Flawfinder version 2.0.10, (C) 2001-2019 David A. Wheeler.
Number of rules (primarily dangerous function names) in C/C++ ruleset: 223
Examining data/libglib-object-introspection-perl-0.049/gperl-i11n-union.c
Examining data/libglib-object-introspection-perl-0.049/gperl-i11n-marshal-callback.c
Examining data/libglib-object-introspection-perl-0.049/gperl-i11n-marshal-array.c
Examining data/libglib-object-introspection-perl-0.049/gperl-i11n-marshal-raw.c
Examining data/libglib-object-introspection-perl-0.049/gperl-i11n-gvalue.c
Examining data/libglib-object-introspection-perl-0.049/gperl-i11n-marshal-struct.c
Examining data/libglib-object-introspection-perl-0.049/gperl-i11n-marshal-hash.c
Examining data/libglib-object-introspection-perl-0.049/gperl-i11n-size.c
Examining data/libglib-object-introspection-perl-0.049/gperl-i11n-invoke.c
Examining data/libglib-object-introspection-perl-0.049/gperl-i11n-marshal-list.c
Examining data/libglib-object-introspection-perl-0.049/gperl-i11n-callback.c
Examining data/libglib-object-introspection-perl-0.049/gperl-i11n-vfunc-interface.c
Examining data/libglib-object-introspection-perl-0.049/gperl-i11n-enums.c
Examining data/libglib-object-introspection-perl-0.049/gperl-i11n-marshal-interface.c
Examining data/libglib-object-introspection-perl-0.049/gperl-i11n-method.c
Examining data/libglib-object-introspection-perl-0.049/gperl-i11n-info.c
Examining data/libglib-object-introspection-perl-0.049/gperl-i11n-field.c
Examining data/libglib-object-introspection-perl-0.049/gperl-i11n-croak.c
Examining data/libglib-object-introspection-perl-0.049/gperl-i11n-invoke-c.c
Examining data/libglib-object-introspection-perl-0.049/gperl-i11n-invoke-perl.c
Examining data/libglib-object-introspection-perl-0.049/gperl-i11n-marshal-arg.c
Examining data/libglib-object-introspection-perl-0.049/gperl-i11n-vfunc-object.c

FINAL RESULTS:

data/libglib-object-introspection-perl-0.049/gperl-i11n-field.c:48:39:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	gperl_hv_take_sv (fields, namespace, strlen (namespace),
data/libglib-object-introspection-perl-0.049/gperl-i11n-info.c:247:49:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	svp = hv_fetch (basename_to_package, basename, strlen (basename), 0);
data/libglib-object-introspection-perl-0.049/gperl-i11n-info.c:259:47:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	return hv_exists (forbidden_sub_names, name, strlen (name));
data/libglib-object-introspection-perl-0.049/gperl-i11n-marshal-struct.c:75:33:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
				gperl_hv_take_sv (hv, name, strlen (name), sv);
data/libglib-object-introspection-perl-0.049/gperl-i11n-marshal-struct.c:179:36:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
			svp = hv_fetch (hv, field_name, strlen (field_name), 0);
data/libglib-object-introspection-perl-0.049/gperl-i11n-method.c:62:53:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	gperl_hv_take_sv (namespaced_functions, namespace, strlen (namespace),
data/libglib-object-introspection-perl-0.049/gperl-i11n-union.c:16:47:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	reblesser_p = hv_fetch (reblessers, package, strlen (package), 0);

ANALYSIS SUMMARY:

Hits = 7
Lines analyzed = 4443 in approximately 0.24 seconds (18308 lines/second)
Physical Source Lines of Code (SLOC) = 3478
Hits@level = [0]   0 [1]   7 [2]   0 [3]   0 [4]   0 [5]   0
Hits@level+ = [0+]   7 [1+]   7 [2+]   0 [3+]   0 [4+]   0 [5+]   0
Hits/KSLOC@level+ = [0+] 2.01265 [1+] 2.01265 [2+]   0 [3+]   0 [4+]   0 [5+]   0
Dot directories skipped = 1 (--followdotdir overrides)
Minimum risk level = 1
Not every hit is necessarily a security vulnerability.
There may be other security vulnerabilities; review your code!
See 'Secure Programming HOWTO'
(https://dwheeler.com/secure-programs) for more information.