Flawfinder version 2.0.10, (C) 2001-2019 David A. Wheeler. Number of rules (primarily dangerous function names) in C/C++ ruleset: 223 Examining data/libhttp-parser-xs-perl-0.17/picohttpparser/bench.c Examining data/libhttp-parser-xs-perl-0.17/picohttpparser/picohttpparser.c Examining data/libhttp-parser-xs-perl-0.17/picohttpparser/picohttpparser.h Examining data/libhttp-parser-xs-perl-0.17/picohttpparser/test.c Examining data/libhttp-parser-xs-perl-0.17/ppport.h FINAL RESULTS: data/libhttp-parser-xs-perl-0.17/picohttpparser/test.c:341:3: [4] (buffer) strcpy: Does not check for buffer overflows when copying to destination [MS-banned] (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy easily misused). strcpy(buf + bytes_ready, encoded + bytes_to_consume - 1); data/libhttp-parser-xs-perl-0.17/ppport.h:6695:14: [4] (format) vsnprintf: If format strings can be influenced by an attacker, they can be exploited, and note that sprintf variations do not always \0-terminate (CWE-134). Use a constant for the format specification. retval = vsnprintf(buffer, len, format, ap); data/libhttp-parser-xs-perl-0.17/ppport.h:6697:14: [4] (format) vsprintf: Potential format string problem (CWE-134). Make format string constant. retval = vsprintf(buffer, format, ap); data/libhttp-parser-xs-perl-0.17/ppport.h:6726:5: [4] (format) vsprintf: Potential format string problem (CWE-134). Make format string constant. vsprintf(buffer, pat, args); data/libhttp-parser-xs-perl-0.17/ppport.h:3667:42: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. # define CopyD(s,d,n,t) memcpy((char*)(d),(char*)(s), (n) * sizeof(t)) data/libhttp-parser-xs-perl-0.17/ppport.h:6550:24: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. && (xdigit = strchr((char *) PL_hexdigit, s[1]))) data/libhttp-parser-xs-perl-0.17/ppport.h:6772:9: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(dst + used, src, copy); data/libhttp-parser-xs-perl-0.17/ppport.h:6801:9: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(dst, src, copy); data/libhttp-parser-xs-perl-0.17/ppport.h:6893:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char octbuf[32] = "%123456789ABCDF"; data/libhttp-parser-xs-perl-0.17/ppport.h:6963:6: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char tmp[2]; data/libhttp-parser-xs-perl-0.17/picohttpparser/test.c:36:10: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). return strlen(t) == l && memcmp(s, t, l) == 0; data/libhttp-parser-xs-perl-0.17/picohttpparser/test.c:56:23: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). == (exp == 0 ? strlen(s) : exp)); \ data/libhttp-parser-xs-perl-0.17/picohttpparser/test.c:126:37: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). PARSE("GET /hoge HTTP/1.0\r\n\r", strlen("GET /hoge HTTP/1.0\r\n\r") - 1, data/libhttp-parser-xs-perl-0.17/picohttpparser/test.c:128:39: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). PARSE("GET /hoge HTTP/1.0\r\n\r\n", strlen("GET /hoge HTTP/1.0\r\n\r\n") - 1, data/libhttp-parser-xs-perl-0.17/picohttpparser/test.c:165:30: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). ok(phr_parse_response(s, strlen(s), &minor_version, &status, \ data/libhttp-parser-xs-perl-0.17/picohttpparser/test.c:168:23: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). == (exp == 0 ? strlen(s) : exp)); \ data/libhttp-parser-xs-perl-0.17/picohttpparser/test.c:237:34: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). PARSE("HTTP/1.0 200 OK\r\n\r", strlen("GET /hoge HTTP/1.0\r\n\r") - 1, data/libhttp-parser-xs-perl-0.17/picohttpparser/test.c:239:36: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). PARSE("HTTP/1.0 200 OK\r\n\r\n", strlen("HTTP/1.0 200 OK\r\n\r\n") - 1, data/libhttp-parser-xs-perl-0.17/picohttpparser/test.c:260:29: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). ok(phr_parse_headers(s, strlen(s), headers, &num_headers, \ data/libhttp-parser-xs-perl-0.17/picohttpparser/test.c:262:23: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). == (exp == 0 ? strlen(s) : exp)); \ data/libhttp-parser-xs-perl-0.17/picohttpparser/test.c:300:11: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). bufsz = strlen(buf); data/libhttp-parser-xs-perl-0.17/picohttpparser/test.c:305:15: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). ok(bufsz == strlen(decoded)); data/libhttp-parser-xs-perl-0.17/picohttpparser/test.c:309:44: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). ok(bufis(buf + bufsz, ret, encoded + strlen(encoded) - ret)); data/libhttp-parser-xs-perl-0.17/picohttpparser/test.c:322:22: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). char *buf = malloc(strlen(encoded) + 1); data/libhttp-parser-xs-perl-0.17/picohttpparser/test.c:323:29: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). size_t bytes_to_consume = strlen(encoded) - (expected >= 0 ? expected : 0), data/libhttp-parser-xs-perl-0.17/picohttpparser/test.c:342:11: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). bufsz = strlen(buf + bytes_ready); data/libhttp-parser-xs-perl-0.17/picohttpparser/test.c:346:21: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). ok(bytes_ready == strlen(decoded)); data/libhttp-parser-xs-perl-0.17/picohttpparser/test.c:366:11: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). bufsz = strlen(buf); data/libhttp-parser-xs-perl-0.17/ppport.h:5160:24: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). sv_vsetpvfn(sv, pat, strlen(pat), args, Null(SV**), 0, Null(bool*)); data/libhttp-parser-xs-perl-0.17/ppport.h:5168:59: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). # define sv_vcatpvf(sv, pat, args) sv_vcatpvfn(sv, pat, strlen(pat), args, Null(SV**), 0, Null(bool*)) data/libhttp-parser-xs-perl-0.17/ppport.h:5172:59: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). # define sv_vsetpvf(sv, pat, args) sv_vsetpvfn(sv, pat, strlen(pat), args, Null(SV**), 0, Null(bool*)) data/libhttp-parser-xs-perl-0.17/ppport.h:5192:24: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). sv_vcatpvfn(sv, pat, strlen(pat), &args, Null(SV**), 0, Null(bool*)); data/libhttp-parser-xs-perl-0.17/ppport.h:5220:24: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). sv_vcatpvfn(sv, pat, strlen(pat), &args, Null(SV**), 0, Null(bool*)); data/libhttp-parser-xs-perl-0.17/ppport.h:5241:27: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). sv_vcatpvfn(sv, pat, strlen(pat), args, Null(SV**), 0, Null(bool*)); \ data/libhttp-parser-xs-perl-0.17/ppport.h:5263:24: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). sv_vsetpvfn(sv, pat, strlen(pat), &args, Null(SV**), 0, Null(bool*)); data/libhttp-parser-xs-perl-0.17/ppport.h:5291:24: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). sv_vsetpvfn(sv, pat, strlen(pat), &args, Null(SV**), 0, Null(bool*)); data/libhttp-parser-xs-perl-0.17/ppport.h:5312:27: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). sv_vsetpvfn(sv, pat, strlen(pat), args, Null(SV**), 0, Null(bool*)); \ data/libhttp-parser-xs-perl-0.17/ppport.h:5360:65: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). # define HvNAMELEN_get(hv) (HvNAME_get(hv) ? (I32)strlen(HvNAME_get(hv)) : 0) data/libhttp-parser-xs-perl-0.17/ppport.h:6144:22: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). STRLEN len = strlen(radix); data/libhttp-parser-xs-perl-0.17/ppport.h:6728:12: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). return strlen(buffer); data/libhttp-parser-xs-perl-0.17/ppport.h:6768:12: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). used = strlen(dst); data/libhttp-parser-xs-perl-0.17/ppport.h:6769:14: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). length = strlen(src); data/libhttp-parser-xs-perl-0.17/ppport.h:6798:14: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). length = strlen(src); ANALYSIS SUMMARY: Hits = 43 Lines analyzed = 8257 in approximately 0.22 seconds (37747 lines/second) Physical Source Lines of Code (SLOC) = 4024 Hits@level = [0] 0 [1] 33 [2] 6 [3] 0 [4] 4 [5] 0 Hits@level+ = [0+] 43 [1+] 43 [2+] 10 [3+] 4 [4+] 4 [5+] 0 Hits/KSLOC@level+ = [0+] 10.6859 [1+] 10.6859 [2+] 2.48509 [3+] 0.994036 [4+] 0.994036 [5+] 0 Dot directories skipped = 1 (--followdotdir overrides) Minimum risk level = 1 Not every hit is necessarily a security vulnerability. There may be other security vulnerabilities; review your code! See 'Secure Programming HOWTO' (https://dwheeler.com/secure-programs) for more information.