Flawfinder version 2.0.10, (C) 2001-2019 David A. Wheeler.
Number of rules (primarily dangerous function names) in C/C++ ruleset: 223
Examining data/gri-2.12.27/src/chopword.cc
Examining data/gri-2.12.27/src/unlink.cc
Examining data/gri-2.12.27/src/expect.cc
Examining data/gri-2.12.27/src/rpncalc.cc
Examining data/gri-2.12.27/src/math.cc
Examining data/gri-2.12.27/src/grstring.cc
Examining data/gri-2.12.27/src/variable.cc
Examining data/gri-2.12.27/src/command.cc
Examining data/gri-2.12.27/src/gr_coll.cc
Examining data/gri-2.12.27/src/regress.cc
Examining data/gri-2.12.27/src/gri.cc
Examining data/gri-2.12.27/src/group.cc
Examining data/gri-2.12.27/src/synonyms.cc
Examining data/gri-2.12.27/src/popt/popthelp.c
Examining data/gri-2.12.27/src/popt/poptparse.c
Examining data/gri-2.12.27/src/popt/poptint.h
Examining data/gri-2.12.27/src/popt/popt.h
Examining data/gri-2.12.27/src/popt/findme.c
Examining data/gri-2.12.27/src/popt/popt.c
Examining data/gri-2.12.27/src/popt/poptconfig.c
Examining data/gri-2.12.27/src/popt/findme.h
Examining data/gri-2.12.27/src/close.cc
Examining data/gri-2.12.27/src/skip.cc
Examining data/gri-2.12.27/src/input.cc
Examining data/gri-2.12.27/src/grinterp.cc
Examining data/gri-2.12.27/src/template.cc
Examining data/gri-2.12.27/src/read.cc
Examining data/gri-2.12.27/src/G_string.cc
Examining data/gri-2.12.27/src/insert.cc
Examining data/gri-2.12.27/src/rescale.cc
Examining data/gri-2.12.27/src/assert.cc
Examining data/gri-2.12.27/src/endup.cc
Examining data/gri-2.12.27/src/gr.cc
Examining data/gri-2.12.27/src/graxes.cc
Examining data/gri-2.12.27/src/draw.cc
Examining data/gri-2.12.27/src/write.cc
Examining data/gri-2.12.27/src/reorder.cc
Examining data/gri-2.12.27/src/state.cc
Examining data/gri-2.12.27/src/version.cc
Examining data/gri-2.12.27/src/image.cc
Examining data/gri-2.12.27/src/debug.cc
Examining data/gri-2.12.27/src/stats.cc
Examining data/gri-2.12.27/src/filter.cc
Examining data/gri-2.12.27/src/source.cc
Examining data/gri-2.12.27/src/interp.cc
Examining data/gri-2.12.27/src/sleep.cc
Examining data/gri-2.12.27/src/open.cc
Examining data/gri-2.12.27/src/while.cc
Examining data/gri-2.12.27/src/show.cc
Examining data/gri-2.12.27/src/popen.cc
Examining data/gri-2.12.27/src/GriColor.cc
Examining data/gri-2.12.27/src/mask.cc
Examining data/gri-2.12.27/src/new.cc
Examining data/gri-2.12.27/src/scales.cc
Examining data/gri-2.12.27/src/GriPath.cc
Examining data/gri-2.12.27/src/rewind.cc
Examining data/gri-2.12.27/src/convert.cc
Examining data/gri-2.12.27/src/GriState.cc
Examining data/gri-2.12.27/src/query.cc
Examining data/gri-2.12.27/src/rpn.cc
Examining data/gri-2.12.27/src/utility.cc
Examining data/gri-2.12.27/src/smooth.cc
Examining data/gri-2.12.27/src/timer.cc
Examining data/gri-2.12.27/src/doline.cc
Examining data/gri-2.12.27/src/grcntour.cc
Examining data/gri-2.12.27/src/startup.cc
Examining data/gri-2.12.27/src/set.cc
Examining data/gri-2.12.27/src/heal.cc
Examining data/gri-2.12.27/src/grsmooth.cc
Examining data/gri-2.12.27/src/main.cc
Examining data/gri-2.12.27/src/storage.cc
Examining data/gri-2.12.27/src/help.cc
Examining data/gri-2.12.27/src/ignore.cc
Examining data/gri-2.12.27/src/differ.cc
Examining data/gri-2.12.27/src/grimage.cc
Examining data/gri-2.12.27/src/delete.cc
Examining data/gri-2.12.27/src/flip.cc
Examining data/gri-2.12.27/src/file.cc
Examining data/gri-2.12.27/src/quit.cc
Examining data/gri-2.12.27/src/if.cc
FINAL RESULTS:
data/gri-2.12.27/src/G_string.cc:164:3: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(value, copy);
data/gri-2.12.27/src/close.cc:47:4: [4] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf.
sprintf(_grTempString, "`close' cannot close `%s' since it is not open", _word[1]);
data/gri-2.12.27/src/command.cc:229:3: [4] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf.
sprintf(_grTempString, "\
data/gri-2.12.27/src/command.cc:245:3: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(_cmd_being_done_IP[_cmd_being_done], s + start);
data/gri-2.12.27/src/command.cc:264:2: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(_cmd_being_done_IP[_cmd_being_done], s);
data/gri-2.12.27/src/command.cc:431:2: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(_command[_num_command].filename, _cmdFILE.back().get_name());
data/gri-2.12.27/src/command.cc:444:2: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(_command[_num_command].filename, _cmdFILE.back().get_name());
data/gri-2.12.27/src/command.cc:472:2: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(cp, line);
data/gri-2.12.27/src/command.cc:584:3: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(_command[_num_command].procedure, line);
data/gri-2.12.27/src/command.cc:715:2: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(cp, _command_word_separator);
data/gri-2.12.27/src/command.cc:738:6: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(cp, cw);
data/gri-2.12.27/src/command.cc:749:5: [4] (format) sprintf:
Potential format string problem (CWE-134). Make format string constant.
sprintf(buf, AMPERSAND_CODING, 1 + _word[i], marker_count());
data/gri-2.12.27/src/command.cc:751:5: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(cp, buf);
data/gri-2.12.27/src/command.cc:760:5: [4] (format) sprintf:
Potential format string problem (CWE-134). Make format string constant.
sprintf(buf, AMPERSAND_CODING, 1 + _word[i], marker_count());
data/gri-2.12.27/src/command.cc:762:5: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(cp, buf);
data/gri-2.12.27/src/command.cc:775:5: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(cp, value);
data/gri-2.12.27/src/command.cc:782:4: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(cp, _word[i]);
data/gri-2.12.27/src/convert.cc:2177:2: [4] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf.
sprintf(_grTempString,
data/gri-2.12.27/src/convert.cc:2185:2: [4] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf.
sprintf(_grTempString, "%15s %15s %15s %15s %15s\n",
data/gri-2.12.27/src/doline.cc:127:4: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(_grTempString, note);
data/gri-2.12.27/src/doline.cc:140:2: [4] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf.
sprintf(line, " \"%s:%d\"", _cmdFILE.back().get_name(), _cmdFILE.back().get_line());
data/gri-2.12.27/src/doline.cc:141:2: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(cl, line);
data/gri-2.12.27/src/doline.cc:223:5: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(source_indicator, cmd + i + 1);
data/gri-2.12.27/src/doline.cc:244:2: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(_cmdLineCOPY, cmd + skip_space(cmd));
data/gri-2.12.27/src/doline.cc:248:3: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(cmd, _cmdLineCOPY);
data/gri-2.12.27/src/doline.cc:251:3: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(_cmdLineCOPY, cmd_sub.c_str());
data/gri-2.12.27/src/doline.cc:252:3: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(cmd, _cmdLineCOPY);
data/gri-2.12.27/src/doline.cc:281:2: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(_cmdLineCOPY, cmd + skip_space(cmd));
data/gri-2.12.27/src/doline.cc:282:2: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(cmd, _cmdLineCOPY);
data/gri-2.12.27/src/doline.cc:291:3: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(cmd, _cmdLineCOPY);
data/gri-2.12.27/src/doline.cc:300:3: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(cmd, cmd_sub.c_str());
data/gri-2.12.27/src/doline.cc:313:4: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(cmd, cmd_sub.c_str());
data/gri-2.12.27/src/doline.cc:321:2: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(cmd, _cmdLineCOPY);
data/gri-2.12.27/src/doline.cc:325:2: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(cmd, tmp.c_str());
data/gri-2.12.27/src/doline.cc:335:5: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(cmd, _cmdLineCOPY);
data/gri-2.12.27/src/doline.cc:344:3: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(_cmdLineCOPY, cmd);
data/gri-2.12.27/src/doline.cc:347:2: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(cmd, _cmdLineCOPY);
data/gri-2.12.27/src/doline.cc:773:4: [4] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf.
sprintf(_grTempString, "\
data/gri-2.12.27/src/doline.cc:806:3: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(out, in);
data/gri-2.12.27/src/doline.cc:816:6: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(cmd, in + i + 1);
data/gri-2.12.27/src/doline.cc:823:32: [4] (shell) popen:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
FILE *pipefile = (FILE *) popen(cmd, "r");
data/gri-2.12.27/src/doline.cc:831:8: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(result, thisline);
data/gri-2.12.27/src/doline.cc:852:7: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(out, in);
data/gri-2.12.27/src/doline.cc:983:30: [4] (shell) popen:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
FILE *pipefile = (FILE *) popen(ss.c_str(), "r");
data/gri-2.12.27/src/doline.cc:1090:2: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(s, _grTempString);
data/gri-2.12.27/src/draw.cc:843:5: [4] (format) sprintf:
Potential format string problem (CWE-134). Make format string constant.
sprintf(tmp, _contourFmt.c_str(), dlevel);
data/gri-2.12.27/src/draw.cc:1747:4: [4] (format) sprintf:
Potential format string problem (CWE-134). Make format string constant.
sprintf(clabel, _contourFmt.c_str(), density);
data/gri-2.12.27/src/draw.cc:2701:4: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(fmt, _word[word]);
data/gri-2.12.27/src/draw.cc:2738:5: [4] (format) sprintf:
Potential format string problem (CWE-134). Make format string constant.
sprintf(_grTempString, fmt, *zp);
data/gri-2.12.27/src/draw.cc:3315:2: [4] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf.
sprintf(fname, "%s%s", _lib_directory.c_str(), "logo.dat");
data/gri-2.12.27/src/file.cc:100:3: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(status2, status);
data/gri-2.12.27/src/file.cc:140:14: [4] (race) access:
This usually indicates a security flaw. If an attacker can change anything
along the path between the call to access() and the file's actual use
(e.g., by moving files), the attacker can exploit the race condition
(CWE-362/CWE-367!). Set up the correct permissions (e.g., using setuid())
and try to open the file directly.
if (0 != access(sname.c_str(), R_OK)) {
data/gri-2.12.27/src/gr.cc:178:3: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(stdin_buffer.buf, s);
data/gri-2.12.27/src/gr.cc:182:3: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(stdin_buffer.buf, s);
data/gri-2.12.27/src/gr.cc:258:3: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(s, line);
data/gri-2.12.27/src/gr.cc:331:4: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(ps_filename_used, ps_filename);
data/gri-2.12.27/src/gr.cc:335:4: [4] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf.
sprintf(ps_filename_used, "%s", ps_filename);
data/gri-2.12.27/src/gr.cc:355:5: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(homename, getenv("home"));
data/gri-2.12.27/src/gr.cc:357:5: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(ps_filename_used, homename);
data/gri-2.12.27/src/gr.cc:360:6: [4] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf.
sprintf(_grTempString, "\
data/gri-2.12.27/src/gr.cc:370:5: [4] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf.
sprintf(_grTempString, "Couldn't create intended postscript file, so created `%s' instead\n", ps_filename_used);
data/gri-2.12.27/src/gr.cc:373:5: [4] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf.
sprintf(_grTempString, "\
data/gri-2.12.27/src/gr.cc:540:3: [4] (format) fprintf:
If format strings can be influenced by an attacker, they can be exploited
(CWE-134). Use a constant for the format specification.
fprintf(_grPS, PS_comment, message);
data/gri-2.12.27/src/gr.cc:918:3: [4] (format) fprintf:
If format strings can be influenced by an attacker, they can be exploited
(CWE-134). Use a constant for the format specification.
fprintf(_grPS, PS_showpage);
data/gri-2.12.27/src/gr.cc:1038:2: [4] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf.
sprintf(grTempString, "\nFATAL error: %s\n", lab);
data/gri-2.12.27/src/gr.cc:1180:33: [4] (format) fprintf:
If format strings can be influenced by an attacker, they can be exploited
(CWE-134). Use a constant for the format specification.
fprintf(_grPS, PS_stroke);
data/gri-2.12.27/src/gr.cc:1181:33: [4] (format) fprintf:
If format strings can be influenced by an attacker, they can be exploited
(CWE-134). Use a constant for the format specification.
fprintf(_grPS, PS_weak_newpath);
data/gri-2.12.27/src/gr.cc:1182:33: [4] (format) fprintf:
If format strings can be influenced by an attacker, they can be exploited
(CWE-134). Use a constant for the format specification.
fprintf(_grPS, PS_moveto, x_pt, y_pt);
data/gri-2.12.27/src/gr.cc:1185:33: [4] (format) fprintf:
If format strings can be influenced by an attacker, they can be exploited
(CWE-134). Use a constant for the format specification.
fprintf(_grPS, PS_weak_newpath);
data/gri-2.12.27/src/gr.cc:1186:33: [4] (format) fprintf:
If format strings can be influenced by an attacker, they can be exploited
(CWE-134). Use a constant for the format specification.
fprintf(_grPS, PS_moveto, x_pt, y_pt);
data/gri-2.12.27/src/gr.cc:1321:4: [4] (format) fprintf:
If format strings can be influenced by an attacker, they can be exploited
(CWE-134). Use a constant for the format specification.
fprintf(_grPS, PS_rmoveto, rx_pt, ry_pt);
data/gri-2.12.27/src/gr.cc:1346:2: [4] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf.
sprintf(grTempString, "DEL %s;*", gr_currentPSfilename());
data/gri-2.12.27/src/gr.cc:1348:2: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(ps_filename_used, new_name);
data/gri-2.12.27/src/gr.cc:1350:2: [4] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf.
sprintf(grTempString, "rm -f %s", gr_currentPSfilename());
data/gri-2.12.27/src/gr.cc:1352:2: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(ps_filename_used, new_name);
data/gri-2.12.27/src/gr.cc:1371:3: [4] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf.
sprintf(grTempString, "Can't open postscript file `%s'", PS_name);
data/gri-2.12.27/src/gr.cc:1535:2: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(creator_name, s);
data/gri-2.12.27/src/gr.cc:1551:4: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(ps_filename, new_name);
data/gri-2.12.27/src/gr.cc:1799:2: [4] (format) fprintf:
If format strings can be influenced by an attacker, they can be exploited
(CWE-134). Use a constant for the format specification.
fprintf(_grPS, PS_showpage);
data/gri-2.12.27/src/gr_coll.cc:41:2: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(value, s);
data/gri-2.12.27/src/gr_coll.cc:49:2: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(value, cp);
data/gri-2.12.27/src/gr_coll.cc:239:2: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(value, s);
data/gri-2.12.27/src/gr_coll.cc:249:3: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(tmp, value);
data/gri-2.12.27/src/gr_coll.cc:250:3: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(tmp, s);
data/gri-2.12.27/src/gr_coll.cc:254:3: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(value, s);
data/gri-2.12.27/src/gr_coll.cc:311:3: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(value, copy);
data/gri-2.12.27/src/gr_coll.cc:331:2: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(cp, value);
data/gri-2.12.27/src/gr_coll.cc:644:2: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(name, theName);
data/gri-2.12.27/src/gr_coll.cc:664:2: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(name, n.getName());
data/gri-2.12.27/src/gr_coll.cc:677:2: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(name, the_name);
data/gri-2.12.27/src/gr_coll.cc:690:2: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(name, cp);
data/gri-2.12.27/src/graxes.cc:301:7: [4] (format) sprintf:
Potential format string problem (CWE-134). Make format string constant.
sprintf(_grTempString, _grNumFormat_x, next);
data/gri-2.12.27/src/graxes.cc:323:9: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(_grTempString, gs.c_str());
data/gri-2.12.27/src/graxes.cc:600:8: [4] (format) sprintf:
Potential format string problem (CWE-134). Make format string constant.
sprintf(_grTempString, _grNumFormat_y, next);
data/gri-2.12.27/src/graxes.cc:621:9: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(_grTempString, gs.c_str());
data/gri-2.12.27/src/graxes.cc:624:8: [4] (format) sprintf:
Potential format string problem (CWE-134). Make format string constant.
sprintf(_grTempString, _grNumFormat_y, next);
data/gri-2.12.27/src/graxes.cc:846:5: [4] (format) sprintf:
Potential format string problem (CWE-134). Make format string constant.
sprintf(_grTempString, _grNumFormat_y, 0.0);
data/gri-2.12.27/src/graxes.cc:848:5: [4] (format) sprintf:
Potential format string problem (CWE-134). Make format string constant.
sprintf(_grTempString, _grNumFormat_y, y);
data/gri-2.12.27/src/graxes.cc:853:4: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(label[*num_label], _grTempString);
data/gri-2.12.27/src/if.cc:158:5: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(_cmdLine, _cmdLineCOPY);
data/gri-2.12.27/src/insert.cc:48:3: [4] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf.
sprintf(_grTempString, "`source' cannot open file `%s' (translated to `%s')", _word[1], fname.c_str());
data/gri-2.12.27/src/open.cc:233:4: [4] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf.
sprintf(tmp, "%s%s", home, _word[1] + 1);
data/gri-2.12.27/src/open.cc:238:4: [4] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf.
sprintf(tmp, "%s%s", home, _word[1] + 5);
data/gri-2.12.27/src/open.cc:281:3: [4] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf.
sprintf(command, "ls -CF %s/", _current_directory.c_str());
data/gri-2.12.27/src/open.cc:285:3: [4] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf.
sprintf(command, "ls -CF %s/%s", _current_directory.c_str(), _word[1]);
data/gri-2.12.27/src/popen.cc:26:17: [4] (shell) popen:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
FILE *popen();
data/gri-2.12.27/src/popen.cc:136:1: [4] (shell) popen:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
popen(char *command, char *mode)
data/gri-2.12.27/src/popen.cc:154:9: [4] (tmpfile) mktemp:
Temporary file race condition (CWE-377).
temp = mktemp("POPEN_MB_XXXXXXXXXX");
data/gri-2.12.27/src/popen.cc:158:2: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(cell->mbx_name, temp);
data/gri-2.12.27/src/popt/findme.c:40:5: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(pathbuf, path);
data/gri-2.12.27/src/popt/findme.c:46:2: [4] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf.
sprintf(buf, "%s/%s", start, argv0);
data/gri-2.12.27/src/popt/findme.c:48:7: [4] (race) access:
This usually indicates a security flaw. If an attacker can change anything
along the path between the call to access() and the file's actual use
(e.g., by moving files), the attacker can exploit the race condition
(CWE-362/CWE-367!). Set up the correct permissions (e.g., using setuid())
and try to open the file directly.
if (!access(buf, X_OK))
data/gri-2.12.27/src/popt/popt.c:87:17: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
con->appName = strcpy(malloc(strlen(name) + 1), name);
data/gri-2.12.27/src/popt/popt.c:142:2: [4] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf.
sprintf(con->finalArgv[i], "--%s", longName);
data/gri-2.12.27/src/popt/popt.c:201:2: [4] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf.
sprintf(argv[pos], "%s/%s", con->execPath, script);
data/gri-2.12.27/src/popt/popt.c:228:5: [4] (shell) execvp:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
execvp(argv[0], argv);
data/gri-2.12.27/src/popt/popt.c:311:4: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(alloca(strlen(origOptString) + 1),
data/gri-2.12.27/src/popt/popt.c:412:7: [4] (format) fprintf:
If format strings can be influenced by an attacker, they can be exploited
(CWE-134). Use a constant for the format specification.
fprintf(stdout, POPT_("option type (%d) not implemented in popt\n"),
data/gri-2.12.27/src/popt/popt.c:434:6: [4] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf.
sprintf(con->finalArgv[i], "--%s", opt->longName);
data/gri-2.12.27/src/popt/popt.c:508:20: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
alias->longName = strcpy(malloc(strlen(alias->longName) + 1),
data/gri-2.12.27/src/popt/poptconfig.c:143:2: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(fn, home);
data/gri-2.12.27/src/popt/popthelp.c:57:2: [4] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf.
sprintf(left, "-%c, --%s", opt->shortName, opt->longName);
data/gri-2.12.27/src/popt/popthelp.c:61:2: [4] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf.
sprintf(left, "--%s", opt->longName);
data/gri-2.12.27/src/popt/popthelp.c:65:2: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(left, argDescrip);
data/gri-2.12.27/src/popt/popthelp.c:84:2: [4] (format) fprintf:
If format strings can be influenced by an attacker, they can be exploited
(CWE-134). Use a constant for the format specification.
fprintf(f, format, help, " ");
data/gri-2.12.27/src/popt/popthelp.c:148:5: [4] (format) fprintf:
If format strings can be influenced by an attacker, they can be exploited
(CWE-134). Use a constant for the format specification.
fprintf(f, POPT_("Usage:"));
data/gri-2.12.27/src/popt/poptparse.c:16:18: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
char * buf = strcpy(alloca(strlen(s) + 1), s);
data/gri-2.12.27/src/query.cc:71:3: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(answer, def_word[0]);
data/gri-2.12.27/src/query.cc:78:6: [4] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf.
sprintf(_grTempString, "%s : ", hint);
data/gri-2.12.27/src/query.cc:86:5: [4] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf.
sprintf(_grTempString, "Please give value of %s ", _word[1]);
data/gri-2.12.27/src/query.cc:97:5: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(answer, def_word[0]);
data/gri-2.12.27/src/query.cc:122:7: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(answer, def_word[0]);
data/gri-2.12.27/src/query.cc:132:4: [4] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf.
sprintf(_grTempString,
data/gri-2.12.27/src/query.cc:190:3: [4] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf.
sprintf(_grTempString, "%s (default = `%s'): ", hint, def_word[0]);
data/gri-2.12.27/src/query.cc:194:3: [4] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf.
sprintf(_grTempString, "%s (default = `%s'; choices are", hint, def_word[0]);
data/gri-2.12.27/src/read.cc:143:39: [4] (buffer) sscanf:
The scanf() family's %s operation, without a limit specification, permits
buffer overflows (CWE-120, CWE-20). Specify a limit to %s, or use a
different input function.
num = sscanf(_grTempString,
data/gri-2.12.27/src/read.cc:152:49: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(name, name2);
data/gri-2.12.27/src/read.cc:156:49: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(name, name2);
data/gri-2.12.27/src/read.cc:158:49: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(name, name3);
data/gri-2.12.27/src/read.cc:162:49: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(name, name2);
data/gri-2.12.27/src/read.cc:164:49: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(name, name3);
data/gri-2.12.27/src/read.cc:166:49: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(name, name4);
data/gri-2.12.27/src/read.cc:682:3: [4] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf.
sprintf(_grTempString, "`read columns' encountered %d %s with missing data", lines_with_missing_data, lines_with_missing_data == 1 ? "line" : "lines");
data/gri-2.12.27/src/read.cc:696:4: [4] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf.
sprintf(_grTempString, "%sOnly found %d rows\n",
data/gri-2.12.27/src/read.cc:700:4: [4] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf.
sprintf(_grTempString, "%sRead %d data points into columns.\n",
data/gri-2.12.27/src/read.cc:704:5: [4] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf.
sprintf(_grTempString, "\
data/gri-2.12.27/src/read.cc:715:4: [4] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf.
sprintf(_grTempString, "%sRead %d data points into columns.\n",
data/gri-2.12.27/src/read.cc:719:5: [4] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf.
sprintf(_grTempString, "\
data/gri-2.12.27/src/read.cc:809:3: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(varname, 1 + _word[4]);
data/gri-2.12.27/src/read.cc:1017:3: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(varname, 1 + _word[4]);
data/gri-2.12.27/src/read.cc:1306:3: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(varname, 1 + _word[4]);
data/gri-2.12.27/src/read.cc:1805:3: [4] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf.
sprintf(_grTempString, "\
data/gri-2.12.27/src/read.cc:1955:15: [4] (buffer) fscanf:
The scanf() family's %s operation, without a limit specification, permits
buffer overflows (CWE-120, CWE-20). Specify a limit to %s, or use a
different input function.
if (1 != fscanf(fp, "%s", nextWord)) {
data/gri-2.12.27/src/read.cc:2292:14: [4] (buffer) fscanf:
The scanf() family's %s operation, without a limit specification, permits
buffer overflows (CWE-120, CWE-20). Specify a limit to %s, or use a
different input function.
if (1 != fscanf(imfile, "%s", nextWord)) {
data/gri-2.12.27/src/read.cc:2509:14: [4] (buffer) fscanf:
The scanf() family's %s operation, without a limit specification, permits
buffer overflows (CWE-120, CWE-20). Specify a limit to %s, or use a
different input function.
if (1 != fscanf(_dataFILE.back().get_fp(), "%s", nextWord)) {
data/gri-2.12.27/src/read.cc:2569:3: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(varname, _word[1 + start] + 1);
data/gri-2.12.27/src/read.cc:2746:5: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(copy, inLine.getValue());
data/gri-2.12.27/src/read.cc:2896:15: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
gr_comment(strcat(_grTempString, inLine.getValue()));
data/gri-2.12.27/src/rpn.cc:97:2: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(copy, s);
data/gri-2.12.27/src/rpn.cc:105:3: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(sout, _Words2[0]);
data/gri-2.12.27/src/rpn.cc:148:6: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(sout, _Words2[i]);
data/gri-2.12.27/src/rpn.cc:154:5: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(sout, s);
data/gri-2.12.27/src/rpn.cc:229:4: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(sout, result);
data/gri-2.12.27/src/rpn.cc:236:4: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(sout, _Words2[i]);
data/gri-2.12.27/src/rpncalc.cc:394:3: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(*result, NAME(1));
data/gri-2.12.27/src/rpncalc.cc:471:2: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(rpn_fcn[rpn_fcn_filled].name, name);
data/gri-2.12.27/src/rpncalc.cc:479:4: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(rpn_fcn[rpn_fcn_filled].w[i], w[i]);
data/gri-2.12.27/src/rpncalc.cc:1332:4: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(output_lines, 1 + NAME(1));
data/gri-2.12.27/src/rpncalc.cc:1335:24: [4] (shell) popen:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
pipefile = (FILE *) popen(output_lines, "r");
data/gri-2.12.27/src/rpncalc.cc:1345:5: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(output_lines, thisline);
data/gri-2.12.27/src/rpncalc.cc:1419:5: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(s, 1 + NAME(2));
data/gri-2.12.27/src/rpncalc.cc:1534:29: [4] (shell) popen:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
FILE *pipefile = (FILE *) popen(cmd.c_str(), "r");
data/gri-2.12.27/src/rpncalc.cc:1638:13: [4] (race) access:
This usually indicates a security flaw. If an attacker can change anything
along the path between the call to access() and the file's actual use
(e.g., by moving files), the attacker can exploit the race condition
(CWE-362/CWE-367!). Set up the correct permissions (e.g., using setuid())
and try to open the file directly.
if (0 == access(fname.c_str(), R_OK | X_OK))
data/gri-2.12.27/src/rpncalc.cc:1746:13: [4] (race) access:
This usually indicates a security flaw. If an attacker can change anything
along the path between the call to access() and the file's actual use
(e.g., by moving files), the attacker can exploit the race condition
(CWE-362/CWE-367!). Set up the correct permissions (e.g., using setuid())
and try to open the file directly.
if (0 == access(fname.c_str(), R_OK))
data/gri-2.12.27/src/set.cc:1390:4: [4] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf.
sprintf(_grTempString, "Flag `%s' is %d\n",
data/gri-2.12.27/src/set.cc:4008:23: [4] (shell) popen:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
pipefile = (FILE *) popen(cmd.c_str(), "r");
data/gri-2.12.27/src/show.cc:129:4: [4] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf.
sprintf(_grTempString,
data/gri-2.12.27/src/show.cc:133:4: [4] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf.
sprintf(_grTempString,
data/gri-2.12.27/src/show.cc:137:4: [4] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf.
sprintf(_grTempString,
data/gri-2.12.27/src/show.cc:152:4: [4] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf.
sprintf(_grTempString,
data/gri-2.12.27/src/show.cc:156:4: [4] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf.
sprintf(_grTempString,
data/gri-2.12.27/src/show.cc:160:4: [4] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf.
sprintf(_grTempString,
data/gri-2.12.27/src/show.cc:307:3: [4] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf.
sprintf(_grTempString, "\"x\" column has name `%s'\n", tmp.c_str());
data/gri-2.12.27/src/show.cc:310:3: [4] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf.
sprintf(_grTempString, "\"y\" column has name `%s'\n", tmp.c_str());
data/gri-2.12.27/src/show.cc:312:3: [4] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf.
sprintf(_grTempString, "%s:\n", "column data");
data/gri-2.12.27/src/show.cc:315:4: [4] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf.
sprintf(_grTempString, "%15s\t", "x");
data/gri-2.12.27/src/show.cc:319:4: [4] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf.
sprintf(_grTempString, "%15s\t", "y");
data/gri-2.12.27/src/show.cc:323:4: [4] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf.
sprintf(_grTempString, "%15s\t", "u");
data/gri-2.12.27/src/show.cc:327:4: [4] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf.
sprintf(_grTempString, "%15s\t", "v");
data/gri-2.12.27/src/show.cc:331:4: [4] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf.
sprintf(_grTempString, "%15s\t", "z");
data/gri-2.12.27/src/show.cc:335:4: [4] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf.
sprintf(_grTempString, "%15s\t", "weight");
data/gri-2.12.27/src/show.cc:676:2: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(now, asctime(localtime(&sec)));
data/gri-2.12.27/src/show.cc:706:3: [4] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf.
sprintf(cmd, "echo '%s' > %s\n", now, filename.c_str());
data/gri-2.12.27/src/show.cc:708:3: [4] (format) sprintf:
Potential format string problem (CWE-134). Make format string constant.
sprintf(cmd, lynx_cmd, filename.c_str());
data/gri-2.12.27/src/show.cc:719:2: [4] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf.
sprintf(cmd, "cat %s\n", filename.c_str());
data/gri-2.12.27/src/show.cc:833:3: [4] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf.
sprintf(_grTempString, "%s is at END-OF-FILE.\n",
data/gri-2.12.27/src/show.cc:840:3: [4] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf.
sprintf(_grTempString, "%s is at END-OF-FILE\n",
data/gri-2.12.27/src/show.cc:845:2: [4] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf.
sprintf(_grTempString, "%sNext line (%d): %s", _margin.c_str(),
data/gri-2.12.27/src/show.cc:892:2: [4] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf.
sprintf(_grTempString, "%s", asctime(localtime(&sec)));
data/gri-2.12.27/src/source.cc:46:3: [4] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf.
sprintf(_grTempString, "`source' cannot open file `%s' (translated to `%s')", _word[1], fname.c_str());
data/gri-2.12.27/src/startup.cc:160:3: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(return_value, s);
data/gri-2.12.27/src/startup.cc:164:3: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(return_value, s + i);
data/gri-2.12.27/src/startup.cc:330:3: [4] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf.
sprintf(_grTempString, "%s", asctime(localtime(&sec)));
data/gri-2.12.27/src/startup.cc:419:3: [4] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf.
sprintf(msg, "Color `%s' has RGB = (%f,%f,%f)\n",
data/gri-2.12.27/src/startup.cc:440:2: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(return_name, name);
data/gri-2.12.27/src/startup.cc:447:3: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(return_name, name);
data/gri-2.12.27/src/startup.cc:457:3: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(griinputs, tmp);
data/gri-2.12.27/src/startup.cc:463:4: [4] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf.
sprintf(return_name, "%s/%s", griinputs, name);
data/gri-2.12.27/src/startup.cc:491:3: [4] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf.
sprintf(tmp, "DEL %s;*", gr_currentPSfilename());
data/gri-2.12.27/src/startup.cc:494:3: [4] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf.
sprintf(tmp, "rm -f %s", gr_currentPSfilename());
data/gri-2.12.27/src/startup.cc:627:2: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(_grTempString, asctime(localtime(&sec)));
data/gri-2.12.27/src/startup.cc:1286:2: [4] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf.
sprintf(grircname, "%s/%s", home, GRIRC_FILE);
data/gri-2.12.27/src/startup.cc:1288:2: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(grircname, GRIRC_FILE);
data/gri-2.12.27/src/synonyms.cc:227:4: [4] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf.
sprintf(_grTempString, " %-25s = \"%s\"\n", n, synonymStack[i].get_value());
data/gri-2.12.27/src/synonyms.cc:253:6: [4] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf.
sprintf(_grTempString, "Warning: synonym `%s' defined but not used\n", tmp.c_str());
data/gri-2.12.27/src/synonyms.cc:532:2: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(copy, s);
data/gri-2.12.27/src/synonyms.cc:861:4: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(svalue, synonym_value.c_str());
data/gri-2.12.27/src/utility.cc:232:11: [4] (buffer) sscanf:
The scanf() family's %s operation, without a limit specification, permits
buffer overflows (CWE-120, CWE-20). Specify a limit to %s, or use a
different input function. If the scanf format is influenceable by an
attacker, it's exploitable.
if (2 != sscanf(s.c_str(), AMPERSAND_CODING, cname, &ml)) {
data/gri-2.12.27/src/utility.cc:470:2: [4] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf.
sprintf(sys_cmd, "DEL %s;*", filename);
data/gri-2.12.27/src/utility.cc:473:2: [4] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf.
sprintf(sys_cmd, "DEL %s", filename);
data/gri-2.12.27/src/utility.cc:476:2: [4] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf.
sprintf(sys_cmd, "rm %s", filename);
data/gri-2.12.27/src/utility.cc:746:38: [4] (shell) popen:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
FILE *pipefile = (FILE *) popen("pwd", "r");
data/gri-2.12.27/src/utility.cc:749:12: [4] (buffer) fscanf:
The scanf() family's %s operation, without a limit specification, permits
buffer overflows (CWE-120, CWE-20). Specify a limit to %s, or use a
different input function.
if (1 == fscanf(pipefile, "%s", msg)) {
data/gri-2.12.27/src/utility.cc:753:4: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(result, msg);
data/gri-2.12.27/src/utility.cc:867:3: [4] (format) sprintf:
Potential format string problem (CWE-134). Make format string constant.
sprintf(msg, fmt,
data/gri-2.12.27/src/utility.cc:871:3: [4] (format) sprintf:
Potential format string problem (CWE-134). Make format string constant.
sprintf(msg, fmt,
data/gri-2.12.27/src/utility.cc:875:3: [4] (format) sprintf:
Potential format string problem (CWE-134). Make format string constant.
sprintf(msg, fmt,
data/gri-2.12.27/src/utility.cc:879:3: [4] (format) sprintf:
Potential format string problem (CWE-134). Make format string constant.
sprintf(msg, fmt,
data/gri-2.12.27/src/utility.cc:883:3: [4] (format) sprintf:
Potential format string problem (CWE-134). Make format string constant.
sprintf(msg, fmt,
data/gri-2.12.27/src/utility.cc:887:3: [4] (format) sprintf:
Potential format string problem (CWE-134). Make format string constant.
sprintf(msg, fmt,
data/gri-2.12.27/src/utility.cc:892:3: [4] (format) sprintf:
Potential format string problem (CWE-134). Make format string constant.
sprintf(msg, fmt,
data/gri-2.12.27/src/utility.cc:897:3: [4] (format) sprintf:
Potential format string problem (CWE-134). Make format string constant.
sprintf(msg, fmt,
data/gri-2.12.27/src/utility.cc:902:3: [4] (format) sprintf:
Potential format string problem (CWE-134). Make format string constant.
sprintf(msg, fmt,
data/gri-2.12.27/src/utility.cc:907:3: [4] (format) sprintf:
Potential format string problem (CWE-134). Make format string constant.
sprintf(msg, fmt,
data/gri-2.12.27/src/utility.cc:912:3: [4] (format) sprintf:
Potential format string problem (CWE-134). Make format string constant.
sprintf(msg, fmt,
data/gri-2.12.27/src/utility.cc:918:3: [4] (format) sprintf:
Potential format string problem (CWE-134). Make format string constant.
sprintf(msg, fmt,
data/gri-2.12.27/src/utility.cc:924:3: [4] (format) sprintf:
Potential format string problem (CWE-134). Make format string constant.
sprintf(msg, fmt,
data/gri-2.12.27/src/utility.cc:930:3: [4] (format) sprintf:
Potential format string problem (CWE-134). Make format string constant.
sprintf(msg, fmt,
data/gri-2.12.27/src/utility.cc:936:3: [4] (format) sprintf:
Potential format string problem (CWE-134). Make format string constant.
sprintf(msg, fmt,
data/gri-2.12.27/src/utility.cc:942:3: [4] (format) sprintf:
Potential format string problem (CWE-134). Make format string constant.
sprintf(msg, fmt,
data/gri-2.12.27/src/utility.cc:949:3: [4] (format) sprintf:
Potential format string problem (CWE-134). Make format string constant.
sprintf(msg, fmt,
data/gri-2.12.27/src/utility.cc:956:3: [4] (format) sprintf:
Potential format string problem (CWE-134). Make format string constant.
sprintf(msg, fmt,
data/gri-2.12.27/src/utility.cc:963:3: [4] (format) sprintf:
Potential format string problem (CWE-134). Make format string constant.
sprintf(msg, fmt,
data/gri-2.12.27/src/utility.cc:970:3: [4] (format) sprintf:
Potential format string problem (CWE-134). Make format string constant.
sprintf(msg, fmt,
data/gri-2.12.27/src/utility.cc:1221:3: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(msg, str);
data/gri-2.12.27/src/utility.cc:1232:5: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(msg, p);
data/gri-2.12.27/src/utility.cc:1246:3: [4] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf.
sprintf(msg, " Error at %s\n", source_indicator);
data/gri-2.12.27/src/utility.cc:1251:5: [4] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf.
sprintf(msg,
data/gri-2.12.27/src/utility.cc:1259:5: [4] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf.
sprintf(msg,
data/gri-2.12.27/src/utility.cc:1322:3: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(msg, str);
data/gri-2.12.27/src/utility.cc:1333:5: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(msg, p);
data/gri-2.12.27/src/utility.cc:1687:2: [4] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf.
sprintf(sys_cmd, "TYPE %s/PAGE", filename);
data/gri-2.12.27/src/utility.cc:1691:2: [4] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf.
sprintf(sys_cmd, "COMMAND.COM MORE < %s", fn.getValue());
data/gri-2.12.27/src/utility.cc:1696:3: [4] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf.
sprintf(sys_cmd, "%s %s", pager, filename);
data/gri-2.12.27/src/utility.cc:1698:3: [4] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf.
sprintf(sys_cmd, "more %s", filename);
data/gri-2.12.27/src/utility.cc:1914:4: [4] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf.
sprintf(_grTempString, "\n`%s':\n This operation will take %.1g h; it is now %s",
data/gri-2.12.27/src/utility.cc:1920:4: [4] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf.
sprintf(_grTempString, "\n`%s':\n This operation will take %.1g min; it is now %s",
data/gri-2.12.27/src/utility.cc:1926:4: [4] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf.
sprintf(_grTempString, "\n`%s':\n This operation will take %.0g sec; it is now %s",
data/gri-2.12.27/src/utility.cc:2227:2: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(rval, _PATH_TMP "griXXXXXX");
data/gri-2.12.27/src/utility.cc:2264:15: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
int status = system(c.c_str());
data/gri-2.12.27/src/variable.cc:94:4: [4] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf.
sprintf(_grTempString, " %-25s = %g\n", variableStack[i].get_name(), variableStack[i].get_value());
data/gri-2.12.27/src/variable.cc:116:6: [4] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf.
sprintf(_grTempString, "\
data/gri-2.12.27/src/while.cc:59:4: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(copy, _cmdLine);
data/gri-2.12.27/src/delete.cc:293:2: [3] (random) srand:
This function is not sufficiently random for security-related functions
such as key and nonce creation (CWE-327). Use a more secure technique for
acquiring random values.
srand(getpid());
data/gri-2.12.27/src/delete.cc:297:19: [3] (random) drand48:
This function is not sufficiently random for security-related functions
such as key and nonce creation (CWE-327). Use a more secure technique for
acquiring random values.
int index = int(drand48() * length) % length;
data/gri-2.12.27/src/gr.cc:354:8: [3] (buffer) getenv:
Environment variables are untrustable input if they can be set by an
attacker. They can have any content and length, and the same variable can
be set more than once (CWE-807, CWE-20). Check environment variables
carefully before using them.
if (getenv("home")) {
data/gri-2.12.27/src/gr.cc:355:22: [3] (buffer) getenv:
Environment variables are untrustable input if they can be set by an
attacker. They can have any content and length, and the same variable can
be set more than once (CWE-807, CWE-20). Check environment variables
carefully before using them.
strcpy(homename, getenv("home"));
data/gri-2.12.27/src/popt/findme.c:26:19: [3] (buffer) getenv:
Environment variables are untrustable input if they can be set by an
attacker. They can have any content and length, and the same variable can
be set more than once (CWE-807, CWE-20). Check environment variables
carefully before using them.
char * path = getenv("PATH");
data/gri-2.12.27/src/popt/popt.c:83:9: [3] (buffer) getenv:
Environment variables are untrustable input if they can be set by an
attacker. They can have any content and length, and the same variable can
be set more than once (CWE-807, CWE-20). Check environment variables
carefully before using them.
if (getenv("POSIXLY_CORRECT") || getenv("POSIX_ME_HARDER"))
data/gri-2.12.27/src/popt/popt.c:83:38: [3] (buffer) getenv:
Environment variables are untrustable input if they can be set by an
attacker. They can have any content and length, and the same variable can
be set more than once (CWE-807, CWE-20). Check environment variables
carefully before using them.
if (getenv("POSIXLY_CORRECT") || getenv("POSIX_ME_HARDER"))
data/gri-2.12.27/src/popt/poptconfig.c:141:17: [3] (buffer) getenv:
Environment variables are untrustable input if they can be set by an
attacker. They can have any content and length, and the same variable can
be set more than once (CWE-807, CWE-20). Check environment variables
carefully before using them.
if ((home = getenv("HOME"))) {
data/gri-2.12.27/src/reorder.cc:113:2: [3] (random) srand:
This function is not sufficiently random for security-related functions
such as key and nonce creation (CWE-327). Use a more secure technique for
acquiring random values.
srand(getpid());
data/gri-2.12.27/src/reorder.cc:117:14: [3] (random) drand48:
This function is not sufficiently random for security-related functions
such as key and nonce creation (CWE-327). Use a more secure technique for
acquiring random values.
inew = int(drand48() * n) % n;
data/gri-2.12.27/src/rpncalc.cc:1857:16: [3] (random) drand48:
This function is not sufficiently random for security-related functions
such as key and nonce creation (CWE-327). Use a more secure technique for
acquiring random values.
item.set("", drand48(), NUMBER, true);
data/gri-2.12.27/src/show.cc:671:23: [3] (buffer) getenv:
Environment variables are untrustable input if they can be set by an
attacker. They can have any content and length, and the same variable can
be set more than once (CWE-807, CWE-20). Check environment variables
carefully before using them.
std::string filename(getenv("HOME"));
data/gri-2.12.27/src/utility.cc:779:18: [3] (buffer) getenv:
Environment variables are untrustable input if they can be set by an
attacker. They can have any content and length, and the same variable can
be set more than once (CWE-807, CWE-20). Check environment variables
carefully before using them.
rval = (char *)getenv(s);
data/gri-2.12.27/src/utility.cc:797:18: [3] (buffer) getenv:
Environment variables are untrustable input if they can be set by an
attacker. They can have any content and length, and the same variable can
be set more than once (CWE-807, CWE-20). Check environment variables
carefully before using them.
rval = (char *)getenv(s);
data/gri-2.12.27/src/utility.cc:807:18: [3] (buffer) getenv:
Environment variables are untrustable input if they can be set by an
attacker. They can have any content and length, and the same variable can
be set more than once (CWE-807, CWE-20). Check environment variables
carefully before using them.
rval = (char *)getenv(s);
data/gri-2.12.27/src/utility.cc:817:18: [3] (buffer) getenv:
Environment variables are untrustable input if they can be set by an
attacker. They can have any content and length, and the same variable can
be set more than once (CWE-807, CWE-20). Check environment variables
carefully before using them.
rval = (char *)getenv(s);
data/gri-2.12.27/src/utility.cc:827:18: [3] (buffer) getenv:
Environment variables are untrustable input if they can be set by an
attacker. They can have any content and length, and the same variable can
be set more than once (CWE-807, CWE-20). Check environment variables
carefully before using them.
rval = (char *)getenv(s);
data/gri-2.12.27/src/utility.cc:837:18: [3] (buffer) getenv:
Environment variables are untrustable input if they can be set by an
attacker. They can have any content and length, and the same variable can
be set more than once (CWE-807, CWE-20). Check environment variables
carefully before using them.
rval = (char *)getenv(s);
data/gri-2.12.27/src/utility.cc:2237:15: [3] (tmpfile) tempnam:
Temporary file race condition (CWE-377).
char *rval = tempnam(NULL, "gri");
data/gri-2.12.27/src/utility.cc:2243:15: [3] (tmpfile) tmpnam:
Temporary file race condition (CWE-377).
char *rval = tmpnam(NULL);
data/gri-2.12.27/src/G_string.cc:39:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char c[2];
data/gri-2.12.27/src/GriColor.cc:217:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char hex_color[8]; // result is 7 chars long
data/gri-2.12.27/src/GriColor.cc:220:2: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(hex_color, "#%02x%02x%02x", int(r*255),int(g*255),int(b*255));
data/gri-2.12.27/src/GriPath.cc:210:3: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char msg[1000];
data/gri-2.12.27/src/GriPath.cc:214:6: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(msg, "`draw curve filled' can't have > %d points in a", max_length);
data/gri-2.12.27/src/GriPath.cc:216:6: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(msg, "`draw curve' can't have > %d points in a", max_length);
data/gri-2.12.27/src/GriPath.cc:218:5: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(msg, "\
data/gri-2.12.27/src/GriPath.cc:231:4: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(msg, " Iteration %2d: removed points %.2f mm from curve, shortening to %d.\n", iteration, 10.0 * allow, length);
data/gri-2.12.27/src/GriPath.cc:237:4: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(msg, "\
data/gri-2.12.27/src/command.cc:57:1: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char *_command_word[MAX_cmd_word];
data/gri-2.12.27/src/command.cc:73:13: [2] (misc) fopen:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
if (!(fp = fopen(tmpname_file.c_str(), "w"))) {
data/gri-2.12.27/src/command.cc:83:2: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(_cmdLine, " *");
data/gri-2.12.27/src/command.cc:365:4: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char msg[200];
data/gri-2.12.27/src/command.cc:366:4: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(msg, "Gri version number (%d.%d.%d) doesn't match version (%d.%d.%d) in library file gri.cmd", major2, minor2, minor_minor2, major_version, minor_version, minor_minor_version);
data/gri-2.12.27/src/command.cc:473:2: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(cp, "\n\n");
data/gri-2.12.27/src/command.cc:579:39: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
_command[_num_command].procedure = (char *) realloc(_command[_num_command].procedure, 1 + size);
data/gri-2.12.27/src/command.cc:726:4: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char buf[300]; // BUG: should make bigger
data/gri-2.12.27/src/command.cc:772:5: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char value[100];
data/gri-2.12.27/src/command.cc:773:5: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(value, "%g", v);
data/gri-2.12.27/src/command.cc:802:11: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
free((char *) _command_word[i]);
data/gri-2.12.27/src/command.cc:805:11: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
free((char *) _command_word[i]);
data/gri-2.12.27/src/convert.cc:307:6: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_grTempString, "\
data/gri-2.12.27/src/convert.cc:325:6: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_grTempString, "\
data/gri-2.12.27/src/convert.cc:376:3: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_grTempString, "\
data/gri-2.12.27/src/convert.cc:392:15: [2] (misc) fopen:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
FILE *tmp = fopen (name, "w");
data/gri-2.12.27/src/convert.cc:782:4: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_grTempString, "\
data/gri-2.12.27/src/convert.cc:1504:3: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_grTempString, "\
data/gri-2.12.27/src/convert.cc:1589:4: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_grTempString, "\
data/gri-2.12.27/src/convert.cc:1595:4: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_grTempString, "\
data/gri-2.12.27/src/convert.cc:1667:3: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_grTempString, "`convert image to grid':\n Filled %.3f%% of the grid\n", 100.0 * (double) good / (double) (_num_xmatrix_data * _num_ymatrix_data));
data/gri-2.12.27/src/convert.cc:2051:4: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_grTempString, " Iteration %d: lengthscales = (%g,%g); RMS(z change) = %f\n", iteration + 1, xr2, yr2, rms_change);
data/gri-2.12.27/src/convert.cc:2181:2: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_grTempString,
data/gri-2.12.27/src/convert.cc:2190:3: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_grTempString,
data/gri-2.12.27/src/delete.cc:304:6: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_grTempString, "`delete columns randomly' could only delete %d columns\n", i);
data/gri-2.12.27/src/doline.cc:113:3: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
strcpy(_grTempString, "gri:");
data/gri-2.12.27/src/doline.cc:126:4: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(_grTempString, " # ");
data/gri-2.12.27/src/doline.cc:139:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char line[1024];
data/gri-2.12.27/src/doline.cc:639:2: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_grTempString, "%d status\n", status);
data/gri-2.12.27/src/doline.cc:664:13: [2] (misc) fopen:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
FILE *fp = fopen(fullfilename.c_str(), "r");
data/gri-2.12.27/src/doline.cc:779:4: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_grTempString, "\
data/gri-2.12.27/src/doline.cc:787:4: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(_grTempString, "^ Bad character\n");
data/gri-2.12.27/src/draw.cc:560:4: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_grTempString, "\
data/gri-2.12.27/src/draw.cc:834:4: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_grTempString, "`draw contour' drawing for value =%g\n", dlevel);
data/gri-2.12.27/src/draw.cc:842:5: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char tmp[1000];
data/gri-2.12.27/src/draw.cc:1746:4: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char clabel[20];
data/gri-2.12.27/src/draw.cc:1948:11: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
unsigned char gray[LEN];
data/gri-2.12.27/src/draw.cc:2697:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char fmt[20];
data/gri-2.12.27/src/draw.cc:2698:2: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
strcpy(fmt, "%g");
data/gri-2.12.27/src/draw.cc:3314:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char fname[256];
data/gri-2.12.27/src/draw.cc:3316:13: [2] (misc) fopen:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
FILE *fp = fopen(fname, "r");
data/gri-2.12.27/src/expect.cc:79:3: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_grTempString, "\
data/gri-2.12.27/src/file.cc:46:29: [2] (misc) fopen:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
FILE *thefile = fopen(fname, status);
data/gri-2.12.27/src/file.cc:99:3: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char status2[10];
data/gri-2.12.27/src/file.cc:103:14: [2] (misc) fopen:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
FILE *fp = fopen(name, status2);
data/gri-2.12.27/src/file.cc:117:15: [2] (misc) fopen:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
FILE *fp = fopen(tmpfile_name.c_str(), status);
data/gri-2.12.27/src/file.cc:125:15: [2] (misc) fopen:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
FILE *fp = fopen(name, status);
data/gri-2.12.27/src/file.cc:155:10: [2] (misc) fopen:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
fp = fopen(tmpfile_name.c_str(), status);
data/gri-2.12.27/src/gr.cc:57:8: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
static char creator_name[256] = "";
data/gri-2.12.27/src/gr.cc:58:8: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
static char ps_filename[256] = "gri.ps"; /* basename */
data/gri-2.12.27/src/gr.cc:59:8: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
static char ps_filename_used[256] = ""; /* actual name used */
data/gri-2.12.27/src/gr.cc:94:1: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char _grXAxisLabel[LEN_lab]; // name of x axis
data/gri-2.12.27/src/gr.cc:95:1: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char _grYAxisLabel[LEN_lab]; // name of y axis
data/gri-2.12.27/src/gr.cc:96:1: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char _grNumFormat_x[LEN_num]; // format for x axis
data/gri-2.12.27/src/gr.cc:97:1: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char _grNumFormat_y[LEN_num]; // format for y axis
data/gri-2.12.27/src/gr.cc:98:1: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char grTempString[_grTempStringLEN]; // local scratch string
data/gri-2.12.27/src/gr.cc:99:1: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char grTempString2[_grTempStringLEN]; // local scratch string
data/gri-2.12.27/src/gr.cc:111:1: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char _grTempString[_grTempStringLEN];
data/gri-2.12.27/src/gr.cc:112:1: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char _grTempString2[_grTempStringLEN];
data/gri-2.12.27/src/gr.cc:339:5: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(ps_filename_used, "gri-%02d.ps", version);
data/gri-2.12.27/src/gr.cc:340:13: [2] (misc) fopen:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
trial = fopen(ps_filename_used, "r");
data/gri-2.12.27/src/gr.cc:347:11: [2] (misc) fopen:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
_grPS = fopen(ps_filename_used, "w+");
data/gri-2.12.27/src/gr.cc:353:4: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char homename[100];
data/gri-2.12.27/src/gr.cc:356:5: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(homename, "/gri.ps");
data/gri-2.12.27/src/gr.cc:358:13: [2] (misc) fopen:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
_grPS = fopen(ps_filename_used, "w+");
data/gri-2.12.27/src/gr.cc:1213:2: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(grTempString, "^ handle %g %g\n", x_cm, y_cm);
data/gri-2.12.27/src/gr.cc:1334:18: [2] (misc) fopen:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
if ((new_file = fopen((char *) new_name, "w")) == NULL)
data/gri-2.12.27/src/gr.cc:1370:17: [2] (misc) fopen:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
if ((PS_file = fopen((char *) PS_name, "w")) == NULL) {
data/gri-2.12.27/src/gr.cc:1410:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char S[256];
data/gri-2.12.27/src/gr.cc:1553:4: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
strcpy(ps_filename, "gri.ps");
data/gri-2.12.27/src/gr.cc:1620:3: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(grTempString,
data/gri-2.12.27/src/gr.cc:1663:3: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(grTempString,
data/gri-2.12.27/src/gr.cc:1669:3: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(grTempString,
data/gri-2.12.27/src/gr.cc:1718:3: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(grTempString,
data/gri-2.12.27/src/gr.cc:1761:3: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(grTempString,
data/gri-2.12.27/src/gr.cc:1767:3: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(grTempString,
data/gri-2.12.27/src/gr.cc:1861:4: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_grTempString, "can't use negative x (%g) with LOG axis.", x);
data/gri-2.12.27/src/gr.cc:1881:4: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_grTempString, "can't use negative y (%g) with LOG axis.", y);
data/gri-2.12.27/src/graxes.cc:279:9: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_grTempString,"%d$\\circ$%c",hour,_xtype_map);
data/gri-2.12.27/src/graxes.cc:281:9: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_grTempString,"-%d$\\circ$%c",hour,_xtype_map);
data/gri-2.12.27/src/graxes.cc:286:9: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_grTempString,"%d$\\circ$%d'%c",hour,min,_xtype_map);
data/gri-2.12.27/src/graxes.cc:288:9: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_grTempString,"-%d$\\circ$%d'%c",hour,min,_xtype_map);
data/gri-2.12.27/src/graxes.cc:294:9: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_grTempString, "%d$\\circ$%d'%d\"%c",hour,min,sec,_xtype_map);
data/gri-2.12.27/src/graxes.cc:296:9: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_grTempString, "-%d$\\circ$%d'%d\"%c",hour,min,sec,_xtype_map);
data/gri-2.12.27/src/graxes.cc:298:8: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_grTempString,"%f$\\circ$%c",next,_xtype_map);
data/gri-2.12.27/src/graxes.cc:408:7: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_grTempString, "$10^{%.0f}$", log10(next));
data/gri-2.12.27/src/graxes.cc:577:9: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_grTempString,"%d$\\circ$%c",hour,_ytype_map);
data/gri-2.12.27/src/graxes.cc:579:9: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_grTempString,"-%d$\\circ$%c",hour,_ytype_map);
data/gri-2.12.27/src/graxes.cc:584:9: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_grTempString,"%d$\\circ$%d'%c",hour,min,_ytype_map);
data/gri-2.12.27/src/graxes.cc:586:9: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_grTempString,"-%d$\\circ$%d'%c",hour,min,_ytype_map);
data/gri-2.12.27/src/graxes.cc:592:9: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_grTempString, "%d$\\circ$%d'%d\"%c",hour,min,sec,_ytype_map);
data/gri-2.12.27/src/graxes.cc:594:9: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_grTempString, "-%d$\\circ$%d'%d\"%c",hour,min,sec,_ytype_map);
data/gri-2.12.27/src/graxes.cc:596:8: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_grTempString,"%f$\\circ$%c",next,_ytype_map);
data/gri-2.12.27/src/graxes.cc:718:7: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_grTempString, "$10^{%.0f}$", log10(next));
data/gri-2.12.27/src/graxes.cc:836:8: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char *label[NUM_LABEL],
data/gri-2.12.27/src/gri.cc:33:1: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char source_indicator[256]; // BUG: length not checked
data/gri-2.12.27/src/gri.cc:68:1: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char * _cmd_being_done_IP[cmd_being_done_LEN];
data/gri-2.12.27/src/gri.cc:80:1: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char *_word[MAX_nword];
data/gri-2.12.27/src/gri.cc:81:1: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char *_Words2[MAX_nword];
data/gri-2.12.27/src/gri.cc:82:1: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char *_Words3[MAX_nword];
data/gri-2.12.27/src/grimage.cc:145:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char hex[8]; // #000000 for example
data/gri-2.12.27/src/grimage.cc:278:3: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char label[100];
data/gri-2.12.27/src/grimage.cc:287:7: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(hex, "#%02X%02X%02X", cmask_r, cmask_g, cmask_b);
data/gri-2.12.27/src/grimage.cc:289:7: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(hex, "#%02X%02X%02X", value, value, value);
data/gri-2.12.27/src/grimage.cc:297:5: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(label, "j=%d", j);
data/gri-2.12.27/src/grimage.cc:303:7: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(hex, "#%02X%02X%02X", cmask_r, cmask_g, cmask_b);
data/gri-2.12.27/src/grimage.cc:306:7: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(hex, "#%02X%02X%02X",
data/gri-2.12.27/src/grstring.cc:38:8: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
static char *symbol_code[NCODES][4] = {
data/gri-2.12.27/src/grstring.cc:988:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char st[2];
data/gri-2.12.27/src/grstring.cc:1031:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char st[2];
data/gri-2.12.27/src/help.cc:47:14: [2] (misc) fopen:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
if (!(fp = fopen(tmpname_file.c_str(), "w"))) {
data/gri-2.12.27/src/help.cc:57:3: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(_cmdLine, " *");
data/gri-2.12.27/src/help.cc:109:13: [2] (misc) fopen:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
if (!(fp = fopen(tmpname_file.c_str(), "w"))) {
data/gri-2.12.27/src/input.cc:67:20: [2] (misc) fopen:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
if (NULL == (fp = fopen(longfilename.c_str(), "r"))) {
data/gri-2.12.27/src/insert.cc:45:13: [2] (misc) fopen:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
FILE *fp = fopen(fname.c_str(), "r");
data/gri-2.12.27/src/open.cc:232:4: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char tmp[1000];
data/gri-2.12.27/src/open.cc:237:4: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char tmp[1000];
data/gri-2.12.27/src/open.cc:278:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char command[100];
data/gri-2.12.27/src/popen.cc:197:19: [2] (misc) fopen:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
if (!(cell->fp = fopen(cell->mbx_name, mode))) {
data/gri-2.12.27/src/popt/popt.c:144:2: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(con->finalArgv[i], "-%c", shortName);
data/gri-2.12.27/src/popt/popt.c:211:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(argv + pos, con->finalArgv, sizeof(*argv) * con->finalArgvCount);
data/gri-2.12.27/src/popt/popt.c:216:2: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(argv + pos, con->leftovers, sizeof(*argv) * con->numLeftovers);
data/gri-2.12.27/src/popt/popt.c:436:6: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(con->finalArgv[i], "-%c", opt->shortName);
data/gri-2.12.27/src/popt/poptconfig.c:78:10: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
fd = open(fn, O_RDONLY);
data/gri-2.12.27/src/popt/poptconfig.c:144:2: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(fn, "/.popt");
data/gri-2.12.27/src/popt/popthelp.c:51:5: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char format[10];
data/gri-2.12.27/src/popt/popthelp.c:59:2: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(left, "-%c", opt->shortName);
data/gri-2.12.27/src/popt/popthelp.c:83:2: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(format, "%%.%ds\n%%%ds", (int) (ch - help), indentLength);
data/gri-2.12.27/src/popt/popthelp.c:175:5: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char shortStr[2];
data/gri-2.12.27/src/popt/popthelp.c:225:5: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char s[300]; /* this is larger then the ascii set, so
data/gri-2.12.27/src/popt/poptparse.c:80:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(argv2, argv, argc * sizeof(*argv));
data/gri-2.12.27/src/popt/poptparse.c:81:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(dst, bufStart, buf - bufStart);
data/gri-2.12.27/src/query.cc:36:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char hint[NCHAR];
data/gri-2.12.27/src/query.cc:37:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char answer[NCHAR];
data/gri-2.12.27/src/query.cc:38:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char def[NCHAR], *def_word[NCHAR];
data/gri-2.12.27/src/query.cc:287:4: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(def, "%f", def_value); // BUG: assume will fit
data/gri-2.12.27/src/read.cc:121:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char name[100]; // should be long enough ??
data/gri-2.12.27/src/read.cc:130:7: [2] (misc) fopen:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
fp = fopen(fname.c_str(), "r");
data/gri-2.12.27/src/read.cc:135:3: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char name2[100], name3[100], name4[100];
data/gri-2.12.27/src/read.cc:444:4: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char prompt[20];
data/gri-2.12.27/src/read.cc:445:4: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(prompt, "row %3d: ", row);
data/gri-2.12.27/src/read.cc:478:5: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_grTempString,
data/gri-2.12.27/src/read.cc:752:2: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_grTempString, "%d rows %d non-missing %d inside-clip-region",
data/gri-2.12.27/src/read.cc:895:5: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_errorMsg, "\
data/gri-2.12.27/src/read.cc:925:4: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char prompt[20];
data/gri-2.12.27/src/read.cc:926:4: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(prompt, "row %3d: ", i);
data/gri-2.12.27/src/read.cc:965:3: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_errorMsg, "\
data/gri-2.12.27/src/read.cc:970:2: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_grTempString, "%d cols\n", _num_xmatrix_data);
data/gri-2.12.27/src/read.cc:1105:5: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_errorMsg, "\
data/gri-2.12.27/src/read.cc:1135:4: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char prompt[20];
data/gri-2.12.27/src/read.cc:1136:4: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(prompt, "row %3d: ", i);
data/gri-2.12.27/src/read.cc:1181:3: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_errorMsg, "\
data/gri-2.12.27/src/read.cc:1186:2: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_grTempString, "%d rows\n", _num_ymatrix_data);
data/gri-2.12.27/src/read.cc:1261:5: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char msg[100];
data/gri-2.12.27/src/read.cc:1262:5: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(msg, "Can't read grid datum at col=%d, row=%d", col, row);
data/gri-2.12.27/src/read.cc:1334:4: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_errorMsg, "\
data/gri-2.12.27/src/read.cc:1341:4: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_errorMsg, "\
data/gri-2.12.27/src/read.cc:1482:6: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_errorMsg, "\
data/gri-2.12.27/src/read.cc:1486:6: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_errorMsg, "\
data/gri-2.12.27/src/read.cc:1495:6: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_errorMsg, "\
data/gri-2.12.27/src/read.cc:1499:6: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_errorMsg, "\
data/gri-2.12.27/src/read.cc:1538:4: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char prompt[20];
data/gri-2.12.27/src/read.cc:1539:4: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(prompt, "row %3d: ", row);
data/gri-2.12.27/src/read.cc:1547:5: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char msg[200];
data/gri-2.12.27/src/read.cc:1548:5: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(msg, "\
data/gri-2.12.27/src/read.cc:1556:5: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char msg[1024];
data/gri-2.12.27/src/read.cc:1558:6: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(msg,
data/gri-2.12.27/src/read.cc:1562:6: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(msg,
data/gri-2.12.27/src/read.cc:1594:4: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_errorMsg, "%d elements couldn't be read", cantread);
data/gri-2.12.27/src/read.cc:1602:2: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_grTempString, "%d rows %d cols\n", _num_ymatrix_data, _num_xmatrix_data);
data/gri-2.12.27/src/read.cc:1787:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char type[3];
data/gri-2.12.27/src/read.cc:1913:6: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_grTempString, "Could not read all PGM image data. Ran out after reading %d bytes", (im->ras_height - 1 - j) * im->ras_width + i);
data/gri-2.12.27/src/read.cc:1940:6: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_grTempString, "Could not read all PGM image data. Ran out after reading %d bytes", (im->ras_height - 1 - j) * im->ras_width + i);
data/gri-2.12.27/src/read.cc:1950:3: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char nextWord[50];
data/gri-2.12.27/src/read.cc:1956:7: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_grTempString, "Could not read all PGM image data. Ran out after reading %d bytes", (im->ras_height - 1 - j) * im->ras_width + i);
data/gri-2.12.27/src/read.cc:2037:3: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_grTempString, "This is not a Sun rasterfile, since first bytes are %x,%x,%x,%x instead of the expected %x,%x,%x,%x or %x,%x,%x,%x\n", b0, b1, b2, b3, 0x59, 0xa6, 0x6a, 0x95, 0x95, 0x6a, 0xa6, 0x59);
data/gri-2.12.27/src/read.cc:2108:3: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_grTempString, "Cannot read compressed images. This seems to be compressed, since it's %d wide and %d tall, but the length is %d\n", im->ras_width, im->ras_height, im->ras_length);
data/gri-2.12.27/src/read.cc:2117:3: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_grTempString, "Can only read images of type RT_STANDARD (%d) but this is type %d\n", RT_STANDARD, im->ras_type);
data/gri-2.12.27/src/read.cc:2149:5: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_grTempString, "Could not read all RasterFile image data. Ran out after reading %d bytes", (im->ras_height - 1 - j) * im->ras_width + i);
data/gri-2.12.27/src/read.cc:2173:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char nextWord[50];
data/gri-2.12.27/src/read.cc:2213:3: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_errorMsg, "%dx%d grid contradicts existing %dx%d mask grid\n",
data/gri-2.12.27/src/read.cc:2220:3: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_errorMsg, "%dx%d grid contradicts existing %dx%d grid\n",
data/gri-2.12.27/src/read.cc:2241:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char emessage[200];
data/gri-2.12.27/src/read.cc:2250:6: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(emessage, "Cannot read whole %dx%d 8-bit image. Only read %d bytes of the %d bytes expected in image", nx, ny, (i + j * nx), (nx * ny));
data/gri-2.12.27/src/read.cc:2257:6: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(emessage, "Cannot read whole %dx%d 16-bit image.\n Only read %d bytes of the %d bytes expected in image", nx, ny, 2*(i + j * nx), 2*(nx * ny));
data/gri-2.12.27/src/read.cc:2266:6: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(emessage, "Cannot read whole %dx%d 32-bit image.\n Only read %d bytes of the %d bytes expected in image", nx, ny, 4*(i + j * nx), 4*(nx * ny));
data/gri-2.12.27/src/read.cc:2275:6: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(emessage, "Cannot read whole %dx%d 32-bit image.\n Only read %d bytes of the %d bytes expected in image", nx, ny, 4*(i + j * nx), 4*(nx * ny));
data/gri-2.12.27/src/read.cc:2284:6: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(emessage, "Cannot read whole %dx%d 64-bit image.\n Only read %d bytes of the %d bytes expected in image", nx, ny, 8*(i + j * nx), 8*(nx * ny));
data/gri-2.12.27/src/read.cc:2293:6: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(emessage, "Cannot read whole %dx%d ascii image.\n Only read %d bytes of the %d values expected in image", nx, ny, (i + j * nx), (nx * ny));
data/gri-2.12.27/src/read.cc:2298:6: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(emessage, "Cannot read whole %dx%d ascii image.\n Only read %d bytes of the %d values expected in image", nx, ny, (i + j * nx), (nx * ny));
data/gri-2.12.27/src/read.cc:2436:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char nextWord[50];
data/gri-2.12.27/src/read.cc:2474:3: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_errorMsg, "%dx%d grid contradicts existing %dx%d mask grid\n",
data/gri-2.12.27/src/read.cc:2481:3: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_errorMsg, "%dx%d grid contradicts existing %dx%d grid\n",
data/gri-2.12.27/src/read.cc:2531:3: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_errorMsg, "%d elements unreadable", cantread);
data/gri-2.12.27/src/read.cc:2536:3: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_errorMsg, "%d elements <0 or >255", outbounds);
data/gri-2.12.27/src/read.cc:2592:4: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char name[MAX_NC_NAME];
data/gri-2.12.27/src/read.cc:2628:4: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_grTempString, "%f", *tf);
data/gri-2.12.27/src/read.cc:2634:4: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_grTempString, "%f", *td);
data/gri-2.12.27/src/read.cc:2640:4: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_grTempString, "%ld", *tl);
data/gri-2.12.27/src/read.cc:2655:4: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_grTempString, "%d", *ts);
data/gri-2.12.27/src/read.cc:2895:4: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
strcpy(_grTempString, "gri:");
data/gri-2.12.27/src/read.cc:2905:4: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char achar[LineLength];
data/gri-2.12.27/src/read.cc:2915:6: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(achar, "%f ", double(a));
data/gri-2.12.27/src/read.cc:2926:6: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(achar, "%f ", double(a));
data/gri-2.12.27/src/read.cc:2937:6: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(achar, "%f ", double(a));
data/gri-2.12.27/src/read.cc:2948:6: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(achar, "%f ", double(a));
data/gri-2.12.27/src/read.cc:2959:6: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(achar, "%f ", double(a));
data/gri-2.12.27/src/read.cc:3021:4: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char achar[LineLength];
data/gri-2.12.27/src/read.cc:3031:5: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(achar, "%f ", ((double) a));
data/gri-2.12.27/src/read.cc:3042:5: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(achar, "%f ", ((double) a));
data/gri-2.12.27/src/read.cc:3053:5: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(achar, "%f ", (double) a);
data/gri-2.12.27/src/read.cc:3064:5: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(achar, "%f ", (double) a);
data/gri-2.12.27/src/read.cc:3075:5: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(achar, "%f ", (double) a);
data/gri-2.12.27/src/regress.cc:109:4: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_grTempString, "\
data/gri-2.12.27/src/regress.cc:115:4: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_grTempString, "\
data/gri-2.12.27/src/regress.cc:144:4: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_grTempString, "\
data/gri-2.12.27/src/regress.cc:150:4: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_grTempString, "\
data/gri-2.12.27/src/rescale.cc:33:4: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_grTempString, "Rescaling x/y axes\n");
data/gri-2.12.27/src/rpncalc.cc:162:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char * w[RPN_W_CAPACITY];
data/gri-2.12.27/src/rpncalc.cc:292:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char *W[MAX_nword];
data/gri-2.12.27/src/rpncalc.cc:319:4: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char *Wnew[MAX_nword]; // for function case
data/gri-2.12.27/src/rpncalc.cc:389:3: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(*result, "%.20g", VALUE(1));
data/gri-2.12.27/src/rpncalc.cc:1155:3: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char hex[20]; // BUG: may not be long enough
data/gri-2.12.27/src/rpncalc.cc:1651:10: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
extern char *_command_word[MAX_cmd_word];
data/gri-2.12.27/src/rpncalc.cc:1679:10: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
extern char *_command_word[MAX_cmd_word];
data/gri-2.12.27/src/rpncalc.cc:1880:5: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_grTempString, "Cannot index %d-th value of x column; valid range is 0 to %d", index, int(_colX.size() - 1));
data/gri-2.12.27/src/rpncalc.cc:1889:5: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_grTempString, "Cannot index %d-th value of y column; valid range is 0 to %d", index, int(_colY.size() - 1));
data/gri-2.12.27/src/rpncalc.cc:1898:5: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_grTempString, "Cannot index %d-th value of z column; valid range is 0 to %d", index, int(_colZ.size() - 1));
data/gri-2.12.27/src/rpncalc.cc:1907:5: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_grTempString, "Cannot index %d-th value of u column; valid range is 0 to %d", index, int(_colU.size() - 1));
data/gri-2.12.27/src/rpncalc.cc:1916:5: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_grTempString, "Cannot index %d-th value of v column; valid range is 0 to %d", index, int(_colV.size() - 1));
data/gri-2.12.27/src/rpncalc.cc:1925:5: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_grTempString, "Cannot index %d-th value of weight column; valid range is 0 to %d", index, int(_colWEIGHT.size() - 1));
data/gri-2.12.27/src/rpncalc.cc:2146:3: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char str[100];
data/gri-2.12.27/src/rpncalc.cc:2149:4: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(str, "%.20g", VALUE(stack_len - i));
data/gri-2.12.27/src/set.cc:2320:4: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char msg[200];
data/gri-2.12.27/src/set.cc:2321:4: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(msg,
data/gri-2.12.27/src/set.cc:2326:4: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char msg[200];
data/gri-2.12.27/src/set.cc:2327:4: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(msg,
data/gri-2.12.27/src/set.cc:2332:4: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char msg[200];
data/gri-2.12.27/src/set.cc:2333:4: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(msg,
data/gri-2.12.27/src/set.cc:2338:4: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char msg[200];
data/gri-2.12.27/src/set.cc:2339:4: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(msg,
data/gri-2.12.27/src/set.cc:2386:5: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char tmp[100];
data/gri-2.12.27/src/set.cc:2387:5: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(tmp, "%f", gr_currentmissingvalue());
data/gri-2.12.27/src/set.cc:3092:3: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_errorMsg, "# intervals %d disagrees with existing grid size %d",
data/gri-2.12.27/src/set.cc:3173:3: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_errorMsg,
data/gri-2.12.27/src/set.cc:3798:3: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char coded_pointer[200]; // BUG: should be big enough. Jeeze!
data/gri-2.12.27/src/set.cc:3802:4: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(coded_pointer, "\\#v%d#", int(variablePointer.size()));
data/gri-2.12.27/src/set.cc:3811:4: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(coded_pointer, "\\#s%d#", int(synonymPointer.size()));
data/gri-2.12.27/src/show.cc:91:6: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_grTempString, "%d", int(value));
data/gri-2.12.27/src/show.cc:93:6: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_grTempString, "%g", value);
data/gri-2.12.27/src/show.cc:112:3: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_grTempString, "Plot is %.1f cm wide, ", tmp);
data/gri-2.12.27/src/show.cc:116:3: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_grTempString, "%.1f cm tall; margins ", tmp);
data/gri-2.12.27/src/show.cc:120:3: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_grTempString, "%.1f cm at left, ", tmp);
data/gri-2.12.27/src/show.cc:124:3: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_grTempString, "%.1f cm at bottom.\n", tmp);
data/gri-2.12.27/src/show.cc:191:2: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_grTempString, "Missing value= %g\n", gr_currentmissingvalue());
data/gri-2.12.27/src/show.cc:194:3: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_grTempString, "Fontsize = %5.0f points\n", tmp);
data/gri-2.12.27/src/show.cc:202:3: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_grTempString, "Line color: red=%.2f green=%.2f blue=%.2f\n",
data/gri-2.12.27/src/show.cc:209:3: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_grTempString, "Line color: hue=%.2f saturation=%.2f brightness=%.2f\n", h, s, v);
data/gri-2.12.27/src/show.cc:212:3: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_grTempString, "Line graylevel = %5.1f (note: 0=black, 1=white)\n", r);
data/gri-2.12.27/src/show.cc:218:3: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_grTempString, "Text color: red=%.2f green=%.2f blue=%.2f\n",
data/gri-2.12.27/src/show.cc:225:3: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_grTempString, "Text color: hue=%.2f saturation=%.2f brightness=%.2f\n", h, s, v);
data/gri-2.12.27/src/show.cc:228:3: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_grTempString, "Text graylevel = %5.1f (note: 0=black, 1=white)\n", r);
data/gri-2.12.27/src/show.cc:231:3: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_grTempString, "Line width = %5.1f points\n", tmp);
data/gri-2.12.27/src/show.cc:240:4: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_grTempString, "%.2fcm ", _dash[i]);
data/gri-2.12.27/src/show.cc:251:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char buffer[256];
data/gri-2.12.27/src/show.cc:253:3: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(buffer, "Lines drawn in RGB color (red=%f, green=%f, blue=%f)\n",
data/gri-2.12.27/src/show.cc:259:3: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(buffer, "Lines drawn in HSV color (hue=%f, saturation=%f, brightness=%f)\n",
data/gri-2.12.27/src/show.cc:267:3: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(buffer, "Text drawn in RGB color (red=%f, green=%f, blue=%f)\n",
data/gri-2.12.27/src/show.cc:273:3: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(buffer, "Text drawn in HSV color (hue=%f, saturation=%f, brightness=%f)\n",
data/gri-2.12.27/src/show.cc:346:6: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_grTempString, "%15g\t", tmp);
data/gri-2.12.27/src/show.cc:358:7: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_grTempString, "%15g\t", tmp);
data/gri-2.12.27/src/show.cc:371:7: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_grTempString, "%15g\t", tmp);
data/gri-2.12.27/src/show.cc:384:7: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_grTempString, "%15g\t", tmp);
data/gri-2.12.27/src/show.cc:397:7: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_grTempString, "%15g\t", tmp);
data/gri-2.12.27/src/show.cc:410:7: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_grTempString, "%15g\t", tmp);
data/gri-2.12.27/src/show.cc:433:3: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_grTempString, "\
data/gri-2.12.27/src/show.cc:438:3: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_grTempString, "\
data/gri-2.12.27/src/show.cc:447:3: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_grTempString, "\
data/gri-2.12.27/src/show.cc:452:3: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_grTempString, "\
data/gri-2.12.27/src/show.cc:461:3: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_grTempString, "\
data/gri-2.12.27/src/show.cc:466:3: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_grTempString, "\
data/gri-2.12.27/src/show.cc:475:3: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_grTempString, "\
data/gri-2.12.27/src/show.cc:480:3: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_grTempString, "\
data/gri-2.12.27/src/show.cc:489:3: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_grTempString, "\
data/gri-2.12.27/src/show.cc:494:3: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_grTempString, "\
data/gri-2.12.27/src/show.cc:503:3: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_grTempString, "\
data/gri-2.12.27/src/show.cc:508:3: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_grTempString, "\
data/gri-2.12.27/src/show.cc:569:5: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_grTempString, "%f\n", _xmatrix[i]);
data/gri-2.12.27/src/show.cc:573:4: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_grTempString, "Grid `x' has %d elements (too many to display)\n",
data/gri-2.12.27/src/show.cc:584:5: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_grTempString, "%f\n", _ymatrix[j]);
data/gri-2.12.27/src/show.cc:588:4: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_grTempString, "Grid `y' has %d elements (too many to display)\n",
data/gri-2.12.27/src/show.cc:606:5: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_grTempString, "Grid data all equal to %f", _f_min);
data/gri-2.12.27/src/show.cc:616:7: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_grTempString, "%g\t", _f_xy(i, j));
data/gri-2.12.27/src/show.cc:628:2: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_grTempString,
data/gri-2.12.27/src/show.cc:650:2: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_grTempString, "Grid statistics, for %d legitimate data: mean=%f stddev=%f skewness=%f kurtosis=%f\n", tmp_len, ave, sdev, skew, kurt);
data/gri-2.12.27/src/show.cc:675:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char now[30]; // 27 should be enough by Sun manpage
data/gri-2.12.27/src/show.cc:692:13: [2] (misc) fopen:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
FILE *fp = fopen(filename.c_str(), "r");
data/gri-2.12.27/src/show.cc:694:3: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char file_time[100];
data/gri-2.12.27/src/show.cc:704:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char cmd[200];
data/gri-2.12.27/src/show.cc:714:7: [2] (misc) fopen:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
fp = fopen(filename.c_str(), "r");
data/gri-2.12.27/src/show.cc:738:2: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_grTempString, "Image: %d cols, %d rows, %f<=x<=%f and %f<=y<=%f\n",
data/gri-2.12.27/src/show.cc:742:2: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_grTempString, "Image=000 <-> %f; ", _image0);
data/gri-2.12.27/src/show.cc:744:2: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_grTempString, "Image=255 <-> %f\n", _image255);
data/gri-2.12.27/src/show.cc:746:2: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_grTempString, "\
data/gri-2.12.27/src/show.cc:761:4: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_grTempString, "%3d->%3d ", i - modulo, i);
data/gri-2.12.27/src/show.cc:763:4: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_grTempString, "%11g->%11g %10.3f ",
data/gri-2.12.27/src/show.cc:785:6: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_grTempString, "%03d ",
data/gri-2.12.27/src/show.cc:805:6: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_grTempString, "%10f ", val_float);
data/gri-2.12.27/src/show.cc:850:3: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_errorMsg, "`show next line' had internal problems [%d]", result_code);
data/gri-2.12.27/src/source.cc:43:13: [2] (misc) fopen:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
FILE *fp = fopen(fname.c_str(), "r");
data/gri-2.12.27/src/startup.cc:318:3: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char host[BUFSIZ];
data/gri-2.12.27/src/startup.cc:321:4: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
strcpy(host, "unknown");
data/gri-2.12.27/src/startup.cc:323:3: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
strcpy(host, "unknown");
data/gri-2.12.27/src/startup.cc:417:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char msg[200];
data/gri-2.12.27/src/startup.cc:464:14: [2] (misc) fopen:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
if ((fp = fopen(return_name, "r"))) {
data/gri-2.12.27/src/startup.cc:490:3: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char tmp[1024];
data/gri-2.12.27/src/startup.cc:566:3: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char tmp[100];
data/gri-2.12.27/src/startup.cc:567:3: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(tmp, "%f", gr_currentmissingvalue());
data/gri-2.12.27/src/startup.cc:619:2: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_grTempString, "%d", int(getpid()));
data/gri-2.12.27/src/startup.cc:639:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char host[BUFSIZ];
data/gri-2.12.27/src/startup.cc:682:3: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char tmp[100];
data/gri-2.12.27/src/startup.cc:683:3: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(tmp, "%f", gr_currentmissingvalue());
data/gri-2.12.27/src/startup.cc:828:15: [2] (misc) fopen:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
_grSVG = fopen(o.c_str(), "w");
data/gri-2.12.27/src/startup.cc:878:23: [2] (misc) fopen:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
if (NULL == (fp = fopen(optArg, "r")))
data/gri-2.12.27/src/startup.cc:950:23: [2] (misc) fopen:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
if (NULL == (fp = fopen(argv[i + 1], "r")))
data/gri-2.12.27/src/startup.cc:1014:18: [2] (misc) fopen:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
_grSVG = fopen(o.c_str(), "w");
data/gri-2.12.27/src/startup.cc:1277:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char grircname[100];
data/gri-2.12.27/src/startup.cc:1322:13: [2] (misc) fopen:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
FILE *fp = fopen(fullfilename.c_str(), "r");
data/gri-2.12.27/src/state.cc:98:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char msg[200];
data/gri-2.12.27/src/state.cc:101:4: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(msg, "State at top of stack (most recent):\n");
data/gri-2.12.27/src/state.cc:103:4: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(msg, "State at distance %d from top of stack:\n", d - i);
data/gri-2.12.27/src/state.cc:105:3: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(msg, " line width (curve) = %f pt\n", stateStack[i].linewidth_line());
data/gri-2.12.27/src/state.cc:107:3: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(msg, " line width (axis) = %f pt\n", stateStack[i].linewidth_axis());
data/gri-2.12.27/src/state.cc:109:3: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(msg, " line width (symbol) = %f pt\n", stateStack[i].linewidth_symbol());
data/gri-2.12.27/src/state.cc:112:4: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(msg, " color (font) = (%f,%f,%f) rgb\n",
data/gri-2.12.27/src/state.cc:117:4: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(msg, " color (font) = (%f,%f,%f) hsb\n",
data/gri-2.12.27/src/state.cc:124:4: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(msg, " color (font) = (%f,%f,%f) rgb\n",
data/gri-2.12.27/src/state.cc:129:4: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(msg, " color (font) = (%f,%f,%f) hsb\n",
data/gri-2.12.27/src/synonyms.cc:46:9: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
extern char *_command_word[MAX_cmd_word];
data/gri-2.12.27/src/synonyms.cc:69:9: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
extern char *_command_word[MAX_cmd_word];
data/gri-2.12.27/src/synonyms.cc:132:5: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char buffer[100];
data/gri-2.12.27/src/synonyms.cc:133:5: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(buffer, "%g", variableStack[which].get_value());
data/gri-2.12.27/src/synonyms.cc:342:4: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char value_buffer[100];
data/gri-2.12.27/src/synonyms.cc:343:4: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(value_buffer, "%d", nc);
data/gri-2.12.27/src/synonyms.cc:414:5: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char num[30];
data/gri-2.12.27/src/synonyms.cc:415:5: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(num, "%d", get_number_of_words(word_buf));
data/gri-2.12.27/src/synonyms.cc:434:6: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char num[30];
data/gri-2.12.27/src/synonyms.cc:435:6: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(num, "%d", get_number_of_words(synonymStack[ii].get_value()));
data/gri-2.12.27/src/synonyms.cc:765:8: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char buf[20]; // BUG: should be big enough
data/gri-2.12.27/src/synonyms.cc:766:8: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(buf, "%d", coded_level);
data/gri-2.12.27/src/synonyms.cc:805:6: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char alias_value_buffer[100];
data/gri-2.12.27/src/synonyms.cc:806:6: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(alias_value_buffer, "%f", value);
data/gri-2.12.27/src/timer.cc:36:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char msg[100];
data/gri-2.12.27/src/timer.cc:42:3: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(msg, "Elapsed time = 0 s\n");
data/gri-2.12.27/src/timer.cc:48:3: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(msg, "Elapsed time = %.0f s\n", elapsed);
data/gri-2.12.27/src/utility.cc:188:3: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char buf[100]; // BUG: could be too short
data/gri-2.12.27/src/utility.cc:189:3: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(buf, "%g", variableStack[index].get_value());
data/gri-2.12.27/src/utility.cc:230:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char cname[100]; // BUG: may be too short
data/gri-2.12.27/src/utility.cc:303:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char *w[MAX_nword]; // BUG: wasteful
data/gri-2.12.27/src/utility.cc:319:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char *w[MAX_nword]; // BUG: wasteful
data/gri-2.12.27/src/utility.cc:468:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char sys_cmd[200];
data/gri-2.12.27/src/utility.cc:605:3: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char wd[1024], *ptr = wd; // BUG: may not be long enough
data/gri-2.12.27/src/utility.cc:713:14: [2] (misc) fopen:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
FILE *fp = fopen(test_file.c_str(), "r");
data/gri-2.12.27/src/utility.cc:732:9: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
static char msg[1024];
data/gri-2.12.27/src/utility.cc:745:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char msg[1024];
data/gri-2.12.27/src/utility.cc:854:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char msg[1024];
data/gri-2.12.27/src/utility.cc:1211:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char msg[1024];
data/gri-2.12.27/src/utility.cc:1313:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char msg[1024];
data/gri-2.12.27/src/utility.cc:1362:4: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char buffer[100];
data/gri-2.12.27/src/utility.cc:1363:4: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(buffer,
data/gri-2.12.27/src/utility.cc:1392:5: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char buffer[100];
data/gri-2.12.27/src/utility.cc:1393:5: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(buffer,
data/gri-2.12.27/src/utility.cc:1551:5: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_grTempString, "Clipping (%g, %g)\n", x, y);
data/gri-2.12.27/src/utility.cc:1558:5: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_grTempString, "Clipping (%g, %g)\n", x, y);
data/gri-2.12.27/src/utility.cc:1567:5: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_grTempString, "Clipping (%g, %g)\n", x, y);
data/gri-2.12.27/src/utility.cc:1574:5: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(_grTempString, "Clipping (%g, %g)\n", x, y);
data/gri-2.12.27/src/utility.cc:1685:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char sys_cmd[100];
data/gri-2.12.27/src/utility.cc:2219:9: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
static char rval[PATH_MAX];
data/gri-2.12.27/src/utility.cc:2228:7: [2] (tmpfile) mkstemp:
Potential for temporary file vulnerability in some circumstances. Some
older Unix-like systems create temp files with permission to write by all
by default, so be sure to set the umask to override this. Also, some older
Unix systems might fail to use O_EXCL when opening the file, so make sure
that O_EXCL is used by the library (CWE-377).
fd = mkstemp(rval);
data/gri-2.12.27/src/while.cc:121:4: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char msg[100];
data/gri-2.12.27/src/while.cc:122:4: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(msg, "`while' performed %d passes\n", passes);
data/gri-2.12.27/src/while.cc:145:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char res[100]; // BUG: fixed size
data/gri-2.12.27/src/write.cc:64:25: [2] (misc) fopen:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
else if (NULL == (fp = fopen(fname.c_str(), "a+"))) {
data/gri-2.12.27/src/write.cc:180:26: [2] (misc) fopen:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
else if (NULL == (fp = fopen(fname.c_str(), "a+"))) {
data/gri-2.12.27/src/write.cc:196:27: [2] (misc) fopen:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
else if (NULL == (fp = fopen(fname.c_str(), "a+"))) {
data/gri-2.12.27/src/write.cc:256:25: [2] (misc) fopen:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
else if (NULL == (fp = fopen(fname.c_str(), "a+"))) {
data/gri-2.12.27/src/write.cc:306:25: [2] (misc) fopen:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
else if (NULL == (fp = fopen(fname.c_str(), "a+"))) {
data/gri-2.12.27/src/write.cc:375:25: [2] (misc) fopen:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
else if (NULL == (fp = fopen(fname.c_str(), "a+"))) {
data/gri-2.12.27/src/write.cc:437:25: [2] (misc) fopen:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
else if (NULL == (fp = fopen(fname.c_str(), "a+"))) {
data/gri-2.12.27/src/write.cc:467:25: [2] (misc) fopen:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
else if (NULL == (fp = fopen(fname.c_str(), "a+"))) {
data/gri-2.12.27/src/G_string.cc:42:10: [1] (buffer) getc:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
c[0] = getc(fp);
data/gri-2.12.27/src/G_string.cc:119:17: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
int len_cmd = strlen(cmd);
data/gri-2.12.27/src/G_string.cc:120:19: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
int len_value = strlen(value);
data/gri-2.12.27/src/G_string.cc:121:29: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
char *copy = new char[1 + strlen(value)];
data/gri-2.12.27/src/command.cc:186:38: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if (0 == strncmp(s + start, C_call, strlen(C_call))) {
data/gri-2.12.27/src/command.cc:189:12: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
start += strlen(C_call);
data/gri-2.12.27/src/command.cc:190:12: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
start += strlen(C_declaration);
data/gri-2.12.27/src/command.cc:200:8: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if (strlen(c_fcn[i].name)!= c_fcn[i].name_len) {
data/gri-2.12.27/src/command.cc:201:93: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
printf("code wants %d for \"%s\" but actually is %d\n", c_fcn[i].name_len,c_fcn[i].name,strlen(c_fcn[i].name));
data/gri-2.12.27/src/command.cc:220:18: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if (length == strlen(c_fcn[i].name)
data/gri-2.12.27/src/command.cc:244:18: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
char, 1 + strlen(s + start));
data/gri-2.12.27/src/command.cc:263:61: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
GET_STORAGE(_cmd_being_done_IP[_cmd_being_done], char, 1 + strlen(s));
data/gri-2.12.27/src/command.cc:430:11: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
1 + strlen(_cmdFILE.back().get_name()));
data/gri-2.12.27/src/command.cc:443:11: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
1 + strlen(_cmdFILE.back().get_name()));
data/gri-2.12.27/src/command.cc:446:55: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
GET_STORAGE(_command[_num_command].syntax, char, 1 + strlen(line));
data/gri-2.12.27/src/command.cc:467:22: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
unsigned size = 2 + strlen(line); // total length of help
data/gri-2.12.27/src/command.cc:469:9: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
size = strlen(line) + 1 + 2; // for string catted below
data/gri-2.12.27/src/command.cc:485:9: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
len = strlen(line);
data/gri-2.12.27/src/command.cc:540:2: [1] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant character.
strcpy(_command[_num_command].procedure, "");
data/gri-2.12.27/src/command.cc:714:28: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
GET_STORAGE(cp, char, 1 + strlen(_command_word_separator));
data/gri-2.12.27/src/command.cc:737:28: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
GET_STORAGE(cp, char, strlen(cw + 1));
data/gri-2.12.27/src/command.cc:750:31: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
GET_STORAGE(cp, char, 1 + strlen(buf));
data/gri-2.12.27/src/command.cc:761:31: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
GET_STORAGE(cp, char, 1 + strlen(buf));
data/gri-2.12.27/src/command.cc:774:31: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
GET_STORAGE(cp, char, 1 + strlen(value));
data/gri-2.12.27/src/command.cc:778:5: [1] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant character.
strcpy(cp, "0");
data/gri-2.12.27/src/command.cc:781:30: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
GET_STORAGE(cp, char, 1 + strlen(_word[i]));
data/gri-2.12.27/src/command.cc:1037:34: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
bsStack.back().increment_line(strlen(_cmdLine));
data/gri-2.12.27/src/command.cc:1041:34: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
bsStack.back().increment_line(strlen(_cmdLine));
data/gri-2.12.27/src/doline.cc:115:13: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
int len = strlen(cmd);
data/gri-2.12.27/src/doline.cc:123:21: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if (_grTempString[strlen(_grTempString) - 1] == '\n')
data/gri-2.12.27/src/doline.cc:124:18: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
_grTempString[strlen(_grTempString) - 1] = '\0';
data/gri-2.12.27/src/doline.cc:138:21: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
unsigned int len = strlen(cl);
data/gri-2.12.27/src/doline.cc:169:8: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if (strlen(_cmdLine) < 1) {
data/gri-2.12.27/src/doline.cc:203:59: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
fprintf(_grPS, "%s\n", _cmdLine + skip_space(_cmdLine) + strlen("postscript "));
data/gri-2.12.27/src/doline.cc:214:12: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
int len = strlen(cmd);
data/gri-2.12.27/src/doline.cc:225:14: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
int len = strlen(source_indicator);
data/gri-2.12.27/src/doline.cc:277:6: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if (strlen(cmd) < 1) {
data/gri-2.12.27/src/doline.cc:283:6: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if (strlen(cmd) < 1) {
data/gri-2.12.27/src/doline.cc:342:7: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if (strlen(cmd) < 1)
data/gri-2.12.27/src/doline.cc:361:6: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if (strlen(_cmdLine) < 1)
data/gri-2.12.27/src/doline.cc:565:10: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
int i = strlen(s) - 2;
data/gri-2.12.27/src/doline.cc:609:21: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
unsigned int l = strlen(_cmdLine);
data/gri-2.12.27/src/doline.cc:704:12: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
int len = strlen(s);
data/gri-2.12.27/src/doline.cc:768:8: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
len = strlen(s);
data/gri-2.12.27/src/doline.cc:803:12: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
int len = strlen(in);
data/gri-2.12.27/src/doline.cc:829:7: [1] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant character.
strcpy(result, "");
data/gri-2.12.27/src/doline.cc:834:24: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
int len_result = strlen(result);
data/gri-2.12.27/src/doline.cc:876:21: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
unsigned int len = strlen(in);
data/gri-2.12.27/src/doline.cc:1118:11: [1] (buffer) fgetc:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
thisc = fgetc(fp);
data/gri-2.12.27/src/file.cc:102:4: [1] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant character.
strcat(status2, "b");
data/gri-2.12.27/src/gr.cc:174:8: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
len = strlen(s);
data/gri-2.12.27/src/gr.cc:184:2: [1] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant character.
strcat(stdin_buffer.buf, "\n");
data/gri-2.12.27/src/gr.cc:205:3: [1] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant character.
strcat(s, "\n");
data/gri-2.12.27/src/gr.cc:209:17: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
while ((len = strlen(s)) > 1 && s[len - 2] == '\\' && most > 0) {
data/gri-2.12.27/src/gr.cc:216:5: [1] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant character.
strcat(s, "\n");
data/gri-2.12.27/src/gr.cc:251:8: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if (strlen(line) > 0) {
data/gri-2.12.27/src/gr.cc:259:11: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
int n = strlen(s);
data/gri-2.12.27/src/gr.cc:278:19: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
unsigned int l = strlen(s);
data/gri-2.12.27/src/gr.cc:995:8: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ((strlen(filename) > 0)) {
data/gri-2.12.27/src/gr.cc:997:9: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if (strlen(filename) > 1 && filename[1] != ' ') {
data/gri-2.12.27/src/gr.cc:1550:7: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if (strlen(new_name) > 0)
data/gri-2.12.27/src/gr.cc:1601:2: [1] (buffer) strncpy:
Easily used incorrectly; doesn't always \0-terminate or check for invalid
pointers [MS-banned] (CWE-120).
strncpy(_grXAxisLabel, xlab, LEN_lab);
data/gri-2.12.27/src/gr.cc:1608:2: [1] (buffer) strncpy:
Easily used incorrectly; doesn't always \0-terminate or check for invalid
pointers [MS-banned] (CWE-120).
strncpy(_grNumFormat_x, xformat, LEN_num);
data/gri-2.12.27/src/gr.cc:1702:2: [1] (buffer) strncpy:
Easily used incorrectly; doesn't always \0-terminate or check for invalid
pointers [MS-banned] (CWE-120).
strncpy(_grYAxisLabel, ylab, LEN_lab);
data/gri-2.12.27/src/gr.cc:1709:2: [1] (buffer) strncpy:
Easily used incorrectly; doesn't always \0-terminate or check for invalid
pointers [MS-banned] (CWE-120).
strncpy(_grNumFormat_y, yformat, LEN_num);
data/gri-2.12.27/src/gr_coll.cc:38:17: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
capacity = 1 + strlen(s);
data/gri-2.12.27/src/gr_coll.cc:46:17: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
capacity = 1 + strlen(cp);
data/gri-2.12.27/src/gr_coll.cc:61:19: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
unsigned int l = strlen(value);
data/gri-2.12.27/src/gr_coll.cc:80:14: [1] (buffer) getc:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
value[i] = getc(fp);
data/gri-2.12.27/src/gr_coll.cc:141:14: [1] (buffer) getc:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
value[i] = getc(fp);
data/gri-2.12.27/src/gr_coll.cc:149:15: [1] (buffer) getc:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
value[i] = getc(fp);
data/gri-2.12.27/src/gr_coll.cc:159:15: [1] (buffer) getc:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
value[i] = getc(fp);
data/gri-2.12.27/src/gr_coll.cc:187:14: [1] (buffer) getc:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
value[i] = getc(fp);
data/gri-2.12.27/src/gr_coll.cc:198:15: [1] (buffer) getc:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
value[i] = getc(fp);
data/gri-2.12.27/src/gr_coll.cc:232:21: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
unsigned int len = strlen(s);
data/gri-2.12.27/src/gr_coll.cc:243:24: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
unsigned int len = strlen(s);
data/gri-2.12.27/src/gr_coll.cc:244:24: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
unsigned int oldlen = strlen(value);
data/gri-2.12.27/src/gr_coll.cc:266:17: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
int len_cmd = strlen(cmd);
data/gri-2.12.27/src/gr_coll.cc:267:19: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
int len_value = strlen(value);
data/gri-2.12.27/src/gr_coll.cc:268:29: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
char *copy = new char[1 + strlen(value)];
data/gri-2.12.27/src/gr_coll.cc:335:24: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
for (unsigned int i = strlen(value); i < capacity; i++)
data/gri-2.12.27/src/gr_coll.cc:343:6: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if (strlen(value) == 0)
data/gri-2.12.27/src/gr_coll.cc:642:22: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
name = new char[1 + strlen(theName)];
data/gri-2.12.27/src/gr_coll.cc:662:22: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
name = new char[1 + strlen(n.getName())];
data/gri-2.12.27/src/gr_coll.cc:672:6: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if (strlen(the_name) > strlen(name)) {
data/gri-2.12.27/src/gr_coll.cc:672:25: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if (strlen(the_name) > strlen(name)) {
data/gri-2.12.27/src/gr_coll.cc:674:23: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
name = new char[1 + strlen(the_name)];
data/gri-2.12.27/src/gr_coll.cc:685:6: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if (strlen(cp) > strlen(name)) {
data/gri-2.12.27/src/gr_coll.cc:685:19: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if (strlen(cp) > strlen(name)) {
data/gri-2.12.27/src/gr_coll.cc:687:23: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
name = new char[1 + strlen(cp)];
data/gri-2.12.27/src/graxes.cc:207:8: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if (strlen(_grNumFormat_x))
data/gri-2.12.27/src/graxes.cc:211:8: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if (strlen(_grNumFormat_x))
data/gri-2.12.27/src/graxes.cc:300:17: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
} else if (strlen(_grNumFormat_x)) {
data/gri-2.12.27/src/graxes.cc:403:40: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
&& strlen(_grNumFormat_x)) {
data/gri-2.12.27/src/graxes.cc:406:7: [1] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source is a constant character.
sprintf(_grTempString, "1");
data/gri-2.12.27/src/graxes.cc:598:17: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
} else if (strlen(_grNumFormat_y)) {
data/gri-2.12.27/src/graxes.cc:713:12: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
&& strlen(_grNumFormat_y)) {
data/gri-2.12.27/src/graxes.cc:716:7: [1] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source is a constant character.
sprintf(_grTempString, "1");
data/gri-2.12.27/src/graxes.cc:852:14: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
10 + strlen(_grTempString));
data/gri-2.12.27/src/graxes.cc:872:23: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
int l = strlen(label[i]);
data/gri-2.12.27/src/graxes.cc:901:32: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
int j = 0, jMax = strlen(s);
data/gri-2.12.27/src/graxes.cc:913:11: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
cp = s + strlen(s) - 1;
data/gri-2.12.27/src/group.cc:41:7: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if (strlen(id) > 0)
data/gri-2.12.27/src/grstring.cc:391:41: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if (0.0 == gr_currentfontsize_pt() || !strlen(s)) {
data/gri-2.12.27/src/grstring.cc:563:25: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
int slen = strlen(s);
data/gri-2.12.27/src/grstring.cc:1047:25: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
int slen = strlen(s);
data/gri-2.12.27/src/grstring.cc:1314:13: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
int len = strlen(symbol_code[i][0]);
data/gri-2.12.27/src/grstring.cc:1555:6: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if (strlen(s) == 0)
data/gri-2.12.27/src/grstring.cc:1646:38: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if (!strncmp(s, symbol_code[i][1], strlen(symbol_code[i][1]))) {
data/gri-2.12.27/src/insert.cc:74:4: [1] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant character.
strcat(_cmdLine, "\n");
data/gri-2.12.27/src/open.cc:111:13: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
int len = strlen(_word[1]);
data/gri-2.12.27/src/open.cc:191:8: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if (!strlen(_word[1])) {
data/gri-2.12.27/src/popen.cc:155:6: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
n = strlen(temp);
data/gri-2.12.27/src/popen.cc:209:22: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
(*x).dsc$w_length = strlen(buff);
data/gri-2.12.27/src/popt/findme.c:38:30: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
start = pathbuf = alloca(strlen(path) + 1);
data/gri-2.12.27/src/popt/findme.c:39:18: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
buf = malloc(strlen(path) + strlen(argv0) + 2);
data/gri-2.12.27/src/popt/findme.c:39:33: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
buf = malloc(strlen(path) + strlen(argv0) + 2);
data/gri-2.12.27/src/popt/popt.c:87:31: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
con->appName = strcpy(malloc(strlen(name) + 1), name);
data/gri-2.12.27/src/popt/popt.c:140:44: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
con->finalArgv[i] = malloc((longName ? strlen(longName) : 0) + 3);
data/gri-2.12.27/src/popt/popt.c:200:21: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
argv[pos] = alloca(strlen(con->execPath) + strlen(script) + 2);
data/gri-2.12.27/src/popt/popt.c:200:45: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
argv[pos] = alloca(strlen(con->execPath) + strlen(script) + 2);
data/gri-2.12.27/src/popt/popt.c:311:18: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
strcpy(alloca(strlen(origOptString) + 1),
data/gri-2.12.27/src/popt/popt.c:432:27: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
malloc((opt->longName ? strlen(opt->longName) : 0) + 3);
data/gri-2.12.27/src/popt/popt.c:508:34: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
alias->longName = strcpy(malloc(strlen(alias->longName) + 1),
data/gri-2.12.27/src/popt/poptconfig.c:24:22: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
int nameLength = strlen(con->appName);
data/gri-2.12.27/src/popt/poptconfig.c:90:15: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
if ((fd = read(fd, file, fileLength)) != fileLength) {
data/gri-2.12.27/src/popt/poptconfig.c:142:14: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
fn = alloca(strlen(home) + 20);
data/gri-2.12.27/src/popt/popthelp.c:64:2: [1] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant character.
strcat(left, "=");
data/gri-2.12.27/src/popt/popthelp.c:75:18: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
helpLength = strlen(help);
data/gri-2.12.27/src/popt/popthelp.c:87:15: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
helpLength = strlen(help);
data/gri-2.12.27/src/popt/popthelp.c:106:11: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
this += strlen(opt->longName) + 2;
data/gri-2.12.27/src/popt/popthelp.c:111:11: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
this += strlen(s) + 1;
data/gri-2.12.27/src/popt/popthelp.c:153:9: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
len += strlen(fn) + 1;
data/gri-2.12.27/src/popt/popthelp.c:186:13: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
len += 1 + strlen(opt->longName);
data/gri-2.12.27/src/popt/popthelp.c:193:9: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
len += strlen(argDescrip) + 1;
data/gri-2.12.27/src/popt/popthelp.c:235:10: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
str[strlen(str)] = opt->shortName;
data/gri-2.12.27/src/popt/popthelp.c:246:12: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
return strlen(s) + 4;
data/gri-2.12.27/src/popt/popthelp.c:257:12: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
cursor += strlen(con->otherHelp) + 1;
data/gri-2.12.27/src/popt/poptparse.c:16:32: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
char * buf = strcpy(alloca(strlen(s) + 1), s);
data/gri-2.12.27/src/popt/poptparse.c:30:23: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
memset(buf, '\0', strlen(s) + 1);
data/gri-2.12.27/src/popt/poptparse.c:73:9: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if (strlen(argv[argc])) {
data/gri-2.12.27/src/query.cc:65:24: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if (*(def_word[i] + strlen(def_word[i]) - 1) == '"') {
data/gri-2.12.27/src/query.cc:66:21: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
*(def_word[i] + strlen(def_word[i]) - 1) = '\0';
data/gri-2.12.27/src/query.cc:93:10: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
answer[strlen(answer) - 1] = '\0';
data/gri-2.12.27/src/query.cc:95:7: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if (strlen(answer) < 1) {
data/gri-2.12.27/src/query.cc:120:13: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
answer[strlen(answer) - 1] = '\0';
data/gri-2.12.27/src/query.cc:121:10: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if (strlen(answer) < 1) {
data/gri-2.12.27/src/query.cc:217:12: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
int len = strlen(_cmdLine);
data/gri-2.12.27/src/read.cc:141:41: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
line_len = (int)strlen(_grTempString);
data/gri-2.12.27/src/read.cc:151:49: [1] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant character.
strcat(name, " ");
data/gri-2.12.27/src/read.cc:155:49: [1] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant character.
strcat(name, " ");
data/gri-2.12.27/src/read.cc:157:49: [1] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant character.
strcat(name, " ");
data/gri-2.12.27/src/read.cc:161:49: [1] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant character.
strcat(name, " ");
data/gri-2.12.27/src/read.cc:163:49: [1] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant character.
strcat(name, " ");
data/gri-2.12.27/src/read.cc:165:49: [1] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant character.
strcat(name, " ");
data/gri-2.12.27/src/read.cc:807:29: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
char *varname = new char [strlen(_word[4])]; // skip first char
data/gri-2.12.27/src/read.cc:810:11: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
varname[strlen(varname) - 1] = '\0';
data/gri-2.12.27/src/read.cc:1015:29: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
char *varname = new char [strlen(_word[4])]; // skip first char
data/gri-2.12.27/src/read.cc:1018:11: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
varname[strlen(varname) - 1] = '\0';
data/gri-2.12.27/src/read.cc:1304:29: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
char *varname = new char [strlen(_word[4])]; // skip first char
data/gri-2.12.27/src/read.cc:1307:11: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
varname[strlen(varname) - 1] = '\0';
data/gri-2.12.27/src/read.cc:1789:11: [1] (buffer) fscanf:
It's unclear if the %s limit in the format string is small enough
(CWE-120). Check that the limit is sufficiently small, or use a different
input function.
if (1 != fscanf(fp, "%2s", type)) {
data/gri-2.12.27/src/read.cc:1987:8: [1] (buffer) getc:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
c = getc(fp);
data/gri-2.12.27/src/read.cc:1990:24: [1] (buffer) getc:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
while ('\n' != (c = getc(fp))) {
data/gri-2.12.27/src/read.cc:2305:13: [1] (buffer) fgetc:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
while (fgetc(imfile) != '\n')
data/gri-2.12.27/src/read.cc:2520:13: [1] (buffer) fgetc:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
while (fgetc(_dataFILE.back().get_fp()) != '\n');
data/gri-2.12.27/src/read.cc:2564:13: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
int len = strlen(_word[1 + start]) - 1;// NB: skipping first char
data/gri-2.12.27/src/read.cc:2660:4: [1] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant character.
strcpy(_grTempString, "");
data/gri-2.12.27/src/read.cc:2733:13: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if (0 < strlen(inLine.getValue())) {
data/gri-2.12.27/src/read.cc:2744:32: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
char *copy = new char [1 + strlen(inLine.getValue())];
data/gri-2.12.27/src/read.cc:2747:14: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if (copy[strlen(copy) - 1] == '\n')
data/gri-2.12.27/src/read.cc:2748:11: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
copy[strlen(copy) - 1] = '\0';
data/gri-2.12.27/src/read.cc:2769:7: [1] (buffer) getc:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
c = getc(_dataFILE.back().get_fp());
data/gri-2.12.27/src/read.cc:2807:14: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
int len = strlen(s);
data/gri-2.12.27/src/read.cc:2813:13: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
int len = strlen(s);
data/gri-2.12.27/src/read.cc:2884:32: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
bsStack.back().move_offset(strlen(_cmdLine) + 1);
data/gri-2.12.27/src/read.cc:2887:19: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
chars_read += strlen(_cmdLine) + 1;
data/gri-2.12.27/src/rpn.cc:75:34: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
unsigned int space_needed = 1 + strlen(s);
data/gri-2.12.27/src/rpn.cc:108:2: [1] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant character.
strcpy(sout, ""); // initialize
data/gri-2.12.27/src/rpn.cc:136:23: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if (*(p1 + (len = strlen(p1)) - 1) == '"')
data/gri-2.12.27/src/rpn.cc:140:23: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if (*(p2 + (len = strlen(p2)) - 1) == '"')
data/gri-2.12.27/src/rpn.cc:143:6: [1] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant character.
strcat(sout, "1");
data/gri-2.12.27/src/rpn.cc:145:6: [1] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant character.
strcat(sout, "0");
data/gri-2.12.27/src/rpn.cc:149:6: [1] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant character.
strcat(sout, " ");
data/gri-2.12.27/src/rpn.cc:232:4: [1] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant character.
strcat(sout, " ");
data/gri-2.12.27/src/rpn.cc:237:4: [1] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant character.
strcat(sout, " ");
data/gri-2.12.27/src/rpncalc.cc:22:30: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
#define STRING_END(S) ((S) + strlen((S)) - 1)
data/gri-2.12.27/src/rpncalc.cc:296:2: [1] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant character.
strcpy(*result, "");
data/gri-2.12.27/src/rpncalc.cc:393:26: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
*result = new char[1 + strlen(NAME(1))];
data/gri-2.12.27/src/rpncalc.cc:417:7: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if (strlen(rpn_dict[i].op_name) != rpn_dict[i].chars) {
data/gri-2.12.27/src/rpncalc.cc:418:75: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
printf("ERROR in rpn_dict on '%s' ... %d vs %d\n",rpn_dict[i].op_name, strlen(rpn_dict[i].op_name), rpn_dict[i].chars);
data/gri-2.12.27/src/rpncalc.cc:424:28: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
unsigned int chars_in_w = strlen(w); // checking first speeds a bit
data/gri-2.12.27/src/rpncalc.cc:437:23: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if (w[0] == '"' && w[strlen(w) - 1] == '"') {
data/gri-2.12.27/src/rpncalc.cc:469:46: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
rpn_fcn[rpn_fcn_filled].name = new char[1 + strlen(name)];
data/gri-2.12.27/src/rpncalc.cc:477:48: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
rpn_fcn[rpn_fcn_filled].w[i] = new char[1 + strlen(w[i])];
data/gri-2.12.27/src/rpncalc.cc:1273:21: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
SET(1, "", double(strlen(NAME(1))), NUMBER, true);
data/gri-2.12.27/src/rpncalc.cc:1342:4: [1] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant character.
strcpy(output_lines, "");
data/gri-2.12.27/src/rpncalc.cc:1417:28: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
char *s = new char[1 + strlen(NAME(2))];
data/gri-2.12.27/src/rpncalc.cc:1420:11: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if (s[strlen(s) - 1] == '"')
data/gri-2.12.27/src/rpncalc.cc:1421:8: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
s[strlen(s) - 1] = '\0';
data/gri-2.12.27/src/rpncalc.cc:1542:12: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if (0 == strlen(res.getValue())) {
data/gri-2.12.27/src/rpncalc.cc:2141:6: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if (strlen(msg) > 0)
data/gri-2.12.27/src/set.cc:1256:14: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
int len = strlen(_word[3]);
data/gri-2.12.27/src/set.cc:3035:14: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
int len = strlen(_word[3]);
data/gri-2.12.27/src/set.cc:3581:14: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
int len = strlen(_word[3]);
data/gri-2.12.27/src/set.cc:3720:55: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if (!strncmp(_word[0], "\\.word", 6) && *(_word[0] + strlen(_word[0]) - 1) == '.') {
data/gri-2.12.27/src/set.cc:3858:11: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
int i = strlen(_Words2[max - 1]);
data/gri-2.12.27/src/set.cc:3904:11: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
int i = strlen(s) - 2;
data/gri-2.12.27/src/set.cc:3949:23: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
unsigned int l = strlen(_cmdLine);
data/gri-2.12.27/src/set.cc:3975:33: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
bsStack.back().move_offset(strlen(_cmdLine) + 1);
data/gri-2.12.27/src/set.cc:3976:20: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
chars_read += strlen(_cmdLine) + 1;
data/gri-2.12.27/src/show.cc:75:14: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
int len = strlen(_word[i]);
data/gri-2.12.27/src/show.cc:79:5: [1] (buffer) strncpy:
Easily used incorrectly; doesn't always \0-terminate or check for invalid
pointers [MS-banned] (CWE-120).
strncpy(s, 1 + _word[i], len - 2);
data/gri-2.12.27/src/show.cc:680:18: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
for (i = 0; i < strlen(now); i++) {
data/gri-2.12.27/src/show.cc:696:13: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
file_time[strlen(file_time) - 1 ] = '\0';
data/gri-2.12.27/src/show.cc:848:55: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
result_code = fseek(_dataFILE.back().get_fp(), long(-strlen(_errorMsg)), 1);
data/gri-2.12.27/src/source.cc:73:4: [1] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant character.
strcat(_cmdLine, "\n");
data/gri-2.12.27/src/startup.cc:146:24: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
int len = strlen(s);
data/gri-2.12.27/src/startup.cc:331:22: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
_grTempString[-1 + strlen(_grTempString)] = '\0'; // trim newline
data/gri-2.12.27/src/startup.cc:352:27: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if (griinputs != NULL && strlen(griinputs) > 0) {
data/gri-2.12.27/src/startup.cc:438:29: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
return_name = new char[1 + strlen(name)];
data/gri-2.12.27/src/startup.cc:445:30: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
return_name = new char[1 + strlen(name)];
data/gri-2.12.27/src/startup.cc:452:16: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if (!tmp || !strlen(tmp))
data/gri-2.12.27/src/startup.cc:454:34: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
char* griinputs = new char[1 + strlen(tmp)];
data/gri-2.12.27/src/startup.cc:458:30: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
return_name = new char[2 + strlen(griinputs) + strlen(name)];
data/gri-2.12.27/src/startup.cc:458:50: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
return_name = new char[2 + strlen(griinputs) + strlen(name)];
data/gri-2.12.27/src/startup.cc:628:21: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
_grTempString[-1 + strlen(_grTempString)] = '\0'; // trim newline
data/gri-2.12.27/src/synonyms.cc:250:9: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if (strlen(name) > 0 && *(name + 1) != '.') {
data/gri-2.12.27/src/synonyms.cc:326:33: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
unsigned int name_len = strlen(name);
data/gri-2.12.27/src/synonyms.cc:508:6: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if (strlen(s) < 1) {
data/gri-2.12.27/src/synonyms.cc:514:34: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
unsigned int space_needed = 1 + strlen(s);
data/gri-2.12.27/src/synonyms.cc:612:17: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
offset = 1 + strlen(_Words2[0]);
data/gri-2.12.27/src/synonyms.cc:616:17: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
offset = 1 + strlen(_Words2[0]);
data/gri-2.12.27/src/synonyms.cc:622:17: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
offset = 1 + strlen(_Words2[0]);
data/gri-2.12.27/src/synonyms.cc:630:17: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
offset = 1 + strlen(_Words2[0]);
data/gri-2.12.27/src/synonyms.cc:652:17: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
offset = 1 + strlen(_Words2[0]);
data/gri-2.12.27/src/synonyms.cc:667:25: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
int slen = strlen(s);
data/gri-2.12.27/src/utility.cc:89:22: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
unsigned int slen = strlen(s);
data/gri-2.12.27/src/utility.cc:117:22: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
unsigned int slen = strlen(s);
data/gri-2.12.27/src/utility.cc:354:12: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
int len = strlen(s);
data/gri-2.12.27/src/utility.cc:388:12: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
int len = strlen(s);
data/gri-2.12.27/src/utility.cc:410:27: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
int i, max = strlen(w);
data/gri-2.12.27/src/utility.cc:549:25: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
int slen = strlen(s);
data/gri-2.12.27/src/utility.cc:751:26: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
result = new char[1 + strlen(msg)];
data/gri-2.12.27/src/utility.cc:760:4: [1] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant character.
strcpy(result, ".");
data/gri-2.12.27/src/utility.cc:860:15: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
*(_word[2] + strlen(_word[2]) - 1) = '\0';
data/gri-2.12.27/src/utility.cc:1028:11: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
return s[strlen(s) - 1];
data/gri-2.12.27/src/utility.cc:1222:9: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
len = strlen(msg);
data/gri-2.12.27/src/utility.cc:1323:9: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
len = strlen(msg);
data/gri-2.12.27/src/utility.cc:1372:9: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
len = strlen(s);
data/gri-2.12.27/src/utility.cc:1476:22: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
int i = strlen(s);
data/gri-2.12.27/src/utility.cc:1734:25: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
int slen = strlen(s);
data/gri-2.12.27/src/utility.cc:1735:25: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
int plen = strlen(pattern);
data/gri-2.12.27/src/utility.cc:1942:15: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
int i, len = strlen(fullfilename);
data/gri-2.12.27/src/utility.cc:2513:21: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
unsigned int len = strlen(line);
data/gri-2.12.27/src/variable.cc:129:24: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
int len = strlen(w);
data/gri-2.12.27/src/while.cc:57:36: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
char *copy = (char*)malloc((1 + strlen(_cmdLine)) * sizeof(char));
data/gri-2.12.27/src/while.cc:60:14: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
int len = strlen(copy);
ANALYSIS SUMMARY:
Hits = 940
Lines analyzed = 41383 in approximately 1.22 seconds (33915 lines/second)
Physical Source Lines of Code (SLOC) = 34880
Hits@level = [0] 734 [1] 258 [2] 399 [3] 20 [4] 263 [5] 0
Hits@level+ = [0+] 1674 [1+] 940 [2+] 682 [3+] 283 [4+] 263 [5+] 0
Hits/KSLOC@level+ = [0+] 47.9931 [1+] 26.9495 [2+] 19.5528 [3+] 8.11353 [4+] 7.54014 [5+] 0
Dot directories skipped = 1 (--followdotdir overrides)
Minimum risk level = 1
Not every hit is necessarily a security vulnerability.
There may be other security vulnerabilities; review your code!
See 'Secure Programming HOWTO'
(https://dwheeler.com/secure-programs) for more information.