Flawfinder version 2.0.10, (C) 2001-2019 David A. Wheeler.
Number of rules (primarily dangerous function names) in C/C++ ruleset: 223
Examining data/rawtherapee-5.8/rtengine/CA_correct_RT.cc
Examining data/rawtherapee-5.8/rtengine/EdgePreservingDecomposition.cc
Examining data/rawtherapee-5.8/rtengine/EdgePreservingDecomposition.h
Examining data/rawtherapee-5.8/rtengine/FTblockDN.cc
Examining data/rawtherapee-5.8/rtengine/LUT.h
Examining data/rawtherapee-5.8/rtengine/PF_correct_RT.cc
Examining data/rawtherapee-5.8/rtengine/StopWatch.h
Examining data/rawtherapee-5.8/rtengine/ahd_demosaic_RT.cc
Examining data/rawtherapee-5.8/rtengine/alignedbuffer.h
Examining data/rawtherapee-5.8/rtengine/amaze_demosaic_RT.cc
Examining data/rawtherapee-5.8/rtengine/array2D.h
Examining data/rawtherapee-5.8/rtengine/badpixels.cc
Examining data/rawtherapee-5.8/rtengine/bilateral2.h
Examining data/rawtherapee-5.8/rtengine/boxblur.cc
Examining data/rawtherapee-5.8/rtengine/boxblur.h
Examining data/rawtherapee-5.8/rtengine/cJSON.c
Examining data/rawtherapee-5.8/rtengine/cJSON.h
Examining data/rawtherapee-5.8/rtengine/cache.h
Examining data/rawtherapee-5.8/rtengine/calc_distort.cc
Examining data/rawtherapee-5.8/rtengine/calc_distort.h
Examining data/rawtherapee-5.8/rtengine/camconst.cc
Examining data/rawtherapee-5.8/rtengine/camconst.h
Examining data/rawtherapee-5.8/rtengine/canon_cr3_decoder.cc
Examining data/rawtherapee-5.8/rtengine/capturesharpening.cc
Examining data/rawtherapee-5.8/rtengine/cfa_linedn_RT.cc
Examining data/rawtherapee-5.8/rtengine/ciecam02.cc
Examining data/rawtherapee-5.8/rtengine/ciecam02.h
Examining data/rawtherapee-5.8/rtengine/cieimage.cc
Examining data/rawtherapee-5.8/rtengine/cieimage.h
Examining data/rawtherapee-5.8/rtengine/clutstore.cc
Examining data/rawtherapee-5.8/rtengine/clutstore.h
Examining data/rawtherapee-5.8/rtengine/color.cc
Examining data/rawtherapee-5.8/rtengine/color.h
Examining data/rawtherapee-5.8/rtengine/colortemp.cc
Examining data/rawtherapee-5.8/rtengine/colortemp.h
Examining data/rawtherapee-5.8/rtengine/coord.cc
Examining data/rawtherapee-5.8/rtengine/coord.h
Examining data/rawtherapee-5.8/rtengine/coord2d.h
Examining data/rawtherapee-5.8/rtengine/cplx_wavelet_dec.cc
Examining data/rawtherapee-5.8/rtengine/cplx_wavelet_dec.h
Examining data/rawtherapee-5.8/rtengine/cplx_wavelet_filter_coeffs.h
Examining data/rawtherapee-5.8/rtengine/cplx_wavelet_level.h
Examining data/rawtherapee-5.8/rtengine/curves.cc
Examining data/rawtherapee-5.8/rtengine/curves.h
Examining data/rawtherapee-5.8/rtengine/dcp.cc
Examining data/rawtherapee-5.8/rtengine/dcp.h
Examining data/rawtherapee-5.8/rtengine/dcraw.c
Examining data/rawtherapee-5.8/rtengine/dcraw.cc
Examining data/rawtherapee-5.8/rtengine/dcraw.h
Examining data/rawtherapee-5.8/rtengine/dcrop.cc
Examining data/rawtherapee-5.8/rtengine/dcrop.h
Examining data/rawtherapee-5.8/rtengine/demosaic_algos.cc
Examining data/rawtherapee-5.8/rtengine/dfmanager.cc
Examining data/rawtherapee-5.8/rtengine/dfmanager.h
Examining data/rawtherapee-5.8/rtengine/diagonalcurves.cc
Examining data/rawtherapee-5.8/rtengine/diagonalcurvetypes.h
Examining data/rawtherapee-5.8/rtengine/dirpyr_equalizer.cc
Examining data/rawtherapee-5.8/rtengine/dual_demosaic_RT.cc
Examining data/rawtherapee-5.8/rtengine/dynamicprofile.cc
Examining data/rawtherapee-5.8/rtengine/dynamicprofile.h
Examining data/rawtherapee-5.8/rtengine/eahd_demosaic.cc
Examining data/rawtherapee-5.8/rtengine/fast_demo.cc
Examining data/rawtherapee-5.8/rtengine/ffmanager.cc
Examining data/rawtherapee-5.8/rtengine/ffmanager.h
Examining data/rawtherapee-5.8/rtengine/filmnegativeproc.cc
Examining data/rawtherapee-5.8/rtengine/filmnegativethumb.cc
Examining data/rawtherapee-5.8/rtengine/flatcurves.cc
Examining data/rawtherapee-5.8/rtengine/flatcurvetypes.h
Examining data/rawtherapee-5.8/rtengine/fujicompressed.cc
Examining data/rawtherapee-5.8/rtengine/gamutwarning.cc
Examining data/rawtherapee-5.8/rtengine/gamutwarning.h
Examining data/rawtherapee-5.8/rtengine/gauss.cc
Examining data/rawtherapee-5.8/rtengine/gauss.h
Examining data/rawtherapee-5.8/rtengine/green_equil_RT.cc
Examining data/rawtherapee-5.8/rtengine/guidedfilter.cc
Examining data/rawtherapee-5.8/rtengine/guidedfilter.h
Examining data/rawtherapee-5.8/rtengine/helperavx.h
Examining data/rawtherapee-5.8/rtengine/helpersse2.h
Examining data/rawtherapee-5.8/rtengine/hilite_recon.cc
Examining data/rawtherapee-5.8/rtengine/histmatching.cc
Examining data/rawtherapee-5.8/rtengine/hphd_demosaic_RT.cc
Examining data/rawtherapee-5.8/rtengine/iccjpeg.cc
Examining data/rawtherapee-5.8/rtengine/iccjpeg.h
Examining data/rawtherapee-5.8/rtengine/iccmatrices.h
Examining data/rawtherapee-5.8/rtengine/iccstore.cc
Examining data/rawtherapee-5.8/rtengine/iccstore.h
Examining data/rawtherapee-5.8/rtengine/iimage.cc
Examining data/rawtherapee-5.8/rtengine/iimage.h
Examining data/rawtherapee-5.8/rtengine/image16.cc
Examining data/rawtherapee-5.8/rtengine/image16.h
Examining data/rawtherapee-5.8/rtengine/image8.cc
Examining data/rawtherapee-5.8/rtengine/image8.h
Examining data/rawtherapee-5.8/rtengine/imagedata.cc
Examining data/rawtherapee-5.8/rtengine/imagedata.h
Examining data/rawtherapee-5.8/rtengine/imagedimensions.cc
Examining data/rawtherapee-5.8/rtengine/imagedimensions.h
Examining data/rawtherapee-5.8/rtengine/imagefloat.cc
Examining data/rawtherapee-5.8/rtengine/imagefloat.h
Examining data/rawtherapee-5.8/rtengine/imageformat.h
Examining data/rawtherapee-5.8/rtengine/imageio.cc
Examining data/rawtherapee-5.8/rtengine/imageio.h
Examining data/rawtherapee-5.8/rtengine/imagesource.h
Examining data/rawtherapee-5.8/rtengine/improccoordinator.cc
Examining data/rawtherapee-5.8/rtengine/improccoordinator.h
Examining data/rawtherapee-5.8/rtengine/improcfun.cc
Examining data/rawtherapee-5.8/rtengine/improcfun.h
Examining data/rawtherapee-5.8/rtengine/impulse_denoise.cc
Examining data/rawtherapee-5.8/rtengine/init.cc
Examining data/rawtherapee-5.8/rtengine/ipdehaze.cc
Examining data/rawtherapee-5.8/rtengine/iplab2rgb.cc
Examining data/rawtherapee-5.8/rtengine/iplabregions.cc
Examining data/rawtherapee-5.8/rtengine/iplocalcontrast.cc
Examining data/rawtherapee-5.8/rtengine/ipresize.cc
Examining data/rawtherapee-5.8/rtengine/ipretinex.cc
Examining data/rawtherapee-5.8/rtengine/ipshadowshighlights.cc
Examining data/rawtherapee-5.8/rtengine/ipsharpen.cc
Examining data/rawtherapee-5.8/rtengine/ipsoftlight.cc
Examining data/rawtherapee-5.8/rtengine/iptcpairs.h
Examining data/rawtherapee-5.8/rtengine/iptransform.cc
Examining data/rawtherapee-5.8/rtengine/ipvibrance.cc
Examining data/rawtherapee-5.8/rtengine/ipwavelet.cc
Examining data/rawtherapee-5.8/rtengine/jaggedarray.h
Examining data/rawtherapee-5.8/rtengine/jdatasrc.cc
Examining data/rawtherapee-5.8/rtengine/jpeg.h
Examining data/rawtherapee-5.8/rtengine/jpeg_ijg/jpeg_memsrc.cc
Examining data/rawtherapee-5.8/rtengine/klt/base.h
Examining data/rawtherapee-5.8/rtengine/klt/convolve.cc
Examining data/rawtherapee-5.8/rtengine/klt/convolve.h
Examining data/rawtherapee-5.8/rtengine/klt/error.cc
Examining data/rawtherapee-5.8/rtengine/klt/error.h
Examining data/rawtherapee-5.8/rtengine/klt/klt.cc
Examining data/rawtherapee-5.8/rtengine/klt/klt.h
Examining data/rawtherapee-5.8/rtengine/klt/klt_util.cc
Examining data/rawtherapee-5.8/rtengine/klt/klt_util.h
Examining data/rawtherapee-5.8/rtengine/klt/main.cpp
Examining data/rawtherapee-5.8/rtengine/klt/pnmio.cc
Examining data/rawtherapee-5.8/rtengine/klt/pnmio.h
Examining data/rawtherapee-5.8/rtengine/klt/pyramid.cc
Examining data/rawtherapee-5.8/rtengine/klt/pyramid.h
Examining data/rawtherapee-5.8/rtengine/klt/selectGoodFeatures.cc
Examining data/rawtherapee-5.8/rtengine/klt/storeFeatures.cc
Examining data/rawtherapee-5.8/rtengine/klt/trackFeatures.cc
Examining data/rawtherapee-5.8/rtengine/klt/writeFeatures.cc
Examining data/rawtherapee-5.8/rtengine/labimage.cc
Examining data/rawtherapee-5.8/rtengine/labimage.h
Examining data/rawtherapee-5.8/rtengine/lcp.cc
Examining data/rawtherapee-5.8/rtengine/lcp.h
Examining data/rawtherapee-5.8/rtengine/lj92.c
Examining data/rawtherapee-5.8/rtengine/lj92.h
Examining data/rawtherapee-5.8/rtengine/lmmse_demosaic.cc
Examining data/rawtherapee-5.8/rtengine/loadinitial.cc
Examining data/rawtherapee-5.8/rtengine/median.h
Examining data/rawtherapee-5.8/rtengine/myfile.cc
Examining data/rawtherapee-5.8/rtengine/myfile.h
Examining data/rawtherapee-5.8/rtengine/mytime.h
Examining data/rawtherapee-5.8/rtengine/noncopyable.h
Examining data/rawtherapee-5.8/rtengine/opthelper.h
Examining data/rawtherapee-5.8/rtengine/panasonic_decoders.cc
Examining data/rawtherapee-5.8/rtengine/pdaflinesfilter.cc
Examining data/rawtherapee-5.8/rtengine/pdaflinesfilter.h
Examining data/rawtherapee-5.8/rtengine/pipettebuffer.cc
Examining data/rawtherapee-5.8/rtengine/pipettebuffer.h
Examining data/rawtherapee-5.8/rtengine/pixelshift.cc
Examining data/rawtherapee-5.8/rtengine/pixelsmap.h
Examining data/rawtherapee-5.8/rtengine/previewimage.cc
Examining data/rawtherapee-5.8/rtengine/previewimage.h
Examining data/rawtherapee-5.8/rtengine/processingjob.cc
Examining data/rawtherapee-5.8/rtengine/processingjob.h
Examining data/rawtherapee-5.8/rtengine/procevents.h
Examining data/rawtherapee-5.8/rtengine/procparams.cc
Examining data/rawtherapee-5.8/rtengine/procparams.h
Examining data/rawtherapee-5.8/rtengine/profilestore.cc
Examining data/rawtherapee-5.8/rtengine/profilestore.h
Examining data/rawtherapee-5.8/rtengine/rawflatfield.cc
Examining data/rawtherapee-5.8/rtengine/rawimage.cc
Examining data/rawtherapee-5.8/rtengine/rawimage.h
Examining data/rawtherapee-5.8/rtengine/rawimagesource.cc
Examining data/rawtherapee-5.8/rtengine/rawimagesource.h
Examining data/rawtherapee-5.8/rtengine/rawimagesource_i.h
Examining data/rawtherapee-5.8/rtengine/rawmetadatalocation.h
Examining data/rawtherapee-5.8/rtengine/rcd_demosaic.cc
Examining data/rawtherapee-5.8/rtengine/refreshmap.cc
Examining data/rawtherapee-5.8/rtengine/refreshmap.h
Examining data/rawtherapee-5.8/rtengine/rescale.h
Examining data/rawtherapee-5.8/rtengine/rt_algo.cc
Examining data/rawtherapee-5.8/rtengine/rt_algo.h
Examining data/rawtherapee-5.8/rtengine/rt_math.h
Examining data/rawtherapee-5.8/rtengine/rtengine.h
Examining data/rawtherapee-5.8/rtengine/rtlensfun.cc
Examining data/rawtherapee-5.8/rtengine/rtlensfun.h
Examining data/rawtherapee-5.8/rtengine/rtthumbnail.cc
Examining data/rawtherapee-5.8/rtengine/rtthumbnail.h
Examining data/rawtherapee-5.8/rtengine/satandvalueblendingcurve.h
Examining data/rawtherapee-5.8/rtengine/settings.h
Examining data/rawtherapee-5.8/rtengine/shmap.cc
Examining data/rawtherapee-5.8/rtengine/shmap.h
Examining data/rawtherapee-5.8/rtengine/simpleprocess.cc
Examining data/rawtherapee-5.8/rtengine/simpleprocess.h
Examining data/rawtherapee-5.8/rtengine/sleef.h
Examining data/rawtherapee-5.8/rtengine/sleefsseavx.c
Examining data/rawtherapee-5.8/rtengine/sleefsseavx.h
Examining data/rawtherapee-5.8/rtengine/stdimagesource.cc
Examining data/rawtherapee-5.8/rtengine/stdimagesource.h
Examining data/rawtherapee-5.8/rtengine/tmo_fattal02.cc
Examining data/rawtherapee-5.8/rtengine/utils.cc
Examining data/rawtherapee-5.8/rtengine/utils.h
Examining data/rawtherapee-5.8/rtengine/vng4_demosaic_RT.cc
Examining data/rawtherapee-5.8/rtengine/xtrans_demosaic.cc
Examining data/rawtherapee-5.8/rtexif/canonattribs.cc
Examining data/rawtherapee-5.8/rtexif/fujiattribs.cc
Examining data/rawtherapee-5.8/rtexif/kodakattribs.cc
Examining data/rawtherapee-5.8/rtexif/nikonattribs.cc
Examining data/rawtherapee-5.8/rtexif/olympusattribs.cc
Examining data/rawtherapee-5.8/rtexif/panasonicattribs.cc
Examining data/rawtherapee-5.8/rtexif/pentaxattribs.cc
Examining data/rawtherapee-5.8/rtexif/rtexif.cc
Examining data/rawtherapee-5.8/rtexif/rtexif.h
Examining data/rawtherapee-5.8/rtexif/sonyminoltaattribs.cc
Examining data/rawtherapee-5.8/rtexif/stdattribs.cc
Examining data/rawtherapee-5.8/rtgui/addsetids.h
Examining data/rawtherapee-5.8/rtgui/adjuster.cc
Examining data/rawtherapee-5.8/rtgui/adjuster.h
Examining data/rawtherapee-5.8/rtgui/alignedmalloc.cc
Examining data/rawtherapee-5.8/rtgui/batchqueue.cc
Examining data/rawtherapee-5.8/rtgui/batchqueue.h
Examining data/rawtherapee-5.8/rtgui/batchqueuebuttonset.cc
Examining data/rawtherapee-5.8/rtgui/batchqueuebuttonset.h
Examining data/rawtherapee-5.8/rtgui/batchqueueentry.cc
Examining data/rawtherapee-5.8/rtgui/batchqueueentry.h
Examining data/rawtherapee-5.8/rtgui/batchqueuepanel.cc
Examining data/rawtherapee-5.8/rtgui/batchqueuepanel.h
Examining data/rawtherapee-5.8/rtgui/batchtoolpanelcoord.cc
Examining data/rawtherapee-5.8/rtgui/batchtoolpanelcoord.h
Examining data/rawtherapee-5.8/rtgui/bayerpreprocess.cc
Examining data/rawtherapee-5.8/rtgui/bayerpreprocess.h
Examining data/rawtherapee-5.8/rtgui/bayerprocess.cc
Examining data/rawtherapee-5.8/rtgui/bayerprocess.h
Examining data/rawtherapee-5.8/rtgui/bayerrawexposure.cc
Examining data/rawtherapee-5.8/rtgui/bayerrawexposure.h
Examining data/rawtherapee-5.8/rtgui/blackwhite.cc
Examining data/rawtherapee-5.8/rtgui/blackwhite.h
Examining data/rawtherapee-5.8/rtgui/bqentryupdater.cc
Examining data/rawtherapee-5.8/rtgui/bqentryupdater.h
Examining data/rawtherapee-5.8/rtgui/browserfilter.cc
Examining data/rawtherapee-5.8/rtgui/browserfilter.h
Examining data/rawtherapee-5.8/rtgui/cacheimagedata.cc
Examining data/rawtherapee-5.8/rtgui/cacheimagedata.h
Examining data/rawtherapee-5.8/rtgui/cachemanager.cc
Examining data/rawtherapee-5.8/rtgui/cachemanager.h
Examining data/rawtherapee-5.8/rtgui/cacorrection.cc
Examining data/rawtherapee-5.8/rtgui/cacorrection.h
Examining data/rawtherapee-5.8/rtgui/checkbox.cc
Examining data/rawtherapee-5.8/rtgui/checkbox.h
Examining data/rawtherapee-5.8/rtgui/chmixer.cc
Examining data/rawtherapee-5.8/rtgui/chmixer.h
Examining data/rawtherapee-5.8/rtgui/clipboard.cc
Examining data/rawtherapee-5.8/rtgui/clipboard.h
Examining data/rawtherapee-5.8/rtgui/coarsepanel.cc
Examining data/rawtherapee-5.8/rtgui/coarsepanel.h
Examining data/rawtherapee-5.8/rtgui/colorappearance.cc
Examining data/rawtherapee-5.8/rtgui/colorappearance.h
Examining data/rawtherapee-5.8/rtgui/coloredbar.cc
Examining data/rawtherapee-5.8/rtgui/coloredbar.h
Examining data/rawtherapee-5.8/rtgui/colorprovider.h
Examining data/rawtherapee-5.8/rtgui/colortoning.cc
Examining data/rawtherapee-5.8/rtgui/colortoning.h
Examining data/rawtherapee-5.8/rtgui/coordinateadjuster.cc
Examining data/rawtherapee-5.8/rtgui/coordinateadjuster.h
Examining data/rawtherapee-5.8/rtgui/crop.cc
Examining data/rawtherapee-5.8/rtgui/crop.h
Examining data/rawtherapee-5.8/rtgui/cropguilistener.h
Examining data/rawtherapee-5.8/rtgui/crophandler.cc
Examining data/rawtherapee-5.8/rtgui/crophandler.h
Examining data/rawtherapee-5.8/rtgui/cropwindow.cc
Examining data/rawtherapee-5.8/rtgui/cropwindow.h
Examining data/rawtherapee-5.8/rtgui/cursormanager.cc
Examining data/rawtherapee-5.8/rtgui/cursormanager.h
Examining data/rawtherapee-5.8/rtgui/curveeditor.cc
Examining data/rawtherapee-5.8/rtgui/curveeditor.h
Examining data/rawtherapee-5.8/rtgui/curveeditorgroup.cc
Examining data/rawtherapee-5.8/rtgui/curveeditorgroup.h
Examining data/rawtherapee-5.8/rtgui/curvelistener.h
Examining data/rawtherapee-5.8/rtgui/darkframe.cc
Examining data/rawtherapee-5.8/rtgui/darkframe.h
Examining data/rawtherapee-5.8/rtgui/defringe.cc
Examining data/rawtherapee-5.8/rtgui/defringe.h
Examining data/rawtherapee-5.8/rtgui/dehaze.cc
Examining data/rawtherapee-5.8/rtgui/dehaze.h
Examining data/rawtherapee-5.8/rtgui/diagonalcurveeditorsubgroup.cc
Examining data/rawtherapee-5.8/rtgui/diagonalcurveeditorsubgroup.h
Examining data/rawtherapee-5.8/rtgui/dirbrowser.cc
Examining data/rawtherapee-5.8/rtgui/dirbrowser.h
Examining data/rawtherapee-5.8/rtgui/dirpyrdenoise.cc
Examining data/rawtherapee-5.8/rtgui/dirpyrdenoise.h
Examining data/rawtherapee-5.8/rtgui/dirpyrequalizer.cc
Examining data/rawtherapee-5.8/rtgui/dirpyrequalizer.h
Examining data/rawtherapee-5.8/rtgui/distortion.cc
Examining data/rawtherapee-5.8/rtgui/distortion.h
Examining data/rawtherapee-5.8/rtgui/dynamicprofilepanel.cc
Examining data/rawtherapee-5.8/rtgui/dynamicprofilepanel.h
Examining data/rawtherapee-5.8/rtgui/editbuffer.cc
Examining data/rawtherapee-5.8/rtgui/editbuffer.h
Examining data/rawtherapee-5.8/rtgui/editcallbacks.cc
Examining data/rawtherapee-5.8/rtgui/editcallbacks.h
Examining data/rawtherapee-5.8/rtgui/editcoordsys.h
Examining data/rawtherapee-5.8/rtgui/editedstate.h
Examining data/rawtherapee-5.8/rtgui/editenums.h
Examining data/rawtherapee-5.8/rtgui/editid.h
Examining data/rawtherapee-5.8/rtgui/editorpanel.cc
Examining data/rawtherapee-5.8/rtgui/editorpanel.h
Examining data/rawtherapee-5.8/rtgui/editwidgets.cc
Examining data/rawtherapee-5.8/rtgui/editwidgets.h
Examining data/rawtherapee-5.8/rtgui/editwindow.cc
Examining data/rawtherapee-5.8/rtgui/editwindow.h
Examining data/rawtherapee-5.8/rtgui/epd.cc
Examining data/rawtherapee-5.8/rtgui/epd.h
Examining data/rawtherapee-5.8/rtgui/eventmapper.cc
Examining data/rawtherapee-5.8/rtgui/eventmapper.h
Examining data/rawtherapee-5.8/rtgui/exiffiltersettings.cc
Examining data/rawtherapee-5.8/rtgui/exiffiltersettings.h
Examining data/rawtherapee-5.8/rtgui/exifpanel.cc
Examining data/rawtherapee-5.8/rtgui/exifpanel.h
Examining data/rawtherapee-5.8/rtgui/exportpanel.cc
Examining data/rawtherapee-5.8/rtgui/exportpanel.h
Examining data/rawtherapee-5.8/rtgui/extprog.cc
Examining data/rawtherapee-5.8/rtgui/extprog.h
Examining data/rawtherapee-5.8/rtgui/fattaltonemap.cc
Examining data/rawtherapee-5.8/rtgui/fattaltonemap.h
Examining data/rawtherapee-5.8/rtgui/favoritbrowser.cc
Examining data/rawtherapee-5.8/rtgui/favoritbrowser.h
Examining data/rawtherapee-5.8/rtgui/filebrowser.cc
Examining data/rawtherapee-5.8/rtgui/filebrowser.h
Examining data/rawtherapee-5.8/rtgui/filebrowserentry.cc
Examining data/rawtherapee-5.8/rtgui/filebrowserentry.h
Examining data/rawtherapee-5.8/rtgui/filecatalog.cc
Examining data/rawtherapee-5.8/rtgui/filecatalog.h
Examining data/rawtherapee-5.8/rtgui/filepanel.cc
Examining data/rawtherapee-5.8/rtgui/filepanel.h
Examining data/rawtherapee-5.8/rtgui/fileselectionchangelistener.h
Examining data/rawtherapee-5.8/rtgui/fileselectionlistener.h
Examining data/rawtherapee-5.8/rtgui/filethumbnailbuttonset.cc
Examining data/rawtherapee-5.8/rtgui/filethumbnailbuttonset.h
Examining data/rawtherapee-5.8/rtgui/filmnegative.cc
Examining data/rawtherapee-5.8/rtgui/filmnegative.h
Examining data/rawtherapee-5.8/rtgui/filmsimulation.cc
Examining data/rawtherapee-5.8/rtgui/filmsimulation.h
Examining data/rawtherapee-5.8/rtgui/filterpanel.cc
Examining data/rawtherapee-5.8/rtgui/filterpanel.h
Examining data/rawtherapee-5.8/rtgui/flatcurveeditorsubgroup.cc
Examining data/rawtherapee-5.8/rtgui/flatcurveeditorsubgroup.h
Examining data/rawtherapee-5.8/rtgui/flatfield.cc
Examining data/rawtherapee-5.8/rtgui/flatfield.h
Examining data/rawtherapee-5.8/rtgui/gradient.cc
Examining data/rawtherapee-5.8/rtgui/gradient.h
Examining data/rawtherapee-5.8/rtgui/guiutils.cc
Examining data/rawtherapee-5.8/rtgui/guiutils.h
Examining data/rawtherapee-5.8/rtgui/histogrampanel.cc
Examining data/rawtherapee-5.8/rtgui/histogrampanel.h
Examining data/rawtherapee-5.8/rtgui/history.cc
Examining data/rawtherapee-5.8/rtgui/history.h
Examining data/rawtherapee-5.8/rtgui/hsvequalizer.cc
Examining data/rawtherapee-5.8/rtgui/hsvequalizer.h
Examining data/rawtherapee-5.8/rtgui/iccprofilecreator.cc
Examining data/rawtherapee-5.8/rtgui/iccprofilecreator.h
Examining data/rawtherapee-5.8/rtgui/icmpanel.cc
Examining data/rawtherapee-5.8/rtgui/icmpanel.h
Examining data/rawtherapee-5.8/rtgui/imagearea.cc
Examining data/rawtherapee-5.8/rtgui/imagearea.h
Examining data/rawtherapee-5.8/rtgui/imageareapanel.cc
Examining data/rawtherapee-5.8/rtgui/imageareapanel.h
Examining data/rawtherapee-5.8/rtgui/imageareatoollistener.h
Examining data/rawtherapee-5.8/rtgui/impulsedenoise.cc
Examining data/rawtherapee-5.8/rtgui/impulsedenoise.h
Examining data/rawtherapee-5.8/rtgui/indclippedpanel.cc
Examining data/rawtherapee-5.8/rtgui/indclippedpanel.h
Examining data/rawtherapee-5.8/rtgui/inspector.cc
Examining data/rawtherapee-5.8/rtgui/inspector.h
Examining data/rawtherapee-5.8/rtgui/iptcpanel.cc
Examining data/rawtherapee-5.8/rtgui/iptcpanel.h
Examining data/rawtherapee-5.8/rtgui/labcurve.cc
Examining data/rawtherapee-5.8/rtgui/labcurve.h
Examining data/rawtherapee-5.8/rtgui/labgrid.cc
Examining data/rawtherapee-5.8/rtgui/labgrid.h
Examining data/rawtherapee-5.8/rtgui/lensgeom.cc
Examining data/rawtherapee-5.8/rtgui/lensgeom.h
Examining data/rawtherapee-5.8/rtgui/lensgeomlistener.h
Examining data/rawtherapee-5.8/rtgui/lensprofile.cc
Examining data/rawtherapee-5.8/rtgui/lensprofile.h
Examining data/rawtherapee-5.8/rtgui/localcontrast.cc
Examining data/rawtherapee-5.8/rtgui/localcontrast.h
Examining data/rawtherapee-5.8/rtgui/lockablecolorpicker.cc
Examining data/rawtherapee-5.8/rtgui/lockablecolorpicker.h
Examining data/rawtherapee-5.8/rtgui/lwbutton.cc
Examining data/rawtherapee-5.8/rtgui/lwbutton.h
Examining data/rawtherapee-5.8/rtgui/lwbuttonset.cc
Examining data/rawtherapee-5.8/rtgui/lwbuttonset.h
Examining data/rawtherapee-5.8/rtgui/main-cli.cc
Examining data/rawtherapee-5.8/rtgui/main.cc
Examining data/rawtherapee-5.8/rtgui/metadatapanel.cc
Examining data/rawtherapee-5.8/rtgui/metadatapanel.h
Examining data/rawtherapee-5.8/rtgui/multilangmgr.cc
Examining data/rawtherapee-5.8/rtgui/multilangmgr.h
Examining data/rawtherapee-5.8/rtgui/mycurve.cc
Examining data/rawtherapee-5.8/rtgui/mycurve.h
Examining data/rawtherapee-5.8/rtgui/mydiagonalcurve.cc
Examining data/rawtherapee-5.8/rtgui/mydiagonalcurve.h
Examining data/rawtherapee-5.8/rtgui/myflatcurve.cc
Examining data/rawtherapee-5.8/rtgui/myflatcurve.h
Examining data/rawtherapee-5.8/rtgui/navigator.cc
Examining data/rawtherapee-5.8/rtgui/navigator.h
Examining data/rawtherapee-5.8/rtgui/options.cc
Examining data/rawtherapee-5.8/rtgui/options.h
Examining data/rawtherapee-5.8/rtgui/paramsedited.cc
Examining data/rawtherapee-5.8/rtgui/paramsedited.h
Examining data/rawtherapee-5.8/rtgui/partialpastedlg.cc
Examining data/rawtherapee-5.8/rtgui/partialpastedlg.h
Examining data/rawtherapee-5.8/rtgui/pathutils.cc
Examining data/rawtherapee-5.8/rtgui/pathutils.h
Examining data/rawtherapee-5.8/rtgui/pcvignette.cc
Examining data/rawtherapee-5.8/rtgui/pcvignette.h
Examining data/rawtherapee-5.8/rtgui/pdsharpening.cc
Examining data/rawtherapee-5.8/rtgui/pdsharpening.h
Examining data/rawtherapee-5.8/rtgui/perspective.cc
Examining data/rawtherapee-5.8/rtgui/perspective.h
Examining data/rawtherapee-5.8/rtgui/placesbrowser.cc
Examining data/rawtherapee-5.8/rtgui/placesbrowser.h
Examining data/rawtherapee-5.8/rtgui/pointermotionlistener.h
Examining data/rawtherapee-5.8/rtgui/popupbutton.cc
Examining data/rawtherapee-5.8/rtgui/popupbutton.h
Examining data/rawtherapee-5.8/rtgui/popupcommon.cc
Examining data/rawtherapee-5.8/rtgui/popupcommon.h
Examining data/rawtherapee-5.8/rtgui/popuptogglebutton.cc
Examining data/rawtherapee-5.8/rtgui/popuptogglebutton.h
Examining data/rawtherapee-5.8/rtgui/pparamschangelistener.h
Examining data/rawtherapee-5.8/rtgui/ppversion.h
Examining data/rawtherapee-5.8/rtgui/preferences.cc
Examining data/rawtherapee-5.8/rtgui/preferences.h
Examining data/rawtherapee-5.8/rtgui/preprocess.cc
Examining data/rawtherapee-5.8/rtgui/preprocess.h
Examining data/rawtherapee-5.8/rtgui/previewhandler.cc
Examining data/rawtherapee-5.8/rtgui/previewhandler.h
Examining data/rawtherapee-5.8/rtgui/previewloader.cc
Examining data/rawtherapee-5.8/rtgui/previewloader.h
Examining data/rawtherapee-5.8/rtgui/previewmodepanel.cc
Examining data/rawtherapee-5.8/rtgui/previewmodepanel.h
Examining data/rawtherapee-5.8/rtgui/previewwindow.cc
Examining data/rawtherapee-5.8/rtgui/previewwindow.h
Examining data/rawtherapee-5.8/rtgui/procparamchangers.h
Examining data/rawtherapee-5.8/rtgui/profilechangelistener.h
Examining data/rawtherapee-5.8/rtgui/profilepanel.cc
Examining data/rawtherapee-5.8/rtgui/profilepanel.h
Examining data/rawtherapee-5.8/rtgui/profilestorecombobox.cc
Examining data/rawtherapee-5.8/rtgui/profilestorecombobox.h
Examining data/rawtherapee-5.8/rtgui/progressconnector.h
Examining data/rawtherapee-5.8/rtgui/prsharpening.cc
Examining data/rawtherapee-5.8/rtgui/prsharpening.h
Examining data/rawtherapee-5.8/rtgui/rawcacorrection.cc
Examining data/rawtherapee-5.8/rtgui/rawcacorrection.h
Examining data/rawtherapee-5.8/rtgui/rawexposure.cc
Examining data/rawtherapee-5.8/rtgui/rawexposure.h
Examining data/rawtherapee-5.8/rtgui/recentbrowser.cc
Examining data/rawtherapee-5.8/rtgui/recentbrowser.h
Examining data/rawtherapee-5.8/rtgui/renamedlg.cc
Examining data/rawtherapee-5.8/rtgui/renamedlg.h
Examining data/rawtherapee-5.8/rtgui/resize.cc
Examining data/rawtherapee-5.8/rtgui/resize.h
Examining data/rawtherapee-5.8/rtgui/retinex.cc
Examining data/rawtherapee-5.8/rtgui/retinex.h
Examining data/rawtherapee-5.8/rtgui/rgbcurves.cc
Examining data/rawtherapee-5.8/rtgui/rgbcurves.h
Examining data/rawtherapee-5.8/rtgui/rotate.cc
Examining data/rawtherapee-5.8/rtgui/rotate.h
Examining data/rawtherapee-5.8/rtgui/rtimage.cc
Examining data/rawtherapee-5.8/rtgui/rtimage.h
Examining data/rawtherapee-5.8/rtgui/rtscalable.cc
Examining data/rawtherapee-5.8/rtgui/rtscalable.h
Examining data/rawtherapee-5.8/rtgui/rtsurface.cc
Examining data/rawtherapee-5.8/rtgui/rtsurface.h
Examining data/rawtherapee-5.8/rtgui/rtwindow.h
Examining data/rawtherapee-5.8/rtgui/saveasdlg.cc
Examining data/rawtherapee-5.8/rtgui/saveasdlg.h
Examining data/rawtherapee-5.8/rtgui/saveformatpanel.cc
Examining data/rawtherapee-5.8/rtgui/saveformatpanel.h
Examining data/rawtherapee-5.8/rtgui/sensorbayer.cc
Examining data/rawtherapee-5.8/rtgui/sensorbayer.h
Examining data/rawtherapee-5.8/rtgui/sensorxtrans.cc
Examining data/rawtherapee-5.8/rtgui/sensorxtrans.h
Examining data/rawtherapee-5.8/rtgui/shadowshighlights.cc
Examining data/rawtherapee-5.8/rtgui/shadowshighlights.h
Examining data/rawtherapee-5.8/rtgui/sharpenedge.cc
Examining data/rawtherapee-5.8/rtgui/sharpenedge.h
Examining data/rawtherapee-5.8/rtgui/sharpening.cc
Examining data/rawtherapee-5.8/rtgui/sharpening.h
Examining data/rawtherapee-5.8/rtgui/sharpenmicro.cc
Examining data/rawtherapee-5.8/rtgui/sharpenmicro.h
Examining data/rawtherapee-5.8/rtgui/shcselector.cc
Examining data/rawtherapee-5.8/rtgui/shcselector.h
Examining data/rawtherapee-5.8/rtgui/softlight.cc
Examining data/rawtherapee-5.8/rtgui/softlight.h
Examining data/rawtherapee-5.8/rtgui/soundman.cc
Examining data/rawtherapee-5.8/rtgui/soundman.h
Examining data/rawtherapee-5.8/rtgui/splash.cc
Examining data/rawtherapee-5.8/rtgui/splash.h
Examining data/rawtherapee-5.8/rtgui/threadutils.cc
Examining data/rawtherapee-5.8/rtgui/threadutils.h
Examining data/rawtherapee-5.8/rtgui/thresholdadjuster.cc
Examining data/rawtherapee-5.8/rtgui/thresholdadjuster.h
Examining data/rawtherapee-5.8/rtgui/thresholdselector.cc
Examining data/rawtherapee-5.8/rtgui/thresholdselector.h
Examining data/rawtherapee-5.8/rtgui/thumbbrowserbase.cc
Examining data/rawtherapee-5.8/rtgui/thumbbrowserbase.h
Examining data/rawtherapee-5.8/rtgui/thumbbrowserentrybase.cc
Examining data/rawtherapee-5.8/rtgui/thumbbrowserentrybase.h
Examining data/rawtherapee-5.8/rtgui/thumbimageupdater.cc
Examining data/rawtherapee-5.8/rtgui/thumbimageupdater.h
Examining data/rawtherapee-5.8/rtgui/thumbnail.cc
Examining data/rawtherapee-5.8/rtgui/thumbnail.h
Examining data/rawtherapee-5.8/rtgui/thumbnaillistener.h
Examining data/rawtherapee-5.8/rtgui/tonecurve.cc
Examining data/rawtherapee-5.8/rtgui/tonecurve.h
Examining data/rawtherapee-5.8/rtgui/toolbar.cc
Examining data/rawtherapee-5.8/rtgui/toolbar.h
Examining data/rawtherapee-5.8/rtgui/toolenum.h
Examining data/rawtherapee-5.8/rtgui/toolpanel.cc
Examining data/rawtherapee-5.8/rtgui/toolpanel.h
Examining data/rawtherapee-5.8/rtgui/toolpanelcoord.cc
Examining data/rawtherapee-5.8/rtgui/toolpanelcoord.h
Examining data/rawtherapee-5.8/rtgui/vibrance.cc
Examining data/rawtherapee-5.8/rtgui/vibrance.h
Examining data/rawtherapee-5.8/rtgui/vignetting.cc
Examining data/rawtherapee-5.8/rtgui/vignetting.h
Examining data/rawtherapee-5.8/rtgui/wavelet.cc
Examining data/rawtherapee-5.8/rtgui/wavelet.h
Examining data/rawtherapee-5.8/rtgui/wbprovider.h
Examining data/rawtherapee-5.8/rtgui/whitebalance.cc
Examining data/rawtherapee-5.8/rtgui/whitebalance.h
Examining data/rawtherapee-5.8/rtgui/xtransprocess.cc
Examining data/rawtherapee-5.8/rtgui/xtransprocess.h
Examining data/rawtherapee-5.8/rtgui/xtransrawexposure.cc
Examining data/rawtherapee-5.8/rtgui/xtransrawexposure.h
Examining data/rawtherapee-5.8/rtgui/zoompanel.cc
Examining data/rawtherapee-5.8/rtgui/zoompanel.h
Examining data/rawtherapee-5.8/rtgui/rtwindow.cc
Examining data/rawtherapee-5.8/tools/gimp-plugin/file-formats.h
Examining data/rawtherapee-5.8/tools/gimp-plugin/file-rawtherapee.c

FINAL RESULTS:

data/rawtherapee-5.8/rtengine/ipvibrance.cc:529:25:  [5] (race) chmod:
  This accepts filename arguments; if an attacker can move those files, a
  race condition results. (CWE-362). Use fchmod( ) instead.
                        chmod *= satredu;
data/rawtherapee-5.8/rtengine/ipvibrance.cc:547:51:  [5] (race) chmod:
  This accepts filename arguments; if an attacker can move those files, a
  race condition results. (CWE-362). Use fchmod( ) instead.
                            chmod = rtengine::LIM(chmod, -0.93f, 2.f);
data/rawtherapee-5.8/rtengine/ipvibrance.cc:548:46:  [5] (race) chmod:
  This accepts filename arguments; if an attacker can move those files, a
  race condition results. (CWE-362). Use fchmod( ) instead.
                            Chprov *= 1.0f + chmod;
data/rawtherapee-5.8/rtengine/ipvibrance.cc:551:51:  [5] (race) chmod:
  This accepts filename arguments; if an attacker can move those files, a
  race condition results. (CWE-362). Use fchmod( ) instead.
                            chmod = rtengine::LIM(chmod, -0.93f, 1.8f);
data/rawtherapee-5.8/rtengine/ipvibrance.cc:552:46:  [5] (race) chmod:
  This accepts filename arguments; if an attacker can move those files, a
  race condition results. (CWE-362). Use fchmod( ) instead.
                            Chprov *= 1.0f + chmod;
data/rawtherapee-5.8/rtgui/main-cli.cc:124:9:  [5] (race) readlink:
  This accepts filename arguments; if an attacker can move those files or
  change the link content, a race condition results. Also, it does not
  terminate with ASCII NUL. (CWE-362, CWE-20). Reconsider approach.
    if (readlink ("/proc/self/exe", exname, 511) < 0) {
data/rawtherapee-5.8/rtgui/main.cc:399:9:  [5] (race) readlink:
  This accepts filename arguments; if an attacker can move those files or
  change the link content, a race condition results. Also, it does not
  terminate with ASCII NUL. (CWE-362, CWE-20). Reconsider approach.
    if (readlink ("/proc/self/exe", exname, 511) < 0) {
data/rawtherapee-5.8/rtengine/dcraw.c:58:9:  [4] (format) snprintf:
  If format strings can be influenced by an attacker, they can be exploited,
  and note that sprintf variations do not always \0-terminate (CWE-134). Use
  a constant for the format specification.
#define snprintf _snprintf
data/rawtherapee-5.8/rtengine/dcraw.c:58:18:  [4] (format) _snprintf:
  If format strings can be influenced by an attacker, they can be exploited,
  and note that sprintf variations do not always \0-terminate (CWE-134). Use
  a constant for the format specification.
#define snprintf _snprintf
data/rawtherapee-5.8/rtengine/dcraw.c:1322:7:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
      strcpy (make,  table[i].make );
data/rawtherapee-5.8/rtengine/dcraw.c:1323:7:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
      strcpy (model, table[i].model);
data/rawtherapee-5.8/rtengine/dcraw.c:3402:3:  [4] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf.
  sprintf (str, "%sRGBNeutral", model2);
data/rawtherapee-5.8/rtengine/dcraw.c:5582:2:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
	strcpy (model, mod[i]);
data/rawtherapee-5.8/rtengine/dcraw.c:6034:4:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
	  strcpy(model,cp+1);
data/rawtherapee-5.8/rtengine/dcraw.c:6403:3:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
  strcpy (jname, ifname);
data/rawtherapee-5.8/rtengine/dcraw.c:6407:5:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
    strcpy (jext, isupper(ext[1]) ? ".JPG":".jpg");
data/rawtherapee-5.8/rtengine/dcraw.c:6625:5:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
    strcpy (model, cp+1);
data/rawtherapee-5.8/rtengine/dcraw.c:6799:9:  [4] (buffer) sscanf:
  The scanf() family's %s operation, without a limit specification, permits
  buffer overflows (CWE-120, CWE-20). Specify a limit to %s, or use a
  different input function.
    if (sscanf (date, "%*s %s %d %d:%d:%d %d", month, &t.tm_mday,
data/rawtherapee-5.8/rtengine/dcraw.c:7007:6:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
	    strcpy (make, value);
data/rawtherapee-5.8/rtengine/dcraw.c:7009:6:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
	    strcpy (model, value);
data/rawtherapee-5.8/rtengine/dcraw.c:7011:6:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
	    strcpy (model2, value);
data/rawtherapee-5.8/rtengine/dcraw.c:8079:3:  [4] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf.
  sprintf (name, "%s %s", make, model);
data/rawtherapee-5.8/rtengine/dcraw.c:8574:2:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
	strcpy (make,  table[i].make );
data/rawtherapee-5.8/rtengine/dcraw.c:8575:2:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
	strcpy (model, table[i].model);
data/rawtherapee-5.8/rtengine/dcraw.c:8624:6:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
	    strcpy (make, corp[i]);
data/rawtherapee-5.8/rtengine/dcraw.c:8639:5:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
    strcpy (model, model+8);
data/rawtherapee-5.8/rtengine/dcraw.c:8641:5:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
    strcpy (model, model+15);
data/rawtherapee-5.8/rtengine/dcraw.c:8701:2:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
	strcpy (model, unique[i].model);
data/rawtherapee-5.8/rtengine/dcraw.c:8705:7:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
      strcpy (model, sonique[i].model);
data/rawtherapee-5.8/rtengine/dcraw.c:8947:7:  [4] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf.
      sprintf (model+20, "DYNAX %-10s", model+6+(model[0]=='M'));
data/rawtherapee-5.8/rtengine/dcraw.c:9394:5:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
    strcpy (cdesc, colors == 3 ? "RGBG":"GMCY");
data/rawtherapee-5.8/rtengine/dcraw.c:9535:5:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
    strcpy ((char *)oprof+pbody[5]+12, name[output_color-1]);
data/rawtherapee-5.8/rtengine/dcraw.c:9542:5:  [4] (format) fprintf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
    fprintf (stderr, raw_color ? _("Building histograms...\n") :
data/rawtherapee-5.8/rtengine/dcraw.c:9711:3:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
  strcpy (th->soft, "dcraw v"DCRAW_VERSION);
data/rawtherapee-5.8/rtengine/dcraw.c:10229:7:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
      strcpy (ofname, ifname);
data/rawtherapee-5.8/rtengine/dcraw.c:10236:7:  [4] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused).
      strcat (ofname, write_ext);
data/rawtherapee-5.8/rtengine/dcraw.cc:97:9:  [4] (format) snprintf:
  If format strings can be influenced by an attacker, they can be exploited,
  and note that sprintf variations do not always \0-terminate (CWE-134). Use
  a constant for the format specification.
#define snprintf _snprintf
data/rawtherapee-5.8/rtengine/dcraw.cc:97:18:  [4] (format) _snprintf:
  If format strings can be influenced by an attacker, they can be exploited,
  and note that sprintf variations do not always \0-terminate (CWE-134). Use
  a constant for the format specification.
#define snprintf _snprintf
data/rawtherapee-5.8/rtengine/dcraw.cc:1479:7:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
      strcpy (make,  table[i].make );
data/rawtherapee-5.8/rtengine/dcraw.cc:1480:7:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
      strcpy (model, table[i].model);
data/rawtherapee-5.8/rtengine/dcraw.cc:4095:3:  [4] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf.
  sprintf (str, "%sRGBNeutral", model2);
data/rawtherapee-5.8/rtengine/dcraw.cc:6293:2:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
	strcpy (model, mod[i]);
data/rawtherapee-5.8/rtengine/dcraw.cc:6773:4:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
	  strcpy(model,cp+1);
data/rawtherapee-5.8/rtengine/dcraw.cc:7277:3:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
  strcpy (jname, ifname);
data/rawtherapee-5.8/rtengine/dcraw.cc:7281:5:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
    strcpy (jext, isupper(ext[1]) ? ".JPG":".jpg");
data/rawtherapee-5.8/rtengine/dcraw.cc:7500:5:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
    strcpy (model, cp+1);
data/rawtherapee-5.8/rtengine/dcraw.cc:7679:9:  [4] (buffer) sscanf:
  The scanf() family's %s operation, without a limit specification, permits
  buffer overflows (CWE-120, CWE-20). Specify a limit to %s, or use a
  different input function.
    if (sscanf (date, "%*s %s %d %d:%d:%d %d", month, &t.tm_mday,
data/rawtherapee-5.8/rtengine/dcraw.cc:7887:6:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
	    strcpy (make, value);
data/rawtherapee-5.8/rtengine/dcraw.cc:7889:6:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
	    strcpy (model, value);
data/rawtherapee-5.8/rtengine/dcraw.cc:7891:6:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
	    strcpy (model2, value);
data/rawtherapee-5.8/rtengine/dcraw.cc:9066:3:  [4] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf.
  sprintf (name, "%s %s", make, model);
data/rawtherapee-5.8/rtengine/dcraw.cc:9662:2:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
	strcpy (make,  table[i].make );
data/rawtherapee-5.8/rtengine/dcraw.cc:9663:2:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
	strcpy (model, table[i].model);
data/rawtherapee-5.8/rtengine/dcraw.cc:9715:6:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
	    strcpy (make, corp[i]);
data/rawtherapee-5.8/rtengine/dcraw.cc:9730:5:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
    strcpy (model, model+8);
data/rawtherapee-5.8/rtengine/dcraw.cc:9732:5:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
    strcpy (model, model+15);
data/rawtherapee-5.8/rtengine/dcraw.cc:9805:2:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
	strcpy (model, unique[i].model);
data/rawtherapee-5.8/rtengine/dcraw.cc:9809:7:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
      strcpy (model, sonique[i].model);
data/rawtherapee-5.8/rtengine/dcraw.cc:10085:7:  [4] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf.
      sprintf (model+20, "DYNAX %-10s", model+6+(model[0]=='M'));
data/rawtherapee-5.8/rtengine/dcraw.cc:10224:57:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
      else if (strstr(model3, "Hasselblad ") == model3) strcpy(model, &model3[11]);
data/rawtherapee-5.8/rtengine/dcraw.cc:10606:5:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
    strcpy (cdesc, colors == 3 ? "RGBG":"GMCY");
data/rawtherapee-5.8/rtengine/iccstore.cc:1338:5:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
    strcpy((char *)oprof + pbody[5] + 12, name.c_str());
data/rawtherapee-5.8/rtengine/jdatasrc.cc:381:9:  [4] (format) sprintf:
  Potential format string problem (CWE-134). Make format string constant.
        sprintf(buffer, msgtext, err->msg_parm.s);
data/rawtherapee-5.8/rtengine/jdatasrc.cc:383:9:  [4] (format) sprintf:
  Potential format string problem (CWE-134). Make format string constant.
        sprintf(buffer, msgtext,
data/rawtherapee-5.8/rtengine/klt/error.cc:29:3:  [4] (format) vfprintf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
  vfprintf(stderr, fmt, args);
data/rawtherapee-5.8/rtengine/klt/error.cc:51:3:  [4] (format) vfprintf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
  vfprintf(stderr, fmt, args);
data/rawtherapee-5.8/rtengine/klt/pnmio.cc:29:5:  [4] (buffer) fscanf:
  The scanf() family's %s operation, without a limit specification, permits
  buffer overflows (CWE-120, CWE-20). Specify a limit to %s, or use a
  different input function.
    fscanf(fp, "%s", line);
data/rawtherapee-5.8/rtengine/klt/writeFeatures.cc:127:3:  [4] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf.
  sprintf(format, "(%s,%s)=%%%dd ", fmt, fmt, val_width);
data/rawtherapee-5.8/rtengine/klt/writeFeatures.cc:167:3:  [4] (format) fprintf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
  fprintf(fp, fmt, integer);
data/rawtherapee-5.8/rtengine/klt/writeFeatures.cc:299:5:  [4] (format) fprintf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
    fprintf(fp, format, (float) feat->x, (float) feat->y, feat->val);
data/rawtherapee-5.8/rtengine/klt/writeFeatures.cc:306:5:  [4] (format) fprintf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
    fprintf(fp, format, 
data/rawtherapee-5.8/rtengine/klt/writeFeatures.cc:536:3:  [4] (buffer) fscanf:
  The scanf() family's %s operation, without a limit specification, permits
  buffer overflows (CWE-120, CWE-20). Specify a limit to %s, or use a
  different input function.
  fscanf(fp, "%s", line);
data/rawtherapee-5.8/rtengine/klt/writeFeatures.cc:548:3:  [4] (buffer) fscanf:
  The scanf() family's %s operation, without a limit specification, permits
  buffer overflows (CWE-120, CWE-20). Specify a limit to %s, or use a
  different input function.
  fscanf(fp, "%s", line);
data/rawtherapee-5.8/rtengine/klt/writeFeatures.cc:559:5:  [4] (buffer) fscanf:
  The scanf() family's %s operation, without a limit specification, permits
  buffer overflows (CWE-120, CWE-20). Specify a limit to %s, or use a
  different input function.
    fscanf(fp, "%s", line);
data/rawtherapee-5.8/rtengine/klt/writeFeatures.cc:565:5:  [4] (buffer) fscanf:
  The scanf() family's %s operation, without a limit specification, permits
  buffer overflows (CWE-120, CWE-20). Specify a limit to %s, or use a
  different input function.
    fscanf(fp, "%s", line);
data/rawtherapee-5.8/rtengine/klt/writeFeatures.cc:571:5:  [4] (buffer) fscanf:
  The scanf() family's %s operation, without a limit specification, permits
  buffer overflows (CWE-120, CWE-20). Specify a limit to %s, or use a
  different input function.
    fscanf(fp, "%s", line);
data/rawtherapee-5.8/rtengine/myfile.cc:210:5:  [4] (buffer) fscanf:
  The scanf() family's %s operation, without a limit specification, permits
  buffer overflows (CWE-120, CWE-20). Specify a limit to %s, or use a
  different input function. If the scanf format is influenceable by an
  attacker, it's exploitable.
int fscanf (IMFILE* f, const char* s ...)
data/rawtherapee-5.8/rtengine/myfile.h:142:5:  [4] (buffer) fscanf:
  The scanf() family's %s operation, without a limit specification, permits
  buffer overflows (CWE-120, CWE-20). Specify a limit to %s, or use a
  different input function. If the scanf format is influenceable by an
  attacker, it's exploitable.
int fscanf (IMFILE* f, const char* s ...);
data/rawtherapee-5.8/rtengine/rawimage.cc:1129:5:  [4] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf.
    sprintf(name, "%s %s", make, model);
data/rawtherapee-5.8/rtexif/canonattribs.cc:104:9:  [4] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf.
        sprintf (buffer, "%.1fs %s", sec / 10., (sec & 0x4000) ? ",Custom" : "");
data/rawtherapee-5.8/rtexif/rtexif.cc:2021:5:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
    strcpy ((char*)value, text);
data/rawtherapee-5.8/rtexif/stdattribs.cc:550:17:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
                strcpy((char*)buffer, utf8Str);
data/rawtherapee-5.8/rtgui/extprog.cc:246:20:  [4] (shell) ShellExecute:
  This causes a new program to execute and is difficult to use safely
  (CWE-78). try using a library call that implements the same functionality
  if available.
    auto success = ShellExecute( NULL, "open", executable.c_str(), fileName.c_str(), NULL, SW_SHOWNORMAL );
data/rawtherapee-5.8/rtgui/extprog.cc:279:25:  [4] (shell) ShellExecute:
  This causes a new program to execute and is difficult to use safely
  (CWE-78). try using a library call that implements the same functionality
  if available.
        auto lsuccess = ShellExecute( NULL, "open", executable.c_str(), fileName.c_str(), NULL, SW_SHOWNORMAL );
data/rawtherapee-5.8/rtgui/extprog.cc:326:20:  [4] (shell) ShellExecute:
  This causes a new program to execute and is difficult to use safely
  (CWE-78). try using a library call that implements the same functionality
  if available.
    auto success = ShellExecute( NULL, "open", cmdLine.c_str(), ('"' + fileName + '"').c_str(), NULL, SW_SHOWNORMAL );
data/rawtherapee-5.8/rtgui/main.cc:461:21:  [4] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf.
                    sprintf (consoletitle, "RawTherapee %s Console", RTVERSION);
data/rawtherapee-5.8/rtgui/thumbnail.cc:1101:13:  [4] (buffer) wcscpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using a function version that stops copying at the end
  of the buffer.
            wcscpy(par, org);
data/rawtherapee-5.8/tools/gimp-plugin/file-rawtherapee.c:386:9:  [4] (format) fprintf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
    if (fprintf (thumb_pp3_f, pp3_content, thumb_size, thumb_size) < 0) {
data/rawtherapee-5.8/rtgui/multilangmgr.cc:234:26:  [3] (buffer) getenv:
  Environment variables are untrustable input if they can be set by an
  attacker. They can have any content and length, and the same variable can
  be set more than once (CWE-807, CWE-20). Check environment variables
  carefully before using them.
    const char *locale = getenv("LANG");
data/rawtherapee-5.8/rtengine/EdgePreservingDecomposition.cc:31:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(r, b, sizeof(float)*n);
data/rawtherapee-5.8/rtengine/EdgePreservingDecomposition.cc:64:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(d, s, sizeof(float)*n);
data/rawtherapee-5.8/rtengine/EdgePreservingDecomposition.cc:689:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(Blur, Source, n * sizeof(float));
data/rawtherapee-5.8/rtengine/EdgePreservingDecomposition.cc:840:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(Blur, Source, n * sizeof(float));
data/rawtherapee-5.8/rtengine/EdgePreservingDecomposition.cc:860:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(Blur, Source, n * sizeof(float));
data/rawtherapee-5.8/rtengine/LUT.h:241:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy(this->data, rhs.data, rhs.size * sizeof(T));
data/rawtherapee-5.8/rtengine/array2D.h:284:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(data, copy, w * h * sizeof(T));
data/rawtherapee-5.8/rtengine/bilateral2.h:489:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy (buffer[i], src[i], W * sizeof(T));
data/rawtherapee-5.8/rtengine/bilateral2.h:490:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy (dst[i], buffer[i], W * sizeof(T));
data/rawtherapee-5.8/rtengine/cJSON.c:91:12:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    static char version[15];
data/rawtherapee-5.8/rtengine/cJSON.c:92:5:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
    sprintf(version, "%i.%i.%i", CJSON_VERSION_MAJOR, CJSON_VERSION_MINOR, CJSON_VERSION_PATCH);
data/rawtherapee-5.8/rtengine/cJSON.c:166:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(copy, string, length);
data/rawtherapee-5.8/rtengine/cJSON.c:271:14:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    unsigned char number_c_string[64];
data/rawtherapee-5.8/rtengine/cJSON.c:449:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy(newbuffer, p->buffer, p->offset + 1);
data/rawtherapee-5.8/rtengine/cJSON.c:479:14:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    unsigned char number_buffer[26]; /* temporary buffer to print the number into */
data/rawtherapee-5.8/rtengine/cJSON.c:491:18:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
        length = sprintf((char*)number_buffer, "null");
data/rawtherapee-5.8/rtengine/cJSON.c:496:18:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
        length = sprintf((char*)number_buffer, "%1.15g", d);
data/rawtherapee-5.8/rtengine/cJSON.c:502:22:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
            length = sprintf((char*)number_buffer, "%1.17g", d);
data/rawtherapee-5.8/rtengine/cJSON.c:848:9:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
        strcpy((char*)output, "\"\"");
data/rawtherapee-5.8/rtengine/cJSON.c:889:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(output + 1, input, output_length);
data/rawtherapee-5.8/rtengine/cJSON.c:935:21:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
                    sprintf((char*)output_pointer, "u%04x", *input_pointer);
data/rawtherapee-5.8/rtengine/cJSON.c:1127:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(printed, buffer->buffer, cjson_min(buffer->length, buffer->offset + 1));
data/rawtherapee-5.8/rtengine/cJSON.c:1283:13:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
            strcpy((char*)output, "null");
data/rawtherapee-5.8/rtengine/cJSON.c:1292:13:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
            strcpy((char*)output, "false");
data/rawtherapee-5.8/rtengine/cJSON.c:1301:13:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
            strcpy((char*)output, "true");
data/rawtherapee-5.8/rtengine/cJSON.c:1321:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy(output, item->valuestring, raw_length);
data/rawtherapee-5.8/rtengine/cJSON.c:1836:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(reference, item, sizeof(cJSON));
data/rawtherapee-5.8/rtengine/camconst.cc:645:20:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
    FILE *stream = fopen(filename, "rt");
data/rawtherapee-5.8/rtengine/camconst.cc:666:21:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
                    memcpy(temp, buf, bufsize - increment); // copy old buffer content to new buffer
data/rawtherapee-5.8/rtengine/camconst.cc:699:9:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
        char str[128];
data/rawtherapee-5.8/rtengine/canon_cr3_decoder.cc:70:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char AtomNameStack[128];
data/rawtherapee-5.8/rtengine/canon_cr3_decoder.cc:191:11:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    const char UIID_Canon[17] =
data/rawtherapee-5.8/rtengine/canon_cr3_decoder.cc:205:9:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
        char AtomName[5];
data/rawtherapee-5.8/rtengine/canon_cr3_decoder.cc:287:11:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    const char sHandlerType[5][5] = {
data/rawtherapee-5.8/rtengine/canon_cr3_decoder.cc:298:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char nmAtom[5]; // Atom name
data/rawtherapee-5.8/rtengine/canon_cr3_decoder.cc:305:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char UIID[16];
data/rawtherapee-5.8/rtengine/canon_cr3_decoder.cc:307:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char HandlerType[5];
data/rawtherapee-5.8/rtengine/canon_cr3_decoder.cc:308:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char MediaFormatID[5];
data/rawtherapee-5.8/rtengine/canon_cr3_decoder.cc:1652:17:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
                memcpy(bandBuf, lineBuf, param->subbandWidth * sizeof(std::int32_t));
data/rawtherapee-5.8/rtengine/canon_cr3_decoder.cc:1671:17:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
                memcpy(bandBuf, lineBuf, param->subbandWidth * sizeof(std::int32_t));
data/rawtherapee-5.8/rtengine/canon_cr3_decoder.cc:1684:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy(bandBuf, lineBuf, param->subbandWidth * sizeof(std::int32_t));
data/rawtherapee-5.8/rtengine/canon_cr3_decoder.cc:1705:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(bandBuf, lineBuf, param->subbandWidth * sizeof(std::int32_t));
data/rawtherapee-5.8/rtengine/canon_cr3_decoder.cc:1724:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(bandBuf, lineBuf, param->subbandWidth * sizeof(std::int32_t));
data/rawtherapee-5.8/rtengine/canon_cr3_decoder.cc:1743:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(bandBuf, lineBuf, param->subbandWidth * sizeof(std::int32_t));
data/rawtherapee-5.8/rtengine/cieimage.cc:132:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(data, Img->data, W * H * 6 * sizeof(float));
data/rawtherapee-5.8/rtengine/cieimage.cc:137:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy(data[c], Img->data[c], W * H * sizeof(float));
data/rawtherapee-5.8/rtengine/dcraw.c:107:1:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
char *meta_data, xtrans[6][6], xtrans_abs[6][6];
data/rawtherapee-5.8/rtengine/dcraw.c:108:1:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
char cdesc[5], desc[512], make[64], model[64], model2[64], artist[64];
data/rawtherapee-5.8/rtengine/dcraw.c:230:16:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
  static const char filter[16][16] =
data/rawtherapee-5.8/rtengine/dcraw.c:339:11:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
  union { char c[8]; double d; } u;
data/rawtherapee-5.8/rtengine/dcraw.c:1310:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char make[12], model[15];
data/rawtherapee-5.8/rtengine/dcraw.c:1333:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
  char tail[424];
data/rawtherapee-5.8/rtengine/dcraw.c:1488:23:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
  static const signed char dir[12][2] =
data/rawtherapee-5.8/rtengine/dcraw.c:2268:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy (buf[c][0]+!c, buf[c][2], sizeof buf[c][0]-2*!c);
data/rawtherapee-5.8/rtengine/dcraw.c:2383:11:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    FORC3 memcpy (cur[c], curve, sizeof cur[0]);
data/rawtherapee-5.8/rtengine/dcraw.c:3122:32:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
    if (!bit && !load_flags && atoi(model+2) < 14) get4();
data/rawtherapee-5.8/rtengine/dcraw.c:3284:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
  memcpy (ptr, dp, size*4);
data/rawtherapee-5.8/rtengine/dcraw.c:3356:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
  char str[128];
data/rawtherapee-5.8/rtengine/dcraw.c:3444:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
  memcpy (black, black+8, sizeof *black*8);
data/rawtherapee-5.8/rtengine/dcraw.c:3445:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
  memcpy (black+height-11, black+height-22, 11*sizeof *black);
data/rawtherapee-5.8/rtengine/dcraw.c:3446:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
  memcpy (last, black, sizeof last);
data/rawtherapee-5.8/rtengine/dcraw.c:3456:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy (last[2], black[row+1], sizeof last[2]);
data/rawtherapee-5.8/rtengine/dcraw.c:3462:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
  memcpy (fsum, black, sizeof fsum);
data/rawtherapee-5.8/rtengine/dcraw.c:3466:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
  memcpy (last[0], black[height-1], sizeof last[0]);
data/rawtherapee-5.8/rtengine/dcraw.c:3486:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy (prev, pix, sizeof prev);
data/rawtherapee-5.8/rtengine/dcraw.c:3696:7:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
      memcpy (smrow[2], smrow[1], sizeof **smrow * width);
data/rawtherapee-5.8/rtengine/dcraw.c:3732:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy (image[row*i], image[(row+active[1])*width+active[0]],
data/rawtherapee-5.8/rtengine/dcraw.c:3835:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
  char *fname, *cp, line[128];
data/rawtherapee-5.8/rtengine/dcraw.c:3840:10:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
    fp = fopen (cfname, "r");
data/rawtherapee-5.8/rtengine/dcraw.c:3858:7:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
      strcpy (cp, "/.badpixels");
data/rawtherapee-5.8/rtengine/dcraw.c:3859:17:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
      if ((fp = fopen (fname, "r"))) break;
data/rawtherapee-5.8/rtengine/dcraw.c:3897:14:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
  if (!(fp = fopen (fname, "rb"))) {
data/rawtherapee-5.8/rtengine/dcraw.c:3956:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy (gamm, g, sizeof gamm);
data/rawtherapee-5.8/rtengine/dcraw.c:4194:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy (pre_mul, user_mul, sizeof pre_mul);
data/rawtherapee-5.8/rtengine/dcraw.c:4233:7:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
      memcpy (pre_mul, cam_mul, sizeof pre_mul);
data/rawtherapee-5.8/rtengine/dcraw.c:4515:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy (brow[2][col], pix, sizeof *image);
data/rawtherapee-5.8/rtengine/dcraw.c:4539:7:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
      memcpy (image[(row-2)*width+2], brow[0]+2, (width-4)*sizeof *image);
data/rawtherapee-5.8/rtengine/dcraw.c:4543:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
  memcpy (image[(row-2)*width+2], brow[0]+2, (width-4)*sizeof *image);
data/rawtherapee-5.8/rtengine/dcraw.c:4544:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
  memcpy (image[(row-1)*width+2], brow[1]+2, (width-4)*sizeof *image);
data/rawtherapee-5.8/rtengine/dcraw.c:4653:4:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
   char (*homo)[TS][TS], *buffer;
data/rawtherapee-5.8/rtengine/dcraw.c:4665:11:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
  homo = (char  (*)[TS][TS])   (buffer + TS*TS*(ndir*10+6));
data/rawtherapee-5.8/rtengine/dcraw.c:4707:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	  memcpy (rgb[0][row-top][col-left], image[row*width+col], 6);
data/rawtherapee-5.8/rtengine/dcraw.c:4708:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
      FORC3 memcpy (rgb[c+1], rgb[0], sizeof *rgb);
data/rawtherapee-5.8/rtengine/dcraw.c:4729:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	  memcpy (rgb+=4, buffer, 4*sizeof *rgb);
data/rawtherapee-5.8/rtengine/dcraw.c:4878:4:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
   char (*homo)[TS][TS], *buffer;
data/rawtherapee-5.8/rtengine/dcraw.c:4888:11:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
  homo = (char  (*)[TS][TS])   (buffer + 24*TS*TS);
data/rawtherapee-5.8/rtengine/dcraw.c:5047:23:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
  static const signed char dir[8][2] =
data/rawtherapee-5.8/rtengine/dcraw.c:5183:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
  char buf[10];
data/rawtherapee-5.8/rtengine/dcraw.c:5465:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
  char str[20];
data/rawtherapee-5.8/rtengine/dcraw.c:5554:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
  char data[40];
data/rawtherapee-5.8/rtengine/dcraw.c:5677:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
  char software[64], *cbuf, *cp;
data/rawtherapee-5.8/rtengine/dcraw.c:5850:2:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
	strcpy (make, "Sarnoff");
data/rawtherapee-5.8/rtengine/dcraw.c:5883:15:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	  FORC(36) ((char *)xtrans)[c] = fgetc(ifp) & 3;
data/rawtherapee-5.8/rtengine/dcraw.c:5893:18:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	if (cfa == 070) memcpy (cfa_pc,"\003\004\005",3);	/* CMY */
data/rawtherapee-5.8/rtengine/dcraw.c:5894:18:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	if (cfa == 072) memcpy (cfa_pc,"\005\003\004\001",4);	/* GMCY */
data/rawtherapee-5.8/rtengine/dcraw.c:5925:2:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
	strcpy (make, "Leaf");
data/rawtherapee-5.8/rtengine/dcraw.c:5964:2:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
	strcpy (make, "Imacon");
data/rawtherapee-5.8/rtengine/dcraw.c:5994:2:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
	sprintf (model, "Ixpress %d-Mp", height*width/1000000);
data/rawtherapee-5.8/rtengine/dcraw.c:6012:16:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
	if (!make[0]) strcpy (make, "Hasselblad");
data/rawtherapee-5.8/rtengine/dcraw.c:6027:16:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
	if (!make[0]) strcpy (make, "DNG");
data/rawtherapee-5.8/rtengine/dcraw.c:6149:16:  [2] (tmpfile) tmpfile:
  Function tmpfile() has a security flaw on some systems (e.g., older System
  V systems) (CWE-377).
    if ((ifp = tmpfile())) {
data/rawtherapee-5.8/rtengine/dcraw.c:6409:7:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
      memcpy (jfile, file+4, 4);
data/rawtherapee-5.8/rtengine/dcraw.c:6410:7:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
      memcpy (jfile+4, file, 4);
data/rawtherapee-5.8/rtengine/dcraw.c:6421:16:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
    if ((ifp = fopen (jname, "rb"))) {
data/rawtherapee-5.8/rtengine/dcraw.c:6569:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
  char line[128], *val;
data/rawtherapee-5.8/rtengine/dcraw.c:6585:22:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
      thumb_offset = atoi(val);
data/rawtherapee-5.8/rtengine/dcraw.c:6587:19:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
      raw_width = atoi(val);
data/rawtherapee-5.8/rtengine/dcraw.c:6589:20:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
      raw_height = atoi(val);
data/rawtherapee-5.8/rtengine/dcraw.c:6591:21:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
      thumb_width = atoi(val);
data/rawtherapee-5.8/rtengine/dcraw.c:6593:22:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
      thumb_height = atoi(val);
data/rawtherapee-5.8/rtengine/dcraw.c:6600:3:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
  strcpy (make, "Rollei");
data/rawtherapee-5.8/rtengine/dcraw.c:6601:3:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
  strcpy (model,"d530flex");
data/rawtherapee-5.8/rtengine/dcraw.c:6608:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
  char str[8], *cp;
data/rawtherapee-5.8/rtengine/dcraw.c:6696:3:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
  strcpy (make, "Phase One");
data/rawtherapee-5.8/rtengine/dcraw.c:6699:16:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
    case 2060: strcpy (model,"LightPhase");	break;
data/rawtherapee-5.8/rtengine/dcraw.c:6700:16:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
    case 2682: strcpy (model,"H 10");		break;
data/rawtherapee-5.8/rtengine/dcraw.c:6701:16:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
    case 4128: strcpy (model,"H 20");		break;
data/rawtherapee-5.8/rtengine/dcraw.c:6702:16:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
    case 5488: strcpy (model,"H 25");		break;
data/rawtherapee-5.8/rtengine/dcraw.c:6774:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
  char tag[4], date[64], month[64];
data/rawtherapee-5.8/rtengine/dcraw.c:6775:16:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
  static const char mon[12][4] =
data/rawtherapee-5.8/rtengine/dcraw.c:6814:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
  char tag[4];
data/rawtherapee-5.8/rtengine/dcraw.c:6844:3:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
  strcpy (make, "SMaL");
data/rawtherapee-5.8/rtengine/dcraw.c:6845:3:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
  sprintf (model, "v%d %dx%d", ver, width, height);
data/rawtherapee-5.8/rtengine/dcraw.c:6872:3:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
  strcpy (make, "CINE");
data/rawtherapee-5.8/rtengine/dcraw.c:6873:3:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
  sprintf (model, "%d", get4());
data/rawtherapee-5.8/rtengine/dcraw.c:6941:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
  char name[64], value[64];
data/rawtherapee-5.8/rtengine/dcraw.c:7005:18:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
	    iso_speed = atoi(value);
data/rawtherapee-5.8/rtengine/dcraw.c:7013:18:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
	    timestamp = atoi(value);
data/rawtherapee-5.8/rtengine/dcraw.c:7015:16:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
	    shutter = atoi(value) / 1000000.0;
data/rawtherapee-5.8/rtengine/dcraw.c:8076:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
  char name[130];
data/rawtherapee-5.8/rtengine/dcraw.c:8235:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char model[20];
data/rawtherapee-5.8/rtengine/dcraw.c:8296:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char make[10], model[20];
data/rawtherapee-5.8/rtengine/dcraw.c:8406:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
  char head[32], *cp;
data/rawtherapee-5.8/rtengine/dcraw.c:8464:5:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
    strcpy (make, "Contax");
data/rawtherapee-5.8/rtengine/dcraw.c:8465:5:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
    strcpy (model,"N Digital");
data/rawtherapee-5.8/rtengine/dcraw.c:8471:5:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
    strcpy (make, "Logitech");
data/rawtherapee-5.8/rtengine/dcraw.c:8472:5:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
    strcpy (model,"Fotoman Pixtura");
data/rawtherapee-5.8/rtengine/dcraw.c:8474:5:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
    strcpy (make, "Apple");
data/rawtherapee-5.8/rtengine/dcraw.c:8475:5:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
    strcpy (model,"QuickTake 100");
data/rawtherapee-5.8/rtengine/dcraw.c:8478:5:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
    strcpy (make, "Apple");
data/rawtherapee-5.8/rtengine/dcraw.c:8479:5:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
    strcpy (model,"QuickTake 150");
data/rawtherapee-5.8/rtengine/dcraw.c:8517:5:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
    strcpy (make, "NOKIA");
data/rawtherapee-5.8/rtengine/dcraw.c:8536:5:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
    strcpy (make, "ARRI");
data/rawtherapee-5.8/rtengine/dcraw.c:8555:5:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
    strcpy (make, "Red");
data/rawtherapee-5.8/rtengine/dcraw.c:8556:5:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
    strcpy (model,"One");
data/rawtherapee-5.8/rtengine/dcraw.c:8613:7:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
      strcpy (make, "OmniVision");
data/rawtherapee-5.8/rtengine/dcraw.c:8630:5:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
    strcpy (make, "Pentax");
data/rawtherapee-5.8/rtengine/dcraw.c:8719:5:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
    strcpy (model,"C603");
data/rawtherapee-5.8/rtengine/dcraw.c:8779:23:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
    if (canon_s2is()) strcpy (model+10, "S2 IS");
data/rawtherapee-5.8/rtengine/dcraw.c:8856:7:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
      strcpy (model, "E995");
data/rawtherapee-5.8/rtengine/dcraw.c:8866:7:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
      strcpy (model,"E2500");
data/rawtherapee-5.8/rtengine/dcraw.c:8875:28:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
    if (model[0] == 'E' && atoi(model+1) < 3700)
data/rawtherapee-5.8/rtengine/dcraw.c:8892:7:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
      strcpy (make, "Minolta");
data/rawtherapee-5.8/rtengine/dcraw.c:8893:7:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
      strcpy (model,"DiMAGE Z2");
data/rawtherapee-5.8/rtengine/dcraw.c:8902:7:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
      strcpy (make, "ISG");
data/rawtherapee-5.8/rtengine/dcraw.c:8907:7:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
      strcpy (model,"S2Pro");
data/rawtherapee-5.8/rtengine/dcraw.c:8927:18:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
      FORC(36) ((char *)xtrans)[c] =
data/rawtherapee-5.8/rtengine/dcraw.c:9019:5:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
    strcpy (model, "WB550");
data/rawtherapee-5.8/rtengine/dcraw.c:9056:7:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
      strcpy (model, "V96C");
data/rawtherapee-5.8/rtengine/dcraw.c:9082:2:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
	strcpy (cdesc, "RBTG");
data/rawtherapee-5.8/rtengine/dcraw.c:9083:2:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
	strcpy (model, "CatchLight");
data/rawtherapee-5.8/rtengine/dcraw.c:9086:2:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
	strcpy (model, "DCB2");
data/rawtherapee-5.8/rtengine/dcraw.c:9090:22:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
      if (!model[0]) strcpy (model, "Cantare");
data/rawtherapee-5.8/rtengine/dcraw.c:9101:7:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
      strcpy (model, "Valeo 6");
data/rawtherapee-5.8/rtengine/dcraw.c:9106:7:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
      strcpy (model, "Valeo 6");
data/rawtherapee-5.8/rtengine/dcraw.c:9176:5:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
    strcpy (cdesc, "RGBE");
data/rawtherapee-5.8/rtengine/dcraw.c:9258:7:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
      strcpy (cdesc, "MYCY");
data/rawtherapee-5.8/rtengine/dcraw.c:9260:7:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
      strcpy (model, "DC25");
data/rawtherapee-5.8/rtengine/dcraw.c:9281:7:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
      strcpy (model, "DC40");
data/rawtherapee-5.8/rtengine/dcraw.c:9288:7:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
      strcpy (model, "DC50");
data/rawtherapee-5.8/rtengine/dcraw.c:9294:7:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
      strcpy (model, "DC120");
data/rawtherapee-5.8/rtengine/dcraw.c:9316:18:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
    if (head[5]) strcpy (model+10, "200");
data/rawtherapee-5.8/rtengine/dcraw.c:9345:5:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
    sprintf (model, "%dx%d", width, height);
data/rawtherapee-5.8/rtengine/dcraw.c:9357:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy (rgb_cam, cmatrix, sizeof cmatrix);
data/rawtherapee-5.8/rtengine/dcraw.c:9428:18:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
  else if ((fp = fopen (output, "rb"))) {
data/rawtherapee-5.8/rtengine/dcraw.c:9505:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
  memcpy (out_cam, rgb_cam, sizeof out_cam);
data/rawtherapee-5.8/rtengine/dcraw.c:9511:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy (oprof, phead, sizeof phead);
data/rawtherapee-5.8/rtengine/dcraw.c:9519:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy (oprof+32, pbody, sizeof pbody);
data/rawtherapee-5.8/rtengine/dcraw.c:9521:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy ((char *)oprof+pbody[8]+8, pwhite, sizeof pwhite);
data/rawtherapee-5.8/rtengine/dcraw.c:9524:7:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
      memcpy ((char *)oprof+pbody[i*3+2], pcurve, sizeof pcurve);
data/rawtherapee-5.8/rtengine/dcraw.c:9534:5:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
    strcpy ((char *)oprof+pbody[2]+8, "auto-generated by dcraw");
data/rawtherapee-5.8/rtengine/dcraw.c:9651:11:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
  union { char c[4]; short s[2]; int i; } val;
data/rawtherapee-5.8/rtengine/dcraw.c:9667:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
  char desc[512], make[64], model[64], soft[32], date[20], artist[64];
data/rawtherapee-5.8/rtengine/dcraw.c:9683:32:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
      FORC(4) tt->val.c[c] = ((char *)th)[val+c];
data/rawtherapee-5.8/rtengine/dcraw.c:9713:3:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
  sprintf (th->date, "%04d:%02d:%02d %02d:%02d:%02d",
data/rawtherapee-5.8/rtengine/dcraw.c:9763:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy (th->gps, gpsdata, sizeof th->gps);
data/rawtherapee-5.8/rtengine/dcraw.c:9779:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy (exif, "\xff\xe1  Exif\0\0", 10);
data/rawtherapee-5.8/rtengine/dcraw.c:9926:32:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
      case 'k':  user_black  = atoi(argv[arg++]);  break;
data/rawtherapee-5.8/rtengine/dcraw.c:9927:32:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
      case 'S':  user_sat    = atoi(argv[arg++]);  break;
data/rawtherapee-5.8/rtengine/dcraw.c:9928:32:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
      case 't':  user_flip   = atoi(argv[arg++]);  break;
data/rawtherapee-5.8/rtengine/dcraw.c:9929:32:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
      case 'q':  user_qual   = atoi(argv[arg++]);  break;
data/rawtherapee-5.8/rtengine/dcraw.c:9930:32:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
      case 'm':  med_passes  = atoi(argv[arg++]);  break;
data/rawtherapee-5.8/rtengine/dcraw.c:9931:32:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
      case 'H':  highlight   = atoi(argv[arg++]);  break;
data/rawtherapee-5.8/rtengine/dcraw.c:9933:20:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
	shot_select = abs(atoi(argv[arg]));
data/rawtherapee-5.8/rtengine/dcraw.c:9938:19:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
	  output_color = atoi(argv[arg++]);
data/rawtherapee-5.8/rtengine/dcraw.c:9954:38:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
      case 'A':  FORC4 greybox[c]  = atoi(argv[arg++]);
data/rawtherapee-5.8/rtengine/dcraw.c:10003:17:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
    if (!(ifp = fopen (ifname, "rb"))) {
data/rawtherapee-5.8/rtengine/dcraw.c:10227:7:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
      strcpy (ofname,_("standard output"));
data/rawtherapee-5.8/rtengine/dcraw.c:10232:2:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
	sprintf (ofname+strlen(ofname), "_%0*d",
data/rawtherapee-5.8/rtengine/dcraw.c:10235:2:  [2] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused). Risk is low because the
  source is a constant string.
	strcat (ofname, ".thumb");
data/rawtherapee-5.8/rtengine/dcraw.c:10237:13:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
      ofp = fopen (ofname, "wb");
data/rawtherapee-5.8/rtengine/dcraw.cc:218:16:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
  static const char filter[16][16] =
data/rawtherapee-5.8/rtengine/dcraw.cc:333:11:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
  union { char c[8]; double d; } u;
data/rawtherapee-5.8/rtengine/dcraw.cc:1467:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char make[12], model[15];
data/rawtherapee-5.8/rtengine/dcraw.cc:1490:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
  char tail[424];
data/rawtherapee-5.8/rtengine/dcraw.cc:1659:25:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    static const signed char dir[12][2] = { {-1,-1}, {-1,1}, {1,-1}, {1,1}, {-2,0}, {0,-2}, {0,2}, {2,0}, {-2,-2}, {-2,2}, {2,-2}, {2,2} };
data/rawtherapee-5.8/rtengine/dcraw.cc:2923:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy (buf[c][0]+!c, buf[c][2], sizeof buf[c][0]-2*!c);
data/rawtherapee-5.8/rtengine/dcraw.cc:3039:11:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    FORC3 memcpy (cur[c], curve, sizeof cur[0]);
data/rawtherapee-5.8/rtengine/dcraw.cc:3815:32:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
    if (!bit && !load_flags && atoi(model+2) < 14) get4();
data/rawtherapee-5.8/rtengine/dcraw.cc:3977:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
  memcpy (ptr, dp, size*4);
data/rawtherapee-5.8/rtengine/dcraw.cc:4049:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
  char str[128];
data/rawtherapee-5.8/rtengine/dcraw.cc:4139:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
  memcpy (last, black, sizeof last);
data/rawtherapee-5.8/rtengine/dcraw.cc:4149:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy (last[2], black[row+1], sizeof last[2]);
data/rawtherapee-5.8/rtengine/dcraw.cc:4155:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
  memcpy (fsum, black, sizeof fsum);
data/rawtherapee-5.8/rtengine/dcraw.cc:4159:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
  memcpy (last[0], black[height-1], sizeof last[0]);
data/rawtherapee-5.8/rtengine/dcraw.cc:4179:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy (prev, pix, sizeof prev);
data/rawtherapee-5.8/rtengine/dcraw.cc:4389:7:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
      memcpy (smrow[2], smrow[1], sizeof **smrow * width);
data/rawtherapee-5.8/rtengine/dcraw.cc:4425:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy (image[row*i], image[(row+active[1])*width+active[0]],
data/rawtherapee-5.8/rtengine/dcraw.cc:4659:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy (gamm, g, sizeof gamm);
data/rawtherapee-5.8/rtengine/dcraw.cc:5552:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
  char buf[10];
data/rawtherapee-5.8/rtengine/dcraw.cc:6176:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
  char str[20];
data/rawtherapee-5.8/rtengine/dcraw.cc:6265:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
  char data[40];
data/rawtherapee-5.8/rtengine/dcraw.cc:6388:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
  char software[64], *cbuf, *cp;
data/rawtherapee-5.8/rtengine/dcraw.cc:6589:2:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
	strcpy (make, "Sarnoff");
data/rawtherapee-5.8/rtengine/dcraw.cc:6632:18:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	if (cfa == 070) memcpy (cfa_pc,"\003\004\005",3);	/* CMY */
data/rawtherapee-5.8/rtengine/dcraw.cc:6633:18:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	if (cfa == 072) memcpy (cfa_pc,"\005\003\004\001",4);	/* GMCY */
data/rawtherapee-5.8/rtengine/dcraw.cc:6664:2:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
	strcpy (make, "Leaf");
data/rawtherapee-5.8/rtengine/dcraw.cc:6703:2:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
	strcpy (make, "Imacon");
data/rawtherapee-5.8/rtengine/dcraw.cc:6733:2:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
	sprintf (model, "Ixpress %d-Mp", height*width/1000000);
data/rawtherapee-5.8/rtengine/dcraw.cc:6751:16:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
	if (!make[0]) strcpy (make, "Hasselblad");
data/rawtherapee-5.8/rtengine/dcraw.cc:6766:16:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
	if (!make[0]) strcpy (make, "DNG");
data/rawtherapee-5.8/rtengine/dcraw.cc:6961:14:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
/*RT*/ ifp = fopen (buf, sony_length);
data/rawtherapee-5.8/rtengine/dcraw.cc:7283:7:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
      memcpy (jfile, file+4, 4);
data/rawtherapee-5.8/rtengine/dcraw.cc:7284:7:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
      memcpy (jfile+4, file, 4);
data/rawtherapee-5.8/rtengine/dcraw.cc:7295:22:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
/*RT*/    if ((ifp = fopen (jname))) {
data/rawtherapee-5.8/rtengine/dcraw.cc:7444:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
  char line[128], *val;
data/rawtherapee-5.8/rtengine/dcraw.cc:7460:22:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
      thumb_offset = atoi(val);
data/rawtherapee-5.8/rtengine/dcraw.cc:7462:19:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
      raw_width = atoi(val);
data/rawtherapee-5.8/rtengine/dcraw.cc:7464:20:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
      raw_height = atoi(val);
data/rawtherapee-5.8/rtengine/dcraw.cc:7466:21:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
      thumb_width = atoi(val);
data/rawtherapee-5.8/rtengine/dcraw.cc:7468:22:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
      thumb_height = atoi(val);
data/rawtherapee-5.8/rtengine/dcraw.cc:7475:3:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
  strcpy (make, "Rollei");
data/rawtherapee-5.8/rtengine/dcraw.cc:7476:3:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
  strcpy (model,"d530flex");
data/rawtherapee-5.8/rtengine/dcraw.cc:7483:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
  char str[8], *cp;
data/rawtherapee-5.8/rtengine/dcraw.cc:7572:3:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
  strcpy (make, "Phase One");
data/rawtherapee-5.8/rtengine/dcraw.cc:7575:16:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
    case 2060: strcpy (model,"LightPhase");	break;
data/rawtherapee-5.8/rtengine/dcraw.cc:7576:16:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
    case 2682: strcpy (model,"H 10");		break;
data/rawtherapee-5.8/rtengine/dcraw.cc:7577:16:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
    case 4128: strcpy (model,"H 20");		break;
data/rawtherapee-5.8/rtengine/dcraw.cc:7578:16:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
    case 5488: strcpy (model,"H 25");		break;
data/rawtherapee-5.8/rtengine/dcraw.cc:7654:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
  char tag[4], date[64], month[64];
data/rawtherapee-5.8/rtengine/dcraw.cc:7655:16:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
  static const char mon[12][4] =
data/rawtherapee-5.8/rtengine/dcraw.cc:7694:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
  char tag[4];
data/rawtherapee-5.8/rtengine/dcraw.cc:7724:3:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
  strcpy (make, "SMaL");
data/rawtherapee-5.8/rtengine/dcraw.cc:7725:3:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
  sprintf (model, "v%d %dx%d", ver, width, height);
data/rawtherapee-5.8/rtengine/dcraw.cc:7752:3:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
  strcpy (make, "CINE");
data/rawtherapee-5.8/rtengine/dcraw.cc:7753:3:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
  sprintf (model, "%d", get4());
data/rawtherapee-5.8/rtengine/dcraw.cc:7821:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
  char name[64], value[64];
data/rawtherapee-5.8/rtengine/dcraw.cc:7885:18:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
	    iso_speed = atoi(value);
data/rawtherapee-5.8/rtengine/dcraw.cc:7893:18:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
	    timestamp = atoi(value);
data/rawtherapee-5.8/rtengine/dcraw.cc:7895:16:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
	    shutter = atoi(value) / 1000000.0;
data/rawtherapee-5.8/rtengine/dcraw.cc:9063:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
  char name[130];
data/rawtherapee-5.8/rtengine/dcraw.cc:9272:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char model[20];
data/rawtherapee-5.8/rtengine/dcraw.cc:9361:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char make[10], model[20];
data/rawtherapee-5.8/rtengine/dcraw.cc:9471:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
  char head[32], *cp;
data/rawtherapee-5.8/rtengine/dcraw.cc:9538:5:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
    strcpy (make, "Contax");
data/rawtherapee-5.8/rtengine/dcraw.cc:9539:5:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
    strcpy (model,"N Digital");
data/rawtherapee-5.8/rtengine/dcraw.cc:9545:5:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
    strcpy (make, "Logitech");
data/rawtherapee-5.8/rtengine/dcraw.cc:9546:5:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
    strcpy (model,"Fotoman Pixtura");
data/rawtherapee-5.8/rtengine/dcraw.cc:9548:5:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
    strcpy (make, "Apple");
data/rawtherapee-5.8/rtengine/dcraw.cc:9549:5:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
    strcpy (model,"QuickTake 100");
data/rawtherapee-5.8/rtengine/dcraw.cc:9552:5:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
    strcpy (make, "Apple");
data/rawtherapee-5.8/rtengine/dcraw.cc:9553:5:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
    strcpy (model,"QuickTake 150");
data/rawtherapee-5.8/rtengine/dcraw.cc:9600:5:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
    strcpy (make, "NOKIA");
data/rawtherapee-5.8/rtengine/dcraw.cc:9619:5:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
    strcpy (make, "ARRI");
data/rawtherapee-5.8/rtengine/dcraw.cc:9638:5:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
    strcpy (make, "Red");
data/rawtherapee-5.8/rtengine/dcraw.cc:9639:5:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
    strcpy (model,"One");
data/rawtherapee-5.8/rtengine/dcraw.cc:9703:7:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
      strcpy (make, "OmniVision");
data/rawtherapee-5.8/rtengine/dcraw.cc:9721:5:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
    strcpy (make, "Pentax");
data/rawtherapee-5.8/rtengine/dcraw.cc:9827:5:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
    strcpy (model,"C603");
data/rawtherapee-5.8/rtengine/dcraw.cc:9906:23:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
    if (canon_s2is()) strcpy (model+10, "S2 IS");
data/rawtherapee-5.8/rtengine/dcraw.cc:9988:7:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
      strcpy (model, "E995");
data/rawtherapee-5.8/rtengine/dcraw.cc:9998:7:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
      strcpy (model,"E2500");
data/rawtherapee-5.8/rtengine/dcraw.cc:10007:28:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
    if (model[0] == 'E' && atoi(model+1) < 3700)
data/rawtherapee-5.8/rtengine/dcraw.cc:10024:7:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
      strcpy (make, "Minolta");
data/rawtherapee-5.8/rtengine/dcraw.cc:10025:7:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
      strcpy (model,"DiMAGE Z2");
data/rawtherapee-5.8/rtengine/dcraw.cc:10034:7:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
      strcpy (make, "ISG");
data/rawtherapee-5.8/rtengine/dcraw.cc:10039:7:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
      strcpy (model,"S2Pro");
data/rawtherapee-5.8/rtengine/dcraw.cc:10157:5:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
    strcpy (model, "WB550");
data/rawtherapee-5.8/rtengine/dcraw.cc:10175:34:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
      if (!strcmp(model, "H3D")) strcpy(model, "H3D-39"); // RT
data/rawtherapee-5.8/rtengine/dcraw.cc:10182:34:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
      if (!strcmp(model, "H4D")) strcpy(model, "H4D-40"); // RT
data/rawtherapee-5.8/rtengine/dcraw.cc:10194:34:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
      if (!strcmp(model, "H3D")) strcpy(model, "H3D-31");
data/rawtherapee-5.8/rtengine/dcraw.cc:10195:34:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
      if (!strcmp(model, "H4D")) strcpy(model, "H4D-31");
data/rawtherapee-5.8/rtengine/dcraw.cc:10201:34:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
      if (!strcmp(model, "H3D")) strcpy(model, "H3DII-50");
data/rawtherapee-5.8/rtengine/dcraw.cc:10202:34:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
      if (!strcmp(model, "H4D")) strcpy(model, "H4D-50");
data/rawtherapee-5.8/rtengine/dcraw.cc:10208:34:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
      if (!strcmp(model, "H5D")) strcpy(model, "H5D-50c");
data/rawtherapee-5.8/rtengine/dcraw.cc:10209:36:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
      if (!strcmp(model, "CFV-2")) strcpy(model, "CFV-50c");
data/rawtherapee-5.8/rtengine/dcraw.cc:10223:34:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
      if (!strcmp(model, "H3D")) strcpy(model, "H3D-22");
data/rawtherapee-5.8/rtengine/dcraw.cc:10225:43:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
      if (strstr(model3, "ixpressCF132")) strcpy(model, "CF-22"); // ixpressCF132 / CF132 is same as CF-22, we use the simpler name
data/rawtherapee-5.8/rtengine/dcraw.cc:10226:48:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
      else if (strstr(model3, "Hasselblad96")) strcpy(model, "CFV"); // popularly called CFV-16
data/rawtherapee-5.8/rtengine/dcraw.cc:10228:7:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
      strcpy (model, "V96C");
data/rawtherapee-5.8/rtengine/dcraw.cc:10254:2:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
	strcpy (cdesc, "RBTG");
data/rawtherapee-5.8/rtengine/dcraw.cc:10255:2:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
	strcpy (model, "CatchLight");
data/rawtherapee-5.8/rtengine/dcraw.cc:10258:2:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
	strcpy (model, "DCB2");
data/rawtherapee-5.8/rtengine/dcraw.cc:10262:22:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
      if (!model[0]) strcpy (model, "Cantare");
data/rawtherapee-5.8/rtengine/dcraw.cc:10273:7:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
      strcpy (model, "Valeo 6");
data/rawtherapee-5.8/rtengine/dcraw.cc:10278:7:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
      strcpy (model, "Valeo 6");
data/rawtherapee-5.8/rtengine/dcraw.cc:10352:5:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
    strcpy (cdesc, "RGBE");
data/rawtherapee-5.8/rtengine/dcraw.cc:10437:7:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
      strcpy (cdesc, "MYCY");
data/rawtherapee-5.8/rtengine/dcraw.cc:10439:7:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
      strcpy (model, "DC25");
data/rawtherapee-5.8/rtengine/dcraw.cc:10460:7:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
      strcpy (model, "DC40");
data/rawtherapee-5.8/rtengine/dcraw.cc:10467:7:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
      strcpy (model, "DC50");
data/rawtherapee-5.8/rtengine/dcraw.cc:10473:7:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
      strcpy (model, "DC120");
data/rawtherapee-5.8/rtengine/dcraw.cc:10495:18:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
    if (head[5]) strcpy (model+10, "200");
data/rawtherapee-5.8/rtengine/dcraw.cc:10524:5:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
    sprintf (model, "%dx%d", width, height);
data/rawtherapee-5.8/rtengine/dcraw.cc:10543:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy (rgb_cam, cmatrix, sizeof cmatrix);
data/rawtherapee-5.8/rtengine/dcraw.cc:10957:11:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
  union { char c[4]; short s[2]; int i; } val;
data/rawtherapee-5.8/rtengine/dcraw.cc:10973:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
  char desc[512], make[64], model[64], soft[32], date[20], artist[64];
data/rawtherapee-5.8/rtengine/dcraw.h:82:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char cdesc[5], desc[512], make[64], model[64], model2[64], model3[64], artist[64];
data/rawtherapee-5.8/rtengine/dcraw.h:234:15:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
      union { char c[4]; short s[2]; int i; } val;
data/rawtherapee-5.8/rtengine/dcraw.h:250:7:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
      char desc[512], make[64], model[64], soft[32], date[20], artist[64];
data/rawtherapee-5.8/rtengine/dcraw.h:547:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char xtransTemp[6][6];
data/rawtherapee-5.8/rtengine/dcrop.cc:1050:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy(final->data + 3 * i * finalW, cropImg->data + 3 * (i + upperBorder)*cropw + 3 * leftBorder, 3 * finalW);
data/rawtherapee-5.8/rtengine/dcrop.cc:1051:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy(finaltrue->data + 3 * i * finalW, cropImgtrue->data + 3 * (i + upperBorder)*cropw + 3 * leftBorder, 3 * finalW);
data/rawtherapee-5.8/rtengine/dfmanager.cc:543:18:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
    FILE *file = fopen( filename.c_str(), "r" );
data/rawtherapee-5.8/rtengine/dfmanager.cc:563:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char line[256];
data/rawtherapee-5.8/rtengine/ffmanager.cc:232:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(ri->data[0], cfatmp, W * H * sizeof(float));
data/rawtherapee-5.8/rtengine/fujicompressed.cc:876:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy (info.linebuf[mtable[i].a], info.linebuf[mtable[i].b], line_size);
data/rawtherapee-5.8/rtengine/gauss.cc:439:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy (dst[i] + 1, temp + 1, (W - 2)*sizeof(T));
data/rawtherapee-5.8/rtengine/gauss.cc:1410:21:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
                    memcpy(dst[i], src[i], W * sizeof(T));
data/rawtherapee-5.8/rtengine/iccjpeg.cc:180:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char marker_present[MAX_SEQ_NO + 1];    /* 1 if marker found */
data/rawtherapee-5.8/rtengine/iccstore.cc:1174:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(&tag_count, p, 4);
data/rawtherapee-5.8/rtengine/iccstore.cc:1189:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(&tags[i], p, 12);
data/rawtherapee-5.8/rtengine/iccstore.cc:1206:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(nd, data, 128 + 4);
data/rawtherapee-5.8/rtengine/iccstore.cc:1208:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(nd, &sz, 4);
data/rawtherapee-5.8/rtengine/iccstore.cc:1223:17:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
                memcpy(&nd[offset], pcurve, 12);
data/rawtherapee-5.8/rtengine/iccstore.cc:1227:17:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
                memcpy(&nd[offset + 12], &gm, 2);
data/rawtherapee-5.8/rtengine/iccstore.cc:1238:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy(&nd[offset], &data[tags[i].offset], tags[i].size);
data/rawtherapee-5.8/rtengine/iccstore.cc:1242:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(&nd[128 + 4 + i * 12], &tag, 12);
data/rawtherapee-5.8/rtengine/iccstore.cc:1296:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(oprof, phead, sizeof(phead));
data/rawtherapee-5.8/rtengine/iccstore.cc:1309:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(oprof + 32, pbody, sizeof(pbody));
data/rawtherapee-5.8/rtengine/iccstore.cc:1312:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy((char *)oprof + pbody[8] + 8, pwhite, sizeof(pwhite));
data/rawtherapee-5.8/rtengine/iccstore.cc:1316:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy((char *)oprof + pbody[i * 3 + 2], pcurve, sizeof(pcurve));
data/rawtherapee-5.8/rtengine/iccstore.cc:1334:5:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
    strcpy((char *)oprof + pbody[2] + 8, "--rawtherapee profile--");
data/rawtherapee-5.8/rtengine/iimage.h:336:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy (dest->v(i), v(i), width * sizeof(T));
data/rawtherapee-5.8/rtengine/iimage.h:743:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy (dest->r(i), r(i), width * sizeof(T));
data/rawtherapee-5.8/rtengine/iimage.h:744:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy (dest->g(i), g(i), width * sizeof(T));
data/rawtherapee-5.8/rtengine/iimage.h:745:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy (dest->b(i), b(i), width * sizeof(T));
data/rawtherapee-5.8/rtengine/iimage.h:1382:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy (dest->data, data, 3 * width * height * sizeof(T));
data/rawtherapee-5.8/rtengine/iimage.h:1565:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy (lineBuffer, lineBegin1, size);
data/rawtherapee-5.8/rtengine/iimage.h:1566:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy (lineBegin1, lineBegin2, size);
data/rawtherapee-5.8/rtengine/iimage.h:1567:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy (lineBegin2, lineBuffer, size);
data/rawtherapee-5.8/rtengine/image8.cc:51:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy (buffer, data + row * width * 3, width * 3);
data/rawtherapee-5.8/rtengine/image8.cc:75:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy (data + (uint64_t)row * (uint64_t)width * (uint64_t)3u, buffer, width * 3);
data/rawtherapee-5.8/rtengine/imagedata.cc:209:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char sXMPRating[64];
data/rawtherapee-5.8/rtengine/imagedata.cc:212:52:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
        rating = rtengine::max(0, rtengine::min(5, atoi(sXMPRating)));
data/rawtherapee-5.8/rtengine/imagedata.cc:271:13:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
            char sXMPVal[64];
data/rawtherapee-5.8/rtengine/imagedata.cc:421:39:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
                            int nom = atoi(ldata.substr(j, i).c_str());
data/rawtherapee-5.8/rtengine/imagedata.cc:429:39:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
                            int den = atoi(ldata.substr(j, i).c_str());
data/rawtherapee-5.8/rtengine/imagedata.cc:605:17:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
                char buffer[60];
data/rawtherapee-5.8/rtengine/imagedata.cc:782:14:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    unsigned char buffer[2100];
data/rawtherapee-5.8/rtengine/imagedata.cc:1220:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char buffer[256];
data/rawtherapee-5.8/rtengine/imagedata.cc:1221:5:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
    sprintf (buffer, "%0.1f", aperture);
data/rawtherapee-5.8/rtengine/imagedata.cc:1228:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char buffer[256];
data/rawtherapee-5.8/rtengine/imagedata.cc:1231:9:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
        sprintf (buffer, "1/%0.0f", 1.0 / shutter);
data/rawtherapee-5.8/rtengine/imagedata.cc:1233:9:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
        sprintf (buffer, "%0.1f", shutter);
data/rawtherapee-5.8/rtengine/imagedata.cc:1242:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char buffer[256];
data/rawtherapee-5.8/rtengine/imagedata.cc:1246:13:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
            sprintf (buffer, "%0.2f", expcomp);
data/rawtherapee-5.8/rtengine/imagedata.cc:1252:9:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
        sprintf (buffer, "%0.2f", expcomp);
data/rawtherapee-5.8/rtengine/imageio.cc:183:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy (profileData, pdata, plen);
data/rawtherapee-5.8/rtengine/imageio.cc:232:14:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    unsigned char header[8];
data/rawtherapee-5.8/rtengine/imageio.cc:310:14:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    unsigned char header[8];
data/rawtherapee-5.8/rtengine/imageio.cc:391:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(loadedProfileData, profdata, proflen);
data/rawtherapee-5.8/rtengine/imageio.cc:855:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy (loadedProfileData, profdata, loadedProfileLength);
data/rawtherapee-5.8/rtengine/imageio.cc:873:17:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
                memcpy (linebuffer + i * 3 * bitspersample / 8, linebuffer + i * samplesperpixel * bitspersample / 8, 3 * bitspersample / 8);
data/rawtherapee-5.8/rtengine/imageio.cc:881:17:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
                memcpy(dest + 2 * bytes, src, bytes);
data/rawtherapee-5.8/rtengine/imageio.cc:882:17:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
                memcpy(dest + 1 * bytes, src, bytes);
data/rawtherapee-5.8/rtengine/imageio.cc:883:17:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
                memcpy(dest + 0 * bytes, src, bytes);
data/rawtherapee-5.8/rtengine/imageio.cc:912:9:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
        char swapped[line_length];
data/rawtherapee-5.8/rtengine/imageio.cc:1540:18:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
        unsigned char b[10];
data/rawtherapee-5.8/rtengine/improcfun.cc:3159:29:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
                            memcpy(clutr, &rtemp[ti * TS], sizeof(float) * TS);
data/rawtherapee-5.8/rtengine/improcfun.cc:3160:29:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
                            memcpy(clutg, &gtemp[ti * TS], sizeof(float) * TS);
data/rawtherapee-5.8/rtengine/improcfun.cc:3161:29:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
                            memcpy(clutb, &btemp[ti * TS], sizeof(float) * TS);
data/rawtherapee-5.8/rtengine/impulse_denoise.cc:47:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char * impish[height] ALIGNED16;
data/rawtherapee-5.8/rtengine/iplab2rgb.cc:47:56:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
inline void copyAndClamp(const LabImage *src, unsigned char *dst, const double rgb_xyz[3][3], bool multiThread)
data/rawtherapee-5.8/rtengine/ipwavelet.cc:711:25:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
                        memcpy(LoldBuffer, lab->L[0], tilewidth * tileheight * sizeof(float));
data/rawtherapee-5.8/rtengine/ipwavelet.cc:824:25:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
                        memcpy(varhue[i], temphue, ((tilewidth + 1) / 2) * sizeof(float));
data/rawtherapee-5.8/rtengine/jdatasrc.cc:281:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char buffer[JMSG_LENGTH_MAX];
data/rawtherapee-5.8/rtengine/klt/pnmio.cc:52:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
  char line[LENGTH];
data/rawtherapee-5.8/rtengine/klt/pnmio.cc:65:12:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
  *ncols = atoi(line);
data/rawtherapee-5.8/rtengine/klt/pnmio.cc:67:12:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
  *nrows = atoi(line);
data/rawtherapee-5.8/rtengine/klt/pnmio.cc:76:13:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
  *maxval = atoi(line);
data/rawtherapee-5.8/rtengine/klt/pnmio.cc:133:14:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
  if ( (fp = fopen(fname, "rb")) == nullptr) {
data/rawtherapee-5.8/rtengine/klt/pnmio.cc:159:14:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
  if ( (fp = fopen(fname, "rb")) == nullptr) {
data/rawtherapee-5.8/rtengine/klt/pnmio.cc:229:14:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
  if ( (fp = fopen(fname, "rb")) == nullptr) {
data/rawtherapee-5.8/rtengine/klt/pnmio.cc:282:14:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
  if ( (fp = fopen(fname, "wb")) == nullptr) {
data/rawtherapee-5.8/rtengine/klt/pnmio.cc:341:14:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
  if ( (fp = fopen(fname, "wb")) == nullptr) {
data/rawtherapee-5.8/rtengine/klt/pyramid.cc:115:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
  memcpy(pyramid->img[0]->data, img->data, ncols*nrows*sizeof(float));
data/rawtherapee-5.8/rtengine/klt/trackFeatures.cc:1006:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
  char fname[80];
data/rawtherapee-5.8/rtengine/klt/trackFeatures.cc:1047:7:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
      sprintf(fname, "./debug/kltimg_trans_diff_win%03d.%03d.pgm", glob_index, counter);
data/rawtherapee-5.8/rtengine/klt/trackFeatures.cc:1098:7:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
      sprintf(fname, "./debug/kltimg_aff_diff_win%03d.%03d_1.pgm", glob_index, counter);
data/rawtherapee-5.8/rtengine/klt/trackFeatures.cc:1104:7:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
      sprintf(fname, "./debug/kltimg_aff_diff_win%03d.%03d_2.pgm", glob_index, counter);
data/rawtherapee-5.8/rtengine/klt/trackFeatures.cc:1113:7:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
      sprintf(fname, "./debug/kltimg_aff_diff_win%03d.%03d_3.pgm", glob_index,counter);
data/rawtherapee-5.8/rtengine/klt/trackFeatures.cc:1336:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char fname[80];
data/rawtherapee-5.8/rtengine/klt/trackFeatures.cc:1338:4:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
			sprintf(fname, "kltimg_tf_i%d.pgm", i);
data/rawtherapee-5.8/rtengine/klt/trackFeatures.cc:1340:4:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
			sprintf(fname, "kltimg_tf_i%d_gx.pgm", i);
data/rawtherapee-5.8/rtengine/klt/trackFeatures.cc:1342:4:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
			sprintf(fname, "kltimg_tf_i%d_gy.pgm", i);
data/rawtherapee-5.8/rtengine/klt/trackFeatures.cc:1344:4:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
			sprintf(fname, "kltimg_tf_j%d.pgm", i);
data/rawtherapee-5.8/rtengine/klt/trackFeatures.cc:1346:4:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
			sprintf(fname, "kltimg_tf_j%d_gx.pgm", i);
data/rawtherapee-5.8/rtengine/klt/trackFeatures.cc:1348:4:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
			sprintf(fname, "kltimg_tf_j%d_gy.pgm", i);
data/rawtherapee-5.8/rtengine/klt/writeFeatures.cc:30:8:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
static char binheader_fl[BINHEADERLENGTH+1] = "KLTFL1";
data/rawtherapee-5.8/rtengine/klt/writeFeatures.cc:31:8:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
static char binheader_fh[BINHEADERLENGTH+1] = "KLTFH1";
data/rawtherapee-5.8/rtengine/klt/writeFeatures.cc:32:8:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
static char binheader_ft[BINHEADERLENGTH+1] = "KLTFT1";
data/rawtherapee-5.8/rtengine/klt/writeFeatures.cc:67:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
  memcpy(redimg, greyimg, nbytes);
data/rawtherapee-5.8/rtengine/klt/writeFeatures.cc:68:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
  memcpy(grnimg, greyimg, nbytes);
data/rawtherapee-5.8/rtengine/klt/writeFeatures.cc:69:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
  memcpy(bluimg, greyimg, nbytes);
data/rawtherapee-5.8/rtengine/klt/writeFeatures.cc:108:14:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
  else  fp = fopen(fname, "wb");
data/rawtherapee-5.8/rtengine/klt/writeFeatures.cc:141:8:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
  fp = fopen(fname, "wb");
data/rawtherapee-5.8/rtengine/klt/writeFeatures.cc:165:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
  char fmt[80];
data/rawtherapee-5.8/rtengine/klt/writeFeatures.cc:166:3:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
  sprintf(fmt, "%%%dd", width);
data/rawtherapee-5.8/rtengine/klt/writeFeatures.cc:350:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
  char format[100];
data/rawtherapee-5.8/rtengine/klt/writeFeatures.cc:388:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
  char format[100];
data/rawtherapee-5.8/rtengine/klt/writeFeatures.cc:427:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
  char format[100];
data/rawtherapee-5.8/rtengine/klt/writeFeatures.cc:471:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
  char line[LINELENGTH];
data/rawtherapee-5.8/rtengine/klt/writeFeatures.cc:629:8:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
  fp = fopen(fname, "rb");
data/rawtherapee-5.8/rtengine/klt/writeFeatures.cc:692:8:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
  fp = fopen(fname, "rb");
data/rawtherapee-5.8/rtengine/klt/writeFeatures.cc:755:8:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
  fp = fopen(fname, "rb");
data/rawtherapee-5.8/rtengine/labimage.cc:39:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(data, Img->data, W * H * 3 * sizeof(float));
data/rawtherapee-5.8/rtengine/lcp.cc:250:9:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
        char buf[BufferSize];
data/rawtherapee-5.8/rtengine/lcp.cc:953:9:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
        char pathA[MAX_PATH];
data/rawtherapee-5.8/rtengine/lcp.h:140:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char lastTag[257];
data/rawtherapee-5.8/rtengine/lcp.h:141:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char inInvalidTag[257];
data/rawtherapee-5.8/rtengine/myfile.cc:73:9:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
IMFILE* fopen (const char* fname)
data/rawtherapee-5.8/rtengine/myfile.cc:128:12:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
    return fopen(fname);
data/rawtherapee-5.8/rtengine/myfile.cc:132:9:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
IMFILE* fopen (const char* fname)
data/rawtherapee-5.8/rtengine/myfile.cc:179:9:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
IMFILE* fopen (unsigned* buf, int size)
data/rawtherapee-5.8/rtengine/myfile.cc:187:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy ((void*)mf->data, buf, size);
data/rawtherapee-5.8/rtengine/myfile.cc:216:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char buf[51], *endptr = nullptr;
data/rawtherapee-5.8/rtengine/myfile.cc:223:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(buf, &f->data[f->pos], copy_sz);
data/rawtherapee-5.8/rtengine/myfile.h:55:9:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
IMFILE* fopen (const char* fname);
data/rawtherapee-5.8/rtengine/myfile.h:57:9:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
IMFILE* fopen (unsigned* buf, int size);
data/rawtherapee-5.8/rtengine/myfile.h:117:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy (dst, f->data + f->pos, s);
data/rawtherapee-5.8/rtengine/myfile.h:130:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy (dst, f->data + f->pos, avail);
data/rawtherapee-5.8/rtengine/procparams.cc:3841:21:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
                    memcpy(chmixer.red,   rmix.data(), 3 * sizeof(int));
data/rawtherapee-5.8/rtengine/procparams.cc:3842:21:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
                    memcpy(chmixer.green, gmix.data(), 3 * sizeof(int));
data/rawtherapee-5.8/rtengine/procparams.cc:3843:21:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
                    memcpy(chmixer.blue,  bmix.data(), 3 * sizeof(int));
data/rawtherapee-5.8/rtengine/rawflatfield.cc:36:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(cfablur, riFlatFile[0], static_cast<unsigned long>(W) * H * sizeof(float));
data/rawtherapee-5.8/rtengine/rawimage.cc:1128:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char name[strlen(make) + strlen(model) + 32];
data/rawtherapee-5.8/rtengine/rawimagesource.cc:2897:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char copyright[256];
data/rawtherapee-5.8/rtengine/rawimagesource.cc:3057:13:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
            char copyright[256] = "";
data/rawtherapee-5.8/rtengine/rawimagesource.cc:3058:13:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
            char description[256] = "";
data/rawtherapee-5.8/rtengine/rtthumbnail.cc:219:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy (tpp->embProfileData, data, tpp->embProfileLength);
data/rawtherapee-5.8/rtengine/rtthumbnail.cc:1974:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char imgType[31];  // 30 -> arbitrary size, but should be enough for all image type's name
data/rawtherapee-5.8/rtengine/utils.cc:186:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(img, rotated, 3 * w * h);
data/rawtherapee-5.8/rtengine/utils.cc:203:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(img, flipped, 3 * w * h);
data/rawtherapee-5.8/rtengine/utils.cc:221:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(img, flipped, 3 * w * h);
data/rawtherapee-5.8/rtengine/xtrans_demosaic.cc:414:21:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
                    memcpy (rgb[c + 1], rgb[0], sizeof * rgb);
data/rawtherapee-5.8/rtengine/xtrans_demosaic.cc:475:25:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
                        memcpy (rgb += 4, buffer, 4 * sizeof * rgb);
data/rawtherapee-5.8/rtexif/canonattribs.cc:68:9:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
        char buffer[32];
data/rawtherapee-5.8/rtexif/canonattribs.cc:75:9:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
        sprintf (buffer, "%.1f", v );
data/rawtherapee-5.8/rtexif/canonattribs.cc:103:9:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
        char buffer[32];
data/rawtherapee-5.8/rtexif/canonattribs.cc:546:9:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
        char buffer[32];
data/rawtherapee-5.8/rtexif/canonattribs.cc:547:9:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
        sprintf (buffer, "%.1f", v );
data/rawtherapee-5.8/rtexif/canonattribs.cc:1177:9:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
        char buffer[32];
data/rawtherapee-5.8/rtexif/canonattribs.cc:1178:9:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
        sprintf (buffer, "%.2fmm", val * 25.4 / 1000);
data/rawtherapee-5.8/rtexif/canonattribs.cc:1189:9:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
        char buffer[32];
data/rawtherapee-5.8/rtexif/canonattribs.cc:1191:9:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
        sprintf (buffer, "%.3f", d);
data/rawtherapee-5.8/rtexif/canonattribs.cc:1201:9:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
        char buffer[32];
data/rawtherapee-5.8/rtexif/canonattribs.cc:1202:9:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
        sprintf (buffer, "%.1f", t->toDouble() / 32.0  );
data/rawtherapee-5.8/rtexif/canonattribs.cc:1213:9:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
        char buffer[32];
data/rawtherapee-5.8/rtexif/canonattribs.cc:1215:9:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
        sprintf (buffer, "%d", a);
data/rawtherapee-5.8/rtexif/canonattribs.cc:1356:9:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
        char buffer[32];
data/rawtherapee-5.8/rtexif/canonattribs.cc:1357:9:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
        sprintf (buffer, "%.0f", n / 32. );
data/rawtherapee-5.8/rtexif/canonattribs.cc:1411:9:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
        char buffer[32];
data/rawtherapee-5.8/rtexif/canonattribs.cc:1412:9:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
        sprintf (buffer, "%.2f", t->toDouble() / 100 );
data/rawtherapee-5.8/rtexif/canonattribs.cc:1423:9:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
        char buffer[32];
data/rawtherapee-5.8/rtexif/canonattribs.cc:1424:9:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
        sprintf (buffer, "%.1f", t->toDouble() / 8 - 6 );
data/rawtherapee-5.8/rtexif/canonattribs.cc:1559:9:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
        char buffer[32];
data/rawtherapee-5.8/rtexif/canonattribs.cc:1560:9:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
        sprintf (buffer, "%ld", ((val & 0xffc0) >> 6) * 10000 + ((val >> 16) & 0xff) + ((val & 0x3f) << 8) );
data/rawtherapee-5.8/rtexif/kodakattribs.cc:94:25:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
            t->initInt (atoi (val.c_str()), SHORT);
data/rawtherapee-5.8/rtexif/kodakattribs.cc:101:21:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
                a = atoi (val.c_str());
data/rawtherapee-5.8/rtexif/kodakattribs.cc:104:21:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
                a = atoi (val.c_str());
data/rawtherapee-5.8/rtexif/kodakattribs.cc:105:21:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
                b = atoi (&p1[1]);
data/rawtherapee-5.8/rtexif/nikonattribs.cc:39:9:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
        char buffer[32];
data/rawtherapee-5.8/rtexif/nikonattribs.cc:40:9:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
        sprintf (buffer, "%d", t->toInt (2));
data/rawtherapee-5.8/rtexif/nikonattribs.cc:52:9:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
        char buffer[32];
data/rawtherapee-5.8/rtexif/nikonattribs.cc:54:9:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
        sprintf (buffer, "%d", a);
data/rawtherapee-5.8/rtexif/nikonattribs.cc:132:17:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
                char buffer[32];
data/rawtherapee-5.8/rtexif/nikonattribs.cc:133:17:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
                sprintf (buffer, "0x%04X", a);
data/rawtherapee-5.8/rtexif/nikonattribs.cc:285:31:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
        static const unsigned char xlat[2][256] = {
data/rawtherapee-5.8/rtexif/nikonattribs.cc:351:18:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
        unsigned char buffer[16];
data/rawtherapee-5.8/rtexif/nikonattribs.cc:354:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy (buffer, t->getValue() + 6, 7);
data/rawtherapee-5.8/rtexif/nikonattribs.cc:356:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy (buffer, t->getValue() + 4, 16);
data/rawtherapee-5.8/rtexif/pentaxattribs.cc:420:9:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
        char buffer[32];
data/rawtherapee-5.8/rtexif/pentaxattribs.cc:427:9:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
        sprintf (buffer, "%.1f", v );
data/rawtherapee-5.8/rtexif/pentaxattribs.cc:630:13:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
            char buffer[1024];
data/rawtherapee-5.8/rtexif/pentaxattribs.cc:1299:9:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
        char buffer[31];
data/rawtherapee-5.8/rtexif/pentaxattribs.cc:1317:9:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
        char buffer[21];
data/rawtherapee-5.8/rtexif/pentaxattribs.cc:1343:9:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
        char buffer[32];
data/rawtherapee-5.8/rtexif/pentaxattribs.cc:1344:9:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
        sprintf (buffer, "%d", a );
data/rawtherapee-5.8/rtexif/pentaxattribs.cc:1371:13:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
            char buffer[32];
data/rawtherapee-5.8/rtexif/pentaxattribs.cc:1372:13:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
            sprintf (buffer, "%.2f", a / 100. );
data/rawtherapee-5.8/rtexif/pentaxattribs.cc:1401:13:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
            char buffer[32];
data/rawtherapee-5.8/rtexif/pentaxattribs.cc:1402:13:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
            sprintf (buffer, "%.2f", b );
data/rawtherapee-5.8/rtexif/pentaxattribs.cc:1429:9:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
        char buffer[32];
data/rawtherapee-5.8/rtexif/pentaxattribs.cc:1431:9:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
        sprintf (buffer, "%.1f", v );
data/rawtherapee-5.8/rtexif/pentaxattribs.cc:1452:13:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
            char buffer[32];
data/rawtherapee-5.8/rtexif/pentaxattribs.cc:1459:13:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
            sprintf (buffer, "%.1f", v );
data/rawtherapee-5.8/rtexif/pentaxattribs.cc:1486:9:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
        char buffer[32];
data/rawtherapee-5.8/rtexif/pentaxattribs.cc:1488:9:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
        sprintf (buffer, "%.1f", v );
data/rawtherapee-5.8/rtexif/pentaxattribs.cc:1506:9:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
        char buffer[32];
data/rawtherapee-5.8/rtexif/pentaxattribs.cc:1508:9:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
        sprintf (buffer, "%.1f", v );
data/rawtherapee-5.8/rtexif/pentaxattribs.cc:1526:9:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
        char buffer[32];
data/rawtherapee-5.8/rtexif/pentaxattribs.cc:1528:9:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
        sprintf (buffer, "%.1f", v );
data/rawtherapee-5.8/rtexif/pentaxattribs.cc:1546:9:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
        char buffer[32];
data/rawtherapee-5.8/rtexif/pentaxattribs.cc:1548:9:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
        sprintf (buffer, "%.6f", v );
data/rawtherapee-5.8/rtexif/pentaxattribs.cc:1565:9:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
        char buffer[32];
data/rawtherapee-5.8/rtexif/pentaxattribs.cc:1568:9:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
        sprintf (buffer, "%.1f", double (int (pow (2.0, double (mina + 10) / 4.0) + 0.2)));
data/rawtherapee-5.8/rtexif/pentaxattribs.cc:1585:9:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
        char buffer[32];
data/rawtherapee-5.8/rtexif/pentaxattribs.cc:1588:9:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
        sprintf (buffer, "%.1f", double (int (pow (2.0, double (maxa) / 4.0) + 0.2)) );
data/rawtherapee-5.8/rtexif/pentaxattribs.cc:1703:9:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
        char buffer[32];
data/rawtherapee-5.8/rtexif/pentaxattribs.cc:1705:9:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
        sprintf (buffer, "%.0f", pow (2., b / 16. + 4) );
data/rawtherapee-5.8/rtexif/pentaxattribs.cc:1790:13:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
            char buffer[1024];
data/rawtherapee-5.8/rtexif/rtexif.cc:204:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char prefixStr[level * 4 + 1];
data/rawtherapee-5.8/rtexif/rtexif.cc:835:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy (values, v, valuesSize);
data/rawtherapee-5.8/rtexif/rtexif.cc:882:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy (buffer + start, values, valuesSize);
data/rawtherapee-5.8/rtexif/rtexif.cc:938:9:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
        char buffer[buffersize], *p = buffer;
data/rawtherapee-5.8/rtexif/rtexif.cc:1014:9:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
        char make[128], model[128];
data/rawtherapee-5.8/rtexif/rtexif.cc:1400:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy (t->value, value, valuesize);
data/rawtherapee-5.8/rtexif/rtexif.cc:1503:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy ((char*)value, v, valuesize);
data/rawtherapee-5.8/rtexif/rtexif.cc:1700:9:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
        sprintf (buffer, "%.64s", value + ofs);
data/rawtherapee-5.8/rtexif/rtexif.cc:1710:13:  [2] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused). Risk is low because the
  source is a constant string.
            strcat (buffer, ", ");
data/rawtherapee-5.8/rtexif/rtexif.cc:1718:17:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
                sprintf (b, "%d", value[i + ofs]);
data/rawtherapee-5.8/rtexif/rtexif.cc:1722:17:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
                sprintf (b, "%d", toInt (2 * i + ofs));
data/rawtherapee-5.8/rtexif/rtexif.cc:1726:17:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
                sprintf (b, "%u", toInt (2 * i + ofs));
data/rawtherapee-5.8/rtexif/rtexif.cc:1730:17:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
                sprintf (b, "%d", toInt (4 * i + ofs));
data/rawtherapee-5.8/rtexif/rtexif.cc:1734:17:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
                sprintf (b, "%u", toInt (4 * i + ofs));
data/rawtherapee-5.8/rtexif/rtexif.cc:1739:17:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
                sprintf (b, "%d/%d", (int)sget4 (value + 8 * i + ofs, getOrder()), (int)sget4 (value + 8 * i + ofs + 4, getOrder()));
data/rawtherapee-5.8/rtexif/rtexif.cc:1743:17:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
                sprintf (b, "%g", toDouble (8 * i + ofs));
data/rawtherapee-5.8/rtexif/rtexif.cc:1752:9:  [2] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused). Risk is low because the
  source is a constant string.
        strcat (buffer, "...");
data/rawtherapee-5.8/rtexif/rtexif.cc:1759:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char buffer[1025];
data/rawtherapee-5.8/rtexif/rtexif.cc:1764:9:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
        sprintf (buffer, "0x%x", tag);
data/rawtherapee-5.8/rtexif/rtexif.cc:1768:9:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
        sprintf (buffer + strlen (buffer) - 1, "[%d]", i);
data/rawtherapee-5.8/rtexif/rtexif.cc:1780:9:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
        char buffer[1024];
data/rawtherapee-5.8/rtexif/rtexif.cc:1854:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy (buffer + dataOffs, value, valuesize);
data/rawtherapee-5.8/rtexif/rtexif.cc:1862:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy (buffer + offs, value, valuesize);
data/rawtherapee-5.8/rtexif/rtexif.cc:1868:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy (buffer + dataOffs, value, 18);
data/rawtherapee-5.8/rtexif/rtexif.cc:1874:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy (buffer + dataOffs, value, valuesize);
data/rawtherapee-5.8/rtexif/rtexif.cc:1879:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy (buffer + dataOffs, value, valuesize);
data/rawtherapee-5.8/rtexif/rtexif.cc:1941:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy ((char*)value, data, valuesize);
data/rawtherapee-5.8/rtexif/rtexif.cc:1985:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(value, "ASCII\0\0\0", 8);
data/rawtherapee-5.8/rtexif/rtexif.cc:1986:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(value + 8, text.c_str(), valuesize - 8);
data/rawtherapee-5.8/rtexif/rtexif.cc:1992:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(value, "UNICODE\0", 8);
data/rawtherapee-5.8/rtexif/rtexif.cc:2009:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(value + 8 + (useBOM ? 2 : 0), (char*)commentStr, wcStrSize * 2);
data/rawtherapee-5.8/rtexif/rtexif.cc:2066:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy (value, data, len);
data/rawtherapee-5.8/rtexif/rtexif.cc:2075:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy (value, data, len);
data/rawtherapee-5.8/rtexif/rtexif.cc:2154:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char buffer[1024];
data/rawtherapee-5.8/rtexif/rtexif.cc:2497:46:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
            iso_speed = 25 * (1 << std::max((atoi (val) - 1), 0));
data/rawtherapee-5.8/rtexif/rtexif.cc:2500:30:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
            rotation_angle = atoi (val);
data/rawtherapee-5.8/rtexif/rtexif.cc:2745:37:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
                        t->initInt (atoi (p1), LONG);
data/rawtherapee-5.8/rtexif/rtexif.cc:2755:21:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
                    char tstr[64];
data/rawtherapee-5.8/rtexif/rtexif.cc:2756:21:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
                    sprintf (tstr, "%04d:%02d:%02d %02d:%02d:%02d", tm.tm_year, tm.tm_mon,
data/rawtherapee-5.8/rtexif/rtexif.cc:2826:40:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
                        niso->initInt (atoi (isov.c_str()), SHORT);
data/rawtherapee-5.8/rtexif/rtexif.cc:2836:36:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
                    niso->initInt (atoi (isov.c_str()), SHORT);
data/rawtherapee-5.8/rtexif/rtexif.cc:3156:13:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
            char idbuff[8];
data/rawtherapee-5.8/rtexif/rtexif.cc:3230:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy (buffer, "Exif\0\0", 6);
data/rawtherapee-5.8/rtexif/rtexif.cc:3377:14:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    unsigned char str[2] = { 0xff, 0xff };
data/rawtherapee-5.8/rtexif/rtexif.cc:3385:14:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    unsigned char str[4] = { 0xff, 0xff, 0xff, 0xff };
data/rawtherapee-5.8/rtexif/rtexif.cc:3459:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char buffer[1025];
data/rawtherapee-5.8/rtexif/rtexif.h:394:9:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
        char buffer[1024];
data/rawtherapee-5.8/rtexif/rtexif.h:408:25:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
            t->fromInt (atoi (value.c_str()));
data/rawtherapee-5.8/rtexif/rtexif.h:520:13:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
            char buffer[1024];
data/rawtherapee-5.8/rtexif/sonyminoltaattribs.cc:1975:13:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
            char buffer[32];
data/rawtherapee-5.8/rtexif/sonyminoltaattribs.cc:1976:13:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
            sprintf (buffer, "%.4f", a);
data/rawtherapee-5.8/rtexif/sonyminoltaattribs.cc:2035:13:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
            char buffer[32];
data/rawtherapee-5.8/rtexif/sonyminoltaattribs.cc:2036:13:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
            sprintf (buffer, "%.1f", a / 100. );
data/rawtherapee-5.8/rtexif/sonyminoltaattribs.cc:2095:13:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
            char buffer[32];
data/rawtherapee-5.8/rtexif/sonyminoltaattribs.cc:2096:13:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
            sprintf (buffer, "%d", a );
data/rawtherapee-5.8/rtexif/sonyminoltaattribs.cc:2134:9:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
        char buffer[32];
data/rawtherapee-5.8/rtexif/sonyminoltaattribs.cc:2135:9:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
        sprintf (buffer, "%.2f", a );
data/rawtherapee-5.8/rtexif/sonyminoltaattribs.cc:2154:9:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
        char buffer[32];
data/rawtherapee-5.8/rtexif/sonyminoltaattribs.cc:2155:9:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
        sprintf (buffer, "%d", t->getValue()[0] - 20);
data/rawtherapee-5.8/rtexif/sonyminoltaattribs.cc:2193:9:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
        char buffer[32];
data/rawtherapee-5.8/rtexif/sonyminoltaattribs.cc:2194:9:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
        sprintf (buffer, "%d", t->getValue()[0] & 0x7f);
data/rawtherapee-5.8/rtexif/sonyminoltaattribs.cc:2249:9:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
        char buffer[32];
data/rawtherapee-5.8/rtexif/sonyminoltaattribs.cc:2250:9:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
        sprintf (buffer, "%d", t->toInt());
data/rawtherapee-5.8/rtexif/stdattribs.cc:332:9:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
        char buffer[32];
data/rawtherapee-5.8/rtexif/stdattribs.cc:339:9:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
        sprintf (buffer, "%0.1f", v);
data/rawtherapee-5.8/rtexif/stdattribs.cc:351:9:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
        char buffer[32];
data/rawtherapee-5.8/rtexif/stdattribs.cc:358:9:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
        sprintf (buffer, "%.1f", v );
data/rawtherapee-5.8/rtexif/stdattribs.cc:370:9:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
        char buffer[32];
data/rawtherapee-5.8/rtexif/stdattribs.cc:377:9:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
        sprintf (buffer, "%+0.2f", v );
data/rawtherapee-5.8/rtexif/stdattribs.cc:389:9:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
        char buffer[32];
data/rawtherapee-5.8/rtexif/stdattribs.cc:393:13:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
            sprintf (buffer, "1/%.0f", 1.0 / d);
data/rawtherapee-5.8/rtexif/stdattribs.cc:395:13:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
            sprintf (buffer, "%.1f", d);
data/rawtherapee-5.8/rtexif/stdattribs.cc:409:9:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
        char buffer[32];
data/rawtherapee-5.8/rtexif/stdattribs.cc:413:13:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
            sprintf (buffer, "1/%.0f", 1.0 / d);
data/rawtherapee-5.8/rtexif/stdattribs.cc:415:13:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
            sprintf (buffer, "%.1f", d);
data/rawtherapee-5.8/rtexif/stdattribs.cc:429:9:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
        char buffer[32];
data/rawtherapee-5.8/rtexif/stdattribs.cc:436:9:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
        sprintf (buffer, "%.1f", v );
data/rawtherapee-5.8/rtexif/stdattribs.cc:459:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy(buffer, value + 8, count - 8);
data/rawtherapee-5.8/rtexif/stdattribs.cc:462:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy(buffer, value + 8, count - 8);
data/rawtherapee-5.8/rtexif/stdattribs.cc:536:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy(buffer, utf8Str, written);
data/rawtherapee-5.8/rtexif/stdattribs.cc:541:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy(buffer, value + 8, count - 8);
data/rawtherapee-5.8/rtexif/stdattribs.cc:581:9:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
        char buffer[1024];
data/rawtherapee-5.8/rtexif/stdattribs.cc:641:9:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
        char buffer[32];
data/rawtherapee-5.8/rtexif/stdattribs.cc:642:9:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
        sprintf (buffer, "%d %d %d", segmentNumber, segmentWidth, lastSegmentWidth);
data/rawtherapee-5.8/rtgui/batchqueue.cc:392:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char mseconds[11];
data/rawtherapee-5.8/rtgui/batchqueue.cc:393:5:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
    sprintf(mseconds, "%d", (int)(tv.tv_usec / 1000));
data/rawtherapee-5.8/rtgui/batchqueue.cc:396:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char stringTimestamp [80];
data/rawtherapee-5.8/rtgui/batchqueue.h:116:20:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
    Gtk::MenuItem* open;
data/rawtherapee-5.8/rtgui/batchqueueentry.cc:266:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy (preview, img, prew * preh * 3);
data/rawtherapee-5.8/rtgui/bqentryupdater.cc:148:17:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
                memcpy(current.oimg, img->getData(), prevw * prevh * 3);
data/rawtherapee-5.8/rtgui/cropwindow.cc:124:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char lbl[64];
data/rawtherapee-5.8/rtgui/cropwindow.cc:127:9:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
        sprintf(lbl, "% 2d%%", int(z * 100));
data/rawtherapee-5.8/rtgui/cropwindow.cc:133:9:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
        sprintf(lbl, "%d00%%", s);
data/rawtherapee-5.8/rtgui/dirbrowser.cc:167:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char volume[4];
data/rawtherapee-5.8/rtgui/dirbrowser.cc:169:5:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
    strcpy (volume + 1, ":\\");
data/rawtherapee-5.8/rtgui/dirbrowser.cc:452:18:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
void DirBrowser::open (const Glib::ustring& dirname, const Glib::ustring& fileName)
data/rawtherapee-5.8/rtgui/dirbrowser.cc:491:5:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
    open (dir, "");
data/rawtherapee-5.8/rtgui/dirbrowser.h:99:10:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
    void open           (const Glib::ustring& dirName, const Glib::ustring& fileName = ""); // goes to dir "dirName" and selects file "fileName"
data/rawtherapee-5.8/rtgui/editorpanel.cc:72:13:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
            char profileName[MAX_PATH + 1];
data/rawtherapee-5.8/rtgui/editorpanel.cc:989:19:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
void EditorPanel::open (Thumbnail* tmb, rtengine::InitialImage* isrc)
data/rawtherapee-5.8/rtgui/editorpanel.h:64:10:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
    void open (Thumbnail* tmb, rtengine::InitialImage* isrc);
data/rawtherapee-5.8/rtgui/extprog.cc:121:9:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
        char pathA[MAX_PATH];
data/rawtherapee-5.8/rtgui/filebrowser.cc:416:104:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
    open->signal_activate().connect (sigc::bind(sigc::mem_fun(*this, &FileBrowser::menuItemActivated), open));
data/rawtherapee-5.8/rtgui/filebrowser.cc:751:14:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
    if (m == open) {
data/rawtherapee-5.8/rtgui/filebrowser.h:83:20:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
    Gtk::MenuItem* open;
data/rawtherapee-5.8/rtgui/filebrowserentry.cc:270:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(preview, img->getData(), prew * preh * 3);
data/rawtherapee-5.8/rtgui/filepanel.cc:210:21:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
        dirBrowser->open(d);
data/rawtherapee-5.8/rtgui/filepanel.cc:213:25:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
            dirBrowser->open (PlacesBrowser::userPicturesDir ());
data/rawtherapee-5.8/rtgui/filepanel.cc:215:25:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
            dirBrowser->open (argv0);
data/rawtherapee-5.8/rtgui/filepanel.cc:218:29:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
                dirBrowser->open (options.startupPath);
data/rawtherapee-5.8/rtgui/filepanel.cc:221:29:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
                dirBrowser->open (PlacesBrowser::userPicturesDir ());
data/rawtherapee-5.8/rtgui/filepanel.cc:319:25:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
                epanel->open(pl->thm, pl->pc->returnValue() );
data/rawtherapee-5.8/rtgui/filepanel.cc:329:33:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
                parent->epanel->open(pl->thm, pl->pc->returnValue() );
data/rawtherapee-5.8/rtgui/filepanel.cc:376:17:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
void FilePanel::open (const Glib::ustring& d)
data/rawtherapee-5.8/rtgui/filepanel.cc:380:21:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
        dirBrowser->open (d.c_str());
data/rawtherapee-5.8/rtgui/filepanel.cc:382:21:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
        dirBrowser->open (Glib::path_get_dirname(d), Glib::path_get_basename(d));
data/rawtherapee-5.8/rtgui/filepanel.h:66:10:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
    void open (const Glib::ustring& d); // open a file or a directory
data/rawtherapee-5.8/rtgui/filterpanel.cc:324:23:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
    efs.isoFrom     = atoi (isoFrom->get_text().c_str());
data/rawtherapee-5.8/rtgui/filterpanel.cc:325:23:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
    efs.isoTo       = atoi (isoTo->get_text().c_str());
data/rawtherapee-5.8/rtgui/icmpanel.cc:430:17:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
                char tempstr1[64], tempstr2[64];
data/rawtherapee-5.8/rtgui/icmpanel.cc:431:17:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
                sprintf(tempstr1, "%.0fK", illuminants.temperature_1);
data/rawtherapee-5.8/rtgui/icmpanel.cc:432:17:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
                sprintf(tempstr2, "%.0fK", illuminants.temperature_2);
data/rawtherapee-5.8/rtgui/main-cli.cc:115:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char exname[512] = {0};
data/rawtherapee-5.8/rtgui/main-cli.cc:374:39:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
                        subsampling = atoi (currParam.substr (3).c_str());
data/rawtherapee-5.8/rtgui/main-cli.cc:386:43:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
                            compression = atoi (currParam.substr (2).c_str());
data/rawtherapee-5.8/rtgui/main-cli.cc:399:28:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
                    bits = atoi (currParam.substr (2).c_str());
data/rawtherapee-5.8/rtgui/main.cc:390:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char exname[512] = {0};
data/rawtherapee-5.8/rtgui/main.cc:460:21:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
                    char consoletitle[128];
data/rawtherapee-5.8/rtgui/main.cc:550:9:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
        char *app_argv[2] = { const_cast<char *> (argv0.c_str()) };
data/rawtherapee-5.8/rtgui/multilangmgr.cc:215:5:  [2] (buffer) TCHAR:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    TCHAR localeName[18];
data/rawtherapee-5.8/rtgui/options.cc:2287:13:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
            char pathA[MAX_PATH];
data/rawtherapee-5.8/rtgui/placesbrowser.cc:362:9:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
        char pathA[MAX_PATH];
data/rawtherapee-5.8/rtgui/placesbrowser.cc:387:9:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
        char pathA[MAX_PATH];
data/rawtherapee-5.8/rtgui/rtwindow.cc:321:21:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
            epanel->open ( thm, ii );
data/rawtherapee-5.8/rtgui/whitebalance.cc:778:12:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
    return atoi(spotsize->get_active_text().c_str());
data/rawtherapee-5.8/tools/gimp-plugin/file-rawtherapee.c:324:30:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
  FILE   *thumb_pp3_f      = fopen (thumb_pp3, "w");
data/rawtherapee-5.8/rtengine/cJSON.c:160:14:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    length = strlen((const char*)string) + sizeof("");
data/rawtherapee-5.8/rtengine/cJSON.c:469:23:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    buffer->offset += strlen((const char*)buffer_pointer);
data/rawtherapee-5.8/rtengine/cJSON.c:1014:21:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    buffer.length = strlen((const char*)value) + sizeof("");
data/rawtherapee-5.8/rtengine/cJSON.c:1315:26:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
            raw_length = strlen(item->valuestring) + sizeof("");
data/rawtherapee-5.8/rtengine/camconst.cc:706:9:  [1] (buffer) strncpy:
  Easily used incorrectly; doesn't always \0-terminate or check for invalid
  pointers [MS-banned] (CWE-120).
        strncpy(str, ep, sizeof(str));
data/rawtherapee-5.8/rtengine/canon_cr3_decoder.cc:66:5:  [1] (buffer) strncpy:
  Easily used incorrectly; doesn't always \0-terminate or check for invalid
  pointers [MS-banned] (CWE-120). Risk is low because the source is a
  constant string.
    strncpy(make, "Canon", sizeof(make));
data/rawtherapee-5.8/rtengine/canon_cr3_decoder.cc:318:5:  [1] (buffer) strncpy:
  Easily used incorrectly; doesn't always \0-terminate or check for invalid
  pointers [MS-banned] (CWE-120).
    strncpy(HandlerType, sHandlerType[0], sizeof(HandlerType));
data/rawtherapee-5.8/rtengine/canon_cr3_decoder.cc:348:58:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
            nmAtom[c] = AtomNameStack[nesting * 4 + c] = fgetc(ifp);
data/rawtherapee-5.8/rtengine/canon_cr3_decoder.cc:460:34:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
                HandlerType[c] = fgetc(ifp);
data/rawtherapee-5.8/rtengine/canon_cr3_decoder.cc:479:36:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
                MediaFormatID[c] = fgetc(ifp);
data/rawtherapee-5.8/rtengine/canon_cr3_decoder.cc:677:9:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
    int read(void* dst, int es, int count)
data/rawtherapee-5.8/rtengine/canon_cr3_decoder.cc:832:51:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
            bitStrm->curBufSize = bitStrm->input->read(bitStrm->mdatBuf, 1, std::min(bitStrm->mdatSize, CRX_BUF_SIZE));
data/rawtherapee-5.8/rtengine/canon_cr3_decoder.cc:3140:62:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
        /*libraw_internal_data.internal_data.input->*/ input.read(hdrBuf, 1, hdr.mdatHdrSize);
data/rawtherapee-5.8/rtengine/colortemp.cc:70:96:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
ColorTemp::ColorTemp (double t, double g, double e, const std::string &m) : temp(t), green(g), equal(e), method(m)
data/rawtherapee-5.8/rtengine/colortemp.cc:72:24:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
    clip (temp, green, equal);
data/rawtherapee-5.8/rtengine/colortemp.cc:81:60:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
void ColorTemp::clip (double &temp, double &green, double &equal)
data/rawtherapee-5.8/rtengine/colortemp.cc:85:27:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
    equal = rtengine::LIM(equal, MINEQUAL, MAXEQUAL);
data/rawtherapee-5.8/rtengine/colortemp.cc:88:74:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
ColorTemp::ColorTemp (double mulr, double mulg, double mulb, double e) : equal(e), method("Custom")
data/rawtherapee-5.8/rtengine/colortemp.cc:90:33:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
    mul2temp (mulr, mulg, mulb, equal, temp, green);
data/rawtherapee-5.8/rtengine/colortemp.cc:93:97:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
void ColorTemp::mul2temp (const double rmul, const double gmul, const double bmul, const double equal, double& temp, double& green) const
data/rawtherapee-5.8/rtengine/colortemp.cc:101:30:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
        temp2mul (temp, 1.0, equal, tmpr, tmpg, tmpb);
data/rawtherapee-5.8/rtengine/colortemp.cc:1068:61:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
void ColorTemp::temp2mul (double temp, double green, double equal, double& rmul, double& gmul, double& bmul) const
data/rawtherapee-5.8/rtengine/colortemp.cc:1070:23:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
    clip(temp, green, equal);
data/rawtherapee-5.8/rtengine/colortemp.cc:1076:8:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
    if(equal < 0.9999 || equal > 1.0001 ) {
data/rawtherapee-5.8/rtengine/colortemp.cc:1076:26:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
    if(equal < 0.9999 || equal > 1.0001 ) {
data/rawtherapee-5.8/rtengine/colortemp.cc:1077:52:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
        adj = (100.f + ( 1000.f - (1000.f * (float)equal) ) / 20.f) / 100.f;
data/rawtherapee-5.8/rtengine/colortemp.h:43:12:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
    double equal;
data/rawtherapee-5.8/rtengine/colortemp.h:46:60:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
    static void clip (double &temp, double &green, double &equal);
data/rawtherapee-5.8/rtengine/colortemp.h:48:54:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
    void temp2mul (double temp, double green, double equal, double& rmul, double& gmul, double& bmul) const;
data/rawtherapee-5.8/rtengine/colortemp.h:52:43:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
    ColorTemp () : temp(-1.), green(-1.), equal (1.), method("Custom") {}
data/rawtherapee-5.8/rtengine/colortemp.h:53:60:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
    explicit ColorTemp (double e) : temp(-1.), green(-1.), equal (e), method("Custom") {}
data/rawtherapee-5.8/rtengine/colortemp.h:57:88:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
    void update (const double rmul, const double gmul, const double bmul, const double equal, const double tempBias=0.0)
data/rawtherapee-5.8/rtengine/colortemp.h:59:23:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
        this->equal = equal;
data/rawtherapee-5.8/rtengine/colortemp.h:60:43:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
        mul2temp (rmul, gmul, bmul, this->equal, temp, green);
data/rawtherapee-5.8/rtengine/colortemp.h:65:36:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
    void useDefaults (const double equal)
data/rawtherapee-5.8/rtengine/colortemp.h:69:23:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
        this->equal = equal;
data/rawtherapee-5.8/rtengine/colortemp.h:86:16:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
        return equal;
data/rawtherapee-5.8/rtengine/colortemp.h:91:32:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
        temp2mul (temp, green, equal, mulr, mulg, mulb);
data/rawtherapee-5.8/rtengine/colortemp.h:94:90:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
    void mul2temp (const double rmul, const double gmul, const double bmul, const double equal, double& temp, double& green) const;
data/rawtherapee-5.8/rtengine/dcp.cc:405:12:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
    buffer[read] = 0;
data/rawtherapee-5.8/rtengine/dcraw.c:49:9:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
#define fgetc getc_unlocked
data/rawtherapee-5.8/rtengine/dcraw.c:268:33:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    if (!strncasecmp(c, needle, strlen(needle)))
data/rawtherapee-5.8/rtengine/dcraw.c:355:17:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
	u.c[i ^ rev] = fgetc(ifp);
data/rawtherapee-5.8/rtengine/dcraw.c:357:21:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
    default: return fgetc(ifp);
data/rawtherapee-5.8/rtengine/dcraw.c:587:9:  [1] (buffer) getc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
    if (getc(ifp) > 15) return 1;
data/rawtherapee-5.8/rtengine/dcraw.c:602:42:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
  while (!reset && vbits < nbits && (c = fgetc(ifp)) != EOF &&
data/rawtherapee-5.8/rtengine/dcraw.c:603:45:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
    !(reset = zero_after_ff && c == 0xff && fgetc(ifp))) {
data/rawtherapee-5.8/rtengine/dcraw.c:795:6:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
	c = fgetc(ifp);
data/rawtherapee-5.8/rtengine/dcraw.c:821:8:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
  if ((fgetc(ifp),fgetc(ifp)) != 0xd8) return 0;
data/rawtherapee-5.8/rtengine/dcraw.c:821:19:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
  if ((fgetc(ifp),fgetc(ifp)) != 0xd8) return 0;
data/rawtherapee-5.8/rtengine/dcraw.c:838:32:  [1] (buffer) getc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
	if (len == 9 && !dng_version) getc(ifp);
data/rawtherapee-5.8/rtengine/dcraw.c:899:36:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
      do mark = (mark << 8) + (c = fgetc(ifp));
data/rawtherapee-5.8/rtengine/dcraw.c:1167:25:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
  FORC(dep) bit[1][c] = fgetc(ifp);
data/rawtherapee-5.8/rtengine/dcraw.c:1203:10:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
  ver0 = fgetc(ifp);
data/rawtherapee-5.8/rtengine/dcraw.c:1204:10:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
  ver1 = fgetc(ifp);
data/rawtherapee-5.8/rtengine/dcraw.c:1258:29:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
	FORC(6) bitbuf |= (UINT64) fgetc(ifp) << c*8;
data/rawtherapee-5.8/rtengine/dcraw.c:1279:11:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
    histo[fgetc(ifp)]++;
data/rawtherapee-5.8/rtengine/dcraw.c:1947:26:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
	  bitbuf |= (unsigned) (fgetc(ifp) << i);
data/rawtherapee-5.8/rtengine/dcraw.c:1951:48:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
      if (load_flags & 1 && (col % 10) == 9 && fgetc(ifp) &&
data/rawtherapee-5.8/rtengine/dcraw.c:2545:9:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
    c = fgetc(ifp);
data/rawtherapee-5.8/rtengine/dcraw.c:2560:15:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
    bitbuf  = fgetc(ifp) << 8;
data/rawtherapee-5.8/rtengine/dcraw.c:2561:15:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
    bitbuf += fgetc(ifp);
data/rawtherapee-5.8/rtengine/dcraw.c:2568:20:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
	bitbuf += (INT64) fgetc(ifp) << (bits+(j^8));
data/rawtherapee-5.8/rtengine/dcraw.c:2675:26:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
  fseek (ifp, (unsigned) fgetc(ifp)*4 - 1, SEEK_CUR);
data/rawtherapee-5.8/rtengine/dcraw.c:2806:9:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
  opt = fgetc(ifp);
data/rawtherapee-5.8/rtengine/dcraw.c:2971:18:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
  nseg = (uchar) fgetc(ifp);
data/rawtherapee-5.8/rtengine/dcraw.c:2976:11:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
  holes = fgetc(ifp);
data/rawtherapee-5.8/rtengine/dcraw.c:3101:33:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
	      bitbuf = (bitbuf << 8) + fgetc(ifp);
data/rawtherapee-5.8/rtengine/dcraw.c:3132:33:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
	      bitbuf = (bitbuf << 8) + fgetc(ifp);
data/rawtherapee-5.8/rtengine/dcraw.c:3149:12:  [1] (buffer) getc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
    clen = getc(ifp);
data/rawtherapee-5.8/rtengine/dcraw.c:3150:12:  [1] (buffer) getc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
    code = getc(ifp);
data/rawtherapee-5.8/rtengine/dcraw.c:3855:18:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    cp = fname + strlen(fname);
data/rawtherapee-5.8/rtengine/dcraw.c:3900:7:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
  if (fgetc(fp) != 'P' || fgetc(fp) != '5') error = 1;
data/rawtherapee-5.8/rtengine/dcraw.c:3900:27:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
  if (fgetc(fp) != 'P' || fgetc(fp) != '5') error = 1;
data/rawtherapee-5.8/rtengine/dcraw.c:3901:35:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
  while (!error && nd < 3 && (c = fgetc(fp)) != EOF) {
data/rawtherapee-5.8/rtengine/dcraw.c:5275:15:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
	c = c << 8 | fgetc(ifp);
data/rawtherapee-5.8/rtengine/dcraw.c:5277:47:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
	if (get4() == 257 && (i=len) && (c = (get4(),fgetc(ifp))) < 3)
data/rawtherapee-5.8/rtengine/dcraw.c:5306:19:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
      while ((c = fgetc(ifp)) && c != EOF)
data/rawtherapee-5.8/rtengine/dcraw.c:5336:23:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
	ver97 = ver97 * 10 + fgetc(ifp)-'0';
data/rawtherapee-5.8/rtengine/dcraw.c:5366:20:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
      cj = xlat[1][fgetc(ifp)^fgetc(ifp)^fgetc(ifp)^fgetc(ifp)];
data/rawtherapee-5.8/rtengine/dcraw.c:5366:31:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
      cj = xlat[1][fgetc(ifp)^fgetc(ifp)^fgetc(ifp)^fgetc(ifp)];
data/rawtherapee-5.8/rtengine/dcraw.c:5366:42:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
      cj = xlat[1][fgetc(ifp)^fgetc(ifp)^fgetc(ifp)^fgetc(ifp)];
data/rawtherapee-5.8/rtengine/dcraw.c:5366:53:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
      cj = xlat[1][fgetc(ifp)^fgetc(ifp)^fgetc(ifp)^fgetc(ifp)];
data/rawtherapee-5.8/rtengine/dcraw.c:5470:32:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
    for (i=19; i--; ) str[i] = fgetc(ifp);
data/rawtherapee-5.8/rtengine/dcraw.c:5511:18:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
	    exif_cfa |= fgetc(ifp) * 0x01010101 << c;
data/rawtherapee-5.8/rtengine/dcraw.c:5526:22:  [1] (buffer) getc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
	gpsdata[29+tag/2] = getc(ifp);			break;
data/rawtherapee-5.8/rtengine/dcraw.c:5661:29:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
    if (tag == 64013) wbi = fgetc(ifp);
data/rawtherapee-5.8/rtengine/dcraw.c:5721:19:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
	if (type != 7 || fgetc(ifp) != 0xff || fgetc(ifp) != 0xd8) break;
data/rawtherapee-5.8/rtengine/dcraw.c:5721:41:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
	if (type != 7 || fgetc(ifp) != 0xff || fgetc(ifp) != 0xd8) break;
data/rawtherapee-5.8/rtengine/dcraw.c:5883:35:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
	  FORC(36) ((char *)xtrans)[c] = fgetc(ifp) & 3;
data/rawtherapee-5.8/rtengine/dcraw.c:6026:43:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
	FORC4 dng_version = (dng_version << 8) + fgetc(ifp);
data/rawtherapee-5.8/rtengine/dcraw.c:6355:7:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
  if (fgetc(ifp) || fgetc(ifp)-'M' || fgetc(ifp)-'R') return;
data/rawtherapee-5.8/rtengine/dcraw.c:6355:21:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
  if (fgetc(ifp) || fgetc(ifp)-'M' || fgetc(ifp)-'R') return;
data/rawtherapee-5.8/rtengine/dcraw.c:6355:39:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
  if (fgetc(ifp) || fgetc(ifp)-'M' || fgetc(ifp)-'R') return;
data/rawtherapee-5.8/rtengine/dcraw.c:6356:11:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
  order = fgetc(ifp) * 0x101;
data/rawtherapee-5.8/rtengine/dcraw.c:6360:24:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
      tag = tag << 8 | fgetc(ifp);
data/rawtherapee-5.8/rtengine/dcraw.c:6400:15:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
  if (!ext || strlen(ext) != 4 || ext-file != 8) return;
data/rawtherapee-5.8/rtengine/dcraw.c:6401:28:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
  jname = (char *) malloc (strlen(ifname) + 1);
data/rawtherapee-5.8/rtengine/dcraw.c:6483:19:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
      fseek (ifp, strlen(make) - 63, SEEK_CUR);
data/rawtherapee-5.8/rtengine/dcraw.c:6579:20:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
      val = line + strlen(line);
data/rawtherapee-5.8/rtengine/dcraw.c:6724:21:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
      fuji_layout = fgetc(ifp) >> 7;
data/rawtherapee-5.8/rtengine/dcraw.c:6725:22:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
      fuji_width = !(fgetc(ifp) & 8);
data/rawtherapee-5.8/rtengine/dcraw.c:6728:38:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
      FORC(36) xtrans_abs[0][35-c] = fgetc(ifp) & 3;
data/rawtherapee-5.8/rtengine/dcraw.c:6750:7:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
  if (fgetc(ifp) != 0xff || fgetc(ifp) != 0xd8) return 0;
data/rawtherapee-5.8/rtengine/dcraw.c:6750:29:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
  if (fgetc(ifp) != 0xff || fgetc(ifp) != 0xd8) return 0;
data/rawtherapee-5.8/rtengine/dcraw.c:6752:10:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
  while (fgetc(ifp) == 0xff && (mark = fgetc(ifp)) != 0xda) {
data/rawtherapee-5.8/rtengine/dcraw.c:6752:40:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
  while (fgetc(ifp) == 0xff && (mark = fgetc(ifp)) != 0xda) {
data/rawtherapee-5.8/rtengine/dcraw.c:6757:7:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
      fgetc(ifp);
data/rawtherapee-5.8/rtengine/dcraw.c:6837:9:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
  ver = fgetc(ifp);
data/rawtherapee-5.8/rtengine/dcraw.c:6977:6:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
	if (fgetc(ifp) == 0xff && fgetc(ifp) == 0xd8
data/rawtherapee-5.8/rtengine/dcraw.c:6977:28:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
	if (fgetc(ifp) == 0xff && fgetc(ifp) == 0xd8
data/rawtherapee-5.8/rtengine/dcraw.c:8081:42:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    if (!strncmp (name, table[i].prefix, strlen(table[i].prefix))) {
data/rawtherapee-5.8/rtengine/dcraw.c:8145:26:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
	  bitbuf |= (unsigned) (fgetc(ifp) << i);
data/rawtherapee-5.8/rtengine/dcraw.c:8460:9:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
    if (fgetc(ifp) != 0xff)
data/rawtherapee-5.8/rtengine/dcraw.c:8631:15:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
  cp = make + strlen(make);		/* Remove trailing spaces */
data/rawtherapee-5.8/rtengine/dcraw.c:8633:16:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
  cp = model + strlen(model);
data/rawtherapee-5.8/rtengine/dcraw.c:8635:7:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
  i = strlen(make);			/* Remove make from model */
data/rawtherapee-5.8/rtengine/dcraw.c:8700:30:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
      if (model[4] == 'K' && strlen(model) == 8)
data/rawtherapee-5.8/rtengine/dcraw.c:9520:27:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    oprof[pbody[5]/4+2] = strlen(name[output_color-1]) + 1;
data/rawtherapee-5.8/rtengine/dcraw.c:9708:3:  [1] (buffer) strncpy:
  Easily used incorrectly; doesn't always \0-terminate or check for invalid
  pointers [MS-banned] (CWE-120).
  strncpy (th->desc, desc, 512);
data/rawtherapee-5.8/rtengine/dcraw.c:9709:3:  [1] (buffer) strncpy:
  Easily used incorrectly; doesn't always \0-terminate or check for invalid
  pointers [MS-banned] (CWE-120).
  strncpy (th->make, make, 64);
data/rawtherapee-5.8/rtengine/dcraw.c:9710:3:  [1] (buffer) strncpy:
  Easily used incorrectly; doesn't always \0-terminate or check for invalid
  pointers [MS-banned] (CWE-120).
  strncpy (th->model, model, 64);
data/rawtherapee-5.8/rtengine/dcraw.c:9715:3:  [1] (buffer) strncpy:
  Easily used incorrectly; doesn't always \0-terminate or check for invalid
  pointers [MS-banned] (CWE-120).
  strncpy (th->artist, artist, 64);
data/rawtherapee-5.8/rtengine/dcraw.c:10224:31:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    ofname = (char *) malloc (strlen(ifname) + 64);
data/rawtherapee-5.8/rtengine/dcraw.c:10232:18:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	sprintf (ofname+strlen(ofname), "_%0*d",
data/rawtherapee-5.8/rtengine/dcraw.cc:89:9:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
#define fgetc getc_unlocked
data/rawtherapee-5.8/rtengine/dcraw.cc:257:33:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    if (!strncasecmp(c, needle, strlen(needle)))
data/rawtherapee-5.8/rtengine/dcraw.cc:349:17:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
	u.c[i ^ rev] = fgetc(ifp);
data/rawtherapee-5.8/rtengine/dcraw.cc:351:21:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
    default: return fgetc(ifp);
data/rawtherapee-5.8/rtengine/dcraw.cc:581:9:  [1] (buffer) getc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
    if (getc(ifp) > 15) return 1;
data/rawtherapee-5.8/rtengine/dcraw.cc:596:42:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
  while (!reset && vbits < nbits && (c = fgetc(ifp)) != EOF &&
data/rawtherapee-5.8/rtengine/dcraw.cc:597:45:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
    !(reset = zero_after_ff && c == 0xff && fgetc(ifp))) {
data/rawtherapee-5.8/rtengine/dcraw.cc:621:38:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
    if (vbits < nbits && LIKELY((c = fgetc(ifp)) != EOF)) {
data/rawtherapee-5.8/rtengine/dcraw.cc:624:42:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
        if (vbits < nbits && LIKELY((c = fgetc(ifp)) != EOF)) {
data/rawtherapee-5.8/rtengine/dcraw.cc:819:6:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
	c = fgetc(ifp);
data/rawtherapee-5.8/rtengine/dcraw.cc:849:8:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
  if ((fgetc(ifp),fgetc(ifp)) != 0xd8) return 0;
data/rawtherapee-5.8/rtengine/dcraw.cc:849:19:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
  if ((fgetc(ifp),fgetc(ifp)) != 0xd8) return 0;
data/rawtherapee-5.8/rtengine/dcraw.cc:866:32:  [1] (buffer) getc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
	if (len == 9 && !dng_version) getc(ifp);
data/rawtherapee-5.8/rtengine/dcraw.cc:927:36:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
      do mark = (mark << 8) + (c = fgetc(ifp));
data/rawtherapee-5.8/rtengine/dcraw.cc:1290:25:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
  FORC(dep) bit[1][c] = fgetc(ifp);
data/rawtherapee-5.8/rtengine/dcraw.cc:1326:12:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
    ver0 = fgetc(ifp);
data/rawtherapee-5.8/rtengine/dcraw.cc:1327:12:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
    ver1 = fgetc(ifp);
data/rawtherapee-5.8/rtengine/dcraw.cc:1415:29:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
	FORC(6) bitbuf |= (UINT64) fgetc(ifp) << c*8;
data/rawtherapee-5.8/rtengine/dcraw.cc:1436:11:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
    histo[fgetc(ifp)]++;
data/rawtherapee-5.8/rtengine/dcraw.cc:2633:24:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
	  bitbuf |= ((UINT64) fgetc(ifp) << i);
data/rawtherapee-5.8/rtengine/dcraw.cc:2637:48:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
      if (load_flags & 1 && (col % 10) == 9 && fgetc(ifp) &&
data/rawtherapee-5.8/rtengine/dcraw.cc:3202:9:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
    c = fgetc(ifp);
data/rawtherapee-5.8/rtengine/dcraw.cc:3217:15:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
    bitbuf  = fgetc(ifp) << 8;
data/rawtherapee-5.8/rtengine/dcraw.cc:3218:15:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
    bitbuf += fgetc(ifp);
data/rawtherapee-5.8/rtengine/dcraw.cc:3225:20:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
	bitbuf += (INT64) fgetc(ifp) << (bits+(j^8));
data/rawtherapee-5.8/rtengine/dcraw.cc:3335:26:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
  fseek (ifp, (unsigned) fgetc(ifp)*4 - 1, SEEK_CUR);
data/rawtherapee-5.8/rtengine/dcraw.cc:3495:9:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
  opt = fgetc(ifp);
data/rawtherapee-5.8/rtengine/dcraw.cc:3664:18:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
  nseg = (uchar) fgetc(ifp);
data/rawtherapee-5.8/rtengine/dcraw.cc:3669:11:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
  holes = fgetc(ifp);
data/rawtherapee-5.8/rtengine/dcraw.cc:3794:33:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
	      bitbuf = (bitbuf << 8) + fgetc(ifp);
data/rawtherapee-5.8/rtengine/dcraw.cc:3825:33:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
	      bitbuf = (bitbuf << 8) + fgetc(ifp);
data/rawtherapee-5.8/rtengine/dcraw.cc:3842:12:  [1] (buffer) getc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
    clen = getc(ifp);
data/rawtherapee-5.8/rtengine/dcraw.cc:3843:12:  [1] (buffer) getc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
    code = getc(ifp);
data/rawtherapee-5.8/rtengine/dcraw.cc:5662:15:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
	c = c << 8 | fgetc(ifp);
data/rawtherapee-5.8/rtengine/dcraw.cc:5664:50:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
    if (get4() == 257 && (i=len) && (c = (get4(),fgetc(ifp))) < 3 && strcmp(make,"Canon"))
data/rawtherapee-5.8/rtengine/dcraw.cc:5698:19:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
      while ((c = fgetc(ifp)) && c != EOF)
data/rawtherapee-5.8/rtengine/dcraw.cc:5728:23:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
	ver97 = ver97 * 10 + fgetc(ifp)-'0';
data/rawtherapee-5.8/rtengine/dcraw.cc:5758:20:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
      cj = xlat[1][fgetc(ifp)^fgetc(ifp)^fgetc(ifp)^fgetc(ifp)];
data/rawtherapee-5.8/rtengine/dcraw.cc:5758:31:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
      cj = xlat[1][fgetc(ifp)^fgetc(ifp)^fgetc(ifp)^fgetc(ifp)];
data/rawtherapee-5.8/rtengine/dcraw.cc:5758:42:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
      cj = xlat[1][fgetc(ifp)^fgetc(ifp)^fgetc(ifp)^fgetc(ifp)];
data/rawtherapee-5.8/rtengine/dcraw.cc:5758:53:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
      cj = xlat[1][fgetc(ifp)^fgetc(ifp)^fgetc(ifp)^fgetc(ifp)];
data/rawtherapee-5.8/rtengine/dcraw.cc:6181:32:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
    for (i=19; i--; ) str[i] = fgetc(ifp);
data/rawtherapee-5.8/rtengine/dcraw.cc:6222:18:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
	    exif_cfa |= fgetc(ifp) * 0x01010101 << c;
data/rawtherapee-5.8/rtengine/dcraw.cc:6237:22:  [1] (buffer) getc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
	gpsdata[29+tag/2] = getc(ifp);			break;
data/rawtherapee-5.8/rtengine/dcraw.cc:6372:29:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
    if (tag == 64013) wbi = fgetc(ifp);
data/rawtherapee-5.8/rtengine/dcraw.cc:6450:19:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
	if (type != 7 || fgetc(ifp) != 0xff || fgetc(ifp) != 0xd8) break;
data/rawtherapee-5.8/rtengine/dcraw.cc:6450:41:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
	if (type != 7 || fgetc(ifp) != 0xff || fgetc(ifp) != 0xd8) break;
data/rawtherapee-5.8/rtengine/dcraw.cc:6622:34:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
	  FORC(36) ((int *)xtrans)[c] = fgetc(ifp) & 3;
data/rawtherapee-5.8/rtengine/dcraw.cc:6765:43:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
	FORC4 dng_version = (dng_version << 8) + fgetc(ifp);
data/rawtherapee-5.8/rtengine/dcraw.cc:7229:7:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
  if (fgetc(ifp) || fgetc(ifp)-'M' || fgetc(ifp)-'R') return;
data/rawtherapee-5.8/rtengine/dcraw.cc:7229:21:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
  if (fgetc(ifp) || fgetc(ifp)-'M' || fgetc(ifp)-'R') return;
data/rawtherapee-5.8/rtengine/dcraw.cc:7229:39:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
  if (fgetc(ifp) || fgetc(ifp)-'M' || fgetc(ifp)-'R') return;
data/rawtherapee-5.8/rtengine/dcraw.cc:7230:11:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
  order = fgetc(ifp) * 0x101;
data/rawtherapee-5.8/rtengine/dcraw.cc:7234:24:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
      tag = tag << 8 | fgetc(ifp);
data/rawtherapee-5.8/rtengine/dcraw.cc:7274:15:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
  if (!ext || strlen(ext) != 4 || ext-file != 8) return;
data/rawtherapee-5.8/rtengine/dcraw.cc:7275:28:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
  jname = (char *) malloc (strlen(ifname) + 1);
data/rawtherapee-5.8/rtengine/dcraw.cc:7358:19:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
      fseek (ifp, strlen(make) - 63, SEEK_CUR);
data/rawtherapee-5.8/rtengine/dcraw.cc:7454:20:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
      val = line + strlen(line);
data/rawtherapee-5.8/rtengine/dcraw.cc:7600:21:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
      fuji_layout = fgetc(ifp) >> 7;
data/rawtherapee-5.8/rtengine/dcraw.cc:7601:22:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
      fuji_width = !(fgetc(ifp) & 8);
data/rawtherapee-5.8/rtengine/dcraw.cc:7604:38:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
      FORC(36) xtrans_abs[0][35-c] = fgetc(ifp) & 3;
data/rawtherapee-5.8/rtengine/dcraw.cc:7626:7:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
  if (fgetc(ifp) != 0xff || fgetc(ifp) != 0xd8) return 0;
data/rawtherapee-5.8/rtengine/dcraw.cc:7626:29:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
  if (fgetc(ifp) != 0xff || fgetc(ifp) != 0xd8) return 0;
data/rawtherapee-5.8/rtengine/dcraw.cc:7628:10:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
  while (fgetc(ifp) == 0xff && (mark = fgetc(ifp)) != 0xda) {
data/rawtherapee-5.8/rtengine/dcraw.cc:7628:40:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
  while (fgetc(ifp) == 0xff && (mark = fgetc(ifp)) != 0xda) {
data/rawtherapee-5.8/rtengine/dcraw.cc:7633:7:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
      fgetc(ifp);
data/rawtherapee-5.8/rtengine/dcraw.cc:7717:9:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
  ver = fgetc(ifp);
data/rawtherapee-5.8/rtengine/dcraw.cc:7857:6:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
	if (fgetc(ifp) == 0xff && fgetc(ifp) == 0xd8
data/rawtherapee-5.8/rtengine/dcraw.cc:7857:28:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
	if (fgetc(ifp) == 0xff && fgetc(ifp) == 0xd8
data/rawtherapee-5.8/rtengine/dcraw.cc:9088:42:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    if (!strncmp (name, table[i].prefix, strlen(table[i].prefix))) {
data/rawtherapee-5.8/rtengine/dcraw.cc:9179:26:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
	  bitbuf |= (unsigned) (fgetc(ifp) << i);
data/rawtherapee-5.8/rtengine/dcraw.cc:9534:9:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
    if (fgetc(ifp) != 0xff)
data/rawtherapee-5.8/rtengine/dcraw.cc:9722:15:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
  cp = make + strlen(make);		/* Remove trailing spaces */
data/rawtherapee-5.8/rtengine/dcraw.cc:9724:16:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
  cp = model + strlen(model);
data/rawtherapee-5.8/rtengine/dcraw.cc:9726:7:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
  i = strlen(make);			/* Remove make from model */
data/rawtherapee-5.8/rtengine/dcraw.cc:9804:30:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
      if (model[4] == 'K' && strlen(model) == 8)
data/rawtherapee-5.8/rtengine/imageio.cc:952:26:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    description_length = strlen(profile_type);
data/rawtherapee-5.8/rtengine/imageio.cc:972:39:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    g_snprintf(dp, allocated_length - strlen(text[0].text), "%8lu ", static_cast<unsigned long int>(length));
data/rawtherapee-5.8/rtengine/imageio.cc:1543:9:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
        read(fileno, b, 4);
data/rawtherapee-5.8/rtengine/imageio.cc:1546:9:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
        read(fileno, b, 2);
data/rawtherapee-5.8/rtengine/imageio.cc:1550:13:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
            read(fileno, b, 2);
data/rawtherapee-5.8/rtengine/imageio.cc:1557:17:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
                read(fileno, b, 10);
data/rawtherapee-5.8/rtengine/imagesource.h:123:139:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
    virtual ColorTemp   getSpotWB   (std::vector<Coord2D> &red, std::vector<Coord2D> &green, std::vector<Coord2D> &blue, int tran, double equal) = 0;
data/rawtherapee-5.8/rtengine/improccoordinator.cc:410:85:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
            currWB = ColorTemp(params->wb.temperature, params->wb.green, params->wb.equal, params->wb.method);
data/rawtherapee-5.8/rtengine/improccoordinator.cc:417:48:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
                if (lastAwbEqual != params->wb.equal || lastAwbTempBias != params->wb.tempBias) {
data/rawtherapee-5.8/rtengine/improccoordinator.cc:422:62:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
                        autoWB.update(rm, gm, bm, params->wb.equal, params->wb.tempBias);
data/rawtherapee-5.8/rtengine/improccoordinator.cc:423:51:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
                        lastAwbEqual = params->wb.equal;
data/rawtherapee-5.8/rtengine/improccoordinator.cc:428:55:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
                        autoWB.useDefaults(params->wb.equal);
data/rawtherapee-5.8/rtengine/improccoordinator.cc:1136:71:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
bool ImProcCoordinator::getAutoWB(double& temp, double& green, double equal, double tempBias)
data/rawtherapee-5.8/rtengine/improccoordinator.cc:1140:29:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
        if (lastAwbEqual != equal || lastAwbTempBias != tempBias) {
data/rawtherapee-5.8/rtengine/improccoordinator.cc:1146:43:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
                autoWB.update(rm, gm, bm, equal, tempBias);
data/rawtherapee-5.8/rtengine/improccoordinator.cc:1147:32:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
                lastAwbEqual = equal;
data/rawtherapee-5.8/rtengine/improccoordinator.cc:1151:36:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
                autoWB.useDefaults(equal);
data/rawtherapee-5.8/rtengine/improccoordinator.cc:1194:66:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
        ret = imgsrc->getSpotWB(red, green, blue, tr, params->wb.equal);
data/rawtherapee-5.8/rtengine/improccoordinator.cc:1195:81:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
        currWB = ColorTemp(params->wb.temperature, params->wb.green, params->wb.equal, params->wb.method);
data/rawtherapee-5.8/rtengine/improccoordinator.cc:1322:87:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
    ColorTemp currWB = ColorTemp(params->wb.temperature, params->wb.green, params->wb.equal, params->wb.method);
data/rawtherapee-5.8/rtengine/improccoordinator.cc:1327:40:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
        if (lastAwbEqual != params->wb.equal || lastAwbTempBias != params->wb.tempBias) {
data/rawtherapee-5.8/rtengine/improccoordinator.cc:1332:54:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
                autoWB.update(rm, gm, bm, params->wb.equal, params->wb.tempBias);
data/rawtherapee-5.8/rtengine/improccoordinator.cc:1333:43:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
                lastAwbEqual = params->wb.equal;
data/rawtherapee-5.8/rtengine/improccoordinator.cc:1338:47:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
                autoWB.useDefaults(params->wb.equal);
data/rawtherapee-5.8/rtengine/improccoordinator.h:276:59:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
    bool getAutoWB   (double& temp, double& green, double equal, double tempBias) override;
data/rawtherapee-5.8/rtengine/klt/pnmio.cc:35:16:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
        while (fgetc(fp) != '\n') ;
data/rawtherapee-5.8/rtengine/klt/writeFeatures.cc:175:15:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
  int width = strlen(str);
data/rawtherapee-5.8/rtengine/klt/writeFeatures.cc:198:14:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
  int maxi = strlen(str) - 1;
data/rawtherapee-5.8/rtengine/klt/writeFeatures.cc:512:10:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
  while (fgetc(fp) != '-');
data/rawtherapee-5.8/rtengine/klt/writeFeatures.cc:513:10:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
  while (fgetc(fp) != '\n');
data/rawtherapee-5.8/rtengine/klt/writeFeatures.cc:534:10:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
  while (fgetc(fp) != '-');
data/rawtherapee-5.8/rtengine/klt/writeFeatures.cc:535:10:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
  while (fgetc(fp) != '\n');
data/rawtherapee-5.8/rtengine/klt/writeFeatures.cc:581:10:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
  while (fgetc(fp) != '-');
data/rawtherapee-5.8/rtengine/klt/writeFeatures.cc:582:10:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
  while (fgetc(fp) != '\n');
data/rawtherapee-5.8/rtengine/klt/writeFeatures.cc:593:10:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
  while (fgetc(fp) != '(');
data/rawtherapee-5.8/rtengine/lcp.cc:761:5:  [1] (buffer) strncpy:
  Easily used incorrectly; doesn't always \0-terminate or check for invalid
  pointers [MS-banned] (CWE-120).
    strncpy(pProf->lastTag, src, sizeof(pProf->lastTag) - 1);
data/rawtherapee-5.8/rtengine/lcp.cc:766:9:  [1] (buffer) strncpy:
  Easily used incorrectly; doesn't always \0-terminate or check for invalid
  pointers [MS-banned] (CWE-120).
        strncpy(pProf->inInvalidTag, src, sizeof(pProf->inInvalidTag) - 1);
data/rawtherapee-5.8/rtengine/lcp.cc:838:13:  [1] (buffer) strncpy:
  Easily used incorrectly; doesn't always \0-terminate or check for invalid
  pointers [MS-banned] (CWE-120).
            strncpy(pProf->lastTag, nameStart, 255);
data/rawtherapee-5.8/rtengine/myfile.h:89:12:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
inline int fgetc (IMFILE* f)
data/rawtherapee-5.8/rtengine/myfile.h:104:12:  [1] (buffer) getc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
inline int getc (IMFILE* f)
data/rawtherapee-5.8/rtengine/myfile.h:107:12:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
    return fgetc(f);
data/rawtherapee-5.8/rtengine/procparams.cc:1270:5:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
    equal(1.0),
data/rawtherapee-5.8/rtengine/procparams.cc:1284:27:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
        && equal == other.equal
data/rawtherapee-5.8/rtengine/procparams.cc:1297:27:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
        && equal == other.equal
data/rawtherapee-5.8/rtengine/procparams.cc:3175:47:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
        saveToKeyfile(!pedited || pedited->wb.equal, "White Balance", "Equal", wb.equal, keyFile);
data/rawtherapee-5.8/rtengine/procparams.cc:3175:83:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
        saveToKeyfile(!pedited || pedited->wb.equal, "White Balance", "Equal", wb.equal, keyFile);
data/rawtherapee-5.8/rtengine/procparams.cc:4132:78:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
            assignFromKeyfile(keyFile, "White Balance", "Equal", pedited, wb.equal, pedited->wb.equal);
data/rawtherapee-5.8/rtengine/procparams.cc:4132:97:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
            assignFromKeyfile(keyFile, "White Balance", "Equal", pedited, wb.equal, pedited->wb.equal);
data/rawtherapee-5.8/rtengine/procparams.h:606:12:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
    double equal;
data/rawtherapee-5.8/rtengine/procparams.h:615:21:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
    double          equal;
data/rawtherapee-5.8/rtengine/rawimage.cc:1128:15:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    char name[strlen(make) + strlen(model) + 32];
data/rawtherapee-5.8/rtengine/rawimage.cc:1128:30:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    char name[strlen(make) + strlen(model) + 32];
data/rawtherapee-5.8/rtengine/rawimagesource.cc:4112:139:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
ColorTemp RawImageSource::getSpotWB (std::vector<Coord2D> &red, std::vector<Coord2D> &green, std::vector<Coord2D> &blue, int tran, double equal)
data/rawtherapee-5.8/rtengine/rawimagesource.cc:4310:27:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
        return ColorTemp (equal);
data/rawtherapee-5.8/rtengine/rawimagesource.cc:4320:39:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
        return ColorTemp (rm, gm, bm, equal);
data/rawtherapee-5.8/rtengine/rawimagesource.h:151:131:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
    ColorTemp   getSpotWB   (std::vector<Coord2D> &red, std::vector<Coord2D> &green, std::vector<Coord2D> &blue, int tran, double equal) override;
data/rawtherapee-5.8/rtengine/rtengine.h:522:74:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
    virtual bool        getAutoWB   (double& temp, double& green, double equal, double tempBias) = 0;
data/rawtherapee-5.8/rtengine/rtlensfun.cc:367:29:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
                size_t sl = strlen (fn);
data/rawtherapee-5.8/rtengine/rtthumbnail.cc:1115:29:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
        wbEqual = params.wb.equal;
data/rawtherapee-5.8/rtengine/rtthumbnail.cc:1124:85:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
    ColorTemp currWB = ColorTemp (params.wb.temperature, params.wb.green, params.wb.equal, params.wb.method);
data/rawtherapee-5.8/rtengine/rtthumbnail.cc:1133:60:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
        currWB = ColorTemp (cam_r, cam_g, cam_b, params.wb.equal);
data/rawtherapee-5.8/rtengine/rtthumbnail.cc:1558:64:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
void Thumbnail::getAutoWB (double& temp, double& green, double equal, double tempBias)
data/rawtherapee-5.8/rtengine/rtthumbnail.cc:1561:9:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
    if (equal != wbEqual || tempBias != wbTempBias) {
data/rawtherapee-5.8/rtengine/rtthumbnail.cc:1564:19:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
        wbEqual = equal;
data/rawtherapee-5.8/rtengine/rtthumbnail.cc:1624:41:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
    ColorTemp ct (rm, gm, bm, params.wb.equal);
data/rawtherapee-5.8/rtengine/rtthumbnail.cc:1931:49:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    fwrite (thumbImg->getType(), sizeof (char), strlen (thumbImg->getType()), f);
data/rawtherapee-5.8/rtengine/rtthumbnail.cc:1976:13:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    imgType[strlen(imgType) - 1] = '\0'; // imgType has a \n trailing character, so we overwrite it by the \0 char
data/rawtherapee-5.8/rtengine/rtthumbnail.h:96:60:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
    void getAutoWB    (double& temp, double& green, double equal, double tempBias);
data/rawtherapee-5.8/rtengine/simpleprocess.cc:266:79:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
        currWB = ColorTemp (params.wb.temperature, params.wb.green, params.wb.equal, params.wb.method);
data/rawtherapee-5.8/rtengine/simpleprocess.cc:275:50:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
            currWB.update (rm, gm, bm, params.wb.equal, params.wb.tempBias);
data/rawtherapee-5.8/rtengine/stdimagesource.cc:329:139:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
ColorTemp StdImageSource::getSpotWB (std::vector<Coord2D> &red, std::vector<Coord2D> &green, std::vector<Coord2D>& blue, int tran, double equal)
data/rawtherapee-5.8/rtengine/stdimagesource.cc:341:83:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
    return ColorTemp (reds / rn * img_r, greens / gn * img_g, blues / bn * img_b, equal);
data/rawtherapee-5.8/rtengine/stdimagesource.h:65:131:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
    ColorTemp   getSpotWB   (std::vector<Coord2D> &red, std::vector<Coord2D> &green, std::vector<Coord2D> &blue, int tran, double equal) override;
data/rawtherapee-5.8/rtexif/rtexif.cc:617:38:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
            char nextChar = * (pos + strlen (name));
data/rawtherapee-5.8/rtexif/rtexif.cc:622:24:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
                pos += strlen (name);
data/rawtherapee-5.8/rtexif/rtexif.cc:641:9:  [1] (buffer) strncpy:
  Easily used incorrectly; doesn't always \0-terminate or check for invalid
  pointers [MS-banned] (CWE-120).
        strncpy (value, posTag + 1, pos - posTag - 1);
data/rawtherapee-5.8/rtexif/rtexif.cc:647:9:  [1] (buffer) strncpy:
  Easily used incorrectly; doesn't always \0-terminate or check for invalid
  pointers [MS-banned] (CWE-120).
        strncpy (value, posAttr + 1, pos - posAttr - 1);
data/rawtherapee-5.8/rtexif/rtexif.cc:1491:21:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
        valuesize = strlen (v) + 1;
data/rawtherapee-5.8/rtexif/rtexif.cc:1706:5:  [1] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant character.
    strcpy (buffer, "");
data/rawtherapee-5.8/rtexif/rtexif.cc:1713:28:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
        char* b = buffer + strlen (buffer);
data/rawtherapee-5.8/rtexif/rtexif.cc:1762:9:  [1] (buffer) strncpy:
  Easily used incorrectly; doesn't always \0-terminate or check for invalid
  pointers [MS-banned] (CWE-120).
        strncpy (buffer, attrib->name, 1024);
data/rawtherapee-5.8/rtexif/rtexif.cc:1768:27:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
        sprintf (buffer + strlen (buffer) - 1, "[%d]", i);
data/rawtherapee-5.8/rtexif/rtexif.cc:1983:33:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
        valuesize = count = 8 + strlen (text.c_str());
data/rawtherapee-5.8/rtexif/rtexif.cc:2018:13:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    count = strlen (text) + 1;
data/rawtherapee-5.8/rtexif/rtexif.cc:2215:28:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
            if (!fseek (f, strlen (buffer) - 63, SEEK_CUR)) {
data/rawtherapee-5.8/rtexif/rtexif.cc:3460:5:  [1] (buffer) strncpy:
  Easily used incorrectly; doesn't always \0-terminate or check for invalid
  pointers [MS-banned] (CWE-120).
    strncpy (buffer, fullname.c_str(), 1024);
data/rawtherapee-5.8/rtexif/stdattribs.cc:548:33:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
                size_t length = strlen(utf8Str);
data/rawtherapee-5.8/rtgui/alignedmalloc.cc:28:12:  [1] (free) memalign:
  On some systems (though not Linux-based systems) an attempt to free()
  results from memalign() may fail. This may, on a few systems, be
  exploitable. Also note that memalign() may not check that the boundary
  parameter is correct (CWE-676). Use posix_memalign instead (defined in
  POSIX's 1003.1d). Don't switch to valloc(); it is marked as obsolete in BSD
  4.3, as legacy in SUSv2, and is no longer defined in SUSv3. In some cases,
  malloc()'s alignment may be sufficient.
    return memalign(16, size);
data/rawtherapee-5.8/rtgui/batchtoolpanelcoord.cc:383:28:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
            toolPanels[i]->read (&pparams, &pparamsEdited);
data/rawtherapee-5.8/rtgui/batchtoolpanelcoord.cc:419:25:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
                rotate->read (&pparams);
data/rawtherapee-5.8/rtgui/batchtoolpanelcoord.cc:567:80:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
void BatchToolPanelCoordinator::getAutoWB (double& temp, double& green, double equal, double tempBias)
data/rawtherapee-5.8/rtgui/batchtoolpanelcoord.cc:571:46:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
        selected[0]->getAutoWB (temp, green, equal, tempBias);
data/rawtherapee-5.8/rtgui/batchtoolpanelcoord.cc:648:24:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
        toolPanels[i]->read (&pparams, &pparamsEdited);
data/rawtherapee-5.8/rtgui/batchtoolpanelcoord.h:70:57:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
    void getAutoWB (double& temp, double& green, double equal, double tempBias) override;
data/rawtherapee-5.8/rtgui/bayerpreprocess.cc:82:23:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
void BayerPreProcess::read(const rtengine::procparams::ProcParams* pp, const ParamsEdited* pedited)
data/rawtherapee-5.8/rtgui/bayerpreprocess.h:43:10:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
    void read           (const rtengine::procparams::ProcParams* pp, const ParamsEdited* pedited = nullptr) override;
data/rawtherapee-5.8/rtgui/bayerprocess.cc:264:20:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
void BayerProcess::read(const rtengine::procparams::ProcParams* pp, const ParamsEdited* pedited)
data/rawtherapee-5.8/rtgui/bayerprocess.h:81:10:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
    void read(const rtengine::procparams::ProcParams* pp, const ParamsEdited* pedited = nullptr) override;
data/rawtherapee-5.8/rtgui/bayerrawexposure.cc:79:24:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
void BayerRAWExposure::read(const rtengine::procparams::ProcParams* pp, const ParamsEdited* pedited)
data/rawtherapee-5.8/rtgui/bayerrawexposure.h:36:10:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
    void read           (const rtengine::procparams::ProcParams* pp, const ParamsEdited* pedited = nullptr) override;
data/rawtherapee-5.8/rtgui/blackwhite.cc:420:18:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
void BlackWhite::read (const ProcParams* pp, const ParamsEdited* pedited)
data/rawtherapee-5.8/rtgui/blackwhite.h:47:10:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
    void read            (const rtengine::procparams::ProcParams* pp, const ParamsEdited* pedited = nullptr) override;
data/rawtherapee-5.8/rtgui/cacorrection.cc:53:20:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
void CACorrection::read (const ProcParams* pp, const ParamsEdited* pedited)
data/rawtherapee-5.8/rtgui/cacorrection.h:40:10:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
    void read           (const rtengine::procparams::ProcParams* pp, const ParamsEdited* pedited = nullptr) override;
data/rawtherapee-5.8/rtgui/chmixer.cc:105:15:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
void ChMixer::read (const ProcParams* pp, const ParamsEdited* pedited)
data/rawtherapee-5.8/rtgui/chmixer.h:42:10:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
    void read            (const rtengine::procparams::ProcParams* pp, const ParamsEdited* pedited = nullptr) override;
data/rawtherapee-5.8/rtgui/coarsepanel.cc:71:19:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
void CoarsePanel::read (const ProcParams* pp, const ParamsEdited* pedited)
data/rawtherapee-5.8/rtgui/coarsepanel.h:42:10:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
    void read               (const rtengine::procparams::ProcParams* pp, const ParamsEdited* pedited = nullptr) override;
data/rawtherapee-5.8/rtgui/colorappearance.cc:797:23:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
void ColorAppearance::read (const ProcParams* pp, const ParamsEdited* pedited)
data/rawtherapee-5.8/rtgui/colorappearance.h:45:10:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
    void read           (const rtengine::procparams::ProcParams* pp, const ParamsEdited* pedited = nullptr) override;
data/rawtherapee-5.8/rtgui/colortoning.cc:562:19:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
void ColorToning::read (const ProcParams* pp, const ParamsEdited* pedited)
data/rawtherapee-5.8/rtgui/colortoning.h:35:10:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
    void read                  (const rtengine::procparams::ProcParams* pp, const ParamsEdited* pedited = nullptr) override;
data/rawtherapee-5.8/rtgui/crop.cc:332:12:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
void Crop::read (const ProcParams* pp, const ParamsEdited* pedited)
data/rawtherapee-5.8/rtgui/crop.h:47:10:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
    void read           (const rtengine::procparams::ProcParams* pp, const ParamsEdited* pedited = nullptr) override;
data/rawtherapee-5.8/rtgui/darkframe.cc:77:17:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
void DarkFrame::read(const rtengine::procparams::ProcParams* pp, const ParamsEdited* pedited)
data/rawtherapee-5.8/rtgui/darkframe.h:68:10:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
    void read           (const rtengine::procparams::ProcParams* pp, const ParamsEdited* pedited = nullptr) override;
data/rawtherapee-5.8/rtgui/defringe.cc:93:16:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
void Defringe::read (const ProcParams* pp, const ParamsEdited* pedited)
data/rawtherapee-5.8/rtgui/defringe.h:52:10:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
    void read           (const rtengine::procparams::ProcParams* pp, const ParamsEdited* pedited = nullptr) override;
data/rawtherapee-5.8/rtgui/dehaze.cc:64:14:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
void Dehaze::read(const ProcParams *pp, const ParamsEdited *pedited)
data/rawtherapee-5.8/rtgui/dehaze.h:44:10:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
    void read(const rtengine::procparams::ProcParams *pp, const ParamsEdited *pedited=nullptr) override;
data/rawtherapee-5.8/rtgui/dirpyrdenoise.cc:402:21:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
void DirPyrDenoise::read (const ProcParams* pp, const ParamsEdited* pedited)
data/rawtherapee-5.8/rtgui/dirpyrdenoise.h:46:10:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
    void read           (const rtengine::procparams::ProcParams* pp, const ParamsEdited* pedited = nullptr) override;
data/rawtherapee-5.8/rtgui/dirpyrequalizer.cc:162:23:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
void DirPyrEqualizer::read (const ProcParams* pp, const ParamsEdited* pedited)
data/rawtherapee-5.8/rtgui/dirpyrequalizer.h:63:10:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
    void read                (const rtengine::procparams::ProcParams* pp, const ParamsEdited* pedited = nullptr) override;
data/rawtherapee-5.8/rtgui/distortion.cc:55:18:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
void Distortion::read (const ProcParams* pp, const ParamsEdited* pedited)
data/rawtherapee-5.8/rtgui/distortion.h:43:10:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
    void read           (const rtengine::procparams::ProcParams* pp, const ParamsEdited* pedited = nullptr) override;
data/rawtherapee-5.8/rtgui/epd.cc:57:37:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
void EdgePreservingDecompositionUI::read(const ProcParams *pp, const ParamsEdited *pedited)
data/rawtherapee-5.8/rtgui/epd.h:42:10:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
    void read           (const rtengine::procparams::ProcParams* pp, const ParamsEdited* pedited = nullptr) override;
data/rawtherapee-5.8/rtgui/exifpanel.cc:169:17:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
void ExifPanel::read (const ProcParams* pp, const ParamsEdited* pedited)
data/rawtherapee-5.8/rtgui/exifpanel.h:107:10:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
    void read (const rtengine::procparams::ProcParams* pp, const ParamsEdited* pedited = nullptr) override;
data/rawtherapee-5.8/rtgui/fattaltonemap.cc:59:25:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
void FattalToneMapping::read(const ProcParams *pp, const ParamsEdited *pedited)
data/rawtherapee-5.8/rtgui/fattaltonemap.h:39:10:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
    void read           (const rtengine::procparams::ProcParams* pp, const ParamsEdited* pedited = nullptr) override;
data/rawtherapee-5.8/rtgui/filmnegative.cc:121:20:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
void FilmNegative::read(const rtengine::procparams::ProcParams* pp, const ParamsEdited* pedited)
data/rawtherapee-5.8/rtgui/filmnegative.h:48:10:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
    void read(const rtengine::procparams::ProcParams* pp, const ParamsEdited* pedited = nullptr) override;
data/rawtherapee-5.8/rtgui/filmsimulation.cc:124:22:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
void FilmSimulation::read( const rtengine::procparams::ProcParams* pp, const ParamsEdited* pedited )
data/rawtherapee-5.8/rtgui/filmsimulation.h:63:10:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
    void read(const rtengine::procparams::ProcParams* pp, const ParamsEdited* pedited = nullptr) override;
data/rawtherapee-5.8/rtgui/flatfield.cc:114:17:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
void FlatField::read(const rtengine::procparams::ProcParams* pp, const ParamsEdited* pedited)
data/rawtherapee-5.8/rtgui/flatfield.h:74:10:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
    void read                (const rtengine::procparams::ProcParams* pp, const ParamsEdited* pedited = nullptr) override;
data/rawtherapee-5.8/rtgui/gradient.cc:119:16:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
void Gradient::read (const ProcParams* pp, const ParamsEdited* pedited)
data/rawtherapee-5.8/rtgui/gradient.h:44:10:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
    void read           (const rtengine::procparams::ProcParams* pp, const ParamsEdited* pedited = nullptr) override;
data/rawtherapee-5.8/rtgui/hsvequalizer.cc:83:20:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
void HSVEqualizer::read (const ProcParams* pp, const ParamsEdited* pedited)
data/rawtherapee-5.8/rtgui/hsvequalizer.h:51:10:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
    void read            (const rtengine::procparams::ProcParams* pp, const ParamsEdited* pedited = nullptr) override;
data/rawtherapee-5.8/rtgui/icmpanel.cc:481:16:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
void ICMPanel::read(const ProcParams* pp, const ParamsEdited* pedited)
data/rawtherapee-5.8/rtgui/icmpanel.h:125:10:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
    void read(const rtengine::procparams::ProcParams* pp, const ParamsEdited* pedited = nullptr) override;
data/rawtherapee-5.8/rtgui/impulsedenoise.cc:43:22:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
void ImpulseDenoise::read (const ProcParams* pp, const ParamsEdited* pedited)
data/rawtherapee-5.8/rtgui/impulsedenoise.h:40:10:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
    void read           (const rtengine::procparams::ProcParams* pp, const ParamsEdited* pedited = nullptr) override;
data/rawtherapee-5.8/rtgui/iptcpanel.cc:414:17:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
void IPTCPanel::read (const ProcParams* pp, const ParamsEdited* pedited)
data/rawtherapee-5.8/rtgui/iptcpanel.h:78:10:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
    void read           (const rtengine::procparams::ProcParams* pp, const ParamsEdited* pedited = nullptr) override;
data/rawtherapee-5.8/rtgui/labcurve.cc:232:14:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
void LCurve::read (const ProcParams* pp, const ParamsEdited* pedited)
data/rawtherapee-5.8/rtgui/labcurve.h:76:10:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
    void read           (const rtengine::procparams::ProcParams* pp, const ParamsEdited* pedited = nullptr) override;
data/rawtherapee-5.8/rtgui/lensgeom.cc:69:20:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
void LensGeometry::read (const ProcParams* pp, const ParamsEdited* pedited)
data/rawtherapee-5.8/rtgui/lensgeom.h:51:10:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
    void read           (const rtengine::procparams::ProcParams* pp, const ParamsEdited* pedited = nullptr) override;
data/rawtherapee-5.8/rtgui/lensprofile.cc:183:24:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
void LensProfilePanel::read(const rtengine::procparams::ProcParams* pp, const ParamsEdited* pedited)
data/rawtherapee-5.8/rtgui/lensprofile.h:33:10:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
    void read(const rtengine::procparams::ProcParams* pp, const ParamsEdited* pedited = nullptr) override;
data/rawtherapee-5.8/rtgui/localcontrast.cc:63:21:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
void LocalContrast::read(const ProcParams *pp, const ParamsEdited *pedited)
data/rawtherapee-5.8/rtgui/localcontrast.h:44:10:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
    void read(const rtengine::procparams::ProcParams *pp, const ParamsEdited *pedited=nullptr) override;
data/rawtherapee-5.8/rtgui/main-cli.cc:125:9:  [1] (buffer) strncpy:
  Easily used incorrectly; doesn't always \0-terminate or check for invalid
  pointers [MS-banned] (CWE-120).
        strncpy (exname, argv[0], 511);
data/rawtherapee-5.8/rtgui/main.cc:400:9:  [1] (buffer) strncpy:
  Easily used incorrectly; doesn't always \0-terminate or check for invalid
  pointers [MS-banned] (CWE-120).
        strncpy (exname, argv[0], 511);
data/rawtherapee-5.8/rtgui/metadatapanel.cc:71:21:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
void MetaDataPanel::read(const rtengine::procparams::ProcParams* pp, const ParamsEdited* pedited)
data/rawtherapee-5.8/rtgui/metadatapanel.cc:81:16:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
    exifpanel->read(pp, pedited);
data/rawtherapee-5.8/rtgui/metadatapanel.cc:82:16:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
    iptcpanel->read(pp, pedited);
data/rawtherapee-5.8/rtgui/metadatapanel.h:42:10:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
    void read(const rtengine::procparams::ProcParams* pp, const ParamsEdited* pedited = nullptr) override;
data/rawtherapee-5.8/rtgui/paramsedited.cc:837:23:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
        wb.equal = wb.equal && p.wb.equal == other.wb.equal;
data/rawtherapee-5.8/rtgui/paramsedited.cc:837:55:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
        wb.equal = wb.equal && p.wb.equal == other.wb.equal;
data/rawtherapee-5.8/rtgui/paramsedited.cc:1867:12:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
    if (wb.equal) {
data/rawtherapee-5.8/rtgui/paramsedited.cc:1868:104:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
        toEdit.wb.equal = dontforceSet && options.baBehav[ADDSET_WB_EQUAL] ? toEdit.wb.equal + mods.wb.equal : mods.wb.equal;
data/rawtherapee-5.8/rtgui/paramsedited.cc:1868:120:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
        toEdit.wb.equal = dontforceSet && options.baBehav[ADDSET_WB_EQUAL] ? toEdit.wb.equal + mods.wb.equal : mods.wb.equal;
data/rawtherapee-5.8/rtgui/paramsedited.h:241:10:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
    bool equal;
data/rawtherapee-5.8/rtgui/pcvignette.cc:32:18:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
void PCVignette::read (const ProcParams* pp, const ParamsEdited* pedited)
data/rawtherapee-5.8/rtgui/pcvignette.h:26:10:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
    void read           (const rtengine::procparams::ProcParams* pp, const ParamsEdited* pedited = nullptr) override;
data/rawtherapee-5.8/rtgui/pdsharpening.cc:96:20:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
void PdSharpening::read(const ProcParams* pp, const ParamsEdited* pedited)
data/rawtherapee-5.8/rtgui/pdsharpening.h:57:10:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
    void read (const rtengine::procparams::ProcParams* pp, const ParamsEdited* pedited = nullptr) override;
data/rawtherapee-5.8/rtgui/perspective.cc:51:23:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
void PerspCorrection::read (const ProcParams* pp, const ParamsEdited* pedited)
data/rawtherapee-5.8/rtgui/perspective.h:40:10:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
    void read           (const rtengine::procparams::ProcParams* pp, const ParamsEdited* pedited = nullptr) override;
data/rawtherapee-5.8/rtgui/preprocess.cc:61:18:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
void PreProcess::read(const rtengine::procparams::ProcParams* pp, const ParamsEdited* pedited)
data/rawtherapee-5.8/rtgui/preprocess.h:44:10:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
    void read           (const rtengine::procparams::ProcParams* pp, const ParamsEdited* pedited = nullptr) override;
data/rawtherapee-5.8/rtgui/prsharpening.cc:156:20:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
void PrSharpening::read (const ProcParams* pp, const ParamsEdited* pedited)
data/rawtherapee-5.8/rtgui/prsharpening.h:66:10:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
    void read           (const rtengine::procparams::ProcParams* pp, const ParamsEdited* pedited = nullptr) override;
data/rawtherapee-5.8/rtgui/rawcacorrection.cc:86:17:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
void RAWCACorr::read(const rtengine::procparams::ProcParams* pp, const ParamsEdited* pedited)
data/rawtherapee-5.8/rtgui/rawcacorrection.h:49:10:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
    void read                (const rtengine::procparams::ProcParams* pp, const ParamsEdited* pedited = nullptr) override;
data/rawtherapee-5.8/rtgui/rawexposure.cc:45:19:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
void RAWExposure::read(const rtengine::procparams::ProcParams* pp, const ParamsEdited* pedited)
data/rawtherapee-5.8/rtgui/rawexposure.h:39:10:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
    void read           (const rtengine::procparams::ProcParams* pp, const ParamsEdited* pedited = nullptr) override;
data/rawtherapee-5.8/rtgui/resize.cc:135:14:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
void Resize::read (const ProcParams* pp, const ParamsEdited* pedited)
data/rawtherapee-5.8/rtgui/resize.h:43:10:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
    void read           (const rtengine::procparams::ProcParams* pp, const ParamsEdited* pedited = nullptr) override;
data/rawtherapee-5.8/rtgui/retinex.cc:741:15:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
void Retinex::read (const ProcParams* pp, const ParamsEdited* pedited)
data/rawtherapee-5.8/rtgui/retinex.h:110:10:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
    void read                  (const rtengine::procparams::ProcParams* pp, const ParamsEdited* pedited = nullptr) override;
data/rawtherapee-5.8/rtgui/rgbcurves.cc:83:17:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
void RGBCurves::read (const ProcParams* pp, const ParamsEdited* pedited)
data/rawtherapee-5.8/rtgui/rgbcurves.h:52:10:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
    void read            (const rtengine::procparams::ProcParams* pp, const ParamsEdited* pedited = nullptr) override;
data/rawtherapee-5.8/rtgui/rotate.cc:57:14:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
void Rotate::read (const ProcParams* pp, const ParamsEdited* pedited)
data/rawtherapee-5.8/rtgui/rotate.h:42:10:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
    void read           (const rtengine::procparams::ProcParams* pp, const ParamsEdited* pedited = nullptr) override;
data/rawtherapee-5.8/rtgui/shadowshighlights.cc:71:25:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
void ShadowsHighlights::read (const ProcParams* pp, const ParamsEdited* pedited)
data/rawtherapee-5.8/rtgui/shadowshighlights.h:46:10:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
    void read           (const rtengine::procparams::ProcParams* pp, const ParamsEdited* pedited = nullptr) override;
data/rawtherapee-5.8/rtgui/sharpenedge.cc:59:19:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
void SharpenEdge::read(const ProcParams* pp, const ParamsEdited* pedited)
data/rawtherapee-5.8/rtgui/sharpenedge.h:50:10:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
    void read                (const rtengine::procparams::ProcParams* pp, const ParamsEdited* pedited = nullptr) override;
data/rawtherapee-5.8/rtgui/sharpening.cc:154:18:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
void Sharpening::read (const ProcParams* pp, const ParamsEdited* pedited)
data/rawtherapee-5.8/rtgui/sharpening.h:69:10:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
    void read           (const rtengine::procparams::ProcParams* pp, const ParamsEdited* pedited = nullptr) override;
data/rawtherapee-5.8/rtgui/sharpenmicro.cc:63:20:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
void SharpenMicro::read(const ProcParams* pp, const ParamsEdited* pedited)
data/rawtherapee-5.8/rtgui/sharpenmicro.h:53:10:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
    void read                (const rtengine::procparams::ProcParams* pp, const ParamsEdited* pedited = nullptr) override;
data/rawtherapee-5.8/rtgui/softlight.cc:46:17:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
void SoftLight::read(const ProcParams *pp, const ParamsEdited *pedited)
data/rawtherapee-5.8/rtgui/softlight.h:38:10:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
    void read(const rtengine::procparams::ProcParams *pp, const ParamsEdited *pedited=nullptr) override;
data/rawtherapee-5.8/rtgui/thumbnail.cc:140:81:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
        tpp = rtengine::Thumbnail::loadFromImage (fname, tw, th, 1, pparams->wb.equal);
data/rawtherapee-5.8/rtgui/thumbnail.cc:146:81:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
        tpp = rtengine::Thumbnail::loadFromImage (fname, tw, th, 1, pparams->wb.equal);
data/rawtherapee-5.8/rtgui/thumbnail.cc:153:81:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
        tpp = rtengine::Thumbnail::loadFromImage (fname, tw, th, 1, pparams->wb.equal);
data/rawtherapee-5.8/rtgui/thumbnail.cc:174:99:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
            tpp = rtengine::Thumbnail::loadFromRaw (fname, ri, sensorType, tw, th, 1, pparams->wb.equal, TRUE);
data/rawtherapee-5.8/rtgui/thumbnail.cc:221:59:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
            getAutoWB (ct, pparams->wb.green, pparams->wb.equal, pparams->wb.tempBias);
data/rawtherapee-5.8/rtgui/thumbnail.cc:764:64:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
void Thumbnail::getAutoWB (double& temp, double& green, double equal, double tempBias)
data/rawtherapee-5.8/rtgui/thumbnail.cc:767:80:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
        rtengine::ColorTemp ct(cfs.redAWBMul, cfs.greenAWBMul, cfs.blueAWBMul, equal);
data/rawtherapee-5.8/rtgui/thumbnail.cc:1100:40:  [1] (buffer) wcslen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
            wchar_t* par = new wchar_t[wcslen(org) + 1];
data/rawtherapee-5.8/rtgui/thumbnail.h:129:74:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
    void                  getAutoWB (double& temp, double& green, double equal, double tempBias);
data/rawtherapee-5.8/rtgui/tonecurve.cc:228:17:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
void ToneCurve::read (const ProcParams* pp, const ParamsEdited* pedited)
data/rawtherapee-5.8/rtgui/tonecurve.h:101:10:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
    void read                (const rtengine::procparams::ProcParams* pp, const ParamsEdited* pedited = nullptr) override;
data/rawtherapee-5.8/rtgui/toolpanel.h:106:28:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
    virtual void           read            (const rtengine::procparams::ProcParams* pp, const ParamsEdited* pedited = nullptr) {}
data/rawtherapee-5.8/rtgui/toolpanelcoord.cc:433:21:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
            rotate->read (params);
data/rawtherapee-5.8/rtgui/toolpanelcoord.cc:542:20:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
        toolPanel->read (params);
data/rawtherapee-5.8/rtgui/toolpanelcoord.h:278:57:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
    void getAutoWB (double& temp, double& green, double equal, double tempBias) override
data/rawtherapee-5.8/rtgui/toolpanelcoord.h:281:42:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
            ipc->getAutoWB (temp, green, equal, tempBias);
data/rawtherapee-5.8/rtgui/vibrance.cc:94:16:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
void Vibrance::read(const ProcParams* pp, const ParamsEdited* pedited)
data/rawtherapee-5.8/rtgui/vibrance.h:64:10:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
    void read                (const rtengine::procparams::ProcParams* pp, const ParamsEdited* pedited = nullptr) override;
data/rawtherapee-5.8/rtgui/vignetting.cc:53:18:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
void Vignetting::read (const ProcParams* pp, const ParamsEdited* pedited)
data/rawtherapee-5.8/rtgui/vignetting.h:43:10:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
    void read           (const rtengine::procparams::ProcParams* pp, const ParamsEdited* pedited = nullptr) override;
data/rawtherapee-5.8/rtgui/wavelet.cc:928:15:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
void Wavelet::read (const ProcParams* pp, const ParamsEdited* pedited)
data/rawtherapee-5.8/rtgui/wavelet.h:53:10:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
    void read (const rtengine::procparams::ProcParams* pp, const ParamsEdited* pedited = nullptr) override;
data/rawtherapee-5.8/rtgui/wbprovider.h:26:65:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
    virtual void getAutoWB (double& temp, double& green, double equal, double tempBias) {}
data/rawtherapee-5.8/rtgui/whitebalance.cc:342:18:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
    pack_start (*equal);
data/rawtherapee-5.8/rtgui/whitebalance.cc:394:26:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
                    a == equal
data/rawtherapee-5.8/rtgui/whitebalance.cc:406:18:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
        if (a != equal) {
data/rawtherapee-5.8/rtgui/whitebalance.cc:417:21:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
    } else if (a == equal) {
data/rawtherapee-5.8/rtgui/whitebalance.cc:428:25:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
        } else if (a == equal) {
data/rawtherapee-5.8/rtgui/whitebalance.cc:530:82:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
                equal->setValue (equal->getAddMode() ? 0.0 : (double)(currMethod.equal));
data/rawtherapee-5.8/rtgui/whitebalance.cc:564:20:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
void WhiteBalance::read (const ProcParams* pp, const ParamsEdited* pedited)
data/rawtherapee-5.8/rtgui/whitebalance.cc:569:29:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
    equal->setValue (pp->wb.equal);
data/rawtherapee-5.8/rtgui/whitebalance.cc:577:44:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
        equal->setEditedState (pedited->wb.equal ? Edited : UnEdited);
data/rawtherapee-5.8/rtgui/whitebalance.cc:601:65:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
            equal->setValue (equal->getAddMode() ? 0.0 : pp->wb.equal);
data/rawtherapee-5.8/rtgui/whitebalance.cc:605:39:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
            cache_customEqual (pp->wb.equal);
data/rawtherapee-5.8/rtgui/whitebalance.cc:630:73:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
                    equal->setValue (equal->getAddMode() ? 0.0 : pp->wb.equal);
data/rawtherapee-5.8/rtgui/whitebalance.cc:639:65:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
            equal->setValue (equal->getAddMode() ? 0.0 : pp->wb.equal);
data/rawtherapee-5.8/rtgui/whitebalance.cc:671:64:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
            equal->setValue(equal->getAddMode() ? 0.0 : pp->wb.equal);
data/rawtherapee-5.8/rtgui/whitebalance.cc:677:52:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
                equal->setEditedState (pedited->wb.equal ? Edited : UnEdited);
data/rawtherapee-5.8/rtgui/whitebalance.cc:729:38:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
    equal->setDefault (defParams->wb.equal);
data/rawtherapee-5.8/rtgui/whitebalance.cc:751:51:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
        equal->setDefaultEditedState (pedited->wb.equal ? Edited : UnEdited);
data/rawtherapee-5.8/rtgui/whitebalance.cc:816:29:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
    equal->trimValue(pp->wb.equal);
data/rawtherapee-5.8/rtgui/whitebalance.cc:829:45:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
void WhiteBalance::cache_customEqual(double equal)
data/rawtherapee-5.8/rtgui/whitebalance.cc:831:20:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
    custom_equal = equal;
data/rawtherapee-5.8/rtgui/whitebalance.h:68:15:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
    Adjuster* equal;
data/rawtherapee-5.8/rtgui/whitebalance.h:87:36:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
    void cache_customEqual (double equal);           //cache Equal only to allow its recall
data/rawtherapee-5.8/rtgui/whitebalance.h:103:10:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
    void read           (const rtengine::procparams::ProcParams* pp, const ParamsEdited* pedited = nullptr) override;
data/rawtherapee-5.8/rtgui/xtransprocess.cc:120:21:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
void XTransProcess::read(const rtengine::procparams::ProcParams* pp, const ParamsEdited* pedited)
data/rawtherapee-5.8/rtgui/xtransprocess.h:59:10:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
    void read(const rtengine::procparams::ProcParams* pp, const ParamsEdited* pedited = nullptr) override;
data/rawtherapee-5.8/rtgui/xtransrawexposure.cc:67:25:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
void XTransRAWExposure::read(const rtengine::procparams::ProcParams* pp, const ParamsEdited* pedited)
data/rawtherapee-5.8/rtgui/xtransrawexposure.h:43:10:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
    void read           (const rtengine::procparams::ProcParams* pp, const ParamsEdited* pedited = nullptr) override;

ANALYSIS SUMMARY:

Hits = 1198
Lines analyzed = 276185 in approximately 7.64 seconds (36153 lines/second)
Physical Source Lines of Code (SLOC) = 209176
Hits@level = [0] 800 [1] 451 [2] 658 [3]   1 [4]  81 [5]   7
Hits@level+ = [0+] 1998 [1+] 1198 [2+] 747 [3+]  89 [4+]  88 [5+]   7
Hits/KSLOC@level+ = [0+] 9.55177 [1+] 5.72723 [2+] 3.57116 [3+] 0.425479 [4+] 0.420698 [5+] 0.0334646
Dot directories skipped = 2 (--followdotdir overrides)
Minimum risk level = 1
Not every hit is necessarily a security vulnerability.
There may be other security vulnerabilities; review your code!
See 'Secure Programming HOWTO'
(https://dwheeler.com/secure-programs) for more information.