Flawfinder version 2.0.10, (C) 2001-2019 David A. Wheeler.
Number of rules (primarily dangerous function names) in C/C++ ruleset: 223
Examining data/tickr-0.7.0/xlib_stuff/test_x_pixmap_max_width.c
Examining data/tickr-0.7.0/xlib_stuff/win-config.c
Examining data/tickr-0.7.0/xlib_stuff/xlib-prog.c
Examining data/tickr-0.7.0/src/tickr/tickr_clock.c
Examining data/tickr-0.7.0/src/tickr/tickr_check4updates.c
Examining data/tickr-0.7.0/src/tickr/tickr_quicksetup.c
Examining data/tickr-0.7.0/src/tickr/tickr_params.c
Examining data/tickr-0.7.0/src/tickr/tickr_resource.c
Examining data/tickr-0.7.0/src/tickr/tickr_render.c
Examining data/tickr-0.7.0/src/tickr/tickr.h
Examining data/tickr-0.7.0/src/tickr/tickr_helptext.c
Examining data/tickr-0.7.0/src/tickr/tickr_connectwin.c
Examining data/tickr-0.7.0/src/tickr/tickr_feedpicker.c
Examining data/tickr-0.7.0/src/tickr/tickr_opml.c
Examining data/tickr-0.7.0/src/tickr/tickr_quickfeedpicker.c
Examining data/tickr-0.7.0/src/tickr/tickr_tls.c
Examining data/tickr-0.7.0/src/tickr/tickr_list.c
Examining data/tickr-0.7.0/src/tickr/tickr_error.c
Examining data/tickr-0.7.0/src/tickr/tickr_feedparser.c
Examining data/tickr-0.7.0/src/tickr/tickr_misc.c
Examining data/tickr-0.7.0/src/tickr/tickr_error.h
Examining data/tickr-0.7.0/src/tickr/tickr_http.c
Examining data/tickr-0.7.0/src/tickr/tickr_prefwin.c
Examining data/tickr-0.7.0/src/tickr/tickr_main.c
Examining data/tickr-0.7.0/src/tickr/tickr_html_entities.h
Examining data/tickr-0.7.0/src/tickr/tickr_tls.h
Examining data/tickr-0.7.0/src/tickr/tickr_otherwins.c
Examining data/tickr-0.7.0/src/tickr/tickr_list.h
Examining data/tickr-0.7.0/src/libetm-0.5.0/win32_specific.h
Examining data/tickr-0.7.0/src/libetm-0.5.0/error.h
Examining data/tickr-0.7.0/src/libetm-0.5.0/misc.c
Examining data/tickr-0.7.0/src/libetm-0.5.0/tcp_socket.h
Examining data/tickr-0.7.0/src/libetm-0.5.0/error_handler_example.c
Examining data/tickr-0.7.0/src/libetm-0.5.0/error.c
Examining data/tickr-0.7.0/src/libetm-0.5.0/str_mem.h
Examining data/tickr-0.7.0/src/libetm-0.5.0/tcp_socket.c
Examining data/tickr-0.7.0/src/libetm-0.5.0/misc.h
Examining data/tickr-0.7.0/src/libetm-0.5.0/libetm.h
Examining data/tickr-0.7.0/src/libetm-0.5.0/win32_specific.c
Examining data/tickr-0.7.0/src/libetm-0.5.0/str_mem.c
Examining data/tickr-0.7.0/glib-2.26.0-win32-patch/test/test.c
FINAL RESULTS:
data/tickr-0.7.0/src/libetm-0.5.0/error_handler_example.c:20:2: [4] (format) vsnprintf:
If format strings can be influenced by an attacker, they can be exploited,
and note that sprintf variations do not always \0-terminate (CWE-134). Use
a constant for the format specification.
vsnprintf(error_str + strlen(error_str),
data/tickr-0.7.0/src/libetm-0.5.0/error_handler_example.c:54:2: [4] (format) vsnprintf:
If format strings can be influenced by an attacker, they can be exploited,
and note that sprintf variations do not always \0-terminate (CWE-134). Use
a constant for the format specification.
vsnprintf(warning_str + strlen(warning_str),
data/tickr-0.7.0/src/libetm-0.5.0/libetm.h:46:2: [4] (format) fprintf:
If format strings can be influenced by an attacker, they can be exploited
(CWE-134). Use a constant for the format specification.
fprintf(STD_OUT, __VA_ARGS__);\
data/tickr-0.7.0/src/libetm-0.5.0/libetm.h:51:2: [4] (format) fprintf:
If format strings can be influenced by an attacker, they can be exploited
(CWE-134). Use a constant for the format specification.
fprintf(STD_ERR, __VA_ARGS__);\
data/tickr-0.7.0/src/libetm-0.5.0/tcp_socket.c:39:2: [4] (format) fprintf:
If format strings can be influenced by an attacker, they can be exploited
(CWE-134). Use a constant for the format specification.
fprintf(stream, ## __VA_ARGS__);\
data/tickr-0.7.0/src/tickr/tickr_clock.c:327:6: [4] (format) snprintf:
If format strings can be influenced by an attacker, they can be exploited,
and note that sprintf variations do not always \0-terminate (CWE-134). Use
a constant for the format specification.
snprintf(tmp, 64, time_str, i, i, i, i, i, i);
data/tickr-0.7.0/src/tickr/tickr_clock.c:329:6: [4] (format) snprintf:
If format strings can be influenced by an attacker, they can be exploited,
and note that sprintf variations do not always \0-terminate (CWE-134). Use
a constant for the format specification.
snprintf(tmp, 64, time_str, i, i, i, i);
data/tickr-0.7.0/src/tickr/tickr_error.c:57:2: [4] (format) vsnprintf:
If format strings can be influenced by an attacker, they can be exploited,
and note that sprintf variations do not always \0-terminate (CWE-134). Use
a constant for the format specification.
vsnprintf(error_str + strlen(error_str),
data/tickr-0.7.0/src/tickr/tickr_error.c:91:2: [4] (format) vsnprintf:
If format strings can be influenced by an attacker, they can be exploited,
and note that sprintf variations do not always \0-terminate (CWE-134). Use
a constant for the format specification.
vsnprintf(warning_str + strlen(warning_str),
data/tickr-0.7.0/src/tickr/tickr_list.c:63:3: [4] (format) snprintf:
If format strings can be influenced by an attacker, they can be exploited,
and note that sprintf variations do not always \0-terminate (CWE-134). Use
a constant for the format specification.
snprintf(node->rank, FLIST_RANK_STR_LEN + 1, FLIST_RANK_FORMAT, atoi(rank));
data/tickr-0.7.0/src/tickr/tickr_main.c:1246:2: [4] (format) fprintf:
If format strings can be influenced by an attacker, they can be exploited
(CWE-134). Use a constant for the format specification.
fprintf(STD_OUT, APP_NAME " version " APP_V_NUM "\n");
data/tickr-0.7.0/src/tickr/tickr_misc.c:241:2: [4] (format) fprintf:
If format strings can be influenced by an attacker, they can be exploited
(CWE-134). Use a constant for the format specification.
fprintf(STD_OUT, APP_NAME " config (from file):\n");
data/tickr-0.7.0/src/tickr/tickr_opml.c:225:8: [4] (format) snprintf:
If format strings can be influenced by an attacker, they can be exploited,
and note that sprintf variations do not always \0-terminate (CWE-134). Use
a constant for the format specification.
snprintf(feed_rank, FLIST_RANK_STR_LEN + 1, FLIST_RANK_FORMAT, atoi((char *)str3));
data/tickr-0.7.0/src/tickr/tickr_opml.c:308:2: [4] (format) snprintf:
If format strings can be influenced by an attacker, they can be exploited,
and note that sprintf variations do not always \0-terminate (CWE-134). Use
a constant for the format specification.
snprintf(tmp, STR_SIZE, opml_header, OPML_TITLE);
data/tickr-0.7.0/src/tickr/tickr_opml.c:317:3: [4] (format) snprintf:
If format strings can be influenced by an attacker, they can be exploited,
and note that sprintf variations do not always \0-terminate (CWE-134). Use
a constant for the format specification.
snprintf(tmp, STR_SIZE, opml_item, esc_str1, esc_str2, node->rank);
data/tickr-0.7.0/src/tickr/tickr_params.c:678:3: [4] (format) fprintf:
If format strings can be influenced by an attacker, they can be exploited
(CWE-134). Use a constant for the format specification.
fprintf(conf_fp, tmp,
data/tickr-0.7.0/src/tickr/tickr_tls.c:145:37: [4] (format) fprintf:
If format strings can be influenced by an attacker, they can be exploited
(CWE-134). Use a constant for the format specification.
#define FPRINTF_FFLUSH_2(a1, a2); {fprintf(a1, a2); fflush(a1);}
data/tickr-0.7.0/src/tickr/tickr_tls.c:146:41: [4] (format) fprintf:
If format strings can be influenced by an attacker, they can be exploited
(CWE-134). Use a constant for the format specification.
#define FPRINTF_FFLUSH_3(a1, a2, a3); {fprintf(a1, a2, a3); fflush(a1);}
data/tickr-0.7.0/xlib_stuff/test_x_pixmap_max_width.c:17:3: [4] (format) fprintf:
If format strings can be influenced by an attacker, they can be exploited
(CWE-134). Use a constant for the format specification.
{fprintf(stdout, __VA_ARGS__); fflush(stdout);}
data/tickr-0.7.0/src/libetm-0.5.0/str_mem.c:458:2: [3] (random) srand:
This function is not sufficiently random for security-related functions
such as key and nonce creation (CWE-327). Use a more secure technique for
acquiring random values.
srand(time(0));
data/tickr-0.7.0/xlib_stuff/test_x_pixmap_max_width.c:29:23: [3] (buffer) getenv:
Environment variables are untrustable input if they can be set by an
attacker. They can have any content and length, and the same variable can
be set more than once (CWE-807, CWE-20). Check environment variables
carefully before using them.
char *displ_name = getenv("DISPLAY");
data/tickr-0.7.0/xlib_stuff/win-config.c:23:22: [3] (buffer) getenv:
Environment variables are untrustable input if they can be set by an
attacker. They can have any content and length, and the same variable can
be set more than once (CWE-807, CWE-20). Check environment variables
carefully before using them.
char *displ_name = getenv("DISPLAY");
data/tickr-0.7.0/xlib_stuff/xlib-prog.c:23:22: [3] (buffer) getenv:
Environment variables are untrustable input if they can be set by an
attacker. They can have any content and length, and the same variable can
be set more than once (CWE-807, CWE-20). Check environment variables
carefully before using them.
char *displ_name = getenv("DISPLAY");
data/tickr-0.7.0/src/libetm-0.5.0/error_handler_example.c:12:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char error_str[ERROR_WARNING_STR_MAXLEN + 1] = "";
data/tickr-0.7.0/src/libetm-0.5.0/error_handler_example.c:50:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char warning_str[ERROR_WARNING_STR_MAXLEN + 1] = "";
data/tickr-0.7.0/src/libetm-0.5.0/misc.c:53:17: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
return (const char *)libv[i];
data/tickr-0.7.0/src/libetm-0.5.0/str_mem.c:236:9: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
static char lib_static_str[N_SIMULTANEOUS_CALLS][128];
data/tickr-0.7.0/src/libetm-0.5.0/str_mem.c:301:16: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
return (const char *)lib_static_str[count];
data/tickr-0.7.0/src/libetm-0.5.0/str_mem.c:311:9: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
static char lib_static_str[N_SIMULTANEOUS_CALLS][128];
data/tickr-0.7.0/src/libetm-0.5.0/str_mem.c:318:16: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
return (const char *)lib_static_str[count];
data/tickr-0.7.0/src/libetm-0.5.0/str_mem.c:450:9: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
static char str[1024];
data/tickr-0.7.0/src/libetm-0.5.0/str_mem.c:451:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char str_a[65] = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijkl";
data/tickr-0.7.0/src/libetm-0.5.0/str_mem.c:452:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char str_d[17] = "1234567890123456";
data/tickr-0.7.0/src/libetm-0.5.0/str_mem.c:453:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char str_b[65] = "1234567890abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ00";
data/tickr-0.7.0/src/libetm-0.5.0/str_mem.c:485:9: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
static char str2[N_SIMULTANEOUS_CALLS][512];
data/tickr-0.7.0/src/libetm-0.5.0/str_mem.c:497:16: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
return (const char *)str2[count];
data/tickr-0.7.0/src/libetm-0.5.0/tcp_socket.c:121:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char ipa_str[INET6_ADDRSTRLEN + 1];
data/tickr-0.7.0/src/libetm-0.5.0/tcp_socket.c:376:9: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
static char str[N_SIMULTANEOUS_CALLS][1024];
data/tickr-0.7.0/src/libetm-0.5.0/tcp_socket.c:387:16: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
return (const char *)str[count];
data/tickr-0.7.0/src/libetm-0.5.0/win32_specific.c:67:9: [2] (buffer) TCHAR:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
static TCHAR appdata_dir[MAX_PATH + 1];
data/tickr-0.7.0/src/libetm-0.5.0/win32_specific.c:101:9: [2] (buffer) TCHAR:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
static TCHAR progfiles_dir[MAX_PATH + 1];
data/tickr-0.7.0/src/libetm-0.5.0/win32_specific.c:118:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char app_win32regkey_full[128];
data/tickr-0.7.0/src/libetm-0.5.0/win32_specific.c:146:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char app_win32regkey_full[128];
data/tickr-0.7.0/src/libetm-0.5.0/win32_specific.c:171:9: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
static char browser_cmd[512];
data/tickr-0.7.0/src/libetm-0.5.0/win32_specific.c:260:9: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
static char str[N_SIMULTANEOUS_CALLS][1024];
data/tickr-0.7.0/src/libetm-0.5.0/win32_specific.c:272:16: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
return (const char *)str[count];
data/tickr-0.7.0/src/tickr/tickr.h:369:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char active_link[FILE_NAME_MAXLEN + 1];
data/tickr-0.7.0/src/tickr/tickr.h:385:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char url[FILE_NAME_MAXLEN + 1];
data/tickr-0.7.0/src/tickr/tickr.h:394:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char id[FILE_NAME_MAXLEN + 1]; /* URL (including local URL) or full path/file name */
data/tickr-0.7.0/src/tickr/tickr.h:395:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char orig_url[FILE_NAME_MAXLEN + 1]; /* In case of HTTP redirects */
data/tickr-0.7.0/src/tickr/tickr.h:398:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char feed_title[FEED_TITLE_MAXLEN + 1];
data/tickr-0.7.0/src/tickr/tickr.h:399:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char resrc_dump[FILE_NAME_MAXLEN + 1]; /* Downloaded resource (= text file) */
data/tickr-0.7.0/src/tickr/tickr.h:400:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char xml_dump[FILE_NAME_MAXLEN + 1]; /* Output of XML/RSS processing of downloaded resource */
data/tickr-0.7.0/src/tickr/tickr.h:403:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char xml_dump_extra[FILE_NAME_MAXLEN + 1];
data/tickr-0.7.0/src/tickr/tickr.h:416:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char user[USER_MAXLEN + 1];
data/tickr-0.7.0/src/tickr/tickr.h:417:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char psw[PSW_MAXLEN + 1];
data/tickr-0.7.0/src/tickr/tickr.h:418:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char auth_str[AUTH_STR_MAXLEN + 1];
data/tickr-0.7.0/src/tickr/tickr.h:430:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char host[PROXY_HOST_MAXLEN + 1];
data/tickr-0.7.0/src/tickr/tickr.h:431:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char port[PROXY_PORT_MAXLEN + 1];
data/tickr-0.7.0/src/tickr/tickr.h:432:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char proxy_str[PROXY_STR_MAXLEN + 1];
data/tickr-0.7.0/src/tickr/tickr.h:434:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char user[PROXY_USER_MAXLEN + 1];
data/tickr-0.7.0/src/tickr/tickr.h:435:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char psw[PROXY_PSW_MAXLEN + 1];
data/tickr-0.7.0/src/tickr/tickr.h:436:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char auth_str[PROXY_AUTH_STR_MAXLEN + 1];
data/tickr-0.7.0/src/tickr/tickr.h:442:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char font_name_size[FONT_MAXLEN + 1];
data/tickr-0.7.0/src/tickr/tickr.h:467:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char line_delimiter[DELIMITER_MAXLEN + 1];
data/tickr-0.7.0/src/tickr/tickr.h:474:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char feed_title_delimiter[DELIMITER_MAXLEN + 1];
data/tickr-0.7.0/src/tickr/tickr.h:476:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char item_title_delimiter[DELIMITER_MAXLEN + 1];
data/tickr-0.7.0/src/tickr/tickr.h:478:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char item_description_delimiter[DELIMITER_MAXLEN + 1];
data/tickr-0.7.0/src/tickr/tickr.h:486:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char homefeed[FILE_NAME_MAXLEN + 1];
data/tickr-0.7.0/src/tickr/tickr.h:487:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char open_link_cmd[FILE_NAME_MAXLEN + 1];
data/tickr-0.7.0/src/tickr/tickr.h:488:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char open_link_args[FILE_NAME_MAXLEN + 1];
data/tickr-0.7.0/src/tickr/tickr.h:493:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char clock_font_name_size[FONT_MAXLEN + 1];
data/tickr-0.7.0/src/tickr/tickr.h:510:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char user[USER_MAXLEN + 1];
data/tickr-0.7.0/src/tickr/tickr.h:512:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char proxy_host[PROXY_HOST_MAXLEN + 1];
data/tickr-0.7.0/src/tickr/tickr.h:513:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char proxy_port[PROXY_PORT_MAXLEN + 1];
data/tickr-0.7.0/src/tickr/tickr.h:515:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char proxy_user[PROXY_USER_MAXLEN + 1];
data/tickr-0.7.0/src/tickr/tickr_check4updates.c:24:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char str1[256], str2[256];
data/tickr-0.7.0/src/tickr/tickr_check4updates.c:72:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char last_stable_version[32], installed_version[32], *p;
data/tickr-0.7.0/src/tickr/tickr_clock.c:47:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char time_str[64];
data/tickr-0.7.0/src/tickr/tickr_clock.c:48:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char tmp[64];
data/tickr-0.7.0/src/tickr/tickr_clock.c:255:9: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
static char clock_font_name_size_bak[FONT_MAXLEN + 1] = "";
data/tickr-0.7.0/src/tickr/tickr_clock.c:267:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char tmp[64];
data/tickr-0.7.0/src/tickr/tickr_clock.c:319:8: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
if (atoi(tmp) > 9)
data/tickr-0.7.0/src/tickr/tickr_error.c:46:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char error_str[ERROR_WARNING_STR_MAXLEN + 1] = "";
data/tickr-0.7.0/src/tickr/tickr_error.c:87:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char warning_str[ERROR_WARNING_STR_MAXLEN + 1] = "";
data/tickr-0.7.0/src/tickr/tickr_feedparser.c:46:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char feed_title[FEED_TITLE_MAXLEN + 1];
data/tickr-0.7.0/src/tickr/tickr_feedparser.c:47:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char feed_link[FILE_NAME_MAXLEN + 1];
data/tickr-0.7.0/src/tickr/tickr_feedparser.c:48:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char feed_ttl[32];
data/tickr-0.7.0/src/tickr/tickr_feedparser.c:49:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char file_name[FILE_NAME_MAXLEN + 1];
data/tickr-0.7.0/src/tickr/tickr_feedparser.c:50:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char url[FILE_NAME_MAXLEN + 1];
data/tickr-0.7.0/src/tickr/tickr_feedparser.c:117:20: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
resrc->rss_ttl = atoi(feed_ttl);
data/tickr-0.7.0/src/tickr/tickr_feedparser.c:278:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char tmp_5[5]; /* 1 (ascii char) + 3 ("000" -> "999") + 1 (NULL terminator) */
data/tickr-0.7.0/src/tickr/tickr_feedparser.c:397:9: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
static char str2[1024];
data/tickr-0.7.0/src/tickr/tickr_feedpicker.c:29:8: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
static char home_feed[FILE_NAME_MAXLEN + 1];
data/tickr-0.7.0/src/tickr/tickr_feedpicker.c:46:52: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
gtk_entry_set_text(GTK_ENTRY(rank_entry), itoa2(atoi(rank_str)));
data/tickr-0.7.0/src/tickr/tickr_feedpicker.c:170:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char rank[FLIST_RANK_STR_LEN + 1];
data/tickr-0.7.0/src/tickr/tickr_feedpicker.c:235:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char rss_feed_title[FEED_TITLE_MAXLEN + 1];
data/tickr-0.7.0/src/tickr/tickr_feedpicker.c:236:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char rss_feed_link[FILE_NAME_MAXLEN + 1];
data/tickr-0.7.0/src/tickr/tickr_feedpicker.c:237:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char rss_feed_ttl[32];
data/tickr-0.7.0/src/tickr/tickr_feedpicker.c:238:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char rank[FLIST_RANK_STR_LEN + 1];
data/tickr-0.7.0/src/tickr/tickr_feedpicker.c:240:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char resrc_id_bak[FILE_NAME_MAXLEN + 1];
data/tickr-0.7.0/src/tickr/tickr_feedpicker.c:296:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char resrc_id_bak[FILE_NAME_MAXLEN + 1];
data/tickr-0.7.0/src/tickr/tickr_feedpicker.c:502:7: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
atoi(gtk_entry_get_text(GTK_ENTRY(rank_entry))) >= 0) &&
data/tickr-0.7.0/src/tickr/tickr_http.c:109:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char scheme[URL_SCHEME_MAXLEN + 1];
data/tickr-0.7.0/src/tickr/tickr_http.c:110:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char host[FILE_NAME_MAXLEN + 1];
data/tickr-0.7.0/src/tickr/tickr_http.c:111:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char port_num[PORT_STR_MAXLEN + 1];
data/tickr-0.7.0/src/tickr/tickr_http.c:183:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char header_field[HTTP_HEADER_FIELD_MAXLEN + 1];
data/tickr-0.7.0/src/tickr/tickr_http.c:186:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char orig_scheme[URL_SCHEME_MAXLEN + 1];
data/tickr-0.7.0/src/tickr/tickr_http.c:187:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char orig_host[FILE_NAME_MAXLEN + 1];
data/tickr-0.7.0/src/tickr/tickr_http.c:188:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char orig_port[PORT_STR_MAXLEN + 1];
data/tickr-0.7.0/src/tickr/tickr_http.c:189:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char new_port[PORT_STR_MAXLEN + 1];
data/tickr-0.7.0/src/tickr/tickr_http.c:272:31: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
else if ((content_length = atoi(get_http_header_value("Content-Length", response))) > 0) {
data/tickr-0.7.0/src/tickr/tickr_http.c:462:9: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
static char str[HTTP_REQUEST_MAXLEN + 1];
data/tickr-0.7.0/src/tickr/tickr_http.c:485:9: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
static char location[FILE_NAME_MAXLEN + 1];
data/tickr-0.7.0/src/tickr/tickr_http.c:577:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char status_code[4];
data/tickr-0.7.0/src/tickr/tickr_http.c:592:9: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
return atoi(status_code);
data/tickr-0.7.0/src/tickr/tickr_http.c:598:9: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
static char header_value[1024];
data/tickr-0.7.0/src/tickr/tickr_http.c:662:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char size_str[32], *tailptr;
data/tickr-0.7.0/src/tickr/tickr_http.c:691:9: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
static char str[URL_SCHEME_MAXLEN + 1];
data/tickr-0.7.0/src/tickr/tickr_http.c:712:9: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
static char str[FILE_NAME_MAXLEN + 1];
data/tickr-0.7.0/src/tickr/tickr_http.c:747:30: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
if (str_is_num(port_num) && atoi(port_num) > 0 && atoi(port_num) < 65536)
data/tickr-0.7.0/src/tickr/tickr_http.c:747:52: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
if (str_is_num(port_num) && atoi(port_num) > 0 && atoi(port_num) < 65536)
data/tickr-0.7.0/src/tickr/tickr_http.c:759:9: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
static char str[FILE_NAME_MAXLEN + 1];
data/tickr-0.7.0/src/tickr/tickr_list.c:62:6: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
if (atoi(rank) > 0)
data/tickr-0.7.0/src/tickr/tickr_list.c:63:67: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
snprintf(node->rank, FLIST_RANK_STR_LEN + 1, FLIST_RANK_FORMAT, atoi(rank));
data/tickr-0.7.0/src/tickr/tickr_list.c:392:9: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
if (atoi((const char *)(node_i[min]->rank)) > atoi((const char *)(node_i[j]->rank)))
data/tickr-0.7.0/src/tickr/tickr_list.c:392:21: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
if (atoi((const char *)(node_i[min]->rank)) > atoi((const char *)(node_i[j]->rank)))
data/tickr-0.7.0/src/tickr/tickr_list.c:392:51: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
if (atoi((const char *)(node_i[min]->rank)) > atoi((const char *)(node_i[j]->rank)))
data/tickr-0.7.0/src/tickr/tickr_list.c:392:63: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
if (atoi((const char *)(node_i[min]->rank)) > atoi((const char *)(node_i[j]->rank)))
data/tickr-0.7.0/src/tickr/tickr_list.c:401:8: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
if (atoi(node_i[i]->rank) > 0)
data/tickr-0.7.0/src/tickr/tickr_list.c:405:8: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
if (atoi(node_i[i]->rank) == 0)
data/tickr-0.7.0/src/tickr/tickr_list.c:448:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char *list_file_name, default_list_file_name[FILE_NAME_MAXLEN + 1];
data/tickr-0.7.0/src/tickr/tickr_list.c:450:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char *tmp, tmp2[FLIST_RANK_STR_LEN + 1];
data/tickr-0.7.0/src/tickr/tickr_list.c:535:6: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
atoi(node->rank),
data/tickr-0.7.0/src/tickr/tickr_list.h:45:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char rank[FLIST_RANK_STR_LEN + 1];
data/tickr-0.7.0/src/tickr/tickr_list.h:48:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char sig[FLIST_SIG_LEN + 1];
data/tickr-0.7.0/src/tickr/tickr_main.c:315:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char browser_cmd[512], tmp[1024];
data/tickr-0.7.0/src/tickr/tickr_main.c:417:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char tmp1[FILE_NAME_MAXLEN + 1], tmp2[FILE_NAME_MAXLEN + 1];
data/tickr-0.7.0/src/tickr/tickr_main.c:418:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char *argv[32]; /* Up to 32 - 3 (prog name, URL, NULL) args */
data/tickr-0.7.0/src/tickr/tickr_main.c:534:9: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
static char tmp1[2][256 + 64], tmp2[2][64];
data/tickr-0.7.0/src/tickr/tickr_main.c:548:16: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
return (const char *)str_n_cat(tmp1[i], tmp2[i], 63);
data/tickr-0.7.0/src/tickr/tickr_main.c:554:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char *str1, tmp[4];
data/tickr-0.7.0/src/tickr/tickr_main.c:574:17: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
if (rank == atoi(str_n_cpy(tmp, str1 + 1, 3))) {
data/tickr-0.7.0/src/tickr/tickr_main.c:847:3: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy((void *)prm_bak, (const void *)new_prm, sizeof(Params));
data/tickr-0.7.0/src/tickr/tickr_main.c:884:3: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy((void *)prm_bak, (const void *)new_prm, sizeof(Params));
data/tickr-0.7.0/src/tickr/tickr_main.c:895:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char font_name[FONT_NAME_MAXLEN + 1], font_size[FONT_SIZE_MAXLEN + 1];
data/tickr-0.7.0/src/tickr/tickr_main.c:896:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char c_font_name[FONT_NAME_MAXLEN + 1], c_font_size[FONT_SIZE_MAXLEN + 1];
data/tickr-0.7.0/src/tickr/tickr_main.c:920:8: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
if (atoi(c_font_size) > atoi(font_size))
data/tickr-0.7.0/src/tickr/tickr_main.c:920:28: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
if (atoi(c_font_size) > atoi(font_size))
data/tickr-0.7.0/src/tickr/tickr_main.c:1066:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char tmp[256];
data/tickr-0.7.0/src/tickr/tickr_main.c:1605:22: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
if ((instance_id = atoi(argv[1] + strlen("-instance-id="))) < 1 || instance_id > 99) {
data/tickr-0.7.0/src/tickr/tickr_misc.c:26:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char tmp[TMPSTR_SIZE + 1];
data/tickr-0.7.0/src/tickr/tickr_misc.c:82:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char tmp[TMPSTR_SIZE + 1];
data/tickr-0.7.0/src/tickr/tickr_misc.c:141:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char tmp1[FILE_NAME_MAXLEN + 1];
data/tickr-0.7.0/src/tickr/tickr_misc.c:142:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char *argv[3];
data/tickr-0.7.0/src/tickr/tickr_misc.c:188:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char *font[NFAMMAX * NFACEMAX + 1], *tmp;
data/tickr-0.7.0/src/tickr/tickr_opml.c:24:8: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
static char tmp_url[FILE_NAME_MAXLEN + 1], tmp_str[256];
data/tickr-0.7.0/src/tickr/tickr_opml.c:113:9: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
static char file_name2[FILE_NAME_MAXLEN + 1];
data/tickr-0.7.0/src/tickr/tickr_opml.c:208:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char feed_title[FEED_TITLE_MAXLEN + 1];
data/tickr-0.7.0/src/tickr/tickr_opml.c:209:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char feed_rank[FLIST_RANK_STR_LEN + 1];
data/tickr-0.7.0/src/tickr/tickr_opml.c:225:71: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
snprintf(feed_rank, FLIST_RANK_STR_LEN + 1, FLIST_RANK_FORMAT, atoi((char *)str3));
data/tickr-0.7.0/src/tickr/tickr_opml.c:303:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char *opml_str, tmp[STR_SIZE];
data/tickr-0.7.0/src/tickr/tickr_opml.c:306:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char time_str[64];
data/tickr-0.7.0/src/tickr/tickr_opml.c:339:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char tmp[TMPSTR_SIZE + 1];
data/tickr-0.7.0/src/tickr/tickr_otherwins.c:42:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char resrc_id_bak[FILE_NAME_MAXLEN + 1];
data/tickr-0.7.0/src/tickr/tickr_otherwins.c:89:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char tmp1[256], *tmp2, *tmp3;
data/tickr-0.7.0/src/tickr/tickr_params.c:23:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char tmp_font[FONT_MAXLEN + 1];
data/tickr-0.7.0/src/tickr/tickr_params.c:115:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char options_array[N_OPTION_MAX][OPTION_MAXLEN + 2];
data/tickr-0.7.0/src/tickr/tickr_params.c:116:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char *ptr[N_OPTION_MAX + 1];
data/tickr-0.7.0/src/tickr/tickr_params.c:192:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char name[OPTION_NAME_MAXLEN + 1], value[OPTION_VALUE_MAXLEN + 1];
data/tickr-0.7.0/src/tickr/tickr_params.c:193:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char font_name[FONT_NAME_MAXLEN + 1], font_size[FONT_SIZE_MAXLEN + 1];
data/tickr-0.7.0/src/tickr/tickr_params.c:194:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char c_font_name[FONT_NAME_MAXLEN + 1], c_font_size[FONT_SIZE_MAXLEN + 1];
data/tickr-0.7.0/src/tickr/tickr_params.c:195:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char tmp[OPTION_MAXLEN + 1];
data/tickr-0.7.0/src/tickr/tickr_params.c:196:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char tmp_font[FONT_MAXLEN + 1];
data/tickr-0.7.0/src/tickr/tickr_params.c:233:16: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
prm->delay = atoi(value);
data/tickr-0.7.0/src/tickr/tickr_params.c:235:21: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
prm->shift_size = atoi(value);
data/tickr-0.7.0/src/tickr/tickr_params.c:240:7: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
if (atoi(font_size) > FONT_MAXSIZE) {
data/tickr-0.7.0/src/tickr/tickr_params.c:286:16: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
prm->win_x = atoi(value);
data/tickr-0.7.0/src/tickr/tickr_params.c:288:16: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
prm->win_y = atoi(value);
data/tickr-0.7.0/src/tickr/tickr_params.c:290:16: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
prm->win_w = atoi(value);
data/tickr-0.7.0/src/tickr/tickr_params.c:295:16: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
prm->win_h = atoi(value);
data/tickr-0.7.0/src/tickr/tickr_params.c:317:27: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
prm->win_transparency = atoi(value);
data/tickr-0.7.0/src/tickr/tickr_params.c:354:26: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
prm->shadow_offset_x = atoi(value);
data/tickr-0.7.0/src/tickr/tickr_params.c:356:26: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
prm->shadow_offset_y = atoi(value);
data/tickr-0.7.0/src/tickr/tickr_params.c:358:20: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
prm->shadow_fx = atoi(value);
data/tickr-0.7.0/src/tickr/tickr_params.c:372:22: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
prm->rss_refresh = atoi(value);
data/tickr-0.7.0/src/tickr/tickr_params.c:404:27: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
prm->n_items_per_feed = atoi(value);
data/tickr-0.7.0/src/tickr/tickr_params.c:568:7: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
if (atoi(value) < 1 || atoi(value) > 60) {
data/tickr-0.7.0/src/tickr/tickr_params.c:568:26: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
if (atoi(value) < 1 || atoi(value) > 60) {
data/tickr-0.7.0/src/tickr/tickr_params.c:572:27: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
prm->connect_timeout = atoi(value);
data/tickr-0.7.0/src/tickr/tickr_params.c:574:7: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
if (atoi(value) < 1 || atoi(value) > 60) {
data/tickr-0.7.0/src/tickr/tickr_params.c:574:26: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
if (atoi(value) < 1 || atoi(value) > 60) {
data/tickr-0.7.0/src/tickr/tickr_params.c:578:29: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
prm->send_recv_timeout = atoi(value);
data/tickr-0.7.0/src/tickr/tickr_params.c:599:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char font_name[FONT_NAME_MAXLEN + 1], font_size[FONT_SIZE_MAXLEN + 1];
data/tickr-0.7.0/src/tickr/tickr_params.c:600:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char c_font_name[FONT_NAME_MAXLEN + 1], c_font_size[FONT_SIZE_MAXLEN + 1];
data/tickr-0.7.0/src/tickr/tickr_params.c:601:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char tmp[4 * 1024];
data/tickr-0.7.0/src/tickr/tickr_params.c:681:15: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
font_name, atoi(font_size),
data/tickr-0.7.0/src/tickr/tickr_params.c:726:4: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
atoi(c_font_size),
data/tickr-0.7.0/src/tickr/tickr_params.c:758:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char tmp[3], *tailptr;
data/tickr-0.7.0/src/tickr/tickr_params.c:797:9: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
static char str[64][10];
data/tickr-0.7.0/src/tickr/tickr_params.c:807:18: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
return (const char *)str[count];
data/tickr-0.7.0/src/tickr/tickr_params.c:816:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char f_name[FONT_NAME_MAXLEN + 1];
data/tickr-0.7.0/src/tickr/tickr_params.c:817:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char f_size[FONT_SIZE_MAXLEN + 1];
data/tickr-0.7.0/src/tickr/tickr_params.c:823:7: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
if (atoi(f_size) > FONT_MAXSIZE)
data/tickr-0.7.0/src/tickr/tickr_params.c:834:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char font_name[FONT_NAME_MAXLEN + 1], font_size[FONT_SIZE_MAXLEN + 1];
data/tickr-0.7.0/src/tickr/tickr_params.c:837:9: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
return atoi(font_size);
data/tickr-0.7.0/src/tickr/tickr_params.c:845:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char tmp[FONT_MAXLEN + 1];
data/tickr-0.7.0/src/tickr/tickr_prefwin.c:26:8: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
static char current_url[FILE_NAME_MAXLEN + 1];
data/tickr-0.7.0/src/tickr/tickr_prefwin.c:93:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char font_name_size[FONT_MAXLEN + 1];
data/tickr-0.7.0/src/tickr/tickr_prefwin.c:94:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char font_name[FONT_NAME_MAXLEN + 1], font_size[FONT_SIZE_MAXLEN + 1];
data/tickr-0.7.0/src/tickr/tickr_prefwin.c:112:30: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
requested_font_size = MIN(atoi(font_size), FONT_MAXSIZE);
data/tickr-0.7.0/src/tickr/tickr_prefwin.c:501:2: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy((void *)prm_bak, (const void *)prm, sizeof(Params));
data/tickr-0.7.0/src/tickr/tickr_prefwin.c:569:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy((void *)prm, (const void *)prm_bak, sizeof(Params));
data/tickr-0.7.0/src/tickr/tickr_prefwin.c:606:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char c[2]= "c";
data/tickr-0.7.0/src/tickr/tickr_prefwin.c:1308:2: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy((void *)prm_bak, (const void *)prm, sizeof(Params));
data/tickr-0.7.0/src/tickr/tickr_prefwin.c:1371:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy((void *)prm, (const void *)prm_bak, sizeof(Params));
data/tickr-0.7.0/src/tickr/tickr_quickfeedpicker.c:24:8: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
static char url[FILE_NAME_MAXLEN + 1];
data/tickr-0.7.0/src/tickr/tickr_quicksetup.c:41:2: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy((void *)prm, (const void *)prm_bak, sizeof(Params));
data/tickr-0.7.0/src/tickr/tickr_quicksetup.c:48:3: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy((void *)prm, (const void *)prm_bak, sizeof(Params));
data/tickr-0.7.0/src/tickr/tickr_quicksetup.c:128:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char font_name_size[FONT_MAXLEN + 1];
data/tickr-0.7.0/src/tickr/tickr_quicksetup.c:129:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char font_name[FONT_NAME_MAXLEN + 1], font_size[FONT_SIZE_MAXLEN + 1];
data/tickr-0.7.0/src/tickr/tickr_quicksetup.c:147:30: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
requested_font_size = MIN(atoi(font_size), FONT_MAXSIZE);
data/tickr-0.7.0/src/tickr/tickr_quicksetup.c:188:2: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy((void *)prm_bak, (const void *)prm, sizeof(Params));
data/tickr-0.7.0/src/tickr/tickr_render.c:714:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char tmp[4];
data/tickr-0.7.0/src/tickr/tickr_render.c:729:8: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
j = atoi(tmp);
data/tickr-0.7.0/src/tickr/tickr_render.c:879:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char font_name_size[FONT_MAXLEN + 1];
data/tickr-0.7.0/src/tickr/tickr_render.c:880:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char font_name[FONT_NAME_MAXLEN + 1], font_size[FONT_SIZE_MAXLEN + 1];
data/tickr-0.7.0/src/tickr/tickr_render.c:975:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char str[4] = "-\\|/";
data/tickr-0.7.0/src/tickr/tickr_resource.c:283:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char entity[ENTITY_LEN + 1];
data/tickr-0.7.0/src/tickr/tickr_resource.c:341:10: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
j = atoi(entity + 2);
data/tickr-0.7.0/src/tickr/tickr_resource.c:452:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char file_name[FILE_NAME_MAXLEN + 1];
data/tickr-0.7.0/src/tickr/tickr_resource.c:471:9: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
static char file_name[FILE_NAME_MAXLEN + 1];
data/tickr-0.7.0/src/tickr/tickr_resource.c:482:9: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
static char file_name[FILE_NAME_MAXLEN + 1];
data/tickr-0.7.0/src/tickr/tickr_resource.c:496:9: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
static char full_path[TMPSTR_SIZE + 1];
data/tickr-0.7.0/src/tickr/tickr_resource.c:508:9: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
static char str[TMPSTR_SIZE+ 1] = "";
data/tickr-0.7.0/src/tickr/tickr_resource.c:521:9: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
static char file_name[FILE_NAME_MAXLEN + 1];
data/tickr-0.7.0/src/tickr/tickr_resource.c:536:9: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
static char file_name[FILE_NAME_MAXLEN + 1];
data/tickr-0.7.0/src/libetm-0.5.0/error_handler_example.c:20:24: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
vsnprintf(error_str + strlen(error_str),
data/tickr-0.7.0/src/libetm-0.5.0/error_handler_example.c:21:34: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
ERROR_WARNING_STR_MAXLEN + 1 - strlen(error_str), format, a_list);
data/tickr-0.7.0/src/libetm-0.5.0/error_handler_example.c:23:23: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
snprintf(error_str + strlen(error_str),
data/tickr-0.7.0/src/libetm-0.5.0/error_handler_example.c:24:34: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
ERROR_WARNING_STR_MAXLEN + 1 - strlen(error_str), " - Will quit now");
data/tickr-0.7.0/src/libetm-0.5.0/error_handler_example.c:26:47: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
fprintf(STD_ERR, "%s\n", (char *)error_str + strlen(OUCH_STR));
data/tickr-0.7.0/src/libetm-0.5.0/error_handler_example.c:54:26: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
vsnprintf(warning_str + strlen(warning_str),
data/tickr-0.7.0/src/libetm-0.5.0/error_handler_example.c:55:34: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
ERROR_WARNING_STR_MAXLEN + 1 - strlen(warning_str), format, a_list);
data/tickr-0.7.0/src/libetm-0.5.0/misc.c:77:7: [1] (buffer) fgetc:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
i = fgetc(stdin);
data/tickr-0.7.0/src/libetm-0.5.0/misc.c:80:9: [1] (buffer) fgetc:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
(i = fgetc(stdin));
data/tickr-0.7.0/src/libetm-0.5.0/str_mem.c:82:13: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
str_len = strlen(str);
data/tickr-0.7.0/src/libetm-0.5.0/str_mem.c:106:12: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
src_len = strlen(src);
data/tickr-0.7.0/src/libetm-0.5.0/str_mem.c:109:13: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
dest_len = strlen(dest);
data/tickr-0.7.0/src/libetm-0.5.0/str_mem.c:137:12: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
src_len = strlen(src);
data/tickr-0.7.0/src/libetm-0.5.0/str_mem.c:140:13: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
dest_len = strlen(dest);
data/tickr-0.7.0/src/libetm-0.5.0/str_mem.c:326:15: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
int i, len = strlen(str);
data/tickr-0.7.0/src/libetm-0.5.0/str_mem.c:342:15: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
int i, len = strlen(str);
data/tickr-0.7.0/src/libetm-0.5.0/str_mem.c:359:10: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
int i = strlen(str) - 1;
data/tickr-0.7.0/src/libetm-0.5.0/str_mem.c:388:8: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
len = strlen(str);
data/tickr-0.7.0/src/libetm-0.5.0/str_mem.c:428:19: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
int i = 0, len = strlen(str);
data/tickr-0.7.0/src/libetm-0.5.0/tcp_socket.c:296:12: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
int len = strlen(str), i, j = 0;
data/tickr-0.7.0/src/tickr/tickr_check4updates.c:80:17: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
id_str_len = strlen(CHECK4UPDATES_ID_STR);
data/tickr-0.7.0/src/tickr/tickr_check4updates.c:81:15: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
resp_len = strlen(response);
data/tickr-0.7.0/src/tickr/tickr_connectwin.c:117:49: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
tmp2 = g_base64_encode((guchar *)tmp1, (gsize)strlen(tmp1));
data/tickr-0.7.0/src/tickr/tickr_connectwin.c:139:49: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
tmp2 = g_base64_encode((guchar *)tmp1, (gsize)strlen(tmp1));
data/tickr-0.7.0/src/tickr/tickr_error.c:57:24: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
vsnprintf(error_str + strlen(error_str),
data/tickr-0.7.0/src/tickr/tickr_error.c:58:34: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
ERROR_WARNING_STR_MAXLEN + 1 - strlen(error_str), format, a_list);
data/tickr-0.7.0/src/tickr/tickr_error.c:60:23: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
snprintf(error_str + strlen(error_str),
data/tickr-0.7.0/src/tickr/tickr_error.c:61:34: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
ERROR_WARNING_STR_MAXLEN + 1 - strlen(error_str), " - Will quit now");
data/tickr-0.7.0/src/tickr/tickr_error.c:64:40: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
INFO_ERR("%s\n", (char *)error_str + strlen(OUCH_STR))
data/tickr-0.7.0/src/tickr/tickr_error.c:91:26: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
vsnprintf(warning_str + strlen(warning_str),
data/tickr-0.7.0/src/tickr/tickr_error.c:92:34: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
ERROR_WARNING_STR_MAXLEN + 1 - strlen(warning_str), format, a_list);
data/tickr-0.7.0/src/tickr/tickr_feedparser.c:401:11: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
for (i = strlen(str2); i > 0; i--) {
data/tickr-0.7.0/src/tickr/tickr_feedparser.c:505:14: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
mem_size = (strlen(str) + 1) * 4; /* Not sure what size should be */
data/tickr-0.7.0/src/tickr/tickr_feedparser.c:511:77: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
utf8_str_len = fribidi_charset_to_unicode(FRIBIDI_CHAR_SET_UTF8, utf8_str, strlen(utf8_str), unicode_str);
data/tickr-0.7.0/src/tickr/tickr_http.c:194:35: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if (strncmp(resrc_id, "file://", strlen("file://")) == 0) {
data/tickr-0.7.0/src/tickr/tickr_http.c:196:29: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
str_n_cpy(url, resrc_id + strlen("file://"), FILE_NAME_MAXLEN - strlen("file://"));
data/tickr-0.7.0/src/tickr/tickr_http.c:196:67: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
str_n_cpy(url, resrc_id + strlen("file://"), FILE_NAME_MAXLEN - strlen("file://"));
data/tickr-0.7.0/src/tickr/tickr_http.c:197:34: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if (strncmp(url, "localhost/", strlen("localhost/")) == 0)
data/tickr-0.7.0/src/tickr/tickr_http.c:198:8: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
i = strlen("localhost/") - 1;
data/tickr-0.7.0/src/tickr/tickr_http.c:599:13: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
int len = strlen(header_name), i = 0;
data/tickr-0.7.0/src/tickr/tickr_main.c:327:30: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
for (i = 0, count = 0; i < strlen(tmp); i++) {
data/tickr-0.7.0/src/tickr/tickr_main.c:1604:53: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if (argc >= 2 && strncmp(argv[1], "-instance-id=", strlen("-instance-id=")) == 0) {
data/tickr-0.7.0/src/tickr/tickr_main.c:1605:37: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ((instance_id = atoi(argv[1] + strlen("-instance-id="))) < 1 || instance_id > 99) {
data/tickr-0.7.0/src/tickr/tickr_main.c:1611:47: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ((argc >= 2 && strncmp(argv[1], "-no-ui", strlen("-no-ui")) == 0) ||
data/tickr-0.7.0/src/tickr/tickr_main.c:1612:45: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
(argc >= 3 && strncmp(argv[2], "-no-ui", strlen("-no-ui")) == 0))
data/tickr-0.7.0/src/tickr/tickr_misc.c:54:19: [1] (buffer) fgetc:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
while ((c = fgetc(fp1)) != (int)EOF)
data/tickr-0.7.0/src/tickr/tickr_misc.c:117:17: [1] (buffer) fgetc:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
while ((c = fgetc(fp1)) != (int)EOF)
data/tickr-0.7.0/src/tickr/tickr_otherwins.c:428:17: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
txt2 = malloc2(strlen(txt) + MAX_NEWLINES_N + 1);
data/tickr-0.7.0/src/tickr/tickr_params.c:140:9: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
j = strlen(options_array[i]);
data/tickr-0.7.0/src/tickr/tickr_params.c:224:11: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ((i = strlen(tmp) >= 2) && ((tmp[0] == '\"' && tmp[i - 1] == '\"') ||
data/tickr-0.7.0/src/tickr/tickr_params.c:227:9: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
value[strlen(value) - 1] = '\0';
data/tickr-0.7.0/src/tickr/tickr_params.c:761:6: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if (strlen(str) != 9 && str[0] != '#')
data/tickr-0.7.0/src/tickr/tickr_params.c:804:6: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if (strlen(str[count]) != 9)
data/tickr-0.7.0/src/tickr/tickr_params.c:853:12: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
for (i = strlen(tmp) - 1; i > 0 ; i--)
data/tickr-0.7.0/src/tickr/tickr_params.c:859:30: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
str_n_cpy(font_size, tmp + strlen(font_name) + 1, FONT_SIZE_MAXLEN);
data/tickr-0.7.0/src/tickr/tickr_render.c:502:49: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
else if (get_resource()->type == RESRC_FILE && strlen(big_str) > 50 * 1024) {
data/tickr-0.7.0/src/tickr/tickr_render.c:612:20: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
size_t str_len = strlen(str); /* In bytes */
data/tickr-0.7.0/src/tickr/tickr_render.c:997:24: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
} else if (i == (int)strlen(str) - 30) {
data/tickr-0.7.0/src/tickr/tickr_resource.c:295:36: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
for (s = str, d = str2; s < str + strlen(str); s++) {
data/tickr-0.7.0/src/tickr/tickr_resource.c:320:24: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
str2 = realloc2(str2, strlen(str) * 2 + TMPSTR_SIZE); /* Original size x 2 + TMPSTR_SIZE */
data/tickr-0.7.0/src/tickr/tickr_resource.c:322:36: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
for (s = str, d = str2; s < str + strlen(str) && d < str2 + strlen(str2) - ENTITY_LEN;) {
data/tickr-0.7.0/src/tickr/tickr_resource.c:322:62: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
for (s = str, d = str2; s < str + strlen(str) && d < str2 + strlen(str2) - ENTITY_LEN;) {
data/tickr-0.7.0/src/tickr/tickr_resource.c:349:40: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
str_n_cpy(d, html_entity[j + 2], strlen(html_entity[j + 2]));
data/tickr-0.7.0/src/tickr/tickr_resource.c:350:12: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
d += strlen(html_entity[j + 2]);
data/tickr-0.7.0/src/tickr/tickr_resource.c:366:22: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
str = realloc2(str, strlen(str) + 1);
data/tickr-0.7.0/src/tickr/tickr_resource.c:377:8: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
gsize read, write;
data/tickr-0.7.0/src/tickr/tickr_resource.c:380:53: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
if ((str2 = g_convert(str, -1, "UTF-8", encoding, &read, &write, &error)) != NULL) {
data/tickr-0.7.0/src/tickr/tickr_tls.c:64:52: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
gnutls_server_name_set(*s, GNUTLS_NAME_DNS, host, strlen(host));
data/tickr-0.7.0/src/tickr/tickr_tls.c:153:12: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
int len = strlen(str), i, j = 0;
data/tickr-0.7.0/xlib_stuff/test_x_pixmap_max_width.c:55:3: [1] (buffer) fgetc:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
fgetc(stdin);
ANALYSIS SUMMARY:
Hits = 307
Lines analyzed = 15622 in approximately 0.50 seconds (31361 lines/second)
Physical Source Lines of Code (SLOC) = 11319
Hits@level = [0] 96 [1] 70 [2] 214 [3] 4 [4] 19 [5] 0
Hits@level+ = [0+] 403 [1+] 307 [2+] 237 [3+] 23 [4+] 19 [5+] 0
Hits/KSLOC@level+ = [0+] 35.6039 [1+] 27.1225 [2+] 20.9382 [3+] 2.03198 [4+] 1.67859 [5+] 0
Dot directories skipped = 1 (--followdotdir overrides)
Minimum risk level = 1
Not every hit is necessarily a security vulnerability.
There may be other security vulnerabilities; review your code!
See 'Secure Programming HOWTO'
(https://dwheeler.com/secure-programs) for more information.