Flawfinder version 2.0.10, (C) 2001-2019 David A. Wheeler. Number of rules (primarily dangerous function names) in C/C++ ruleset: 223 Examining data/sdl-kitchensink-1.0.9/examples/example_audio.c Examining data/sdl-kitchensink-1.0.9/examples/example_complex.c Examining data/sdl-kitchensink-1.0.9/examples/example_custom.c Examining data/sdl-kitchensink-1.0.9/examples/example_rwops.c Examining data/sdl-kitchensink-1.0.9/examples/example_simple.c Examining data/sdl-kitchensink-1.0.9/include/kitchensink/internal/audio/kitaudio.h Examining data/sdl-kitchensink-1.0.9/include/kitchensink/internal/kitdecoder.h Examining data/sdl-kitchensink-1.0.9/include/kitchensink/internal/kitlibstate.h Examining data/sdl-kitchensink-1.0.9/include/kitchensink/internal/libass.h Examining data/sdl-kitchensink-1.0.9/include/kitchensink/internal/subtitle/kitatlas.h Examining data/sdl-kitchensink-1.0.9/include/kitchensink/internal/subtitle/kitsubtitle.h Examining data/sdl-kitchensink-1.0.9/include/kitchensink/internal/subtitle/kitsubtitlepacket.h Examining data/sdl-kitchensink-1.0.9/include/kitchensink/internal/subtitle/renderers/kitsubass.h Examining data/sdl-kitchensink-1.0.9/include/kitchensink/internal/subtitle/renderers/kitsubimage.h Examining data/sdl-kitchensink-1.0.9/include/kitchensink/internal/subtitle/renderers/kitsubrenderer.h Examining data/sdl-kitchensink-1.0.9/include/kitchensink/internal/utils/kitbuffer.h Examining data/sdl-kitchensink-1.0.9/include/kitchensink/internal/utils/kithelpers.h Examining data/sdl-kitchensink-1.0.9/include/kitchensink/internal/utils/kitlog.h Examining data/sdl-kitchensink-1.0.9/include/kitchensink/internal/utils/kitringbuffer.h Examining data/sdl-kitchensink-1.0.9/include/kitchensink/internal/video/kitvideo.h Examining data/sdl-kitchensink-1.0.9/include/kitchensink/kitchensink.h Examining data/sdl-kitchensink-1.0.9/include/kitchensink/kitcodec.h Examining data/sdl-kitchensink-1.0.9/include/kitchensink/kitconfig.h Examining data/sdl-kitchensink-1.0.9/include/kitchensink/kiterror.h Examining data/sdl-kitchensink-1.0.9/include/kitchensink/kitformat.h Examining data/sdl-kitchensink-1.0.9/include/kitchensink/kitlib.h Examining data/sdl-kitchensink-1.0.9/include/kitchensink/kitplayer.h Examining data/sdl-kitchensink-1.0.9/include/kitchensink/kitsource.h Examining data/sdl-kitchensink-1.0.9/include/kitchensink/kitutils.h Examining data/sdl-kitchensink-1.0.9/src/internal/audio/kitaudio.c Examining data/sdl-kitchensink-1.0.9/src/internal/kitdecoder.c Examining data/sdl-kitchensink-1.0.9/src/internal/kitlibstate.c Examining data/sdl-kitchensink-1.0.9/src/internal/libass.c Examining data/sdl-kitchensink-1.0.9/src/internal/subtitle/kitatlas.c Examining data/sdl-kitchensink-1.0.9/src/internal/subtitle/kitsubtitle.c Examining data/sdl-kitchensink-1.0.9/src/internal/subtitle/kitsubtitlepacket.c Examining data/sdl-kitchensink-1.0.9/src/internal/subtitle/renderers/kitsubass.c Examining data/sdl-kitchensink-1.0.9/src/internal/subtitle/renderers/kitsubimage.c Examining data/sdl-kitchensink-1.0.9/src/internal/subtitle/renderers/kitsubrenderer.c Examining data/sdl-kitchensink-1.0.9/src/internal/utils/kitbuffer.c Examining data/sdl-kitchensink-1.0.9/src/internal/utils/kithelpers.c Examining data/sdl-kitchensink-1.0.9/src/internal/utils/kitringbuffer.c Examining data/sdl-kitchensink-1.0.9/src/internal/video/kitvideo.c Examining data/sdl-kitchensink-1.0.9/src/kiterror.c Examining data/sdl-kitchensink-1.0.9/src/kitlib.c Examining data/sdl-kitchensink-1.0.9/src/kitplayer.c Examining data/sdl-kitchensink-1.0.9/src/kitsource.c Examining data/sdl-kitchensink-1.0.9/src/kitutils.c FINAL RESULTS: data/sdl-kitchensink-1.0.9/include/kitchensink/internal/utils/kitlog.h:8:18: [4] (format) fprintf: If format strings can be influenced by an attacker, they can be exploited (CWE-134). Use a constant for the format specification. #define LOG(...) fprintf(stderr, __VA_ARGS__); fflush(stderr) data/sdl-kitchensink-1.0.9/src/kiterror.c:26:5: [4] (format) vsnprintf: If format strings can be influenced by an attacker, they can be exploited, and note that sprintf variations do not always \0-terminate (CWE-134). Use a constant for the format specification. vsnprintf(_error_message, KIT_ERRBUFSIZE, fmt, args); data/sdl-kitchensink-1.0.9/examples/example_audio.c:36:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char audiobuf[AUDIOBUFFER_SIZE]; data/sdl-kitchensink-1.0.9/examples/example_complex.c:238:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char audiobuf[AUDIOBUFFER_SIZE]; data/sdl-kitchensink-1.0.9/examples/example_custom.c:72:16: [2] (misc) fopen: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). FILE *fd = fopen(filename, "rb"); data/sdl-kitchensink-1.0.9/examples/example_custom.c:152:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char audiobuf[AUDIOBUFFER_SIZE]; data/sdl-kitchensink-1.0.9/examples/example_rwops.c:144:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char audiobuf[AUDIOBUFFER_SIZE]; data/sdl-kitchensink-1.0.9/examples/example_simple.c:137:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char audiobuf[AUDIOBUFFER_SIZE]; data/sdl-kitchensink-1.0.9/include/kitchensink/kitcodec.h:24:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char name[KIT_CODEC_NAME_MAX]; ///< Codec short name, eg. "ogg" or "webm" data/sdl-kitchensink-1.0.9/include/kitchensink/kitcodec.h:25:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char description[KIT_CODEC_DESC_MAX]; ///< Codec longer, more descriptive name data/sdl-kitchensink-1.0.9/src/internal/kitdecoder.c:198:5: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(output, &dec->output, sizeof(Kit_OutputFormat)); data/sdl-kitchensink-1.0.9/src/internal/subtitle/kitatlas.c:154:13: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(&sources[i], &item->source, sizeof(SDL_Rect)); data/sdl-kitchensink-1.0.9/src/internal/subtitle/kitatlas.c:156:13: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(&targets[i], &item->target, sizeof(SDL_Rect)); data/sdl-kitchensink-1.0.9/src/internal/subtitle/kitatlas.c:173:5: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(&item.target, target, sizeof(SDL_Rect)); data/sdl-kitchensink-1.0.9/src/internal/subtitle/kitatlas.c:186:5: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(&atlas->items[atlas->cur_items++], &item, sizeof(Kit_TextureAtlasItem)); data/sdl-kitchensink-1.0.9/src/internal/utils/kitringbuffer.c:56:13: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy((rb->data + rb->wpos), data, len - k); data/sdl-kitchensink-1.0.9/src/internal/utils/kitringbuffer.c:57:13: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(rb->data, data+(len-k), k); data/sdl-kitchensink-1.0.9/src/internal/utils/kitringbuffer.c:59:13: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy((rb->data + rb->wpos), data, len); data/sdl-kitchensink-1.0.9/src/internal/utils/kitringbuffer.c:75:9: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(data, rb->data + rb->rpos, len - k); data/sdl-kitchensink-1.0.9/src/internal/utils/kitringbuffer.c:76:9: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(data + (len - k), rb->data, k); data/sdl-kitchensink-1.0.9/src/internal/utils/kitringbuffer.c:78:9: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(data, rb->data + rb->rpos, len); data/sdl-kitchensink-1.0.9/src/kiterror.c:12:8: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. static char _error_message[KIT_ERRBUFSIZE] = "\0"; data/sdl-kitchensink-1.0.9/src/internal/subtitle/renderers/kitsubass.c:62:17: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). strlen(sub->rects[r]->ass)); data/sdl-kitchensink-1.0.9/src/internal/subtitle/renderers/kitsubass.c:68:17: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). strlen(sub->rects[r]->ass), ANALYSIS SUMMARY: Hits = 24 Lines analyzed = 5754 in approximately 0.16 seconds (35454 lines/second) Physical Source Lines of Code (SLOC) = 3982 Hits@level = [0] 68 [1] 2 [2] 20 [3] 0 [4] 2 [5] 0 Hits@level+ = [0+] 92 [1+] 24 [2+] 22 [3+] 2 [4+] 2 [5+] 0 Hits/KSLOC@level+ = [0+] 23.104 [1+] 6.02712 [2+] 5.52486 [3+] 0.50226 [4+] 0.50226 [5+] 0 Dot directories skipped = 2 (--followdotdir overrides) Minimum risk level = 1 Not every hit is necessarily a security vulnerability. There may be other security vulnerabilities; review your code! See 'Secure Programming HOWTO' (https://dwheeler.com/secure-programs) for more information.