Flawfinder version 2.0.10, (C) 2001-2019 David A. Wheeler.
Number of rules (primarily dangerous function names) in C/C++ ruleset: 223
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/wsastrerror.c
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/txw.c
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/signal.c
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/pgmMIB.c
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/atomic_unittest.c
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/source.c
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/error_unittest.c
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/include/pgm/snmp.h
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/include/pgm/backtrace.h
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/include/pgm/if.h
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/include/pgm/list.h
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/include/pgm/packet.h
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/include/pgm/untypes.h
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/include/pgm/engine.h
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/include/pgm/winint.h
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/include/pgm/atomic.h
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/include/pgm/zinttypes.h
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/include/pgm/mem.h
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/include/pgm/messages.h
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/include/pgm/time.h
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/include/pgm/retypes.h
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/include/pgm/wininttypes.h
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/include/pgm/log.h
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/include/pgm/gsi.h
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/include/pgm/types.h
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/include/pgm/version.h
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/include/pgm/skbuff.h
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/include/pgm/in.h
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/include/pgm/pgm.h
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/include/pgm/signal.h
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/include/pgm/http.h
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/include/pgm/msgv.h
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/include/pgm/error.h
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/include/pgm/macros.h
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/include/pgm/tsi.h
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/include/pgm/socket.h
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/include/impl/list.h
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/include/impl/md5.h
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/include/impl/inet_lnaof.h
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/include/impl/byteorder.h
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/include/impl/packet_test.h
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/include/impl/getprotobyname.h
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/include/impl/hashtable.h
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/include/impl/queue.h
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/include/impl/ip.h
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/include/impl/txw.h
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/include/impl/getifaddrs.h
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/include/impl/i18n.h
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/include/impl/rwspinlock.h
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/include/impl/engine.h
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/include/impl/socket.h
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/include/impl/framework.h
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/include/impl/errno.h
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/include/impl/mem.h
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/include/impl/messages.h
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/include/impl/time.h
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/include/impl/timer.h
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/include/impl/ticket.h
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/include/impl/pgmMIB.h
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/include/impl/receiver.h
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/include/impl/reed_solomon.h
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/include/impl/sockaddr.h
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/include/impl/sn.h
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/include/impl/checksum.h
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/include/impl/cpu.h
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/include/impl/wsastrerror.h
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/include/impl/pgmMIB_columns.h
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/include/impl/notify.h
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/include/impl/string.h
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/include/impl/thread.h
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/include/impl/math.h
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/include/impl/inet_network.h
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/include/impl/indextoname.h
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/include/impl/security.h
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/include/impl/get_nprocs.h
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/include/impl/getnetbyname.h
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/include/impl/endian.h
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/include/impl/pgmMIB_enums.h
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/include/impl/source.h
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/include/impl/slist.h
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/include/impl/sqn_list.h
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/include/impl/galois.h
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/include/impl/indextoaddr.h
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/include/impl/rate_control.h
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/include/impl/rand.h
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/include/impl/packet_parse.h
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/include/impl/rxw.h
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/include/impl/nametoindex.h
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/include/impl/processor.h
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/include/impl/net.h
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/include/impl/getnodeaddr.h
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/include/impl/histogram.h
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/include/impl/fixed.h
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/include/impl/tsi.h
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/inet_network_unittest.c
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/snmp.c
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/if.c
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/getnodeaddr.c
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/receiver.c
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/log.c
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/socket.c
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/receiver_unittest.c
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/indextoname.c
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/pgmping.cc
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/async.c
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/enonblocksyncrecvmsg.c
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/snonblocksyncrecv.c
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/enonblocksyncrecv.c
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/purinsendcc.cc
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/heatmap.c
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/purinrecvcc.cc
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/enonblocksyncrecvmsgv.c
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/purinrecv.c
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/getopt_long.c
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/daytime.c
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/shortcakerecv.c
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/getopt.h
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/pgmdump.c
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/purinsend.c
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/pgmsend.c
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/blocksyncrecv.c
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/async.h
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/getopt.c
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/pnonblocksyncrecv.c
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/pgmrecv.c
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/pgmtop.c
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/getprotobyname.c
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/gsi_unittest.c
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/getnetbyname_unittest.c
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/http_unittest.c
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/gsi.c
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/mem.c
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/sockaddr.c
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/tsi.c
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/time_unittest.c
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/indextoaddr_unittest.c
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/get_nprocs.c
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/engine_unittest.c
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/rxw.c
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/packet_test.c
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/md5.c
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/histogram.c
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/reed_solomon.c
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/checksum_unittest.c
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/txw_unittest.c
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/math.c
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/timer.c
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/socket_unittest.c
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/time.c
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/error.c
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/ip_unittest.c
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/checksum_perftest.c
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/recv_unittest.c
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/thread.c
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/inet_lnaof.c
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/galois_tables.c
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/thread_unittest.c
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/snmp_unittest.c
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/net_unittest.c
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/reed_solomon_unittest.c
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/tsi_unittest.c
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/queue.c
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/test/async.c
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/test/app.c
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/test/dump-json.h
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/test/monitor.c
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/test/async.h
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/test/dump-json.c
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/test/sim.c
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/http.c
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/checksum.c
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/list.c
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/md5_unittest.c
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/backtrace.c
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/getifaddrs_unittest.c
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/inet_network.c
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/messages.c
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/slist.c
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/packet_test_unittest.c
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/hashtable.c
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/rand.c
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/gsi_unittest.cc
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/recv.c
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/engine.c
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/rate_control_unittest.c
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/nametoindex.c
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/if_unittest.c
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/signal_unittest.c
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/getnetbyname.c
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/pgmMIB_unittest.c
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/mkversion.c
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/cpu.c
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/packet_parse_unittest.c
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/timer_unittest.c
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/getnodeaddr_unittest.c
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/skbuff.c
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/source_unittest.c
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/rxw_unittest.c
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/indextoaddr.c
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/net.c
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/getifaddrs.c
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/rate_control.c
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/string.c
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/packet_parse.c
Examining data/libpgm-5.3.128~dfsg/openpgm/pgm/getprotobyname_unittest.c

FINAL RESULTS:

data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/daytime.c:40:10:  [4] (format) snprintf:
  If format strings can be influenced by an attacker, they can be exploited,
  and note that sprintf variations do not always \0-terminate (CWE-134). Use
  a constant for the format specification.
#	define snprintf		_snprintf
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/daytime.c:40:20:  [4] (format) _snprintf:
  If format strings can be influenced by an attacker, they can be exploited,
  and note that sprintf variations do not always \0-terminate (CWE-134). Use
  a constant for the format specification.
#	define snprintf		_snprintf
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/heatmap.c:87:2:  [4] (format) printf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
	printf (header, xrange_max - 1, yrange_max - yrange_ivl);
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/pgmping.cc:600:26:  [4] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused).
	                        strcat (buffer, t);
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/pgmtop.c:550:2:  [4] (format) vsnprintf:
  If format strings can be influenced by an attacker, they can be exploited,
  and note that sprintf variations do not always \0-terminate (CWE-134). Use
  a constant for the format specification.
	vsnprintf (buffer, sizeof(buffer), format, args1);
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/shortcakerecv.c:36:10:  [4] (format) snprintf:
  If format strings can be influenced by an attacker, they can be exploited,
  and note that sprintf variations do not always \0-terminate (CWE-134). Use
  a constant for the format specification.
#	define snprintf		_snprintf
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/shortcakerecv.c:36:20:  [4] (format) _snprintf:
  If format strings can be influenced by an attacker, they can be exploited,
  and note that sprintf variations do not always \0-terminate (CWE-134). Use
  a constant for the format specification.
#	define snprintf		_snprintf
data/libpgm-5.3.128~dfsg/openpgm/pgm/getifaddrs_unittest.c:79:4:  [4] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused).
			strcat (s, s[0] ? ("|" #flag) : (#flag)); \
data/libpgm-5.3.128~dfsg/openpgm/pgm/getnetbyname_unittest.c:129:4:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
			strcpy (buffer, *p++);
data/libpgm-5.3.128~dfsg/openpgm/pgm/getnetbyname_unittest.c:132:5:  [4] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused).
				strcat (buffer, *p++);
data/libpgm-5.3.128~dfsg/openpgm/pgm/getnetbyname_unittest.c:144:5:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
				strcpy (nbuffer, *p++);
data/libpgm-5.3.128~dfsg/openpgm/pgm/getnetbyname_unittest.c:147:6:  [4] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused).
					strcat (nbuffer, *p++);
data/libpgm-5.3.128~dfsg/openpgm/pgm/getnodeaddr.c:136:6:  [4] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused).
					strcat (list, s);
data/libpgm-5.3.128~dfsg/openpgm/pgm/http.c:955:3:  [4] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf.
		sprintf (b, "%s (%s)", ifa->ifa_name, rname);
data/libpgm-5.3.128~dfsg/openpgm/pgm/http.c:1151:2:  [4] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf.
	sprintf (title, "Transport %s.%hu",
data/libpgm-5.3.128~dfsg/openpgm/pgm/http.c:1422:11:  [4] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf.
			return sprintf (sz, "%s (%li second%s ago)",
data/libpgm-5.3.128~dfsg/openpgm/pgm/http.c:1427:11:  [4] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf.
			return sprintf (sz, "%s (%li minute%s ago)",
data/libpgm-5.3.128~dfsg/openpgm/pgm/http.c:1431:10:  [4] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf.
		return sprintf (sz, "%s (%li hour%s ago)",
data/libpgm-5.3.128~dfsg/openpgm/pgm/http.c:1447:11:  [4] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf.
			return sprintf (sz, "%s (%li day%s ago)",
data/libpgm-5.3.128~dfsg/openpgm/pgm/http.c:1450:11:  [4] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf.
			return sprintf (sz, "%s", daymonth);
data/libpgm-5.3.128~dfsg/openpgm/pgm/http.c:1466:2:  [4] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf.
	sprintf (title, "Peer %s.%u",
data/libpgm-5.3.128~dfsg/openpgm/pgm/if.c:189:3:  [4] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused).
		strcat (recv_addrs, pgm_gsr_to_string (&addr->ai_recv_addrs[i], gsr, sizeof (gsr)));
data/libpgm-5.3.128~dfsg/openpgm/pgm/if.c:195:3:  [4] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused).
		strcat (send_addrs, pgm_gsr_to_string (&addr->ai_send_addrs[i], gsr, sizeof (gsr)));
data/libpgm-5.3.128~dfsg/openpgm/pgm/if.c:1688:5:  [4] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused).
				strcat (s, t);
data/libpgm-5.3.128~dfsg/openpgm/pgm/if.c:1713:4:  [4] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused).
			strcat (s, t);
data/libpgm-5.3.128~dfsg/openpgm/pgm/if.c:1764:5:  [4] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused).
				strcat (s, t);
data/libpgm-5.3.128~dfsg/openpgm/pgm/if.c:1831:4:  [4] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused).
			strcat (s, t);
data/libpgm-5.3.128~dfsg/openpgm/pgm/if_unittest.c:420:4:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
			strcpy (ifname, interface_->name);
data/libpgm-5.3.128~dfsg/openpgm/pgm/if_unittest.c:498:4:  [4] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused).
			strcat (host, mock_if_indextoname (scope, buffer));
data/libpgm-5.3.128~dfsg/openpgm/pgm/include/impl/security.h:104:22:  [4] (format) vsnprintf:
  If format strings can be influenced by an attacker, they can be exploited,
  and note that sprintf variations do not always \0-terminate (CWE-134). Use
  a constant for the format specification.
		const int retval = vsnprintf (str, size, format, ap);
data/libpgm-5.3.128~dfsg/openpgm/pgm/include/impl/security.h:109:21:  [4] (format) vsnprintf:
  If format strings can be influenced by an attacker, they can be exploited,
  and note that sprintf variations do not always \0-terminate (CWE-134). Use
  a constant for the format specification.
	const int retval = vsnprintf (str, count + 1, format, ap);
data/libpgm-5.3.128~dfsg/openpgm/pgm/include/impl/security.h:153:11:  [4] (buffer) vsscanf:
  The scanf() family's %s operation, without a limit specification, permits
  buffer overflows (CWE-120, CWE-20). Specify a limit to %s, or use a
  different input function. If the scanf format is influenceable by an
  attacker, it's exploitable.
	retval = vsscanf (buffer, format, ap);
data/libpgm-5.3.128~dfsg/openpgm/pgm/indextoname.c:57:2:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
	strcpy (ifname, (char*)ifRow.wszName);
data/libpgm-5.3.128~dfsg/openpgm/pgm/net_unittest.c:84:4:  [4] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused).
			strcat (s, s[0] ? ("|" #flag) : (#flag)); \
data/libpgm-5.3.128~dfsg/openpgm/pgm/receiver.c:1226:2:  [4] (format) sprintf:
  Potential format string problem (CWE-134). Make format string constant.
	sprintf (list, "%" PRIu32, sqn_list->sqn[0]);
data/libpgm-5.3.128~dfsg/openpgm/pgm/receiver.c:1229:3:  [4] (format) sprintf:
  Potential format string problem (CWE-134). Make format string constant.
		sprintf (sequence, " %" PRIu32, sqn_list->sqn[i]);
data/libpgm-5.3.128~dfsg/openpgm/pgm/receiver.c:1230:3:  [4] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused).
		strcat (list, sequence);
data/libpgm-5.3.128~dfsg/openpgm/pgm/source.c:976:2:  [4] (format) sprintf:
  Potential format string problem (CWE-134). Make format string constant.
	sprintf (list, "%" PRIu32, sqn_list->sqn[0]);
data/libpgm-5.3.128~dfsg/openpgm/pgm/source.c:979:3:  [4] (format) sprintf:
  Potential format string problem (CWE-134). Make format string constant.
		sprintf (sequence, " %" PRIu32, sqn_list->sqn[i]);
data/libpgm-5.3.128~dfsg/openpgm/pgm/source.c:980:3:  [4] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused).
		strcat (list, sequence);
data/libpgm-5.3.128~dfsg/openpgm/pgm/string.c:78:9:  [4] (format) vsnprintf:
  If format strings can be influenced by an attacker, they can be exploited,
  and note that sprintf variations do not always \0-terminate (CWE-134). Use
  a constant for the format specification.
	return vsnprintf (&c, 1, format, args) + 1;
data/libpgm-5.3.128~dfsg/openpgm/pgm/test/app.c:583:4:  [4] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused).
			strcat (buffer, t);
data/libpgm-5.3.128~dfsg/openpgm/pgm/test/dump-json.c:1248:5:  [4] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf.
				sprintf (sqn, "%s%i", (i>0)?", ":"", g_ntohl(opt_nak_list->opt_sqn[i]));
data/libpgm-5.3.128~dfsg/openpgm/pgm/test/dump-json.c:1249:5:  [4] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused).
				strcat (sqns, sqn);
data/libpgm-5.3.128~dfsg/openpgm/pgm/test/sim.c:1011:25:  [4] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused).
                        strcat (buffer, t);
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/blocksyncrecv.c:110:14:  [3] (buffer) getopt_long:
  Some older implementations do not protect against internal buffer overflows
  (CWE-120, CWE-20). Check implementation on installation, or limit the size
  of all string inputs.
	while ((c = getopt_long (argc, argv, "s:n:p:lh", long_options, NULL)) != -1)
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/daytime.c:153:14:  [3] (buffer) getopt_long:
  Some older implementations do not protect against internal buffer overflows
  (CWE-120, CWE-20). Check implementation on installation, or limit the size
  of all string inputs.
	while ((c = getopt_long (argc, argv, "s:n:p:r:cf:N:K:P:lih", long_options, NULL)) != -1)
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/enonblocksyncrecv.c:115:14:  [3] (buffer) getopt_long:
  Some older implementations do not protect against internal buffer overflows
  (CWE-120, CWE-20). Check implementation on installation, or limit the size
  of all string inputs.
	while ((c = getopt_long (argc, argv, "s:n:p:lh", long_options, NULL)) != -1)
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/enonblocksyncrecvmsg.c:115:14:  [3] (buffer) getopt_long:
  Some older implementations do not protect against internal buffer overflows
  (CWE-120, CWE-20). Check implementation on installation, or limit the size
  of all string inputs.
	while ((c = getopt_long (argc, argv, "s:n:p:lh", long_options, NULL)) != -1)
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/enonblocksyncrecvmsgv.c:117:14:  [3] (buffer) getopt_long:
  Some older implementations do not protect against internal buffer overflows
  (CWE-120, CWE-20). Check implementation on installation, or limit the size
  of all string inputs.
	while ((c = getopt_long (argc, argv, "s:n:p:lh", long_options, NULL)) != -1)
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/getopt.c:49:14:  [3] (buffer) getopt:
  Some older implementations do not protect against internal buffer overflows
  (CWE-120, CWE-20). Check implementation on installation, or limit the size
  of all string inputs.
__weak_alias(getopt,_getopt);
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/getopt.c:87:1:  [3] (buffer) getopt:
  Some older implementations do not protect against internal buffer overflows
  (CWE-120, CWE-20). Check implementation on installation, or limit the size
  of all string inputs.
getopt(nargc, nargv, ostr)
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/getopt.h:26:5:  [3] (buffer) getopt:
  Some older implementations do not protect against internal buffer overflows
  (CWE-120, CWE-20). Check implementation on installation, or limit the size
  of all string inputs.
int getopt(int, char**, char*);
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/getopt.h:27:5:  [3] (buffer) getopt_long:
  Some older implementations do not protect against internal buffer overflows
  (CWE-120, CWE-20). Check implementation on installation, or limit the size
  of all string inputs.
int getopt_long(int, char**, char*, struct option*, int*);
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/getopt_long.c:163:1:  [3] (buffer) getopt_long:
  Some older implementations do not protect against internal buffer overflows
  (CWE-120, CWE-20). Check implementation on installation, or limit the size
  of all string inputs.
getopt_long(nargc, nargv, options, long_options, index)
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/pgmping.cc:241:14:  [3] (buffer) getopt:
  Some older implementations do not protect against internal buffer overflows
  (CWE-120, CWE-20). Check implementation on installation, or limit the size
  of all string inputs.
	while ((c = getopt (argc, argv, "s:n:p:m:old:r:O:D:cfeK:N:M:HSh")) != -1)
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/pgmrecv.c:160:14:  [3] (buffer) getopt_long:
  Some older implementations do not protect against internal buffer overflows
  (CWE-120, CWE-20). Check implementation on installation, or limit the size
  of all string inputs.
	while ((c = getopt_long (argc, argv, "a:s:n:p:lih"
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/pgmsend.c:125:14:  [3] (buffer) getopt_long:
  Some older implementations do not protect against internal buffer overflows
  (CWE-120, CWE-20). Check implementation on installation, or limit the size
  of all string inputs.
	while ((c = getopt_long (argc, argv, "s:n:p:r:f:K:N:lih", long_options, NULL)) != -1)
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/pnonblocksyncrecv.c:117:14:  [3] (buffer) getopt_long:
  Some older implementations do not protect against internal buffer overflows
  (CWE-120, CWE-20). Check implementation on installation, or limit the size
  of all string inputs.
	while ((c = getopt_long (argc, argv, "s:n:p:lh", long_options, NULL)) != -1)
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/purinrecv.c:144:14:  [3] (buffer) getopt_long:
  Some older implementations do not protect against internal buffer overflows
  (CWE-120, CWE-20). Check implementation on installation, or limit the size
  of all string inputs.
	while ((c = getopt_long (argc, argv, "s:n:p:cf:K:N:lih", long_options, NULL)) != -1)
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/purinrecvcc.cc:135:14:  [3] (buffer) getopt_long:
  Some older implementations do not protect against internal buffer overflows
  (CWE-120, CWE-20). Check implementation on installation, or limit the size
  of all string inputs.
	while ((c = getopt_long (argc, argv, "s:n:p:f:K:N:lih", long_options, NULL)) != -1)
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/purinsend.c:120:14:  [3] (buffer) getopt_long:
  Some older implementations do not protect against internal buffer overflows
  (CWE-120, CWE-20). Check implementation on installation, or limit the size
  of all string inputs.
	while ((c = getopt_long (argc, argv, "s:n:p:r:f:K:N:lih", long_options, NULL)) != -1)
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/purinsendcc.cc:119:14:  [3] (buffer) getopt_long:
  Some older implementations do not protect against internal buffer overflows
  (CWE-120, CWE-20). Check implementation on installation, or limit the size
  of all string inputs.
	while ((c = getopt_long (argc, argv, "s:n:p:r:f:K:N:lih", long_options, NULL)) != -1)
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/shortcakerecv.c:141:14:  [3] (buffer) getopt_long:
  Some older implementations do not protect against internal buffer overflows
  (CWE-120, CWE-20). Check implementation on installation, or limit the size
  of all string inputs.
	while ((c = getopt_long (argc, argv, "s:n:p:f:K:N:lih", long_options, NULL)) != -1)
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/snonblocksyncrecv.c:122:14:  [3] (buffer) getopt_long:
  Some older implementations do not protect against internal buffer overflows
  (CWE-120, CWE-20). Check implementation on installation, or limit the size
  of all string inputs.
	while ((c = getopt_long (argc, argv, "s:n:p:lh", long_options, NULL)) != -1)
data/libpgm-5.3.128~dfsg/openpgm/pgm/include/impl/security.h:207:20:  [3] (buffer) getenv:
  Environment variables are untrustable input if they can be set by an
  attacker. They can have any content and length, and the same variable can
  be set more than once (CWE-807, CWE-20). Check environment variables
  carefully before using them.
	const char *val = getenv (name);
data/libpgm-5.3.128~dfsg/openpgm/pgm/include/impl/thread.h:157:2:  [3] (misc) EnterCriticalSection:
  On some versions of Windows, exceptions can be thrown in low-memory
  situations. Use InitializeCriticalSectionAndSpinCount instead.
	EnterCriticalSection (&mutex->win32_crit);
data/libpgm-5.3.128~dfsg/openpgm/pgm/test/app.c:136:14:  [3] (buffer) getopt:
  Some older implementations do not protect against internal buffer overflows
  (CWE-120, CWE-20). Check implementation on installation, or limit the size
  of all string inputs.
	while ((c = getopt (argc, argv, "s:n:h")) != -1)
data/libpgm-5.3.128~dfsg/openpgm/pgm/test/sim.c:152:14:  [3] (buffer) getopt:
  Some older implementations do not protect against internal buffer overflows
  (CWE-120, CWE-20). Check implementation on installation, or limit the size
  of all string inputs.
	while ((c = getopt (argc, argv, "s:n:h")) != -1)
data/libpgm-5.3.128~dfsg/openpgm/pgm/thread.c:158:2:  [3] (misc) InitializeCriticalSection:
  Exceptions can be thrown in low-memory situations. Use
  InitializeCriticalSectionAndSpinCount instead.
	InitializeCriticalSection (&mutex->win32_crit);
data/libpgm-5.3.128~dfsg/openpgm/pgm/thread.c:243:2:  [3] (misc) InitializeCriticalSection:
  Exceptions can be thrown in low-memory situations. Use
  InitializeCriticalSectionAndSpinCount instead.
	InitializeCriticalSection (&cond->win32_crit);
data/libpgm-5.3.128~dfsg/openpgm/pgm/thread.c:264:2:  [3] (misc) EnterCriticalSection:
  On some versions of Windows, exceptions can be thrown in low-memory
  situations. Use InitializeCriticalSectionAndSpinCount instead.
	EnterCriticalSection (&cond->win32_crit);
data/libpgm-5.3.128~dfsg/openpgm/pgm/thread.c:290:2:  [3] (misc) EnterCriticalSection:
  On some versions of Windows, exceptions can be thrown in low-memory
  situations. Use InitializeCriticalSectionAndSpinCount instead.
	EnterCriticalSection (&cond->win32_crit);
data/libpgm-5.3.128~dfsg/openpgm/pgm/thread.c:337:2:  [3] (misc) EnterCriticalSection:
  On some versions of Windows, exceptions can be thrown in low-memory
  situations. Use InitializeCriticalSectionAndSpinCount instead.
	EnterCriticalSection (&cond->win32_crit);
data/libpgm-5.3.128~dfsg/openpgm/pgm/thread.c:346:2:  [3] (misc) EnterCriticalSection:
  On some versions of Windows, exceptions can be thrown in low-memory
  situations. Use InitializeCriticalSectionAndSpinCount instead.
	EnterCriticalSection (spinlock);
data/libpgm-5.3.128~dfsg/openpgm/pgm/thread.c:351:3:  [3] (misc) EnterCriticalSection:
  On some versions of Windows, exceptions can be thrown in low-memory
  situations. Use InitializeCriticalSectionAndSpinCount instead.
		EnterCriticalSection (&cond->win32_crit);
data/libpgm-5.3.128~dfsg/openpgm/pgm/thread.c:406:2:  [3] (misc) InitializeCriticalSection:
  Exceptions can be thrown in low-memory situations. Use
  InitializeCriticalSectionAndSpinCount instead.
	InitializeCriticalSection (&rwlock->win32_crit);
data/libpgm-5.3.128~dfsg/openpgm/pgm/thread.c:464:2:  [3] (misc) EnterCriticalSection:
  On some versions of Windows, exceptions can be thrown in low-memory
  situations. Use InitializeCriticalSectionAndSpinCount instead.
	EnterCriticalSection (&rwlock->win32_crit);
data/libpgm-5.3.128~dfsg/openpgm/pgm/thread.c:483:2:  [3] (misc) EnterCriticalSection:
  On some versions of Windows, exceptions can be thrown in low-memory
  situations. Use InitializeCriticalSectionAndSpinCount instead.
	EnterCriticalSection (&rwlock->win32_crit);
data/libpgm-5.3.128~dfsg/openpgm/pgm/thread.c:500:2:  [3] (misc) EnterCriticalSection:
  On some versions of Windows, exceptions can be thrown in low-memory
  situations. Use InitializeCriticalSectionAndSpinCount instead.
	EnterCriticalSection (&rwlock->win32_crit);
data/libpgm-5.3.128~dfsg/openpgm/pgm/thread.c:515:2:  [3] (misc) EnterCriticalSection:
  On some versions of Windows, exceptions can be thrown in low-memory
  situations. Use InitializeCriticalSectionAndSpinCount instead.
	EnterCriticalSection (&rwlock->win32_crit);
data/libpgm-5.3.128~dfsg/openpgm/pgm/thread.c:534:2:  [3] (misc) EnterCriticalSection:
  On some versions of Windows, exceptions can be thrown in low-memory
  situations. Use InitializeCriticalSectionAndSpinCount instead.
	EnterCriticalSection (&rwlock->win32_crit);
data/libpgm-5.3.128~dfsg/openpgm/pgm/thread.c:551:2:  [3] (misc) EnterCriticalSection:
  On some versions of Windows, exceptions can be thrown in low-memory
  situations. Use InitializeCriticalSectionAndSpinCount instead.
	EnterCriticalSection (&rwlock->win32_crit);
data/libpgm-5.3.128~dfsg/openpgm/pgm/backtrace.c:41:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char cmd[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/backtrace.c:57:2:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
	sprintf (cmd, "gdb --ex 'attach %ld' --ex 'info threads' --ex 'thread apply all bt' --batch", (long)getpid ());
data/libpgm-5.3.128~dfsg/openpgm/pgm/checksum.c:1472:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy (dstaddr, srcaddr, len);
data/libpgm-5.3.128~dfsg/openpgm/pgm/checksum_perftest.c:167:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy (target, source, perf_testsize);
data/libpgm-5.3.128~dfsg/openpgm/pgm/checksum_perftest.c:258:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy (target, source, perf_testsize);
data/libpgm-5.3.128~dfsg/openpgm/pgm/checksum_perftest.c:348:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy (target, source, perf_testsize);
data/libpgm-5.3.128~dfsg/openpgm/pgm/checksum_perftest.c:438:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy (target, source, perf_testsize);
data/libpgm-5.3.128~dfsg/openpgm/pgm/checksum_perftest.c:529:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy (target, source, perf_testsize);
data/libpgm-5.3.128~dfsg/openpgm/pgm/checksum_perftest.c:621:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy (target, source, perf_testsize);
data/libpgm-5.3.128~dfsg/openpgm/pgm/checksum_perftest.c:713:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy (target, source, perf_testsize);
data/libpgm-5.3.128~dfsg/openpgm/pgm/checksum_perftest.c:805:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy (target, source, perf_testsize);
data/libpgm-5.3.128~dfsg/openpgm/pgm/checksum_perftest.c:867:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy (target, source, perf_testsize);
data/libpgm-5.3.128~dfsg/openpgm/pgm/checksum_perftest.c:929:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy (target, source, perf_testsize);
data/libpgm-5.3.128~dfsg/openpgm/pgm/checksum_unittest.c:194:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char dest[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/engine.c:196:25:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
		const int loss_rate = atoi (env);
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/async.c:51:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char			data[1];
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/async.c:53:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char			data[0];
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/async.c:170:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char buffer[4096];
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/async.c:250:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy (&event->addr, from, fromlen);
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/async.c:251:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy (&event->data, data, len);
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/async.c:436:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy (from, &event->addr, *fromlen);
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/async.c:438:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy (buf, event->data, event_len);
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/blocksyncrecv.c:114:22:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
		case 's':	g_port = atoi (optarg); break;
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/blocksyncrecv.c:115:32:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
		case 'p':	g_udp_encap_port = atoi (optarg); break;
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/blocksyncrecv.c:141:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char buffer[4096];
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/blocksyncrecv.c:281:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy (&if_req.ir_address, &res->ai_send_addrs[0].gsr_addr, sizeof(struct sockaddr_storage));
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/blocksyncrecv.c:343:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char buf[1024], tsi[PGM_TSISTRLEN];
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/daytime.c:157:20:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
		case 's':	port = atoi (optarg); break;
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/daytime.c:158:30:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
		case 'p':	udp_encap_port = atoi (optarg); break;
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/daytime.c:159:23:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
		case 'r':	max_rte = atoi (optarg); break;
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/daytime.c:178:20:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
		case 'N':	rs_n = atoi (optarg); break;
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/daytime.c:179:20:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
		case 'K':	rs_k = atoi (optarg); break;
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/daytime.c:180:33:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
		case 'P':	proactive_packets = atoi (optarg); break;
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/daytime.c:227:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char s[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/daytime.c:231:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char s[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/daytime.c:233:3:  [2] (buffer) wchar_t:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		wchar_t ws[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/daytime.c:234:18:  [2] (buffer) MultiByteToWideChar:
  Requires maximum length in CHARACTERS, not bytes (CWE-120).
		size_t wslen = MultiByteToWideChar (CP_ACP, 0, s, slen, ws, 1024);
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/daytime.c:235:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char us[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/daytime.c:323:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char s[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/daytime.c:402:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy (&if_req.ir_address, &res->ai_send_addrs[0].gsr_addr, sizeof(struct sockaddr_storage));
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/daytime.c:513:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char buf[4064];
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/enonblocksyncrecv.c:119:22:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
		case 's':	g_port = atoi (optarg); break;
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/enonblocksyncrecv.c:120:32:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
		case 'p':	g_udp_encap_port = atoi (optarg); break;
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/enonblocksyncrecv.c:162:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char buffer[4096];
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/enonblocksyncrecv.c:312:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy (&if_req.ir_address, &res->ai_send_addrs[0].gsr_addr, sizeof(struct sockaddr_storage));
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/enonblocksyncrecv.c:374:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char buf[1024], tsi[PGM_TSISTRLEN];
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/enonblocksyncrecvmsg.c:119:22:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
		case 's':	g_port = atoi (optarg); break;
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/enonblocksyncrecvmsg.c:120:32:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
		case 'p':	g_udp_encap_port = atoi (optarg); break;
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/enonblocksyncrecvmsg.c:307:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy (&if_req.ir_address, &res->ai_send_addrs[0].gsr_addr, sizeof(struct sockaddr_storage));
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/enonblocksyncrecvmsg.c:367:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char tsi[PGM_TSISTRLEN];
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/enonblocksyncrecvmsg.c:376:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char buf[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/enonblocksyncrecvmsgv.c:121:22:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
		case 's':	g_port = atoi (optarg); break;
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/enonblocksyncrecvmsgv.c:122:32:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
		case 'p':	g_udp_encap_port = atoi (optarg); break;
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/enonblocksyncrecvmsgv.c:314:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy (&if_req.ir_address, &res->ai_send_addrs[0].gsr_addr, sizeof(struct sockaddr_storage));
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/enonblocksyncrecvmsgv.c:386:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char buf[1024], tsi[PGM_TSISTRLEN];
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/heatmap.c:56:20:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
	if (NULL == (fh = fopen (src, "r"))) {
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/pgmdump.c:252:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char buffer[4096];
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/pgmping.cc:245:22:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
		case 's':	g_port = atoi (optarg); break;
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/pgmping.cc:246:32:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
		case 'p':	g_udp_encap_port = atoi (optarg); break;
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/pgmping.cc:247:25:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
		case 'r':	g_max_rte = atoi (optarg); break;
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/pgmping.cc:248:27:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
		case 'O':	g_odata_rte = atoi (optarg); break;
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/pgmping.cc:249:27:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
		case 'D':	g_rdata_rte = atoi (optarg); break;
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/pgmping.cc:254:22:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
		case 'K':	g_rs_k = atoi (optarg); break;
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/pgmping.cc:255:22:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
		case 'N':	g_rs_n = atoi (optarg); break;
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/pgmping.cc:258:30:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
		case 'M':	g_heatmap_file = fopen (optarg, "w"); break;
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/pgmping.cc:266:28:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
		case 'm':	g_odata_rate = atoi (optarg);
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/pgmping.cc:268:30:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
		case 'd':	timeout = 1000 * atoi (optarg); break;
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/pgmping.cc:595:18:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	                char buffer[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/pgmping.cc:596:18:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
	                sprintf (buffer, "%d", heartbeat_spm[0]);
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/pgmping.cc:598:26:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	                        char t[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/pgmping.cc:599:26:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
	                        sprintf (t, ", %d", heartbeat_spm[i]);
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/pgmping.cc:716:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy (&if_req.ir_address, &res->ai_send_addrs[0].gsr_addr, sizeof(struct sockaddr_storage));
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/pgmping.cc:731:4:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
			char group[INET6_ADDRSTRLEN];
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/pgmping.cc:743:17:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
                char group[INET6_ADDRSTRLEN];
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/pgmping.cc:849:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char hostname[NI_MAXHOST + 1];
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/pgmping.cc:851:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char payload[payload_len];
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/pgmping.cc:1347:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
				memcpy (&lost_tsi, &skb->tsi, sizeof(pgm_tsi_t));
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/pgmrecv.c:172:22:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
		case 's':	g_port = atoi (optarg); break;
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/pgmrecv.c:173:32:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
		case 'p':	g_udp_encap_port = atoi (optarg); break;
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/pgmrecv.c:398:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy (&if_req.ir_address, &res->ai_send_addrs[0].gsr_addr, sizeof(struct sockaddr_storage));
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/pgmrecv.c:641:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char buf[2048], tsi[PGM_TSISTRLEN];
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/pgmsend.c:129:22:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
		case 's':	g_port = atoi (optarg); break;
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/pgmsend.c:130:32:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
		case 'p':	g_udp_encap_port = atoi (optarg); break;
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/pgmsend.c:131:25:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
		case 'r':	g_max_rte = atoi (optarg); break;
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/pgmsend.c:134:19:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
		case 'K':	g_k = atoi (optarg); break;
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/pgmsend.c:135:19:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
		case 'N':	g_n = atoi (optarg); break;
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/pgmsend.c:263:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy (&if_req.ir_address, &res->ai_send_addrs[0].gsr_addr, sizeof(struct sockaddr_storage));
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/pgmtop.c:369:9:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	static char prefix[5] = "";
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/pgmtop.c:405:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char buffer[100];
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/pgmtop.c:465:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char buffer[20];
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/pgmtop.c:549:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char buffer[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/pgmtop.c:592:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char b[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/pgmtop.c:795:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy (&hoststat->tsi, &skb->tsi, sizeof(pgm_tsi_t));
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/pgmtop.c:802:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy (&hoststat->last_addr, &sin->sin_addr, sizeof(sin->sin_addr));
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/pnonblocksyncrecv.c:121:22:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
		case 's':	g_port = atoi (optarg); break;
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/pnonblocksyncrecv.c:122:32:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
		case 'p':	g_udp_encap_port = atoi (optarg); break;
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/pnonblocksyncrecv.c:154:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char buffer[4096];
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/pnonblocksyncrecv.c:311:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy (&if_req.ir_address, &res->ai_send_addrs[0].gsr_addr, sizeof(struct sockaddr_storage));
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/pnonblocksyncrecv.c:373:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char buf[1024], tsi[PGM_TSISTRLEN];
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/purinrecv.c:148:20:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
		case 's':	port = atoi (optarg); break;
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/purinrecv.c:149:30:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
		case 'p':	udp_encap_port = atoi (optarg); break;
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/purinrecv.c:152:20:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
		case 'K':	rs_k = atoi (optarg); break;
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/purinrecv.c:153:20:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
		case 'N':	rs_n = atoi (optarg); break;
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/purinrecv.c:215:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char buffer[4096];
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/purinrecv.c:338:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char s[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/purinrecv.c:422:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy (&if_req.ir_address, &res->ai_send_addrs[0].gsr_addr, sizeof(struct sockaddr_storage));
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/purinrecv.c:489:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char buf[1024], tsi[PGM_TSISTRLEN];
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/purinrecvcc.cc:139:20:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
		case 's':	port = atoi (optarg); break;
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/purinrecvcc.cc:140:30:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
		case 'p':	udp_encap_port = atoi (optarg); break;
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/purinrecvcc.cc:142:20:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
		case 'K':	rs_k = atoi (optarg); break;
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/purinrecvcc.cc:143:20:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
		case 'N':	rs_n = atoi (optarg); break;
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/purinrecvcc.cc:203:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char buffer[4096];
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/purinrecvcc.cc:325:14:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
		if (!sock->open (sa_family, SOCK_SEQPACKET, IPPROTO_UDP, &pgm_err)) {
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/purinrecvcc.cc:333:14:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
		if (!sock->open (sa_family, SOCK_SEQPACKET, IPPROTO_PGM, &pgm_err)) {
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/purinrecvcc.cc:442:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char buf[1024], tsi[PGM_TSISTRLEN];
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/purinsend.c:124:20:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
		case 's':	port = atoi (optarg); break;
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/purinsend.c:125:30:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
		case 'p':	udp_encap_port = atoi (optarg); break;
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/purinsend.c:126:23:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
		case 'r':	max_rte = atoi (optarg); break;
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/purinsend.c:128:20:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
		case 'K':	rs_k = atoi (optarg); break;
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/purinsend.c:129:20:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
		case 'N':	rs_n = atoi (optarg); break;
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/purinsend.c:181:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char s[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/purinsend.c:250:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy (&if_req.ir_address, &res->ai_send_addrs[0].gsr_addr, sizeof(struct sockaddr_storage));
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/purinsendcc.cc:123:20:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
		case 's':	port = atoi (optarg); break;
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/purinsendcc.cc:124:30:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
		case 'p':	udp_encap_port = atoi (optarg); break;
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/purinsendcc.cc:125:23:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
		case 'r':	max_rte = atoi (optarg); break;
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/purinsendcc.cc:127:20:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
		case 'K':	rs_k = atoi (optarg); break;
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/purinsendcc.cc:128:20:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
		case 'N':	rs_n = atoi (optarg); break;
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/purinsendcc.cc:186:14:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
		if (!sock->open (sa_family, SOCK_SEQPACKET, IPPROTO_UDP, &pgm_err)) {
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/purinsendcc.cc:193:14:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
		if (!sock->open (sa_family, SOCK_SEQPACKET, IPPROTO_PGM, &pgm_err)) {
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/shortcakerecv.c:145:20:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
		case 's':	port = atoi (optarg); break;
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/shortcakerecv.c:146:30:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
		case 'p':	udp_encap_port = atoi (optarg); break;
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/shortcakerecv.c:148:20:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
		case 'K':	rs_k = atoi (optarg); break;
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/shortcakerecv.c:149:20:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
		case 'N':	rs_n = atoi (optarg); break;
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/shortcakerecv.c:200:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char buffer[4096];
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/shortcakerecv.c:295:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char s[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/shortcakerecv.c:368:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy (&if_req.ir_address, &res->ai_send_addrs[0].gsr_addr, sizeof(struct sockaddr_storage));
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/shortcakerecv.c:436:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char buf[1024], tsi[PGM_TSISTRLEN];
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/snonblocksyncrecv.c:126:22:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
		case 's':	g_port = atoi (optarg); break;
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/snonblocksyncrecv.c:127:32:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
		case 'p':	g_udp_encap_port = atoi (optarg); break;
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/snonblocksyncrecv.c:183:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char buffer[4096];
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/snonblocksyncrecv.c:369:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy (&if_req.ir_address, &res->ai_send_addrs[0].gsr_addr, sizeof(struct sockaddr_storage));
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/snonblocksyncrecv.c:431:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char buf[1024], tsi[PGM_TSISTRLEN];
data/libpgm-5.3.128~dfsg/openpgm/pgm/getifaddrs.c:62:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char				_name[IF_NAMESIZE];
data/libpgm-5.3.128~dfsg/openpgm/pgm/getifaddrs.c:96:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char errbuf[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/getifaddrs.c:109:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char errbuf[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/getifaddrs.c:125:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char errbuf[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/getifaddrs.c:153:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char errbuf[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/getifaddrs.c:170:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char errbuf[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/getifaddrs.c:191:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char errbuf[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/getifaddrs.c:235:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy (ift->_ifa.ifa_addr, &lifr->lifr_addr, pgm_sockaddr_len((struct sockaddr*)&lifr->lifr_addr));
data/libpgm-5.3.128~dfsg/openpgm/pgm/getifaddrs.c:245:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy (ift->_ifa.ifa_netmask, &lifr->lifr_netmask, pgm_sockaddr_len((struct sockaddr*)&lifr->lifr_netmask));
data/libpgm-5.3.128~dfsg/openpgm/pgm/getifaddrs.c:247:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy (ift->_ifa.ifa_netmask, &lifr->lifr_addr, pgm_sockaddr_len((struct sockaddr*)&lifr->lifr_addr));
data/libpgm-5.3.128~dfsg/openpgm/pgm/getifaddrs.c:288:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy (ift->_ifa.ifa_addr, &lifr->lifr_addr, pgm_sockaddr_len((struct sockaddr*)&lifr->lifr_addr));
data/libpgm-5.3.128~dfsg/openpgm/pgm/getifaddrs.c:298:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy (ift->_ifa.ifa_netmask, &lifr->lifr_netmask, pgm_sockaddr_len((struct sockaddr*)&lifr->lifr_netmask));
data/libpgm-5.3.128~dfsg/openpgm/pgm/getifaddrs.c:300:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy (ift->_ifa.ifa_netmask, &lifr->lifr_addr, pgm_sockaddr_len((struct sockaddr*)&lifr->lifr_addr));
data/libpgm-5.3.128~dfsg/openpgm/pgm/getifaddrs.c:312:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char errbuf[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/getifaddrs.c:318:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char errbuf[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/getifaddrs.c:347:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char errbuf[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/getifaddrs.c:356:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char buf[ DEFAULT_BUFFER_SIZE ];
data/libpgm-5.3.128~dfsg/openpgm/pgm/getifaddrs.c:362:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char errbuf[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/getifaddrs.c:378:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char errbuf[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/getifaddrs.c:388:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char buf6[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/getifaddrs.c:394:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char errbuf[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/getifaddrs.c:441:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy (ift->_ifa.ifa_addr, &ifr->ifr_addr, pgm_sockaddr_len(&ifr->ifr_addr));
data/libpgm-5.3.128~dfsg/openpgm/pgm/getifaddrs.c:455:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
				memcpy (ift->_ifa.ifa_netmask, &ifr->ifr_netmask, pgm_sockaddr_len(&ifr->ifr_netmask));
data/libpgm-5.3.128~dfsg/openpgm/pgm/getifaddrs.c:457:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
				memcpy (ift->_ifa.ifa_netmask, &ifr->ifr_addr, pgm_sockaddr_len(&ifr->ifr_addr));
data/libpgm-5.3.128~dfsg/openpgm/pgm/getifaddrs.c:482:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char errbuf[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/getifaddrs.c:490:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char errbuf[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/getifaddrs.c:780:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy (ift->_ifa.ifa_addr, unicast->Address.lpSockaddr, unicast->Address.iSockaddrLength);
data/libpgm-5.3.128~dfsg/openpgm/pgm/getifaddrs.c:998:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char errbuf[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/getifaddrs.c:1025:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy (ift->_ifa.ifa_addr, _ifa->ifa_addr, pgm_sockaddr_len (_ifa->ifa_addr));
data/libpgm-5.3.128~dfsg/openpgm/pgm/getifaddrs.c:1036:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy (ift->_ifa.ifa_netmask, _ifa->ifa_netmask, pgm_sockaddr_len (_ifa->ifa_netmask));
data/libpgm-5.3.128~dfsg/openpgm/pgm/getifaddrs_unittest.c:71:9:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	static char s[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/getifaddrs_unittest.c:75:3:  [2] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused). Risk is low because the
  source is a constant string.
		strcat (s, "IFF_UP");
data/libpgm-5.3.128~dfsg/openpgm/pgm/getifaddrs_unittest.c:138:4:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
			sprintf (s, "0x%x", flags);
data/libpgm-5.3.128~dfsg/openpgm/pgm/getifaddrs_unittest.c:140:4:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
			strcpy (s, "(null)");
data/libpgm-5.3.128~dfsg/openpgm/pgm/getifaddrs_unittest.c:155:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char saddr[INET6_ADDRSTRLEN], snetmask[INET6_ADDRSTRLEN];
data/libpgm-5.3.128~dfsg/openpgm/pgm/getifaddrs_unittest.c:168:5:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
				strcpy (saddr, "(AF_PACKET)");
data/libpgm-5.3.128~dfsg/openpgm/pgm/getifaddrs_unittest.c:171:5:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
				sprintf (saddr, "(AF = %d)", ifa->ifa_addr->sa_family);
data/libpgm-5.3.128~dfsg/openpgm/pgm/getifaddrs_unittest.c:173:4:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
			strcpy (saddr, "(null)");
data/libpgm-5.3.128~dfsg/openpgm/pgm/getifaddrs_unittest.c:180:5:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
				strcpy (snetmask, "(AF_PACKET)");
data/libpgm-5.3.128~dfsg/openpgm/pgm/getifaddrs_unittest.c:183:5:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
				sprintf (snetmask, "(AF = %d)", ifa->ifa_addr->sa_family);
data/libpgm-5.3.128~dfsg/openpgm/pgm/getifaddrs_unittest.c:185:4:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
			strcpy (snetmask, "(null)");
data/libpgm-5.3.128~dfsg/openpgm/pgm/getnetbyname.c:47:8:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
static char line[BUFSIZ+1];
data/libpgm-5.3.128~dfsg/openpgm/pgm/getnetbyname.c:48:8:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
static char *net_aliases[MAXALIASES];
data/libpgm-5.3.128~dfsg/openpgm/pgm/getnetbyname.c:73:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char expanded[MAX_PATH];
data/libpgm-5.3.128~dfsg/openpgm/pgm/getnetbyname.c:76:4:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
			char winstr[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/getnetbyname.c:89:4:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
			char errbuf[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/getnetbyname.c:155:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy (&net.n_net, &sa, sizeof (sa));
data/libpgm-5.3.128~dfsg/openpgm/pgm/getnetbyname.c:241:15:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	net.n_name = memcpy (line, ne->n_name, len);
data/libpgm-5.3.128~dfsg/openpgm/pgm/getnetbyname.c:248:10:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		*q++ = memcpy (line + len, *r++, alias_len);
data/libpgm-5.3.128~dfsg/openpgm/pgm/getnetbyname.c:258:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy (&net.n_net, &sa, sizeof (sa));
data/libpgm-5.3.128~dfsg/openpgm/pgm/getnetbyname_unittest.c:108:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char buffer[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/getnetbyname_unittest.c:131:5:  [2] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused). Risk is low because the
  source is a constant string.
				strcat (buffer, ", ");
data/libpgm-5.3.128~dfsg/openpgm/pgm/getnetbyname_unittest.c:135:4:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
			strcpy (buffer, "(nil)");
data/libpgm-5.3.128~dfsg/openpgm/pgm/getnetbyname_unittest.c:139:4:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
			char nbuffer[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/getnetbyname_unittest.c:146:6:  [2] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused). Risk is low because the
  source is a constant string.
					strcat (nbuffer, ", ");
data/libpgm-5.3.128~dfsg/openpgm/pgm/getnetbyname_unittest.c:150:5:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
				strcpy (nbuffer, "(nil)");
data/libpgm-5.3.128~dfsg/openpgm/pgm/getnodeaddr.c:68:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char hostname[NI_MAXHOST];
data/libpgm-5.3.128~dfsg/openpgm/pgm/getnodeaddr.c:73:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char errbuf[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/getnodeaddr.c:120:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy (p, ai->ai_addr, ai->ai_addrlen);
data/libpgm-5.3.128~dfsg/openpgm/pgm/getnodeaddr.c:131:4:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
			char list[1024], s[INET6_ADDRSTRLEN];
data/libpgm-5.3.128~dfsg/openpgm/pgm/getnodeaddr.c:135:20:  [2] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused). Risk is low because the
  source is a constant string.
					if (ai != na) strcat (list, ", ");
data/libpgm-5.3.128~dfsg/openpgm/pgm/getnodeaddr.c:144:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char errbuf[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/getnodeaddr.c:254:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy (na->ai_addr, ifa6->ifa_addr, na->ai_addrlen);
data/libpgm-5.3.128~dfsg/openpgm/pgm/getnodeaddr.c:293:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy (addr, result->ai_addr, result->ai_addrlen);
data/libpgm-5.3.128~dfsg/openpgm/pgm/getnodeaddr.c:313:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
				memcpy (addr, res->ai_addr, res->ai_addrlen);
data/libpgm-5.3.128~dfsg/openpgm/pgm/getnodeaddr.c:323:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy (addr, res->ai_addr, res->ai_addrlen);
data/libpgm-5.3.128~dfsg/openpgm/pgm/getnodeaddr_unittest.c:156:66:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
			((struct sockaddr_in6*)&new_interface->addr)->sin6_scope_id = atoi (scope);
data/libpgm-5.3.128~dfsg/openpgm/pgm/getnodeaddr_unittest.c:525:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char saddr[INET6_ADDRSTRLEN];
data/libpgm-5.3.128~dfsg/openpgm/pgm/getprotobyname.c:36:8:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
static char line[BUFSIZ+1];
data/libpgm-5.3.128~dfsg/openpgm/pgm/getprotobyname.c:37:8:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
static char *proto_aliases[MAXALIASES];
data/libpgm-5.3.128~dfsg/openpgm/pgm/getprotobyname.c:58:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char buf[BUFSIZ];
data/libpgm-5.3.128~dfsg/openpgm/pgm/getprotobyname.c:69:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char buf[BUFSIZ];
data/libpgm-5.3.128~dfsg/openpgm/pgm/getprotobyname.c:80:17:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	proto.p_name = memcpy (line, pe->p_name, len);
data/libpgm-5.3.128~dfsg/openpgm/pgm/getprotobyname.c:87:10:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		*q++ = memcpy (line + len, *r++, alias_len);
data/libpgm-5.3.128~dfsg/openpgm/pgm/gsi.c:54:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char resblock[16];
data/libpgm-5.3.128~dfsg/openpgm/pgm/gsi.c:58:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy (gsi, resblock + 10, 6);
data/libpgm-5.3.128~dfsg/openpgm/pgm/gsi.c:102:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char hostname[NI_MAXHOST];
data/libpgm-5.3.128~dfsg/openpgm/pgm/gsi.c:106:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char errbuf[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/gsi.c:133:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char hostname[NI_MAXHOST];
data/libpgm-5.3.128~dfsg/openpgm/pgm/gsi.c:141:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char errbuf[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/gsi.c:155:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char errbuf[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/gsi.c:166:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy (gsi, &((struct sockaddr_in*)(res->ai_addr))->sin_addr, sizeof(struct in_addr));
data/libpgm-5.3.128~dfsg/openpgm/pgm/gsi.c:169:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy ((uint8_t*)gsi + sizeof(struct in_addr), &random_val, sizeof(random_val));
data/libpgm-5.3.128~dfsg/openpgm/pgm/gsi.c:206:9:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	static char buf[PGM_GSISTRLEN];
data/libpgm-5.3.128~dfsg/openpgm/pgm/gsi.c:228:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy (&_u1.gsi, p1, sizeof (pgm_gsi_t));
data/libpgm-5.3.128~dfsg/openpgm/pgm/gsi.c:229:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy (&_u2.gsi, p2, sizeof (pgm_gsi_t));
data/libpgm-5.3.128~dfsg/openpgm/pgm/gsi_unittest.c:234:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char buf[PGM_GSISTRLEN];
data/libpgm-5.3.128~dfsg/openpgm/pgm/gsi_unittest.c:243:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char buf[PGM_GSISTRLEN];
data/libpgm-5.3.128~dfsg/openpgm/pgm/gsi_unittest.cc:284:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char buf[PGM_GSISTRLEN];
data/libpgm-5.3.128~dfsg/openpgm/pgm/gsi_unittest.cc:292:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char buf[PGM_GSISTRLEN];
data/libpgm-5.3.128~dfsg/openpgm/pgm/histogram.c:252:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy (snapshot_counts, histogram->sample.counts, sizeof(pgm_count_t) * histogram->sample.counts_len);
data/libpgm-5.3.128~dfsg/openpgm/pgm/http.c:100:8:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
static char		http_hostname[NI_MAXHOST];
data/libpgm-5.3.128~dfsg/openpgm/pgm/http.c:101:8:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
static char		http_address[INET6_ADDRSTRLEN];
data/libpgm-5.3.128~dfsg/openpgm/pgm/http.c:102:8:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
static char		http_username[LOGIN_NAME_MAX + 1];
data/libpgm-5.3.128~dfsg/openpgm/pgm/http.c:197:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char errbuf[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/http.c:214:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char errbuf[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/http.c:230:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char errbuf[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/http.c:242:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char errbuf[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/http.c:251:2:  [2] (buffer) wchar_t:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	wchar_t wusername[UNLEN + 1];
data/libpgm-5.3.128~dfsg/openpgm/pgm/http.c:255:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char winstr[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/http.c:270:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char errbuf[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/http.c:281:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char errbuf[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/http.c:292:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char errbuf[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/http.c:307:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char errbuf[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/http.c:308:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char addr[INET6_ADDRSTRLEN];
data/libpgm-5.3.128~dfsg/openpgm/pgm/http.c:320:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char errbuf[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/http.c:335:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char errbuf[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/http.c:349:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char errbuf[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/http.c:361:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char errbuf[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/http.c:428:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char errbuf[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/http.c:465:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char errbuf[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/http.c:518:4:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
			char errbuf[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/http.c:583:4:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
			char errbuf[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/http.c:613:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char buf[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/http.c:805:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char timestamp[100];
data/libpgm-5.3.128~dfsg/openpgm/pgm/http.c:812:2:  [2] (buffer) wchar_t:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	wchar_t wtimestamp[100];
data/libpgm-5.3.128~dfsg/openpgm/pgm/http.c:814:23:  [2] (buffer) MultiByteToWideChar:
  Requires maximum length in CHARACTERS, not bytes (CWE-120).
	const size_t wslen = MultiByteToWideChar (CP_ACP, 0, timestamp, slen, wtimestamp, 100);
data/libpgm-5.3.128~dfsg/openpgm/pgm/http.c:951:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char rname[IF_NAMESIZE * 2 + 3];
data/libpgm-5.3.128~dfsg/openpgm/pgm/http.c:952:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char b[IF_NAMESIZE * 2 + 3];
data/libpgm-5.3.128~dfsg/openpgm/pgm/http.c:974:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char s[INET6_ADDRSTRLEN];
data/libpgm-5.3.128~dfsg/openpgm/pgm/http.c:1025:4:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
			char group_address[INET6_ADDRSTRLEN];
data/libpgm-5.3.128~dfsg/openpgm/pgm/http.c:1030:4:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
			char gsi[ PGM_GSISTRLEN ];
data/libpgm-5.3.128~dfsg/openpgm/pgm/http.c:1147:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char gsi[ PGM_GSISTRLEN ];
data/libpgm-5.3.128~dfsg/openpgm/pgm/http.c:1150:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char title[ sizeof("Transport .00000") + PGM_GSISTRLEN ];
data/libpgm-5.3.128~dfsg/openpgm/pgm/http.c:1155:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char source_address[INET6_ADDRSTRLEN];
data/libpgm-5.3.128~dfsg/openpgm/pgm/http.c:1161:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char group_address[INET6_ADDRSTRLEN];
data/libpgm-5.3.128~dfsg/openpgm/pgm/http.c:1173:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char spm_path[INET6_ADDRSTRLEN];
data/libpgm-5.3.128~dfsg/openpgm/pgm/http.c:1359:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char group_address[INET6_ADDRSTRLEN];
data/libpgm-5.3.128~dfsg/openpgm/pgm/http.c:1365:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char source_address[INET6_ADDRSTRLEN];
data/libpgm-5.3.128~dfsg/openpgm/pgm/http.c:1371:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char last_hop[INET6_ADDRSTRLEN];
data/libpgm-5.3.128~dfsg/openpgm/pgm/http.c:1377:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char gsi[ PGM_GSISTRLEN + sizeof(".00000") ];
data/libpgm-5.3.128~dfsg/openpgm/pgm/http.c:1409:10:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
		return sprintf (sz, "clock skew");
data/libpgm-5.3.128~dfsg/openpgm/pgm/http.c:1418:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char hourmin[6];
data/libpgm-5.3.128~dfsg/openpgm/pgm/http.c:1436:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char daymonth[32];
data/libpgm-5.3.128~dfsg/openpgm/pgm/http.c:1440:3:  [2] (buffer) wchar_t:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		wchar_t wdaymonth[32];
data/libpgm-5.3.128~dfsg/openpgm/pgm/http.c:1442:24:  [2] (buffer) MultiByteToWideChar:
  Requires maximum length in CHARACTERS, not bytes (CWE-120).
		const size_t wslen = MultiByteToWideChar (CP_ACP, 0, daymonth, slen, wdaymonth, 32);
data/libpgm-5.3.128~dfsg/openpgm/pgm/http.c:1463:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char gsi[ PGM_GSISTRLEN ];
data/libpgm-5.3.128~dfsg/openpgm/pgm/http.c:1465:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char title[ sizeof("Peer .00000") + PGM_GSISTRLEN ];
data/libpgm-5.3.128~dfsg/openpgm/pgm/http.c:1470:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char group_address[INET6_ADDRSTRLEN];
data/libpgm-5.3.128~dfsg/openpgm/pgm/http.c:1476:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char source_address[INET6_ADDRSTRLEN];
data/libpgm-5.3.128~dfsg/openpgm/pgm/http.c:1482:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char last_hop[INET6_ADDRSTRLEN];
data/libpgm-5.3.128~dfsg/openpgm/pgm/http.c:1498:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char last_activity[100];
data/libpgm-5.3.128~dfsg/openpgm/pgm/if.c:54:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char			ir_name[IF_NAMESIZE];
data/libpgm-5.3.128~dfsg/openpgm/pgm/if.c:113:3:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
		strcpy (text, "UP");
data/libpgm-5.3.128~dfsg/openpgm/pgm/if.c:118:4:  [2] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused). Risk is low because the
  source is a constant string.
			strcat (text, ",LOOPBACK");
data/libpgm-5.3.128~dfsg/openpgm/pgm/if.c:120:4:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
			strcpy (text, "LOOPBACK");
data/libpgm-5.3.128~dfsg/openpgm/pgm/if.c:124:4:  [2] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused). Risk is low because the
  source is a constant string.
			strcat (text, ",BROADCAST");
data/libpgm-5.3.128~dfsg/openpgm/pgm/if.c:126:4:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
			strcpy (text, "BROADCAST");
data/libpgm-5.3.128~dfsg/openpgm/pgm/if.c:130:4:  [2] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused). Risk is low because the
  source is a constant string.
			strcat (text, ",MULTICAST");
data/libpgm-5.3.128~dfsg/openpgm/pgm/if.c:132:4:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
			strcpy (text, "MULTICAST");
data/libpgm-5.3.128~dfsg/openpgm/pgm/if.c:145:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char flags[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/if.c:146:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char addr[INET6_ADDRSTRLEN];
data/libpgm-5.3.128~dfsg/openpgm/pgm/if.c:165:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char group[1024], source[1024], addr[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/if.c:184:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char gsr[1024], recv_addrs[1024], send_addrs[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/if.c:187:15:  [2] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused). Risk is low because the
  source is a constant string.
		if (i == 0) strcat (recv_addrs, "{ ");
data/libpgm-5.3.128~dfsg/openpgm/pgm/if.c:188:8:  [2] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused). Risk is low because the
  source is a constant string.
		else strcat (recv_addrs, ", { ");
data/libpgm-5.3.128~dfsg/openpgm/pgm/if.c:190:3:  [2] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused). Risk is low because the
  source is a constant string.
		strcat (recv_addrs, " }");
data/libpgm-5.3.128~dfsg/openpgm/pgm/if.c:193:15:  [2] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused). Risk is low because the
  source is a constant string.
		if (i == 0) strcat (send_addrs, "{ ");
data/libpgm-5.3.128~dfsg/openpgm/pgm/if.c:194:8:  [2] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused). Risk is low because the
  source is a constant string.
		else strcat (send_addrs, ", { ");
data/libpgm-5.3.128~dfsg/openpgm/pgm/if.c:196:3:  [2] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused). Risk is low because the
  source is a constant string.
		strcat (send_addrs, " }");
data/libpgm-5.3.128~dfsg/openpgm/pgm/if.c:234:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char flags[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/if.c:240:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char addr[INET6_ADDRSTRLEN];
data/libpgm-5.3.128~dfsg/openpgm/pgm/if.c:252:4:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
			char netmask[INET_ADDRSTRLEN];
data/libpgm-5.3.128~dfsg/openpgm/pgm/if.c:268:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char network[INET6_ADDRSTRLEN], group[INET6_ADDRSTRLEN];
data/libpgm-5.3.128~dfsg/openpgm/pgm/if.c:278:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy (&ifaddr, &sin, sizeof (sin));
data/libpgm-5.3.128~dfsg/openpgm/pgm/if.c:283:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy (&sin6.sin6_addr, &if6_default_group_addr, sizeof(if6_default_group_addr));
data/libpgm-5.3.128~dfsg/openpgm/pgm/if.c:284:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy (&ifaddr, &sin6, sizeof (sin6));
data/libpgm-5.3.128~dfsg/openpgm/pgm/if.c:311:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char saddr[INET_ADDRSTRLEN], snetaddr[INET_ADDRSTRLEN], snetmask[INET_ADDRSTRLEN];
data/libpgm-5.3.128~dfsg/openpgm/pgm/if.c:336:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char saddr[INET6_ADDRSTRLEN], snetaddr[INET6_ADDRSTRLEN], snetmask[INET6_ADDRSTRLEN];
data/libpgm-5.3.128~dfsg/openpgm/pgm/if.c:383:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char literal[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/if.c:442:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy (addr, &s4, sizeof(s4));
data/libpgm-5.3.128~dfsg/openpgm/pgm/if.c:462:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy (addr, &sa6_addr, sizeof (sa6_addr));
data/libpgm-5.3.128~dfsg/openpgm/pgm/if.c:471:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char errbuf[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/if.c:508:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy (addr, res->ai_addr, pgm_sockaddr_len (res->ai_addr));
data/libpgm-5.3.128~dfsg/openpgm/pgm/if.c:627:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char errbuf[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/if.c:665:7:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
						memcpy (&addr[i++], res->ai_addr, pgm_sockaddr_len (res->ai_addr));
data/libpgm-5.3.128~dfsg/openpgm/pgm/if.c:724:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy (addr, res->ai_addr, pgm_sockaddr_len (res->ai_addr));
data/libpgm-5.3.128~dfsg/openpgm/pgm/if.c:823:6:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
					memcpy (&ir->ir_addr, ifa->ifa_addr, pgm_sockaddr_len (ifa->ifa_addr));
data/libpgm-5.3.128~dfsg/openpgm/pgm/if.c:827:7:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
						char s[IR_STRLEN];
data/libpgm-5.3.128~dfsg/openpgm/pgm/if.c:866:6:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
					char saddr[INET_ADDRSTRLEN];
data/libpgm-5.3.128~dfsg/openpgm/pgm/if.c:879:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
				memcpy (&ir->ir_addr, ifa->ifa_addr, pgm_sockaddr_len (ifa->ifa_addr));
data/libpgm-5.3.128~dfsg/openpgm/pgm/if.c:913:6:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
					char saddr[INET6_ADDRSTRLEN];
data/libpgm-5.3.128~dfsg/openpgm/pgm/if.c:927:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
				memcpy (&ir->ir_addr, ifa->ifa_addr, pgm_sockaddr_len (ifa->ifa_addr));
data/libpgm-5.3.128~dfsg/openpgm/pgm/if.c:951:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
				memcpy (&ir->ir_addr, ifa->ifa_addr, pgm_sockaddr_len (ifa->ifa_addr));
data/libpgm-5.3.128~dfsg/openpgm/pgm/if.c:974:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char s[IR_STRLEN];
data/libpgm-5.3.128~dfsg/openpgm/pgm/if.c:1028:4:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
			char literal[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/if.c:1039:6:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
					char multicast_group[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/if.c:1058:4:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
			char multicast_group[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/if.c:1076:4:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
			char multicast_group[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/if.c:1108:6:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
					char multicast_group[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/if.c:1149:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
				memcpy (addr, &sa6, sizeof (sa6));
data/libpgm-5.3.128~dfsg/openpgm/pgm/if.c:1152:6:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
					char multicast_group[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/if.c:1192:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char errbuf[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/if.c:1213:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy (addr, res->ai_addr, res->ai_addrlen);
data/libpgm-5.3.128~dfsg/openpgm/pgm/if.c:1217:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
				char multicast_group[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/if.c:1339:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy (&s6.sin6_addr, &if6_default_group_addr, sizeof (if6_default_group_addr));
data/libpgm-5.3.128~dfsg/openpgm/pgm/if.c:1340:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy (sa, &s6, sizeof (s6));
data/libpgm-5.3.128~dfsg/openpgm/pgm/if.c:1348:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy (sa, &s4, sizeof (s4));
data/libpgm-5.3.128~dfsg/openpgm/pgm/if.c:1425:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy (&gsr->gsr_source, &gsr->gsr_group, pgm_sockaddr_len ((struct sockaddr*)&gsr->gsr_group));
data/libpgm-5.3.128~dfsg/openpgm/pgm/if.c:1450:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy (&gsr->gsr_addr, &ir->ir_addr, pgm_sockaddr_len ((const struct sockaddr*)&ir->ir_addr));
data/libpgm-5.3.128~dfsg/openpgm/pgm/if.c:1530:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
				char s[INET6_ADDRSTRLEN];
data/libpgm-5.3.128~dfsg/openpgm/pgm/if.c:1536:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy (&ir->ir_addr, &addr, pgm_sockaddr_len ((struct sockaddr*)&addr));
data/libpgm-5.3.128~dfsg/openpgm/pgm/if.c:1557:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
				char s[INET6_ADDRSTRLEN];
data/libpgm-5.3.128~dfsg/openpgm/pgm/if.c:1563:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy (&ir->ir_addr, &resolved_interface.ir_addr, pgm_sockaddr_len ((struct sockaddr*)&resolved_interface.ir_addr));
data/libpgm-5.3.128~dfsg/openpgm/pgm/if.c:1621:4:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
			char s[IR_STRLEN];
data/libpgm-5.3.128~dfsg/openpgm/pgm/if.c:1625:4:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
			char s[IR_STRLEN];
data/libpgm-5.3.128~dfsg/openpgm/pgm/if.c:1649:4:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
			char s[IR_STRLEN];
data/libpgm-5.3.128~dfsg/openpgm/pgm/if.c:1667:4:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
			char s[INET6_ADDRSTRLEN];
data/libpgm-5.3.128~dfsg/openpgm/pgm/if.c:1673:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy (&gsr->gsr_source, &gsr->gsr_group, pgm_sockaddr_len ((struct sockaddr*)&gsr->gsr_group));
data/libpgm-5.3.128~dfsg/openpgm/pgm/if.c:1681:4:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
			char s[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/if.c:1684:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
				char t[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/if.c:1685:33:  [2] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused). Risk is low because the
  source is a constant string.
				if (gsr_list == *recv_list) strcat (s, "{ ");
data/libpgm-5.3.128~dfsg/openpgm/pgm/if.c:1686:10:  [2] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused). Risk is low because the
  source is a constant string.
				else strcat (s, ", { ");
data/libpgm-5.3.128~dfsg/openpgm/pgm/if.c:1689:5:  [2] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused). Risk is low because the
  source is a constant string.
				strcat (s, " }");
data/libpgm-5.3.128~dfsg/openpgm/pgm/if.c:1706:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char s[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/if.c:1709:4:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
			char t[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/if.c:1710:32:  [2] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused). Risk is low because the
  source is a constant string.
			if (gsr_list == *recv_list) strcat (s, "{ ");
data/libpgm-5.3.128~dfsg/openpgm/pgm/if.c:1711:9:  [2] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused). Risk is low because the
  source is a constant string.
			else strcat (s, ", { ");
data/libpgm-5.3.128~dfsg/openpgm/pgm/if.c:1714:4:  [2] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused). Risk is low because the
  source is a constant string.
			strcat (s, " }");
data/libpgm-5.3.128~dfsg/openpgm/pgm/if.c:1757:4:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
			char s[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/if.c:1760:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
				char t[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/if.c:1761:33:  [2] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused). Risk is low because the
  source is a constant string.
				if (gsr_list == *send_list) strcat (s, "{ ");
data/libpgm-5.3.128~dfsg/openpgm/pgm/if.c:1762:10:  [2] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused). Risk is low because the
  source is a constant string.
				else strcat (s, ", { ");
data/libpgm-5.3.128~dfsg/openpgm/pgm/if.c:1765:5:  [2] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused). Risk is low because the
  source is a constant string.
				strcat (s, " }");
data/libpgm-5.3.128~dfsg/openpgm/pgm/if.c:1776:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy (&send_gsr->gsr_addr, &primary_interface->ir_addr, pgm_sockaddr_len ((const struct sockaddr*)&primary_interface->ir_addr));
data/libpgm-5.3.128~dfsg/openpgm/pgm/if.c:1807:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy (&send_gsr->gsr_addr, &ir.ir_addr, pgm_sockaddr_len ((struct sockaddr*)&ir.ir_addr));
data/libpgm-5.3.128~dfsg/openpgm/pgm/if.c:1812:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy (&send_gsr->gsr_source, &send_gsr->gsr_group, pgm_sockaddr_len ((struct sockaddr*)&send_gsr->gsr_group));
data/libpgm-5.3.128~dfsg/openpgm/pgm/if.c:1824:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char s[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/if.c:1827:4:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
			char t[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/if.c:1828:32:  [2] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused). Risk is low because the
  source is a constant string.
			if (gsr_list == *send_list) strcat (s, "{ ");
data/libpgm-5.3.128~dfsg/openpgm/pgm/if.c:1829:9:  [2] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused). Risk is low because the
  source is a constant string.
			else strcat (s, ", { ");
data/libpgm-5.3.128~dfsg/openpgm/pgm/if.c:1832:4:  [2] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused). Risk is low because the
  source is a constant string.
			strcat (s, " }");
data/libpgm-5.3.128~dfsg/openpgm/pgm/if.c:1970:4:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
			char entity[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/if.c:2189:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy (&ai->ai_recv_addrs[i++], recv_list->data, sizeof(struct pgm_group_source_req));
data/libpgm-5.3.128~dfsg/openpgm/pgm/if.c:2195:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy (&ai->ai_send_addrs[i++], send_list->data, sizeof(struct pgm_group_source_req));
data/libpgm-5.3.128~dfsg/openpgm/pgm/if_unittest.c:217:66:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
			((struct sockaddr_in6*)&new_interface->addr)->sin6_scope_id = atoi (scope);
data/libpgm-5.3.128~dfsg/openpgm/pgm/if_unittest.c:496:4:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
			char buffer[1+IF_NAMESIZE];
data/libpgm-5.3.128~dfsg/openpgm/pgm/if_unittest.c:648:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
				memcpy (&ne.n_net, &sa, sizeof (sa));
data/libpgm-5.3.128~dfsg/openpgm/pgm/if_unittest.c:654:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
				memcpy (&ne.n_net, &sa6, sizeof (sa6));
data/libpgm-5.3.128~dfsg/openpgm/pgm/if_unittest.c:742:4:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
			char addr1[INET6_ADDRSTRLEN], addr2[INET6_ADDRSTRLEN];
data/libpgm-5.3.128~dfsg/openpgm/pgm/if_unittest.c:753:4:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
			char addr1[INET6_ADDRSTRLEN], addr2[INET6_ADDRSTRLEN];
data/libpgm-5.3.128~dfsg/openpgm/pgm/include/impl/md5.h:51:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char		buffer[128]
data/libpgm-5.3.128~dfsg/openpgm/pgm/include/impl/security.h:191:24:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
	if (NULL == (stream = fopen (filename, mode)))
data/libpgm-5.3.128~dfsg/openpgm/pgm/include/pgm/macros.h:126:50:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
#define PGM_STATIC_ASSERT(expr) typedef struct { char compile_time_assertion[(expr) ? 1 : -1]; } PGM_PASTE (_pgm_static_assert_, __LINE__)
data/libpgm-5.3.128~dfsg/openpgm/pgm/include/pgm/packet.h:392:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char		poll_rand[4];		/* random string */
data/libpgm-5.3.128~dfsg/openpgm/pgm/include/pgm/packet.h:405:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char		poll6_rand[4];		/* random string */
data/libpgm-5.3.128~dfsg/openpgm/pgm/include/pgm/skbuff.h:53:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char				cb[48];		/* control buffer */
data/libpgm-5.3.128~dfsg/openpgm/pgm/include/pgm/skbuff.h:217:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy (newskb, skb, PGM_OFFSETOF(struct pgm_sk_buff_t, pgm_header));
data/libpgm-5.3.128~dfsg/openpgm/pgm/include/pgm/skbuff.h:228:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy (newskb->head, skb->head, (char*)skb->end - (char*)skb->head);
data/libpgm-5.3.128~dfsg/openpgm/pgm/indextoaddr.c:93:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy (ifsa, ifa->ifa_addr, pgm_sockaddr_len(ifa->ifa_addr));
data/libpgm-5.3.128~dfsg/openpgm/pgm/indextoaddr_unittest.c:118:66:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
			((struct sockaddr_in6*)&new_interface->addr)->sin6_scope_id = atoi (scope);
data/libpgm-5.3.128~dfsg/openpgm/pgm/indextoaddr_unittest.c:257:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char saddr[INET6_ADDRSTRLEN];
data/libpgm-5.3.128~dfsg/openpgm/pgm/inet_network.c:163:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char		 s2[INET6_ADDRSTRLEN];
data/libpgm-5.3.128~dfsg/openpgm/pgm/inet_network.c:203:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy (in6, &in6addr_any, sizeof(in6addr_any));
data/libpgm-5.3.128~dfsg/openpgm/pgm/inet_network.c:208:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char sdebug[INET6_ADDRSTRLEN];
data/libpgm-5.3.128~dfsg/openpgm/pgm/inet_network.c:258:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char		 s2[INET6_ADDRSTRLEN];
data/libpgm-5.3.128~dfsg/openpgm/pgm/inet_network.c:284:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy (sa6, result->ai_addr, result->ai_addrlen);
data/libpgm-5.3.128~dfsg/openpgm/pgm/inet_network.c:299:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy (sa6, result->ai_addr, result->ai_addrlen);
data/libpgm-5.3.128~dfsg/openpgm/pgm/inet_network.c:303:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char sdebug[INET6_ADDRSTRLEN];
data/libpgm-5.3.128~dfsg/openpgm/pgm/inet_network_unittest.c:158:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char snetwork[INET6_ADDRSTRLEN];
data/libpgm-5.3.128~dfsg/openpgm/pgm/inet_network_unittest.c:179:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char snetwork[INET6_ADDRSTRLEN];
data/libpgm-5.3.128~dfsg/openpgm/pgm/ip_unittest.c:98:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy (&recv_addr, &multicast_group, sizeof(multicast_group));
data/libpgm-5.3.128~dfsg/openpgm/pgm/ip_unittest.c:123:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy (&send_addr, &multicast_group, sizeof(multicast_group));
data/libpgm-5.3.128~dfsg/openpgm/pgm/ip_unittest.c:136:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char errbuf[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/ip_unittest.c:142:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char recv_data[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/ip_unittest.c:145:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char errbuf[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/ip_unittest.c:177:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy (&recv_addr, &multicast_group, sizeof(multicast_group));
data/libpgm-5.3.128~dfsg/openpgm/pgm/ip_unittest.c:194:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy (&send_addr, &multicast_group, sizeof(multicast_group));
data/libpgm-5.3.128~dfsg/openpgm/pgm/ip_unittest.c:206:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char errbuf[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/ip_unittest.c:212:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char recv_data[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/ip_unittest.c:215:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char errbuf[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/ip_unittest.c:251:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy (&recv_addr, &multicast_group, sizeof(multicast_group));
data/libpgm-5.3.128~dfsg/openpgm/pgm/ip_unittest.c:268:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy (&send_addr, &multicast_group, sizeof(multicast_group));
data/libpgm-5.3.128~dfsg/openpgm/pgm/ip_unittest.c:281:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char errbuf[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/ip_unittest.c:287:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char recv_data[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/ip_unittest.c:290:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char errbuf[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/ip_unittest.c:327:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy (&recv_addr, &multicast_group, sizeof(multicast_group));
data/libpgm-5.3.128~dfsg/openpgm/pgm/ip_unittest.c:344:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy (&send_addr, &multicast_group, sizeof(multicast_group));
data/libpgm-5.3.128~dfsg/openpgm/pgm/ip_unittest.c:357:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char errbuf[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/ip_unittest.c:363:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char recv_data[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/ip_unittest.c:366:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char errbuf[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/log.c:47:8:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
static char log_hostname[NI_MAXHOST] PGM_GNUC_READ_MOSTLY;
data/libpgm-5.3.128~dfsg/openpgm/pgm/log.c:95:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char tbuf[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/md5.c:43:23:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
static const unsigned char fillbuf[64] = { 0x80, 0 /* , 0, 0, ...  */ };
data/libpgm-5.3.128~dfsg/openpgm/pgm/md5.c:279:34:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
				_pgm_md5_process_block (ctx, memcpy (ctx->buffer, buffer, 64), 64);
data/libpgm-5.3.128~dfsg/openpgm/pgm/md5.c:297:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy (&ctx->buffer[left_over], buffer, len);
data/libpgm-5.3.128~dfsg/openpgm/pgm/md5.c:303:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy (ctx->buffer, &ctx->buffer[64], left_over);
data/libpgm-5.3.128~dfsg/openpgm/pgm/md5.c:361:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy (&ctx->buffer[bytes], fillbuf, pad);
data/libpgm-5.3.128~dfsg/openpgm/pgm/md5_unittest.c:121:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char md5[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/md5_unittest.c:122:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char resblock[16];
data/libpgm-5.3.128~dfsg/openpgm/pgm/md5_unittest.c:129:2:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
	sprintf (md5, "%2.2hhx%2.2hhx-%2.2hhx%2.2hhx-%2.2hhx%2.2hhx-%2.2hhx%2.2hhx-%2.2hhx%2.2hhx-%2.2hhx%2.2hhx-%2.2hhx%2.2hhx-%2.2hhx%2.2hhx",
data/libpgm-5.3.128~dfsg/openpgm/pgm/md5_unittest.c:146:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char resblock[16];
data/libpgm-5.3.128~dfsg/openpgm/pgm/mem.c:262:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy (new_mem, mem, n_bytes);
data/libpgm-5.3.128~dfsg/openpgm/pgm/messages.c:44:14:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
static const char log_levels[8][7] = {
data/libpgm-5.3.128~dfsg/openpgm/pgm/messages.c:179:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char tbuf[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/mkversion.c:31:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char build_date[1024], build_time[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/nametoindex.c:169:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char szAdapterName[IF_NAMESIZE];
data/libpgm-5.3.128~dfsg/openpgm/pgm/net.c:70:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char saddr[INET_ADDRSTRLEN];
data/libpgm-5.3.128~dfsg/openpgm/pgm/net.c:147:6:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
					char errbuf[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/net.c:148:6:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
					char toaddr[INET6_ADDRSTRLEN];
data/libpgm-5.3.128~dfsg/openpgm/pgm/net.c:158:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
				char toaddr[INET6_ADDRSTRLEN];
data/libpgm-5.3.128~dfsg/openpgm/pgm/net.c:164:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
				char errbuf[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/net_unittest.c:76:9:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	static char s[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/net_unittest.c:80:3:  [2] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused). Risk is low because the
  source is a constant string.
		strcat (s, "MSG_OOB");
data/libpgm-5.3.128~dfsg/openpgm/pgm/net_unittest.c:137:4:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
			sprintf (s, "0x%x", flags);
data/libpgm-5.3.128~dfsg/openpgm/pgm/net_unittest.c:198:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char saddr[INET6_ADDRSTRLEN];
data/libpgm-5.3.128~dfsg/openpgm/pgm/packet_parse.c:303:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy (&skb->tsi.gsi, skb->pgm_header->pgm_gsi, sizeof(pgm_gsi_t));
data/libpgm-5.3.128~dfsg/openpgm/pgm/packet_parse_unittest.c:104:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy (data, source, source_len);
data/libpgm-5.3.128~dfsg/openpgm/pgm/packet_parse_unittest.c:153:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy (data, source, source_len);
data/libpgm-5.3.128~dfsg/openpgm/pgm/packet_parse_unittest.c:199:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char saddr[INET6_ADDRSTRLEN];
data/libpgm-5.3.128~dfsg/openpgm/pgm/packet_test.c:304:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char s[INET6_ADDRSTRLEN];
data/libpgm-5.3.128~dfsg/openpgm/pgm/packet_test.c:400:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char s[INET6_ADDRSTRLEN];
data/libpgm-5.3.128~dfsg/openpgm/pgm/packet_test.c:694:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char s[INET6_ADDRSTRLEN];
data/libpgm-5.3.128~dfsg/openpgm/pgm/packet_test.c:876:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char bitmap[33];
data/libpgm-5.3.128~dfsg/openpgm/pgm/packet_test.c:1086:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char buf[sizeof("00000")];
data/libpgm-5.3.128~dfsg/openpgm/pgm/packet_test_unittest.c:91:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy (data, source, source_len);
data/libpgm-5.3.128~dfsg/openpgm/pgm/pgmMIB.c:274:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char gsi[ PGM_GSISTRLEN ];
data/libpgm-5.3.128~dfsg/openpgm/pgm/pgmMIB.c:552:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char gsi[ PGM_GSISTRLEN ];
data/libpgm-5.3.128~dfsg/openpgm/pgm/pgmMIB.c:915:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char gsi[ PGM_GSISTRLEN ];
data/libpgm-5.3.128~dfsg/openpgm/pgm/pgmMIB.c:1488:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char gsi[ PGM_GSISTRLEN ];
data/libpgm-5.3.128~dfsg/openpgm/pgm/pgmMIB.c:1849:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char gsi[ PGM_GSISTRLEN ];
data/libpgm-5.3.128~dfsg/openpgm/pgm/pgmMIB.c:2239:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char gsi[ PGM_GSISTRLEN ];
data/libpgm-5.3.128~dfsg/openpgm/pgm/rand.c:78:8:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
		fp = fopen ("/dev/urandom", "rb");
data/libpgm-5.3.128~dfsg/openpgm/pgm/receiver.c:396:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char saddr[INET6_ADDRSTRLEN], daddr[INET6_ADDRSTRLEN];
data/libpgm-5.3.128~dfsg/openpgm/pgm/receiver.c:405:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy (&peer->tsi, tsi, sizeof(pgm_tsi_t));
data/libpgm-5.3.128~dfsg/openpgm/pgm/receiver.c:406:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy (&peer->group_nla, dst_addr, dst_addrlen);
data/libpgm-5.3.128~dfsg/openpgm/pgm/receiver.c:407:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy (&peer->local_nla, src_addr, src_addrlen);
data/libpgm-5.3.128~dfsg/openpgm/pgm/receiver.c:559:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy (&error_skb->tsi, &source->tsi, sizeof(pgm_tsi_t));
data/libpgm-5.3.128~dfsg/openpgm/pgm/receiver.c:1006:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy (header->pgm_gsi, &source->tsi.gsi, sizeof(pgm_gsi_t));
data/libpgm-5.3.128~dfsg/openpgm/pgm/receiver.c:1079:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy (header->pgm_gsi, &source->tsi.gsi, sizeof(pgm_gsi_t));
data/libpgm-5.3.128~dfsg/openpgm/pgm/receiver.c:1155:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy (header->pgm_gsi, &source->tsi.gsi, sizeof(pgm_gsi_t));
data/libpgm-5.3.128~dfsg/openpgm/pgm/receiver.c:1225:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char list[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/receiver.c:1228:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char sequence[2 + strlen("4294967295")];
data/libpgm-5.3.128~dfsg/openpgm/pgm/receiver.c:1250:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy (header->pgm_gsi, &source->tsi.gsi, sizeof(pgm_gsi_t));
data/libpgm-5.3.128~dfsg/openpgm/pgm/receiver.c:1351:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy (header->pgm_gsi, &source->tsi.gsi, sizeof(pgm_gsi_t));
data/libpgm-5.3.128~dfsg/openpgm/pgm/recv.c:114:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char aux[ 1024 ];
data/libpgm-5.3.128~dfsg/openpgm/pgm/recv.c:188:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
				memcpy (dst_addr, &s4, sizeof(s4));
data/libpgm-5.3.128~dfsg/openpgm/pgm/recv.c:207:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
				memcpy (dst_addr, &s4, sizeof(s4));
data/libpgm-5.3.128~dfsg/openpgm/pgm/recv.c:230:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
				memcpy (dst_addr, &s6, sizeof(s6));
data/libpgm-5.3.128~dfsg/openpgm/pgm/recv.c:354:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy (&upstream_tsi.gsi, &skb->tsi.gsi, sizeof(pgm_gsi_t));
data/libpgm-5.3.128~dfsg/openpgm/pgm/recv.c:420:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char saddr[INET6_ADDRSTRLEN], daddr[INET6_ADDRSTRLEN];
data/libpgm-5.3.128~dfsg/openpgm/pgm/recv.c:485:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy (&(*source)->group_nla, dst_addr, pgm_sockaddr_len(dst_addr));
data/libpgm-5.3.128~dfsg/openpgm/pgm/recv.c:531:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char saddr[INET6_ADDRSTRLEN], daddr[INET6_ADDRSTRLEN];
data/libpgm-5.3.128~dfsg/openpgm/pgm/recv.c:694:4:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
			char tsi[PGM_TSISTRLEN];
data/libpgm-5.3.128~dfsg/openpgm/pgm/recv.c:763:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char errbuf[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/recv.c:855:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
				char errbuf[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/recv.c:888:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
				char tsi[PGM_TSISTRLEN];
data/libpgm-5.3.128~dfsg/openpgm/pgm/recv.c:1004:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy (&from->sa_addr.gsi, &pskb->tsi.gsi, sizeof(pgm_gsi_t));
data/libpgm-5.3.128~dfsg/openpgm/pgm/recv.c:1015:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy ((char*)buf + bytes_copied, pskb->data, copy_len);
data/libpgm-5.3.128~dfsg/openpgm/pgm/recv_unittest.c:167:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy (&sock->tsi, &tsi, sizeof(pgm_tsi_t));
data/libpgm-5.3.128~dfsg/openpgm/pgm/recv_unittest.c:253:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy (data, source, source_len);
data/libpgm-5.3.128~dfsg/openpgm/pgm/recv_unittest.c:516:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy ((char*)(packet_cmsg + 1), &packet_info, sizeof(struct in_pktinfo));
data/libpgm-5.3.128~dfsg/openpgm/pgm/recv_unittest.c:574:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy (&skb->tsi.gsi, skb->pgm_header->pgm_gsi, sizeof(pgm_gsi_t));
data/libpgm-5.3.128~dfsg/openpgm/pgm/recv_unittest.c:586:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy (&skb->tsi.gsi, skb->pgm_header->pgm_gsi, sizeof(pgm_gsi_t));
data/libpgm-5.3.128~dfsg/openpgm/pgm/recv_unittest.c:661:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy (&peer->tsi, tsi, sizeof(pgm_tsi_t));
data/libpgm-5.3.128~dfsg/openpgm/pgm/recv_unittest.c:662:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy (&peer->group_nla, dst_addr, dst_addr_len);
data/libpgm-5.3.128~dfsg/openpgm/pgm/recv_unittest.c:663:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy (&peer->local_nla, src_addr, src_addr_len);
data/libpgm-5.3.128~dfsg/openpgm/pgm/recv_unittest.c:998:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy (msg->msg_name, mock_msg->msg_name, mock_msg->msg_namelen);
data/libpgm-5.3.128~dfsg/openpgm/pgm/recv_unittest.c:1002:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
				memcpy (msg->msg_iov[i].iov_base, mock_msg->msg_iov[i].iov_base, mock_msg->msg_iov[i].iov_len);
data/libpgm-5.3.128~dfsg/openpgm/pgm/recv_unittest.c:1006:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy (msg->msg_control, mock_msg->msg_control, mock_msg->msg_controllen);
data/libpgm-5.3.128~dfsg/openpgm/pgm/recv_unittest.c:1040:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy (lpMsg->name, mock_msg->name, mock_msg->namelen);
data/libpgm-5.3.128~dfsg/openpgm/pgm/recv_unittest.c:1044:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
				memcpy (lpMsg->lpBuffers[i].buf, mock_msg->lpBuffers[i].buf, mock_msg->lpBuffers[i].len);
data/libpgm-5.3.128~dfsg/openpgm/pgm/recv_unittest.c:1050:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy (lpMsg->Control.buf, mock_msg->Control.buf, mock_msg->Control.len);
data/libpgm-5.3.128~dfsg/openpgm/pgm/recv_unittest.c:1091:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy (from, mock_msg->name, mock_msg->namelen);
data/libpgm-5.3.128~dfsg/openpgm/pgm/recv_unittest.c:1096:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
				memcpy (buf, mock_msg->lpBuffers[i].buf, count);
data/libpgm-5.3.128~dfsg/openpgm/pgm/recv_unittest.c:1449:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy (skb->data, source, sizeof(source));
data/libpgm-5.3.128~dfsg/openpgm/pgm/recv_unittest.c:1532:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy (skb->data, source[0], strlen(source[0]));
data/libpgm-5.3.128~dfsg/openpgm/pgm/recv_unittest.c:1540:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy (skb->data, source[1], strlen(source[1]));
data/libpgm-5.3.128~dfsg/openpgm/pgm/recv_unittest.c:1548:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy (skb->data, source[2], strlen(source[2]));
data/libpgm-5.3.128~dfsg/openpgm/pgm/reed_solomon.c:561:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy (&rs->RM[ i * rs->k ], &rs->GM[ offsets[ i ] * rs->k ], rs->k * sizeof(pgm_gf8_t));
data/libpgm-5.3.128~dfsg/openpgm/pgm/reed_solomon.c:599:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy (block[ j ], repairs[ j ], len * sizeof(pgm_gf8_t));
data/libpgm-5.3.128~dfsg/openpgm/pgm/reed_solomon.c:634:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy (&rs->RM[ i * rs->k ], &rs->GM[ offsets[ i ] * rs->k ], rs->k * sizeof(pgm_gf8_t));
data/libpgm-5.3.128~dfsg/openpgm/pgm/rxw.c:1045:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy (new_skb->cb, skb->cb, sizeof(skb->cb));
data/libpgm-5.3.128~dfsg/openpgm/pgm/rxw.c:1072:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char cb[48];
data/libpgm-5.3.128~dfsg/openpgm/pgm/rxw.c:1084:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy (cb, skb->cb, sizeof(skb->cb));
data/libpgm-5.3.128~dfsg/openpgm/pgm/rxw.c:1086:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy (missing->cb, cb, sizeof(skb->cb));
data/libpgm-5.3.128~dfsg/openpgm/pgm/rxw_unittest.c:126:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy (&skb->tsi, &tsi, sizeof(tsi));
data/libpgm-5.3.128~dfsg/openpgm/pgm/rxw_unittest.c:446:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char buffer[1500];
data/libpgm-5.3.128~dfsg/openpgm/pgm/snmp.c:112:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char errbuf[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/snmp.c:126:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char errbuf[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/snmp.c:139:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char errbuf[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/sockaddr.c:263:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy (dst, result->ai_addr, result->ai_addrlen);
data/libpgm-5.3.128~dfsg/openpgm/pgm/sockaddr.c:995:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy (filter, gf_list, len);
data/libpgm-5.3.128~dfsg/openpgm/pgm/sockaddr.c:1066:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy (&s4, address, sizeof(struct sockaddr_in));
data/libpgm-5.3.128~dfsg/openpgm/pgm/sockaddr.c:1337:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy (dst, &s4.sin_addr.s_addr, sizeof(struct in_addr));
data/libpgm-5.3.128~dfsg/openpgm/pgm/sockaddr.c:1344:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy (dst, &s6.sin6_addr, sizeof(struct in6_addr));
data/libpgm-5.3.128~dfsg/openpgm/pgm/sockaddr.c:1377:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy (&((struct sockaddr_in6*)sa)->sin6_addr, (const struct in6_addr*)((const char*)nla + sizeof(uint32_t)), sizeof(struct in6_addr));
data/libpgm-5.3.128~dfsg/openpgm/pgm/sockaddr.c:1407:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy ((struct in6_addr*)((char*)nla + sizeof(uint32_t)), &((const struct sockaddr_in6*)sa)->sin6_addr, sizeof(struct in6_addr));
data/libpgm-5.3.128~dfsg/openpgm/pgm/socket.c:415:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char errbuf[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/socket.c:452:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char errbuf[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/socket.c:466:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char errbuf[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/socket.c:491:4:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
			char errbuf[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/socket.c:505:4:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
			char errbuf[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/socket.c:524:4:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
			char errbuf[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/socket.c:543:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
				char errbuf[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/socket.c:559:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
				char errbuf[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/socket.c:582:4:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
			char errbuf[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/socket.c:591:4:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
			char errbuf[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/socket.c:600:4:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
			char errbuf[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/socket.c:1026:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy (optval, &sock->send_gsr, sizeof (struct group_req));
data/libpgm-5.3.128~dfsg/openpgm/pgm/socket.c:1576:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy (&gr->gr_group, &gsr->gsr_group, sizeof (struct sockaddr_storage));
data/libpgm-5.3.128~dfsg/openpgm/pgm/socket.c:1582:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy (&sock->send_gsr, tmp_optval, sizeof(struct group_req));
data/libpgm-5.3.128~dfsg/openpgm/pgm/socket.c:1600:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
				char addr[INET6_ADDRSTRLEN];
data/libpgm-5.3.128~dfsg/openpgm/pgm/socket.c:1627:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy (&gr->gr_group, &gsr->gsr_group, sizeof (struct sockaddr_storage));
data/libpgm-5.3.128~dfsg/openpgm/pgm/socket.c:1644:6:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
					char s[INET6_ADDRSTRLEN];
data/libpgm-5.3.128~dfsg/openpgm/pgm/socket.c:1656:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy (&sock->recv_gsr[sock->recv_gsr_len].gsr_group, &gr->gr_group, pgm_sockaddr_len ((const struct sockaddr*)&gr->gr_group));
data/libpgm-5.3.128~dfsg/openpgm/pgm/socket.c:1659:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy (&sock->recv_gsr[sock->recv_gsr_len].gsr_source, &gr->gr_group, pgm_sockaddr_len ((const struct sockaddr*)&gr->gr_group));
data/libpgm-5.3.128~dfsg/openpgm/pgm/socket.c:1664:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
				char errbuf[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/socket.c:1665:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
				char s[INET6_ADDRSTRLEN];
data/libpgm-5.3.128~dfsg/openpgm/pgm/socket.c:1675:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
				char addr[INET6_ADDRSTRLEN];
data/libpgm-5.3.128~dfsg/openpgm/pgm/socket.c:1719:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
				char addr[INET6_ADDRSTRLEN];
data/libpgm-5.3.128~dfsg/openpgm/pgm/socket.c:1780:7:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
						char s1[INET6_ADDRSTRLEN], s2[INET6_ADDRSTRLEN];
data/libpgm-5.3.128~dfsg/openpgm/pgm/socket.c:1802:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy (&sock->recv_gsr[sock->recv_gsr_len], gsr, sizeof(struct group_source_req));
data/libpgm-5.3.128~dfsg/openpgm/pgm/socket.c:2071:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy (&sock->tsi, &sockaddr->sa_addr, sizeof(pgm_tsi_t));
data/libpgm-5.3.128~dfsg/openpgm/pgm/socket.c:2098:4:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
			char errbuf[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/socket.c:2110:4:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
			char errbuf[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/socket.c:2123:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char errbuf[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/socket.c:2215:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(&recv_addr, &recv_req->ir_address, pgm_sockaddr_len (&recv_req->ir_address));
data/libpgm-5.3.128~dfsg/openpgm/pgm/socket.c:2238:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy (&recv_addr2.sa, &recv_addr.sa, pgm_sockaddr_len (&recv_addr.sa));
data/libpgm-5.3.128~dfsg/openpgm/pgm/socket.c:2248:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char errbuf[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/socket.c:2249:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char addr[INET6_ADDRSTRLEN];
data/libpgm-5.3.128~dfsg/openpgm/pgm/socket.c:2263:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char s[INET6_ADDRSTRLEN];
data/libpgm-5.3.128~dfsg/openpgm/pgm/socket.c:2272:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(&send_addr, &send_req->ir_address, pgm_sockaddr_len ((const struct sockaddr *)&send_req->ir_address));
data/libpgm-5.3.128~dfsg/openpgm/pgm/socket.c:2293:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy (&send_with_router_alert_addr, &send_addr, pgm_sockaddr_len ((struct sockaddr*)&send_addr));
data/libpgm-5.3.128~dfsg/openpgm/pgm/socket.c:2299:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char errbuf[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/socket.c:2300:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char addr[INET6_ADDRSTRLEN];
data/libpgm-5.3.128~dfsg/openpgm/pgm/socket.c:2331:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char s[INET6_ADDRSTRLEN];
data/libpgm-5.3.128~dfsg/openpgm/pgm/socket.c:2341:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char errbuf[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/socket.c:2342:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char addr[INET6_ADDRSTRLEN];
data/libpgm-5.3.128~dfsg/openpgm/pgm/socket.c:2356:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char s[INET6_ADDRSTRLEN];
data/libpgm-5.3.128~dfsg/openpgm/pgm/socket.c:2362:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy (&sock->send_addr, &send_addr, pgm_sockaddr_len ((struct sockaddr*)&send_addr));
data/libpgm-5.3.128~dfsg/openpgm/pgm/socket.c:2437:4:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
			char errbuf[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/socket.c:2496:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy (&addr->sa_addr, &sock->tsi, sizeof(pgm_tsi_t));
data/libpgm-5.3.128~dfsg/openpgm/pgm/socket_unittest.c:103:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy (&pgmsa->sa_addr.gsi, &gsi, sizeof(gsi));
data/libpgm-5.3.128~dfsg/openpgm/pgm/socket_unittest.c:173:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy (&sock->tsi, &tsi, sizeof(pgm_tsi_t));
data/libpgm-5.3.128~dfsg/openpgm/pgm/source.c:251:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy (&sock->acker_nla, &peer_nla, pgm_sockaddr_storage_len (&peer_nla));
data/libpgm-5.3.128~dfsg/openpgm/pgm/source.c:257:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy (&sock->acker_nla, &peer_nla, pgm_sockaddr_storage_len (&peer_nla));
data/libpgm-5.3.128~dfsg/openpgm/pgm/source.c:334:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char saddr[INET6_ADDRSTRLEN];
data/libpgm-5.3.128~dfsg/openpgm/pgm/source.c:352:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char sgroup[INET6_ADDRSTRLEN];
data/libpgm-5.3.128~dfsg/openpgm/pgm/source.c:733:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy (header->pgm_gsi, &sock->tsi.gsi, sizeof(pgm_gsi_t));
data/libpgm-5.3.128~dfsg/openpgm/pgm/source.c:882:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char saddr[INET6_ADDRSTRLEN], gaddr[INET6_ADDRSTRLEN];
data/libpgm-5.3.128~dfsg/openpgm/pgm/source.c:902:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy (header->pgm_gsi, &sock->tsi.gsi, sizeof(pgm_gsi_t));
data/libpgm-5.3.128~dfsg/openpgm/pgm/source.c:972:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char saddr[INET6_ADDRSTRLEN], gaddr[INET6_ADDRSTRLEN];
data/libpgm-5.3.128~dfsg/openpgm/pgm/source.c:973:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char list[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/source.c:978:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char sequence[ 2 + strlen("4294967295") ];
data/libpgm-5.3.128~dfsg/openpgm/pgm/source.c:1000:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy (header->pgm_gsi, &sock->tsi.gsi, sizeof(pgm_gsi_t));
data/libpgm-5.3.128~dfsg/openpgm/pgm/source.c:1131:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy (STATE(skb)->pgm_header->pgm_gsi, &sock->tsi.gsi, sizeof(pgm_gsi_t));
data/libpgm-5.3.128~dfsg/openpgm/pgm/source.c:1307:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy (STATE(skb)->pgm_header->pgm_gsi, &sock->tsi.gsi, sizeof(pgm_gsi_t));
data/libpgm-5.3.128~dfsg/openpgm/pgm/source.c:1501:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy (STATE(skb)->pgm_header->pgm_gsi, &sock->tsi.gsi, sizeof(pgm_gsi_t));
data/libpgm-5.3.128~dfsg/openpgm/pgm/source.c:1680:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy (STATE(skb)->pgm_header->pgm_gsi, &sock->tsi.gsi, sizeof(pgm_gsi_t));
data/libpgm-5.3.128~dfsg/openpgm/pgm/source.c:2054:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy (STATE(skb)->pgm_header->pgm_gsi, &sock->tsi.gsi, sizeof(pgm_gsi_t));
data/libpgm-5.3.128~dfsg/openpgm/pgm/source.c:2328:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy (STATE(skb)->pgm_header->pgm_gsi, &sock->tsi.gsi, sizeof(pgm_gsi_t));
data/libpgm-5.3.128~dfsg/openpgm/pgm/source_unittest.c:108:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy (&sock->tsi, &tsi, sizeof(pgm_tsi_t));
data/libpgm-5.3.128~dfsg/openpgm/pgm/source_unittest.c:140:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy (skb->data, source, sizeof(source));
data/libpgm-5.3.128~dfsg/openpgm/pgm/source_unittest.c:152:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy (skb->data, source, sizeof(source));
data/libpgm-5.3.128~dfsg/openpgm/pgm/source_unittest.c:169:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy (skb->data, source, sizeof(source));
data/libpgm-5.3.128~dfsg/openpgm/pgm/source_unittest.c:483:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char saddr[INET6_ADDRSTRLEN];
data/libpgm-5.3.128~dfsg/openpgm/pgm/string.c:55:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy (new_str, str, length);
data/libpgm-5.3.128~dfsg/openpgm/pgm/string.c:318:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy (string->str + pos, val, len);
data/libpgm-5.3.128~dfsg/openpgm/pgm/string.c:486:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy (string->str + string->len, buf, len + 1);
data/libpgm-5.3.128~dfsg/openpgm/pgm/test/app.c:140:22:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
		case 's':	g_port = atoi (optarg); break;
data/libpgm-5.3.128~dfsg/openpgm/pgm/test/app.c:578:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char buffer[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/test/app.c:579:3:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
		sprintf (buffer, "%d", heartbeat_spm[0]);
data/libpgm-5.3.128~dfsg/openpgm/pgm/test/app.c:581:4:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
			char t[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/test/app.c:582:4:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
			sprintf (t, ", %d", heartbeat_spm[i]);
data/libpgm-5.3.128~dfsg/openpgm/pgm/test/app.c:612:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char buffer[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/test/app.c:654:4:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
			char group[INET6_ADDRSTRLEN];
data/libpgm-5.3.128~dfsg/openpgm/pgm/test/app.c:663:4:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
			char group[INET6_ADDRSTRLEN];
data/libpgm-5.3.128~dfsg/openpgm/pgm/test/async.c:170:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
				memcpy (dst, skb->data, skb->len);
data/libpgm-5.3.128~dfsg/openpgm/pgm/test/async.c:569:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy (data, event->data, *bytes_read);
data/libpgm-5.3.128~dfsg/openpgm/pgm/test/async.c:580:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy (data, event->data, event->len);
data/libpgm-5.3.128~dfsg/openpgm/pgm/test/dump-json.c:484:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char s[INET6_ADDRSTRLEN];
data/libpgm-5.3.128~dfsg/openpgm/pgm/test/dump-json.c:923:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char s[INET6_ADDRSTRLEN];
data/libpgm-5.3.128~dfsg/openpgm/pgm/test/dump-json.c:1192:14:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
static const char *opx_text[4] = {
data/libpgm-5.3.128~dfsg/openpgm/pgm/test/dump-json.c:1244:4:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
			char sqns[1024] = "";
data/libpgm-5.3.128~dfsg/openpgm/pgm/test/dump-json.c:1247:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
				char sqn[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/test/monitor.c:188:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char b[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/test/monitor.c:358:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char buffer[4096];
data/libpgm-5.3.128~dfsg/openpgm/pgm/test/sim.c:156:22:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
		case 's':	g_port = atoi (optarg); break;
data/libpgm-5.3.128~dfsg/openpgm/pgm/test/sim.c:331:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char errbuf[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/test/sim.c:350:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char errbuf[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/test/sim.c:364:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char errbuf[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/test/sim.c:382:4:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
			char errbuf[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/test/sim.c:391:4:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
			char errbuf[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/test/sim.c:400:4:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
			char errbuf[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/test/sim.c:462:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy (&peer->tsi, &skb->tsi, sizeof(pgm_tsi_t));
data/libpgm-5.3.128~dfsg/openpgm/pgm/test/sim.c:464:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy (&peer->local_nla, &src_addr, src_addr_len);
data/libpgm-5.3.128~dfsg/openpgm/pgm/test/sim.c:517:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy (&sock->tsi, &sockaddr->sa_addr, sizeof(pgm_tsi_t));
data/libpgm-5.3.128~dfsg/openpgm/pgm/test/sim.c:572:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
				char errbuf[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/test/sim.c:588:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
				char errbuf[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/test/sim.c:635:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy (&recv_addr2.sa, &recv_addr.sa, pgm_sockaddr_len (&recv_addr.sa));
data/libpgm-5.3.128~dfsg/openpgm/pgm/test/sim.c:642:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char errbuf[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/test/sim.c:643:17:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
                char addr[INET6_ADDRSTRLEN];
data/libpgm-5.3.128~dfsg/openpgm/pgm/test/sim.c:655:17:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
                char s[INET6_ADDRSTRLEN];
data/libpgm-5.3.128~dfsg/openpgm/pgm/test/sim.c:678:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy (&send_with_router_alert_addr, &send_addr, pgm_sockaddr_len ((struct sockaddr*)&send_addr));
data/libpgm-5.3.128~dfsg/openpgm/pgm/test/sim.c:684:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char errbuf[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/test/sim.c:685:17:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
                char addr[INET6_ADDRSTRLEN];
data/libpgm-5.3.128~dfsg/openpgm/pgm/test/sim.c:704:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy (&send_addr, result->ai_addr, result->ai_addrlen);
data/libpgm-5.3.128~dfsg/openpgm/pgm/test/sim.c:713:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy (&send_addr, result->ai_addr, result->ai_addrlen);
data/libpgm-5.3.128~dfsg/openpgm/pgm/test/sim.c:718:17:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
                char s[INET6_ADDRSTRLEN];
data/libpgm-5.3.128~dfsg/openpgm/pgm/test/sim.c:728:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char errbuf[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/test/sim.c:729:17:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
                char addr[INET6_ADDRSTRLEN];
data/libpgm-5.3.128~dfsg/openpgm/pgm/test/sim.c:741:17:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
                char s[INET6_ADDRSTRLEN];
data/libpgm-5.3.128~dfsg/openpgm/pgm/test/sim.c:747:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy (&sock->send_addr, &send_addr, pgm_sockaddr_len ((struct sockaddr*)&send_addr));
data/libpgm-5.3.128~dfsg/openpgm/pgm/test/sim.c:1006:17:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
                char buffer[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/test/sim.c:1007:17:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
                sprintf (buffer, "%d", heartbeat_spm[0]);
data/libpgm-5.3.128~dfsg/openpgm/pgm/test/sim.c:1009:25:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
                        char t[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/test/sim.c:1010:25:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
                        sprintf (t, ", %d", heartbeat_spm[i]);
data/libpgm-5.3.128~dfsg/openpgm/pgm/test/sim.c:1040:9:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
        char buffer[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/test/sim.c:1085:25:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
                        char group[INET6_ADDRSTRLEN];
data/libpgm-5.3.128~dfsg/openpgm/pgm/test/sim.c:1094:25:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
                        char group[INET6_ADDRSTRLEN];
data/libpgm-5.3.128~dfsg/openpgm/pgm/test/sim.c:1217:17:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
                memcpy (skb->pgm_header->pgm_gsi, &sock->tsi.gsi, sizeof(pgm_gsi_t));
data/libpgm-5.3.128~dfsg/openpgm/pgm/test/sim.c:1457:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy (header->pgm_gsi, &sock->tsi.gsi, sizeof(pgm_gsi_t));
data/libpgm-5.3.128~dfsg/openpgm/pgm/test/sim.c:1468:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy (data + 1, string, count);
data/libpgm-5.3.128~dfsg/openpgm/pgm/test/sim.c:1564:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy (header->pgm_gsi, &sock->tsi.gsi, sizeof(pgm_gsi_t));
data/libpgm-5.3.128~dfsg/openpgm/pgm/test/sim.c:1634:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy (header->pgm_gsi, &sock->tsi.gsi, sizeof(pgm_gsi_t));
data/libpgm-5.3.128~dfsg/openpgm/pgm/test/sim.c:1712:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy (&peer_nla, &peer->local_nla, sizeof(struct sockaddr_storage));
data/libpgm-5.3.128~dfsg/openpgm/pgm/test/sim.c:1723:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy (header->pgm_gsi, peer_gsi, sizeof(pgm_gsi_t));
data/libpgm-5.3.128~dfsg/openpgm/pgm/test/sim.c:1806:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy (header->pgm_gsi, &sock->tsi.gsi, sizeof(pgm_gsi_t));
data/libpgm-5.3.128~dfsg/openpgm/pgm/test/sim.c:1809:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy (&peer_nla, &peer->nla, sizeof(struct sockaddr_storage));
data/libpgm-5.3.128~dfsg/openpgm/pgm/test/sim.c:1899:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy (header->pgm_gsi, &peer->tsi.gsi, sizeof(pgm_gsi_t));
data/libpgm-5.3.128~dfsg/openpgm/pgm/test/sim.c:1903:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy (&peer_nla, &peer->nla, sizeof(struct sockaddr_storage));
data/libpgm-5.3.128~dfsg/openpgm/pgm/test/sim.c:2311:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
				memcpy (string + (i * src_len), str + pmatch[3].rm_so, src_len);
data/libpgm-5.3.128~dfsg/openpgm/pgm/thread.c:51:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
				char errbuf[1024]; \
data/libpgm-5.3.128~dfsg/openpgm/pgm/thread.c:63:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
				char errbuf[1024]; \
data/libpgm-5.3.128~dfsg/openpgm/pgm/time.c:359:4:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
			char winstr[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/time.c:378:14:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
		FILE	*fp = fopen ("/proc/cpuinfo", "r");
data/libpgm-5.3.128~dfsg/openpgm/pgm/time.c:381:4:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
			char buffer[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/time.c:386:23:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
					if (p) tsc_khz = atoi (p + 1) * 1000;
data/libpgm-5.3.128~dfsg/openpgm/pgm/time.c:415:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
				char szProcessorBrandString[48];
data/libpgm-5.3.128~dfsg/openpgm/pgm/time.c:430:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
				char winstr[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/time.c:482:14:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
			tsc_khz = atoi (rdtsc_frequency) * 1000;
data/libpgm-5.3.128~dfsg/openpgm/pgm/time.c:674:11:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
	rtc_fd = open ("/dev/rtc", O_RDONLY);
data/libpgm-5.3.128~dfsg/openpgm/pgm/time.c:676:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char errbuf[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/time.c:685:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char errbuf[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/time.c:695:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char errbuf[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/time.c:751:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy (&aligned_ft, &ft, sizeof (int64_t));
data/libpgm-5.3.128~dfsg/openpgm/pgm/time.c:818:13:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
	FILE	*fp = fopen ("/proc/cpuinfo", "r");
data/libpgm-5.3.128~dfsg/openpgm/pgm/time.c:819:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char	buffer[1024], *flags = NULL;
data/libpgm-5.3.128~dfsg/openpgm/pgm/time.c:828:26:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
				if (p) tmp_tsc_mhz = atoi (p + 1) * 1000;
data/libpgm-5.3.128~dfsg/openpgm/pgm/time.c:931:12:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
	hpet_fd = open("/dev/hpet", O_RDONLY);
data/libpgm-5.3.128~dfsg/openpgm/pgm/time.c:933:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char errbuf[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/time.c:944:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char errbuf[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/time_unittest.c:139:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char stime[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/timer.c:152:1:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
char nows[1024];
data/libpgm-5.3.128~dfsg/openpgm/pgm/tsi.c:69:9:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	static char buf[PGM_TSISTRLEN];
data/libpgm-5.3.128~dfsg/openpgm/pgm/tsi_unittest.c:91:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char buf[PGM_TSISTRLEN];
data/libpgm-5.3.128~dfsg/openpgm/pgm/tsi_unittest.c:99:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char buf[PGM_TSISTRLEN];
data/libpgm-5.3.128~dfsg/openpgm/pgm/txw.c:624:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy (skb->pgm_header->pgm_gsi, &window->tsi->gsi, sizeof(pgm_gsi_t));
data/libpgm-5.3.128~dfsg/openpgm/pgm/txw_unittest.c:297:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char buffer[1500];
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/async.c:412:25:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
		while (sizeof(tmp) == read (async->notify_pipe[0], &tmp, sizeof(tmp)));
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/blocksyncrecv.c:345:2:  [1] (buffer) strncpy:
  Easily used incorrectly; doesn't always \0-terminate or check for invalid
  pointers [MS-banned] (CWE-120).
	strncpy (buf, data, buflen);
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/enonblocksyncrecv.c:376:2:  [1] (buffer) strncpy:
  Easily used incorrectly; doesn't always \0-terminate or check for invalid
  pointers [MS-banned] (CWE-120).
	strncpy (buf, (const char*)data, buflen);
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/enonblocksyncrecvmsg.c:378:3:  [1] (buffer) strncpy:
  Easily used incorrectly; doesn't always \0-terminate or check for invalid
  pointers [MS-banned] (CWE-120).
		strncpy (buf, (const char*)skb->data, buflen);
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/enonblocksyncrecvmsgv.c:388:3:  [1] (buffer) strncpy:
  Easily used incorrectly; doesn't always \0-terminate or check for invalid
  pointers [MS-banned] (CWE-120).
		strncpy (buf, (const char*)pskb->data, buflen);
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/getopt_long.c:188:23:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
			current_argv_len = strlen(current_argv);
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/getopt_long.c:194:8:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
			if (strlen(long_options[i].name) == (unsigned)current_argv_len) { 
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/pgmping.cc:951:4:  [1] (obsolete) usleep:
  This C routine is considered obsolete (as opposed to the shell command by
  the same name). The interaction of this function with SIGALRM and other
  timer functions such as sleep(), alarm(), setitimer(), and nanosleep() is
  unspecified (CWE-676). Use nanosleep(2) or setitimer(2) instead.
			usleep (usec);
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/pgmrecv.c:643:3:  [1] (buffer) strncpy:
  Easily used incorrectly; doesn't always \0-terminate or check for invalid
  pointers [MS-banned] (CWE-120).
		strncpy (buf, (const char*)pskb->data, buflen);
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/pgmsend.c:166:55:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
			const int status = pgm_send (g_sock, argv[optind], strlen(argv[optind]) + 1, NULL);
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/pgmtop.c:372:3:  [1] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant character.
		strcpy (prefix, "G");
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/pgmtop.c:375:3:  [1] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant character.
		strcpy (prefix, "M");
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/pgmtop.c:378:3:  [1] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant character.
		strcpy (prefix, "K");
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/pgmtop.c:552:66:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	g_status_list = g_list_append (g_status_list, g_memdup (buffer, strlen(buffer)+1));
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/pnonblocksyncrecv.c:375:2:  [1] (buffer) strncpy:
  Easily used incorrectly; doesn't always \0-terminate or check for invalid
  pointers [MS-banned] (CWE-120).
	strncpy (buf, (const char*)data, buflen);
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/purinrecv.c:492:2:  [1] (buffer) strncpy:
  Easily used incorrectly; doesn't always \0-terminate or check for invalid
  pointers [MS-banned] (CWE-120).
	strncpy (buf, (const char*)data, buflen);
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/purinrecvcc.cc:444:2:  [1] (buffer) strncpy:
  Easily used incorrectly; doesn't always \0-terminate or check for invalid
  pointers [MS-banned] (CWE-120).
	strncpy (buf, (char*)data, buflen);
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/purinsend.c:151:53:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
			const int status = pgm_send (sock, argv[optind], strlen (argv[optind]) + 1, NULL);
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/purinsendcc.cc:150:49:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
			const int status = sock->send (argv[optind], strlen (argv[optind]) + 1, NULL);
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/shortcakerecv.c:439:2:  [1] (buffer) strncpy:
  Easily used incorrectly; doesn't always \0-terminate or check for invalid
  pointers [MS-banned] (CWE-120).
	strncpy (buf, (const char*)data, buflen);
data/libpgm-5.3.128~dfsg/openpgm/pgm/examples/snonblocksyncrecv.c:433:2:  [1] (buffer) strncpy:
  Easily used incorrectly; doesn't always \0-terminate or check for invalid
  pointers [MS-banned] (CWE-120).
	strncpy (buf, (const char*)data, buflen);
data/libpgm-5.3.128~dfsg/openpgm/pgm/getifaddrs.c:606:8:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
			if (strlen (pIPAddr->IpAddress.String) == 0)
data/libpgm-5.3.128~dfsg/openpgm/pgm/getifaddrs.c:628:8:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
			if (strlen (pIPAddr->IpAddress.String) == 0)
data/libpgm-5.3.128~dfsg/openpgm/pgm/getnetbyname.c:238:8:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	len = strlen (ne->n_name) + 1;
data/libpgm-5.3.128~dfsg/openpgm/pgm/getnetbyname.c:245:28:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		const size_t alias_len = strlen (*r) + 1;
data/libpgm-5.3.128~dfsg/openpgm/pgm/getnodeaddr_unittest.c:145:39:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		else if (strncmp (tokens[i], "ip=", strlen("ip=")) == 0) {
data/libpgm-5.3.128~dfsg/openpgm/pgm/getnodeaddr_unittest.c:146:35:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
			const char* addr = tokens[i] + strlen("ip=");
data/libpgm-5.3.128~dfsg/openpgm/pgm/getnodeaddr_unittest.c:149:44:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		else if (strncmp (tokens[i], "netmask=", strlen("netmask=")) == 0) {
data/libpgm-5.3.128~dfsg/openpgm/pgm/getnodeaddr_unittest.c:150:35:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
			const char* addr = tokens[i] + strlen("netmask=");
data/libpgm-5.3.128~dfsg/openpgm/pgm/getnodeaddr_unittest.c:153:42:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		else if (strncmp (tokens[i], "scope=", strlen("scope=")) == 0) {
data/libpgm-5.3.128~dfsg/openpgm/pgm/getnodeaddr_unittest.c:154:36:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
			const char* scope = tokens[i] + strlen("scope=");
data/libpgm-5.3.128~dfsg/openpgm/pgm/getnodeaddr_unittest.c:496:17:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	if (len < (1 + strlen (mock_hostname))) {
data/libpgm-5.3.128~dfsg/openpgm/pgm/getnodeaddr_unittest.c:505:2:  [1] (buffer) strncpy:
  Easily used incorrectly; doesn't always \0-terminate or check for invalid
  pointers [MS-banned] (CWE-120).
	strncpy (name, mock_hostname, len);
data/libpgm-5.3.128~dfsg/openpgm/pgm/getprotobyname.c:77:8:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	len = strlen (pe->p_name) + 1;
data/libpgm-5.3.128~dfsg/openpgm/pgm/getprotobyname.c:84:28:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		const size_t alias_len = strlen (*r) + 1;
data/libpgm-5.3.128~dfsg/openpgm/pgm/gsi.c:73:12:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		length = strlen (str);
data/libpgm-5.3.128~dfsg/openpgm/pgm/gsi_unittest.c:103:2:  [1] (buffer) strncpy:
  Easily used incorrectly; doesn't always \0-terminate or check for invalid
  pointers [MS-banned] (CWE-120).
	strncpy (name, mock_hostname, len);
data/libpgm-5.3.128~dfsg/openpgm/pgm/gsi_unittest.cc:137:6:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	if (strlen (hostname) > 63) /* HOST_NAME_MAX */
data/libpgm-5.3.128~dfsg/openpgm/pgm/gsi_unittest.cc:148:2:  [1] (buffer) strncpy:
  Easily used incorrectly; doesn't always \0-terminate or check for invalid
  pointers [MS-banned] (CWE-120).
	strncpy (arg0, hostname, arg1);
data/libpgm-5.3.128~dfsg/openpgm/pgm/http.c:61:10:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
#	define read		_read
data/libpgm-5.3.128~dfsg/openpgm/pgm/http.c:535:44:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	if (0 != memcmp (connection->buf, "GET ", strlen("GET "))) {
data/libpgm-5.3.128~dfsg/openpgm/pgm/http.c:541:40:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	char* request_uri = connection->buf + strlen("GET ");
data/libpgm-5.3.128~dfsg/openpgm/pgm/http.c:870:38:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	http_set_response (connection, buf, strlen (buf));
data/libpgm-5.3.128~dfsg/openpgm/pgm/http.c:881:63:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
        http_set_static_response (connection, WWW_ROBOTS_TXT, strlen(WWW_ROBOTS_TXT));
data/libpgm-5.3.128~dfsg/openpgm/pgm/http.c:892:61:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
        http_set_static_response (connection, WWW_BASE_CSS, strlen(WWW_BASE_CSS));
data/libpgm-5.3.128~dfsg/openpgm/pgm/http.c:902:6:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	if (strlen (path) > 1) {
data/libpgm-5.3.128~dfsg/openpgm/pgm/http.c:1100:54:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	http_set_static_response (connection, WWW_404_HTML, strlen(WWW_404_HTML));
data/libpgm-5.3.128~dfsg/openpgm/pgm/if.c:64:54:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
#	define IR_STRLEN	(IF_NAMESIZE + INET6_ADDRSTRLEN + strlen ("ir_name: \"\", ir_flags: \"\", ir_interface: , ir_addr: \"\"") + strlen ("4294967295") + strlen ("UP,LOOPBACK,BROADCAST,MULTICAST"))
data/libpgm-5.3.128~dfsg/openpgm/pgm/if.c:64:128:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
#	define IR_STRLEN	(IF_NAMESIZE + INET6_ADDRSTRLEN + strlen ("ir_name: \"\", ir_flags: \"\", ir_interface: , ir_addr: \"\"") + strlen ("4294967295") + strlen ("UP,LOOPBACK,BROADCAST,MULTICAST"))
data/libpgm-5.3.128~dfsg/openpgm/pgm/if.c:64:152:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
#	define IR_STRLEN	(IF_NAMESIZE + INET6_ADDRSTRLEN + strlen ("ir_name: \"\", ir_flags: \"\", ir_interface: , ir_addr: \"\"") + strlen ("4294967295") + strlen ("UP,LOOPBACK,BROADCAST,MULTICAST"))
data/libpgm-5.3.128~dfsg/openpgm/pgm/if.c:407:28:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		const size_t ifnamelen = strlen (ifname);
data/libpgm-5.3.128~dfsg/openpgm/pgm/if.c:1026:27:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		const size_t grouplen = strlen(group);
data/libpgm-5.3.128~dfsg/openpgm/pgm/if.c:1909:22:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	const char *e = p + strlen(network);
data/libpgm-5.3.128~dfsg/openpgm/pgm/if_unittest.c:206:39:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		else if (strncmp (tokens[i], "ip=", strlen("ip=")) == 0) {
data/libpgm-5.3.128~dfsg/openpgm/pgm/if_unittest.c:207:35:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
			const char* addr = tokens[i] + strlen("ip=");
data/libpgm-5.3.128~dfsg/openpgm/pgm/if_unittest.c:210:44:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		else if (strncmp (tokens[i], "netmask=", strlen("netmask=")) == 0) {
data/libpgm-5.3.128~dfsg/openpgm/pgm/if_unittest.c:211:35:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
			const char* addr = tokens[i] + strlen("netmask=");
data/libpgm-5.3.128~dfsg/openpgm/pgm/if_unittest.c:214:42:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		else if (strncmp (tokens[i], "scope=", strlen("scope=")) == 0) {
data/libpgm-5.3.128~dfsg/openpgm/pgm/if_unittest.c:215:36:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
			const char* scope = tokens[i] + strlen("scope=");
data/libpgm-5.3.128~dfsg/openpgm/pgm/if_unittest.c:474:24:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
				if (hostlen < (1 + strlen(_host->canonical_hostname)))
data/libpgm-5.3.128~dfsg/openpgm/pgm/if_unittest.c:480:5:  [1] (buffer) strncpy:
  Easily used incorrectly; doesn't always \0-terminate or check for invalid
  pointers [MS-banned] (CWE-120).
				strncpy (host, _host->canonical_hostname, hostlen);
data/libpgm-5.3.128~dfsg/openpgm/pgm/if_unittest.c:497:4:  [1] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused). Risk is low because the
  source is a constant character.
			strcat (host, "%");
data/libpgm-5.3.128~dfsg/openpgm/pgm/if_unittest.c:612:17:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	if (len < (1 + strlen (mock_hostname))) {
data/libpgm-5.3.128~dfsg/openpgm/pgm/if_unittest.c:621:2:  [1] (buffer) strncpy:
  Easily used incorrectly; doesn't always \0-terminate or check for invalid
  pointers [MS-banned] (CWE-120).
	strncpy (name, mock_hostname, len);
data/libpgm-5.3.128~dfsg/openpgm/pgm/if_unittest.c:1005:66:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	if (AF_INET6 == mock_family && 0 == strncmp (s, MOCK_INTERFACE, strlen (MOCK_INTERFACE)))
data/libpgm-5.3.128~dfsg/openpgm/pgm/include/impl/notify.h:250:23:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
	return (sizeof(u) == read (notify->eventfd, &u, sizeof(u)));
data/libpgm-5.3.128~dfsg/openpgm/pgm/include/impl/notify.h:255:25:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
	return (sizeof(buf) == read (notify->pipefd[0], &buf, sizeof(buf)));
data/libpgm-5.3.128~dfsg/openpgm/pgm/include/impl/notify.h:274:22:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
	while (sizeof(u) == read (notify->eventfd, &u, sizeof(u)));
data/libpgm-5.3.128~dfsg/openpgm/pgm/include/impl/notify.h:279:24:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
	while (sizeof(buf) == read (notify->pipefd[0], &buf, sizeof(buf)));
data/libpgm-5.3.128~dfsg/openpgm/pgm/include/impl/security.h:83:3:  [1] (buffer) strncpy:
  Easily used incorrectly; doesn't always \0-terminate or check for invalid
  pointers [MS-banned] (CWE-120).
		strncpy (dest, src, size);
data/libpgm-5.3.128~dfsg/openpgm/pgm/include/impl/security.h:88:2:  [1] (buffer) strncpy:
  Easily used incorrectly; doesn't always \0-terminate or check for invalid
  pointers [MS-banned] (CWE-120).
	strncpy (dest, src, count + 1);
data/libpgm-5.3.128~dfsg/openpgm/pgm/include/impl/security.h:221:11:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	*count = strlen (*buffer) + 1;
data/libpgm-5.3.128~dfsg/openpgm/pgm/indextoaddr_unittest.c:107:39:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		else if (strncmp (tokens[i], "ip=", strlen("ip=")) == 0) {
data/libpgm-5.3.128~dfsg/openpgm/pgm/indextoaddr_unittest.c:108:35:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
			const char* addr = tokens[i] + strlen("ip=");
data/libpgm-5.3.128~dfsg/openpgm/pgm/indextoaddr_unittest.c:111:44:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		else if (strncmp (tokens[i], "netmask=", strlen("netmask=")) == 0) {
data/libpgm-5.3.128~dfsg/openpgm/pgm/indextoaddr_unittest.c:112:35:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
			const char* addr = tokens[i] + strlen("netmask=");
data/libpgm-5.3.128~dfsg/openpgm/pgm/indextoaddr_unittest.c:115:42:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		else if (strncmp (tokens[i], "scope=", strlen("scope=")) == 0) {
data/libpgm-5.3.128~dfsg/openpgm/pgm/indextoaddr_unittest.c:116:36:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
			const char* scope = tokens[i] + strlen("scope=");
data/libpgm-5.3.128~dfsg/openpgm/pgm/log.c:105:15:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	v->iov_len = strlen (tbuf);
data/libpgm-5.3.128~dfsg/openpgm/pgm/log.c:108:15:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	v->iov_len = strlen (log_hostname);
data/libpgm-5.3.128~dfsg/openpgm/pgm/log.c:115:16:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		v->iov_len = strlen (log_domain);
data/libpgm-5.3.128~dfsg/openpgm/pgm/log.c:122:15:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	v->iov_len = strlen (message);
data/libpgm-5.3.128~dfsg/openpgm/pgm/log.c:134:31:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	_write (stdout_fileno, tbuf, strlen (tbuf));
data/libpgm-5.3.128~dfsg/openpgm/pgm/log.c:135:39:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	_write (stdout_fileno, log_hostname, strlen (log_hostname));
data/libpgm-5.3.128~dfsg/openpgm/pgm/log.c:138:38:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		_write (stdout_fileno, log_domain, strlen (log_domain));
data/libpgm-5.3.128~dfsg/openpgm/pgm/log.c:141:34:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	_write (stdout_fileno, message, strlen (message));
data/libpgm-5.3.128~dfsg/openpgm/pgm/md5_unittest.c:127:39:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	pgm_md5_process_bytes (&ctx, buffer, strlen(buffer)+1);
data/libpgm-5.3.128~dfsg/openpgm/pgm/mem.c:104:18:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
				q = string + strlen (string);
data/libpgm-5.3.128~dfsg/openpgm/pgm/messages.c:189:37:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		_write (stdoutfd, tbuf, (unsigned)strlen (tbuf));
data/libpgm-5.3.128~dfsg/openpgm/pgm/messages.c:193:38:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		(void) write (STDOUT_FILENO, tbuf, strlen (tbuf));
data/libpgm-5.3.128~dfsg/openpgm/pgm/nametoindex.c:132:8:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
			if (strlen (pIPAddr->IpAddress.String) == 0)
data/libpgm-5.3.128~dfsg/openpgm/pgm/net_unittest.c:139:4:  [1] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant character.
			strcpy (s, "0");
data/libpgm-5.3.128~dfsg/openpgm/pgm/pgmMIB.c:276:69:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	snmp_set_var_typed_value (idx, ASN_OCTET_STR, (const u_char*)&gsi, strlen (gsi));
data/libpgm-5.3.128~dfsg/openpgm/pgm/pgmMIB.c:554:69:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	snmp_set_var_typed_value (idx, ASN_OCTET_STR, (const u_char*)&gsi, strlen (gsi));
data/libpgm-5.3.128~dfsg/openpgm/pgm/pgmMIB.c:917:69:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	snmp_set_var_typed_value (idx, ASN_OCTET_STR, (const u_char*)&gsi, strlen (gsi));
data/libpgm-5.3.128~dfsg/openpgm/pgm/pgmMIB.c:1490:69:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	snmp_set_var_typed_value (idx, ASN_OCTET_STR, (const u_char*)&gsi, strlen (gsi));
data/libpgm-5.3.128~dfsg/openpgm/pgm/pgmMIB.c:1851:69:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	snmp_set_var_typed_value (idx, ASN_OCTET_STR, (const u_char*)&gsi, strlen (gsi));
data/libpgm-5.3.128~dfsg/openpgm/pgm/pgmMIB.c:2241:69:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	snmp_set_var_typed_value (idx, ASN_OCTET_STR, (const u_char*)&gsi, strlen (gsi));
data/libpgm-5.3.128~dfsg/openpgm/pgm/receiver.c:1228:21:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		char sequence[2 + strlen("4294967295")];
data/libpgm-5.3.128~dfsg/openpgm/pgm/recv_unittest.c:1531:20:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	pgm_skb_put (skb, strlen(source[0]) + 1);
data/libpgm-5.3.128~dfsg/openpgm/pgm/recv_unittest.c:1532:32:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	memcpy (skb->data, source[0], strlen(source[0]));
data/libpgm-5.3.128~dfsg/openpgm/pgm/recv_unittest.c:1539:20:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	pgm_skb_put (skb, strlen(source[1]) + 1);
data/libpgm-5.3.128~dfsg/openpgm/pgm/recv_unittest.c:1540:32:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	memcpy (skb->data, source[1], strlen(source[1]));
data/libpgm-5.3.128~dfsg/openpgm/pgm/recv_unittest.c:1547:20:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	pgm_skb_put (skb, strlen(source[2]) + 1);
data/libpgm-5.3.128~dfsg/openpgm/pgm/recv_unittest.c:1548:32:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	memcpy (skb->data, source[2], strlen(source[2]));
data/libpgm-5.3.128~dfsg/openpgm/pgm/recv_unittest.c:1557:23:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	fail_unless ((gsize)(strlen(source[0]) + 1) == bytes_read, "unexpected data length");
data/libpgm-5.3.128~dfsg/openpgm/pgm/recv_unittest.c:1561:23:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	fail_unless ((gsize)(strlen(source[1]) + 1) == bytes_read, "unexpected data length");
data/libpgm-5.3.128~dfsg/openpgm/pgm/recv_unittest.c:1565:23:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	fail_unless ((gsize)(strlen(source[2]) + 1) == bytes_read, "unexpected data length");
data/libpgm-5.3.128~dfsg/openpgm/pgm/reed_solomon_unittest.c:118:29:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	const guint16 source_len = strlen (source);
data/libpgm-5.3.128~dfsg/openpgm/pgm/reed_solomon_unittest.c:157:29:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	const guint16 source_len = strlen (source);
data/libpgm-5.3.128~dfsg/openpgm/pgm/reed_solomon_unittest.c:214:29:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	const guint16 source_len = strlen (source);
data/libpgm-5.3.128~dfsg/openpgm/pgm/signal.c:142:27:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
	const gsize bytes_read = read (g_io_channel_unix_get_fd (source), &signum, sizeof(signum));
data/libpgm-5.3.128~dfsg/openpgm/pgm/source.c:978:22:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		char sequence[ 2 + strlen("4294967295") ];
data/libpgm-5.3.128~dfsg/openpgm/pgm/string.c:53:12:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		length = strlen (str) + 1;
data/libpgm-5.3.128~dfsg/openpgm/pgm/string.c:172:12:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	len = 1 + strlen (src);
data/libpgm-5.3.128~dfsg/openpgm/pgm/string.c:176:10:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		len += strlen (s);
data/libpgm-5.3.128~dfsg/openpgm/pgm/string.c:222:32:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		const size_t delimiter_len = strlen (delimiter);   
data/libpgm-5.3.128~dfsg/openpgm/pgm/string.c:303:9:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		len = strlen (val);
data/libpgm-5.3.128~dfsg/openpgm/pgm/string.c:396:22:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		const size_t len = strlen (init);
data/libpgm-5.3.128~dfsg/openpgm/pgm/test/app.c:305:39:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	sess->name = g_memdup (session_name, strlen(session_name)+1);
data/libpgm-5.3.128~dfsg/openpgm/pgm/test/app.c:709:20:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	gsize stringlen = strlen(string) + 1;
data/libpgm-5.3.128~dfsg/openpgm/pgm/test/async.c:493:24:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
	while (sizeof(tmp) == read (async->commit_pipe[0], &tmp, sizeof(tmp)));
data/libpgm-5.3.128~dfsg/openpgm/pgm/test/async.c:553:25:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
		while (sizeof(tmp) == read (async->commit_pipe[0], &tmp, sizeof(tmp)));
data/libpgm-5.3.128~dfsg/openpgm/pgm/test/monitor.c:413:38:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		} else if (strncmp(str, "filter ", strlen("filter ")) == 0) {
data/libpgm-5.3.128~dfsg/openpgm/pgm/test/sim.c:883:39:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	sess->name = g_memdup (session_name, strlen(session_name)+1);
data/libpgm-5.3.128~dfsg/openpgm/pgm/test/sim.c:1325:20:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	gsize stringlen = strlen(string) + 1;
data/libpgm-5.3.128~dfsg/openpgm/pgm/test/sim.c:1447:14:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	int count = strlen(string) + 1;
data/libpgm-5.3.128~dfsg/openpgm/pgm/test/sim.c:1516:18:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	parity_length = strlen(*src) + 1;
data/libpgm-5.3.128~dfsg/openpgm/pgm/test/sim.c:1523:23:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		guint tsdu_length = strlen(src[i]) + 1;
data/libpgm-5.3.128~dfsg/openpgm/pgm/test/sim.c:1542:24:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
			guint tsdu_length = strlen(src[i]) + 1;
data/libpgm-5.3.128~dfsg/openpgm/pgm/test/sim.c:1544:4:  [1] (buffer) strncpy:
  Easily used incorrectly; doesn't always \0-terminate or check for invalid
  pointers [MS-banned] (CWE-120).
			strncpy (new_string, src[i], parity_length);
data/libpgm-5.3.128~dfsg/openpgm/pgm/time.c:731:36:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
	pgm_warn_if_fail (sizeof(data) == read (rtc_fd, &data, sizeof(data)));

ANALYSIS SUMMARY:

Hits = 907
Lines analyzed = 87730 in approximately 2.52 seconds (34754 lines/second)
Physical Source Lines of Code (SLOC) = 66822
Hits@level = [0] 567 [1] 132 [2] 692 [3]  38 [4]  45 [5]   0
Hits@level+ = [0+] 1474 [1+] 907 [2+] 775 [3+]  83 [4+]  45 [5+]   0
Hits/KSLOC@level+ = [0+] 22.0586 [1+] 13.5734 [2+] 11.598 [3+] 1.24211 [4+] 0.673431 [5+]   0
Dot directories skipped = 1 (--followdotdir overrides)
Minimum risk level = 1
Not every hit is necessarily a security vulnerability.
There may be other security vulnerabilities; review your code!
See 'Secure Programming HOWTO'
(https://dwheeler.com/secure-programs) for more information.