Flawfinder version 2.0.10, (C) 2001-2019 David A. Wheeler. Number of rules (primarily dangerous function names) in C/C++ ruleset: 223 Examining data/meliae-0.5.1+bzr231/meliae/_scanner_core.c Examining data/meliae-0.5.1+bzr231/meliae/_scanner_core.h FINAL RESULTS: data/meliae-0.5.1+bzr231/meliae/_scanner_core.c:37:11: [4] (format) snprintf: If format strings can be influenced by an attacker, they can be exploited, and note that sprintf variations do not always \0-terminate (CWE-134). Use a constant for the format specification. # define snprintf _snprintf data/meliae-0.5.1+bzr231/meliae/_scanner_core.c:37:20: [4] (format) _snprintf: If format strings can be influenced by an attacker, they can be exploited, and note that sprintf variations do not always \0-terminate (CWE-134). Use a constant for the format specification. # define snprintf _snprintf data/meliae-0.5.1+bzr231/meliae/_scanner_core.c:61:27: [4] (format) printf: If format strings can be influenced by an attacker, they can be exploited (CWE-134). Use a constant for the format specification. __attribute__((format(printf, 2, 3))); data/meliae-0.5.1+bzr231/meliae/_scanner_core.c:377:15: [4] (format) vsnprintf: If format strings can be influenced by an attacker, they can be exploited, and note that sprintf variations do not always \0-terminate (CWE-134). Use a constant for the format specification. n_bytes = vsnprintf(temp_buf, 1024, fmt_string, args); data/meliae-0.5.1+bzr231/meliae/_scanner_core.c:372:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char temp_buf[1024] = {0}; data/meliae-0.5.1+bzr231/meliae/_scanner_core.c:395:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char buf[24] = {0}; /* it seems that 64-bit long fits in 20 decimals */ data/meliae-0.5.1+bzr231/meliae/_scanner_core.c:452:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char out_buf[1024] = {0}; data/meliae-0.5.1+bzr231/meliae/_scanner_core.c:502:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char out_buf[1024] = {0}, *ptr, *end; data/meliae-0.5.1+bzr231/meliae/_scanner_core.c:387:35: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). info->write(info->data, data, strlen(data)); data/meliae-0.5.1+bzr231/meliae/_scanner_core.c:456:15: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). len = strlen(buf); ANALYSIS SUMMARY: Hits = 10 Lines analyzed = 857 in approximately 0.05 seconds (16368 lines/second) Physical Source Lines of Code (SLOC) = 614 Hits@level = [0] 5 [1] 2 [2] 4 [3] 0 [4] 4 [5] 0 Hits@level+ = [0+] 15 [1+] 10 [2+] 8 [3+] 4 [4+] 4 [5+] 0 Hits/KSLOC@level+ = [0+] 24.43 [1+] 16.2866 [2+] 13.0293 [3+] 6.51466 [4+] 6.51466 [5+] 0 Dot directories skipped = 1 (--followdotdir overrides) Minimum risk level = 1 Not every hit is necessarily a security vulnerability. There may be other security vulnerabilities; review your code! See 'Secure Programming HOWTO' (https://dwheeler.com/secure-programs) for more information.