Flawfinder version 2.0.10, (C) 2001-2019 David A. Wheeler.
Number of rules (primarily dangerous function names) in C/C++ ruleset: 223
Examining data/moosefs-3.0.115/mfschunkserver/bgjobs.c
Examining data/moosefs-3.0.115/mfschunkserver/bgjobs.h
Examining data/moosefs-3.0.115/mfschunkserver/chartsdata.c
Examining data/moosefs-3.0.115/mfschunkserver/chartsdata.h
Examining data/moosefs-3.0.115/mfschunkserver/chartsdefs.h
Examining data/moosefs-3.0.115/mfschunkserver/csserv.c
Examining data/moosefs-3.0.115/mfschunkserver/csserv.h
Examining data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c
Examining data/moosefs-3.0.115/mfschunkserver/hddspacemgr.h
Examining data/moosefs-3.0.115/mfschunkserver/init.h
Examining data/moosefs-3.0.115/mfschunkserver/mainserv.c
Examining data/moosefs-3.0.115/mfschunkserver/mainserv.h
Examining data/moosefs-3.0.115/mfschunkserver/masterconn.c
Examining data/moosefs-3.0.115/mfschunkserver/masterconn.h
Examining data/moosefs-3.0.115/mfschunkserver/mfschunktool.c
Examining data/moosefs-3.0.115/mfschunkserver/replicator.c
Examining data/moosefs-3.0.115/mfschunkserver/replicator.h
Examining data/moosefs-3.0.115/mfsclient/chunkrwlock.c
Examining data/moosefs-3.0.115/mfsclient/chunkrwlock.h
Examining data/moosefs-3.0.115/mfsclient/chunksdatacache.c
Examining data/moosefs-3.0.115/mfsclient/chunksdatacache.h
Examining data/moosefs-3.0.115/mfsclient/csdb.c
Examining data/moosefs-3.0.115/mfsclient/csdb.h
Examining data/moosefs-3.0.115/mfsclient/csorder.c
Examining data/moosefs-3.0.115/mfsclient/csorder.h
Examining data/moosefs-3.0.115/mfsclient/dentry_invalidator.c
Examining data/moosefs-3.0.115/mfsclient/dentry_invalidator.h
Examining data/moosefs-3.0.115/mfsclient/dirattrcache.c
Examining data/moosefs-3.0.115/mfsclient/dirattrcache.h
Examining data/moosefs-3.0.115/mfsclient/extrapackets.c
Examining data/moosefs-3.0.115/mfsclient/extrapackets.h
Examining data/moosefs-3.0.115/mfsclient/fdcache.c
Examining data/moosefs-3.0.115/mfsclient/fdcache.h
Examining data/moosefs-3.0.115/mfsclient/fusecommon.h
Examining data/moosefs-3.0.115/mfsclient/getgroups.c
Examining data/moosefs-3.0.115/mfsclient/getgroups.h
Examining data/moosefs-3.0.115/mfsclient/heapsorter.c
Examining data/moosefs-3.0.115/mfsclient/heapsorter.h
Examining data/moosefs-3.0.115/mfsclient/inoleng.c
Examining data/moosefs-3.0.115/mfsclient/inoleng.h
Examining data/moosefs-3.0.115/mfsclient/labelparser.c
Examining data/moosefs-3.0.115/mfsclient/labelparser.h
Examining data/moosefs-3.0.115/mfsclient/mastercomm.c
Examining data/moosefs-3.0.115/mfsclient/mastercomm.h
Examining data/moosefs-3.0.115/mfsclient/masterproxy.c
Examining data/moosefs-3.0.115/mfsclient/masterproxy.h
Examining data/moosefs-3.0.115/mfsclient/mfs_fuse.c
Examining data/moosefs-3.0.115/mfsclient/mfs_fuse.h
Examining data/moosefs-3.0.115/mfsclient/mfs_meta_fuse.c
Examining data/moosefs-3.0.115/mfsclient/mfs_meta_fuse.h
Examining data/moosefs-3.0.115/mfsclient/mfsio.c
Examining data/moosefs-3.0.115/mfsclient/mfsio.h
Examining data/moosefs-3.0.115/mfsclient/mfsmount.c
Examining data/moosefs-3.0.115/mfsclient/mfsmount.h
Examining data/moosefs-3.0.115/mfsclient/mfstools.c
Examining data/moosefs-3.0.115/mfsclient/mfstools_master.c
Examining data/moosefs-3.0.115/mfsclient/mfstools_master.h
Examining data/moosefs-3.0.115/mfsclient/nbdmain.c
Examining data/moosefs-3.0.115/mfsclient/negentrycache.c
Examining data/moosefs-3.0.115/mfsclient/negentrycache.h
Examining data/moosefs-3.0.115/mfsclient/oplog.c
Examining data/moosefs-3.0.115/mfsclient/oplog.h
Examining data/moosefs-3.0.115/mfsclient/readdata.c
Examining data/moosefs-3.0.115/mfsclient/readdata.h
Examining data/moosefs-3.0.115/mfsclient/stats.c
Examining data/moosefs-3.0.115/mfsclient/stats.h
Examining data/moosefs-3.0.115/mfsclient/sustained_inodes.c
Examining data/moosefs-3.0.115/mfsclient/sustained_inodes.h
Examining data/moosefs-3.0.115/mfsclient/sustained_stats.c
Examining data/moosefs-3.0.115/mfsclient/sustained_stats.h
Examining data/moosefs-3.0.115/mfsclient/symlinkcache.c
Examining data/moosefs-3.0.115/mfsclient/symlinkcache.h
Examining data/moosefs-3.0.115/mfsclient/truncate.c
Examining data/moosefs-3.0.115/mfsclient/truncate.h
Examining data/moosefs-3.0.115/mfsclient/writedata.c
Examining data/moosefs-3.0.115/mfsclient/writedata.h
Examining data/moosefs-3.0.115/mfsclient/xattrcache.c
Examining data/moosefs-3.0.115/mfsclient/xattrcache.h
Examining data/moosefs-3.0.115/mfscommon/MFSCommunication.h
Examining data/moosefs-3.0.115/mfscommon/buckets.h
Examining data/moosefs-3.0.115/mfscommon/buckets_mt.h
Examining data/moosefs-3.0.115/mfscommon/cfg.c
Examining data/moosefs-3.0.115/mfscommon/cfg.h
Examining data/moosefs-3.0.115/mfscommon/charts.c
Examining data/moosefs-3.0.115/mfscommon/charts.h
Examining data/moosefs-3.0.115/mfscommon/clocks.c
Examining data/moosefs-3.0.115/mfscommon/clocks.h
Examining data/moosefs-3.0.115/mfscommon/conncache.c
Examining data/moosefs-3.0.115/mfscommon/conncache.h
Examining data/moosefs-3.0.115/mfscommon/cpuusage.c
Examining data/moosefs-3.0.115/mfscommon/cpuusage.h
Examining data/moosefs-3.0.115/mfscommon/crc.c
Examining data/moosefs-3.0.115/mfscommon/crc.h
Examining data/moosefs-3.0.115/mfscommon/cuckoohash.c
Examining data/moosefs-3.0.115/mfscommon/cuckoohash.h
Examining data/moosefs-3.0.115/mfscommon/datapack.h
Examining data/moosefs-3.0.115/mfscommon/delayrun.c
Examining data/moosefs-3.0.115/mfscommon/delayrun.h
Examining data/moosefs-3.0.115/mfscommon/dictionary.c
Examining data/moosefs-3.0.115/mfscommon/dictionary.h
Examining data/moosefs-3.0.115/mfscommon/glue.h
Examining data/moosefs-3.0.115/mfscommon/hash_begin.h
Examining data/moosefs-3.0.115/mfscommon/hash_end.h
Examining data/moosefs-3.0.115/mfscommon/hashfn.h
Examining data/moosefs-3.0.115/mfscommon/idstr.h
Examining data/moosefs-3.0.115/mfscommon/liset64.c
Examining data/moosefs-3.0.115/mfscommon/liset64.h
Examining data/moosefs-3.0.115/mfscommon/lwthread.c
Examining data/moosefs-3.0.115/mfscommon/lwthread.h
Examining data/moosefs-3.0.115/mfscommon/main.c
Examining data/moosefs-3.0.115/mfscommon/main.h
Examining data/moosefs-3.0.115/mfscommon/massert.h
Examining data/moosefs-3.0.115/mfscommon/md5.c
Examining data/moosefs-3.0.115/mfscommon/md5.h
Examining data/moosefs-3.0.115/mfscommon/median.h
Examining data/moosefs-3.0.115/mfscommon/memusage.c
Examining data/moosefs-3.0.115/mfscommon/memusage.h
Examining data/moosefs-3.0.115/mfscommon/mfsalloc.h
Examining data/moosefs-3.0.115/mfscommon/mfsstrerr.h
Examining data/moosefs-3.0.115/mfscommon/pcqueue.c
Examining data/moosefs-3.0.115/mfscommon/pcqueue.h
Examining data/moosefs-3.0.115/mfscommon/portable.h
Examining data/moosefs-3.0.115/mfscommon/processname.c
Examining data/moosefs-3.0.115/mfscommon/processname.h
Examining data/moosefs-3.0.115/mfscommon/random.c
Examining data/moosefs-3.0.115/mfscommon/random.h
Examining data/moosefs-3.0.115/mfscommon/sizestr.h
Examining data/moosefs-3.0.115/mfscommon/slogger.h
Examining data/moosefs-3.0.115/mfscommon/sockets.c
Examining data/moosefs-3.0.115/mfscommon/sockets.h
Examining data/moosefs-3.0.115/mfscommon/squeue.c
Examining data/moosefs-3.0.115/mfscommon/squeue.h
Examining data/moosefs-3.0.115/mfscommon/statsdump.c
Examining data/moosefs-3.0.115/mfscommon/strerr.c
Examining data/moosefs-3.0.115/mfscommon/strerr.h
Examining data/moosefs-3.0.115/mfscommon/workers.c
Examining data/moosefs-3.0.115/mfscommon/workers.h
Examining data/moosefs-3.0.115/mfsmaster/bgsaver.c
Examining data/moosefs-3.0.115/mfsmaster/bgsaver.h
Examining data/moosefs-3.0.115/mfsmaster/bio.c
Examining data/moosefs-3.0.115/mfsmaster/bio.h
Examining data/moosefs-3.0.115/mfsmaster/changelog.c
Examining data/moosefs-3.0.115/mfsmaster/changelog.h
Examining data/moosefs-3.0.115/mfsmaster/chartsdata.c
Examining data/moosefs-3.0.115/mfsmaster/chartsdata.h
Examining data/moosefs-3.0.115/mfsmaster/chartsdefs.h
Examining data/moosefs-3.0.115/mfsmaster/chunks.c
Examining data/moosefs-3.0.115/mfsmaster/chunks.h
Examining data/moosefs-3.0.115/mfsmaster/csdb.c
Examining data/moosefs-3.0.115/mfsmaster/csdb.h
Examining data/moosefs-3.0.115/mfsmaster/datacachemgr.c
Examining data/moosefs-3.0.115/mfsmaster/datacachemgr.h
Examining data/moosefs-3.0.115/mfsmaster/exports.c
Examining data/moosefs-3.0.115/mfsmaster/exports.h
Examining data/moosefs-3.0.115/mfsmaster/filesystem.c
Examining data/moosefs-3.0.115/mfsmaster/filesystem.h
Examining data/moosefs-3.0.115/mfsmaster/flocklocks.c
Examining data/moosefs-3.0.115/mfsmaster/flocklocks.h
Examining data/moosefs-3.0.115/mfsmaster/init.h
Examining data/moosefs-3.0.115/mfsmaster/iptosesid.c
Examining data/moosefs-3.0.115/mfsmaster/iptosesid.h
Examining data/moosefs-3.0.115/mfsmaster/itree.c
Examining data/moosefs-3.0.115/mfsmaster/itree.h
Examining data/moosefs-3.0.115/mfsmaster/matoclserv.c
Examining data/moosefs-3.0.115/mfsmaster/matoclserv.h
Examining data/moosefs-3.0.115/mfsmaster/matocsserv.c
Examining data/moosefs-3.0.115/mfsmaster/matocsserv.h
Examining data/moosefs-3.0.115/mfsmaster/matomlserv.c
Examining data/moosefs-3.0.115/mfsmaster/matomlserv.h
Examining data/moosefs-3.0.115/mfsmaster/merger.c
Examining data/moosefs-3.0.115/mfsmaster/merger.h
Examining data/moosefs-3.0.115/mfsmaster/metadata.c
Examining data/moosefs-3.0.115/mfsmaster/metadata.h
Examining data/moosefs-3.0.115/mfsmaster/missinglog.c
Examining data/moosefs-3.0.115/mfsmaster/missinglog.h
Examining data/moosefs-3.0.115/mfsmaster/openfiles.c
Examining data/moosefs-3.0.115/mfsmaster/openfiles.h
Examining data/moosefs-3.0.115/mfsmaster/posixacl.c
Examining data/moosefs-3.0.115/mfsmaster/posixacl.h
Examining data/moosefs-3.0.115/mfsmaster/posixlocks.c
Examining data/moosefs-3.0.115/mfsmaster/posixlocks.h
Examining data/moosefs-3.0.115/mfsmaster/restore.c
Examining data/moosefs-3.0.115/mfsmaster/restore.h
Examining data/moosefs-3.0.115/mfsmaster/sessions.c
Examining data/moosefs-3.0.115/mfsmaster/sessions.h
Examining data/moosefs-3.0.115/mfsmaster/sharedpointer.c
Examining data/moosefs-3.0.115/mfsmaster/sharedpointer.h
Examining data/moosefs-3.0.115/mfsmaster/storageclass.c
Examining data/moosefs-3.0.115/mfsmaster/storageclass.h
Examining data/moosefs-3.0.115/mfsmaster/topology.c
Examining data/moosefs-3.0.115/mfsmaster/topology.h
Examining data/moosefs-3.0.115/mfsmaster/xattr.c
Examining data/moosefs-3.0.115/mfsmaster/xattr.h
Examining data/moosefs-3.0.115/mfsmetalogger/init.h
Examining data/moosefs-3.0.115/mfsmetalogger/masterconn.c
Examining data/moosefs-3.0.115/mfsmetalogger/masterconn.h
Examining data/moosefs-3.0.115/mfsmetatools/mfsmetadirinfo.c
Examining data/moosefs-3.0.115/mfsmetatools/mfsmetadump.c
Examining data/moosefs-3.0.115/mfsnetdump/commands.h
Examining data/moosefs-3.0.115/mfsnetdump/mfsnetdump.c
Examining data/moosefs-3.0.115/mfstests/mfstest.h
Examining data/moosefs-3.0.115/mfstests/mfstest_clocks.c
Examining data/moosefs-3.0.115/mfstests/mfstest_crc32.c
Examining data/moosefs-3.0.115/mfstests/mfstest_datapack.c
Examining data/moosefs-3.0.115/mfstests/mfstest_delayrun.c

FINAL RESULTS:

data/moosefs-3.0.115/mfschunkserver/csserv.c:637:5:  [4] (format) syslog:
  If syslog's format strings can be influenced by an attacker, they can be
  exploited (CWE-134). Use a constant format string for syslog.
				syslog(LOG_WARNING,"(read) packet too long (%"PRIu32"/%u) ; command:%"PRIu32,size,MaxPacketSize,type);
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:1050:3:  [4] (format) syslog:
  If syslog's format strings can be influenced by an attacker, they can be
  exploited (CWE-134). Use a constant format string for syslog.
		syslog(LOG_NOTICE,"hdd space manager: setting open chunks limit to: %"PRIu32,limit);
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:1056:3:  [4] (format) syslog:
  If syslog's format strings can be influenced by an attacker, they can be
  exploited (CWE-134). Use a constant format string for syslog.
		syslog(LOG_NOTICE,"hdd space manager: open files: %"PRIu32"/%"PRIu32,c,limit);
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:1466:6:  [4] (format) syslog:
  If syslog's format strings can be influenced by an attacker, they can be
  exploited (CWE-134). Use a constant format string for syslog.
					syslog(LOG_WARNING,"hdd_chunk_get: serious internal data structure inconsistency - can't remove chunk %016"PRIX64,chunkid);
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:1531:4:  [4] (format) syslog:
  If syslog's format strings can be influenced by an attacker, they can be
  exploited (CWE-134). Use a constant format string for syslog.
			syslog(LOG_WARNING,"hdd_chunk_delete: serious internal data structure inconsistency - can't remove chunk %016"PRIX64,c->chunkid);
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:5045:2:  [4] (format) snprintf:
  If format strings can be influenced by an attacker, they can be exploited,
  and note that sprintf variations do not always \0-terminate (CWE-134). Use
  a constant for the format specification.
	snprintf(tmp_filename+leng,13+16+1,"reptmp_chunk_%016"PRIX64,c->chunkid);
data/moosefs-3.0.115/mfschunkserver/mainserv.c:597:7:  [4] (format) syslog:
  If syslog's format strings can be influenced by an attacker, they can be
  exploited (CWE-134). Use a constant format string for syslog.
						syslog(LOG_WARNING,"packet too long (%"PRIu32"/%u) ; command:%"PRIu32,leng,MaxPacketSize,cmd);
data/moosefs-3.0.115/mfschunkserver/mainserv.c:622:7:  [4] (format) syslog:
  If syslog's format strings can be influenced by an attacker, they can be
  exploited (CWE-134). Use a constant format string for syslog.
						syslog(LOG_WARNING,"packet too long (%"PRIu32"/12) ; command:%"PRIu32,leng,cmd);
data/moosefs-3.0.115/mfschunkserver/mainserv.c:765:6:  [4] (format) syslog:
  If syslog's format strings can be influenced by an attacker, they can be
  exploited (CWE-134). Use a constant format string for syslog.
					syslog(LOG_WARNING,"packet too long (%"PRIu32"/%u) ; command:%"PRIu32,leng,MaxPacketSize,cmd);
data/moosefs-3.0.115/mfschunkserver/mainserv.c:977:5:  [4] (format) syslog:
  If syslog's format strings can be influenced by an attacker, they can be
  exploited (CWE-134). Use a constant format string for syslog.
				syslog(LOG_WARNING,"packet too long (%"PRIu32"/%u) ; command:%"PRIu32,leng,MaxPacketSize,cmd);
data/moosefs-3.0.115/mfschunkserver/masterconn.c:1445:5:  [4] (format) syslog:
  If syslog's format strings can be influenced by an attacker, they can be
  exploited (CWE-134). Use a constant format string for syslog.
				syslog(LOG_WARNING,"Master packet too long (%"PRIu32"/%u) ; command:%"PRIu32,leng,MaxPacketSize,type);
data/moosefs-3.0.115/mfschunkserver/replicator.c:207:6:  [4] (format) syslog:
  If syslog's format strings can be influenced by an attacker, they can be
  exploited (CWE-134). Use a constant format string for syslog.
					syslog(LOG_WARNING,"replicator: packet too long (%"PRIu32"/%u) ; command:%"PRIu32,size,MAX_RECV_PACKET_SIZE,type);
data/moosefs-3.0.115/mfschunkserver/replicator.c:709:4:  [4] (format) syslog:
  If syslog's format strings can be influenced by an attacker, they can be
  exploited (CWE-134). Use a constant format string for syslog.
			syslog(LOG_WARNING,"replicator: no data received for block: %"PRIu16,b);
data/moosefs-3.0.115/mfsclient/getgroups.c:339:4:  [4] (format) fprintf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
			fprintf(stderr,"%c%"PRIu32,(h==0)?'(':',',g->gidtab[h]);
data/moosefs-3.0.115/mfsclient/mastercomm.c:1296:2:  [4] (format) snprintf:
  If format strings can be influenced by an attacker, they can be exploited,
  and note that sprintf variations do not always \0-terminate (CWE-134). Use
  a constant for the format specification.
	snprintf(srcstrip,17,"%"PRIu32".%"PRIu32".%"PRIu32".%"PRIu32,(srcip>>24)&0xFF,(srcip>>16)&0xFF,(srcip>>8)&0xFF,srcip&0xFF);
data/moosefs-3.0.115/mfsclient/mastercomm.c:1307:2:  [4] (format) snprintf:
  If format strings can be influenced by an attacker, they can be exploited,
  and note that sprintf variations do not always \0-terminate (CWE-134). Use
  a constant for the format specification.
	snprintf(masterstrip,17,"%"PRIu32".%"PRIu32".%"PRIu32".%"PRIu32,(masterip>>24)&0xFF,(masterip>>16)&0xFF,(masterip>>8)&0xFF,masterip&0xFF);
data/moosefs-3.0.115/mfsclient/mastercomm.c:1620:5:  [4] (format) snprintf:
  If format strings can be influenced by an attacker, they can be exploited,
  and note that sprintf variations do not always \0-terminate (CWE-134). Use
  a constant for the format specification.
				snprintf(newmasterstrip,17,"%"PRIu32".%"PRIu32".%"PRIu32".%"PRIu32,(newmasterip>>24)&0xFF,(newmasterip>>16)&0xFF,(newmasterip>>8)&0xFF,newmasterip&0xFF);
data/moosefs-3.0.115/mfsclient/mastercomm.c:1628:5:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
				strcpy(masterstrip,newmasterstrip);
data/moosefs-3.0.115/mfsclient/mastercomm.c:1713:4:  [4] (format) fprintf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
			fprintf(stderr," ; root mapped to %"PRIu32":%"PRIu32,rootuid,rootgid);
data/moosefs-3.0.115/mfsclient/mastercomm.c:1715:5:  [4] (format) fprintf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
				fprintf(stderr," ; users mapped to %"PRIu32":%"PRIu32,mapalluid,mapallgid);
data/moosefs-3.0.115/mfsclient/mastercomm.c:1719:5:  [4] (format) fprintf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
				fprintf(stderr," ; global umask set to 0%03"PRIo16,umaskval);
data/moosefs-3.0.115/mfsclient/mastercomm.c:1734:5:  [4] (format) fprintf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
				fprintf(stderr,"%"PRIu32,rootgid);
data/moosefs-3.0.115/mfsclient/mastercomm.c:1748:6:  [4] (format) fprintf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
					fprintf(stderr,"%"PRIu32,mapallgid);
data/moosefs-3.0.115/mfsclient/mastercomm.c:1837:2:  [4] (format) snprintf:
  If format strings can be influenced by an attacker, they can be exploited,
  and note that sprintf variations do not always \0-terminate (CWE-134). Use
  a constant for the format specification.
	snprintf(masterstrip,17,"%"PRIu32".%"PRIu32".%"PRIu32".%"PRIu32,(masterip>>24)&0xFF,(masterip>>16)&0xFF,(masterip>>8)&0xFF,masterip&0xFF);
data/moosefs-3.0.115/mfsclient/mastercomm.c:1935:6:  [4] (format) snprintf:
  If format strings can be influenced by an attacker, they can be exploited,
  and note that sprintf variations do not always \0-terminate (CWE-134). Use
  a constant for the format specification.
					snprintf(masterstrip,17,"%"PRIu32".%"PRIu32".%"PRIu32".%"PRIu32,(masterip>>24)&0xFF,(masterip>>16)&0xFF,(masterip>>8)&0xFF,masterip&0xFF);
data/moosefs-3.0.115/mfsclient/mastercomm.c:2128:3:  [4] (format) syslog:
  If syslog's format strings can be influenced by an attacker, they can be
  exploited (CWE-134). Use a constant format string for syslog.
		syslog(LOG_NOTICE,"open inode(%"PRIu32"): %"PRIu32,i,inode);
data/moosefs-3.0.115/mfsclient/mfs_fuse.c:3406:12:  [4] (format) snprintf:
  If format strings can be influenced by an attacker, they can be exploited,
  and note that sprintf variations do not always \0-terminate (CWE-134). Use
  a constant for the format specification.
			leng += snprintf(buf+leng,size-leng,"|" #f); \
data/moosefs-3.0.115/mfsclient/mfsmount.c:842:45:  [4] (format) snprintf:
  If format strings can be influenced by an attacker, they can be exploited,
  and note that sprintf variations do not always \0-terminate (CWE-134). Use
  a constant for the format specification.
#define bprintf(...) { if (leng<size) leng+=snprintf(buff+leng,size-leng,__VA_ARGS__); }
data/moosefs-3.0.115/mfsclient/mfsmount.c:1012:22:  [4] (misc) getpass:
  This function is obsolete and not portable. It was in SUSv2 but removed by
  POSIX.2. What it does exactly varies considerably between systems,
  particularly in where its prompt is displayed and where it gets its data
  (e.g., /dev/tty, stdin, stderr, etc.). In addition, some implementations
  overflow buffers. (CWE-676, CWE-120, CWE-20). Make the specific calls to do
  exactly what you want. If you continue to use it, or write your own, be
  sure to zero the password as soon as possible to avoid leaving the
  cleartext password visible in the process' address space.
		mfsopts.password = getpass("MFS Password:");
data/moosefs-3.0.115/mfsclient/mfsmount.c:1964:3:  [4] (format) fprintf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
		fprintf(stderr,name " cache timeout too big (%.2lf) - decreased to %.2lf\n",(option),(max)); \
data/moosefs-3.0.115/mfsclient/mfstools.c:137:2:  [4] (format) printf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
	printf(format,numbuf);
data/moosefs-3.0.115/mfsclient/mfstools.c:160:4:  [4] (format) printf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
			printf("%"PRIu64,number);
data/moosefs-3.0.115/mfsclient/mfstools.c:162:4:  [4] (format) printf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
			printf("%"PRIu64,number/1024);
data/moosefs-3.0.115/mfsclient/mfstools.c:164:4:  [4] (format) printf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
			printf("%"PRIu64,number/(1024*1024));
data/moosefs-3.0.115/mfsclient/mfstools.c:166:4:  [4] (format) printf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
			printf("%"PRIu64,number/(1024*1024*1024));
data/moosefs-3.0.115/mfsclient/mfstools.c:200:6:  [4] (format) printf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
					printf("%10"PRIu32,(uint32_t)number);
data/moosefs-3.0.115/mfsclient/mfstools.c:202:6:  [4] (format) printf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
					printf("%20"PRIu64,number);
data/moosefs-3.0.115/mfsclient/mfstools.c:206:6:  [4] (format) printf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
					printf("%7"PRIu32,((uint32_t)number)/1024);
data/moosefs-3.0.115/mfsclient/mfstools.c:208:6:  [4] (format) printf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
					printf("%17"PRIu64,number/1024);
data/moosefs-3.0.115/mfsclient/mfstools.c:212:6:  [4] (format) printf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
					printf("%4"PRIu32,((uint32_t)number)/(1024*1024));
data/moosefs-3.0.115/mfsclient/mfstools.c:214:6:  [4] (format) printf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
					printf("%14"PRIu64,number/(1024*1024));
data/moosefs-3.0.115/mfsclient/mfstools.c:218:6:  [4] (format) printf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
					printf("%1"PRIu32,((uint32_t)number)/(1024*1024*1024));
data/moosefs-3.0.115/mfsclient/mfstools.c:220:6:  [4] (format) printf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
					printf("%11"PRIu64,number/(1024*1024*1024));
data/moosefs-3.0.115/mfsclient/mfstools.c:423:9:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
		(void)strcpy(bname, *endp == '/' ? "/" : ".");
data/moosefs-3.0.115/mfsclient/mfstools.c:717:4:  [4] (format) printf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
			printf("%"PRIu8,sc->create_labelscnt);
data/moosefs-3.0.115/mfsclient/mfstools.c:719:4:  [4] (format) printf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
			printf("%"PRIu8"->%"PRIu8,sc->create_labelscnt,sc->keep_labelscnt);
data/moosefs-3.0.115/mfsclient/mfstools.c:727:4:  [4] (format) printf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
			printf("%"PRIu8,sc->create_labelscnt);
data/moosefs-3.0.115/mfsclient/mfstools.c:729:4:  [4] (format) printf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
			printf("%"PRIu8"->%"PRIu8"->%"PRIu8,sc->create_labelscnt,sc->keep_labelscnt,sc->arch_labelscnt);
data/moosefs-3.0.115/mfsclient/mfstools.c:1897:6:  [4] (format) snprintf:
  If format strings can be influenced by an attacker, they can be exploited,
  and note that sprintf variations do not always \0-terminate (CWE-134). Use
  a constant for the format specification.
					snprintf(csstrip,16,"%"PRIu8".%"PRIu8".%"PRIu8".%"PRIu8,(uint8_t)((cdtab[copy].ip>>24)&0xFF),(uint8_t)((cdtab[copy].ip>>16)&0xFF),(uint8_t)((cdtab[copy].ip>>8)&0xFF),(uint8_t)(cdtab[copy].ip&0xFF));
data/moosefs-3.0.115/mfsclient/nbdmain.c:622:2:  [4] (format) syslog:
  If syslog's format strings can be influenced by an attacker, they can be
  exploited (CWE-134). Use a constant format string for syslog.
	syslog(LOG_ERR,(format), __VA_ARGS__); \
data/moosefs-3.0.115/mfsclient/nbdmain.c:623:2:  [4] (format) snprintf:
  If format strings can be influenced by an attacker, they can be exploited,
  and note that sprintf variations do not always \0-terminate (CWE-134). Use
  a constant for the format specification.
	snprintf(errmsg,NBD_ERR_SIZE,(format), __VA_ARGS__); \
data/moosefs-3.0.115/mfsclient/nbdmain.c:2385:5:  [4] (format) printf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
				printf(" -s %"PRIu64,size);
data/moosefs-3.0.115/mfsclient/oplog.c:108:11:  [4] (format) vsnprintf:
  If format strings can be influenced by an attacker, they can be exploited,
  and note that sprintf variations do not always \0-terminate (CWE-134). Use
  a constant for the format specification.
		leng += vsnprintf(buff+leng,LINELENG-leng,format,ap);
data/moosefs-3.0.115/mfsclient/oplog.c:142:11:  [4] (format) vsnprintf:
  If format strings can be influenced by an attacker, they can be exploited,
  and note that sprintf variations do not always \0-terminate (CWE-134). Use
  a constant for the format specification.
		leng += vsnprintf(buff+leng,LINELENG-leng,format,ap);
data/moosefs-3.0.115/mfsclient/oplog.h:30:57:  [4] (format) printf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
#define __printflike(fmt,va1) __attribute__((__format__(printf, fmt, va1)))
data/moosefs-3.0.115/mfsclient/readdata.c:517:3:  [4] (format) snprintf:
  If format strings can be influenced by an attacker, they can be exploited,
  and note that sprintf variations do not always \0-terminate (CWE-134). Use
  a constant for the format specification.
		snprintf(ipstr,16,"%"PRIu8".%"PRIu8".%"PRIu8".%"PRIu8,(uint8_t)(ip>>24),(uint8_t)(ip>>16),(uint8_t)(ip>>8),(uint8_t)ip);
data/moosefs-3.0.115/mfsclient/sustained_inodes.c:424:2:  [4] (format) syslog:
  If syslog's format strings can be influenced by an attacker, they can be
  exploited (CWE-134). Use a constant format string for syslog.
	syslog(LOG_NOTICE,"my st_dev: %"PRIu32,mydevid);
data/moosefs-3.0.115/mfsclient/writedata.c:214:3:  [4] (format) syslog:
  If syslog's format strings can be influenced by an attacker, they can be
  exploited (CWE-134). Use a constant format string for syslog.
		syslog(LOG_NOTICE,"used cache blocks: %"PRIu32" ; sum of inode used blocks: %"PRIu32" ; free cache blocks: %"PRIu32" ; free cache chain blocks: %"PRIu32,usedblocks,cbcnt,freecacheblocks,fcbcnt);
data/moosefs-3.0.115/mfsclient/writedata.c:581:3:  [4] (format) snprintf:
  If format strings can be influenced by an attacker, they can be exploited,
  and note that sprintf variations do not always \0-terminate (CWE-134). Use
  a constant for the format specification.
		snprintf(ipstr,16,"%"PRIu8".%"PRIu8".%"PRIu8".%"PRIu8,(uint8_t)(ip>>24),(uint8_t)(ip>>16),(uint8_t)(ip>>8),(uint8_t)ip);
data/moosefs-3.0.115/mfsclient/writedata.c:1827:2:  [4] (format) syslog:
  If syslog's format strings can be influenced by an attacker, they can be
  exploited (CWE-134). Use a constant format string for syslog.
	syslog(LOG_NOTICE,"flush time: %"PRId64,e-s);
data/moosefs-3.0.115/mfsclient/writedata.c:1879:2:  [4] (format) syslog:
  If syslog's format strings can be influenced by an attacker, they can be
  exploited (CWE-134). Use a constant format string for syslog.
	syslog(LOG_NOTICE,"flush time: %"PRId64,e-s);
data/moosefs-3.0.115/mfscommon/cfg.c:42:2:  [4] (format) vprintf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
	vprintf(format, args);
data/moosefs-3.0.115/mfscommon/main.c:1042:4:  [4] (format) fprintf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
			fprintf(stderr,STR(APPNAME) " pid: %ld\n",(long)ownerpid);
data/moosefs-3.0.115/mfscommon/main.c:1151:3:  [4] (format) fprintf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
		fprintf(stderr,STR(APPNAME) " is not running\n");
data/moosefs-3.0.115/mfscommon/main.c:1263:2:  [4] (format) printf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
	printf(
data/moosefs-3.0.115/mfscommon/portable.h:163:20:  [4] (format) syslog:
  If syslog's format strings can be influenced by an attacker, they can be
  exploited (CWE-134). Use a constant format string for syslog.
static inline void syslog(uint8_t level,const char *format,...) {
data/moosefs-3.0.115/mfscommon/portable.h:167:2:  [4] (format) vfprintf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
	vfprintf(stderr,format, args);
data/moosefs-3.0.115/mfscommon/slogger.h:37:2:  [4] (format) syslog:
  If syslog's format strings can be influenced by an attacker, they can be
  exploited (CWE-134). Use a constant format string for syslog.
	syslog((priority),(format), __VA_ARGS__); \
data/moosefs-3.0.115/mfscommon/slogger.h:38:2:  [4] (format) fprintf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
	fprintf(stderr,format "\n", __VA_ARGS__); \
data/moosefs-3.0.115/mfscommon/slogger.h:49:2:  [4] (format) syslog:
  If syslog's format strings can be influenced by an attacker, they can be
  exploited (CWE-134). Use a constant format string for syslog.
	syslog((priority),format ": %s", __VA_ARGS__ , _mfs_errstring); \
data/moosefs-3.0.115/mfscommon/slogger.h:50:2:  [4] (format) fprintf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
	fprintf(stderr,format ": %s\n", __VA_ARGS__ , _mfs_errstring); \
data/moosefs-3.0.115/mfscommon/slogger.h:54:53:  [4] (format) syslog:
  If syslog's format strings can be influenced by an attacker, they can be
  exploited (CWE-134). Use a constant format string for syslog.
#define mfs_arg_errlog_silent(priority,format, ...) syslog((priority),format ": %s", __VA_ARGS__ , strerr(errno));
data/moosefs-3.0.115/mfscommon/statsdump.c:145:2:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
	strcpy(str,opt);
data/moosefs-3.0.115/mfscommon/statsdump.c:432:4:  [4] (format) printf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
			printf("%"PRIu32,i);
data/moosefs-3.0.115/mfsmaster/bgsaver.c:752:5:  [4] (format) syslog:
  If syslog's format strings can be influenced by an attacker, they can be
  exploited (CWE-134). Use a constant format string for syslog.
				syslog(LOG_WARNING,"bgworker packet too long (%"PRIu32"/%u) ; command:%"PRIu32,leng,MAX_STATUS_SIZE,type);
data/moosefs-3.0.115/mfsmaster/changelog.c:220:9:  [4] (format) vsnprintf:
  If format strings can be influenced by an attacker, they can be exploited,
  and note that sprintf variations do not always \0-terminate (CWE-134). Use
  a constant for the format specification.
	leng = vsnprintf(printbuff,MAXLOGLINESIZE,format,ap);
data/moosefs-3.0.115/mfsmaster/changelog.c:253:9:  [4] (format) snprintf:
  If format strings can be influenced by an attacker, they can be exploited,
  and note that sprintf variations do not always \0-terminate (CWE-134). Use
  a constant for the format specification.
			l += snprintf(gidstr+l,gidstr_size-l,"%"PRIu32,gid[i]);
data/moosefs-3.0.115/mfsmaster/chunks.c:348:3:  [4] (format) vfprintf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
		vfprintf(fd,format,ap);
data/moosefs-3.0.115/mfsmaster/chunks.c:4421:4:  [4] (format) syslog:
  If syslog's format strings can be influenced by an attacker, they can be
  exploited (CWE-134). Use a constant format string for syslog.
			syslog(LOG_NOTICE,"danger_priority_group %"PRIu32": serious structure error, head: %"PRIu32"; tail: %"PRIu32"; leng: %"PRIu32,j,chunks_priority_head[j],chunks_priority_tail[j],+chunks_priority_leng[j]);
data/moosefs-3.0.115/mfsmaster/chunks.c:4456:4:  [4] (format) syslog:
  If syslog's format strings can be influenced by an attacker, they can be
  exploited (CWE-134). Use a constant format string for syslog.
			syslog(LOG_NOTICE,"danger_priority_group %"PRIu32": %"PRIu32"->%"PRIu32,j,l,chunks_priority_leng[j]);
data/moosefs-3.0.115/mfsmaster/chunks.c:4584:5:  [4] (format) syslog:
  If syslog's format strings can be influenced by an attacker, they can be
  exploited (CWE-134). Use a constant format string for syslog.
				syslog(LOG_WARNING,"chunks: wrong ending - chunk zero with version: %"PRIu32" and locked to: %"PRIu32,version,lockedto);
data/moosefs-3.0.115/mfsmaster/csdb.c:169:2:  [4] (format) snprintf:
  If format strings can be influenced by an attacker, they can be exploited,
  and note that sprintf variations do not always \0-terminate (CWE-134). Use
  a constant for the format specification.
	snprintf(strip,16,"%"PRIu8".%"PRIu8".%"PRIu8".%"PRIu8,(uint8_t)(ip>>24),(uint8_t)(ip>>16),(uint8_t)(ip>>8),(uint8_t)ip);
data/moosefs-3.0.115/mfsmaster/csdb.c:332:3:  [4] (format) syslog:
  If syslog's format strings can be influenced by an attacker, they can be
  exploited (CWE-134). Use a constant format string for syslog.
		syslog(LOG_NOTICE,"csdb: generate new server id for (%s:%"PRIu16"): %"PRIu16,strip,csptr->port,csptr->csid);
data/moosefs-3.0.115/mfsmaster/filesystem.c:920:3:  [4] (format) syslog:
  If syslog's format strings can be influenced by an attacker, they can be
  exploited (CWE-134). Use a constant format string for syslog.
		syslog(LOG_WARNING,"freebitmask: repeated inode: %"PRIu32,inode);
data/moosefs-3.0.115/mfsmaster/filesystem.c:5143:3:  [4] (format) syslog:
  If syslog's format strings can be influenced by an attacker, they can be
  exploited (CWE-134). Use a constant format string for syslog.
		syslog(LOG_WARNING,"SYMLINK data mismatch: my:%"PRIu32" != expected:%"PRIu32,rinode,inode);
data/moosefs-3.0.115/mfsmaster/filesystem.c:5234:3:  [4] (format) syslog:
  If syslog's format strings can be influenced by an attacker, they can be
  exploited (CWE-134). Use a constant format string for syslog.
		syslog(LOG_WARNING,"CREATE data mismatch: my:%"PRIu32" != expected:%"PRIu32,rinode,inode);
data/moosefs-3.0.115/mfsmaster/filesystem.c:5327:3:  [4] (format) syslog:
  If syslog's format strings can be influenced by an attacker, they can be
  exploited (CWE-134). Use a constant format string for syslog.
		syslog(LOG_WARNING,"UNLINK data mismatch: my:%"PRIu32" != expected:%"PRIu32,rinode,inode);
data/moosefs-3.0.115/mfsmaster/filesystem.c:5474:3:  [4] (format) syslog:
  If syslog's format strings can be influenced by an attacker, they can be
  exploited (CWE-134). Use a constant format string for syslog.
		syslog(LOG_WARNING,"MOVE data mismatch: my:%"PRIu32" != expected:%"PRIu32,rinode,inode);
data/moosefs-3.0.115/mfsmaster/filesystem.c:5573:3:  [4] (format) syslog:
  If syslog's format strings can be influenced by an attacker, they can be
  exploited (CWE-134). Use a constant format string for syslog.
		syslog(LOG_WARNING,"LINK data mismatch: my:%"PRIu32" != expected:%"PRIu32,rinode,inode_src);
data/moosefs-3.0.115/mfsmaster/filesystem.c:7454:3:  [4] (format) syslog:
  If syslog's format strings can be influenced by an attacker, they can be
  exploited (CWE-134). Use a constant format string for syslog.
		syslog(LOG_WARNING,"set_file_chunk index too big: indx:%"PRIu32" ; chunks:%"PRIu32,indx,node->data.fdata.chunks);
data/moosefs-3.0.115/mfsmaster/filesystem.c:7545:4:  [4] (format) syslog:
  If syslog's format strings can be influenced by an attacker, they can be
  exploited (CWE-134). Use a constant format string for syslog.
			syslog(LOG_ERR,"unknown chunks: %"PRIu32,notfoundchunks);
data/moosefs-3.0.115/mfsmaster/filesystem.c:7902:3:  [4] (format) syslog:
  If syslog's format strings can be influenced by an attacker, they can be
  exploited (CWE-134). Use a constant format string for syslog.
		syslog(LOG_WARNING,"RENUMERATEEDGES data mismatch: my:%"PRIu64" != expected:%"PRIu64,nextedgeid,expected_nextedgeid);
data/moosefs-3.0.115/mfsmaster/filesystem.c:8764:8:  [4] (format) snprintf:
  If format strings can be influenced by an attacker, they can be exploited,
  and note that sprintf variations do not always \0-terminate (CWE-134). Use
  a constant for the format specification.
			l = snprintf((char*)artname,40,"lost_node_%"PRIu32,p->inode);
data/moosefs-3.0.115/mfsmaster/filesystem.c:8766:8:  [4] (format) snprintf:
  If format strings can be influenced by an attacker, they can be exploited,
  and note that sprintf variations do not always \0-terminate (CWE-134). Use
  a constant for the format specification.
			l = snprintf((char*)artname,40,"lost_node_%"PRIu32".%"PRIu32,p->inode,i);
data/moosefs-3.0.115/mfsmaster/filesystem.c:8790:5:  [4] (format) syslog:
  If syslog's format strings can be influenced by an attacker, they can be
  exploited (CWE-134). Use a constant format string for syslog.
				syslog(LOG_ERR,"found orphaned inode: %"PRIu32,p->inode);
data/moosefs-3.0.115/mfsmaster/filesystem.c:9074:4:  [4] (format) syslog:
  If syslog's format strings can be influenced by an attacker, they can be
  exploited (CWE-134). Use a constant format string for syslog.
			syslog(LOG_ERR,"quota defined for %s inode: %"PRIu32,(fn==NULL)?"non existing":"not directory",inode);
data/moosefs-3.0.115/mfsmaster/flocklocks.c:115:6:  [4] (format) syslog:
  If syslog's format strings can be influenced by an attacker, they can be
  exploited (CWE-134). Use a constant format string for syslog.
					syslog(LOG_NOTICE,"      waiting process reqid: %"PRIu32,i->reqid);
data/moosefs-3.0.115/mfsmaster/matoclserv.c:1534:5:  [4] (format) syslog:
  If syslog's format strings can be influenced by an attacker, they can be
  exploited (CWE-134). Use a constant format string for syslog.
				syslog(LOG_NOTICE,"created new sessionid:%"PRIu32,sessionid);
data/moosefs-3.0.115/mfsmaster/matoclserv.c:5513:5:  [4] (format) syslog:
  If syslog's format strings can be influenced by an attacker, they can be
  exploited (CWE-134). Use a constant format string for syslog.
				syslog(LOG_WARNING,"main master server module: packet too long (%"PRIu32"/%u) ; command:%"PRIu32,leng,MaxPacketSize,type);
data/moosefs-3.0.115/mfsmaster/matocsserv.c:285:14:  [4] (format) snprintf:
  If format strings can be influenced by an attacker, they can be exploited,
  and note that sprintf variations do not always \0-terminate (CWE-134). Use
  a constant for the format specification.
					leng += snprintf(buff+leng,bleng-leng,"%s:%"PRIu16,((matocsserventry *)(rs->src))->servstrip,((matocsserventry *)(rs->src))->servport);
data/moosefs-3.0.115/mfsmaster/matocsserv.c:289:13:  [4] (format) snprintf:
  If format strings can be influenced by an attacker, they can be exploited,
  and note that sprintf variations do not always \0-terminate (CWE-134). Use
  a constant for the format specification.
				leng += snprintf(buff+leng,bleng-leng," -> %s:%"PRIu16,((matocsserventry *)dst)->servstrip,((matocsserventry *)dst)->servport);
data/moosefs-3.0.115/mfsmaster/matocsserv.c:418:4:  [4] (format) syslog:
  If syslog's format strings can be influenced by an attacker, they can be
  exploited (CWE-134). Use a constant format string for syslog.
			syslog(LOG_NOTICE,"cs %s:%u ; usedspace: %"PRIu64" ; totalspace: %"PRIu64" ; usage: %.2lf%% ; load: %"PRIu32" ; timeout: %"PRIu16" ; chunkscount: %"PRIu32" ; errorcounter: %"PRIu32" ; writecounter: %"PRIu16" ; rrepcounter: %"PRIu16" ; wrepcounter: %"PRIu16" ; delcounter: %"PRIu32" ; create_total: %"PRIu32" ; rrep_total: %"PRIu32" ; wrep_total: %"PRIu32" ; del_total: %"PRIu32" ; create/s: %.4lf ; rrep/s: %.4lf ; wrep/s: %.4lf ; del/s: %.4lf ; csid: %"PRIu16" ; dist: %"PRIu32" ; first: %"PRIu8" ; corr: %.4lf ; hlstatus: %"PRIu8" (%s) ; overloaded: %"PRIu8" ; maintained: %"PRIu8,eptr->servstrip,eptr->servport,eptr->usedspace,eptr->totalspace,usage,eptr->load,eptr->timeout,eptr->chunkscount,eptr->errorcounter,eptr->writecounter,eptr->rrepcounter,eptr->wrepcounter,eptr->delcounter,eptr->create_total_counter,eptr->rrep_total_counter,eptr->wrep_total_counter,eptr->del_total_counter,eptr->create_total_counter/dur,eptr->rrep_total_counter/dur,eptr->wrep_total_counter/dur,eptr->del_total_counter/dur,eptr->csid,eptr->dist,eptr->first,eptr->corr,eptr->hlstatus,hlstatus_name,overloaded,maintained);
data/moosefs-3.0.115/mfsmaster/matocsserv.c:1231:2:  [4] (format) snprintf:
  If format strings can be influenced by an attacker, they can be exploited,
  and note that sprintf variations do not always \0-terminate (CWE-134). Use
  a constant for the format specification.
	snprintf(optr,l,"%"PRIu8".%"PRIu8".%"PRIu8".%"PRIu8,pt[0],pt[1],pt[2],pt[3]);
data/moosefs-3.0.115/mfsmaster/matocsserv.c:1290:3:  [4] (format) syslog:
  If syslog's format strings can be influenced by an attacker, they can be
  exploited (CWE-134). Use a constant format string for syslog.
		syslog(LOG_NOTICE,"(%s:%"PRIu16") chunk: %016"PRIX64" calculate checksum: %08"PRIX32,eptr->servstrip,eptr->servport,chunkid,checksum);
data/moosefs-3.0.115/mfsmaster/matocsserv.c:1886:6:  [4] (format) syslog:
  If syslog's format strings can be influenced by an attacker, they can be
  exploited (CWE-134). Use a constant format string for syslog.
					syslog(LOG_NOTICE,"chunkserver register begin (packet version: 5) - ip: %s / port: %"PRIu16,eptr->servstrip,eptr->servport);
data/moosefs-3.0.115/mfsmaster/matocsserv.c:1985:4:  [4] (format) syslog:
  If syslog's format strings can be influenced by an attacker, they can be
  exploited (CWE-134). Use a constant format string for syslog.
			syslog(LOG_NOTICE,"chunkserver register end (packet version: 6) - ip: %s / port: %"PRIu16,eptr->servstrip,eptr->servport);
data/moosefs-3.0.115/mfsmaster/matocsserv.c:1994:4:  [4] (format) syslog:
  If syslog's format strings can be influenced by an attacker, they can be
  exploited (CWE-134). Use a constant format string for syslog.
			syslog(LOG_NOTICE,"chunkserver graceful disconnection (packet version: 6) - ip: %s / port: %"PRIu16,eptr->servstrip,eptr->servport);
data/moosefs-3.0.115/mfsmaster/matocsserv.c:2358:5:  [4] (format) syslog:
  If syslog's format strings can be influenced by an attacker, they can be
  exploited (CWE-134). Use a constant format string for syslog.
				syslog(LOG_WARNING,"CS(%s) packet too long (%"PRIu32"/%u) ; command:%"PRIu32,eptr->servstrip,leng,MaxPacketSize,type);
data/moosefs-3.0.115/mfsmaster/matomlserv.c:271:2:  [4] (format) snprintf:
  If format strings can be influenced by an attacker, they can be exploited,
  and note that sprintf variations do not always \0-terminate (CWE-134). Use
  a constant for the format specification.
	snprintf(optr,l,"%"PRIu8".%"PRIu8".%"PRIu8".%"PRIu8,pt[0],pt[1],pt[2],pt[3]);
data/moosefs-3.0.115/mfsmaster/matomlserv.c:742:5:  [4] (format) syslog:
  If syslog's format strings can be influenced by an attacker, they can be
  exploited (CWE-134). Use a constant format string for syslog.
				syslog(LOG_WARNING,"ML(%s) packet too long (%"PRIu32"/%u) ; command:%"PRIu32,eptr->servstrip,leng,MaxPacketSize,type);
data/moosefs-3.0.115/mfsmaster/metadata.c:794:6:  [4] (format) snprintf:
  If format strings can be influenced by an attacker, they can be exploited,
  and note that sprintf variations do not always \0-terminate (CWE-134). Use
  a constant for the format specification.
					snprintf(metaname1,100,"metadata.mfs.back.%"PRIu32,n+1);
data/moosefs-3.0.115/mfsmaster/metadata.c:795:6:  [4] (format) snprintf:
  If format strings can be influenced by an attacker, they can be exploited,
  and note that sprintf variations do not always \0-terminate (CWE-134). Use
  a constant for the format specification.
					snprintf(metaname2,100,"metadata.mfs.back.%"PRIu32,n);
data/moosefs-3.0.115/mfsmaster/metadata.c:1299:10:  [4] (tmpfile) mktemp:
  Temporary file race condition (CWE-377).
					if (mktemp(name)==NULL) {
data/moosefs-3.0.115/mfsmaster/posixlocks.c:100:5:  [4] (format) syslog:
  If syslog's format strings can be influenced by an attacker, they can be
  exploited (CWE-134). Use a constant format string for syslog.
				syslog(LOG_NOTICE,"    active lock: session:%"PRIu32",owner:%"PRIu64",pid:%"PRIu32,al->sessionid,al->owner,al->pid);
data/moosefs-3.0.115/mfsmaster/storageclass.c:892:13:  [4] (format) snprintf:
  If format strings can be influenced by an attacker, they can be exploited,
  and note that sprintf variations do not always \0-terminate (CWE-134). Use
  a constant for the format specification.
				nleng = snprintf((char*)name,MAXSCLASSNLENG,"sclass_%"PRIu32,(uint32_t)(sclassid+1-FIRSTSCLASSID));
data/moosefs-3.0.115/mfsmaster/storageclass.c:1062:24:  [4] (format) snprintf:
  If format strings can be influenced by an attacker, they can be exploited,
  and note that sprintf variations do not always \0-terminate (CWE-134). Use
  a constant for the format specification.
		sclasstab[i].nleng = snprintf((char*)(sclasstab[i].name),MAXSCLASSNLENG,"%"PRIu32,i);
data/moosefs-3.0.115/mfsmaster/storageclass.c:1107:24:  [4] (format) snprintf:
  If format strings can be influenced by an attacker, they can be exploited,
  and note that sprintf variations do not always \0-terminate (CWE-134). Use
  a constant for the format specification.
		sclasstab[i].nleng = snprintf((char*)(sclasstab[i].name),MAXSCLASSNLENG,"%"PRIu32,i);
data/moosefs-3.0.115/mfsmetalogger/masterconn.c:389:5:  [4] (format) syslog:
  If syslog's format strings can be influenced by an attacker, they can be
  exploited (CWE-134). Use a constant format string for syslog.
				syslog(LOG_NOTICE,"meta data version: %"PRIu64", meta data id: 0x%016"PRIX64,metaversion,metaid);
data/moosefs-3.0.115/mfsmetalogger/masterconn.c:431:7:  [4] (format) snprintf:
  If format strings can be influenced by an attacker, they can be exploited,
  and note that sprintf variations do not always \0-terminate (CWE-134). Use
  a constant for the format specification.
						snprintf(metaname1,100,"metadata_ml.mfs.back.%"PRIu32,i+1);
data/moosefs-3.0.115/mfsmetalogger/masterconn.c:432:7:  [4] (format) snprintf:
  If format strings can be influenced by an attacker, they can be exploited,
  and note that sprintf variations do not always \0-terminate (CWE-134). Use
  a constant for the format specification.
						snprintf(metaname2,100,"metadata_ml.mfs.back.%"PRIu32,i);
data/moosefs-3.0.115/mfsmetalogger/masterconn.c:793:5:  [4] (format) syslog:
  If syslog's format strings can be influenced by an attacker, they can be
  exploited (CWE-134). Use a constant format string for syslog.
				syslog(LOG_WARNING,"Master packet too long (%"PRIu32"/%u) ; command:%"PRIu32,leng,MaxPacketSize,type);
data/moosefs-3.0.115/mfsmetatools/mfsmetadirinfo.c:772:4:  [4] (format) fprintf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
			fprintf(ofd,"%c%"PRIu64,s,liset_card(dis->inode_liset));
data/moosefs-3.0.115/mfsmetatools/mfsmetadirinfo.c:773:4:  [4] (format) fprintf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
			fprintf(ofd,"%c%"PRIu32,s,dis->s.files);
data/moosefs-3.0.115/mfsmetatools/mfsmetadirinfo.c:774:4:  [4] (format) fprintf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
			fprintf(ofd,"%c%"PRIu32,s,dis->s.dirs);
data/moosefs-3.0.115/mfsmetatools/mfsmetadirinfo.c:775:4:  [4] (format) fprintf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
			fprintf(ofd,"%c%"PRIu64,s,liset_card(dis->chunk_liset));
data/moosefs-3.0.115/mfsmetatools/mfsmetadirinfo.c:776:4:  [4] (format) fprintf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
			fprintf(ofd,"%c%"PRIu64,s,dis->s.kchunks);
data/moosefs-3.0.115/mfsmetatools/mfsmetadirinfo.c:777:4:  [4] (format) fprintf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
			fprintf(ofd,"%c%"PRIu64,s,dis->s.achunks);
data/moosefs-3.0.115/mfsmetatools/mfsmetadirinfo.c:778:4:  [4] (format) fprintf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
			fprintf(ofd,"%c%"PRIu64,s,dis->s.length);
data/moosefs-3.0.115/mfsmetatools/mfsmetadirinfo.c:779:4:  [4] (format) fprintf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
			fprintf(ofd,"%c%"PRIu64,s,dis->s.size);
data/moosefs-3.0.115/mfsmetatools/mfsmetadirinfo.c:780:4:  [4] (format) fprintf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
			fprintf(ofd,"%c%"PRIu64,s,dis->s.rsize);
data/moosefs-3.0.115/mfsmetatools/mfsmetadirinfo.c:781:4:  [4] (format) fprintf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
			fprintf(ofd,"%c%"PRIu64,s,dis->s.keeprsize);
data/moosefs-3.0.115/mfsmetatools/mfsmetadirinfo.c:782:4:  [4] (format) fprintf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
			fprintf(ofd,"%c%"PRIu64,s,dis->s.archrsize);
data/moosefs-3.0.115/mfsmetatools/mfsmetadump.c:52:2:  [4] (format) snprintf:
  If format strings can be influenced by an attacker, they can be exploited,
  and note that sprintf variations do not always \0-terminate (CWE-134). Use
  a constant for the format specification.
	snprintf(strip,16,"%03"PRIu8".%03"PRIu8".%03"PRIu8".%03"PRIu8,(uint8_t)(ip>>24),(uint8_t)(ip>>16),(uint8_t)(ip>>8),(uint8_t)ip);
data/moosefs-3.0.115/mfsmetatools/mfsmetadump.c:86:4:  [4] (format) printf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
			printf("%02"PRIX8,buff[i]);
data/moosefs-3.0.115/mfsmetatools/mfsmetadump.c:353:6:  [4] (format) printf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
					printf("%016"PRIX64,chunkid);
data/moosefs-3.0.115/mfsmetatools/mfsmetadump.c:370:5:  [4] (format) printf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
				printf("%016"PRIX64,chunkid);
data/moosefs-3.0.115/mfsmetatools/mfsmetadump.c:383:5:  [4] (format) printf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
				printf("%"PRIu32,sessionid);
data/moosefs-3.0.115/mfsmetatools/mfsmetadump.c:532:3:  [4] (format) printf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
		printf("QUOTA|i:%10"PRIu32"|g:%"PRIu32"|e:%c|f:0x%02"PRIX8"|s:%10"PRIu32,nodeid,graceperiod,(exceeded)?'1':'0',flags,stimestamp);
data/moosefs-3.0.115/mfsmetatools/mfsmetadump.c:534:4:  [4] (format) printf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
			printf("|si:%10"PRIu32,sinodes);
data/moosefs-3.0.115/mfsmetatools/mfsmetadump.c:539:4:  [4] (format) printf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
			printf("|hi:%10"PRIu32,hinodes);
data/moosefs-3.0.115/mfsmetatools/mfsmetadump.c:544:4:  [4] (format) printf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
			printf("|sl:%20"PRIu64,slength);
data/moosefs-3.0.115/mfsmetatools/mfsmetadump.c:549:4:  [4] (format) printf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
			printf("|hl:%20"PRIu64,hlength);
data/moosefs-3.0.115/mfsmetatools/mfsmetadump.c:554:4:  [4] (format) printf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
			printf("|ss:%20"PRIu64,ssize);
data/moosefs-3.0.115/mfsmetatools/mfsmetadump.c:559:4:  [4] (format) printf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
			printf("|hs:%20"PRIu64,hsize);
data/moosefs-3.0.115/mfsmetatools/mfsmetadump.c:564:4:  [4] (format) printf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
			printf("|sr:%20"PRIu64,srealsize);
data/moosefs-3.0.115/mfsmetatools/mfsmetadump.c:569:4:  [4] (format) printf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
			printf("|hr:%20"PRIu64,hrealsize);
data/moosefs-3.0.115/mfsmetatools/mfsmetadump.c:675:5:  [4] (format) printf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
				printf("u(%"PRIu32"):0%05"PRIo16,aclid,aclperm);
data/moosefs-3.0.115/mfsmetatools/mfsmetadump.c:677:5:  [4] (format) printf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
				printf("g(%"PRIu32"):0%05"PRIo16,aclid,aclperm);
data/moosefs-3.0.115/mfsmetatools/mfsmetadump.c:812:5:  [4] (format) printf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
				printf("%c%"PRIu32,(i==0)?'[':',',get32bit(&ptr));
data/moosefs-3.0.115/mfsmetatools/mfsmetadump.c:816:5:  [4] (format) printf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
				printf("%c%"PRIu32,(i==0)?'[':',',get32bit(&ptr));
data/moosefs-3.0.115/mfsmetatools/mfsmetadump.c:1161:3:  [4] (format) printf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
		printf("SCLASS|#:%5"PRIu16"|x:%u|m:%u|d:%5"PRIu16,sclassid,admin_only,mode,arch_delay);
data/moosefs-3.0.115/mfsnetdump/mfsnetdump.c:231:4:  [4] (format) printf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
			printf(COLOR_PAYLOAD_ADDR "\t0x%05X:" COLOR_PAYLOAD_HEX,i);
data/moosefs-3.0.115/mfsnetdump/mfsnetdump.c:235:4:  [4] (format) printf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
			printf(COLOR_CLEAR "\n");
data/moosefs-3.0.115/mfsnetdump/mfsnetdump.c:240:3:  [4] (format) printf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
		printf(COLOR_CLEAR "\n");
data/moosefs-3.0.115/mfsnetdump/mfsnetdump.c:267:2:  [4] (format) printf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
	printf(COLOR_TIMESTAMP "%ld.%06u : ",(long)(ts->tv_sec),(unsigned)(ts->tv_usec));
data/moosefs-3.0.115/mfsnetdump/mfsnetdump.c:368:4:  [4] (format) printf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
			printf(COLOR_NEWCONN "... new connection ..." COLOR_CLEAR "\n");
data/moosefs-3.0.115/mfsnetdump/mfsnetdump.c:374:4:  [4] (format) printf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
			printf(COLOR_CLOSECONN "... close connection ..." COLOR_CLEAR "\n");
data/moosefs-3.0.115/mfsnetdump/mfsnetdump.c:390:4:  [4] (format) printf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
			printf(COLOR_DATA "... data in packet ..." COLOR_CLEAR "\n");
data/moosefs-3.0.115/mfsnetdump/mfsnetdump.c:417:6:  [4] (format) printf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
					printf(COLOR_CLEAR);
data/moosefs-3.0.115/mfsnetdump/mfsnetdump.c:466:4:  [4] (format) printf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
			printf(COLOR_WRONGPACKET "... not mfs packet (%u:%u) ..." COLOR_CLEAR "\n",mfscmd,mfslen);
data/moosefs-3.0.115/mfschunkserver/mfschunktool.c:323:15:  [3] (buffer) getopt:
  Some older implementations do not protect against internal buffer overflows
  (CWE-120, CWE-20). Check implementation on installation, or limit the size
  of all string inputs.
	while ((ch = getopt(argc,argv,"hvfenrx?")) != -1) {
data/moosefs-3.0.115/mfsclient/mfsmount.c:1152:8:  [3] (buffer) getenv:
  Environment variables are untrustable input if they can be set by an
  attacker. They can have any content and length, and the same variable can
  be set more than once (CWE-807, CWE-20). Check environment variables
  carefully before using them.
		if (!getenv("MALLOC_ARENA_MAX")) {
data/moosefs-3.0.115/mfsclient/mfsmount.c:1156:8:  [3] (buffer) getenv:
  Environment variables are untrustable input if they can be set by an
  attacker. They can have any content and length, and the same variable can
  be set more than once (CWE-807, CWE-20). Check environment variables
  carefully before using them.
		if (!getenv("MALLOC_ARENA_TEST")) {
data/moosefs-3.0.115/mfsclient/mfstools.c:2685:6:  [3] (buffer) realpath:
  This function does not protect against buffer overflows, and some
  implementations can overflow internally (CWE-120/CWE-785!). Ensure that the
  destination buffer is at least of size MAXPATHLEN, andto protect against
  implementation problems, the input argument should also be checked to
  ensure it is no larger than MAXPATHLEN.
	if (realpath(dstname,dstpath)==NULL) {
data/moosefs-3.0.115/mfsclient/mfstools.c:2729:7:  [3] (buffer) realpath:
  This function does not protect against buffer overflows, and some
  implementations can overflow internally (CWE-120/CWE-785!). Ensure that the
  destination buffer is at least of size MAXPATHLEN, andto protect against
  implementation problems, the input argument should also be checked to
  ensure it is no larger than MAXPATHLEN.
		if (realpath(dir,to)==NULL) {
data/moosefs-3.0.115/mfsclient/mfstools.c:2743:7:  [3] (buffer) realpath:
  This function does not protect against buffer overflows, and some
  implementations can overflow internally (CWE-120/CWE-785!). Ensure that the
  destination buffer is at least of size MAXPATHLEN, andto protect against
  implementation problems, the input argument should also be checked to
  ensure it is no larger than MAXPATHLEN.
		if (realpath(dstname,to)==NULL) {
data/moosefs-3.0.115/mfsclient/mfstools.c:2786:11:  [3] (buffer) realpath:
  This function does not protect against buffer overflows, and some
  implementations can overflow internally (CWE-120/CWE-785!). Ensure that the
  destination buffer is at least of size MAXPATHLEN, andto protect against
  implementation problems, the input argument should also be checked to
  ensure it is no larger than MAXPATHLEN.
						if (realpath(srcnames[i],src)==NULL) {
data/moosefs-3.0.115/mfsclient/mfstools.c:2809:11:  [3] (buffer) realpath:
  This function does not protect against buffer overflows, and some
  implementations can overflow internally (CWE-120/CWE-785!). Ensure that the
  destination buffer is at least of size MAXPATHLEN, andto protect against
  implementation problems, the input argument should also be checked to
  ensure it is no larger than MAXPATHLEN.
						if (realpath(srcnames[i],src)==NULL) {
data/moosefs-3.0.115/mfsclient/mfstools.c:3357:13:  [3] (buffer) getenv:
  Environment variables are untrustable input if they can be set by an
  attacker. They can have any content and length, and the same variable can
  be set more than once (CWE-807, CWE-20). Check environment variables
  carefully before using them.
	hrformat = getenv("MFSHRFORMAT");
data/moosefs-3.0.115/mfsclient/mfstools.c:3381:14:  [3] (buffer) getopt:
  Some older implementations do not protect against internal buffer overflows
  (CWE-120, CWE-20). Check implementation on installation, or limit the size
  of all string inputs.
		while ((ch=getopt(argc,argv,"ocp"))!=-1) {
data/moosefs-3.0.115/mfsclient/mfstools.c:3403:14:  [3] (buffer) getopt:
  Some older implementations do not protect against internal buffer overflows
  (CWE-120, CWE-20). Check implementation on installation, or limit the size
  of all string inputs.
		while ((ch=getopt(argc,argv,"f"))!=-1) {
data/moosefs-3.0.115/mfsclient/mfstools.c:3419:14:  [3] (buffer) getopt:
  Some older implementations do not protect against internal buffer overflows
  (CWE-120, CWE-20). Check implementation on installation, or limit the size
  of all string inputs.
		while ((ch=getopt(argc,argv,"rnhHkmg"))!=-1) {
data/moosefs-3.0.115/mfsclient/mfstools.c:3456:14:  [3] (buffer) getopt:
  Some older implementations do not protect against internal buffer overflows
  (CWE-120, CWE-20). Check implementation on installation, or limit the size
  of all string inputs.
		while ((ch=getopt(argc,argv,"nhHkmg"))!=-1) {
data/moosefs-3.0.115/mfsclient/mfstools.c:3492:14:  [3] (buffer) getopt:
  Some older implementations do not protect against internal buffer overflows
  (CWE-120, CWE-20). Check implementation on installation, or limit the size
  of all string inputs.
		while ((ch=getopt(argc,argv,"rnhHkmg"))!=-1) {
data/moosefs-3.0.115/mfsclient/mfstools.c:3574:14:  [3] (buffer) getopt:
  Some older implementations do not protect against internal buffer overflows
  (CWE-120, CWE-20). Check implementation on installation, or limit the size
  of all string inputs.
		while ((ch=getopt(argc,argv,"rnhHkmg"))!=-1) {
data/moosefs-3.0.115/mfsclient/mfstools.c:3630:14:  [3] (buffer) getopt:
  Some older implementations do not protect against internal buffer overflows
  (CWE-120, CWE-20). Check implementation on installation, or limit the size
  of all string inputs.
		while ((ch=getopt(argc,argv,"rnhHkmgf:"))!=-1) {
data/moosefs-3.0.115/mfsclient/mfstools.c:3692:14:  [3] (buffer) getopt:
  Some older implementations do not protect against internal buffer overflows
  (CWE-120, CWE-20). Check implementation on installation, or limit the size
  of all string inputs.
		while ((ch=getopt(argc,argv,"nhHkmg"))!=-1) {
data/moosefs-3.0.115/mfsclient/mfstools.c:3722:14:  [3] (buffer) getopt:
  Some older implementations do not protect against internal buffer overflows
  (CWE-120, CWE-20). Check implementation on installation, or limit the size
  of all string inputs.
		while ((ch=getopt(argc,argv,"qcs"))!=-1) {
data/moosefs-3.0.115/mfsclient/mfstools.c:3741:14:  [3] (buffer) getopt:
  Some older implementations do not protect against internal buffer overflows
  (CWE-120, CWE-20). Check implementation on installation, or limit the size
  of all string inputs.
		while ((ch=getopt(argc,argv,"nhHkmgidfclsrp"))!=-1) {
data/moosefs-3.0.115/mfsclient/mfstools.c:3797:14:  [3] (buffer) getopt:
  Some older implementations do not protect against internal buffer overflows
  (CWE-120, CWE-20). Check implementation on installation, or limit the size
  of all string inputs.
		while ((ch=getopt(argc,argv,"nhHkmgp:i:I:l:L:s:S:r:R:"))!=-1) {
data/moosefs-3.0.115/mfsclient/mfstools.c:3936:14:  [3] (buffer) getopt:
  Some older implementations do not protect against internal buffer overflows
  (CWE-120, CWE-20). Check implementation on installation, or limit the size
  of all string inputs.
		while ((ch=getopt(argc,argv,"nhHkmgiIlLsSrRaA"))!=-1) {
data/moosefs-3.0.115/mfsclient/mfstools.c:4039:14:  [3] (buffer) getopt:
  Some older implementations do not protect against internal buffer overflows
  (CWE-120, CWE-20). Check implementation on installation, or limit the size
  of all string inputs.
		while ((ch=getopt(argc,argv,(f==MFSCHSC)?"d:A:K:C:m:a:f":"d:A:K:C:m:a:"))!=-1) {
data/moosefs-3.0.115/mfsclient/mfstools.c:4178:7:  [3] (buffer) getopt:
  Some older implementations do not protect against internal buffer overflows
  (CWE-120, CWE-20). Check implementation on installation, or limit the size
  of all string inputs.
		if (getopt(argc,argv,"")!=-1) {
data/moosefs-3.0.115/mfsclient/mfstools.c:4191:7:  [3] (buffer) getopt:
  Some older implementations do not protect against internal buffer overflows
  (CWE-120, CWE-20). Check implementation on installation, or limit the size
  of all string inputs.
		if (getopt(argc,argv,"")!=-1) {
data/moosefs-3.0.115/mfsclient/mfstools.c:4202:14:  [3] (buffer) getopt:
  Some older implementations do not protect against internal buffer overflows
  (CWE-120, CWE-20). Check implementation on installation, or limit the size
  of all string inputs.
		while ((ch=getopt(argc,argv,"l"))!=-1) {
data/moosefs-3.0.115/mfsclient/mfstools.c:4226:14:  [3] (buffer) getopt:
  Some older implementations do not protect against internal buffer overflows
  (CWE-120, CWE-20). Check implementation on installation, or limit the size
  of all string inputs.
		while ((ch=getopt(argc,argv,"s:"))!=-1) {
data/moosefs-3.0.115/mfsclient/mfstools.c:4242:7:  [3] (buffer) getopt:
  Some older implementations do not protect against internal buffer overflows
  (CWE-120, CWE-20). Check implementation on installation, or limit the size
  of all string inputs.
		if (getopt(argc,argv,"")!=-1) {
data/moosefs-3.0.115/mfsclient/mfstools_master.c:202:6:  [3] (buffer) realpath:
  This function does not protect against buffer overflows, and some
  implementations can overflow internally (CWE-120/CWE-785!). Ensure that the
  destination buffer is at least of size MAXPATHLEN, andto protect against
  implementation problems, the input argument should also be checked to
  ensure it is no larger than MAXPATHLEN.
	if (realpath(name,rpath)==NULL) {
data/moosefs-3.0.115/mfsclient/nbdmain.c:1341:15:  [3] (buffer) getopt:
  Some older implementations do not protect against internal buffer overflows
  (CWE-120, CWE-20). Check implementation on installation, or limit the size
  of all string inputs.
	while ((ch = getopt(argc, argv, "H:P:S:p:x:l:Fh?")) != -1) {
data/moosefs-3.0.115/mfsclient/nbdmain.c:1542:15:  [3] (buffer) getopt:
  Some older implementations do not protect against internal buffer overflows
  (CWE-120, CWE-20). Check implementation on installation, or limit the size
  of all string inputs.
	while ((ch = getopt(argc, argv, "l:?")) != -1) {
data/moosefs-3.0.115/mfsclient/nbdmain.c:1664:15:  [3] (buffer) getopt:
  Some older implementations do not protect against internal buffer overflows
  (CWE-120, CWE-20). Check implementation on installation, or limit the size
  of all string inputs.
	while ((ch = getopt(argc, argv, "l:f:d:n:s:r?")) != -1) {
data/moosefs-3.0.115/mfsclient/nbdmain.c:1868:15:  [3] (buffer) getopt:
  Some older implementations do not protect against internal buffer overflows
  (CWE-120, CWE-20). Check implementation on installation, or limit the size
  of all string inputs.
	while ((ch = getopt(argc, argv, "l:f:d:n:?")) != -1) {
data/moosefs-3.0.115/mfsclient/nbdmain.c:2072:15:  [3] (buffer) getopt:
  Some older implementations do not protect against internal buffer overflows
  (CWE-120, CWE-20). Check implementation on installation, or limit the size
  of all string inputs.
	while ((ch = getopt(argc, argv, "l:f:d:n:s:?")) != -1) {
data/moosefs-3.0.115/mfsclient/nbdmain.c:2280:15:  [3] (buffer) getopt:
  Some older implementations do not protect against internal buffer overflows
  (CWE-120, CWE-20). Check implementation on installation, or limit the size
  of all string inputs.
	while ((ch = getopt(argc, argv, "l:t:?")) != -1) {
data/moosefs-3.0.115/mfscommon/main.c:1333:15:  [3] (buffer) getopt:
  Some older implementations do not protect against internal buffer overflows
  (CWE-120, CWE-20). Check implementation on installation, or limit the size
  of all string inputs.
	while ((ch = getopt(argc, argv, "nuvfdc:t:h?" MODULE_OPTIONS_GETOPT)) != -1) {
data/moosefs-3.0.115/mfscommon/main.c:1591:8:  [3] (buffer) getenv:
  Environment variables are untrustable input if they can be set by an
  attacker. They can have any content and length, and the same variable can
  be set more than once (CWE-807, CWE-20). Check environment variables
  carefully before using them.
		if (!getenv("MALLOC_ARENA_MAX")) {
data/moosefs-3.0.115/mfscommon/main.c:1595:8:  [3] (buffer) getenv:
  Environment variables are untrustable input if they can be set by an
  attacker. They can have any content and length, and the same variable can
  be set more than once (CWE-807, CWE-20). Check environment variables
  carefully before using them.
		if (!getenv("MALLOC_ARENA_TEST")) {
data/moosefs-3.0.115/mfscommon/random.c:46:2:  [3] (random) srandom:
  This function is not sufficiently random for security-related functions
  such as key and nonce creation (CWE-327). Use a more secure technique for
  acquiring random values.
	srandom(time(NULL)+monotonic_useconds());
data/moosefs-3.0.115/mfscommon/random.c:48:12:  [3] (random) random:
  This function is not sufficiently random for security-related functions
  such as key and nonce creation (CWE-327). Use a more secure technique for
  acquiring random values.
		key[l] = random();
data/moosefs-3.0.115/mfscommon/random.c:49:13:  [3] (random) random:
  This function is not sufficiently random for security-related functions
  such as key and nonce creation (CWE-327). Use a more secure technique for
  acquiring random values.
		vkey[l] = random();
data/moosefs-3.0.115/mfscommon/sockets.c:112:7:  [3] (random) random:
  This function is not sufficiently random for security-related functions
  such as key and nonce creation (CWE-327). Use a more secure technique for
  acquiring random values.
		r = random()%n;
data/moosefs-3.0.115/mfscommon/statsdump.c:490:15:  [3] (buffer) getopt:
  Some older implementations do not protect against internal buffer overflows
  (CWE-120, CWE-20). Check implementation on installation, or limit the size
  of all string inputs.
	while ((ch = getopt(argc, argv, "i:r:f:p:s:x:y:hHd?")) != -1) {
data/moosefs-3.0.115/mfsmaster/posixlocks.c:967:13:  [3] (random) random:
  This function is not sufficiently random for security-related functions
  such as key and nonce creation (CWE-327). Use a more secure technique for
  acquiring random values.
				start = random()%250;
data/moosefs-3.0.115/mfsmaster/posixlocks.c:968:11:  [3] (random) random:
  This function is not sufficiently random for security-related functions
  such as key and nonce creation (CWE-327). Use a more secure technique for
  acquiring random values.
				end = random()%250;
data/moosefs-3.0.115/mfsmaster/posixlocks.c:975:12:  [3] (random) random:
  This function is not sufficiently random for security-related functions
  such as key and nonce creation (CWE-327). Use a more secure technique for
  acquiring random values.
			switch (random()&3) {
data/moosefs-3.0.115/mfsmetatools/mfsmetadirinfo.c:816:13:  [3] (buffer) getopt:
  Some older implementations do not protect against internal buffer overflows
  (CWE-120, CWE-20). Check implementation on installation, or limit the size
  of all string inputs.
	while ((ch=getopt(argc,argv,"f:o:a:"))>=0) {
data/moosefs-3.0.115/mfsmetatools/mfsmetadump.c:1495:13:  [3] (buffer) getopt:
  Some older implementations do not protect against internal buffer overflows
  (CWE-120, CWE-20). Check implementation on installation, or limit the size
  of all string inputs.
	while ((ch=getopt(argc,argv,"s:d"))>=0) {
data/moosefs-3.0.115/mfsnetdump/mfsnetdump.c:524:15:  [3] (buffer) getopt:
  Some older implementations do not protect against internal buffer overflows
  (CWE-120, CWE-20). Check implementation on installation, or limit the size
  of all string inputs.
	while ((ch = getopt(argc, argv, ARGLIST)) != -1) {
data/moosefs-3.0.115/mfschunkserver/bgjobs.c:748:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(ptr,srcs,srccnt*18);
data/moosefs-3.0.115/mfschunkserver/csserv.c:168:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(ptr,vstring,strlen(vstring));
data/moosefs-3.0.115/mfschunkserver/csserv.c:173:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char name[256];
data/moosefs-3.0.115/mfschunkserver/csserv.c:191:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(name,data,nleng);
data/moosefs-3.0.115/mfschunkserver/csserv.c:201:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(ptr,val,vleng);
data/moosefs-3.0.115/mfschunkserver/csserv.c:233:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(ptr,data,8); // copy chunkid directly from source packet
data/moosefs-3.0.115/mfschunkserver/csserv.c:261:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(ptr,data,8); // copy chunkid directly from source packet
data/moosefs-3.0.115/mfschunkserver/csserv.c:283:6:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
					memcpy(ptr,ij->buff,2);
data/moosefs-3.0.115/mfschunkserver/csserv.c:301:6:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
					memcpy(ptr,ij->buff,4);
data/moosefs-3.0.115/mfschunkserver/csserv.c:315:6:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
					memcpy(ptr,ij->buff,4096);
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:507:40:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
static inline void hdd_create_filename(char fname[PATH_MAX],const char *fpath,uint16_t pathid,uint64_t chunkid,uint32_t version) {
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:516:28:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
void hdd_generate_filename(char fname[PATH_MAX],chunk *c) {
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:911:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
				memcpy(buff,"(...)",5);
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:912:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
				memcpy(buff+5,cl->path+(sl-250),250);
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:918:6:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
					memcpy(buff,cl->path,sl);
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:989:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
				memcpy(buff,"(...)",5);
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:990:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
				memcpy(buff+5,f->path+(sl-250),250);
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:996:6:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
					memcpy(buff,f->path,sl);
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:1279:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char fname[PATH_MAX];
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:1843:9:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	static char fpath[PATH_MAX-100];
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:1845:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char fname[PATH_MAX];
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:1874:6:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
					memcpy(fpath,f->path,i+1);
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:1919:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(fname,f->path,pleng);
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:1920:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(fname+pleng,".tmp_chunkdb",12);
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:1922:14:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
	f->dumpfd = open(fname,O_WRONLY | O_TRUNC | O_CREAT,0666);
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:1927:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(hdr,"MFS CHUNKDB2",12);
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:1957:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(fname_src,f->path,pleng);
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:1958:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(fname_src+pleng,".tmp_chunkdb",12);
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:1960:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(fname_dst,f->path,pleng);
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:1961:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(fname_dst+pleng,".chunkdb",8);
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:2018:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy(fname,f->path,pleng);
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:2019:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy(fname+pleng,".tmp_chunkdb",12);
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:2488:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(c->crc,emptychunkcrc,CHUNKCRCSIZE);
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:2497:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char fname[PATH_MAX];
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:2559:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char fname[PATH_MAX];
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:2595:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char fname[PATH_MAX];
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:2726:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char fname[PATH_MAX];
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:2744:13:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
				c->fd = open(fname,O_RDWR | O_CREAT | O_EXCL,0666);
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:2747:14:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
					c->fd = open(fname,O_RDWR);
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:2749:14:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
					c->fd = open(fname,O_RDONLY);
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:2842:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char fname[PATH_MAX];
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:2861:7:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
	fd = open(fname,O_RDONLY);
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:2989:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char fname[PATH_MAX];
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:3039:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy(buffer,c->block,MFSBLOCKSIZE);
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:3051:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy(c->block,buffer,MFSBLOCKSIZE);
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:3128:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(buffer,c->block+offset,size);
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:3130:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(buffer,blockbuffer+offset,size);
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:3148:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char fname[PATH_MAX];
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:3296:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(c->block,buffer,MFSBLOCKSIZE);
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:3377:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy(c->block+offset,buffer,size);
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:3385:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy(blockbuffer+offset,buffer,size);
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:3570:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char fname[PATH_MAX];
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:3607:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(hdrbuffer,MFSSIGNATURE "C 1.0",8);
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:3641:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char fname[PATH_MAX];
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:3756:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char ofname[PATH_MAX];
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:3757:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char fname[PATH_MAX];
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:3869:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(hdrbuffer,MFSSIGNATURE "C 1.0",8);
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:3873:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(c->crc,oc->crc,CHUNKCRCSIZE);
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:3874:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(hdrbuffer+c->hdrsize,oc->crc,CHUNKCRCSIZE);
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:3876:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(hdrbuffer+c->hdrsize+4*oc->blocks,emptychunkcrc,4*(MFSBLOCKSINCHUNK-oc->blocks));
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:3897:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy(c->block,oc->block,MFSBLOCKSIZE);
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:4024:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char ofname[PATH_MAX];
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:4025:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char fname[PATH_MAX];
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:4083:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char ofname[PATH_MAX];
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:4084:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char fname[PATH_MAX];
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:4248:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char ofname[PATH_MAX];
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:4249:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char fname[PATH_MAX];
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:4365:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(hdrbuffer,MFSSIGNATURE "C 1.0",8);
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:4369:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(hdrbuffer+c->hdrsize,oc->crc,CHUNKCRCSIZE);
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:4391:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
				memcpy(c->block,oc->block,MFSBLOCKSIZE);
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:4484:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy(hdrbuffer+c->hdrsize+4*(oc->blocks),emptychunkcrc,4*(MFSBLOCKSINCHUNK-oc->blocks));
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:4493:6:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
					memcpy(c->block,oc->block,MFSBLOCKSIZE);
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:4587:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
				memcpy(hdrbuffer+c->hdrsize+4*blocks,emptychunkcrc,4*(MFSBLOCKSINCHUNK-blocks));
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:4594:6:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
					memcpy(c->block,oc->block,MFSBLOCKSIZE);
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:4674:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
				memcpy(c->block,oc->block,blocksize);
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:4779:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
				memcpy(hdrbuffer+c->hdrsize+4*blocks,emptychunkcrc,4*(MFSBLOCKSINCHUNK-blocks));
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:4784:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(c->crc,hdrbuffer+c->hdrsize,CHUNKCRCSIZE);
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:4830:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char fname[PATH_MAX];
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:4981:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char fname[PATH_MAX];
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:5044:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(tmp_filename,fdst->path,leng);
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:5049:11:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
	new_fd = open(tmp_filename,O_RDWR | O_CREAT | O_EXCL,0666);
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:5060:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(hdrbuffer,MFSSIGNATURE "C 1.0",8);
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:5064:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(hdrbuffer+new_hdrsize,c->crc,CHUNKCRCSIZE);
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:5066:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(hdrbuffer+new_hdrsize+4*c->blocks,emptychunkcrc,4*(MFSBLOCKSINCHUNK-c->blocks));
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:5747:7:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
	fd = fopen("looplog.txt","a");
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:6092:35:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
void hdd_create_filename_for_path(char fname[PATH_MAX],const char *fpath,uint16_t pathid,uint64_t chunkid,uint32_t version) {
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:6106:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char fname[PATH_MAX];
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:6234:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(fullname+plen,".chunkdb",8);
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:6237:7:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
	fd = open(fullname,O_RDONLY);
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:6370:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(fullname,f->path,plen);
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:6410:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy(oldfullname,f->path,oldplen);
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:6430:6:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
					memcpy(oldfullname+oldplen,de->d_name,36);
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:6431:6:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
					memcpy(fullname+plen,de->d_name,36);
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:6530:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(metaidfname,f->path,l);
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:6531:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(metaidfname+l,".metaid",8);
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:6532:9:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
		mfd = open(metaidfname,O_RDWR|O_CREAT|O_TRUNC,0640);
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:6931:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(cl->path,pptr,l);
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:6947:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(metaidfname,pptr,l);
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:6948:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(metaidfname+l,".metaid",8);
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:6949:8:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
	mfd = open(metaidfname,O_RDONLY);
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:6973:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(lockfname,pptr,l);
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:6974:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(lockfname+l,".lock",6);
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:6975:8:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
	lfd = open(lockfname,O_RDWR|O_CREAT|O_TRUNC,0640);
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:6977:9:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
		lfd = open(lockfname,O_RDONLY); // prevents umounting
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:7023:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(metaidfname,pptr,l);
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:7024:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(metaidfname+l,".metaid",8);
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:7025:9:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
		mfd = open(metaidfname,O_RDWR|O_CREAT|O_TRUNC,0640);
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:7190:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char buff[1000];
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:7197:8:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
		fd = fopen(hddfname,"r");
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:7201:9:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
			fd = fopen(hddfname,"r");
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:7208:8:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
		fd = fopen(hddfname,"r");
data/moosefs-3.0.115/mfschunkserver/mainserv.c:607:6:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
					memcpy(wrjob->data,hdr,8);
data/moosefs-3.0.115/mfschunkserver/mainserv.c:1159:6:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
					memcpy(wptr,data,length-13-6);
data/moosefs-3.0.115/mfschunkserver/mainserv.c:1161:6:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
					memcpy(wptr,data,length-12-6);
data/moosefs-3.0.115/mfschunkserver/masterconn.c:182:7:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
	fd = open("chunkserverid.mfs",O_RDWR);
data/moosefs-3.0.115/mfschunkserver/masterconn.c:227:8:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
		fd = open("chunkserverid.mfs",O_CREAT | O_TRUNC | O_RDWR,0666);
data/moosefs-3.0.115/mfschunkserver/masterconn.c:621:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(eptr->rndblob,data,32);
data/moosefs-3.0.115/mfschunkserver/masterconn.c:1097:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
				memcpy(ptr,ij->buff,2);
data/moosefs-3.0.115/mfschunkserver/masterconn.c:1112:6:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
					memcpy(ptr,ij->buff,4);
data/moosefs-3.0.115/mfschunkserver/masterconn.c:1126:6:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
					memcpy(ptr,ij->buff,4*MFSBLOCKSINCHUNK);
data/moosefs-3.0.115/mfschunkserver/masterconn.c:1425:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy(eptr->input_startptr,readbuff+rbpos,eptr->input_bytesleft);
data/moosefs-3.0.115/mfschunkserver/masterconn.c:1428:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy(eptr->input_startptr,readbuff+rbpos,rbleng-rbpos);
data/moosefs-3.0.115/mfschunkserver/mfschunktool.c:103:8:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
		fd = open(fname,O_RDWR);
data/moosefs-3.0.115/mfschunkserver/mfschunktool.c:105:8:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
		fd = open(fname,O_RDONLY);
data/moosefs-3.0.115/mfschunkserver/mfschunktool.c:135:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
				memcpy(newname,fname,j);
data/moosefs-3.0.115/mfschunkserver/mfschunktool.c:158:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy(buff,MFSSIGNATURE "C 1.0",8);
data/moosefs-3.0.115/mfschunkserver/replicator.c:752:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
								memcpy(r.xorbuff+4+codeindex*MFSBLOCKSIZE/4,rptr+4+j*MFSBLOCKSIZE/4,MFSBLOCKSIZE/4);
data/moosefs-3.0.115/mfsclient/chunksdatacache.c:268:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy(ca->csdata,csdata,csdatasize);
data/moosefs-3.0.115/mfsclient/chunksdatacache.c:276:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy(ca->csdata,csdata,csdatasize);
data/moosefs-3.0.115/mfsclient/chunksdatacache.c:301:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy(csdata,ca->csdata,ca->csdatasize);
data/moosefs-3.0.115/mfsclient/dentry_invalidator.c:164:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(dielem->name,name,nleng);
data/moosefs-3.0.115/mfsclient/dirattrcache.c:224:6:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
					memcpy(attr,ptr,ATTR_RECORD_SIZE);
data/moosefs-3.0.115/mfsclient/dirattrcache.c:226:6:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
					memcpy(attr,ptr,d->attrsize);
data/moosefs-3.0.115/mfsclient/dirattrcache.c:253:6:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
					memcpy(attr,ptr,ATTR_RECORD_SIZE);
data/moosefs-3.0.115/mfsclient/dirattrcache.c:255:6:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
					memcpy(attr,ptr,d->attrsize);
data/moosefs-3.0.115/mfsclient/dirattrcache.c:281:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
				memcpy((uint8_t*)ptr,attr,d->attrsize);
data/moosefs-3.0.115/mfsclient/dirattrcache.c:283:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
				memcpy((uint8_t*)ptr,attr,ATTR_RECORD_SIZE);
data/moosefs-3.0.115/mfsclient/fdcache.c:108:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(fdce->attr,attr,35);
data/moosefs-3.0.115/mfsclient/fdcache.c:115:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(fdce->csdata,csdata,csdatasize);
data/moosefs-3.0.115/mfsclient/fdcache.c:154:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
				memcpy(attr,fdce->attr,35);
data/moosefs-3.0.115/mfsclient/fdcache.c:179:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
				memcpy(attr,fdce->attr,35);
data/moosefs-3.0.115/mfsclient/getgroups.c:62:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char proc_filename[50];
data/moosefs-3.0.115/mfsclient/getgroups.c:63:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char linebuff[4096];
data/moosefs-3.0.115/mfsclient/getgroups.c:71:7:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
	fd = fopen(proc_filename,"r");
data/moosefs-3.0.115/mfsclient/getgroups.c:122:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char proc_filename[50];
data/moosefs-3.0.115/mfsclient/getgroups.c:129:7:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
	fd = fopen(proc_filename,"rb");
data/moosefs-3.0.115/mfsclient/labelparser.c:33:23:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
char* make_label_expr(char *strbuff,uint8_t labelscnt,uint32_t labelmasks[9][MASKORGROUP]) {
data/moosefs-3.0.115/mfsclient/labelparser.c:370:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(t->labelmasks,t1->labelmasks,sizeof(uint32_t)*t1->cnt);
data/moosefs-3.0.115/mfsclient/labelparser.c:371:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(t->labelmasks+t1->cnt,t2->labelmasks,sizeof(uint32_t)*t2->cnt);
data/moosefs-3.0.115/mfsclient/labelparser.c:402:22:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
int parse_label_expr(char *exprstr,uint8_t *labelscnt,uint32_t labelmasks[9][MASKORGROUP]) {
data/moosefs-3.0.115/mfsclient/labelparser.h:38:23:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
char* make_label_expr(char *strbuff,uint8_t labelscnt,uint32_t labelmasks[9][MASKORGROUP]);
data/moosefs-3.0.115/mfsclient/labelparser.h:39:22:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
int parse_label_expr(char *exprstr,uint8_t *labelscnt,uint32_t labelmasks[9][MASKORGROUP]);
data/moosefs-3.0.115/mfsclient/mastercomm.c:184:8:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
static char masterstrip[17];
data/moosefs-3.0.115/mfsclient/mastercomm.c:187:8:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
static char srcstrip[17];
data/moosefs-3.0.115/mfsclient/mastercomm.c:227:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(attr,rptr,ATTR_RECORD_SIZE);
data/moosefs-3.0.115/mfsclient/mastercomm.c:229:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(attr,rptr,asize);
data/moosefs-3.0.115/mfsclient/mastercomm.c:1336:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char pwdgrpbuff[16384];
data/moosefs-3.0.115/mfsclient/mastercomm.c:1418:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy(wptr,FUSE_REGISTER_BLOB_ACL,64);
data/moosefs-3.0.115/mfsclient/mastercomm.c:1488:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(wptr,FUSE_REGISTER_BLOB_ACL,64);
data/moosefs-3.0.115/mfsclient/mastercomm.c:1495:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(wptr,cargs->info,ileng);
data/moosefs-3.0.115/mfsclient/mastercomm.c:1499:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy(wptr,cargs->subfolder,pleng);
data/moosefs-3.0.115/mfsclient/mastercomm.c:1509:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy(wptr,digest,16);
data/moosefs-3.0.115/mfsclient/mastercomm.c:1619:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
				char newmasterstrip[17];
data/moosefs-3.0.115/mfsclient/mastercomm.c:1872:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(wptr,FUSE_REGISTER_BLOB_ACL,64);
data/moosefs-3.0.115/mfsclient/mastercomm.c:1977:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(wptr,FUSE_REGISTER_BLOB_ACL,64);
data/moosefs-3.0.115/mfsclient/mastercomm.c:2532:37:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
int fs_init_master_connection(const char *bindhostname,const char *masterhostname,const char *masterportname,uint8_t meta,const char *info,const char *subfolder,const uint8_t passworddigest[16],uint8_t donotrememberpassword,uint8_t bgregister) {
data/moosefs-3.0.115/mfsclient/mastercomm.c:2532:62:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
int fs_init_master_connection(const char *bindhostname,const char *masterhostname,const char *masterportname,uint8_t meta,const char *info,const char *subfolder,const uint8_t passworddigest[16],uint8_t donotrememberpassword,uint8_t bgregister) {
data/moosefs-3.0.115/mfsclient/mastercomm.c:2532:89:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
int fs_init_master_connection(const char *bindhostname,const char *masterhostname,const char *masterportname,uint8_t meta,const char *info,const char *subfolder,const uint8_t passworddigest[16],uint8_t donotrememberpassword,uint8_t bgregister) {
data/moosefs-3.0.115/mfsclient/mastercomm.c:2532:129:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
int fs_init_master_connection(const char *bindhostname,const char *masterhostname,const char *masterportname,uint8_t meta,const char *info,const char *subfolder,const uint8_t passworddigest[16],uint8_t donotrememberpassword,uint8_t bgregister) {
data/moosefs-3.0.115/mfsclient/mastercomm.c:2532:146:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
int fs_init_master_connection(const char *bindhostname,const char *masterhostname,const char *masterportname,uint8_t meta,const char *info,const char *subfolder,const uint8_t passworddigest[16],uint8_t donotrememberpassword,uint8_t bgregister) {
data/moosefs-3.0.115/mfsclient/mastercomm.c:2562:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(connect_args.passworddigest,passworddigest,16);
data/moosefs-3.0.115/mfsclient/mastercomm.c:2699:26:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
uint8_t fs_get_cfg(const char *opt_name,char opt_value[256]) {
data/moosefs-3.0.115/mfsclient/mastercomm.c:2699:41:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
uint8_t fs_get_cfg(const char *opt_name,char opt_value[256]) {
data/moosefs-3.0.115/mfsclient/mastercomm.c:2715:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(wptr,opt_name,nleng);
data/moosefs-3.0.115/mfsclient/mastercomm.c:2728:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(opt_value,rptr,nleng);
data/moosefs-3.0.115/mfsclient/mastercomm.c:2833:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(wptr,name,nleng);
data/moosefs-3.0.115/mfsclient/mastercomm.c:2889:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(wptr,name,nleng);
data/moosefs-3.0.115/mfsclient/mastercomm.c:3195:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(wptr,name,nleng);
data/moosefs-3.0.115/mfsclient/mastercomm.c:3198:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(wptr,path,pleng);
data/moosefs-3.0.115/mfsclient/mastercomm.c:3279:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(wptr,name,nleng);
data/moosefs-3.0.115/mfsclient/mastercomm.c:3349:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(wptr,name,nleng);
data/moosefs-3.0.115/mfsclient/mastercomm.c:3410:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(wptr,name,nleng);
data/moosefs-3.0.115/mfsclient/mastercomm.c:3464:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(wptr,name,nleng);
data/moosefs-3.0.115/mfsclient/mastercomm.c:3520:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(wptr,name_src,nleng_src);
data/moosefs-3.0.115/mfsclient/mastercomm.c:3524:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(wptr,name_dst,nleng_dst);
data/moosefs-3.0.115/mfsclient/mastercomm.c:3583:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(wptr,name_dst,nleng_dst);
data/moosefs-3.0.115/mfsclient/mastercomm.c:3735:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(wptr,name,nleng);
data/moosefs-3.0.115/mfsclient/mastercomm.c:4274:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(wptr,path,pleng);
data/moosefs-3.0.115/mfsclient/mastercomm.c:4417:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(wptr,namedacls,namedaclssize);
data/moosefs-3.0.115/mfsclient/mastercomm.c:4463:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(wptr,name,nleng);
data/moosefs-3.0.115/mfsclient/mastercomm.c:4598:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(wptr,name,nleng);
data/moosefs-3.0.115/mfsclient/mastercomm.c:4601:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(wptr,value,vleng);
data/moosefs-3.0.115/mfsclient/mastercomm.c:4659:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(wptr,name,nleng);
data/moosefs-3.0.115/mfsclient/mastercomm.c:4697:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(wptr,query,queryleng);
data/moosefs-3.0.115/mfsclient/mastercomm.c:4706:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy(answer,rptr,i);
data/moosefs-3.0.115/mfsclient/mastercomm.h:56:26:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
uint8_t fs_get_cfg(const char *opt_name,char opt_value[256]);
data/moosefs-3.0.115/mfsclient/mastercomm.h:56:41:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
uint8_t fs_get_cfg(const char *opt_name,char opt_value[256]);
data/moosefs-3.0.115/mfsclient/mastercomm.h:116:37:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
int fs_init_master_connection(const char *bindhostname,const char *masterhostname,const char *masterportname,uint8_t meta,const char *info,const char *subfolder,const uint8_t passworddigest[16],uint8_t donotrememberpassword,uint8_t bgregister);
data/moosefs-3.0.115/mfsclient/mastercomm.h:116:62:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
int fs_init_master_connection(const char *bindhostname,const char *masterhostname,const char *masterportname,uint8_t meta,const char *info,const char *subfolder,const uint8_t passworddigest[16],uint8_t donotrememberpassword,uint8_t bgregister);
data/moosefs-3.0.115/mfsclient/mastercomm.h:116:89:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
int fs_init_master_connection(const char *bindhostname,const char *masterhostname,const char *masterportname,uint8_t meta,const char *info,const char *subfolder,const uint8_t passworddigest[16],uint8_t donotrememberpassword,uint8_t bgregister);
data/moosefs-3.0.115/mfsclient/mastercomm.h:116:129:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
int fs_init_master_connection(const char *bindhostname,const char *masterhostname,const char *masterportname,uint8_t meta,const char *info,const char *subfolder,const uint8_t passworddigest[16],uint8_t donotrememberpassword,uint8_t bgregister);
data/moosefs-3.0.115/mfsclient/mastercomm.h:116:146:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
int fs_init_master_connection(const char *bindhostname,const char *masterhostname,const char *masterportname,uint8_t meta,const char *info,const char *subfolder,const uint8_t passworddigest[16],uint8_t donotrememberpassword,uint8_t bgregister);
data/moosefs-3.0.115/mfsclient/mfs_fuse.c:906:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char errorbuff[500];
data/moosefs-3.0.115/mfsclient/mfs_fuse.c:1171:36:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
static inline void mfs_makemodestr(char modestr[11],uint16_t mode) {
data/moosefs-3.0.115/mfsclient/mfs_fuse.c:1173:2:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
	strcpy(modestr,"?rwxrwxrwx");
data/moosefs-3.0.115/mfsclient/mfs_fuse.c:1218:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char modestr[11];
data/moosefs-3.0.115/mfsclient/mfs_fuse.c:1503:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char attrstr[256];
data/moosefs-3.0.115/mfsclient/mfs_fuse.c:1815:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char attrstr[256];
data/moosefs-3.0.115/mfsclient/mfs_fuse.c:1969:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char modestr[11];
data/moosefs-3.0.115/mfsclient/mfs_fuse.c:2011:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char setattr_str[150];
data/moosefs-3.0.115/mfsclient/mfs_fuse.c:2012:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char attrstr[256];
data/moosefs-3.0.115/mfsclient/mfs_fuse.c:2316:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char modestr[11];
data/moosefs-3.0.115/mfsclient/mfs_fuse.c:2317:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char attrstr[256];
data/moosefs-3.0.115/mfsclient/mfs_fuse.c:2331:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char umaskstr[11];
data/moosefs-3.0.115/mfsclient/mfs_fuse.c:2463:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char modestr[11];
data/moosefs-3.0.115/mfsclient/mfs_fuse.c:2464:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char attrstr[256];
data/moosefs-3.0.115/mfsclient/mfs_fuse.c:2477:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char umaskstr[11];
data/moosefs-3.0.115/mfsclient/mfs_fuse.c:2603:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char attrstr[256];
data/moosefs-3.0.115/mfsclient/mfs_fuse.c:2791:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char attrstr[256];
data/moosefs-3.0.115/mfsclient/mfs_fuse.c:2944:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char buffer[READDIR_BUFFSIZE];
data/moosefs-3.0.115/mfsclient/mfs_fuse.c:2945:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char name[MFS_NAME_MAX+1];
data/moosefs-3.0.115/mfsclient/mfs_fuse.c:3075:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy((uint8_t*)(dirinfo->p),dbuff,dsize);
data/moosefs-3.0.115/mfsclient/mfs_fuse.c:3103:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy(name,ptr,nleng);
data/moosefs-3.0.115/mfsclient/mfs_fuse.c:3135:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char buffer[READDIR_BUFFSIZE];
data/moosefs-3.0.115/mfsclient/mfs_fuse.c:3136:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char name[MFS_NAME_MAX+1];
data/moosefs-3.0.115/mfsclient/mfs_fuse.c:3220:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy((uint8_t*)(dirinfo->p),dbuff,dsize);
data/moosefs-3.0.115/mfsclient/mfs_fuse.c:3250:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy(name,ptr,nleng);
data/moosefs-3.0.115/mfsclient/mfs_fuse.c:3502:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char modestr[11];
data/moosefs-3.0.115/mfsclient/mfs_fuse.c:3503:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char attrstr[256];
data/moosefs-3.0.115/mfsclient/mfs_fuse.c:3512:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char flagsstr[512];
data/moosefs-3.0.115/mfsclient/mfs_fuse.c:3520:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char umaskstr[11];
data/moosefs-3.0.115/mfsclient/mfs_fuse.c:3673:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char flagsstr[512];
data/moosefs-3.0.115/mfsclient/mfs_fuse.c:4233:10:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		static char mooseascii[175] = {
data/moosefs-3.0.115/mfsclient/mfs_meta_fuse.c:676:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(buff,META_TRASH_NAME,l);
data/moosefs-3.0.115/mfsclient/mfs_meta_fuse.c:683:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(buff,META_SUSTAINED_NAME,l);
data/moosefs-3.0.115/mfsclient/mfs_meta_fuse.c:703:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(buff,META_UNDEL_NAME,l);
data/moosefs-3.0.115/mfsclient/mfs_meta_fuse.c:766:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy(buff,META_UNDEL_NAME,l);
data/moosefs-3.0.115/mfsclient/mfs_meta_fuse.c:816:4:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
			sprintf((char*)buff,"%08"PRIX32"|",inode);
data/moosefs-3.0.115/mfsclient/mfs_meta_fuse.c:818:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
				memcpy(buff+9,name,255-9);
data/moosefs-3.0.115/mfsclient/mfs_meta_fuse.c:821:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
				memcpy(buff+9,name,nleng);
data/moosefs-3.0.115/mfsclient/mfs_meta_fuse.c:903:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char buffer[READDIR_BUFFSIZE];
data/moosefs-3.0.115/mfsclient/mfs_meta_fuse.c:1021:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy(pathinfo->p,path,pathinfo->size-1);
data/moosefs-3.0.115/mfsclient/mfs_meta_fuse.c:1159:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy((pathinfo->p)+off,buf,size);
data/moosefs-3.0.115/mfsclient/mfsio.c:379:37:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
static int mfs_path_to_inodes(const char *path,uint32_t *parent,uint32_t *inode,uint8_t name[256],uint8_t *nleng,uint8_t existflag,uint8_t attr[ATTR_RECORD_SIZE]) {
data/moosefs-3.0.115/mfsclient/mfsio.c:847:22:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
int mfs_utimes(const char *path, const struct timeval times[2]) {
data/moosefs-3.0.115/mfsclient/mfsio.c:1226:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy((uint8_t*)buf+pos,iov[i].iov_base,iov[i].iov_len);
data/moosefs-3.0.115/mfsclient/mfsio.h:56:22:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
int mfs_utimes(const char *path, const struct timeval times[2]);
data/moosefs-3.0.115/mfsclient/mfsmount.c:486:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char lbuff[1000],*p;
data/moosefs-3.0.115/mfsclient/mfsmount.c:488:7:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
	fd = fopen(filename,"r");
data/moosefs-3.0.115/mfsclient/mfsmount.c:1171:8:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
		fd = fopen("/proc/self/oom_score_adj","w");
data/moosefs-3.0.115/mfsclient/mfsmount.c:1178:9:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
			fd = fopen("/proc/self/oom_adj","w");
data/moosefs-3.0.115/mfsclient/mfsmount.c:1187:8:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
		fd = fopen("/proc/self/oom_adj","w");
data/moosefs-3.0.115/mfsclient/mfsmount.c:1318:12:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
		if ((i = open("/dev/null", O_RDWR, 0)) != -1) {
data/moosefs-3.0.115/mfsclient/mfsmount.c:1334:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char pname[256];
data/moosefs-3.0.115/mfsclient/mfsmount.c:1468:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char fsnamearg[256];
data/moosefs-3.0.115/mfsclient/mfsmount.c:1550:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char passwordbuff[1024];
data/moosefs-3.0.115/mfsclient/mfsmount.c:1554:7:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
	fd = fopen(filename,"r");
data/moosefs-3.0.115/mfsclient/mfsmount.c:1581:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(ret,passwordbuff,i);
data/moosefs-3.0.115/mfsclient/mfsmount.c:1782:7:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
						memcpy(mfsopts.masterhost,args.argv[optpos],hostlen);
data/moosefs-3.0.115/mfsclient/mfsmount.c:1786:8:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
							memcpy(mfsopts.masterport,portbegin,portlen);
data/moosefs-3.0.115/mfsclient/mfsmount.c:1810:16:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
		if ((cfgfd = open(cfgfile,O_RDONLY))<0 && errno==ENOENT) {
data/moosefs-3.0.115/mfsclient/mfsmount.c:1813:17:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
			if ((cfgfd = open(cfgfile,O_RDONLY))>=0) {
data/moosefs-3.0.115/mfsclient/mfstools.c:87:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char numbuf[6];	// [ "xxx" , "xx" , "x" , "x.x" ] + ["" , "X" , "Xi"]
data/moosefs-3.0.115/mfsclient/mfstools.c:595:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char cwdbuff[MAXPATHLEN];
data/moosefs-3.0.115/mfsclient/mfstools.c:714:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char labelsbuff[LABELS_BUFF_SIZE];
data/moosefs-3.0.115/mfsclient/mfstools.c:741:22:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
int get_sclass(const char *fname,uint8_t *goal,char storage_class_name[256],uint8_t mode) {
data/moosefs-3.0.115/mfsclient/mfstools.c:741:48:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
int get_sclass(const char *fname,uint8_t *goal,char storage_class_name[256],uint8_t mode) {
data/moosefs-3.0.115/mfsclient/mfstools.c:1008:22:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
int set_sclass(const char *fname,uint8_t goal,const char src_storage_class_name[256],const char storage_class_name[256],uint8_t mode) {
data/moosefs-3.0.115/mfsclient/mfstools.c:1008:53:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
int set_sclass(const char *fname,uint8_t goal,const char src_storage_class_name[256],const char storage_class_name[256],uint8_t mode) {
data/moosefs-3.0.115/mfsclient/mfstools.c:1008:92:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
int set_sclass(const char *fname,uint8_t goal,const char src_storage_class_name[256],const char storage_class_name[256],uint8_t mode) {
data/moosefs-3.0.115/mfsclient/mfstools.c:1262:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char cwdbuff[MAXPATHLEN];
data/moosefs-3.0.115/mfsclient/mfstools.c:1303:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char cwdbuff[MAXPATHLEN];
data/moosefs-3.0.115/mfsclient/mfstools.c:1364:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char cwdbuff[MAXPATHLEN];
data/moosefs-3.0.115/mfsclient/mfstools.c:1403:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char cwdbuff[MAXPATHLEN];
data/moosefs-3.0.115/mfsclient/mfstools.c:1449:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char cwdbuff[MAXPATHLEN];
data/moosefs-3.0.115/mfsclient/mfstools.c:1494:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char scname[256];
data/moosefs-3.0.115/mfsclient/mfstools.c:1496:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char cwdbuff[MAXPATHLEN];
data/moosefs-3.0.115/mfsclient/mfstools.c:1557:30:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
int get_checksum_block(const char *csstrip,uint32_t csip,uint16_t csport,uint64_t chunkid,uint32_t version,uint8_t crcblock[4096],uint16_t *blocks) {
data/moosefs-3.0.115/mfsclient/mfstools.c:1632:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(crcblock,rptr,4096);
data/moosefs-3.0.115/mfsclient/mfstools.c:1696:20:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
void digest_to_str(char strdigest[33],uint8_t digest[16]) {
data/moosefs-3.0.115/mfsclient/mfstools.c:1710:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char csstrip[16];
data/moosefs-3.0.115/mfsclient/mfstools.c:1721:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char strdigest[33];
data/moosefs-3.0.115/mfsclient/mfstools.c:1939:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
								memcpy(chunkdigest,currentdigest,16);
data/moosefs-3.0.115/mfsclient/mfstools.c:2683:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char dstpath[PATH_MAX+1],base[PATH_MAX+1],dir[PATH_MAX+1];
data/moosefs-3.0.115/mfsclient/mfstools.c:2688:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(dir,dstpath,PATH_MAX+1);
data/moosefs-3.0.115/mfsclient/mfstools.c:2698:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char to[PATH_MAX+1],base[PATH_MAX+1],dir[PATH_MAX+1];
data/moosefs-3.0.115/mfsclient/mfstools.c:2699:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char src[PATH_MAX+1];
data/moosefs-3.0.115/mfsclient/mfstools.c:2760:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy(dir,to,PATH_MAX+1);
data/moosefs-3.0.115/mfsclient/mfstools.c:2823:7:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
						memcpy(dir,to,PATH_MAX+1);
data/moosefs-3.0.115/mfsclient/mfstools.c:3146:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char storage_class_name[256];
data/moosefs-3.0.115/mfsclient/mfstools.c:3147:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char src_storage_class_name[256];
data/moosefs-3.0.115/mfsclient/mfstools.c:3551:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
				memcpy(src_storage_class_name,p,scnleng);
data/moosefs-3.0.115/mfsclient/mfstools.c:3563:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy(storage_class_name,p,scnleng);
data/moosefs-3.0.115/mfsclient/mfstools.c:4256:7:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
		i = open(appendfname,O_RDWR | O_CREAT,0666);
data/moosefs-3.0.115/mfsclient/mfstools_master.c:107:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(wptr,FUSE_REGISTER_BLOB_ACL,64);
data/moosefs-3.0.115/mfsclient/mfstools_master.c:192:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char rpath[PATH_MAX+1];
data/moosefs-3.0.115/mfsclient/mfstools_master.c:248:4:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
			strcpy(rpath+rpathlen,"/.masterinfo");
data/moosefs-3.0.115/mfsclient/mfstools_master.c:258:11:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
					sd = open(rpath,O_RDONLY);
data/moosefs-3.0.115/mfsclient/mfstools_master.c:400:41:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
void master_putname(uint8_t nleng,const char name[256]) {
data/moosefs-3.0.115/mfsclient/mfstools_master.c:403:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(mc->wptr,name,nleng);
data/moosefs-3.0.115/mfsclient/mfstools_master.c:542:21:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
void master_getname(char name[256]) {
data/moosefs-3.0.115/mfsclient/mfstools_master.c:547:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(name,mc->rptr,nleng);
data/moosefs-3.0.115/mfsclient/mfstools_master.h:38:41:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
void master_putname(uint8_t nleng,const char name[256]);
data/moosefs-3.0.115/mfsclient/mfstools_master.h:45:21:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
void master_getname(char name[256]);
data/moosefs-3.0.115/mfsclient/nbdmain.c:347:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(r->handle,handleptr,8);
data/moosefs-3.0.115/mfsclient/nbdmain.c:383:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(wptr,r->handle,8);
data/moosefs-3.0.115/mfsclient/nbdmain.c:495:6:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
	f = open("/dev/null", O_RDWR, 0);
data/moosefs-3.0.115/mfsclient/nbdmain.c:524:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(ln,NBD_LINK_PREFIX,NBD_LINK_PREFIX_LENG);
data/moosefs-3.0.115/mfsclient/nbdmain.c:538:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(ln,NBD_LINK_PREFIX,NBD_LINK_PREFIX_LENG);
data/moosefs-3.0.115/mfsclient/nbdmain.c:561:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char devicename[50];
data/moosefs-3.0.115/mfsclient/nbdmain.c:569:11:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
		nbdfd = open(devicename,O_RDWR);
data/moosefs-3.0.115/mfsclient/nbdmain.c:592:7:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
	fd = open(nbdcp->linkname,O_RDWR);
data/moosefs-3.0.115/mfsclient/nbdmain.c:610:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(r,pstr,pleng);
data/moosefs-3.0.115/mfsclient/nbdmain.c:615:32:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
int nbd_start(nbdcommon *nbdcp,char errmsg[NBD_ERR_SIZE]) {
data/moosefs-3.0.115/mfsclient/nbdmain.c:643:17:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
	nbdcp->nbdfd = open(nbdcp->nbddevice,O_RDWR);
data/moosefs-3.0.115/mfsclient/nbdmain.c:755:10:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
			err = open(nbdcp->nbddevice,O_RDONLY);
data/moosefs-3.0.115/mfsclient/nbdmain.c:1093:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(wptr,bdl->nbdcp->mfsfile,pleng);
data/moosefs-3.0.115/mfsclient/nbdmain.c:1096:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(wptr,bdl->nbdcp->nbddevice,dleng);
data/moosefs-3.0.115/mfsclient/nbdmain.c:1099:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(wptr,bdl->nbdcp->linkname+NBD_LINK_PREFIX_LENG,nleng);
data/moosefs-3.0.115/mfsclient/nbdmain.c:1272:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char passwordbuff[1024];
data/moosefs-3.0.115/mfsclient/nbdmain.c:1276:7:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
	fd = fopen(filename,"r");
data/moosefs-3.0.115/mfsclient/nbdmain.c:1303:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(ret,passwordbuff,i);
data/moosefs-3.0.115/mfsclient/nbdmain.c:1474:7:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
		f = open("/dev/null", O_RDWR, 0);
data/moosefs-3.0.115/mfsclient/nbdmain.c:1483:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char pname[256];
data/moosefs-3.0.115/mfsclient/nbdmain.c:1753:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(wptr,filename,pleng);
data/moosefs-3.0.115/mfsclient/nbdmain.c:1757:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(wptr,device,dleng);
data/moosefs-3.0.115/mfsclient/nbdmain.c:1762:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(wptr,linkname,nleng);
data/moosefs-3.0.115/mfsclient/nbdmain.c:1956:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(wptr,filename,pleng);
data/moosefs-3.0.115/mfsclient/nbdmain.c:1961:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(wptr,device,dleng);
data/moosefs-3.0.115/mfsclient/nbdmain.c:1966:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(wptr,linkname,nleng);
data/moosefs-3.0.115/mfsclient/nbdmain.c:2163:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(wptr,filename,pleng);
data/moosefs-3.0.115/mfsclient/nbdmain.c:2168:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(wptr,device,dleng);
data/moosefs-3.0.115/mfsclient/nbdmain.c:2173:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(wptr,linkname,nleng);
data/moosefs-3.0.115/mfsclient/negentrycache.c:157:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(fhb->name[fi],name,nleng);
data/moosefs-3.0.115/mfsclient/oplog.c:72:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(opbuff+bpos,buff,OPBUFFSIZE-bpos);
data/moosefs-3.0.115/mfsclient/oplog.c:77:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(opbuff+bpos,buff,leng);
data/moosefs-3.0.115/mfsclient/oplog.c:87:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char buff[LINELENG];
data/moosefs-3.0.115/mfsclient/oplog.c:121:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char buff[LINELENG];
data/moosefs-3.0.115/mfsclient/readdata.c:515:37:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
static inline void read_prepare_ip (char ipstr[16],uint32_t ip) {
data/moosefs-3.0.115/mfsclient/readdata.c:571:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char csstrip[16];
data/moosefs-3.0.115/mfsclient/stats.c:128:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(bstr,sn->fullname,sn->fnleng);
data/moosefs-3.0.115/mfsclient/stats.c:130:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(bstr+sn->fnleng+1,a->name,a->nleng);
data/moosefs-3.0.115/mfsclient/sustained_inodes.c:155:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char path[100];
data/moosefs-3.0.115/mfsclient/sustained_stats.c:135:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy(attr,isc->attr,35);
data/moosefs-3.0.115/mfsclient/sustained_stats.c:148:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(isc->attr,default_attr,35);
data/moosefs-3.0.115/mfsclient/sustained_stats.c:149:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(attr,default_attr,35);
data/moosefs-3.0.115/mfsclient/sustained_stats.c:170:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy(isc->attr,attr,35);
data/moosefs-3.0.115/mfsclient/sustained_stats.c:180:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(isc->attr,attr,35);
data/moosefs-3.0.115/mfsclient/writedata.c:579:38:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
static inline void write_prepare_ip (char ipstr[16],uint32_t ip) {
data/moosefs-3.0.115/mfsclient/writedata.c:615:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char debugchain[200];
data/moosefs-3.0.115/mfsclient/writedata.c:645:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char csstrip[16];
data/moosefs-3.0.115/mfsclient/writedata.c:1648:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(cb->data+from,data,to-from);
data/moosefs-3.0.115/mfsclient/writedata.c:1693:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(ncb->data+from,data,to-from);
data/moosefs-3.0.115/mfsclient/xattrcache.c:125:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy((uint8_t*)(xce->name),name,nleng);
data/moosefs-3.0.115/mfsclient/xattrcache.c:134:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy((uint8_t*)(xce->value->value),value,vleng);
data/moosefs-3.0.115/mfscommon/cfg.c:62:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char linebuff[1000];
data/moosefs-3.0.115/mfscommon/cfg.c:67:7:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
	fd = fopen(cfgfname,"r");
data/moosefs-3.0.115/mfscommon/cfg.c:120:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
				memcpy(tmp->value,linebuff+vps,vpe-vps+1);
data/moosefs-3.0.115/mfscommon/cfg.c:128:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy(tmp->name,linebuff+nps,npe-nps+1);
data/moosefs-3.0.115/mfscommon/cfg.c:129:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy(tmp->value,linebuff+vps,vpe-vps+1);
data/moosefs-3.0.115/mfscommon/charts.c:546:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char namehdr[100];
data/moosefs-3.0.115/mfscommon/charts.c:552:7:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
	fd = open(statsfilename,O_WRONLY | O_TRUNC | O_CREAT,0666);
data/moosefs-3.0.115/mfscommon/charts.c:591:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(namehdr,statdefs[i].name,(s>100)?100:s);
data/moosefs-3.0.115/mfscommon/charts.c:657:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char namehdr[101];
data/moosefs-3.0.115/mfscommon/charts.c:659:7:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
	fd = open(statsfilename,O_RDONLY);
data/moosefs-3.0.115/mfscommon/charts.c:2197:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(rp,cp,chartwidth);
data/moosefs-3.0.115/mfscommon/charts.c:2256:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(dst,src,65535);
data/moosefs-3.0.115/mfscommon/charts.c:2267:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(dst,src,srcsize);
data/moosefs-3.0.115/mfscommon/charts.c:2364:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(buff,png_1x1,sizeof(png_1x1));
data/moosefs-3.0.115/mfscommon/charts.c:2366:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(buff,png_header,sizeof(png_header));
data/moosefs-3.0.115/mfscommon/charts.c:2369:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(buff+sizeof(png_header),compbuff,compsize);
data/moosefs-3.0.115/mfscommon/charts.c:2370:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(buff+sizeof(png_header)+compsize,png_tailer,sizeof(png_tailer));
data/moosefs-3.0.115/mfscommon/datapack.h:50:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(*ptr,&val,8);
data/moosefs-3.0.115/mfscommon/datapack.h:69:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(*ptr,&val,4);
data/moosefs-3.0.115/mfscommon/datapack.h:84:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(*ptr,&val,2);
data/moosefs-3.0.115/mfscommon/datapack.h:100:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(&t64,*ptr,8);
data/moosefs-3.0.115/mfscommon/datapack.h:119:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(&t32,*ptr,4);
data/moosefs-3.0.115/mfscommon/datapack.h:136:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(&t16,*ptr,2);
data/moosefs-3.0.115/mfscommon/dictionary.c:96:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy((uint8_t*)(de->data),data,leng);
data/moosefs-3.0.115/mfscommon/main.c:922:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char pwdgrpbuff[16384];
data/moosefs-3.0.115/mfscommon/main.c:1030:8:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
	lfd = open("." STR(APPNAME) ".lock",O_WRONLY|O_CREAT,0666);
data/moosefs-3.0.115/mfscommon/main.c:1129:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char pidstr[20];
data/moosefs-3.0.115/mfscommon/main.c:1217:6:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
	f = open("/dev/null", O_RDWR, 0);
data/moosefs-3.0.115/mfscommon/main.c:1232:6:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
	f = open("/dev/null", O_RDWR, 0);
data/moosefs-3.0.115/mfscommon/main.c:1239:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char pathbuff[1024];
data/moosefs-3.0.115/mfscommon/main.c:1310:12:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
	if ((fd = open(cfgfile,O_RDONLY))<0 && errno==ENOENT) {
data/moosefs-3.0.115/mfscommon/main.c:1313:13:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
		if ((fd = open(ocfgfile,O_RDONLY))>=0) {
data/moosefs-3.0.115/mfscommon/main.c:1610:11:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
		oomfd = fopen("/proc/self/oom_score_adj","w");
data/moosefs-3.0.115/mfscommon/main.c:1617:12:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
			oomfd = fopen("/proc/self/oom_adj","w");
data/moosefs-3.0.115/mfscommon/main.c:1626:11:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
		oomfd = fopen("/proc/self/oom_adj","w");
data/moosefs-3.0.115/mfscommon/md5.c:199:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy((char*)(ctx->buffer+indx),(const char*)buff,partleng);
data/moosefs-3.0.115/mfscommon/md5.c:210:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy((char*)(ctx->buffer+indx),(const char*)(buff+i),leng-i);
data/moosefs-3.0.115/mfscommon/memusage.c:95:11:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
	int fd = open("/proc/self/statm",O_RDONLY);
data/moosefs-3.0.115/mfscommon/memusage.c:96:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char statbuff[1000],*p;
data/moosefs-3.0.115/mfscommon/processname.c:94:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy(argv_start,name,l);
data/moosefs-3.0.115/mfscommon/sockets.c:157:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(sa->sun_path,path,pl);
data/moosefs-3.0.115/mfscommon/sockets.c:540:2:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
	strcpy(afa.af_name, "dataready");
data/moosefs-3.0.115/mfscommon/sockets.c:585:2:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
	strcpy(afa.af_name, "httpready");
data/moosefs-3.0.115/mfscommon/sockets.c:599:2:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
	strcpy(afa.af_name, "dataready");
data/moosefs-3.0.115/mfscommon/statsdump.c:352:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy(ofname,fname,dotpos);
data/moosefs-3.0.115/mfscommon/statsdump.c:354:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy(ofname+dotpos+1,sname,snameleng);
data/moosefs-3.0.115/mfscommon/statsdump.c:355:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy(ofname+dotpos+snameleng+1,fname+dotpos,fnameleng-dotpos+1);
data/moosefs-3.0.115/mfscommon/statsdump.c:358:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy(ofname,fname,fnameleng);
data/moosefs-3.0.115/mfscommon/statsdump.c:360:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy(ofname+fnameleng+1,sname,snameleng);
data/moosefs-3.0.115/mfscommon/statsdump.c:361:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy(ofname+fnameleng+snameleng+1,".png",5);
data/moosefs-3.0.115/mfscommon/statsdump.c:363:8:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
		fd = open(ofname,O_WRONLY | O_CREAT | O_TRUNC,0666);
data/moosefs-3.0.115/mfsmaster/bgsaver.c:203:7:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
	lf = open(".bgwriter.lock",O_RDWR,0666);
data/moosefs-3.0.115/mfsmaster/bgsaver.c:273:11:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
					fd = open("metadata_download.tmp",O_WRONLY | O_TRUNC | O_CREAT,0666);
data/moosefs-3.0.115/mfsmaster/bgsaver.c:355:15:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
						logfd = open("changelog.0.mfs",O_WRONLY | O_CREAT | O_APPEND,0666);
data/moosefs-3.0.115/mfsmaster/bgsaver.c:394:6:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
					char logname1[100],logname2[100];
data/moosefs-3.0.115/mfsmaster/bgsaver.c:562:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(buff,data,leng);
data/moosefs-3.0.115/mfsmaster/bgsaver.c:620:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(buff,message,l+1); // copy message with ending zero
data/moosefs-3.0.115/mfsmaster/bgsaver.c:732:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy(eptr->input_startptr,readbuff+rbpos,eptr->input_bytesleft);
data/moosefs-3.0.115/mfsmaster/bgsaver.c:735:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy(eptr->input_startptr,readbuff+rbpos,rbleng-rbpos);
data/moosefs-3.0.115/mfsmaster/bgsaver.c:1057:7:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
	lf = open(".bgwriter.lock",O_RDWR|O_CREAT,0666);
data/moosefs-3.0.115/mfsmaster/bgsaver.c:1093:7:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
		f = open("/dev/null", O_RDWR, 0);
data/moosefs-3.0.115/mfsmaster/bio.c:59:8:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
		fd = open(fname,O_RDONLY);
data/moosefs-3.0.115/mfsmaster/bio.c:61:8:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
		fd = open(fname,O_WRONLY | O_CREAT | O_TRUNC,0666);
data/moosefs-3.0.115/mfsmaster/bio.c:216:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy(dst,b->buff+b->pos,b->leng-b->pos);
data/moosefs-3.0.115/mfsmaster/bio.c:240:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy(dst,b->buff+b->pos,b->leng-b->pos);
data/moosefs-3.0.115/mfsmaster/bio.c:247:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
				memcpy(dst+ret,b->buff,b->leng);
data/moosefs-3.0.115/mfsmaster/bio.c:251:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
				memcpy(dst+ret,b->buff,len-ret);
data/moosefs-3.0.115/mfsmaster/bio.c:257:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
				memcpy(dst,b->buff+b->pos,len);
data/moosefs-3.0.115/mfsmaster/bio.c:299:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy(b->buff+b->leng,src,b->size-b->leng);
data/moosefs-3.0.115/mfsmaster/bio.c:305:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy(b->buff,src+ret,len-ret);
data/moosefs-3.0.115/mfsmaster/bio.c:310:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
				memcpy(b->buff+b->leng,src,len);
data/moosefs-3.0.115/mfsmaster/changelog.c:126:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(oce->data,logstr,logstrsize);
data/moosefs-3.0.115/mfsmaster/changelog.c:169:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char logname1[100],logname2[100];
data/moosefs-3.0.115/mfsmaster/changelog.c:196:16:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
			currentfd = fopen("changelog.0.mfs","a");
data/moosefs-3.0.115/mfsmaster/changelog.c:213:9:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	static char printbuff[MAXLOGLINESIZE];
data/moosefs-3.0.115/mfsmaster/changelog.c:266:9:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	static char *escname[2]={NULL,NULL};
data/moosefs-3.0.115/mfsmaster/changelog.c:334:7:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
	fd = open(fname,O_RDONLY);
data/moosefs-3.0.115/mfsmaster/changelog.c:364:7:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
	fd = open(fname,O_RDONLY);
data/moosefs-3.0.115/mfsmaster/changelog.c:374:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy(buff+32768,buff,32);
data/moosefs-3.0.115/mfsmaster/chunks.c:341:9:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
			fd = fopen("mfsdebug.txt","a");
data/moosefs-3.0.115/mfsmaster/csdb.c:168:35:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
static inline void csdb_makestrip(char strip[16],uint32_t ip) {
data/moosefs-3.0.115/mfsmaster/csdb.c:176:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char strip[16];
data/moosefs-3.0.115/mfsmaster/csdb.c:177:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char strtmpip[16];
data/moosefs-3.0.115/mfsmaster/csdb.c:307:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char strip[16];
data/moosefs-3.0.115/mfsmaster/csdb.c:326:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char strip[16];
data/moosefs-3.0.115/mfsmaster/exports.c:87:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(ptr,e->passworddigest,16);
data/moosefs-3.0.115/mfsmaster/exports.c:192:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
				memcpy(buff,e->path,e->pleng);
data/moosefs-3.0.115/mfsmaster/exports.c:651:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char pwgrbuff[16384];
data/moosefs-3.0.115/mfsmaster/exports.c:1077:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(arec,*defaults,sizeof(exports));
data/moosefs-3.0.115/mfsmaster/exports.c:1115:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(*defaults,arec,sizeof(exports));
data/moosefs-3.0.115/mfsmaster/exports.c:1154:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy((uint8_t*)(arec->path),path,pleng);
data/moosefs-3.0.115/mfsmaster/exports.c:1179:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy((uint8_t*)(arec->path),path,pleng);
data/moosefs-3.0.115/mfsmaster/exports.c:1190:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char linebuff[10000];
data/moosefs-3.0.115/mfsmaster/exports.c:1194:7:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
	fd = fopen(ExportsFileName,"r");
data/moosefs-3.0.115/mfsmaster/exports.c:1264:13:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
		if ((fd = open(ExportsFileName,O_RDONLY))<0 && errno==ENOENT) {
data/moosefs-3.0.115/mfsmaster/exports.c:1267:14:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
			if ((fd = open(ExportsFileName,O_RDONLY))>=0) {
data/moosefs-3.0.115/mfsmaster/filesystem.c:731:6:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
					memcpy(newchunktab,oldchunktab,sizeof(uint64_t)*oldchunks);
data/moosefs-3.0.115/mfsmaster/filesystem.c:733:6:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
					memcpy(newchunktab,oldchunktab,sizeof(uint64_t)*newchunks);
data/moosefs-3.0.115/mfsmaster/filesystem.c:2060:6:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
					memcpy(b+psize,e->name,e->nleng);
data/moosefs-3.0.115/mfsmaster/filesystem.c:2069:8:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
							memcpy(b+psize,p->parents->name,p->parents->nleng);
data/moosefs-3.0.115/mfsmaster/filesystem.c:2316:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy((uint8_t*)(e->name),name,nleng);
data/moosefs-3.0.115/mfsmaster/filesystem.c:2495:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(path+size,e->name,e->nleng);
data/moosefs-3.0.115/mfsmaster/filesystem.c:2497:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(path,e->name+(e->nleng-size),size);
data/moosefs-3.0.115/mfsmaster/filesystem.c:2507:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy(path+size,p->parents->name,p->parents->nleng);
data/moosefs-3.0.115/mfsmaster/filesystem.c:2509:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy(path,p->parents->name+(p->parents->nleng-size),size);
data/moosefs-3.0.115/mfsmaster/filesystem.c:2538:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(ret+size,e->name,e->nleng);
data/moosefs-3.0.115/mfsmaster/filesystem.c:2546:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy(ret+size,p->parents->name,p->parents->nleng);
data/moosefs-3.0.115/mfsmaster/filesystem.c:2549:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
				memcpy(ret,p->parents->name+(p->parents->nleng-size),size);
data/moosefs-3.0.115/mfsmaster/filesystem.c:2571:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
				memcpy(dbuff,"(...)",5);
data/moosefs-3.0.115/mfsmaster/filesystem.c:2726:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
				memcpy(dbuff,e->name,e->nleng);
data/moosefs-3.0.115/mfsmaster/filesystem.c:3047:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
				memcpy((uint8_t*)(e->name),path,pleng);
data/moosefs-3.0.115/mfsmaster/filesystem.c:3072:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
				memcpy((uint8_t*)(e->name),path,pleng);
data/moosefs-3.0.115/mfsmaster/filesystem.c:3778:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
				memcpy(dstnode->data.sdata.path,srcnode->data.sdata.path,srcnode->data.sdata.pleng);
data/moosefs-3.0.115/mfsmaster/filesystem.c:3893:6:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
					memcpy(dstnode->data.sdata.path,srcnode->data.sdata.path,srcnode->data.sdata.pleng);
data/moosefs-3.0.115/mfsmaster/filesystem.c:4320:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy((uint8_t*)(e->name),path,pleng);
data/moosefs-3.0.115/mfsmaster/filesystem.c:4460:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy(buff,"./TRASH (",9);
data/moosefs-3.0.115/mfsmaster/filesystem.c:4461:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy(buff+9,p->parents->name,p->parents->nleng);
data/moosefs-3.0.115/mfsmaster/filesystem.c:4465:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy(buff,"./SUSTAINED (",13);
data/moosefs-3.0.115/mfsmaster/filesystem.c:4466:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy(buff+13,p->parents->name,p->parents->nleng);
data/moosefs-3.0.115/mfsmaster/filesystem.c:4473:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(buff,"(deleted)",9);
data/moosefs-3.0.115/mfsmaster/filesystem.c:5110:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(newpath,path,pleng);
data/moosefs-3.0.115/mfsmaster/filesystem.c:7269:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
				memcpy(buff,"(not directory)",15);
data/moosefs-3.0.115/mfsmaster/filesystem.c:7281:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy(buff,"(not found)",11);
data/moosefs-3.0.115/mfsmaster/filesystem.c:8001:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(ptr,e->name,e->nleng);
data/moosefs-3.0.115/mfsmaster/filesystem.c:8076:4:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
			char tmpname[20];
data/moosefs-3.0.115/mfsmaster/filesystem.c:8084:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy((uint8_t*)(e->name),tmpname,len);
data/moosefs-3.0.115/mfsmaster/filesystem.c:8589:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
				memcpy(p->data.sdata.path,"... path too long ...",p->data.sdata.pleng);
data/moosefs-3.0.115/mfsmaster/matoclserv.c:331:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
				memcpy(ptr,cs_data,count*14);
data/moosefs-3.0.115/mfsmaster/matoclserv.c:333:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
				memcpy(ptr,cs_data,count*10);
data/moosefs-3.0.115/mfsmaster/matoclserv.c:335:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
				memcpy(ptr,cs_data,count*6);
data/moosefs-3.0.115/mfsmaster/matoclserv.c:422:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy(ptr,cs_data,count*14);
data/moosefs-3.0.115/mfsmaster/matoclserv.c:424:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy(ptr,cs_data,count*10);
data/moosefs-3.0.115/mfsmaster/matoclserv.c:426:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy(ptr,cs_data,count*6);
data/moosefs-3.0.115/mfsmaster/matoclserv.c:498:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(lwc->gid,gid,sizeof(uint32_t)*gids);
data/moosefs-3.0.115/mfsmaster/matoclserv.c:531:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(ptr,attr,eptr->asize);
data/moosefs-3.0.115/mfsmaster/matoclserv.c:703:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
				memcpy(ptr,cs_data,count*14);
data/moosefs-3.0.115/mfsmaster/matoclserv.c:705:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
				memcpy(ptr,cs_data,count*10);
data/moosefs-3.0.115/mfsmaster/matoclserv.c:707:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
				memcpy(ptr,cs_data,count*6);
data/moosefs-3.0.115/mfsmaster/matoclserv.c:746:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(ptr,attr,eptr->asize);
data/moosefs-3.0.115/mfsmaster/matoclserv.c:931:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(ptr,vstring,strlen(vstring));
data/moosefs-3.0.115/mfsmaster/matoclserv.c:936:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char name[256];
data/moosefs-3.0.115/mfsmaster/matoclserv.c:954:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(name,data,nleng);
data/moosefs-3.0.115/mfsmaster/matoclserv.c:964:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(ptr,val,vleng);
data/moosefs-3.0.115/mfsmaster/matoclserv.c:1267:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(ptr,msgbuff,msgbuffleng);
data/moosefs-3.0.115/mfsmaster/matoclserv.c:1401:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy(wptr,eptr->passwordrnd,32);
data/moosefs-3.0.115/mfsmaster/matoclserv.c:1424:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy(eptr->info,rptr,ileng);
data/moosefs-3.0.115/mfsmaster/matoclserv.c:1439:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
				memcpy(eptr->path,rptr,pleng);
data/moosefs-3.0.115/mfsmaster/matoclserv.c:1465:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
				memcpy(eptr->passwordmd5,rptr,16);
data/moosefs-3.0.115/mfsmaster/matoclserv.c:1558:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy(eptr->info,rptr,ileng);
data/moosefs-3.0.115/mfsmaster/matoclserv.c:1579:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
				memcpy(eptr->passwordmd5,rptr,16);
data/moosefs-3.0.115/mfsmaster/matoclserv.c:2051:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
				memcpy(ptr,attr,eptr->asize);
data/moosefs-3.0.115/mfsmaster/matoclserv.c:2058:6:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
					memcpy(ptr,cs_data,count*14);
data/moosefs-3.0.115/mfsmaster/matoclserv.c:2064:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
				memcpy(ptr,attr,eptr->asize);
data/moosefs-3.0.115/mfsmaster/matoclserv.c:2078:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy(ptr,attr,eptr->asize);
data/moosefs-3.0.115/mfsmaster/matoclserv.c:2122:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(ptr,attr,eptr->asize);
data/moosefs-3.0.115/mfsmaster/matoclserv.c:2204:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(ptr,attr,eptr->asize);
data/moosefs-3.0.115/mfsmaster/matoclserv.c:2278:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy(ptr,path,pleng);
data/moosefs-3.0.115/mfsmaster/matoclserv.c:2354:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(ptr,attr,eptr->asize);
data/moosefs-3.0.115/mfsmaster/matoclserv.c:2428:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(ptr,attr,eptr->asize);
data/moosefs-3.0.115/mfsmaster/matoclserv.c:2503:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(ptr,attr,eptr->asize);
data/moosefs-3.0.115/mfsmaster/matoclserv.c:2695:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(ptr,attr,eptr->asize);
data/moosefs-3.0.115/mfsmaster/matoclserv.c:2760:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(ptr,attr,eptr->asize);
data/moosefs-3.0.115/mfsmaster/matoclserv.c:2923:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy(ptr,attr,eptr->asize);
data/moosefs-3.0.115/mfsmaster/matoclserv.c:2936:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy(ptr,attr,eptr->asize);
data/moosefs-3.0.115/mfsmaster/matoclserv.c:3053:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy(ptr,attr,eptr->asize);
data/moosefs-3.0.115/mfsmaster/matoclserv.c:3067:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy(ptr,attr,eptr->asize);
data/moosefs-3.0.115/mfsmaster/matoclserv.c:3425:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy(ptr,cs_data,count*7);
data/moosefs-3.0.115/mfsmaster/matoclserv.c:3598:6:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
					memcpy(ptr,sclass_get_name(i),nleng);
data/moosefs-3.0.115/mfsmaster/matoclserv.c:3613:6:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
					memcpy(ptr,sclass_get_name(i),nleng);
data/moosefs-3.0.115/mfsmaster/matoclserv.c:3952:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
				memcpy(ptr,attrvalue,avleng);
data/moosefs-3.0.115/mfsmaster/matoclserv.c:4828:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(ptr,attr,eptr->asize);
data/moosefs-3.0.115/mfsmaster/matoclserv.c:4854:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy(ptr,path,pleng);
data/moosefs-3.0.115/mfsmaster/matoclserv.c:5493:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy(eptr->input_startptr,readbuff+rbpos,eptr->input_bytesleft);
data/moosefs-3.0.115/mfsmaster/matoclserv.c:5496:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy(eptr->input_startptr,readbuff+rbpos,rbleng-rbpos);
data/moosefs-3.0.115/mfsmaster/matocsserv.c:1415:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char servbuff[1000];
data/moosefs-3.0.115/mfsmaster/matocsserv.c:1637:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(ptr,vstring,strlen(vstring));
data/moosefs-3.0.115/mfsmaster/matocsserv.c:1642:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char name[256];
data/moosefs-3.0.115/mfsmaster/matocsserv.c:1660:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(name,data,nleng);
data/moosefs-3.0.115/mfsmaster/matocsserv.c:1670:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(ptr,val,vleng);
data/moosefs-3.0.115/mfsmaster/matocsserv.c:1828:8:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
							memcpy(p,eptr->passwordrnd,32);
data/moosefs-3.0.115/mfsmaster/matocsserv.c:2338:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy(eptr->input_startptr,readbuff+rbpos,eptr->input_bytesleft);
data/moosefs-3.0.115/mfsmaster/matocsserv.c:2341:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy(eptr->input_startptr,readbuff+rbpos,rbleng-rbpos);
data/moosefs-3.0.115/mfsmaster/matomlserv.c:305:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(pdata,data,length);
data/moosefs-3.0.115/mfsmaster/matomlserv.c:376:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(ptr,vstring,strlen(vstring));
data/moosefs-3.0.115/mfsmaster/matomlserv.c:381:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char name[256];
data/moosefs-3.0.115/mfsmaster/matomlserv.c:399:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(name,data,nleng);
data/moosefs-3.0.115/mfsmaster/matomlserv.c:409:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(ptr,val,vleng);
data/moosefs-3.0.115/mfsmaster/matomlserv.c:505:26:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
		eptr->upload_meta_fd = open("metadata.mfs.back",O_RDONLY);
data/moosefs-3.0.115/mfsmaster/matomlserv.c:506:28:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
		eptr->upload_chain1_fd = open("changelog.0.mfs",O_RDONLY);
data/moosefs-3.0.115/mfsmaster/matomlserv.c:507:28:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
		eptr->upload_chain2_fd = open("changelog.1.mfs",O_RDONLY);
data/moosefs-3.0.115/mfsmaster/matomlserv.c:509:26:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
		eptr->upload_meta_fd = open("sessions.mfs",O_RDONLY);
data/moosefs-3.0.115/mfsmaster/matomlserv.c:602:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy(data,logstr,logstrsize);
data/moosefs-3.0.115/mfsmaster/matomlserv.c:722:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy(eptr->input_startptr,readbuff+rbpos,eptr->input_bytesleft);
data/moosefs-3.0.115/mfsmaster/matomlserv.c:725:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy(eptr->input_startptr,readbuff+rbpos,rbleng-rbpos);
data/moosefs-3.0.115/mfsmaster/merger.c:121:27:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
	if ((heap[heapsize].fd = fopen(filename,"r"))!=NULL) {
data/moosefs-3.0.115/mfsmaster/metadata.c:100:62:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
int meta_store_chunk(bio *fd,uint8_t (*storefn)(bio *),const char chunkname[4]) {
data/moosefs-3.0.115/mfsmaster/metadata.c:107:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(hdr,"[MFS EOF MARKER]",16);
data/moosefs-3.0.115/mfsmaster/metadata.c:109:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(hdr,chunkname,4);
data/moosefs-3.0.115/mfsmaster/metadata.c:148:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(ptr,section,4); \
data/moosefs-3.0.115/mfsmaster/metadata.c:245:7:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
	fd = open(name,O_RDONLY);
data/moosefs-3.0.115/mfsmaster/metadata.c:273:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(eofmark,"[MFS EOF MARKER]",16);
data/moosefs-3.0.115/mfsmaster/metadata.c:603:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy(fname,p->pw_dir,l);
data/moosefs-3.0.115/mfsmaster/metadata.c:605:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy(fname+l+1,"metadata.mfs.emergency",22);
data/moosefs-3.0.115/mfsmaster/metadata.c:690:8:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
	mfd = open("metadata.mfs.back.tmp",O_RDWR);
data/moosefs-3.0.115/mfsmaster/metadata.c:791:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
				char metaname1[100],metaname2[100];
data/moosefs-3.0.115/mfsmaster/metadata.c:1214:7:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
						char firstlvstr[21],*fvp;
data/moosefs-3.0.115/mfsmaster/metadata.c:1215:7:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
						char lastlvstr[21],*lvp;
data/moosefs-3.0.115/mfsmaster/metadata.c:1292:11:  [2] (tmpfile) mkstemp:
  Potential for temporary file vulnerability in some circumstances. Some
  older Unix-like systems create temp files with permission to write by all
  by default, so be sure to set the umask to override this. Also, some older
  Unix systems might fail to use O_EXCL when opening the file, so make sure
  that O_EXCL is used by the library (CWE-377).
					fd = mkstemp(name);
data/moosefs-3.0.115/mfsmaster/posixacl.c:353:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(dacn->acltab,sacn->acltab,sizeof(acl_entry)*acls);
data/moosefs-3.0.115/mfsmaster/sessions.c:376:7:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
	fd = fopen("sessions.mfs","r");
data/moosefs-3.0.115/mfsmaster/sessions.c:598:7:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
						memcpy(ptr,sesdata->info,sesdata->ileng);
data/moosefs-3.0.115/mfsmaster/sessions.c:656:6:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
					memcpy(ptr,sesdata->info,sesdata->ileng);
data/moosefs-3.0.115/mfsmaster/sessions.c:724:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(sesdata->info,info,ileng);
data/moosefs-3.0.115/mfsmaster/sessions.c:774:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(sesdata->info,info,ileng);
data/moosefs-3.0.115/mfsmaster/sessions.c:1031:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy(sesdata->lasthouropstats,sesdata->currentopstats,4*SESSION_STATS);
data/moosefs-3.0.115/mfsmaster/storageclass.c:87:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char chlogstr[CHLOGSTRSIZE];
data/moosefs-3.0.115/mfsmaster/storageclass.c:178:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(sclasstab[fsclassid].name,name,nleng);
data/moosefs-3.0.115/mfsmaster/storageclass.c:183:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(sclasstab[fsclassid].create_labelmasks[i],create_labelmasks+(i*MASKORGROUP),MASKORGROUP*sizeof(uint32_t));
data/moosefs-3.0.115/mfsmaster/storageclass.c:187:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(sclasstab[fsclassid].keep_labelmasks[i],keep_labelmasks+(i*MASKORGROUP),MASKORGROUP*sizeof(uint32_t));
data/moosefs-3.0.115/mfsmaster/storageclass.c:191:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(sclasstab[fsclassid].arch_labelmasks[i],arch_labelmasks+(i*MASKORGROUP),MASKORGROUP*sizeof(uint32_t));
data/moosefs-3.0.115/mfsmaster/storageclass.c:239:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy(sclasstab[fsclassid].create_labelmasks[i],create_labelmasks+(i*MASKORGROUP),MASKORGROUP*sizeof(uint32_t));
data/moosefs-3.0.115/mfsmaster/storageclass.c:244:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy(create_labelmasks+(i*MASKORGROUP),sclasstab[fsclassid].create_labelmasks[i],MASKORGROUP*sizeof(uint32_t));
data/moosefs-3.0.115/mfsmaster/storageclass.c:250:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy(sclasstab[fsclassid].keep_labelmasks[i],keep_labelmasks+(i*MASKORGROUP),MASKORGROUP*sizeof(uint32_t));
data/moosefs-3.0.115/mfsmaster/storageclass.c:255:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy(keep_labelmasks+(i*MASKORGROUP),sclasstab[fsclassid].keep_labelmasks[i],MASKORGROUP*sizeof(uint32_t));
data/moosefs-3.0.115/mfsmaster/storageclass.c:261:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy(sclasstab[fsclassid].arch_labelmasks[i],arch_labelmasks+(i*MASKORGROUP),MASKORGROUP*sizeof(uint32_t));
data/moosefs-3.0.115/mfsmaster/storageclass.c:266:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy(arch_labelmasks+(i*MASKORGROUP),sclasstab[fsclassid].arch_labelmasks[i],MASKORGROUP*sizeof(uint32_t));
data/moosefs-3.0.115/mfsmaster/storageclass.c:322:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(sclasstab[fsclassid].name,name,nleng);
data/moosefs-3.0.115/mfsmaster/storageclass.c:328:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(sclasstab[fsclassid].create_labelmasks[i],create_labelmasks+(i*MASKORGROUP),MASKORGROUP*sizeof(uint32_t));
data/moosefs-3.0.115/mfsmaster/storageclass.c:332:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(sclasstab[fsclassid].keep_labelmasks[i],keep_labelmasks+(i*MASKORGROUP),MASKORGROUP*sizeof(uint32_t));
data/moosefs-3.0.115/mfsmaster/storageclass.c:336:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(sclasstab[fsclassid].arch_labelmasks[i],arch_labelmasks+(i*MASKORGROUP),MASKORGROUP*sizeof(uint32_t));
data/moosefs-3.0.115/mfsmaster/storageclass.c:382:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(sclasstab[fdsclassid].name,newname,newnleng);
data/moosefs-3.0.115/mfsmaster/storageclass.c:387:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(sclasstab[fdsclassid].create_labelmasks[i],sclasstab[fssclassid].create_labelmasks[i],MASKORGROUP*sizeof(uint32_t));
data/moosefs-3.0.115/mfsmaster/storageclass.c:392:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(sclasstab[fdsclassid].keep_labelmasks[i],sclasstab[fssclassid].keep_labelmasks[i],MASKORGROUP*sizeof(uint32_t));
data/moosefs-3.0.115/mfsmaster/storageclass.c:397:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(sclasstab[fdsclassid].arch_labelmasks[i],sclasstab[fssclassid].arch_labelmasks[i],MASKORGROUP*sizeof(uint32_t));
data/moosefs-3.0.115/mfsmaster/storageclass.c:443:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(sclasstab[fsclassid].name,newname,newnleng);
data/moosefs-3.0.115/mfsmaster/storageclass.c:516:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
				memcpy(buff,sclasstab[sclassid].name,sclasstab[sclassid].nleng);
data/moosefs-3.0.115/mfsmaster/storageclass.c:672:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
				memcpy(buff,sclasstab[i].name,sclasstab[i].nleng);
data/moosefs-3.0.115/mfsmaster/storageclass.c:743:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy(ptr,sclasstab[i].name,sclasstab[i].nleng);
data/moosefs-3.0.115/mfsmaster/storageclass.c:1026:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(sclasstab[sclassid].name,name,nleng);
data/moosefs-3.0.115/mfsmaster/topology.c:467:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char linebuff[10000];
data/moosefs-3.0.115/mfsmaster/topology.c:472:7:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
	fd = fopen(TopologyFileName,"r");
data/moosefs-3.0.115/mfsmaster/topology.c:550:13:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
		if ((fd = open(TopologyFileName,O_RDONLY))<0 && errno==ENOENT) {
data/moosefs-3.0.115/mfsmaster/topology.c:553:14:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
			if ((fd = open(TopologyFileName,O_RDONLY))>=0) {
data/moosefs-3.0.115/mfsmaster/xattr.c:252:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy(xabuff+i,dict_get_ptr(xp->dictname),dict_get_leng(xp->dictname));
data/moosefs-3.0.115/mfsmetalogger/masterconn.c:140:7:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
	fd = open("changelog_ml.0.back",O_RDWR);
data/moosefs-3.0.115/mfsmetalogger/masterconn.c:150:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy(buff+32768,buff,32);
data/moosefs-3.0.115/mfsmetalogger/masterconn.c:253:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char logname1[100],logname2[100];
data/moosefs-3.0.115/mfsmetalogger/masterconn.c:307:17:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
		eptr->logfd = fopen("changelog_ml.0.mfs","a");
data/moosefs-3.0.115/mfsmetalogger/masterconn.c:356:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char chkbuff[16];
data/moosefs-3.0.115/mfsmetalogger/masterconn.c:357:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char eofmark[16];
data/moosefs-3.0.115/mfsmetalogger/masterconn.c:360:7:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
	fd = open(name,O_RDONLY);
data/moosefs-3.0.115/mfsmetalogger/masterconn.c:379:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy(eofmark,"[MFS EOF MARKER]",16);
data/moosefs-3.0.115/mfsmetalogger/masterconn.c:428:6:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
					char metaname1[100],metaname2[100];
data/moosefs-3.0.115/mfsmetalogger/masterconn.c:482:18:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
		eptr->metafd = open("metadata_ml.tmp",O_WRONLY | O_TRUNC | O_CREAT,0666);
data/moosefs-3.0.115/mfsmetalogger/masterconn.c:484:18:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
		eptr->metafd = open("changelog_ml.tmp",O_WRONLY | O_TRUNC | O_CREAT,0666);
data/moosefs-3.0.115/mfsmetalogger/masterconn.c:773:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy(eptr->input_startptr,readbuff+rbpos,eptr->input_bytesleft);
data/moosefs-3.0.115/mfsmetalogger/masterconn.c:776:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy(eptr->input_startptr,readbuff+rbpos,rbleng-rbpos);
data/moosefs-3.0.115/mfsmetatools/mfsmetadirinfo.c:47:9:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	static char numbuf[6];	// [ "xxx" , "xx" , "x" , "x.x" ] + ["" , "X" , "Xi"]
data/moosefs-3.0.115/mfsmetatools/mfsmetadirinfo.c:864:9:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
		ofd = fopen(outfname,"w");
data/moosefs-3.0.115/mfsmetatools/mfsmetadirinfo.c:873:7:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
	fd = fopen(argv[0],"rb");
data/moosefs-3.0.115/mfsmetatools/mfsmetadump.c:51:30:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
static inline void makestrip(char strip[16],uint32_t ip) {
data/moosefs-3.0.115/mfsmetatools/mfsmetadump.c:699:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char strip[16];
data/moosefs-3.0.115/mfsmetatools/mfsmetadump.c:835:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char strip[16];
data/moosefs-3.0.115/mfsmetatools/mfsmetadump.c:1265:41:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
int fs_load(FILE *fd,uint8_t fver,const char section[4]) {
data/moosefs-3.0.115/mfsmetatools/mfsmetadump.c:1403:22:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
int fs_loadall(const char *fname,const char section[4]) {
data/moosefs-3.0.115/mfsmetatools/mfsmetadump.c:1403:40:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
int fs_loadall(const char *fname,const char section[4]) {
data/moosefs-3.0.115/mfsmetatools/mfsmetadump.c:1408:7:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
	fd = fopen(fname,"r");
data/moosefs-3.0.115/mfsmetatools/mfsmetadump.c:1490:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char section[4];
data/moosefs-3.0.115/mfsmetatools/mfsmetadump.c:1502:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
				memcpy(section,optarg,4);
data/moosefs-3.0.115/mfsnetdump/mfsnetdump.c:495:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char errbuf[PCAP_ERRBUF_SIZE];
data/moosefs-3.0.115/mfschunkserver/bgjobs.c:203:11:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
		eassert(read(jp->rpipe,&qstatus,1)==1);	// make pipe empty
data/moosefs-3.0.115/mfschunkserver/csserv.c:160:54:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		ptr = csserv_create_packet(eptr,ANTOAN_VERSION,4+4+strlen(vstring));
data/moosefs-3.0.115/mfschunkserver/csserv.c:163:52:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		ptr = csserv_create_packet(eptr,ANTOAN_VERSION,4+strlen(vstring));
data/moosefs-3.0.115/mfschunkserver/csserv.c:168:21:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	memcpy(ptr,vstring,strlen(vstring));
data/moosefs-3.0.115/mfschunkserver/csserv.c:194:10:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	vleng = strlen(val);
data/moosefs-3.0.115/mfschunkserver/csserv.c:610:5:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
		i=read(eptr->sock,eptr->inputpacket.startptr,eptr->inputpacket.bytesleft);
data/moosefs-3.0.115/mfschunkserver/csserv.c:650:6:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
			i=read(eptr->sock,eptr->inputpacket.startptr,eptr->inputpacket.bytesleft);
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:143:51:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
#define mypread(a,b,c,d) (lseek((a),(d),SEEK_SET),read((a),(b),(c)))
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:887:8:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		sl = strlen(cl->path);
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:907:9:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
			sl = strlen(cl->path);
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:963:8:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		sl = strlen(f->path);
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:985:9:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
			sl = strlen(f->path);
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:1866:9:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
				i = strlen(f->path);
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:1916:10:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	pleng = strlen(f->path);
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:1952:11:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		pleng = strlen(f->path);
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:2015:12:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
			pleng = strlen(f->path);
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:3682:14:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
			retsize = read(c->fd,c->block,MFSBLOCKSIZE);
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:3684:14:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
			retsize = read(c->fd,blockbuffer,MFSBLOCKSIZE);
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:3903:13:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
		retsize = read(oc->fd,blockbuffer,MFSBLOCKSIZE);
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:4397:14:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
			retsize = read(oc->fd,blockbuffer,MFSBLOCKSIZE);
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:4499:15:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
				retsize = read(oc->fd,blockbuffer,MFSBLOCKSIZE);
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:4600:15:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
				retsize = read(oc->fd,blockbuffer,MFSBLOCKSIZE);
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:4680:14:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
			retsize = read(oc->fd,blockbuffer,blocksize);
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:5041:9:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	leng = strlen(fdst->path);
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:5084:13:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
		retsize = read(c->fd,c->block,MFSBLOCKSIZE);
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:5086:13:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
		retsize = read(c->fd,blockbuffer,MFSBLOCKSIZE);
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:6259:6:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
	if (read(fd,chunkbuff,sb.st_size)!=sb.st_size) {
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:6364:9:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	plen = strlen(f->path);
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:6527:7:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		l = strlen(f->path);
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:6808:6:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	l = strlen(hddcfgline);
data/moosefs-3.0.115/mfschunkserver/hddspacemgr.c:6954:7:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
		if (read(mfd,buff,8)==8) {
data/moosefs-3.0.115/mfschunkserver/mainserv.c:427:7:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
		i = read(sock,hdr+rcvd,(8-rcvd));
data/moosefs-3.0.115/mfschunkserver/mainserv.c:839:8:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
			if (read(wrdata.pipe[0],&status,1)!=1) {
data/moosefs-3.0.115/mfschunkserver/masterconn.c:184:9:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
		ret = read(fd,buff,10);
data/moosefs-3.0.115/mfschunkserver/masterconn.c:409:47:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
			md5_update(&md5c,(const uint8_t *)AuthCode,strlen(AuthCode));
data/moosefs-3.0.115/mfschunkserver/masterconn.c:1396:7:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
		i = read(eptr->sock,readbuff+rbleng,readbuffsize-rbleng);
data/moosefs-3.0.115/mfschunkserver/mfschunktool.c:111:6:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	i = strlen(fname);
data/moosefs-3.0.115/mfschunkserver/mfschunktool.c:115:8:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
			if (read(fd,buff,20)!=20) {
data/moosefs-3.0.115/mfschunkserver/mfschunktool.c:151:7:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
		if (read(fd,buff,20)!=20) {
data/moosefs-3.0.115/mfschunkserver/mfschunktool.c:205:6:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
	if (read(fd,buff,CHUNKCRCSIZE)!=CHUNKCRCSIZE) {
data/moosefs-3.0.115/mfschunkserver/mfschunktool.c:230:7:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
		if (read(fd,buff,MFSBLOCKSIZE)!=MFSBLOCKSIZE) {
data/moosefs-3.0.115/mfschunkserver/mfschunktool.c:253:8:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
			s = read(fd,buff,MFSBLOCKSIZE);
data/moosefs-3.0.115/mfschunkserver/replicator.c:171:5:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
		i=read(rs->sock,rs->startptr,rs->bytesleft);
data/moosefs-3.0.115/mfsclient/mastercomm.c:1345:10:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	ileng = strlen(cargs->info)+1;
data/moosefs-3.0.115/mfsclient/mastercomm.c:1350:11:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		pleng = strlen(cargs->subfolder)+1;
data/moosefs-3.0.115/mfsclient/mastercomm.c:2706:10:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	nleng = strlen(opt_name);
data/moosefs-3.0.115/mfsclient/mastercomm.c:3182:10:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	pleng = strlen((const char *)path)+1;
data/moosefs-3.0.115/mfsclient/mastercomm.c:4267:10:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	pleng = strlen((const char *)path)+1;
data/moosefs-3.0.115/mfsclient/mfs_fuse.c:85:28:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
#error FUSE_ROOT_ID is not equal to MFS_ROOT_ID
data/moosefs-3.0.115/mfsclient/mfs_fuse.c:1515:10:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	nleng = strlen(name);
data/moosefs-3.0.115/mfsclient/mfs_fuse.c:2332:32:  [1] (access) umask:
  Ensure that umask is given most restrictive possible setting (e.g., 066 or
  077) (CWE-732).
		mfs_makemodestr(umaskstr,ctx.umask);
data/moosefs-3.0.115/mfsclient/mfs_fuse.c:2333:156:  [1] (access) umask:
  Ensure that umask is given most restrictive possible setting (e.g., 066 or
  077) (CWE-732).
		oplog_printf(&ctx,"mknod (%lu,%s,%s:0%04o/%s:0%04o,0x%08lX) ...",(unsigned long int)parent,name,modestr,(unsigned int)mode,umaskstr+1,(unsigned int)(ctx.umask),(unsigned long int)rdev);
data/moosefs-3.0.115/mfsclient/mfs_fuse.c:2334:151:  [1] (access) umask:
  Ensure that umask is given most restrictive possible setting (e.g., 066 or
  077) (CWE-732).
		fprintf(stderr,"mknod (%lu,%s,%s:0%04o/%s:0%04o,0x%08lX)\n",(unsigned long int)parent,name,modestr,(unsigned int)mode,umaskstr+1,(unsigned int)(ctx.umask),(unsigned long int)rdev);
data/moosefs-3.0.115/mfsclient/mfs_fuse.c:2340:10:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	nleng = strlen(name);
data/moosefs-3.0.115/mfsclient/mfs_fuse.c:2371:15:  [1] (access) umask:
  Ensure that umask is given most restrictive possible setting (e.g., 066 or
  077) (CWE-732).
	cumask = ctx.umask;
data/moosefs-3.0.115/mfsclient/mfs_fuse.c:2427:10:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	nleng = strlen(name);
data/moosefs-3.0.115/mfsclient/mfs_fuse.c:2478:32:  [1] (access) umask:
  Ensure that umask is given most restrictive possible setting (e.g., 066 or
  077) (CWE-732).
		mfs_makemodestr(umaskstr,ctx.umask);
data/moosefs-3.0.115/mfsclient/mfs_fuse.c:2479:151:  [1] (access) umask:
  Ensure that umask is given most restrictive possible setting (e.g., 066 or
  077) (CWE-732).
		oplog_printf(&ctx,"mkdir (%lu,%s,d%s:0%04o/%s:0%04o) ...",(unsigned long int)parent,name,modestr+1,(unsigned int)mode,umaskstr+1,(unsigned int)(ctx.umask));
data/moosefs-3.0.115/mfsclient/mfs_fuse.c:2480:146:  [1] (access) umask:
  Ensure that umask is given most restrictive possible setting (e.g., 066 or
  077) (CWE-732).
		fprintf(stderr,"mkdir (%lu,%s,d%s:0%04o/%s:0%04o)\n",(unsigned long int)parent,name,modestr+1,(unsigned int)mode,umaskstr+1,(unsigned int)(ctx.umask));
data/moosefs-3.0.115/mfsclient/mfs_fuse.c:2493:10:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	nleng = strlen(name);
data/moosefs-3.0.115/mfsclient/mfs_fuse.c:2501:15:  [1] (access) umask:
  Ensure that umask is given most restrictive possible setting (e.g., 066 or
  077) (CWE-732).
	cumask = ctx.umask;
data/moosefs-3.0.115/mfsclient/mfs_fuse.c:2562:10:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	nleng = strlen(name);
data/moosefs-3.0.115/mfsclient/mfs_fuse.c:2623:10:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	nleng = strlen(name);
data/moosefs-3.0.115/mfsclient/mfs_fuse.c:2624:29:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	if (nleng>MFS_NAME_MAX || (strlen(path)+1)>MFS_SYMLINK_MAX) {
data/moosefs-3.0.115/mfsclient/mfs_fuse.c:2735:10:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	nleng = strlen(name);
data/moosefs-3.0.115/mfsclient/mfs_fuse.c:2741:13:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	newnleng = strlen(newname);
data/moosefs-3.0.115/mfsclient/mfs_fuse.c:2814:13:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	newnleng = strlen(newname);
data/moosefs-3.0.115/mfsclient/mfs_fuse.c:3521:32:  [1] (access) umask:
  Ensure that umask is given most restrictive possible setting (e.g., 066 or
  077) (CWE-732).
		mfs_makemodestr(umaskstr,ctx.umask);
data/moosefs-3.0.115/mfsclient/mfs_fuse.c:3522:160:  [1] (access) umask:
  Ensure that umask is given most restrictive possible setting (e.g., 066 or
  077) (CWE-732).
		oplog_printf(&ctx,"create (%lu,%s,%s,-%s:0%04o/%s:0%04o)",(unsigned long int)parent,name,flagsstr,modestr+1,(unsigned int)mode,umaskstr+1,(unsigned int)(ctx.umask));
data/moosefs-3.0.115/mfsclient/mfs_fuse.c:3523:159:  [1] (access) umask:
  Ensure that umask is given most restrictive possible setting (e.g., 066 or
  077) (CWE-732).
		fprintf(stderr,"create (%lu,%s,%s,-%s:0%04o/%s:0%04o)\n",(unsigned long int)parent,name,flagsstr,modestr+1,(unsigned int)mode,umaskstr+1,(unsigned int)(ctx.umask));
data/moosefs-3.0.115/mfsclient/mfs_fuse.c:3536:10:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	nleng = strlen(name);
data/moosefs-3.0.115/mfsclient/mfs_fuse.c:3544:15:  [1] (access) umask:
  Ensure that umask is given most restrictive possible setting (e.g., 066 or
  077) (CWE-732).
	cumask = ctx.umask;
data/moosefs-3.0.115/mfsclient/mfs_fuse.c:5647:10:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	nleng = strlen(name);
data/moosefs-3.0.115/mfsclient/mfs_fuse.c:5746:10:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	nleng = strlen(name);
data/moosefs-3.0.115/mfsclient/mfs_fuse.c:5974:10:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	nleng = strlen(name);
data/moosefs-3.0.115/mfsclient/mfs_meta_fuse.c:639:18:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		return 4*6+1+2+strlen(META_TRASH_NAME)+strlen(META_SUSTAINED_NAME);
data/moosefs-3.0.115/mfsclient/mfs_meta_fuse.c:639:42:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		return 4*6+1+2+strlen(META_TRASH_NAME)+strlen(META_SUSTAINED_NAME);
data/moosefs-3.0.115/mfsclient/mfs_meta_fuse.c:642:35:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
			return (3+TRASH_BUCKETS)*6+1+2+strlen(META_UNDEL_NAME)+(TRASH_BUCKETS*((TRASH_BUCKETS<=4096)?3:4));
data/moosefs-3.0.115/mfsclient/mfs_meta_fuse.c:644:19:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
			return 3*6+1+2+strlen(META_UNDEL_NAME);
data/moosefs-3.0.115/mfsclient/mfs_meta_fuse.c:652:19:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
			return 3*6+1+2+strlen(META_UNDEL_NAME);
data/moosefs-3.0.115/mfsclient/mfs_meta_fuse.c:674:7:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		l = strlen(META_TRASH_NAME);
data/moosefs-3.0.115/mfsclient/mfs_meta_fuse.c:681:7:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		l = strlen(META_SUSTAINED_NAME);
data/moosefs-3.0.115/mfsclient/mfs_meta_fuse.c:701:7:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		l = strlen(META_UNDEL_NAME);
data/moosefs-3.0.115/mfsclient/mfs_meta_fuse.c:764:8:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
			l = strlen(META_UNDEL_NAME);
data/moosefs-3.0.115/mfsclient/mfs_meta_fuse.c:1019:21:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
			pathinfo->size = strlen((char*)path)+1;
data/moosefs-3.0.115/mfsclient/mfsio.c:659:15:  [1] (access) umask:
  Ensure that umask is given most restrictive possible setting (e.g., 066 or
  077) (CWE-732).
	last_umask = umask(last_umask); // This is potentail race-condition, but there is no portable way to obtain umask atomically. Last umask is remembered to minimize probability of changing umask here.
data/moosefs-3.0.115/mfsclient/mfsio.c:660:2:  [1] (access) umask:
  Ensure that umask is given most restrictive possible setting (e.g., 066 or
  077) (CWE-732).
	umask(last_umask);
data/moosefs-3.0.115/mfsclient/mfsio.c:715:15:  [1] (access) umask:
  Ensure that umask is given most restrictive possible setting (e.g., 066 or
  077) (CWE-732).
	last_umask = umask(last_umask); // This is potentail race-condition, but there is no portable way to obtain umask atomically. Last umask is remembered to minimize probability of changing umask here.
data/moosefs-3.0.115/mfsclient/mfsio.c:716:2:  [1] (access) umask:
  Ensure that umask is given most restrictive possible setting (e.g., 066 or
  077) (CWE-732).
	umask(last_umask);
data/moosefs-3.0.115/mfsclient/mfsio.c:1102:18:  [1] (access) umask:
  Ensure that umask is given most restrictive possible setting (e.g., 066 or
  077) (CWE-732).
				last_umask = umask(last_umask); // see - mkdir
data/moosefs-3.0.115/mfsclient/mfsio.c:1103:5:  [1] (access) umask:
  Ensure that umask is given most restrictive possible setting (e.g., 066 or
  077) (CWE-732).
				umask(last_umask);
data/moosefs-3.0.115/mfsclient/mfsio.c:1672:53:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
			md5_update(&ctx,(uint8_t*)(mcfg->masterpassword),strlen(mcfg->masterpassword));
data/moosefs-3.0.115/mfsclient/mfsio.c:1674:34:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
			memset(mcfg->masterpassword,0,strlen(mcfg->masterpassword));
data/moosefs-3.0.115/mfsclient/mfsio.c:1707:16:  [1] (access) umask:
  Ensure that umask is given most restrictive possible setting (e.g., 066 or
  077) (CWE-732).
		last_umask = umask(0);
data/moosefs-3.0.115/mfsclient/mfsio.c:1708:3:  [1] (access) umask:
  Ensure that umask is given most restrictive possible setting (e.g., 066 or
  077) (CWE-732).
		umask(last_umask);
data/moosefs-3.0.115/mfsclient/mfsmount.c:1016:48:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		md5_update(&ctx,(uint8_t*)(mfsopts.password),strlen(mfsopts.password));
data/moosefs-3.0.115/mfsclient/mfsmount.c:1018:29:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		memset(mfsopts.password,0,strlen(mfsopts.password));
data/moosefs-3.0.115/mfsclient/mfsmount.c:1049:28:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		memset(mfsopts.md5pass,0,strlen(mfsopts.md5pass));
data/moosefs-3.0.115/mfsclient/mfsmount.c:1130:10:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
			err = read(piped[0],&s,1);
data/moosefs-3.0.115/mfsclient/mfsmount.c:1566:6:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	i = strlen(passwordbuff);
data/moosefs-3.0.115/mfsclient/mfstools.c:372:9:  [1] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant character.
		(void)strcpy(bname, ".");
data/moosefs-3.0.115/mfsclient/mfstools.c:377:16:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	endp = path + strlen(path) - 1;
data/moosefs-3.0.115/mfsclient/mfstools.c:384:9:  [1] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant character.
		(void)strcpy(bname, "/");
data/moosefs-3.0.115/mfsclient/mfstools.c:396:8:  [1] (buffer) strncpy:
  Easily used incorrectly; doesn't always \0-terminate or check for invalid
  pointers [MS-banned] (CWE-120).
	(void)strncpy(bname, startp, endp - startp + 1);
data/moosefs-3.0.115/mfsclient/mfstools.c:406:9:  [1] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant character.
		(void)strcpy(bname, ".");
data/moosefs-3.0.115/mfsclient/mfstools.c:411:16:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	endp = path + strlen(path) - 1;
data/moosefs-3.0.115/mfsclient/mfstools.c:434:8:  [1] (buffer) strncpy:
  Easily used incorrectly; doesn't always \0-terminate or check for invalid
  pointers [MS-banned] (CWE-120).
	(void)strncpy(bname, path, endp - path + 1);
data/moosefs-3.0.115/mfsclient/mfstools.c:452:16:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	endp = path + strlen(path) - 1;
data/moosefs-3.0.115/mfsclient/mfstools.c:1013:10:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	nleng = strlen(storage_class_name);
data/moosefs-3.0.115/mfsclient/mfstools.c:1015:12:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		snleng = strlen(src_storage_class_name);
data/moosefs-3.0.115/mfsclient/mfstools.c:1265:10:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	nleng = strlen(scname);
data/moosefs-3.0.115/mfsclient/mfstools.c:1305:10:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	nleng = strlen(scname);
data/moosefs-3.0.115/mfsclient/mfstools.c:1367:10:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	nleng = strlen(scname);
data/moosefs-3.0.115/mfsclient/mfstools.c:1406:11:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	onleng = strlen(oldscname);
data/moosefs-3.0.115/mfsclient/mfstools.c:1407:11:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	nnleng = strlen(newscname);
data/moosefs-3.0.115/mfsclient/mfstools.c:1452:11:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	onleng = strlen(oldscname);
data/moosefs-3.0.115/mfsclient/mfstools.c:1453:11:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	nnleng = strlen(newscname);
data/moosefs-3.0.115/mfsclient/mfstools.c:2607:9:  [1] (access) umask:
  Ensure that umask is given most restrictive possible setting (e.g., 066 or
  077) (CWE-732).
	umsk = umask(0);
data/moosefs-3.0.115/mfsclient/mfstools.c:2608:2:  [1] (access) umask:
  Ensure that umask is given most restrictive possible setting (e.g., 066 or
  077) (CWE-732).
	umask(umsk);
data/moosefs-3.0.115/mfsclient/mfstools.c:2609:10:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	nleng = strlen(dstbase);
data/moosefs-3.0.115/mfsclient/mfstools.c:2737:7:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		if (strlen(dstname)>0 && dstname[strlen(dstname)-1]=='/' && !S_ISDIR(sst.st_mode)) {
data/moosefs-3.0.115/mfsclient/mfstools.c:2737:36:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		if (strlen(dstname)>0 && dstname[strlen(dstname)-1]=='/' && !S_ISDIR(sst.st_mode)) {
data/moosefs-3.0.115/mfsclient/mfstools.c:2807:10:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
					l = strlen(srcnames[i]);
data/moosefs-3.0.115/mfsclient/mfstools.c:3155:6:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	l = strlen(argv[0]);
data/moosefs-3.0.115/mfsclient/mfstools.c:3546:15:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
				scnleng = strlen(p);
data/moosefs-3.0.115/mfsclient/mfstools.c:3558:14:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
			scnleng = strlen(p);
data/moosefs-3.0.115/mfsclient/mfstools_master.c:76:16:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	endp = path + strlen(path) - 1;
data/moosefs-3.0.115/mfsclient/mfstools_master.c:246:14:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		rpathlen = strlen(rpath);
data/moosefs-3.0.115/mfsclient/mfstools_master.c:247:16:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		if (rpathlen+strlen("/.masterinfo")<PATH_MAX) {
data/moosefs-3.0.115/mfsclient/mfstools_master.c:260:11:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
						if (read(sd,masterinfo,10)!=10) {
data/moosefs-3.0.115/mfsclient/mfstools_master.c:266:11:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
						if (read(sd,masterinfo,14)!=14) {
data/moosefs-3.0.115/mfsclient/nbdmain.c:214:9:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
		res = read(sock,buf+brecv,leng-brecv);
data/moosefs-3.0.115/mfsclient/nbdmain.c:230:10:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
			res = read(sock,skipbuff,16384);
data/moosefs-3.0.115/mfsclient/nbdmain.c:232:10:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
			res = read(sock,skipbuff,leng-brecv);
data/moosefs-3.0.115/mfsclient/nbdmain.c:313:9:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
		res = read(nbdcp->sp[0],commbuff+bytesread,28-bytesread);
data/moosefs-3.0.115/mfsclient/nbdmain.c:470:10:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
		while (read(pipefd[0], &buf, 1) > 0) {
data/moosefs-3.0.115/mfsclient/nbdmain.c:519:9:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		fnl = strlen(linkname);
data/moosefs-3.0.115/mfsclient/nbdmain.c:531:9:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		mhl = strlen(masterhost);
data/moosefs-3.0.115/mfsclient/nbdmain.c:532:9:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		mpl = strlen(masterport);
data/moosefs-3.0.115/mfsclient/nbdmain.c:533:9:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		fnl = strlen(filename);
data/moosefs-3.0.115/mfsclient/nbdmain.c:843:25:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	if (pleng>0 && (pleng!=strlen(nbdcp->mfsfile) || memcmp(nbdcp->mfsfile,path,pleng))) {
data/moosefs-3.0.115/mfsclient/nbdmain.c:845:32:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	} else if (dleng>0 && (dleng!=strlen(nbdcp->nbddevice) || memcmp(nbdcp->nbddevice,device,dleng))) {
data/moosefs-3.0.115/mfsclient/nbdmain.c:847:32:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	} else if (nleng>0 && (nleng!=strlen(nbdcp->linkname+NBD_LINK_PREFIX_LENG) || memcmp(nbdcp->linkname+NBD_LINK_PREFIX_LENG,name,nleng))) {
data/moosefs-3.0.115/mfsclient/nbdmain.c:946:14:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
				msglen = strlen((char*)(ans+10));
data/moosefs-3.0.115/mfsclient/nbdmain.c:1058:11:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		pleng = strlen(bdl->nbdcp->mfsfile);
data/moosefs-3.0.115/mfsclient/nbdmain.c:1059:11:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		dleng = strlen(bdl->nbdcp->nbddevice);
data/moosefs-3.0.115/mfsclient/nbdmain.c:1060:11:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		nleng = strlen(bdl->nbdcp->linkname+NBD_LINK_PREFIX_LENG);
data/moosefs-3.0.115/mfsclient/nbdmain.c:1080:11:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		pleng = strlen(bdl->nbdcp->mfsfile);
data/moosefs-3.0.115/mfsclient/nbdmain.c:1081:11:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		dleng = strlen(bdl->nbdcp->nbddevice);
data/moosefs-3.0.115/mfsclient/nbdmain.c:1082:11:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		nleng = strlen(bdl->nbdcp->linkname+NBD_LINK_PREFIX_LENG);
data/moosefs-3.0.115/mfsclient/nbdmain.c:1288:6:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	i = strlen(passwordbuff);
data/moosefs-3.0.115/mfsclient/nbdmain.c:1613:3:  [1] (obsolete) usleep:
  This C routine is considered obsolete (as opposed to the shell command by
  the same name). The interaction of this function with SIGALRM and other
  timer functions such as sleep(), alarm(), setitimer(), and nanosleep() is
  unspecified (CWE-676). Use nanosleep(2) or setitimer(2) instead.
		usleep(10000);
data/moosefs-3.0.115/mfsclient/nbdmain.c:1688:9:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
				if (strlen(optarg)>NBD_LINK_PREFIX_LENG && memcmp(optarg,NBD_LINK_PREFIX,NBD_LINK_PREFIX_LENG)==0) {
data/moosefs-3.0.115/mfsclient/nbdmain.c:1721:10:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	pleng = strlen(filename);
data/moosefs-3.0.115/mfsclient/nbdmain.c:1727:11:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		dleng = strlen(device);
data/moosefs-3.0.115/mfsclient/nbdmain.c:1736:11:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		nleng = strlen(linkname);
data/moosefs-3.0.115/mfsclient/nbdmain.c:1892:9:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
				if (strlen(optarg)>NBD_LINK_PREFIX_LENG && memcmp(optarg,NBD_LINK_PREFIX,NBD_LINK_PREFIX_LENG)==0) {
data/moosefs-3.0.115/mfsclient/nbdmain.c:1920:11:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		pleng = strlen(filename);
data/moosefs-3.0.115/mfsclient/nbdmain.c:1929:11:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		dleng = strlen(device);
data/moosefs-3.0.115/mfsclient/nbdmain.c:1938:11:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		nleng = strlen(linkname);
data/moosefs-3.0.115/mfsclient/nbdmain.c:2096:9:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
				if (strlen(optarg)>NBD_LINK_PREFIX_LENG && memcmp(optarg,NBD_LINK_PREFIX,NBD_LINK_PREFIX_LENG)==0) {
data/moosefs-3.0.115/mfsclient/nbdmain.c:2127:11:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		pleng = strlen(filename);
data/moosefs-3.0.115/mfsclient/nbdmain.c:2136:11:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		dleng = strlen(device);
data/moosefs-3.0.115/mfsclient/nbdmain.c:2145:11:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		nleng = strlen(linkname);
data/moosefs-3.0.115/mfsclient/stats.c:123:13:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	a->nleng = strlen(name);
data/moosefs-3.0.115/mfscommon/charts.c:589:7:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		s = strlen(statdefs[i].name);
data/moosefs-3.0.115/mfscommon/charts.c:673:6:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
	if (read(fd,(void*)hdr,16)!=16) {
data/moosefs-3.0.115/mfscommon/charts.c:703:6:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
	if (read(fd,(void*)hdr,sizeof(uint32_t))!=sizeof(uint32_t)) {
data/moosefs-3.0.115/mfscommon/charts.c:723:6:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
	if (read(fd,(void*)hdr,sizeof(uint32_t)*3)!=sizeof(uint32_t)*3) {
data/moosefs-3.0.115/mfscommon/charts.c:745:7:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
		if (read(fd,namehdr,100)!=100) {
data/moosefs-3.0.115/mfscommon/charts.c:768:10:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
					if (read(fd,(void*)data,8*fleng)!=(ssize_t)(8*fleng)) {
data/moosefs-3.0.115/mfscommon/charts.c:783:10:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
					if (read(fd,(void*)data,8*MAXLENG)!=(ssize_t)(8*MAXLENG)) {
data/moosefs-3.0.115/mfscommon/charts.c:800:10:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
					if (read(fd,(void*)(tab+(MAXLENG-fleng)),sizeof(uint64_t)*fleng)!=(ssize_t)(sizeof(uint64_t)*fleng)) {
data/moosefs-3.0.115/mfscommon/charts.c:811:10:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
					if (read(fd,(void*)tab,sizeof(uint64_t)*MAXLENG)!=(ssize_t)(sizeof(uint64_t)*MAXLENG)) {
data/moosefs-3.0.115/mfscommon/main.c:568:9:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
				if (read(signalpipe[0],&sigid,1)==1) {
data/moosefs-3.0.115/mfscommon/main.c:1183:13:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
		while ((r=read(piped[0],pipebuff,1000))) {
data/moosefs-3.0.115/mfscommon/main.c:1509:2:  [1] (access) umask:
  Ensure that umask is given most restrictive possible setting (e.g., 066 or
  077) (CWE-732).
	umask(cfg_getuint32("FILE_UMASK",027)&077);
data/moosefs-3.0.115/mfscommon/memusage.c:102:7:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
		l = read(fd,statbuff,1000);
data/moosefs-3.0.115/mfscommon/portable.h:302:31:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
#define universal_read(a,b,c) read(a,b,c)
data/moosefs-3.0.115/mfscommon/processname.c:70:24:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
			lastpos = argv[i] + strlen(argv[i]);
data/moosefs-3.0.115/mfscommon/processname.c:75:24:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
			lastpos = argp[i] + strlen(argp[i]);
data/moosefs-3.0.115/mfscommon/processname.c:89:7:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		l = strlen(name);
data/moosefs-3.0.115/mfscommon/sockets.c:151:7:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	pl = strlen(path);
data/moosefs-3.0.115/mfscommon/sockets.c:222:7:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
		i = read(sock,((uint8_t*)buff)+rcvd,leng-rcvd);
data/moosefs-3.0.115/mfscommon/sockets.c:368:8:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
			i = read(srcsock,((uint8_t*)buff)+rcvd,leng-rcvd);
data/moosefs-3.0.115/mfscommon/statsdump.c:332:14:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	fnameleng = strlen(fname);
data/moosefs-3.0.115/mfscommon/statsdump.c:349:15:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		snameleng = strlen(sname);
data/moosefs-3.0.115/mfsmaster/bgsaver.c:137:9:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
		res = read(sock,buf+brecv,leng-brecv);
data/moosefs-3.0.115/mfsmaster/bgsaver.c:315:10:  [1] (obsolete) usleep:
  This C routine is considered obsolete (as opposed to the shell command by
  the same name). The interaction of this function with SIGALRM and other
  timer functions such as sleep(), alarm(), setitimer(), and nanosleep() is
  unspecified (CWE-676). Use nanosleep(2) or setitimer(2) instead.
									usleep((expected_seconds - seconds_passed) * 1000000);
data/moosefs-3.0.115/mfsmaster/bgsaver.c:615:6:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	l = strlen(message);
data/moosefs-3.0.115/mfsmaster/bgsaver.c:708:7:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
		i = read(eptr->status_pipe[PIPE_READ],readbuff+rbleng,readbuffsize-rbleng);
data/moosefs-3.0.115/mfsmaster/bio.c:129:9:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
		ret = read(b->fd,buff,leng);
data/moosefs-3.0.115/mfsmaster/changelog.c:338:6:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
	s = read(fd,buff,50);
data/moosefs-3.0.115/mfsmaster/changelog.c:377:8:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
			if (read(fd,buff,32768)!=32768) {
data/moosefs-3.0.115/mfsmaster/changelog.c:385:8:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
			if (read(fd,buff,size)!=(ssize_t)size) {
data/moosefs-3.0.115/mfsmaster/exports.c:61:11:  [1] (access) umask:
  Ensure that umask is given most restrictive possible setting (e.g., 066 or
  077) (CWE-732).
	uint16_t umask;
data/moosefs-3.0.115/mfsmaster/exports.c:96:19:  [1] (access) umask:
  Ensure that umask is given most restrictive possible setting (e.g., 066 or
  077) (CWE-732).
	put16bit(&ptr,e->umask);
data/moosefs-3.0.115/mfsmaster/exports.c:200:22:  [1] (access) umask:
  Ensure that umask is given most restrictive possible setting (e.g., 066 or
  077) (CWE-732).
			put16bit(&buff,e->umask);
data/moosefs-3.0.115/mfsmaster/exports.c:330:17:  [1] (access) umask:
  Ensure that umask is given most restrictive possible setting (e.g., 066 or
  077) (CWE-732).
	*umaskval = f->umask;
data/moosefs-3.0.115/mfsmaster/exports.c:1025:39:  [1] (access) umask:
  Ensure that umask is given most restrictive possible setting (e.g., 066 or
  077) (CWE-732).
				if (exports_parseumask(p+6,&arec->umask)<0) {
data/moosefs-3.0.115/mfsmaster/exports.c:1035:37:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
				md5_update(&ctx,(uint8_t*)(p+9),strlen(p+9));
data/moosefs-3.0.115/mfsmaster/exports.c:1220:5:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		s=strlen(linebuff);
data/moosefs-3.0.115/mfsmaster/filesystem.c:4346:53:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	return fs_univ_setpath(0,SESFLAG_METARESTORE,inode,strlen((char*)path),path);
data/moosefs-3.0.115/mfsmaster/filesystem.c:5138:70:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	status = fs_univ_symlink(ts,0,SESFLAG_METARESTORE,parent,nleng,name,strlen((char*)path),path,uid,1,&gid,0,0,&rinode,NULL);
data/moosefs-3.0.115/mfsmaster/matoclserv.c:923:57:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		ptr = matoclserv_createpacket(eptr,ANTOAN_VERSION,4+4+strlen(vstring));
data/moosefs-3.0.115/mfsmaster/matoclserv.c:926:55:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		ptr = matoclserv_createpacket(eptr,ANTOAN_VERSION,4+strlen(vstring));
data/moosefs-3.0.115/mfsmaster/matoclserv.c:931:21:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	memcpy(ptr,vstring,strlen(vstring));
data/moosefs-3.0.115/mfsmaster/matoclserv.c:957:10:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	vleng = strlen(val);
data/moosefs-3.0.115/mfsmaster/matoclserv.c:5457:7:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
		i = read(eptr->sock,readbuff+rbleng,readbuffsize-rbleng);
data/moosefs-3.0.115/mfsmaster/matocsserv.c:365:45:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	md5_update(&md5c,(const uint8_t *)AuthCode,strlen(AuthCode));
data/moosefs-3.0.115/mfsmaster/matocsserv.c:1629:57:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		ptr = matocsserv_createpacket(eptr,ANTOAN_VERSION,4+4+strlen(vstring));
data/moosefs-3.0.115/mfsmaster/matocsserv.c:1632:55:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		ptr = matocsserv_createpacket(eptr,ANTOAN_VERSION,4+strlen(vstring));
data/moosefs-3.0.115/mfsmaster/matocsserv.c:1637:21:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	memcpy(ptr,vstring,strlen(vstring));
data/moosefs-3.0.115/mfsmaster/matocsserv.c:1663:10:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	vleng = strlen(val);
data/moosefs-3.0.115/mfsmaster/matocsserv.c:2310:7:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
		i = read(eptr->sock,readbuff+rbleng,readbuffsize-rbleng);
data/moosefs-3.0.115/mfsmaster/matomlserv.c:368:57:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		ptr = matomlserv_createpacket(eptr,ANTOAN_VERSION,4+4+strlen(vstring));
data/moosefs-3.0.115/mfsmaster/matomlserv.c:371:55:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		ptr = matomlserv_createpacket(eptr,ANTOAN_VERSION,4+strlen(vstring));
data/moosefs-3.0.115/mfsmaster/matomlserv.c:376:21:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	memcpy(ptr,vstring,strlen(vstring));
data/moosefs-3.0.115/mfsmaster/matomlserv.c:402:10:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	vleng = strlen(val);
data/moosefs-3.0.115/mfsmaster/matomlserv.c:568:8:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
	ret = read(eptr->upload_meta_fd,ptr+4,leng);
data/moosefs-3.0.115/mfsmaster/matomlserv.c:694:7:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
		i = read(eptr->sock,readbuff+rbleng,readbuffsize-rbleng);
data/moosefs-3.0.115/mfsmaster/metadata.c:253:6:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
	if (read(fd,chkbuff,8)!=8) {
data/moosefs-3.0.115/mfsmaster/metadata.c:275:6:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
	if (read(fd,chkbuff,16)!=16) {
data/moosefs-3.0.115/mfsmaster/metadata.c:291:6:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
	if (read(fd,chkbuff,16)!=16) {
data/moosefs-3.0.115/mfsmaster/metadata.c:600:7:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		l = strlen(p->pw_dir);
data/moosefs-3.0.115/mfsmaster/metadata.c:728:8:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
			if (read(pfd[0],&c,1)!=1) {
data/moosefs-3.0.115/mfsmaster/metadata.c:1027:8:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
			if (strlen(dp->d_name)>8 && memcmp(dp->d_name,"metadata",8)==0) {
data/moosefs-3.0.115/mfsmaster/metadata.c:1077:9:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
				if (strlen(dp->d_name)>8 && memcmp(dp->d_name,"metadata",8)==0) {
data/moosefs-3.0.115/mfsmaster/restore.c:447:32:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	return fs_mr_create(ts,parent,strlen((char*)name),name,type,mode,cumask,uid,gid,rdev,inode);
data/moosefs-3.0.115/mfsmaster/restore.c:639:36:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	return fs_mr_link(ts,inode,parent,strlen((char*)name),name);
data/moosefs-3.0.115/mfsmaster/restore.c:676:34:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	return fs_mr_move(ts,parent_src,strlen((char*)name_src),name_src,parent_dst,strlen((char*)name_dst),name_dst,inode);
data/moosefs-3.0.115/mfsmaster/restore.c:676:78:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	return fs_mr_move(ts,parent_src,strlen((char*)name_src),name_src,parent_dst,strlen((char*)name_dst),name_dst,inode);
data/moosefs-3.0.115/mfsmaster/restore.c:1153:33:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	return fs_mr_setxattr(ts,inode,strlen((char*)name),name,valueleng,value,mode);
data/moosefs-3.0.115/mfsmaster/restore.c:1193:48:  [1] (access) umask:
  Ensure that umask is given most restrictive possible setting (e.g., 066 or
  077) (CWE-732).
	uint32_t inode,parent,smode,sesflags,uid,gids,umask;
data/moosefs-3.0.115/mfsmaster/restore.c:1242:10:  [1] (access) umask:
  Ensure that umask is given most restrictive possible setting (e.g., 066 or
  077) (CWE-732).
		GETU32(umask,ptr);
data/moosefs-3.0.115/mfsmaster/restore.c:1266:41:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		return fs_mr_snapshot(ts,inode,parent,strlen((char*)name),name,smode,sesflags,uid,gids,gidtab,umask,inodecheck,removed,same,exisiting,hardlinks,new);
data/moosefs-3.0.115/mfsmaster/restore.c:1266:97:  [1] (access) umask:
  Ensure that umask is given most restrictive possible setting (e.g., 066 or
  077) (CWE-732).
		return fs_mr_snapshot(ts,inode,parent,strlen((char*)name),name,smode,sesflags,uid,gids,gidtab,umask,inodecheck,removed,same,exisiting,hardlinks,new);
data/moosefs-3.0.115/mfsmaster/restore.c:1268:10:  [1] (access) umask:
  Ensure that umask is given most restrictive possible setting (e.g., 066 or
  077) (CWE-732).
		GETU32(umask,ptr);
data/moosefs-3.0.115/mfsmaster/restore.c:1271:41:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		return fs_mr_snapshot(ts,inode,parent,strlen((char*)name),name,smode,sesflags,uid,1,&gids,umask,0,0,0,0,0,0);
data/moosefs-3.0.115/mfsmaster/restore.c:1271:93:  [1] (access) umask:
  Ensure that umask is given most restrictive possible setting (e.g., 066 or
  077) (CWE-732).
		return fs_mr_snapshot(ts,inode,parent,strlen((char*)name),name,smode,sesflags,uid,1,&gids,umask,0,0,0,0,0,0);
data/moosefs-3.0.115/mfsmaster/restore.c:1294:33:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	return fs_mr_symlink(ts,parent,strlen((char*)name),name,path,uid,gid,inode);
data/moosefs-3.0.115/mfsmaster/restore.c:1307:32:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	return sclass_mr_delete_entry(strlen((char*)name),name,spid);
data/moosefs-3.0.115/mfsmaster/restore.c:1325:35:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	return sclass_mr_duplicate_entry(strlen((char*)sname),sname,strlen((char*)dname),dname,sspid,dspid);
data/moosefs-3.0.115/mfsmaster/restore.c:1325:62:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	return sclass_mr_duplicate_entry(strlen((char*)sname),sname,strlen((char*)dname),dname,sspid,dspid);
data/moosefs-3.0.115/mfsmaster/restore.c:1341:32:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	return sclass_mr_rename_entry(strlen((char*)sname),sname,strlen((char*)dname),dname,spid);
data/moosefs-3.0.115/mfsmaster/restore.c:1341:59:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	return sclass_mr_rename_entry(strlen((char*)sname),sname,strlen((char*)dname),dname,spid);
data/moosefs-3.0.115/mfsmaster/restore.c:1397:29:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	return sclass_mr_set_entry(strlen((char*)name),name,spid,new_flag,adminonly,create_mode,create_labelscnt,create_labelmasks,keep_labelscnt,keep_labelmasks,arch_labelscnt,arch_labelmasks,arch_delay);
data/moosefs-3.0.115/mfsmaster/restore.c:1420:32:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	return fs_mr_unlink(ts,parent,strlen((char*)name),name,inode);
data/moosefs-3.0.115/mfsmaster/topology.c:496:5:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		s=strlen(linebuff);
data/moosefs-3.0.115/mfsmetalogger/masterconn.c:153:8:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
			if (read(fd,buff,32768)!=32768) {
data/moosefs-3.0.115/mfsmetalogger/masterconn.c:162:8:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
			if (read(fd,buff,size)!=(ssize_t)size) {
data/moosefs-3.0.115/mfsmetalogger/masterconn.c:365:6:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
	if (read(fd,chkbuff,8)!=8) {
data/moosefs-3.0.115/mfsmetalogger/masterconn.c:381:9:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
				if (read(fd,chkbuff,16)!=16) {
data/moosefs-3.0.115/mfsmetalogger/masterconn.c:398:6:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
	if (read(fd,chkbuff,16)!=16) {
data/moosefs-3.0.115/mfsmetalogger/masterconn.c:744:7:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
		i = read(eptr->sock,readbuff+rbleng,readbuffsize-rbleng);
data/moosefs-3.0.115/mfsmetatools/mfsmetadirinfo.c:166:8:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
			l = fgetc(fd);
data/moosefs-3.0.115/mfsmetatools/mfsmetadirinfo.c:177:12:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
		ogroup = fgetc(fd);
data/moosefs-3.0.115/mfsmetatools/mfsmetadirinfo.c:273:10:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
		type = fgetc(fd);
data/moosefs-3.0.115/mfsmetatools/mfsmetadump.c:210:9:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
	type = fgetc(fd);
data/moosefs-3.0.115/mfsmetatools/mfsmetadump.c:1498:9:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
				if (strlen(optarg)!=4) {

ANALYSIS SUMMARY:

Hits = 1093
Lines analyzed = 110048 in approximately 2.80 seconds (39372 lines/second)
Physical Source Lines of Code (SLOC) = 93417
Hits@level = [0] 2679 [1] 260 [2] 625 [3]  48 [4] 160 [5]   0
Hits@level+ = [0+] 3772 [1+] 1093 [2+] 833 [3+] 208 [4+] 160 [5+]   0
Hits/KSLOC@level+ = [0+] 40.3781 [1+] 11.7002 [2+] 8.91701 [3+] 2.22658 [4+] 1.71275 [5+]   0
Dot directories skipped = 2 (--followdotdir overrides)
Minimum risk level = 1
Not every hit is necessarily a security vulnerability.
There may be other security vulnerabilities; review your code!
See 'Secure Programming HOWTO'
(https://dwheeler.com/secure-programs) for more information.