.0/vpi/sys_plusargs.c:326:37:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
			vpi_printf("%*s \"%s\".\n", (int)strlen(msg), " ", sp);
data/iverilog-11.0/vpi/sys_plusargs.c:349:43:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
			      vpi_printf("%*s \"%s\".\n", (int)strlen(msg), " ",
data/iverilog-11.0/vpi/sys_plusargs.c:360:43:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
			      vpi_printf("%*s \"%s\".\n", (int)strlen(msg), " ",
data/iverilog-11.0/vpi/sys_priv.c:41:37:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
      unsigned idx, cur, cnt, len = strlen(arg) + 1;
data/iverilog-11.0/vpi/sys_priv.c:87:13:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
      len = strlen(val.value.str);
data/iverilog-11.0/vpi/sys_priv.c:98:38:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		  vpi_printf("%*s \"%s\"\n", (int) strlen(msg), " ", esc_fname);
data/iverilog-11.0/vpi/sys_priv.c:119:30:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
      char*new_path = malloc(strlen(path) + strlen(suff) + 2);
data/iverilog-11.0/vpi/sys_priv.c:119:45:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
      char*new_path = malloc(strlen(path) + strlen(suff) + 2);
data/iverilog-11.0/vpi/sys_priv.c:121:7:  [1] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused). Risk is low because the
  source is a constant character.
      strcat(new_path, ".");
data/iverilog-11.0/vpi/sys_priv.c:146:30:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
                       (int) strlen(msg), " ", argc, argc == 1 ? "" : "s");
data/iverilog-11.0/vpi/sys_priv.c:345:23:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	               (int) strlen(msg), " ", argc, argc == 1 ? "" : "s");
data/iverilog-11.0/vpi/sys_readmem.c:455:13:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
      len = strlen(val.value.str);
data/iverilog-11.0/vpi/sys_readmem.c:466:38:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		  vpi_printf("%*s \"%s\"\n", (int) strlen(msg), " ", esc_path);
data/iverilog-11.0/vpi/sys_scanf.c:59:14:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
      return fgetc(src->fd);
data/iverilog-11.0/vpi/sys_sdf.c:77:6:  [1] (buffer) strncpy:
  Easily used incorrectly; doesn't always \0-terminate or check for invalid
  pointers [MS-banned] (CWE-120).
	    strncpy(buffer, src, len);
data/iverilog-11.0/vpi/sys_vcd.c:465:23:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	               (int) strlen(msg), " ", dump_path);
data/iverilog-11.0/vpi/table_mod.c:359:12:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	    len = strlen(cp);
data/iverilog-11.0/vpi/table_mod.c:542:21:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
              (int) strlen(msg), " ");
data/iverilog-11.0/vpi/table_mod.c:554:21:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
              (int) strlen(msg), " ", table->fields+table->depend);
data/iverilog-11.0/vpi/v2005_math.c:150:28:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
        char* msg = malloc(strlen(basemsg)+strlen(post)+3);
data/iverilog-11.0/vpi/v2005_math.c:150:44:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
        char* msg = malloc(strlen(basemsg)+strlen(post)+3);
data/iverilog-11.0/vpi/va_math.c:177:28:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
        char* msg = malloc(strlen(basemsg)+strlen(post)+3);
data/iverilog-11.0/vpi/va_math.c:177:44:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
        char* msg = malloc(strlen(basemsg)+strlen(post)+3);
data/iverilog-11.0/vpi/vams_simparam.c:101:23:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	               (int) strlen(msg), " ", argc, argc == 1 ? "" : "s");
data/iverilog-11.0/vpi/vhdl_textio.c:145:15:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    int len = strlen(string);
data/iverilog-11.0/vpi/vhdl_textio.c:191:8:  [1] (buffer) sscanf:
  It's unclear if the %s limit in the format string is small enough
  (CWE-120). Check that the limit is sufficiently small, or use a different
  input function.
    if(sscanf(string, "%" PLI_UINT64_FMT " %2s%n", &period, units, &processed_chars) != 2)
data/iverilog-11.0/vpi/vhdl_textio.c:517:15:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    int len = strlen(buf);
data/iverilog-11.0/vpi/vhdl_textio.c:543:13:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
    int c = fgetc(fp);
data/iverilog-11.0/vpi/vhdl_textio.c:653:8:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    if(strlen(val.value.str) == 0) {
data/iverilog-11.0/vpi/vhdl_textio.c:715:16:  [1] (buffer) sscanf:
  It's unclear if the %s limit in the format string is small enough
  (CWE-120). Check that the limit is sufficiently small, or use a different
  input function.
            if(sscanf(string, "%5s%n", buf, &processed_chars) == 1)
data/iverilog-11.0/vpi/vhdl_textio.c:900:42:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
                    for(size_t i = 0; i< strlen(val.value.str); ++i)
data/iverilog-11.0/vvp/compile.cc:452:41:  [1] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant character.
	    compile_named_event(strdup(label), strcpy(new char [1],""), true);
data/iverilog-11.0/vvp/compile.cc:598:18:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		       && n == strlen(label())) {
data/iverilog-11.0/vvp/compile.cc:604:18:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		       && n == strlen(label())) {
data/iverilog-11.0/vvp/compile.cc:610:18:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		       && n == strlen(label())) {
data/iverilog-11.0/vvp/compile.cc:1727:12:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    assert(strlen(*table)==strlen(row));
data/iverilog-11.0/vvp/compile.cc:1727:28:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    assert(strlen(*table)==strlen(row));
data/iverilog-11.0/vvp/main.cc:151:16:  [1] (buffer) sscanf:
  It's unclear if the %s limit in the format string is small enough
  (CWE-120). Check that the limit is sufficiently small, or use a different
  input function.
      int rc = sscanf(ivl_ver, "%d.%d.%d %127s", &file_major, &file_minor, &file_minor2, file_extra);
data/iverilog-11.0/vvp/main.cc:157:11:  [1] (buffer) sscanf:
  It's unclear if the %s limit in the format string is small enough
  (CWE-120). Check that the limit is sufficiently small, or use a different
  input function.
	    rc = sscanf(ivl_ver, "%d.%d %127s", &file_major, &file_minor, file_extra);
data/iverilog-11.0/vvp/stop.cc:58:22:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	    char*nl = buf + strlen(buf);
data/iverilog-11.0/vvp/stop.cc:109:9:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		  tmp[strlen(tmp)-1] = 0;
data/iverilog-11.0/vvp/stop.cc:121:42:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		&& strspn(argv[idx+1],"0123456789") == strlen(argv[idx+1])) {
data/iverilog-11.0/vvp/stop.cc:474:30:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
      char**argv = new char*[strlen(txt)/2];
data/iverilog-11.0/vvp/symbols.cc:41:22:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
      unsigned len = strlen(str);
data/iverilog-11.0/vvp/udp.cc:237:13:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	    assert(strlen(tab[idx]) == port_count() + 1);
data/iverilog-11.0/vvp/udp.cc:466:13:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	    assert(strlen(row) == port_count() + 2);
data/iverilog-11.0/vvp/vpi_const.cc:96:13:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	    return strlen(value_)*8;
data/iverilog-11.0/vvp/vpi_const.cc:124:23:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
      unsigned size = strlen(value_);
data/iverilog-11.0/vvp/vpi_modules.cc:69:29:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
            char *end = var+strlen(var);
data/iverilog-11.0/vvp/vpi_priv.cc:142:22:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
      unsigned len = strlen(str);
data/iverilog-11.0/vvp/vpi_priv.cc:1355:30:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
      vector<char> name_buf (strlen(name)+1);
data/iverilog-11.0/vvp/vpi_priv.cc:1411:30:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
      vector<char> name_buf (strlen(name)+1);
data/iverilog-11.0/vvp/vpi_scope.cc:174:6:  [1] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused). Risk is low because the
  source is a constant character.
	    strcat(buf, ".");
data/iverilog-11.0/vvp/vpi_signal.cc:98:44:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
      char *res = (char *) need_result_buf(strlen(s1)+1, RBUF_STR);
data/iverilog-11.0/vvp/vpi_signal.cc:105:20:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
      size_t len = strlen(name) + 1;  /* include space for null termination */
data/iverilog-11.0/vvp/vpi_signal.cc:109:13:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	    len += strlen(bn) + 1;  /* include space for "." separator */
data/iverilog-11.0/vvp/vpi_signal.cc:111:33:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
      if (index != NULL) len += strlen(index) + 2;  /* include space for brackets */
data/iverilog-11.0/vvp/vpi_signal.cc:123:6:  [1] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused). Risk is low because the
  source is a constant character.
	    strcat(res, ".");
data/iverilog-11.0/vvp/vpi_signal.cc:128:6:  [1] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused). Risk is low because the
  source is a constant character.
	    strcat(res, "[");
data/iverilog-11.0/vvp/vpi_signal.cc:130:6:  [1] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused). Risk is low because the
  source is a constant character.
	    strcat(res, "]");
data/iverilog-11.0/vvp/vpi_signal.cc:919:18:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
      cp = str + strlen(str);
data/iverilog-11.0/vvp/vpi_signal.cc:1371:23:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	    size_t len = 256+strlen(nm);
data/iverilog-11.0/vvp/vpi_tasks.cc:297:21:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
      size_t slen = strlen(vp->value.str);
data/iverilog-11.0/vvp/vpip_bin.cc:30:31:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
      const char*ebuf = buf + strlen(buf);
data/iverilog-11.0/vvp/vpip_bin.cc:39:26:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
      vvp_vector4_t tval(strlen(buf)-skip_chars);
data/iverilog-11.0/vvp/vpip_hex.cc:32:26:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
      unsigned str_len = strlen(str);
data/iverilog-11.0/vvp/vpip_oct.cc:32:26:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
      unsigned str_len = strlen(str);
data/iverilog-11.0/vvp/vpip_to_dec.cc:270:23:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
      unsigned slen = strlen(buf);
data/iverilog-11.0/vvp/vthread.cc:4520:24:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
                 (n == strlen(text))) {
data/iverilog-11.0/vvp/vthread.cc:4523:24:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
                 (n == strlen(text))) {
data/iverilog-11.0/vvp/vthread.cc:4526:24:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
                 (n == strlen(text))) {
data/iverilog-11.0/vvp/vthread.cc:4529:24:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
                 (n == strlen(text))) {
data/iverilog-11.0/vvp/vvp_net.cc:3198:22:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
      size_t vsize = strlen(str)-4;

ANALYSIS SUMMARY:

Hits = 1172
Lines analyzed = 235706 in approximately 6.04 seconds (39017 lines/second)
Physical Source Lines of Code (SLOC) = 163146
Hits@level = [0] 3650 [1] 430 [2] 470 [3]  35 [4] 236 [5]   1
Hits@level+ = [0+] 4822 [1+] 1172 [2+] 742 [3+] 272 [4+] 237 [5+]   1
Hits/KSLOC@level+ = [0+] 29.5563 [1+] 7.18375 [2+] 4.54807 [3+] 1.66722 [4+] 1.45269 [5+] 0.00612948
Dot directories skipped = 1 (--followdotdir overrides)
Minimum risk level = 1
Not every hit is necessarily a security vulnerability.
There may be other security vulnerabilities; review your code!
See 'Secure Programming HOWTO'
(https://dwheeler.com/secure-programs) for more information.