Flawfinder version 2.0.10, (C) 2001-2019 David A. Wheeler. Number of rules (primarily dangerous function names) in C/C++ ruleset: 223 Examining data/libyaml-libyaml-perl-0.82+repack/LibYAML/ppport.h Examining data/libyaml-libyaml-perl-0.82+repack/LibYAML/ppport_sort.h Examining data/libyaml-libyaml-perl-0.82+repack/LibYAML/perl_libyaml.h Examining data/libyaml-libyaml-perl-0.82+repack/LibYAML/perl_libyaml.c FINAL RESULTS: data/libyaml-libyaml-perl-0.82+repack/LibYAML/ppport.h:6695:14: [4] (format) vsnprintf: If format strings can be influenced by an attacker, they can be exploited, and note that sprintf variations do not always \0-terminate (CWE-134). Use a constant for the format specification. retval = vsnprintf(buffer, len, format, ap); data/libyaml-libyaml-perl-0.82+repack/LibYAML/ppport.h:6697:14: [4] (format) vsprintf: Potential format string problem (CWE-134). Make format string constant. retval = vsprintf(buffer, format, ap); data/libyaml-libyaml-perl-0.82+repack/LibYAML/ppport.h:6726:5: [4] (format) vsprintf: Potential format string problem (CWE-134). Make format string constant. vsprintf(buffer, pat, args); data/libyaml-libyaml-perl-0.82+repack/LibYAML/ppport.h:3667:42: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. # define CopyD(s,d,n,t) memcpy((char*)(d),(char*)(s), (n) * sizeof(t)) data/libyaml-libyaml-perl-0.82+repack/LibYAML/ppport.h:6550:24: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. && (xdigit = strchr((char *) PL_hexdigit, s[1]))) data/libyaml-libyaml-perl-0.82+repack/LibYAML/ppport.h:6772:9: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(dst + used, src, copy); data/libyaml-libyaml-perl-0.82+repack/LibYAML/ppport.h:6801:9: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(dst, src, copy); data/libyaml-libyaml-perl-0.82+repack/LibYAML/ppport.h:6893:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char octbuf[32] = "%123456789ABCDF"; data/libyaml-libyaml-perl-0.82+repack/LibYAML/ppport.h:6963:6: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char tmp[2]; data/libyaml-libyaml-perl-0.82+repack/LibYAML/perl_libyaml.c:347:43: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). hv_store(loader->anchors, anchor, strlen(anchor), SvREFCNT_inc(hash_ref), 0); data/libyaml-libyaml-perl-0.82+repack/LibYAML/perl_libyaml.c:372:26: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). else if (strlen(tag) <= strlen(prefix) || data/libyaml-libyaml-perl-0.82+repack/LibYAML/perl_libyaml.c:372:41: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). else if (strlen(tag) <= strlen(prefix) || data/libyaml-libyaml-perl-0.82+repack/LibYAML/perl_libyaml.c:373:43: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). ! strnEQ(tag, prefix, strlen(prefix)) data/libyaml-libyaml-perl-0.82+repack/LibYAML/perl_libyaml.c:378:35: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). class = tag + strlen(prefix); data/libyaml-libyaml-perl-0.82+repack/LibYAML/perl_libyaml.c:409:47: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). hv_store(loader->anchors, anchor, strlen(anchor), SvREFCNT_inc(array_ref), 0); data/libyaml-libyaml-perl-0.82+repack/LibYAML/perl_libyaml.c:425:26: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). else if (strlen(tag) <= strlen(prefix) || data/libyaml-libyaml-perl-0.82+repack/LibYAML/perl_libyaml.c:425:41: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). else if (strlen(tag) <= strlen(prefix) || data/libyaml-libyaml-perl-0.82+repack/LibYAML/perl_libyaml.c:426:43: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). ! strnEQ(tag, prefix, strlen(prefix)) data/libyaml-libyaml-perl-0.82+repack/LibYAML/perl_libyaml.c:431:35: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). class = tag + strlen(prefix); data/libyaml-libyaml-perl-0.82+repack/LibYAML/perl_libyaml.c:475:51: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). hv_store(loader->anchors, anchor, strlen(anchor), SvREFCNT_inc(scalar), 0); data/libyaml-libyaml-perl-0.82+repack/LibYAML/perl_libyaml.c:485:51: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). hv_store(loader->anchors, anchor, strlen(anchor), SvREFCNT_inc(scalar), 0); data/libyaml-libyaml-perl-0.82+repack/LibYAML/perl_libyaml.c:491:37: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). if (strnEQ(tag, prefix, strlen(prefix))) data/libyaml-libyaml-perl-0.82+repack/LibYAML/perl_libyaml.c:494:37: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). if (strnEQ(tag, prefix, strlen(prefix))) data/libyaml-libyaml-perl-0.82+repack/LibYAML/perl_libyaml.c:499:22: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). else if (strlen(tag) <= strlen(prefix) || data/libyaml-libyaml-perl-0.82+repack/LibYAML/perl_libyaml.c:499:37: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). else if (strlen(tag) <= strlen(prefix) || data/libyaml-libyaml-perl-0.82+repack/LibYAML/perl_libyaml.c:500:39: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). ! strnEQ(tag, prefix, strlen(prefix)) data/libyaml-libyaml-perl-0.82+repack/LibYAML/perl_libyaml.c:502:27: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). class = tag + strlen(prefix); data/libyaml-libyaml-perl-0.82+repack/LibYAML/perl_libyaml.c:504:65: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). scalar = sv_setref_pvn(newSV(0), class, string, strlen(string)); data/libyaml-libyaml-perl-0.82+repack/LibYAML/perl_libyaml.c:509:51: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). hv_store(loader->anchors, anchor, strlen(anchor), SvREFCNT_inc(scalar), 0); data/libyaml-libyaml-perl-0.82+repack/LibYAML/perl_libyaml.c:518:51: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). hv_store(loader->anchors, anchor, strlen(anchor), SvREFCNT_inc(scalar), 0); data/libyaml-libyaml-perl-0.82+repack/LibYAML/perl_libyaml.c:536:51: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). hv_store(loader->anchors, anchor, strlen(anchor), SvREFCNT_inc(scalar), 0); data/libyaml-libyaml-perl-0.82+repack/LibYAML/perl_libyaml.c:554:51: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). hv_store(loader->anchors, anchor, strlen(anchor), SvREFCNT_inc(scalar), 0); data/libyaml-libyaml-perl-0.82+repack/LibYAML/perl_libyaml.c:568:43: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). hv_store(loader->anchors, anchor, strlen(anchor), SvREFCNT_inc(scalar), 0); data/libyaml-libyaml-perl-0.82+repack/LibYAML/perl_libyaml.c:602:9: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). if (strlen(tag) > strlen(prefix) && strnEQ(tag, prefix, strlen(prefix))) { data/libyaml-libyaml-perl-0.82+repack/LibYAML/perl_libyaml.c:602:23: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). if (strlen(tag) > strlen(prefix) && strnEQ(tag, prefix, strlen(prefix))) { data/libyaml-libyaml-perl-0.82+repack/LibYAML/perl_libyaml.c:602:61: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). if (strlen(tag) > strlen(prefix) && strnEQ(tag, prefix, strlen(prefix))) { data/libyaml-libyaml-perl-0.82+repack/LibYAML/perl_libyaml.c:604:33: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). char *class = tag + strlen(prefix); data/libyaml-libyaml-perl-0.82+repack/LibYAML/perl_libyaml.c:610:43: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). hv_store(loader->anchors, anchor, strlen(anchor), SvREFCNT_inc(regexp), 0); data/libyaml-libyaml-perl-0.82+repack/LibYAML/perl_libyaml.c:649:9: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). if (strlen(tag) > strlen(prefix) && strnEQ(tag, prefix, strlen(prefix))) { data/libyaml-libyaml-perl-0.82+repack/LibYAML/perl_libyaml.c:649:23: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). if (strlen(tag) > strlen(prefix) && strnEQ(tag, prefix, strlen(prefix))) { data/libyaml-libyaml-perl-0.82+repack/LibYAML/perl_libyaml.c:649:61: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). if (strlen(tag) > strlen(prefix) && strnEQ(tag, prefix, strlen(prefix))) { data/libyaml-libyaml-perl-0.82+repack/LibYAML/perl_libyaml.c:651:33: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). char *class = tag + strlen(prefix); data/libyaml-libyaml-perl-0.82+repack/LibYAML/perl_libyaml.c:657:43: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). hv_store(loader->anchors, anchor, strlen(anchor), SvREFCNT_inc(code), 0); data/libyaml-libyaml-perl-0.82+repack/LibYAML/perl_libyaml.c:669:52: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). SV **entry = hv_fetch(loader->anchors, anchor, strlen(anchor), 0); data/libyaml-libyaml-perl-0.82+repack/LibYAML/perl_libyaml.c:685:43: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). hv_store(loader->anchors, anchor, strlen(anchor), SvREFCNT_inc(rv), 0); data/libyaml-libyaml-perl-0.82+repack/LibYAML/perl_libyaml.c:1021:10: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). if ((strlen(kind) == 0)) data/libyaml-libyaml-perl-0.82+repack/LibYAML/perl_libyaml.c:1214:9: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). strlen(string), data/libyaml-libyaml-perl-0.82+repack/LibYAML/ppport.h:5160:24: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). sv_vsetpvfn(sv, pat, strlen(pat), args, Null(SV**), 0, Null(bool*)); data/libyaml-libyaml-perl-0.82+repack/LibYAML/ppport.h:5168:59: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). # define sv_vcatpvf(sv, pat, args) sv_vcatpvfn(sv, pat, strlen(pat), args, Null(SV**), 0, Null(bool*)) data/libyaml-libyaml-perl-0.82+repack/LibYAML/ppport.h:5172:59: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). # define sv_vsetpvf(sv, pat, args) sv_vsetpvfn(sv, pat, strlen(pat), args, Null(SV**), 0, Null(bool*)) data/libyaml-libyaml-perl-0.82+repack/LibYAML/ppport.h:5192:24: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). sv_vcatpvfn(sv, pat, strlen(pat), &args, Null(SV**), 0, Null(bool*)); data/libyaml-libyaml-perl-0.82+repack/LibYAML/ppport.h:5220:24: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). sv_vcatpvfn(sv, pat, strlen(pat), &args, Null(SV**), 0, Null(bool*)); data/libyaml-libyaml-perl-0.82+repack/LibYAML/ppport.h:5241:27: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). sv_vcatpvfn(sv, pat, strlen(pat), args, Null(SV**), 0, Null(bool*)); \ data/libyaml-libyaml-perl-0.82+repack/LibYAML/ppport.h:5263:24: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). sv_vsetpvfn(sv, pat, strlen(pat), &args, Null(SV**), 0, Null(bool*)); data/libyaml-libyaml-perl-0.82+repack/LibYAML/ppport.h:5291:24: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). sv_vsetpvfn(sv, pat, strlen(pat), &args, Null(SV**), 0, Null(bool*)); data/libyaml-libyaml-perl-0.82+repack/LibYAML/ppport.h:5312:27: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). sv_vsetpvfn(sv, pat, strlen(pat), args, Null(SV**), 0, Null(bool*)); \ data/libyaml-libyaml-perl-0.82+repack/LibYAML/ppport.h:5360:65: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). # define HvNAMELEN_get(hv) (HvNAME_get(hv) ? (I32)strlen(HvNAME_get(hv)) : 0) data/libyaml-libyaml-perl-0.82+repack/LibYAML/ppport.h:6144:22: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). STRLEN len = strlen(radix); data/libyaml-libyaml-perl-0.82+repack/LibYAML/ppport.h:6728:12: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). return strlen(buffer); data/libyaml-libyaml-perl-0.82+repack/LibYAML/ppport.h:6768:12: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). used = strlen(dst); data/libyaml-libyaml-perl-0.82+repack/LibYAML/ppport.h:6769:14: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). length = strlen(src); data/libyaml-libyaml-perl-0.82+repack/LibYAML/ppport.h:6798:14: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). length = strlen(src); ANALYSIS SUMMARY: Hits = 62 Lines analyzed = 8530 in approximately 0.21 seconds (39844 lines/second) Physical Source Lines of Code (SLOC) = 4277 Hits@level = [0] 2 [1] 53 [2] 6 [3] 0 [4] 3 [5] 0 Hits@level+ = [0+] 64 [1+] 62 [2+] 9 [3+] 3 [4+] 3 [5+] 0 Hits/KSLOC@level+ = [0+] 14.9638 [1+] 14.4961 [2+] 2.10428 [3+] 0.701426 [4+] 0.701426 [5+] 0 Dot directories skipped = 1 (--followdotdir overrides) Minimum risk level = 1 Not every hit is necessarily a security vulnerability. There may be other security vulnerabilities; review your code! See 'Secure Programming HOWTO' (https://dwheeler.com/secure-programs) for more information.