Flawfinder version 2.0.10, (C) 2001-2019 David A. Wheeler. Number of rules (primarily dangerous function names) in C/C++ ruleset: 223 Examining data/libtk-tablematrix-perl-1.26/pTk/tkTable.c Examining data/libtk-tablematrix-perl-1.26/pTk/tkTable.h Examining data/libtk-tablematrix-perl-1.26/pTk/tkTableversion.h Examining data/libtk-tablematrix-perl-1.26/pTk/tkTableCmds.c Examining data/libtk-tablematrix-perl-1.26/pTk/tkTableCellSort.c Examining data/libtk-tablematrix-perl-1.26/pTk/tkTableTag.c Examining data/libtk-tablematrix-perl-1.26/pTk/tkTableCell.c Examining data/libtk-tablematrix-perl-1.26/pTk/mm.h Examining data/libtk-tablematrix-perl-1.26/pTk/tkTableWin.c Examining data/libtk-tablematrix-perl-1.26/pTk/tkTableEdit.c Examining data/libtk-tablematrix-perl-1.26/pTk/version.h Examining data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkTable.c Examining data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkTable.h Examining data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkTableversion.h Examining data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/mac_tkTable_prefix.h Examining data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkTableInitScript.h Examining data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkTableCmds.c Examining data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkTablePs.c Examining data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkTableCellSort.c Examining data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkTableTag.c Examining data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/confdefs.h Examining data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkAppInit.c Examining data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkTableCell.c Examining data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/mm.h Examining data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkTableWin.c Examining data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkTableEdit.c Examining data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/version.h Examining data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkTableUtil.c Examining data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkTable.c Examining data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkTable.h Examining data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkTableversion.h Examining data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/mac_tkTable_prefix.h Examining data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkTableInitScript.h Examining data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkTableCmds.c Examining data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkTablePs.c Examining data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkTableCellSort.c Examining data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkTableTag.c Examining data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/confdefs.h Examining data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkAppInit.c Examining data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkTableCell.c Examining data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/mm.h Examining data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkTableWin.c Examining data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkTableEdit.c Examining data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/version.h Examining data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkTableUtil.c Examining data/libtk-tablematrix-perl-1.26/pTk/tkTableUtil.c FINAL RESULTS: data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkTable.c:1208:2: [4] (buffer) strcpy: Does not check for buffer overflows when copying to destination [MS-banned] (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy easily misused). strcpy(tablePtr->defaultTag.borderStr, data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkTable.c:2652:5: [4] (buffer) strcpy: Does not check for buffer overflows when copying to destination [MS-banned] (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy easily misused). strcpy(tablePtr->activeBuf, data); data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkTable.c:2741:6: [4] (buffer) strcpy: Does not check for buffer overflows when copying to destination [MS-banned] (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy easily misused). strcpy(tablePtr->activeBuf, data); data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkTable.c:2767:6: [4] (buffer) strcpy: Does not check for buffer overflows when copying to destination [MS-banned] (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy easily misused). strcpy(val, data); data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkTableCell.c:421:7: [4] (buffer) strcpy: Does not check for buffer overflows when copying to destination [MS-banned] (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy easily misused). strcpy(buf1, val); data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkTableCell.c:424:7: [4] (buffer) strcpy: Does not check for buffer overflows when copying to destination [MS-banned] (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy easily misused). strcpy(buf2, val); data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkTableCell.c:441:7: [4] (buffer) strcpy: Does not check for buffer overflows when copying to destination [MS-banned] (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy easily misused). strcpy(buf1, val); data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkTableCell.c:444:7: [4] (buffer) strcpy: Does not check for buffer overflows when copying to destination [MS-banned] (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy easily misused). strcpy(buf2, val); data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkTableCell.c:525:2: [4] (buffer) strcpy: Does not check for buffer overflows when copying to destination [MS-banned] (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy easily misused). strcpy(val, result); data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkTableCell.c:637:2: [4] (buffer) strcpy: Does not check for buffer overflows when copying to destination [MS-banned] (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy easily misused). strcpy(val, value); data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkTableCell.c:1177:5: [4] (buffer) strcpy: Does not check for buffer overflows when copying to destination [MS-banned] (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy easily misused). strcpy(dbuf, span); data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkTableCmds.c:729:2: [4] (buffer) strcpy: Does not check for buffer overflows when copying to destination [MS-banned] (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy easily misused). strcpy(tablePtr->activeBuf, value); data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkTableEdit.c:392:5: [4] (buffer) strcpy: Does not check for buffer overflows when copying to destination [MS-banned] (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy easily misused). strcpy(new + byteIndex, string + byteIndex + byteCount); data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkTableEdit.c:408:5: [4] (buffer) strcpy: Does not check for buffer overflows when copying to destination [MS-banned] (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy easily misused). strcpy(new+index, tablePtr->activeBuf+index+count); data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkTableEdit.c:488:5: [4] (buffer) strcpy: Does not check for buffer overflows when copying to destination [MS-banned] (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy easily misused). strcpy(new + byteIndex, value); data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkTableEdit.c:489:5: [4] (buffer) strcpy: Does not check for buffer overflows when copying to destination [MS-banned] (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy easily misused). strcpy(new + byteIndex + byteCount, string + byteIndex); data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkTableEdit.c:539:5: [4] (buffer) strcpy: Does not check for buffer overflows when copying to destination [MS-banned] (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy easily misused). strcpy(new+index, value); data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkTableEdit.c:540:5: [4] (buffer) strcpy: Does not check for buffer overflows when copying to destination [MS-banned] (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy easily misused). strcpy(new+index+newlen, (tablePtr->activeBuf)+index); data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkTablePs.c:749:2: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. sprintf(string, "%s%s\n", p, Tcl_GetHashKey(&psInfo.fontTable, hPtr)); data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkTablePs.c:777:2: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. sprintf(string, "%s%s\n", "%%IncludeResource: font ", data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkTablePs.c:881:3: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. sprintf(msg, "\n (generating Postscript for cell %s)", data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkTablePs.c:1299:5: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. sprintf(buffer, "] %d %g %g %s %d %d DrawCellText\n", data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkTableUtil.c:146:7: [4] (buffer) strcpy: Does not check for buffer overflows when copying to destination [MS-banned] (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy easily misused). strcpy(*borderStr, Tcl_GetString(value)); data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkTable.c:1208:2: [4] (buffer) strcpy: Does not check for buffer overflows when copying to destination [MS-banned] (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy easily misused). strcpy(tablePtr->defaultTag.borderStr, data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkTable.c:2652:5: [4] (buffer) strcpy: Does not check for buffer overflows when copying to destination [MS-banned] (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy easily misused). strcpy(tablePtr->activeBuf, data); data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkTable.c:2741:6: [4] (buffer) strcpy: Does not check for buffer overflows when copying to destination [MS-banned] (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy easily misused). strcpy(tablePtr->activeBuf, data); data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkTable.c:2767:6: [4] (buffer) strcpy: Does not check for buffer overflows when copying to destination [MS-banned] (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy easily misused). strcpy(val, data); data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkTableCell.c:421:7: [4] (buffer) strcpy: Does not check for buffer overflows when copying to destination [MS-banned] (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy easily misused). strcpy(buf1, val); data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkTableCell.c:424:7: [4] (buffer) strcpy: Does not check for buffer overflows when copying to destination [MS-banned] (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy easily misused). strcpy(buf2, val); data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkTableCell.c:441:7: [4] (buffer) strcpy: Does not check for buffer overflows when copying to destination [MS-banned] (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy easily misused). strcpy(buf1, val); data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkTableCell.c:444:7: [4] (buffer) strcpy: Does not check for buffer overflows when copying to destination [MS-banned] (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy easily misused). strcpy(buf2, val); data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkTableCell.c:525:2: [4] (buffer) strcpy: Does not check for buffer overflows when copying to destination [MS-banned] (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy easily misused). strcpy(val, result); data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkTableCell.c:637:2: [4] (buffer) strcpy: Does not check for buffer overflows when copying to destination [MS-banned] (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy easily misused). strcpy(val, value); data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkTableCell.c:1177:5: [4] (buffer) strcpy: Does not check for buffer overflows when copying to destination [MS-banned] (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy easily misused). strcpy(dbuf, span); data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkTableCmds.c:728:2: [4] (buffer) strcpy: Does not check for buffer overflows when copying to destination [MS-banned] (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy easily misused). strcpy(tablePtr->activeBuf, value); data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkTableEdit.c:392:5: [4] (buffer) strcpy: Does not check for buffer overflows when copying to destination [MS-banned] (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy easily misused). strcpy(new + byteIndex, string + byteIndex + byteCount); data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkTableEdit.c:408:5: [4] (buffer) strcpy: Does not check for buffer overflows when copying to destination [MS-banned] (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy easily misused). strcpy(new+index, tablePtr->activeBuf+index+count); data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkTableEdit.c:488:5: [4] (buffer) strcpy: Does not check for buffer overflows when copying to destination [MS-banned] (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy easily misused). strcpy(new + byteIndex, value); data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkTableEdit.c:489:5: [4] (buffer) strcpy: Does not check for buffer overflows when copying to destination [MS-banned] (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy easily misused). strcpy(new + byteIndex + byteCount, string + byteIndex); data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkTableEdit.c:539:5: [4] (buffer) strcpy: Does not check for buffer overflows when copying to destination [MS-banned] (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy easily misused). strcpy(new+index, value); data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkTableEdit.c:540:5: [4] (buffer) strcpy: Does not check for buffer overflows when copying to destination [MS-banned] (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy easily misused). strcpy(new+index+newlen, (tablePtr->activeBuf)+index); data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkTablePs.c:749:2: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. sprintf(string, "%s%s\n", p, Tcl_GetHashKey(&psInfo.fontTable, hPtr)); data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkTablePs.c:777:2: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. sprintf(string, "%s%s\n", "%%IncludeResource: font ", data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkTablePs.c:881:3: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. sprintf(msg, "\n (generating Postscript for cell %s)", data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkTablePs.c:1299:5: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. sprintf(buffer, "] %d %g %g %s %d %d DrawCellText\n", data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkTableUtil.c:146:7: [4] (buffer) strcpy: Does not check for buffer overflows when copying to destination [MS-banned] (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy easily misused). strcpy(*borderStr, LangString(value)); data/libtk-tablematrix-perl-1.26/pTk/tkTable.c:1208:2: [4] (buffer) strcpy: Does not check for buffer overflows when copying to destination [MS-banned] (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy easily misused). strcpy(tablePtr->defaultTag.borderStr, data/libtk-tablematrix-perl-1.26/pTk/tkTable.c:2652:5: [4] (buffer) strcpy: Does not check for buffer overflows when copying to destination [MS-banned] (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy easily misused). strcpy(tablePtr->activeBuf, data); data/libtk-tablematrix-perl-1.26/pTk/tkTable.c:2741:6: [4] (buffer) strcpy: Does not check for buffer overflows when copying to destination [MS-banned] (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy easily misused). strcpy(tablePtr->activeBuf, data); data/libtk-tablematrix-perl-1.26/pTk/tkTable.c:2767:6: [4] (buffer) strcpy: Does not check for buffer overflows when copying to destination [MS-banned] (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy easily misused). strcpy(val, data); data/libtk-tablematrix-perl-1.26/pTk/tkTableCell.c:421:7: [4] (buffer) strcpy: Does not check for buffer overflows when copying to destination [MS-banned] (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy easily misused). strcpy(buf1, val); data/libtk-tablematrix-perl-1.26/pTk/tkTableCell.c:424:7: [4] (buffer) strcpy: Does not check for buffer overflows when copying to destination [MS-banned] (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy easily misused). strcpy(buf2, val); data/libtk-tablematrix-perl-1.26/pTk/tkTableCell.c:441:7: [4] (buffer) strcpy: Does not check for buffer overflows when copying to destination [MS-banned] (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy easily misused). strcpy(buf1, val); data/libtk-tablematrix-perl-1.26/pTk/tkTableCell.c:444:7: [4] (buffer) strcpy: Does not check for buffer overflows when copying to destination [MS-banned] (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy easily misused). strcpy(buf2, val); data/libtk-tablematrix-perl-1.26/pTk/tkTableCell.c:525:2: [4] (buffer) strcpy: Does not check for buffer overflows when copying to destination [MS-banned] (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy easily misused). strcpy(val, result); data/libtk-tablematrix-perl-1.26/pTk/tkTableCell.c:637:2: [4] (buffer) strcpy: Does not check for buffer overflows when copying to destination [MS-banned] (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy easily misused). strcpy(val, value); data/libtk-tablematrix-perl-1.26/pTk/tkTableCell.c:1177:5: [4] (buffer) strcpy: Does not check for buffer overflows when copying to destination [MS-banned] (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy easily misused). strcpy(dbuf, span); data/libtk-tablematrix-perl-1.26/pTk/tkTableCmds.c:729:2: [4] (buffer) strcpy: Does not check for buffer overflows when copying to destination [MS-banned] (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy easily misused). strcpy(tablePtr->activeBuf, value); data/libtk-tablematrix-perl-1.26/pTk/tkTableEdit.c:392:5: [4] (buffer) strcpy: Does not check for buffer overflows when copying to destination [MS-banned] (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy easily misused). strcpy(new + byteIndex, string + byteIndex + byteCount); data/libtk-tablematrix-perl-1.26/pTk/tkTableEdit.c:408:5: [4] (buffer) strcpy: Does not check for buffer overflows when copying to destination [MS-banned] (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy easily misused). strcpy(new+index, tablePtr->activeBuf+index+count); data/libtk-tablematrix-perl-1.26/pTk/tkTableEdit.c:488:5: [4] (buffer) strcpy: Does not check for buffer overflows when copying to destination [MS-banned] (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy easily misused). strcpy(new + byteIndex, value); data/libtk-tablematrix-perl-1.26/pTk/tkTableEdit.c:489:5: [4] (buffer) strcpy: Does not check for buffer overflows when copying to destination [MS-banned] (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy easily misused). strcpy(new + byteIndex + byteCount, string + byteIndex); data/libtk-tablematrix-perl-1.26/pTk/tkTableEdit.c:539:5: [4] (buffer) strcpy: Does not check for buffer overflows when copying to destination [MS-banned] (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy easily misused). strcpy(new+index, value); data/libtk-tablematrix-perl-1.26/pTk/tkTableEdit.c:540:5: [4] (buffer) strcpy: Does not check for buffer overflows when copying to destination [MS-banned] (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy easily misused). strcpy(new+index+newlen, (tablePtr->activeBuf)+index); data/libtk-tablematrix-perl-1.26/pTk/tkTableUtil.c:146:7: [4] (buffer) strcpy: Does not check for buffer overflows when copying to destination [MS-banned] (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy easily misused). strcpy(*borderStr, Tcl_GetString(value)); data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkTable.c:676:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. (char *) tablePtr, Tcl_GetString(objv[2]), 0); data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkTable.c:760:3: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char buf[INDEX_BUFSIZE]; data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkTable.c:1689:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char buf[INDEX_BUFSIZE]; data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkTable.c:2342:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy((VOID *) tablePtr->activeTagPtr, data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkTable.c:2568:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char buf[INDEX_BUFSIZE]; data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkTable.c:2747:2: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char buf[INDEX_BUFSIZE]; data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkTable.c:3221:2: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char buf[INDEX_BUFSIZE]; data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkTable.c:3589:2: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy((VOID *) buffer, data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkTable.c:3795:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char *string, buf[INDEX_BUFSIZE]; data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkTable.c:3843:6: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(buf, "%d", c); data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkTable.c:3851:6: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(buf, "%d", r); data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkTable.c:3855:6: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(buf, "%d", index); data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkTable.h:638:38: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. #define TableMakeArrayIndex(r, c, i) sprintf((i), "%d,%d", (r), (c)) data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkTableCell.c:48:2: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char buf[INDEX_BUFSIZE]; data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkTableCell.c:110:2: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char buf[INDEX_BUFSIZE]; data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkTableCell.c:321:2: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char buf[INDEX_BUFSIZE]; data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkTableCell.c:409:2: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char buf1[INDEX_BUFSIZE], buf2[INDEX_BUFSIZE]; data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkTableCell.c:478:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char buf[INDEX_BUFSIZE]; data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkTableCell.c:586:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char buf[INDEX_BUFSIZE]; data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkTableCell.c:1063:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char *dbuf, buf[INDEX_BUFSIZE], cell[INDEX_BUFSIZE], span[INDEX_BUFSIZE]; data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkTableCmds.c:48:2: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char buf1[INDEX_BUFSIZE], buf2[INDEX_BUFSIZE]; data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkTableCmds.c:154:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char buf1[INDEX_BUFSIZE]; data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkTableCmds.c:177:6: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(buf1, "%d %d", posn, value); data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkTableCmds.c:522:2: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char buf[INDEX_BUFSIZE], *value; data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkTableCmds.c:923:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char buf1[INDEX_BUFSIZE]; data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkTableCmds.c:1021:2: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char buf[INDEX_BUFSIZE]; data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkTableCmds.c:1051:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char buf1[INDEX_BUFSIZE]; data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkTableEdit.c:391:5: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(new, string, (size_t) byteIndex); data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkTableEdit.c:487:5: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(new, string, (size_t) byteIndex); data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkTableEdit.c:598:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char buf[INDEX_BUFSIZE], buf1[INDEX_BUFSIZE]; data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkTablePs.c:454:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char string[STRING_LENGTH+1], *p; data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkTablePs.c:717:5: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(string, " %d,%d => %d,%d\n", firstRow, firstCol, lastRow, lastCol); data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkTablePs.c:726:2: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(string, "%d %d %d %d\n", data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkTablePs.c:734:2: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(string, "%d %d %d %d\n", data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkTablePs.c:773:5: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(string, "/CL %d def\n", psInfo.colorLevel); data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkTablePs.c:789:5: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(string, "%.1f %.1f translate\n", data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkTablePs.c:794:5: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(string, "%.4g %.4g scale\n%d %d translate\n", data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkTablePs.c:797:5: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(string, "%d %.15g moveto %d %.15g lineto %d %.15g lineto %d %.15g", data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkTablePs.c:879:3: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char msg[64 + TCL_INTEGER_SPACE]; data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkTablePs.c:888:2: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(string, "/row%d %d def\n", data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkTablePs.c:894:5: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(string, "/row%d %d def\n", row, tablePtr->psInfoPtr->y2 - total); data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkTablePs.c:899:2: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(string, "/col%d %d def\n", col, total); data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkTablePs.c:903:5: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(string, "/col%d %d def\n", col, total); data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkTablePs.c:1017:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char string[200]; data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkTablePs.c:1055:5: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(string, "%.3f %.3f %.3f AdjustColor\n", data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkTablePs.c:1094:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char pointString[TCL_INTEGER_SPACE]; data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkTablePs.c:1142:5: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(pointString, "%d", points); data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkTablePs.c:1258:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char buffer[500]; data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkTablePs.c:1272:5: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(buffer, "%% %.15g %.15g [\n", (tagX+width)/2.0, data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkTablePs.c:1275:5: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(buffer, "col%d row%d [\n", col, row); data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkTableTag.c:242:5: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy((VOID *) jtagPtr, (VOID *) &(tablePtr->defaultTag), data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkTableTag.c:578:6: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char buf[INDEX_BUFSIZE]; data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkTableTag.c:583:6: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(buf, " %d", cell); data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkTableTag.c:666:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char buf[INDEX_BUFSIZE], *keybuf, *tagname; data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkTableTag.c:969:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. (char *) tagPtr, Tcl_GetString(objv[4]), 0); data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkTableUtil.c:278:6: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(tagPtr->borderStr, Tcl_GetString(oldValue), length); data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkTableWin.c:375:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char buf[INDEX_BUFSIZE]; data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkTableWin.c:819:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char buf[INDEX_BUFSIZE], *keybuf, *winname; data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkTableWin.c:847:13: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. (char *) ewPtr, data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkTable.c:676:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. (char *) tablePtr, Tcl_GetString(objv[2]), 0); data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkTable.c:760:3: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char buf[INDEX_BUFSIZE]; data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkTable.c:1689:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char buf[INDEX_BUFSIZE]; data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkTable.c:2342:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy((VOID *) tablePtr->activeTagPtr, data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkTable.c:2568:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char buf[INDEX_BUFSIZE]; data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkTable.c:2747:2: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char buf[INDEX_BUFSIZE]; data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkTable.c:3221:2: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char buf[INDEX_BUFSIZE]; data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkTable.c:3589:2: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy((VOID *) buffer, data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkTable.c:3795:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char *string, buf[INDEX_BUFSIZE]; data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkTable.c:3843:6: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(buf, "%d", c); data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkTable.c:3851:6: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(buf, "%d", r); data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkTable.c:3855:6: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(buf, "%d", index); data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkTable.h:636:38: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. #define TableMakeArrayIndex(r, c, i) sprintf((i), "%d,%d", (r), (c)) data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkTableCell.c:48:2: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char buf[INDEX_BUFSIZE]; data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkTableCell.c:110:2: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char buf[INDEX_BUFSIZE]; data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkTableCell.c:321:2: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char buf[INDEX_BUFSIZE]; data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkTableCell.c:409:2: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char buf1[INDEX_BUFSIZE], buf2[INDEX_BUFSIZE]; data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkTableCell.c:478:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char buf[INDEX_BUFSIZE]; data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkTableCell.c:586:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char buf[INDEX_BUFSIZE]; data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkTableCell.c:1063:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char *dbuf, buf[INDEX_BUFSIZE], cell[INDEX_BUFSIZE], span[INDEX_BUFSIZE]; data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkTableCmds.c:48:2: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char buf1[INDEX_BUFSIZE], buf2[INDEX_BUFSIZE]; data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkTableCmds.c:153:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char buf1[INDEX_BUFSIZE]; data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkTableCmds.c:176:6: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(buf1, "%d %d", posn, value); data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkTableCmds.c:521:2: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char buf[INDEX_BUFSIZE], *value; data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkTableCmds.c:922:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char buf1[INDEX_BUFSIZE]; data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkTableCmds.c:1020:2: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char buf[INDEX_BUFSIZE]; data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkTableCmds.c:1050:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char buf1[INDEX_BUFSIZE]; data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkTableEdit.c:391:5: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(new, string, (size_t) byteIndex); data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkTableEdit.c:487:5: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(new, string, (size_t) byteIndex); data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkTableEdit.c:598:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char buf[INDEX_BUFSIZE], buf1[INDEX_BUFSIZE]; data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkTablePs.c:454:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char string[STRING_LENGTH+1], *p; data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkTablePs.c:717:5: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(string, " %d,%d => %d,%d\n", firstRow, firstCol, lastRow, lastCol); data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkTablePs.c:726:2: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(string, "%d %d %d %d\n", data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkTablePs.c:734:2: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(string, "%d %d %d %d\n", data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkTablePs.c:773:5: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(string, "/CL %d def\n", psInfo.colorLevel); data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkTablePs.c:789:5: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(string, "%.1f %.1f translate\n", data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkTablePs.c:794:5: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(string, "%.4g %.4g scale\n%d %d translate\n", data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkTablePs.c:797:5: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(string, "%d %.15g moveto %d %.15g lineto %d %.15g lineto %d %.15g", data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkTablePs.c:879:3: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char msg[64 + TCL_INTEGER_SPACE]; data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkTablePs.c:888:2: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(string, "/row%d %d def\n", data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkTablePs.c:894:5: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(string, "/row%d %d def\n", row, tablePtr->psInfoPtr->y2 - total); data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkTablePs.c:899:2: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(string, "/col%d %d def\n", col, total); data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkTablePs.c:903:5: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(string, "/col%d %d def\n", col, total); data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkTablePs.c:1017:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char string[200]; data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkTablePs.c:1055:5: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(string, "%.3f %.3f %.3f AdjustColor\n", data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkTablePs.c:1094:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char pointString[TCL_INTEGER_SPACE]; data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkTablePs.c:1142:5: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(pointString, "%d", points); data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkTablePs.c:1258:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char buffer[500]; data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkTablePs.c:1272:5: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(buffer, "%% %.15g %.15g [\n", (tagX+width)/2.0, data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkTablePs.c:1275:5: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(buffer, "col%d row%d [\n", col, row); data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkTableTag.c:242:5: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy((VOID *) jtagPtr, (VOID *) &(tablePtr->defaultTag), data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkTableTag.c:578:6: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char buf[INDEX_BUFSIZE]; data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkTableTag.c:583:6: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(buf, " %d", cell); data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkTableTag.c:666:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char buf[INDEX_BUFSIZE], *keybuf, *tagname; data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkTableTag.c:969:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. (char *) tagPtr, Tcl_GetString(objv[4]), 0); data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkTableUtil.c:278:6: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(tagPtr->borderStr, LangString(oldValue), length); data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkTableWin.c:375:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char buf[INDEX_BUFSIZE]; data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkTableWin.c:819:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char buf[INDEX_BUFSIZE], *keybuf, *winname; data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkTableWin.c:847:13: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. (char *) ewPtr, data/libtk-tablematrix-perl-1.26/pTk/tkTable.c:676:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. (char *) tablePtr, Tcl_GetString(objv[2]), 0); data/libtk-tablematrix-perl-1.26/pTk/tkTable.c:760:3: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char buf[INDEX_BUFSIZE]; data/libtk-tablematrix-perl-1.26/pTk/tkTable.c:1689:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char buf[INDEX_BUFSIZE]; data/libtk-tablematrix-perl-1.26/pTk/tkTable.c:2342:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy((VOID *) tablePtr->activeTagPtr, data/libtk-tablematrix-perl-1.26/pTk/tkTable.c:2568:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char buf[INDEX_BUFSIZE]; data/libtk-tablematrix-perl-1.26/pTk/tkTable.c:2747:2: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char buf[INDEX_BUFSIZE]; data/libtk-tablematrix-perl-1.26/pTk/tkTable.c:3221:2: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char buf[INDEX_BUFSIZE]; data/libtk-tablematrix-perl-1.26/pTk/tkTable.c:3589:2: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy((VOID *) buffer, data/libtk-tablematrix-perl-1.26/pTk/tkTable.c:3795:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char *string, buf[INDEX_BUFSIZE]; data/libtk-tablematrix-perl-1.26/pTk/tkTable.c:3843:6: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(buf, "%d", c); data/libtk-tablematrix-perl-1.26/pTk/tkTable.c:3851:6: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(buf, "%d", r); data/libtk-tablematrix-perl-1.26/pTk/tkTable.c:3855:6: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(buf, "%d", index); data/libtk-tablematrix-perl-1.26/pTk/tkTable.h:638:38: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. #define TableMakeArrayIndex(r, c, i) sprintf((i), "%d,%d", (r), (c)) data/libtk-tablematrix-perl-1.26/pTk/tkTableCell.c:48:2: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char buf[INDEX_BUFSIZE]; data/libtk-tablematrix-perl-1.26/pTk/tkTableCell.c:110:2: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char buf[INDEX_BUFSIZE]; data/libtk-tablematrix-perl-1.26/pTk/tkTableCell.c:321:2: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char buf[INDEX_BUFSIZE]; data/libtk-tablematrix-perl-1.26/pTk/tkTableCell.c:409:2: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char buf1[INDEX_BUFSIZE], buf2[INDEX_BUFSIZE]; data/libtk-tablematrix-perl-1.26/pTk/tkTableCell.c:478:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char buf[INDEX_BUFSIZE]; data/libtk-tablematrix-perl-1.26/pTk/tkTableCell.c:586:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char buf[INDEX_BUFSIZE]; data/libtk-tablematrix-perl-1.26/pTk/tkTableCell.c:1063:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char *dbuf, buf[INDEX_BUFSIZE], cell[INDEX_BUFSIZE], span[INDEX_BUFSIZE]; data/libtk-tablematrix-perl-1.26/pTk/tkTableCmds.c:48:2: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char buf1[INDEX_BUFSIZE], buf2[INDEX_BUFSIZE]; data/libtk-tablematrix-perl-1.26/pTk/tkTableCmds.c:154:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char buf1[INDEX_BUFSIZE]; data/libtk-tablematrix-perl-1.26/pTk/tkTableCmds.c:177:6: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(buf1, "%d %d", posn, value); data/libtk-tablematrix-perl-1.26/pTk/tkTableCmds.c:522:2: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char buf[INDEX_BUFSIZE], *value; data/libtk-tablematrix-perl-1.26/pTk/tkTableCmds.c:923:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char buf1[INDEX_BUFSIZE]; data/libtk-tablematrix-perl-1.26/pTk/tkTableCmds.c:1021:2: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char buf[INDEX_BUFSIZE]; data/libtk-tablematrix-perl-1.26/pTk/tkTableCmds.c:1051:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char buf1[INDEX_BUFSIZE]; data/libtk-tablematrix-perl-1.26/pTk/tkTableEdit.c:391:5: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(new, string, (size_t) byteIndex); data/libtk-tablematrix-perl-1.26/pTk/tkTableEdit.c:487:5: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(new, string, (size_t) byteIndex); data/libtk-tablematrix-perl-1.26/pTk/tkTableEdit.c:598:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char buf[INDEX_BUFSIZE], buf1[INDEX_BUFSIZE]; data/libtk-tablematrix-perl-1.26/pTk/tkTableTag.c:242:5: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy((VOID *) jtagPtr, (VOID *) &(tablePtr->defaultTag), data/libtk-tablematrix-perl-1.26/pTk/tkTableTag.c:578:6: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char buf[INDEX_BUFSIZE]; data/libtk-tablematrix-perl-1.26/pTk/tkTableTag.c:583:6: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(buf, " %d", cell); data/libtk-tablematrix-perl-1.26/pTk/tkTableTag.c:666:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char buf[INDEX_BUFSIZE], *keybuf, *tagname; data/libtk-tablematrix-perl-1.26/pTk/tkTableTag.c:969:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. (char *) tagPtr, Tcl_GetString(objv[4]), 0); data/libtk-tablematrix-perl-1.26/pTk/tkTableUtil.c:278:6: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(tagPtr->borderStr, Tcl_GetString(oldValue), length); data/libtk-tablematrix-perl-1.26/pTk/tkTableWin.c:375:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char buf[INDEX_BUFSIZE]; data/libtk-tablematrix-perl-1.26/pTk/tkTableWin.c:819:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char buf[INDEX_BUFSIZE], *keybuf, *winname; data/libtk-tablematrix-perl-1.26/pTk/tkTableWin.c:847:13: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. (char *) ewPtr, data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkTable.c:2062:41: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). numBytes = Tcl_NumUtfChars(string, strlen(string)); data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkTable.c:2064:17: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). numBytes = strlen(string); data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkTable.c:2651:6: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). strlen(data)+1); data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkTable.c:2740:7: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). strlen(data)+1); data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkTable.c:2766:28: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). val = (char *)ckalloc(strlen(data)+1); data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkTable.c:3506:23: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). rslen = (rowsep?(strlen(rowsep)):0); data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkTable.c:3507:23: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). cslen = (colsep?(strlen(colsep)):0); data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkTableCell.c:524:24: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). val = (char *)ckalloc(strlen(result)+1); data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkTableCell.c:636:24: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). val = (char *)ckalloc(strlen(value)+1); data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkTableCell.c:763:11: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). len = strlen(tablePtr->activeBuf); data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkTableCell.c:815:21: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). int r, c, len = strlen(str); data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkTableCell.c:1176:28: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). dbuf = (char *)ckalloc(strlen(span)+1); data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkTableEdit.c:376:16: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). numBytes = strlen(string); data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkTableEdit.c:407:5: [1] (buffer) strncpy: Easily used incorrectly; doesn't always \0-terminate or check for invalid pointers [MS-banned] (CWE-120). strncpy(new, tablePtr->activeBuf, (size_t) index); data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkTableEdit.c:466:17: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). byteCount = strlen(value); data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkTableEdit.c:485:14: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). oldlen = strlen(string); data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkTableEdit.c:523:14: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). newlen = strlen(value); data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkTableEdit.c:535:14: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). oldlen = strlen(tablePtr->activeBuf); data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkTableEdit.c:538:5: [1] (buffer) strncpy: Easily used incorrectly; doesn't always \0-terminate or check for invalid pointers [MS-banned] (CWE-120). strncpy(new, tablePtr->activeBuf, (size_t) index); data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkTablePs.c:601:11: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). length = strlen(psInfo.colorMode); data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkTablePs.c:838:11: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). if (!strlen(value)) { data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkTableUtil.c:145:38: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). *borderStr = (char *) ckalloc( strlen( Tcl_GetString(value) ) + 1); data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkTableUtil.c:264:22: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). size_t length = strlen(Tcl_GetString(oldValue)) + 1; data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable/tkTableUtil.c:357:22: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). unsigned int len = strlen(Tcl_GetString(arg)); data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkTable.c:2062:41: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). numBytes = Tcl_NumUtfChars(string, strlen(string)); data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkTable.c:2064:17: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). numBytes = strlen(string); data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkTable.c:2651:6: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). strlen(data)+1); data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkTable.c:2740:7: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). strlen(data)+1); data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkTable.c:2766:28: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). val = (char *)ckalloc(strlen(data)+1); data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkTable.c:3506:23: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). rslen = (rowsep?(strlen(rowsep)):0); data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkTable.c:3507:23: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). cslen = (colsep?(strlen(colsep)):0); data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkTableCell.c:524:24: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). val = (char *)ckalloc(strlen(result)+1); data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkTableCell.c:636:24: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). val = (char *)ckalloc(strlen(value)+1); data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkTableCell.c:763:11: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). len = strlen(tablePtr->activeBuf); data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkTableCell.c:815:21: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). int r, c, len = strlen(str); data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkTableCell.c:1176:28: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). dbuf = (char *)ckalloc(strlen(span)+1); data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkTableEdit.c:376:16: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). numBytes = strlen(string); data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkTableEdit.c:407:5: [1] (buffer) strncpy: Easily used incorrectly; doesn't always \0-terminate or check for invalid pointers [MS-banned] (CWE-120). strncpy(new, tablePtr->activeBuf, (size_t) index); data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkTableEdit.c:466:17: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). byteCount = strlen(value); data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkTableEdit.c:485:14: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). oldlen = strlen(string); data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkTableEdit.c:523:14: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). newlen = strlen(value); data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkTableEdit.c:535:14: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). oldlen = strlen(tablePtr->activeBuf); data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkTableEdit.c:538:5: [1] (buffer) strncpy: Easily used incorrectly; doesn't always \0-terminate or check for invalid pointers [MS-banned] (CWE-120). strncpy(new, tablePtr->activeBuf, (size_t) index); data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkTablePs.c:601:11: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). length = strlen(psInfo.colorMode); data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkTablePs.c:838:11: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). if (!strlen(value)) { data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkTableUtil.c:145:38: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). *borderStr = (char *) ckalloc( strlen( LangString(value) ) + 1); data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkTableUtil.c:264:22: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). size_t length = strlen(LangString(oldValue)) + 1; data/libtk-tablematrix-perl-1.26/pTk/mTk/Tktable800/tkTableUtil.c:357:22: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). unsigned int len = strlen(LangString(arg)); data/libtk-tablematrix-perl-1.26/pTk/tkTable.c:2062:41: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). numBytes = Tcl_NumUtfChars(string, strlen(string)); data/libtk-tablematrix-perl-1.26/pTk/tkTable.c:2064:17: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). numBytes = strlen(string); data/libtk-tablematrix-perl-1.26/pTk/tkTable.c:2651:6: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). strlen(data)+1); data/libtk-tablematrix-perl-1.26/pTk/tkTable.c:2740:7: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). strlen(data)+1); data/libtk-tablematrix-perl-1.26/pTk/tkTable.c:2766:28: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). val = (char *)ckalloc(strlen(data)+1); data/libtk-tablematrix-perl-1.26/pTk/tkTable.c:3506:23: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). rslen = (rowsep?(strlen(rowsep)):0); data/libtk-tablematrix-perl-1.26/pTk/tkTable.c:3507:23: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). cslen = (colsep?(strlen(colsep)):0); data/libtk-tablematrix-perl-1.26/pTk/tkTableCell.c:524:24: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). val = (char *)ckalloc(strlen(result)+1); data/libtk-tablematrix-perl-1.26/pTk/tkTableCell.c:636:24: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). val = (char *)ckalloc(strlen(value)+1); data/libtk-tablematrix-perl-1.26/pTk/tkTableCell.c:763:11: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). len = strlen(tablePtr->activeBuf); data/libtk-tablematrix-perl-1.26/pTk/tkTableCell.c:815:21: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). int r, c, len = strlen(str); data/libtk-tablematrix-perl-1.26/pTk/tkTableCell.c:1176:28: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). dbuf = (char *)ckalloc(strlen(span)+1); data/libtk-tablematrix-perl-1.26/pTk/tkTableEdit.c:376:16: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). numBytes = strlen(string); data/libtk-tablematrix-perl-1.26/pTk/tkTableEdit.c:407:5: [1] (buffer) strncpy: Easily used incorrectly; doesn't always \0-terminate or check for invalid pointers [MS-banned] (CWE-120). strncpy(new, tablePtr->activeBuf, (size_t) index); data/libtk-tablematrix-perl-1.26/pTk/tkTableEdit.c:466:17: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). byteCount = strlen(value); data/libtk-tablematrix-perl-1.26/pTk/tkTableEdit.c:485:14: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). oldlen = strlen(string); data/libtk-tablematrix-perl-1.26/pTk/tkTableEdit.c:523:14: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). newlen = strlen(value); data/libtk-tablematrix-perl-1.26/pTk/tkTableEdit.c:535:14: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). oldlen = strlen(tablePtr->activeBuf); data/libtk-tablematrix-perl-1.26/pTk/tkTableEdit.c:538:5: [1] (buffer) strncpy: Easily used incorrectly; doesn't always \0-terminate or check for invalid pointers [MS-banned] (CWE-120). strncpy(new, tablePtr->activeBuf, (size_t) index); data/libtk-tablematrix-perl-1.26/pTk/tkTableUtil.c:145:38: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). *borderStr = (char *) ckalloc( strlen( Tcl_GetString(value) ) + 1); data/libtk-tablematrix-perl-1.26/pTk/tkTableUtil.c:264:22: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). size_t length = strlen(Tcl_GetString(oldValue)) + 1; data/libtk-tablematrix-perl-1.26/pTk/tkTableUtil.c:357:22: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). unsigned int len = strlen(Tcl_GetString(arg)); ANALYSIS SUMMARY: Hits = 292 Lines analyzed = 36305 in approximately 1.03 seconds (35217 lines/second) Physical Source Lines of Code (SLOC) = 22716 Hits@level = [0] 15 [1] 70 [2] 157 [3] 0 [4] 65 [5] 0 Hits@level+ = [0+] 307 [1+] 292 [2+] 222 [3+] 65 [4+] 65 [5+] 0 Hits/KSLOC@level+ = [0+] 13.5147 [1+] 12.8544 [2+] 9.77285 [3+] 2.86142 [4+] 2.86142 [5+] 0 Dot directories skipped = 1 (--followdotdir overrides) Minimum risk level = 1 Not every hit is necessarily a security vulnerability. There may be other security vulnerabilities; review your code! See 'Secure Programming HOWTO' (https://dwheeler.com/secure-programs) for more information.