Flawfinder version 2.0.10, (C) 2001-2019 David A. Wheeler.
Number of rules (primarily dangerous function names) in C/C++ ruleset: 223
Examining data/netatalk-3.1.12~ds/include/atalk/adouble.h
Examining data/netatalk-3.1.12~ds/include/atalk/afp.h
Examining data/netatalk-3.1.12~ds/include/atalk/vfs.h
Examining data/netatalk-3.1.12~ds/include/atalk/cnid.h
Examining data/netatalk-3.1.12~ds/include/atalk/logger.h
Examining data/netatalk-3.1.12~ds/include/atalk/netatalk_conf.h
Examining data/netatalk-3.1.12~ds/include/atalk/paths.h
Examining data/netatalk-3.1.12~ds/include/atalk/unicode.h
Examining data/netatalk-3.1.12~ds/include/atalk/acl.h
Examining data/netatalk-3.1.12~ds/include/atalk/unix.h
Examining data/netatalk-3.1.12~ds/include/atalk/volume.h
Examining data/netatalk-3.1.12~ds/include/atalk/standards.h
Examining data/netatalk-3.1.12~ds/include/atalk/bstrlib.h
Examining data/netatalk-3.1.12~ds/include/atalk/list.h
Examining data/netatalk-3.1.12~ds/include/atalk/globals.h
Examining data/netatalk-3.1.12~ds/include/atalk/compat.h
Examining data/netatalk-3.1.12~ds/include/atalk/iniparser.h
Examining data/netatalk-3.1.12~ds/include/atalk/dictionary.h
Examining data/netatalk-3.1.12~ds/include/atalk/hash.h
Examining data/netatalk-3.1.12~ds/include/atalk/directory.h
Examining data/netatalk-3.1.12~ds/include/atalk/uuid.h
Examining data/netatalk-3.1.12~ds/include/atalk/queue.h
Examining data/netatalk-3.1.12~ds/include/atalk/server_child.h
Examining data/netatalk-3.1.12~ds/include/atalk/server_ipc.h
Examining data/netatalk-3.1.12~ds/include/atalk/cnid_bdb_private.h
Examining data/netatalk-3.1.12~ds/include/atalk/cnid_mysql_private.h
Examining data/netatalk-3.1.12~ds/include/atalk/cnid_private.h
Examining data/netatalk-3.1.12~ds/include/atalk/bstradd.h
Examining data/netatalk-3.1.12~ds/include/atalk/errchk.h
Examining data/netatalk-3.1.12~ds/include/atalk/ftw.h
Examining data/netatalk-3.1.12~ds/include/atalk/dsi.h
Examining data/netatalk-3.1.12~ds/include/atalk/ldapconfig.h
Examining data/netatalk-3.1.12~ds/include/atalk/byteorder.h
Examining data/netatalk-3.1.12~ds/include/atalk/fce_api.h
Examining data/netatalk-3.1.12~ds/include/atalk/spotlight.h
Examining data/netatalk-3.1.12~ds/include/atalk/dalloc.h
Examining data/netatalk-3.1.12~ds/include/atalk/ea.h
Examining data/netatalk-3.1.12~ds/include/atalk/uam.h
Examining data/netatalk-3.1.12~ds/include/atalk/util.h
Examining data/netatalk-3.1.12~ds/libatalk/dummy.c
Examining data/netatalk-3.1.12~ds/libatalk/acl/aclldap.h
Examining data/netatalk-3.1.12~ds/libatalk/acl/cache.h
Examining data/netatalk-3.1.12~ds/libatalk/acl/cache.c
Examining data/netatalk-3.1.12~ds/libatalk/acl/uuid.c
Examining data/netatalk-3.1.12~ds/libatalk/acl/ldap.c
Examining data/netatalk-3.1.12~ds/libatalk/acl/ldap_config.c
Examining data/netatalk-3.1.12~ds/libatalk/acl/unix.c
Examining data/netatalk-3.1.12~ds/libatalk/adouble/ad_lock.h
Examining data/netatalk-3.1.12~ds/libatalk/adouble/ad_attr.c
Examining data/netatalk-3.1.12~ds/libatalk/adouble/ad_conv.c
Examining data/netatalk-3.1.12~ds/libatalk/adouble/ad_date.c
Examining data/netatalk-3.1.12~ds/libatalk/adouble/ad_lock.c
Examining data/netatalk-3.1.12~ds/libatalk/adouble/ad_mmap.c
Examining data/netatalk-3.1.12~ds/libatalk/adouble/ad_read.c
Examining data/netatalk-3.1.12~ds/libatalk/adouble/ad_recvfile.c
Examining data/netatalk-3.1.12~ds/libatalk/adouble/ad_sendfile.c
Examining data/netatalk-3.1.12~ds/libatalk/adouble/ad_size.c
Examining data/netatalk-3.1.12~ds/libatalk/adouble/ad_open.c
Examining data/netatalk-3.1.12~ds/libatalk/adouble/ad_flush.c
Examining data/netatalk-3.1.12~ds/libatalk/adouble/ad_write.c
Examining data/netatalk-3.1.12~ds/libatalk/bstring/bstrlib.c
Examining data/netatalk-3.1.12~ds/libatalk/bstring/bstradd.c
Examining data/netatalk-3.1.12~ds/libatalk/compat/misc.c
Examining data/netatalk-3.1.12~ds/libatalk/compat/mktemp.c
Examining data/netatalk-3.1.12~ds/libatalk/compat/getusershell.c
Examining data/netatalk-3.1.12~ds/libatalk/compat/rquota_xdr.c
Examining data/netatalk-3.1.12~ds/libatalk/compat/pselect.c
Examining data/netatalk-3.1.12~ds/libatalk/compat/strlcpy.c
Examining data/netatalk-3.1.12~ds/libatalk/cnid/cnid.c
Examining data/netatalk-3.1.12~ds/libatalk/cnid/cnid_init.c
Examining data/netatalk-3.1.12~ds/libatalk/cnid/last/cnid_last.c
Examining data/netatalk-3.1.12~ds/libatalk/cnid/last/cnid_last.h
Examining data/netatalk-3.1.12~ds/libatalk/cnid/cdb/cnid_cdb_meta.h
Examining data/netatalk-3.1.12~ds/libatalk/cnid/cdb/cnid_cdb_private.h
Examining data/netatalk-3.1.12~ds/libatalk/cnid/cdb/cnid_cdb_close.c
Examining data/netatalk-3.1.12~ds/libatalk/cnid/cdb/cnid_cdb_delete.c
Examining data/netatalk-3.1.12~ds/libatalk/cnid/cdb/cnid_cdb_get.c
Examining data/netatalk-3.1.12~ds/libatalk/cnid/cdb/cnid_cdb_lookup.c
Examining data/netatalk-3.1.12~ds/libatalk/cnid/cdb/cnid_cdb_open.c
Examining data/netatalk-3.1.12~ds/libatalk/cnid/cdb/cnid_cdb_resolve.c
Examining data/netatalk-3.1.12~ds/libatalk/cnid/cdb/cnid_cdb_update.c
Examining data/netatalk-3.1.12~ds/libatalk/cnid/cdb/cnid_cdb_rebuild_add.c
Examining data/netatalk-3.1.12~ds/libatalk/cnid/cdb/cnid_cdb.h
Examining data/netatalk-3.1.12~ds/libatalk/cnid/cdb/cnid_cdb_meta.c
Examining data/netatalk-3.1.12~ds/libatalk/cnid/cdb/cnid_cdb_nextid.c
Examining data/netatalk-3.1.12~ds/libatalk/cnid/cdb/cnid_cdb_add.c
Examining data/netatalk-3.1.12~ds/libatalk/cnid/dbd/cnid_dbd.c
Examining data/netatalk-3.1.12~ds/libatalk/cnid/dbd/cnid_dbd.h
Examining data/netatalk-3.1.12~ds/libatalk/cnid/tdb/cnid_tdb_add.c
Examining data/netatalk-3.1.12~ds/libatalk/cnid/tdb/cnid_tdb_close.c
Examining data/netatalk-3.1.12~ds/libatalk/cnid/tdb/cnid_tdb_delete.c
Examining data/netatalk-3.1.12~ds/libatalk/cnid/tdb/cnid_tdb_get.c
Examining data/netatalk-3.1.12~ds/libatalk/cnid/tdb/cnid_tdb_lookup.c
Examining data/netatalk-3.1.12~ds/libatalk/cnid/tdb/cnid_tdb_open.c
Examining data/netatalk-3.1.12~ds/libatalk/cnid/tdb/cnid_tdb_resolve.c
Examining data/netatalk-3.1.12~ds/libatalk/cnid/tdb/cnid_tdb_update.c
Examining data/netatalk-3.1.12~ds/libatalk/cnid/tdb/cnid_tdb_nextid.c
Examining data/netatalk-3.1.12~ds/libatalk/cnid/tdb/cnid_tdb.h
Examining data/netatalk-3.1.12~ds/libatalk/cnid/mysql/cnid_mysql.c
Examining data/netatalk-3.1.12~ds/libatalk/dsi/dsi_attn.c
Examining data/netatalk-3.1.12~ds/libatalk/dsi/dsi_close.c
Examining data/netatalk-3.1.12~ds/libatalk/dsi/dsi_cmdreply.c
Examining data/netatalk-3.1.12~ds/libatalk/dsi/dsi_getsess.c
Examining data/netatalk-3.1.12~ds/libatalk/dsi/dsi_getstat.c
Examining data/netatalk-3.1.12~ds/libatalk/dsi/dsi_init.c
Examining data/netatalk-3.1.12~ds/libatalk/dsi/dsi_opensess.c
Examining data/netatalk-3.1.12~ds/libatalk/dsi/dsi_read.c
Examining data/netatalk-3.1.12~ds/libatalk/dsi/dsi_tickle.c
Examining data/netatalk-3.1.12~ds/libatalk/dsi/dsi_write.c
Examining data/netatalk-3.1.12~ds/libatalk/dsi/dsi_stream.c
Examining data/netatalk-3.1.12~ds/libatalk/dsi/dsi_tcp.c
Examining data/netatalk-3.1.12~ds/libatalk/iniparser/dictionary.c
Examining data/netatalk-3.1.12~ds/libatalk/iniparser/iniparser.c
Examining data/netatalk-3.1.12~ds/libatalk/talloc/dalloc.c
Examining data/netatalk-3.1.12~ds/libatalk/util/bprint.c
Examining data/netatalk-3.1.12~ds/libatalk/util/fault.c
Examining data/netatalk-3.1.12~ds/libatalk/util/getiface.c
Examining data/netatalk-3.1.12~ds/libatalk/util/gettok.c
Examining data/netatalk-3.1.12~ds/libatalk/util/locking.c
Examining data/netatalk-3.1.12~ds/libatalk/util/logger.c
Examining data/netatalk-3.1.12~ds/libatalk/util/module.c
Examining data/netatalk-3.1.12~ds/libatalk/util/queue.c
Examining data/netatalk-3.1.12~ds/libatalk/util/server_child.c
Examining data/netatalk-3.1.12~ds/libatalk/util/server_lock.c
Examining data/netatalk-3.1.12~ds/libatalk/util/strdicasecmp.c
Examining data/netatalk-3.1.12~ds/libatalk/util/unix.c
Examining data/netatalk-3.1.12~ds/libatalk/util/ftw.c
Examining data/netatalk-3.1.12~ds/libatalk/util/netatalk_conf.c
Examining data/netatalk-3.1.12~ds/libatalk/util/socket.c
Examining data/netatalk-3.1.12~ds/libatalk/util/cnid.c
Examining data/netatalk-3.1.12~ds/libatalk/util/server_ipc.c
Examining data/netatalk-3.1.12~ds/libatalk/unicode/utf16_casetable.h
Examining data/netatalk-3.1.12~ds/libatalk/unicode/precompose.h
Examining data/netatalk-3.1.12~ds/libatalk/unicode/util_unistr.c
Examining data/netatalk-3.1.12~ds/libatalk/unicode/iconv.c
Examining data/netatalk-3.1.12~ds/libatalk/unicode/charcnv.c
Examining data/netatalk-3.1.12~ds/libatalk/unicode/utf8.c
Examining data/netatalk-3.1.12~ds/libatalk/unicode/utf16_case.c
Examining data/netatalk-3.1.12~ds/libatalk/unicode/charsets/mac_roman.h
Examining data/netatalk-3.1.12~ds/libatalk/unicode/charsets/mac_greek.h
Examining data/netatalk-3.1.12~ds/libatalk/unicode/charsets/mac_centraleurope.h
Examining data/netatalk-3.1.12~ds/libatalk/unicode/charsets/mac_hebrew.h
Examining data/netatalk-3.1.12~ds/libatalk/unicode/charsets/mac_turkish.h
Examining data/netatalk-3.1.12~ds/libatalk/unicode/charsets/mac_cyrillic.h
Examining data/netatalk-3.1.12~ds/libatalk/unicode/charsets/mac_japanese.h
Examining data/netatalk-3.1.12~ds/libatalk/unicode/charsets/mac_chinese_trad.h
Examining data/netatalk-3.1.12~ds/libatalk/unicode/charsets/mac_chinese_simp.h
Examining data/netatalk-3.1.12~ds/libatalk/unicode/charsets/mac_korean.h
Examining data/netatalk-3.1.12~ds/libatalk/unicode/charsets/generic_cjk.h
Examining data/netatalk-3.1.12~ds/libatalk/unicode/charsets/generic_mb.h
Examining data/netatalk-3.1.12~ds/libatalk/unicode/charsets/mac_roman.c
Examining data/netatalk-3.1.12~ds/libatalk/unicode/charsets/mac_greek.c
Examining data/netatalk-3.1.12~ds/libatalk/unicode/charsets/mac_hebrew.c
Examining data/netatalk-3.1.12~ds/libatalk/unicode/charsets/mac_centraleurope.c
Examining data/netatalk-3.1.12~ds/libatalk/unicode/charsets/mac_turkish.c
Examining data/netatalk-3.1.12~ds/libatalk/unicode/charsets/mac_cyrillic.c
Examining data/netatalk-3.1.12~ds/libatalk/unicode/charsets/mac_japanese.c
Examining data/netatalk-3.1.12~ds/libatalk/unicode/charsets/mac_chinese_trad.c
Examining data/netatalk-3.1.12~ds/libatalk/unicode/charsets/mac_chinese_simp.c
Examining data/netatalk-3.1.12~ds/libatalk/unicode/charsets/mac_korean.c
Examining data/netatalk-3.1.12~ds/libatalk/unicode/charsets/generic_cjk.c
Examining data/netatalk-3.1.12~ds/libatalk/unicode/charsets/generic_mb.c
Examining data/netatalk-3.1.12~ds/libatalk/vfs/vfs.c
Examining data/netatalk-3.1.12~ds/libatalk/vfs/acl.c
Examining data/netatalk-3.1.12~ds/libatalk/vfs/extattr.c
Examining data/netatalk-3.1.12~ds/libatalk/vfs/ea_sys.c
Examining data/netatalk-3.1.12~ds/libatalk/vfs/unix.c
Examining data/netatalk-3.1.12~ds/libatalk/vfs/ea_ad.c
Examining data/netatalk-3.1.12~ds/bin/afppasswd/afppasswd.c
Examining data/netatalk-3.1.12~ds/bin/misc/uuidtest.c
Examining data/netatalk-3.1.12~ds/bin/misc/fce.c
Examining data/netatalk-3.1.12~ds/bin/misc/logger_test.c
Examining data/netatalk-3.1.12~ds/bin/misc/netacnv.c
Examining data/netatalk-3.1.12~ds/bin/ad/ad.h
Examining data/netatalk-3.1.12~ds/bin/ad/ad.c
Examining data/netatalk-3.1.12~ds/bin/ad/ad_cp.c
Examining data/netatalk-3.1.12~ds/bin/ad/ad_rm.c
Examining data/netatalk-3.1.12~ds/bin/ad/ad_set.c
Examining data/netatalk-3.1.12~ds/bin/ad/ad_find.c
Examining data/netatalk-3.1.12~ds/bin/ad/ad_ls.c
Examining data/netatalk-3.1.12~ds/bin/ad/ad_mv.c
Examining data/netatalk-3.1.12~ds/bin/ad/ad_util.c
Examining data/netatalk-3.1.12~ds/etc/spotlight/sparql_map.h
Examining data/netatalk-3.1.12~ds/etc/spotlight/sparql_map.c
Examining data/netatalk-3.1.12~ds/etc/afpd/auth.h
Examining data/netatalk-3.1.12~ds/etc/afpd/afp_config.h
Examining data/netatalk-3.1.12~ds/etc/afpd/desktop.h
Examining data/netatalk-3.1.12~ds/etc/afpd/fce_api_internal.h
Examining data/netatalk-3.1.12~ds/etc/afpd/file.h
Examining data/netatalk-3.1.12~ds/etc/afpd/filedir.h
Examining data/netatalk-3.1.12~ds/etc/afpd/fork.h
Examining data/netatalk-3.1.12~ds/etc/afpd/icon.h
Examining data/netatalk-3.1.12~ds/etc/afpd/mangle.h
Examining data/netatalk-3.1.12~ds/etc/afpd/misc.h
Examining data/netatalk-3.1.12~ds/etc/afpd/status.h
Examining data/netatalk-3.1.12~ds/etc/afpd/switch.h
Examining data/netatalk-3.1.12~ds/etc/afpd/uam_auth.h
Examining data/netatalk-3.1.12~ds/etc/afpd/uid.h
Examining data/netatalk-3.1.12~ds/etc/afpd/unix.h
Examining data/netatalk-3.1.12~ds/etc/afpd/volume.h
Examining data/netatalk-3.1.12~ds/etc/afpd/hash.h
Examining data/netatalk-3.1.12~ds/etc/afpd/acls.h
Examining data/netatalk-3.1.12~ds/etc/afpd/acl_mappings.h
Examining data/netatalk-3.1.12~ds/etc/afpd/extattrs.h
Examining data/netatalk-3.1.12~ds/etc/afpd/dircache.h
Examining data/netatalk-3.1.12~ds/etc/afpd/afpstats_obj.h
Examining data/netatalk-3.1.12~ds/etc/afpd/afpstats.h
Examining data/netatalk-3.1.12~ds/etc/afpd/afp_config.c
Examining data/netatalk-3.1.12~ds/etc/afpd/afp_options.c
Examining data/netatalk-3.1.12~ds/etc/afpd/afp_util.c
Examining data/netatalk-3.1.12~ds/etc/afpd/afprun.c
Examining data/netatalk-3.1.12~ds/etc/afpd/afs.c
Examining data/netatalk-3.1.12~ds/etc/afpd/appl.c
Examining data/netatalk-3.1.12~ds/etc/afpd/extattrs.c
Examining data/netatalk-3.1.12~ds/etc/afpd/fce_api.c
Examining data/netatalk-3.1.12~ds/etc/afpd/fce_util.c
Examining data/netatalk-3.1.12~ds/etc/afpd/file.c
Examining data/netatalk-3.1.12~ds/etc/afpd/fork.c
Examining data/netatalk-3.1.12~ds/etc/afpd/hash.c
Examining data/netatalk-3.1.12~ds/etc/afpd/main.c
Examining data/netatalk-3.1.12~ds/etc/afpd/mangle.c
Examining data/netatalk-3.1.12~ds/etc/afpd/messages.c
Examining data/netatalk-3.1.12~ds/etc/afpd/nfsquota.c
Examining data/netatalk-3.1.12~ds/etc/afpd/ofork.c
Examining data/netatalk-3.1.12~ds/etc/afpd/quota.c
Examining data/netatalk-3.1.12~ds/etc/afpd/status.c
Examining data/netatalk-3.1.12~ds/etc/afpd/switch.c
Examining data/netatalk-3.1.12~ds/etc/afpd/uam.c
Examining data/netatalk-3.1.12~ds/etc/afpd/uid.c
Examining data/netatalk-3.1.12~ds/etc/afpd/unix.c
Examining data/netatalk-3.1.12~ds/etc/afpd/afpstats.c
Examining data/netatalk-3.1.12~ds/etc/afpd/afpstats_obj.c
Examining data/netatalk-3.1.12~ds/etc/afpd/afpstats_service_glue.h
Examining data/netatalk-3.1.12~ds/etc/afpd/directory.h
Examining data/netatalk-3.1.12~ds/etc/afpd/volume.c
Examining data/netatalk-3.1.12~ds/etc/afpd/spotlight.c
Examining data/netatalk-3.1.12~ds/etc/afpd/spotlight_marshalling.c
Examining data/netatalk-3.1.12~ds/etc/afpd/afp_dsi.c
Examining data/netatalk-3.1.12~ds/etc/afpd/acls.c
Examining data/netatalk-3.1.12~ds/etc/afpd/directory.c
Examining data/netatalk-3.1.12~ds/etc/afpd/catsearch.c
Examining data/netatalk-3.1.12~ds/etc/afpd/dircache.c
Examining data/netatalk-3.1.12~ds/etc/afpd/enumerate.c
Examining data/netatalk-3.1.12~ds/etc/afpd/auth.c
Examining data/netatalk-3.1.12~ds/etc/afpd/desktop.c
Examining data/netatalk-3.1.12~ds/etc/afpd/filedir.c
Examining data/netatalk-3.1.12~ds/etc/cnid_dbd/dbif.h
Examining data/netatalk-3.1.12~ds/etc/cnid_dbd/pack.h
Examining data/netatalk-3.1.12~ds/etc/cnid_dbd/db_param.h
Examining data/netatalk-3.1.12~ds/etc/cnid_dbd/dbd.h
Examining data/netatalk-3.1.12~ds/etc/cnid_dbd/usockfd.h
Examining data/netatalk-3.1.12~ds/etc/cnid_dbd/comm.h
Examining data/netatalk-3.1.12~ds/etc/cnid_dbd/cmd_dbd.h
Examining data/netatalk-3.1.12~ds/etc/cnid_dbd/pack.c
Examining data/netatalk-3.1.12~ds/etc/cnid_dbd/comm.c
Examining data/netatalk-3.1.12~ds/etc/cnid_dbd/db_param.c
Examining data/netatalk-3.1.12~ds/etc/cnid_dbd/main.c
Examining data/netatalk-3.1.12~ds/etc/cnid_dbd/dbd_add.c
Examining data/netatalk-3.1.12~ds/etc/cnid_dbd/dbd_get.c
Examining data/netatalk-3.1.12~ds/etc/cnid_dbd/dbd_resolve.c
Examining data/netatalk-3.1.12~ds/etc/cnid_dbd/dbd_update.c
Examining data/netatalk-3.1.12~ds/etc/cnid_dbd/dbd_delete.c
Examining data/netatalk-3.1.12~ds/etc/cnid_dbd/dbd_getstamp.c
Examining data/netatalk-3.1.12~ds/etc/cnid_dbd/dbd_rebuild_add.c
Examining data/netatalk-3.1.12~ds/etc/cnid_dbd/dbd_dbcheck.c
Examining data/netatalk-3.1.12~ds/etc/cnid_dbd/dbd_search.c
Examining data/netatalk-3.1.12~ds/etc/cnid_dbd/cnid_metad.c
Examining data/netatalk-3.1.12~ds/etc/cnid_dbd/usockfd.c
Examining data/netatalk-3.1.12~ds/etc/cnid_dbd/cmd_dbd.c
Examining data/netatalk-3.1.12~ds/etc/cnid_dbd/cmd_dbd_scanvol.c
Examining data/netatalk-3.1.12~ds/etc/cnid_dbd/dbif.c
Examining data/netatalk-3.1.12~ds/etc/cnid_dbd/dbd_lookup.c
Examining data/netatalk-3.1.12~ds/etc/netatalk/afp_zeroconf.h
Examining data/netatalk-3.1.12~ds/etc/netatalk/afp_avahi.h
Examining data/netatalk-3.1.12~ds/etc/netatalk/afp_mdns.h
Examining data/netatalk-3.1.12~ds/etc/netatalk/netatalk.c
Examining data/netatalk-3.1.12~ds/etc/netatalk/afp_avahi.c
Examining data/netatalk-3.1.12~ds/etc/netatalk/afp_mdns.c
Examining data/netatalk-3.1.12~ds/etc/netatalk/afp_zeroconf.c
Examining data/netatalk-3.1.12~ds/etc/uams/openssl_compat.h
Examining data/netatalk-3.1.12~ds/etc/uams/uams_dhx2_pam.c
Examining data/netatalk-3.1.12~ds/etc/uams/uams_dhx2_passwd.c
Examining data/netatalk-3.1.12~ds/etc/uams/uams_dhx_pam.c
Examining data/netatalk-3.1.12~ds/etc/uams/uams_dhx_passwd.c
Examining data/netatalk-3.1.12~ds/etc/uams/uams_guest.c
Examining data/netatalk-3.1.12~ds/etc/uams/uams_pam.c
Examining data/netatalk-3.1.12~ds/etc/uams/uams_passwd.c
Examining data/netatalk-3.1.12~ds/etc/uams/uams_pgp.c
Examining data/netatalk-3.1.12~ds/etc/uams/uams_randnum.c
Examining data/netatalk-3.1.12~ds/etc/uams/uams_gss.c
Examining data/netatalk-3.1.12~ds/test/afpd/test.h
Examining data/netatalk-3.1.12~ds/test/afpd/subtests.h
Examining data/netatalk-3.1.12~ds/test/afpd/afpfunc_helpers.h
Examining data/netatalk-3.1.12~ds/test/afpd/subtests.c
Examining data/netatalk-3.1.12~ds/test/afpd/afpfunc_helpers.c
Examining data/netatalk-3.1.12~ds/test/afpd/test.c
Examining data/netatalk-3.1.12~ds/libevent/compat/sys/queue.h
Examining data/netatalk-3.1.12~ds/libevent/test/tinytest.h
Examining data/netatalk-3.1.12~ds/libevent/test/tinytest_macros.h
Examining data/netatalk-3.1.12~ds/libevent/test/regress.h
Examining data/netatalk-3.1.12~ds/libevent/test/tinytest_local.h
Examining data/netatalk-3.1.12~ds/libevent/test/bench.c
Examining data/netatalk-3.1.12~ds/libevent/test/bench_cascade.c
Examining data/netatalk-3.1.12~ds/libevent/test/bench_http.c
Examining data/netatalk-3.1.12~ds/libevent/test/bench_httpclient.c
Examining data/netatalk-3.1.12~ds/libevent/test/regress.c
Examining data/netatalk-3.1.12~ds/libevent/test/regress_buffer.c
Examining data/netatalk-3.1.12~ds/libevent/test/regress_http.c
Examining data/netatalk-3.1.12~ds/libevent/test/regress_dns.c
Examining data/netatalk-3.1.12~ds/libevent/test/regress_testutils.c
Examining data/netatalk-3.1.12~ds/libevent/test/regress_testutils.h
Examining data/netatalk-3.1.12~ds/libevent/test/regress_rpc.c
Examining data/netatalk-3.1.12~ds/libevent/test/regress.gen.c
Examining data/netatalk-3.1.12~ds/libevent/test/regress.gen.h
Examining data/netatalk-3.1.12~ds/libevent/test/regress_et.c
Examining data/netatalk-3.1.12~ds/libevent/test/regress_bufferevent.c
Examining data/netatalk-3.1.12~ds/libevent/test/regress_listener.c
Examining data/netatalk-3.1.12~ds/libevent/test/regress_util.c
Examining data/netatalk-3.1.12~ds/libevent/test/tinytest.c
Examining data/netatalk-3.1.12~ds/libevent/test/regress_main.c
Examining data/netatalk-3.1.12~ds/libevent/test/regress_minheap.c
Examining data/netatalk-3.1.12~ds/libevent/test/regress_thread.c
Examining data/netatalk-3.1.12~ds/libevent/test/regress_zlib.c
Examining data/netatalk-3.1.12~ds/libevent/test/regress_iocp.c
Examining data/netatalk-3.1.12~ds/libevent/test/regress_ssl.c
Examining data/netatalk-3.1.12~ds/libevent/test/test-changelist.c
Examining data/netatalk-3.1.12~ds/libevent/test/test-eof.c
Examining data/netatalk-3.1.12~ds/libevent/test/test-init.c
Examining data/netatalk-3.1.12~ds/libevent/test/test-ratelim.c
Examining data/netatalk-3.1.12~ds/libevent/test/test-time.c
Examining data/netatalk-3.1.12~ds/libevent/test/test-weof.c
Examining data/netatalk-3.1.12~ds/libevent/WIN32-Code/event2/event-config.h
Examining data/netatalk-3.1.12~ds/libevent/WIN32-Code/tree.h
Examining data/netatalk-3.1.12~ds/libevent/event.h
Examining data/netatalk-3.1.12~ds/libevent/evhttp.h
Examining data/netatalk-3.1.12~ds/libevent/evdns.h
Examining data/netatalk-3.1.12~ds/libevent/evrpc.h
Examining data/netatalk-3.1.12~ds/libevent/evutil.h
Examining data/netatalk-3.1.12~ds/libevent/util-internal.h
Examining data/netatalk-3.1.12~ds/libevent/mm-internal.h
Examining data/netatalk-3.1.12~ds/libevent/ipv6-internal.h
Examining data/netatalk-3.1.12~ds/libevent/evrpc-internal.h
Examining data/netatalk-3.1.12~ds/libevent/strlcpy-internal.h
Examining data/netatalk-3.1.12~ds/libevent/evbuffer-internal.h
Examining data/netatalk-3.1.12~ds/libevent/bufferevent-internal.h
Examining data/netatalk-3.1.12~ds/libevent/http-internal.h
Examining data/netatalk-3.1.12~ds/libevent/event-internal.h
Examining data/netatalk-3.1.12~ds/libevent/evthread-internal.h
Examining data/netatalk-3.1.12~ds/libevent/ht-internal.h
Examining data/netatalk-3.1.12~ds/libevent/defer-internal.h
Examining data/netatalk-3.1.12~ds/libevent/minheap-internal.h
Examining data/netatalk-3.1.12~ds/libevent/log-internal.h
Examining data/netatalk-3.1.12~ds/libevent/evsignal-internal.h
Examining data/netatalk-3.1.12~ds/libevent/evmap-internal.h
Examining data/netatalk-3.1.12~ds/libevent/changelist-internal.h
Examining data/netatalk-3.1.12~ds/libevent/iocp-internal.h
Examining data/netatalk-3.1.12~ds/libevent/ratelim-internal.h
Examining data/netatalk-3.1.12~ds/libevent/epoll_sub.c
Examining data/netatalk-3.1.12~ds/libevent/event.c
Examining data/netatalk-3.1.12~ds/libevent/evthread.c
Examining data/netatalk-3.1.12~ds/libevent/buffer.c
Examining data/netatalk-3.1.12~ds/libevent/bufferevent.c
Examining data/netatalk-3.1.12~ds/libevent/bufferevent_sock.c
Examining data/netatalk-3.1.12~ds/libevent/bufferevent_filter.c
Examining data/netatalk-3.1.12~ds/libevent/bufferevent_pair.c
Examining data/netatalk-3.1.12~ds/libevent/listener.c
Examining data/netatalk-3.1.12~ds/libevent/bufferevent_ratelim.c
Examining data/netatalk-3.1.12~ds/libevent/evmap.c
Examining data/netatalk-3.1.12~ds/libevent/log.c
Examining data/netatalk-3.1.12~ds/libevent/evutil.c
Examining data/netatalk-3.1.12~ds/libevent/evutil_rand.c
Examining data/netatalk-3.1.12~ds/libevent/strlcpy.c
Examining data/netatalk-3.1.12~ds/libevent/select.c
Examining data/netatalk-3.1.12~ds/libevent/poll.c
Examining data/netatalk-3.1.12~ds/libevent/devpoll.c
Examining data/netatalk-3.1.12~ds/libevent/kqueue.c
Examining data/netatalk-3.1.12~ds/libevent/epoll.c
Examining data/netatalk-3.1.12~ds/libevent/evport.c
Examining data/netatalk-3.1.12~ds/libevent/signal.c
Examining data/netatalk-3.1.12~ds/libevent/win32select.c
Examining data/netatalk-3.1.12~ds/libevent/evthread_win32.c
Examining data/netatalk-3.1.12~ds/libevent/buffer_iocp.c
Examining data/netatalk-3.1.12~ds/libevent/event_iocp.c
Examining data/netatalk-3.1.12~ds/libevent/bufferevent_async.c
Examining data/netatalk-3.1.12~ds/libevent/event_tagging.c
Examining data/netatalk-3.1.12~ds/libevent/http.c
Examining data/netatalk-3.1.12~ds/libevent/evdns.c
Examining data/netatalk-3.1.12~ds/libevent/evrpc.c
Examining data/netatalk-3.1.12~ds/libevent/bufferevent_openssl.c
Examining data/netatalk-3.1.12~ds/libevent/evthread_pthread.c
Examining data/netatalk-3.1.12~ds/libevent/arc4random.c
Examining data/netatalk-3.1.12~ds/libevent/include/event2/buffer.h
Examining data/netatalk-3.1.12~ds/libevent/include/event2/buffer_compat.h
Examining data/netatalk-3.1.12~ds/libevent/include/event2/bufferevent.h
Examining data/netatalk-3.1.12~ds/libevent/include/event2/bufferevent_compat.h
Examining data/netatalk-3.1.12~ds/libevent/include/event2/bufferevent_ssl.h
Examining data/netatalk-3.1.12~ds/libevent/include/event2/bufferevent_struct.h
Examining data/netatalk-3.1.12~ds/libevent/include/event2/dns.h
Examining data/netatalk-3.1.12~ds/libevent/include/event2/dns_compat.h
Examining data/netatalk-3.1.12~ds/libevent/include/event2/dns_struct.h
Examining data/netatalk-3.1.12~ds/libevent/include/event2/event.h
Examining data/netatalk-3.1.12~ds/libevent/include/event2/event_compat.h
Examining data/netatalk-3.1.12~ds/libevent/include/event2/event_struct.h
Examining data/netatalk-3.1.12~ds/libevent/include/event2/http.h
Examining data/netatalk-3.1.12~ds/libevent/include/event2/http_compat.h
Examining data/netatalk-3.1.12~ds/libevent/include/event2/http_struct.h
Examining data/netatalk-3.1.12~ds/libevent/include/event2/keyvalq_struct.h
Examining data/netatalk-3.1.12~ds/libevent/include/event2/listener.h
Examining data/netatalk-3.1.12~ds/libevent/include/event2/rpc.h
Examining data/netatalk-3.1.12~ds/libevent/include/event2/rpc_compat.h
Examining data/netatalk-3.1.12~ds/libevent/include/event2/rpc_struct.h
Examining data/netatalk-3.1.12~ds/libevent/include/event2/tag.h
Examining data/netatalk-3.1.12~ds/libevent/include/event2/tag_compat.h
Examining data/netatalk-3.1.12~ds/libevent/include/event2/thread.h
Examining data/netatalk-3.1.12~ds/libevent/include/event2/util.h
Examining data/netatalk-3.1.12~ds/libevent/sample/dns-example.c
Examining data/netatalk-3.1.12~ds/libevent/sample/event-test.c
Examining data/netatalk-3.1.12~ds/libevent/sample/hello-world.c
Examining data/netatalk-3.1.12~ds/libevent/sample/http-server.c
Examining data/netatalk-3.1.12~ds/libevent/sample/le-proxy.c
Examining data/netatalk-3.1.12~ds/libevent/sample/signal-test.c
Examining data/netatalk-3.1.12~ds/libevent/sample/time-test.c

FINAL RESULTS:

data/netatalk-3.1.12~ds/bin/ad/ad_cp.c:796:16:  [5] (race) readlink:
  This accepts filename arguments; if an attacker can move those files or
  change the link content, a race condition results. Also, it does not
  terminate with ASCII NUL. (CWE-362, CWE-20). Reconsider approach.
    if ((len = readlink(spath, llink, sizeof(llink) - 1)) == -1) {
data/netatalk-3.1.12~ds/bin/ad/ad_cp.c:853:14:  [5] (race) chown:
  This accepts filename arguments; if an attacker can move those files, a
  race condition results. (CWE-362). Use fchown( ) instead.
             chown(to.p_path, fs->st_uid, fs->st_gid))) {
data/netatalk-3.1.12~ds/bin/ad/ad_cp.c:862:40:  [5] (race) chmod:
  This accepts filename arguments; if an attacker can move those files, a
  race condition results. (CWE-362). Use fchmod( ) instead.
        if (fdval ? fchmod(fd, mode) : chmod(to.p_path, mode)) {
data/netatalk-3.1.12~ds/etc/afpd/desktop.c:186:18:  [5] (race) chown:
  This accepts filename arguments; if an attacker can move those files, a
  race condition results. (CWE-362). Use fchown( ) instead.
            if ( chown( modbuf, uid, gid ) < 0 && errno != EPERM ) {
data/netatalk-3.1.12~ds/etc/afpd/desktop.c:192:14:  [5] (race) chown:
  This accepts filename arguments; if an attacker can move those files, a
  race condition results. (CWE-362). Use fchown( ) instead.
        if ( chown( deskp->d_name, uid, gid ) < 0 && errno != EPERM ) {
data/netatalk-3.1.12~ds/etc/afpd/desktop.c:202:9:  [5] (race) chown:
  This accepts filename arguments; if an attacker can move those files, a
  race condition results. (CWE-362). Use fchown( ) instead.
    if (chown(cfrombstr(dtpath), uid, gid ) < 0 && errno != EPERM ) {
data/netatalk-3.1.12~ds/etc/cnid_dbd/cmd_dbd_scanvol.c:216:9:  [5] (race) chown:
  This accepts filename arguments; if an attacker can move those files, a
  race condition results. (CWE-362). Use fchown( ) instead.
        chown(adname, st->st_uid, st->st_gid);
data/netatalk-3.1.12~ds/etc/cnid_dbd/cmd_dbd_scanvol.c:219:9:  [5] (race) chmod:
  This accepts filename arguments; if an attacker can move those files, a
  race condition results. (CWE-362). Use fchmod( ) instead.
        chmod(adname, st->st_mode);
data/netatalk-3.1.12~ds/etc/cnid_dbd/cmd_dbd_scanvol.c:399:9:  [5] (race) chown:
  This accepts filename arguments; if an attacker can move those files, a
  race condition results. (CWE-362). Use fchown( ) instead.
        chown(ADv2_DIRNAME, st.st_uid, st.st_gid);
data/netatalk-3.1.12~ds/etc/cnid_dbd/cmd_dbd_scanvol.c:400:9:  [5] (race) chown:
  This accepts filename arguments; if an attacker can move those files, a
  race condition results. (CWE-362). Use fchown( ) instead.
        chown(vol->ad_path(".", ADFLAGS_DIR), st.st_uid, st.st_gid);
data/netatalk-3.1.12~ds/etc/cnid_dbd/main.c:148:18:  [5] (race) chown:
  This accepts filename arguments; if an attacker can move those files, a
  race condition results. (CWE-362). Use fchown( ) instead.
            if ((chown(lockpath, st.st_uid, st.st_gid)) != 0) {
data/netatalk-3.1.12~ds/etc/cnid_dbd/usockfd.c:61:8:  [5] (race) chmod:
  This accepts filename arguments; if an attacker can move those files, a
  race condition results. (CWE-362). Use fchmod( ) instead.
#ifdef chmod
data/netatalk-3.1.12~ds/etc/cnid_dbd/usockfd.c:62:8:  [5] (race) chmod:
  This accepts filename arguments; if an attacker can move those files, a
  race condition results. (CWE-362). Use fchmod( ) instead.
#undef chmod
data/netatalk-3.1.12~ds/etc/cnid_dbd/usockfd.c:64:9:  [5] (race) chmod:
  This accepts filename arguments; if an attacker can move those files, a
  race condition results. (CWE-362). Use fchmod( ) instead.
    if (chmod(usock_fn, mode) < 0) {
data/netatalk-3.1.12~ds/include/atalk/acl.h:65:19:  [5] (race) chmod:
  This accepts filename arguments; if an attacker can move those files, a
  race condition results. (CWE-362). Use fchmod( ) instead.
#define chmod_acl chmod
data/netatalk-3.1.12~ds/libatalk/acl/unix.c:230:16:  [5] (race) chmod:
  This accepts filename arguments; if an attacker can move those files, a
  race condition results. (CWE-362). Use fchmod( ) instead.
        return chmod(name, mode);
data/netatalk-3.1.12~ds/libatalk/acl/unix.c:235:9:  [5] (race) chmod:
  This accepts filename arguments; if an attacker can move those files, a
  race condition results. (CWE-362). Use fchmod( ) instead.
    if (chmod(name, mode) != 0) /* (3) */
data/netatalk-3.1.12~ds/libatalk/acl/unix.c:319:11:  [5] (race) chmod:
  This accepts filename arguments; if an attacker can move those files, a
  race condition results. (CWE-362). Use fchmod( ) instead.
    ret = chmod(name, mode);
data/netatalk-3.1.12~ds/libatalk/adouble/ad_open.c:1033:24:  [5] (race) readlink:
  This accepts filename arguments; if an attacker can move those files or
  change the link content, a race condition results. Also, it does not
  terminate with ASCII NUL. (CWE-362, CWE-20). Reconsider approach.
            if ((lsz = readlink(path, ad->ad_data_fork.adf_syml, MAXPATHLEN)) <= 0) {
data/netatalk-3.1.12~ds/libatalk/util/unix.c:252:16:  [5] (race) chown:
  This accepts filename arguments; if an attacker can move those files, a
  race condition results. (CWE-362). Use fchown( ) instead.
        return chown(path, owner, group);
data/netatalk-3.1.12~ds/libatalk/util/unix.c:288:16:  [5] (race) chmod:
  This accepts filename arguments; if an attacker can move those files, a
  race condition results. (CWE-362). Use fchmod( ) instead.
        return chmod(path, mode);
data/netatalk-3.1.12~ds/libatalk/vfs/vfs.c:120:12:  [5] (race) chown:
  This accepts filename arguments; if an attacker can move those files, a
  race condition results. (CWE-362). Use fchown( ) instead.
    return chown( ad_p, uid, gid );
data/netatalk-3.1.12~ds/libatalk/vfs/vfs.c:463:12:  [5] (race) chown:
  This accepts filename arguments; if an attacker can move those files, a
  race condition results. (CWE-362). Use fchown( ) instead.
    return chown(vol->ad_path(path, ADFLAGS_HF ), uid, gid);
data/netatalk-3.1.12~ds/libatalk/vfs/vfs.c:670:11:  [5] (race) chown:
  This accepts filename arguments; if an attacker can move those files, a
  race condition results. (CWE-362). Use fchown( ) instead.
VFS_MFUNC(chown, VFS_FUNC_ARGS_CHOWN, VFS_FUNC_VARS_CHOWN)
data/netatalk-3.1.12~ds/bin/ad/ad_ls.c:487:5:  [4] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused).
    strcat(cwdpath, path);
data/netatalk-3.1.12~ds/bin/ad/ad_mv.c:191:11:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
    (void)strcpy(path, argv[argc - 1]);
data/netatalk-3.1.12~ds/bin/ad/ad_mv.c:237:19:  [4] (race) access:
  This usually indicates a security flaw. If an attacker can change anything
  along the path between the call to access() and the file's actual use
  (e.g., by moving files), the attacker can exploit the race condition
  (CWE-362/CWE-367!). Set up the correct permissions (e.g., using setuid())
  and try to open the file directly.
    if (!fflg && !access(to, F_OK)) {
data/netatalk-3.1.12~ds/bin/ad/ad_mv.c:253:20:  [4] (race) access:
  This usually indicates a security flaw. If an attacker can change anything
  along the path between the call to access() and the file's actual use
  (e.g., by moving files), the attacker can exploit the race condition
  (CWE-362/CWE-367!). Set up the correct permissions (e.g., using setuid())
  and try to open the file directly.
        } else if (access(to, W_OK) && !stat(to, &sb)) {
data/netatalk-3.1.12~ds/bin/ad/ad_mv.c:398:9:  [4] (shell) execl:
  This causes a new program to execute and is difficult to use safely
  (CWE-78). try using a library call that implements the same functionality
  if available.
        execl(_PATH_AD, "ad", "cp", vflg ? "-Rpv" : "-Rp", from, to, (char *)NULL);
data/netatalk-3.1.12~ds/bin/ad/ad_mv.c:422:9:  [4] (shell) execl:
  This causes a new program to execute and is difficult to use safely
  (CWE-78). try using a library call that implements the same functionality
  if available.
        execl(_PATH_AD, "ad", "rm", "-R", from, (char *)NULL);
data/netatalk-3.1.12~ds/bin/ad/ad_util.c:86:15:  [4] (format) vsnprintf:
  If format strings can be influenced by an attacker, they can be exploited,
  and note that sprintf variations do not always \0-terminate (CWE-134). Use
  a constant for the format specification.
        len = vsnprintf(logbuffer, 1023, fmt, args);
data/netatalk-3.1.12~ds/bin/afppasswd/afppasswd.c:124:3:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
  strcpy(buf, path);
data/netatalk-3.1.12~ds/bin/afppasswd/afppasswd.c:150:5:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
    strcpy(buf, name);
data/netatalk-3.1.12~ds/bin/afppasswd/afppasswd.c:151:5:  [4] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused).
    strcat(buf, FORMAT);
data/netatalk-3.1.12~ds/bin/afppasswd/afppasswd.c:163:14:  [4] (misc) getpass:
  This function is obsolete and not portable. It was in SUSv2 but removed by
  POSIX.2. What it does exactly varies considerably between systems,
  particularly in where its prompt is displayed and where it gets its data
  (e.g., /dev/tty, stdin, stderr, etc.). In addition, some implementations
  overflow buffers. (CWE-676, CWE-120, CWE-20). Make the specific calls to do
  exactly what you want. If you continue to use it, or write your own, be
  sure to zero the password as soon as possible to avoid leaving the
  cleartext password visible in the process' address space.
    passwd = getpass("Enter OLD AFP password: ");
data/netatalk-3.1.12~ds/bin/afppasswd/afppasswd.c:173:12:  [4] (misc) getpass:
  This function is obsolete and not portable. It was in SUSv2 but removed by
  POSIX.2. What it does exactly varies considerably between systems,
  particularly in where its prompt is displayed and where it gets its data
  (e.g., /dev/tty, stdin, stderr, etc.). In addition, some implementations
  overflow buffers. (CWE-676, CWE-120, CWE-20). Make the specific calls to do
  exactly what you want. If you continue to use it, or write your own, be
  sure to zero the password as soon as possible to avoid leaving the
  cleartext password visible in the process' address space.
  passwd = getpass("Enter NEW AFP password: ");
data/netatalk-3.1.12~ds/bin/afppasswd/afppasswd.c:186:12:  [4] (misc) getpass:
  This function is obsolete and not portable. It was in SUSv2 but removed by
  POSIX.2. What it does exactly varies considerably between systems,
  particularly in where its prompt is displayed and where it gets its data
  (e.g., /dev/tty, stdin, stderr, etc.). In addition, some implementations
  overflow buffers. (CWE-676, CWE-120, CWE-20). Make the specific calls to do
  exactly what you want. If you continue to use it, or write your own, be
  sure to zero the password as soon as possible to avoid leaving the
  cleartext password visible in the process' address space.
  passwd = getpass("Enter NEW AFP password again: ");
data/netatalk-3.1.12~ds/bin/afppasswd/afppasswd.c:235:5:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
    strcpy(buf, pwd->pw_name);
data/netatalk-3.1.12~ds/bin/afppasswd/afppasswd.c:236:5:  [4] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused).
    strcat(buf, FORMAT);
data/netatalk-3.1.12~ds/bin/misc/fce.c:187:21:  [4] (format) printf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
                    printf(", pid: %" PRId64, packet.fcep_pid);
data/netatalk-3.1.12~ds/etc/afpd/afprun.c:257:5:  [4] (shell) execl:
  This causes a new program to execute and is difficult to use safely
  (CWE-78). try using a library call that implements the same functionality
  if available.
    execl("/bin/sh","sh","-c",cmd,NULL);  
data/netatalk-3.1.12~ds/etc/afpd/afprun.c:315:5:  [4] (shell) execl:
  This causes a new program to execute and is difficult to use safely
  (CWE-78). try using a library call that implements the same functionality
  if available.
    execl("/bin/sh","sh","-c", cmd, NULL);
data/netatalk-3.1.12~ds/etc/afpd/appl.c:250:5:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
    strcpy( tempfile, dtf );
data/netatalk-3.1.12~ds/etc/afpd/appl.c:335:5:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
    strcpy( tempfile, dtf );
data/netatalk-3.1.12~ds/etc/afpd/auth.c:1017:5:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
    strcpy(name, path);
data/netatalk-3.1.12~ds/etc/afpd/desktop.c:78:9:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
        strcpy( modbuf, deskp->d_name );
data/netatalk-3.1.12~ds/etc/afpd/desktop.c:90:13:  [4] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused).
            strcat( modbuf, subp->d_name );
data/netatalk-3.1.12~ds/etc/afpd/desktop.c:172:9:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
        strcpy( modbuf, deskp->d_name );
data/netatalk-3.1.12~ds/etc/afpd/desktop.c:184:13:  [4] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused).
            strcat( modbuf, subp->d_name );
data/netatalk-3.1.12~ds/etc/afpd/desktop.c:720:5:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
    strcpy( path, vol->v_dbpath );
data/netatalk-3.1.12~ds/etc/afpd/desktop.c:743:5:  [4] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused).
    strcat( path, ext );
data/netatalk-3.1.12~ds/etc/afpd/directory.c:154:5:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
    strcpy(path, dir);
data/netatalk-3.1.12~ds/etc/afpd/directory.c:167:9:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
        strcpy(path + len, de->d_name);
data/netatalk-3.1.12~ds/etc/afpd/directory.c:212:5:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
    strcpy(spath, src);
data/netatalk-3.1.12~ds/etc/afpd/directory.c:217:5:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
    strcpy(dpath, dst);
data/netatalk-3.1.12~ds/etc/afpd/directory.c:232:9:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
        strcpy(spath + slen, de->d_name);
data/netatalk-3.1.12~ds/etc/afpd/directory.c:239:13:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
            strcpy(dpath + dlen, de->d_name);
data/netatalk-3.1.12~ds/etc/afpd/directory.c:328:17:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
                strcpy(ret->m_name, temp);
data/netatalk-3.1.12~ds/etc/afpd/directory.c:350:17:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
                strcpy(ret->m_name, t);
data/netatalk-3.1.12~ds/etc/afpd/extattrs.c:180:13:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
            strcpy(attrnamebuf, ea_finderinfo);
data/netatalk-3.1.12~ds/etc/afpd/extattrs.c:190:13:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
            strcpy(attrnamebuf + attrbuflen, ea_resourcefork);
data/netatalk-3.1.12~ds/etc/afpd/file.c:172:9:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
        strcpy(name, tp);
data/netatalk-3.1.12~ds/etc/afpd/file.c:1331:5:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
    strcpy( newname, s_path->m_name );
data/netatalk-3.1.12~ds/etc/afpd/file.c:2082:5:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
    strcpy(spath, path->m_name);
data/netatalk-3.1.12~ds/etc/afpd/file.c:2083:5:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
    strcpy(supath, path->u_name); /* this is for the cnid changing */
data/netatalk-3.1.12~ds/etc/afpd/filedir.c:453:9:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
        strcpy(oldname, path->m_name); /* an extra copy for of_rename */
data/netatalk-3.1.12~ds/etc/afpd/filedir.c:762:9:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
        strcpy(oldname, path->m_name); /* an extra copy for of_rename */
data/netatalk-3.1.12~ds/etc/afpd/filedir.c:794:9:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
        strcpy(newname, oldname);
data/netatalk-3.1.12~ds/etc/afpd/fork.c:148:78:  [4] (race) access:
  This usually indicates a security flaw. If an attacker can change anything
  along the path between the call to access() and the file's actual use
  (e.g., by moving files), the attacker can exploit the race condition
  (CWE-362/CWE-367!). Set up the correct permissions (e.g., using setuid())
  and try to open the file directly.
static int fork_setmode(const AFPObj *obj, struct adouble *adp, int eid, int access, int ofrefnum)
data/netatalk-3.1.12~ds/etc/afpd/fork.c:156:12:  [4] (race) access:
  This usually indicates a security flaw. If an attacker can change anything
  along the path between the call to access() and the file's actual use
  (e.g., by moving files), the attacker can exploit the race condition
  (CWE-362/CWE-367!). Set up the correct permissions (e.g., using setuid())
  and try to open the file directly.
    if (! (access & (OPENACC_WR | OPENACC_RD | OPENACC_DWR | OPENACC_DRD))) {
data/netatalk-3.1.12~ds/etc/afpd/fork.c:160:10:  [4] (race) access:
  This usually indicates a security flaw. If an attacker can change anything
  along the path between the call to access() and the file's actual use
  (e.g., by moving files), the attacker can exploit the race condition
  (CWE-362/CWE-367!). Set up the correct permissions (e.g., using setuid())
  and try to open the file directly.
    if ((access & (OPENACC_RD | OPENACC_DRD))) {
data/netatalk-3.1.12~ds/etc/afpd/fork.c:166:14:  [4] (race) access:
  This usually indicates a security flaw. If an attacker can change anything
  along the path between the call to access() and the file's actual use
  (e.g., by moving files), the attacker can exploit the race condition
  (CWE-362/CWE-367!). Set up the correct permissions (e.g., using setuid())
  and try to open the file directly.
        if ((access & OPENACC_RD) && denyreadset) {
data/netatalk-3.1.12~ds/etc/afpd/fork.c:170:14:  [4] (race) access:
  This usually indicates a security flaw. If an attacker can change anything
  along the path between the call to access() and the file's actual use
  (e.g., by moving files), the attacker can exploit the race condition
  (CWE-362/CWE-367!). Set up the correct permissions (e.g., using setuid())
  and try to open the file directly.
        if ((access & OPENACC_DRD) && readset) {
data/netatalk-3.1.12~ds/etc/afpd/fork.c:177:14:  [4] (race) access:
  This usually indicates a security flaw. If an attacker can change anything
  along the path between the call to access() and the file's actual use
  (e.g., by moving files), the attacker can exploit the race condition
  (CWE-362/CWE-367!). Set up the correct permissions (e.g., using setuid())
  and try to open the file directly.
        if ((access & OPENACC_RD)) {
data/netatalk-3.1.12~ds/etc/afpd/fork.c:182:14:  [4] (race) access:
  This usually indicates a security flaw. If an attacker can change anything
  along the path between the call to access() and the file's actual use
  (e.g., by moving files), the attacker can exploit the race condition
  (CWE-362/CWE-367!). Set up the correct permissions (e.g., using setuid())
  and try to open the file directly.
        if ((access & OPENACC_DRD)) {
data/netatalk-3.1.12~ds/etc/afpd/fork.c:189:10:  [4] (race) access:
  This usually indicates a security flaw. If an attacker can change anything
  along the path between the call to access() and the file's actual use
  (e.g., by moving files), the attacker can exploit the race condition
  (CWE-362/CWE-367!). Set up the correct permissions (e.g., using setuid())
  and try to open the file directly.
    if ((access & (OPENACC_WR | OPENACC_DWR))) {
data/netatalk-3.1.12~ds/etc/afpd/fork.c:195:14:  [4] (race) access:
  This usually indicates a security flaw. If an attacker can change anything
  along the path between the call to access() and the file's actual use
  (e.g., by moving files), the attacker can exploit the race condition
  (CWE-362/CWE-367!). Set up the correct permissions (e.g., using setuid())
  and try to open the file directly.
        if ((access & OPENACC_WR) && denywriteset) {
data/netatalk-3.1.12~ds/etc/afpd/fork.c:199:14:  [4] (race) access:
  This usually indicates a security flaw. If an attacker can change anything
  along the path between the call to access() and the file's actual use
  (e.g., by moving files), the attacker can exploit the race condition
  (CWE-362/CWE-367!). Set up the correct permissions (e.g., using setuid())
  and try to open the file directly.
        if ((access & OPENACC_DWR) && writeset) {
data/netatalk-3.1.12~ds/etc/afpd/fork.c:203:14:  [4] (race) access:
  This usually indicates a security flaw. If an attacker can change anything
  along the path between the call to access() and the file's actual use
  (e.g., by moving files), the attacker can exploit the race condition
  (CWE-362/CWE-367!). Set up the correct permissions (e.g., using setuid())
  and try to open the file directly.
        if ((access & OPENACC_WR)) {
data/netatalk-3.1.12~ds/etc/afpd/fork.c:208:14:  [4] (race) access:
  This usually indicates a security flaw. If an attacker can change anything
  along the path between the call to access() and the file's actual use
  (e.g., by moving files), the attacker can exploit the race condition
  (CWE-362/CWE-367!). Set up the correct permissions (e.g., using setuid())
  and try to open the file directly.
        if ((access & OPENACC_DWR)) {
data/netatalk-3.1.12~ds/etc/afpd/fork.c:227:26:  [4] (race) access:
  This usually indicates a security flaw. If an attacker can change anything
  along the path between the call to access() and the file's actual use
  (e.g., by moving files), the attacker can exploit the race condition
  (CWE-362/CWE-367!). Set up the correct permissions (e.g., using setuid())
  and try to open the file directly.
        shmd.f_access = (access & OPENACC_RD ? F_RDACC : 0) | (access & OPENACC_WR ? F_WRACC : 0);
data/netatalk-3.1.12~ds/etc/afpd/fork.c:227:64:  [4] (race) access:
  This usually indicates a security flaw. If an attacker can change anything
  along the path between the call to access() and the file's actual use
  (e.g., by moving files), the attacker can exploit the race condition
  (CWE-362/CWE-367!). Set up the correct permissions (e.g., using setuid())
  and try to open the file directly.
        shmd.f_access = (access & OPENACC_RD ? F_RDACC : 0) | (access & OPENACC_WR ? F_WRACC : 0);
data/netatalk-3.1.12~ds/etc/afpd/fork.c:231:24:  [4] (race) access:
  This usually indicates a security flaw. If an attacker can change anything
  along the path between the call to access() and the file's actual use
  (e.g., by moving files), the attacker can exploit the race condition
  (CWE-362/CWE-367!). Set up the correct permissions (e.g., using setuid())
  and try to open the file directly.
        shmd.f_deny = (access & OPENACC_DRD ? F_RDDNY : F_NODNY) | (access & OPENACC_DWR) ? F_WRDNY : 0;
data/netatalk-3.1.12~ds/etc/afpd/fork.c:231:69:  [4] (race) access:
  This usually indicates a security flaw. If an attacker can change anything
  along the path between the call to access() and the file's actual use
  (e.g., by moving files), the attacker can exploit the race condition
  (CWE-362/CWE-367!). Set up the correct permissions (e.g., using setuid())
  and try to open the file directly.
        shmd.f_deny = (access & OPENACC_DRD ? F_RDDNY : F_NODNY) | (access & OPENACC_DWR) ? F_WRDNY : 0;
data/netatalk-3.1.12~ds/etc/afpd/fork.c:257:34:  [4] (race) access:
  This usually indicates a security flaw. If an attacker can change anything
  along the path between the call to access() and the file's actual use
  (e.g., by moving files), the attacker can exploit the race condition
  (CWE-362/CWE-367!). Set up the correct permissions (e.g., using setuid())
  and try to open the file directly.
    uint16_t        vid, bitmap, access, ofrefnum;
data/netatalk-3.1.12~ds/etc/afpd/fork.c:283:13:  [4] (race) access:
  This usually indicates a security flaw. If an attacker can change anything
  along the path between the call to access() and the file's actual use
  (e.g., by moving files), the attacker can exploit the race condition
  (CWE-362/CWE-367!). Set up the correct permissions (e.g., using setuid())
  and try to open the file directly.
    memcpy(&access, ibuf, sizeof( access ));
data/netatalk-3.1.12~ds/etc/afpd/fork.c:283:35:  [4] (race) access:
  This usually indicates a security flaw. If an attacker can change anything
  along the path between the call to access() and the file's actual use
  (e.g., by moving files), the attacker can exploit the race condition
  (CWE-362/CWE-367!). Set up the correct permissions (e.g., using setuid())
  and try to open the file directly.
    memcpy(&access, ibuf, sizeof( access ));
data/netatalk-3.1.12~ds/etc/afpd/fork.c:284:21:  [4] (race) access:
  This usually indicates a security flaw. If an attacker can change anything
  along the path between the call to access() and the file's actual use
  (e.g., by moving files), the attacker can exploit the race condition
  (CWE-362/CWE-367!). Set up the correct permissions (e.g., using setuid())
  and try to open the file directly.
    access = ntohs( access );
data/netatalk-3.1.12~ds/etc/afpd/fork.c:285:21:  [4] (race) access:
  This usually indicates a security flaw. If an attacker can change anything
  along the path between the call to access() and the file's actual use
  (e.g., by moving files), the attacker can exploit the race condition
  (CWE-362/CWE-367!). Set up the correct permissions (e.g., using setuid())
  and try to open the file directly.
    ibuf += sizeof( access );
data/netatalk-3.1.12~ds/etc/afpd/fork.c:287:40:  [4] (race) access:
  This usually indicates a security flaw. If an attacker can change anything
  along the path between the call to access() and the file's actual use
  (e.g., by moving files), the attacker can exploit the race condition
  (CWE-362/CWE-367!). Set up the correct permissions (e.g., using setuid())
  and try to open the file directly.
    if ((vol->v_flags & AFPVOL_RO) && (access & OPENACC_WR)) {
data/netatalk-3.1.12~ds/etc/afpd/fork.c:307:17:  [4] (race) access:
  This usually indicates a security flaw. If an attacker can change anything
  along the path between the call to access() and the file's actual use
  (e.g., by moving files), the attacker can exploit the race condition
  (CWE-362/CWE-367!). Set up the correct permissions (e.g., using setuid())
  and try to open the file directly.
        return (access & OPENACC_WR) ? AFPERR_LOCK : AFPERR_ACCESS;
data/netatalk-3.1.12~ds/etc/afpd/fork.c:318:43:  [4] (race) access:
  This usually indicates a security flaw. If an attacker can change anything
  along the path between the call to access() and the file's actual use
  (e.g., by moving files), the attacker can exploit the race condition
  (CWE-362/CWE-367!). Set up the correct permissions (e.g., using setuid())
  and try to open the file directly.
        if (check_access(obj, vol, upath, access ) < 0) {
data/netatalk-3.1.12~ds/etc/afpd/fork.c:322:43:  [4] (race) access:
  This usually indicates a security flaw. If an attacker can change anything
  along the path between the call to access() and the file's actual use
  (e.g., by moving files), the attacker can exploit the race condition
  (CWE-362/CWE-367!). Set up the correct permissions (e.g., using setuid())
  and try to open the file directly.
        if (file_access(obj, vol, s_path, access ) < 0) {
data/netatalk-3.1.12~ds/etc/afpd/fork.c:341:9:  [4] (race) access:
  This usually indicates a security flaw. If an attacker can change anything
  along the path between the call to access() and the file's actual use
  (e.g., by moving files), the attacker can exploit the race condition
  (CWE-362/CWE-367!). Set up the correct permissions (e.g., using setuid())
  and try to open the file directly.
    if (access & OPENACC_WR) {
data/netatalk-3.1.12~ds/etc/afpd/fork.c:359:11:  [4] (race) access:
  This usually indicates a security flaw. If an attacker can change anything
  along the path between the call to access() and the file's actual use
  (e.g., by moving files), the attacker can exploit the race condition
  (CWE-362/CWE-367!). Set up the correct permissions (e.g., using setuid())
  and try to open the file directly.
        !(access & OPENACC_WR) ? "O_RDONLY" : "O_RDWR");
data/netatalk-3.1.12~ds/etc/afpd/fork.c:389:9:  [4] (race) access:
  This usually indicates a security flaw. If an attacker can change anything
  along the path between the call to access() and the file's actual use
  (e.g., by moving files), the attacker can exploit the race condition
  (CWE-362/CWE-367!). Set up the correct permissions (e.g., using setuid())
  and try to open the file directly.
    if (access & OPENACC_WR) {
data/netatalk-3.1.12~ds/etc/afpd/fork.c:450:51:  [4] (race) access:
  This usually indicates a security flaw. If an attacker can change anything
  along the path between the call to access() and the file's actual use
  (e.g., by moving files), the attacker can exploit the race condition
  (CWE-362/CWE-367!). Set up the correct permissions (e.g., using setuid())
  and try to open the file directly.
        if ((bshort & htons(ATTRBIT_NOWRITE)) && (access & OPENACC_WR)) {
data/netatalk-3.1.12~ds/etc/afpd/fork.c:467:52:  [4] (race) access:
  This usually indicates a security flaw. If an attacker can change anything
  along the path between the call to access() and the file's actual use
  (e.g., by moving files), the attacker can exploit the race condition
  (CWE-362/CWE-367!). Set up the correct permissions (e.g., using setuid())
  and try to open the file directly.
        ret = fork_setmode(obj, ofork->of_ad, eid, access, ofrefnum);
data/netatalk-3.1.12~ds/etc/afpd/fork.c:488:14:  [4] (race) access:
  This usually indicates a security flaw. If an attacker can change anything
  along the path between the call to access() and the file's actual use
  (e.g., by moving files), the attacker can exploit the race condition
  (CWE-362/CWE-367!). Set up the correct permissions (e.g., using setuid())
  and try to open the file directly.
        if ((access & OPENACC_WR))
data/netatalk-3.1.12~ds/etc/afpd/fork.c:492:10:  [4] (race) access:
  This usually indicates a security flaw. If an attacker can change anything
  along the path between the call to access() and the file's actual use
  (e.g., by moving files), the attacker can exploit the race condition
  (CWE-362/CWE-367!). Set up the correct permissions (e.g., using setuid())
  and try to open the file directly.
    if ((access & OPENACC_RD))
data/netatalk-3.1.12~ds/etc/afpd/fork.c:504:17:  [4] (race) access:
  This usually indicates a security flaw. If an attacker can change anything
  along the path between the call to access() and the file's actual use
  (e.g., by moving files), the attacker can exploit the race condition
  (CWE-362/CWE-367!). Set up the correct permissions (e.g., using setuid())
  and try to open the file directly.
        return (access & OPENACC_WR) ? AFPERR_LOCK : AFPERR_ACCESS;
data/netatalk-3.1.12~ds/etc/afpd/mangle.c:281:5:  [4] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused).
    strcat(m, mangle_suffix);
data/netatalk-3.1.12~ds/etc/afpd/messages.c:64:5:  [4] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf.
    sprintf(filename, "%s/message.%d", SERVERTEXT, getpid());
data/netatalk-3.1.12~ds/etc/afpd/messages.c:73:9:  [4] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf.
        sprintf(filename, "%s/message", SERVERTEXT);
data/netatalk-3.1.12~ds/etc/afpd/quota.c:632:13:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
            strcpy( vol->v_gvs, p );
data/netatalk-3.1.12~ds/etc/afpd/quota.c:635:13:  [4] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf.
            sprintf( buf, "%s/quotas", p );
data/netatalk-3.1.12~ds/etc/afpd/quota.c:654:9:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
        strcpy( vol->v_gvs, p );
data/netatalk-3.1.12~ds/etc/afpd/quota.c:672:6:  [4] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf.
	    sprintf(pathstring,"%s:%s",hostpath+1,vol->v_gvs);
data/netatalk-3.1.12~ds/etc/afpd/quota.c:673:6:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
	    strcpy(vol->v_gvs,pathstring);
data/netatalk-3.1.12~ds/etc/afpd/quota.c:679:6:  [4] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf.
	    sprintf(pathstring,"%s@%s",hostpath+1,vol->v_gvs);
data/netatalk-3.1.12~ds/etc/afpd/quota.c:680:6:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
	    strcpy(vol->v_gvs,pathstring);
data/netatalk-3.1.12~ds/etc/afpd/spotlight.c:672:14:  [4] (race) access:
  This usually indicates a security flaw. If an attacker can change anything
  along the path between the call to access() and the file's actual use
  (e.g., by moving files), the attacker can exploit the race condition
  (CWE-362/CWE-367!). Set up the correct permissions (e.g., using setuid())
  and try to open the file directly.
    result = access(path, R_OK);
data/netatalk-3.1.12~ds/etc/afpd/status.c:158:15:  [4] (format) snprintf:
  If format strings can be influenced by an attacker, they can be exploited,
  and note that sprintf variations do not always \0-terminate (CWE-134). Use
  a constant for the format specification.
        len = snprintf(buf, AFPSTATUS_MACHLEN + 1, machine, VERSION);
data/netatalk-3.1.12~ds/etc/afpd/status.c:161:19:  [4] (format) snprintf:
  If format strings can be influenced by an attacker, they can be exploited,
  and note that sprintf variations do not always \0-terminate (CWE-134). Use
  a constant for the format specification.
            len = snprintf(buf, AFPSTATUS_MACHLEN + 1, VERSION);
data/netatalk-3.1.12~ds/etc/afpd/status.c:163:19:  [4] (format) snprintf:
  If format strings can be influenced by an attacker, they can be exploited,
  and note that sprintf variations do not always \0-terminate (CWE-134). Use
  a constant for the format specification.
            (void)snprintf(buf, AFPSTATUS_MACHLEN + 1, machine, "");
data/netatalk-3.1.12~ds/etc/afpd/status.c:164:19:  [4] (format) snprintf:
  If format strings can be influenced by an attacker, they can be exploited,
  and note that sprintf variations do not always \0-terminate (CWE-134). Use
  a constant for the format specification.
            (void)snprintf(buf + AFPSTATUS_MACHLEN - strlen(VERSION),
data/netatalk-3.1.12~ds/etc/cnid_dbd/cmd_dbd.c:125:15:  [4] (format) vsnprintf:
  If format strings can be influenced by an attacker, they can be exploited,
  and note that sprintf variations do not always \0-terminate (CWE-134). Use
  a constant for the format specification.
        len = vsnprintf(logbuffer, 1023, fmt, args);
data/netatalk-3.1.12~ds/etc/cnid_dbd/cmd_dbd_scanvol.c:188:16:  [4] (race) access:
  This usually indicates a security flaw. If an attacker can change anything
  along the path between the call to access() and the file's actual use
  (e.g., by moving files), the attacker can exploit the race condition
  (CWE-362/CWE-367!). Set up the correct permissions (e.g., using setuid())
  and try to open the file directly.
    if ((ret = access( adname, F_OK)) != 0) {
data/netatalk-3.1.12~ds/etc/cnid_dbd/cmd_dbd_scanvol.c:348:22:  [4] (race) access:
  This usually indicates a security flaw. If an attacker can change anything
  along the path between the call to access() and the file's actual use
  (e.g., by moving files), the attacker can exploit the race condition
  (CWE-362/CWE-367!). Set up the correct permissions (e.g., using setuid())
  and try to open the file directly.
    if ( (addir_ok = access(ADv2_DIRNAME, F_OK)) != 0) {
data/netatalk-3.1.12~ds/etc/cnid_dbd/cmd_dbd_scanvol.c:357:22:  [4] (race) access:
  This usually indicates a security flaw. If an attacker can change anything
  along the path between the call to access() and the file's actual use
  (e.g., by moving files), the attacker can exploit the race condition
  (CWE-362/CWE-367!). Set up the correct permissions (e.g., using setuid())
  and try to open the file directly.
    if ( (adpar_ok = access(vol->ad_path(".", ADFLAGS_DIR), F_OK)) != 0) {
data/netatalk-3.1.12~ds/etc/cnid_dbd/cmd_dbd_scanvol.c:432:18:  [4] (race) access:
  This usually indicates a security flaw. If an attacker can change anything
  along the path between the call to access() and the file's actual use
  (e.g., by moving files), the attacker can exploit the race condition
  (CWE-362/CWE-367!). Set up the correct permissions (e.g., using setuid())
  and try to open the file directly.
            if ((access( pname, F_OK)) == 0) {
data/netatalk-3.1.12~ds/etc/cnid_dbd/cmd_dbd_scanvol.c:519:9:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
        strcpy(pname + 3, ep->d_name);
data/netatalk-3.1.12~ds/etc/cnid_dbd/cmd_dbd_scanvol.c:520:14:  [4] (race) access:
  This usually indicates a security flaw. If an attacker can change anything
  along the path between the call to access() and the file's actual use
  (e.g., by moving files), the attacker can exploit the race condition
  (CWE-362/CWE-367!). Set up the correct permissions (e.g., using setuid())
  and try to open the file directly.
        if ((access( pname, F_OK)) != 0) {
data/netatalk-3.1.12~ds/etc/cnid_dbd/cmd_dbd_scanvol.c:774:13:  [4] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused).
            strcat(cwdbuf, name);
data/netatalk-3.1.12~ds/etc/cnid_dbd/cmd_dbd_scanvol.c:845:5:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
    strcpy(cwdbuf, vol->v_path);
data/netatalk-3.1.12~ds/etc/cnid_dbd/cnid_metad.c:278:19:  [4] (shell) execlp:
  This causes a new program to execute and is difficult to use safely
  (CWE-78). try using a library call that implements the same functionality
  if available.
            ret = execlp(dbdpn, dbdpn,
data/netatalk-3.1.12~ds/etc/cnid_dbd/cnid_metad.c:286:19:  [4] (shell) execlp:
  This causes a new program to execute and is difficult to use safely
  (CWE-78). try using a library call that implements the same functionality
  if available.
            ret = execlp(dbdpn, dbdpn,
data/netatalk-3.1.12~ds/etc/cnid_dbd/db_param.c:44:9:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
        strcpy(path, dir);
data/netatalk-3.1.12~ds/etc/cnid_dbd/db_param.c:47:9:  [4] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused).
        strcat(path, fn);
data/netatalk-3.1.12~ds/etc/cnid_dbd/db_param.c:51:9:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
        strcpy(path, fn);
data/netatalk-3.1.12~ds/etc/cnid_dbd/db_param.c:125:21:  [4] (buffer) fscanf:
  The scanf() family's %s operation, without a limit specification, permits
  buffer overflows (CWE-120, CWE-20). Specify a limit to %s, or use a
  different input function.
    while ((items = fscanf(fp, " %s %s", key, val)) != EOF) {
data/netatalk-3.1.12~ds/etc/cnid_dbd/main.c:136:13:  [4] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused).
            strcat(lockpath, LOCKFILENAME);
data/netatalk-3.1.12~ds/etc/cnid_dbd/main.c:221:5:  [4] (shell) system:
  This causes a new program to execute and is difficult to use safely
  (CWE-78). try using a library call that implements the same functionality
  if available.
    system("rm -f cnid2.db lock log.* __db.*");
data/netatalk-3.1.12~ds/etc/netatalk/netatalk.c:105:5:  [4] (shell) system:
  This causes a new program to execute and is difficult to use safely
  (CWE-78). try using a library call that implements the same functionality
  if available.
    system(bdata(cmd));
data/netatalk-3.1.12~ds/etc/netatalk/netatalk.c:108:5:  [4] (shell) system:
  This causes a new program to execute and is difficult to use safely
  (CWE-78). try using a library call that implements the same functionality
  if available.
    system("gsettings set org.freedesktop.Tracker.Miner.Files index-single-directories \"[]\"");
data/netatalk-3.1.12~ds/etc/netatalk/netatalk.c:179:5:  [4] (shell) system:
  This causes a new program to execute and is difficult to use safely
  (CWE-78). try using a library call that implements the same functionality
  if available.
    system(TRACKER_MANAGING_COMMAND " -t");
data/netatalk-3.1.12~ds/etc/netatalk/netatalk.c:189:5:  [4] (shell) system:
  This causes a new program to execute and is difficult to use safely
  (CWE-78). try using a library call that implements the same functionality
  if available.
    system(TRACKER_MANAGING_COMMAND " -t");
data/netatalk-3.1.12~ds/etc/netatalk/netatalk.c:329:15:  [4] (shell) execv:
  This causes a new program to execute and is difficult to use safely
  (CWE-78). try using a library call that implements the same functionality
  if available.
        (void)execv(path, myargv);
data/netatalk-3.1.12~ds/etc/netatalk/netatalk.c:508:13:  [4] (shell) system:
  This causes a new program to execute and is difficult to use safely
  (CWE-78). try using a library call that implements the same functionality
  if available.
            system(TRACKER_PREFIX "/bin/" TRACKER_MANAGING_COMMAND " -s");
data/netatalk-3.1.12~ds/etc/uams/uams_dhx2_passwd.c:548:9:  [4] (crypto) crypt:
  The crypt functions use a poor one-way hashing algorithm; since they only
  accept passwords of 8 characters or fewer and only a two-byte salt, they
  are excessively vulnerable to dictionary attacks given today's faster
  computing equipment (CWE-327). Use a different algorithm, such as SHA-256,
  with a larger, non-repeating salt.
    p = crypt( ibuf, dhxpwd->pw_passwd );
data/netatalk-3.1.12~ds/etc/uams/uams_dhx_passwd.c:344:9:  [4] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf.
        sprintf( hostname, "%s@%s", dhxpwd->pw_name, clientname );
data/netatalk-3.1.12~ds/etc/uams/uams_dhx_passwd.c:355:9:  [4] (crypto) crypt:
  The crypt functions use a poor one-way hashing algorithm; since they only
  accept passwords of 8 characters or fewer and only a two-byte salt, they
  are excessively vulnerable to dictionary attacks given today's faster
  computing equipment (CWE-327). Use a different algorithm, such as SHA-256,
  with a larger, non-repeating salt.
    p = crypt( rbuf, dhxpwd->pw_passwd );
data/netatalk-3.1.12~ds/etc/uams/uams_guest.c:49:5:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
    strcpy(username, guest);
data/netatalk-3.1.12~ds/etc/uams/uams_passwd.c:116:9:  [4] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf.
        sprintf( hostname, "%s@%s", username, clientname );
data/netatalk-3.1.12~ds/etc/uams/uams_passwd.c:125:9:  [4] (crypto) crypt:
  The crypt functions use a poor one-way hashing algorithm; since they only
  accept passwords of 8 characters or fewer and only a two-byte salt, they
  are excessively vulnerable to dictionary attacks given today's faster
  computing equipment (CWE-327). Use a different algorithm, such as SHA-256,
  with a larger, non-repeating salt.
    p = crypt( ibuf, pwd->pw_passwd );
data/netatalk-3.1.12~ds/etc/uams/uams_passwd.c:232:9:  [4] (crypto) crypt:
  The crypt functions use a poor one-way hashing algorithm; since they only
  accept passwords of 8 characters or fewer and only a two-byte salt, they
  are excessively vulnerable to dictionary attacks given today's faster
  computing equipment (CWE-327). Use a different algorithm, such as SHA-256,
  with a larger, non-repeating salt.
    p = crypt(pw, pwd->pw_passwd );
data/netatalk-3.1.12~ds/etc/uams/uams_passwd.c:344:9:  [4] (crypto) crypt:
  The crypt functions use a poor one-way hashing algorithm; since they only
  accept passwords of 8 characters or fewer and only a two-byte salt, they
  are excessively vulnerable to dictionary attacks given today's faster
  computing equipment (CWE-327). Use a different algorithm, such as SHA-256,
  with a larger, non-repeating salt.
    p = crypt(password, pwd->pw_passwd);
data/netatalk-3.1.12~ds/etc/uams/uams_pgp.c:166:9:  [4] (crypto) crypt:
  The crypt functions use a poor one-way hashing algorithm; since they only
  accept passwords of 8 characters or fewer and only a two-byte salt, they
  are excessively vulnerable to dictionary attacks given today's faster
  computing equipment (CWE-327). Use a different algorithm, such as SHA-256,
  with a larger, non-repeating salt.
    p = crypt( rbuf, pgppwd->pw_passwd );
data/netatalk-3.1.12~ds/etc/uams/uams_randnum.c:139:3:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
  strcpy(buf, path);
data/netatalk-3.1.12~ds/etc/uams/uams_randnum.c:254:5:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
    strcpy(path,  pwd->pw_dir );
data/netatalk-3.1.12~ds/etc/uams/uams_randnum.c:256:5:  [4] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused).
    strcat(path, file + 2);
data/netatalk-3.1.12~ds/include/atalk/logger.h:143:20:  [4] (format) syslog:
  If syslog's format strings can be influenced by an attacker, they can be
  exploited (CWE-134). Use a constant format string for syslog.
    bool           syslog;        /* This type logs to syslog */
data/netatalk-3.1.12~ds/libatalk/acl/cache.c:155:5:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
    strcpy(name, inname);
data/netatalk-3.1.12~ds/libatalk/acl/cache.c:287:17:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
                strcpy(*name, entry->name);
data/netatalk-3.1.12~ds/libatalk/acl/cache.c:327:5:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
    strcpy(name, inname);
data/netatalk-3.1.12~ds/libatalk/bstring/bstrlib.c:2736:33:  [4] (format) vsprintf:
  Potential format string problem (CWE-134). Make format string constant.
#define exvsnprintf(r,b,n,f,a) {vsprintf (b,f,a); r = -1;}
data/netatalk-3.1.12~ds/libatalk/bstring/bstrlib.c:2743:12:  [4] (format) vsnprintf:
  If format strings can be influenced by an attacker, they can be exploited,
  and note that sprintf variations do not always \0-terminate (CWE-134). Use
  a constant for the format specification.
extern int vsnprintf (char *buf, size_t count, const char *format, va_list arg);
data/netatalk-3.1.12~ds/libatalk/bstring/bstrlib.c:2746:37:  [4] (format) vsnprintf:
  If format strings can be influenced by an attacker, they can be exploited,
  and note that sprintf variations do not always \0-terminate (CWE-134). Use
  a constant for the format specification.
#define exvsnprintf(r,b,n,f,a) {r = vsnprintf (b,n,f,a);}
data/netatalk-3.1.12~ds/libatalk/cnid/cdb/cnid_cdb_open.c:155:5:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
    strcpy(path, dbdir);
data/netatalk-3.1.12~ds/libatalk/cnid/cdb/cnid_cdb_open.c:164:2:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
	strcpy(path + len, old_dbfiles[i]);
data/netatalk-3.1.12~ds/libatalk/cnid/cdb/cnid_cdb_open.c:208:5:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
    strcpy(path, vol->v_path);
data/netatalk-3.1.12~ds/libatalk/cnid/cdb/cnid_cdb_open.c:214:5:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
    strcpy(path + len, DBHOME);
data/netatalk-3.1.12~ds/libatalk/cnid/tdb/cnid_tdb_open.c:81:5:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
    strcpy(path, vol->v_path);
data/netatalk-3.1.12~ds/libatalk/cnid/tdb/cnid_tdb_open.c:87:5:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
    strcpy(path + len, DBHOME);
data/netatalk-3.1.12~ds/libatalk/cnid/tdb/cnid_tdb_open.c:103:5:  [4] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused).
    strcat(path, DBCNID);
data/netatalk-3.1.12~ds/libatalk/cnid/tdb/cnid_tdb_resolve.c:28:13:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
            strcpy(buffer, (char *)data.dptr + CNID_NAME_OFS);
data/netatalk-3.1.12~ds/libatalk/compat/misc.c:43:13:  [4] (format) vsnprintf:
  If format strings can be influenced by an attacker, they can be exploited,
  and note that sprintf variations do not always \0-terminate (CWE-134). Use
  a constant for the format specification.
        n = vsnprintf(p, size, fmt, ap);
data/netatalk-3.1.12~ds/libatalk/compat/mktemp.c:47:1:  [4] (tmpfile) mktemp:
  Temporary file race condition (CWE-377).
mktemp(path)
data/netatalk-3.1.12~ds/libatalk/iniparser/dictionary.c:90:9:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
        strcpy(t,s);
data/netatalk-3.1.12~ds/libatalk/iniparser/iniparser.c:62:5:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
    strcpy(l, s);
data/netatalk-3.1.12~ds/libatalk/iniparser/iniparser.c:209:9:  [4] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf.
        sprintf(keym, "%s:", secname);
data/netatalk-3.1.12~ds/libatalk/iniparser/iniparser.c:465:5:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
    strcpy(line, strstrip(input_line));
data/netatalk-3.1.12~ds/libatalk/iniparser/iniparser.c:478:9:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
        strcpy(section, strstrip(section));
data/netatalk-3.1.12~ds/libatalk/iniparser/iniparser.c:479:9:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
        strcpy(section, section);
data/netatalk-3.1.12~ds/libatalk/iniparser/iniparser.c:484:9:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
        strcpy(key, strstrip(key));
data/netatalk-3.1.12~ds/libatalk/iniparser/iniparser.c:485:9:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
        strcpy(key, key);
data/netatalk-3.1.12~ds/libatalk/iniparser/iniparser.c:486:9:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
        strcpy(value, strstrip(value));
data/netatalk-3.1.12~ds/libatalk/iniparser/iniparser.c:503:9:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
        strcpy(key, strstrip(key));
data/netatalk-3.1.12~ds/libatalk/iniparser/iniparser.c:504:9:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
        strcpy(key, key);
data/netatalk-3.1.12~ds/libatalk/util/ftw.c:206:5:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
    strcpy(a, b);
data/netatalk-3.1.12~ds/libatalk/util/gettok.c:153:9:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
        strcpy( buf, pwent->pw_dir );
data/netatalk-3.1.12~ds/libatalk/util/gettok.c:156:13:  [4] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused).
            strcat( buf, t );
data/netatalk-3.1.12~ds/libatalk/util/gettok.c:158:9:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
        strcpy( token, buf );
data/netatalk-3.1.12~ds/libatalk/util/logger.c:423:31:  [4] (format) syslog:
  If syslog's format strings can be influenced by an attacker, they can be
  exploited (CWE-134). Use a constant format string for syslog.
    if (type_configs[logtype].syslog) {
data/netatalk-3.1.12~ds/libatalk/util/module.c:34:4:  [4] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused).
   strcat(underscore, name);
data/netatalk-3.1.12~ds/libatalk/util/module.c:64:4:  [4] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused).
   strcat(underscore, name);
data/netatalk-3.1.12~ds/libatalk/util/netatalk_conf.c:336:23:  [4] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf.
                len = sprintf(dest, "%s:%u",
data/netatalk-3.1.12~ds/libatalk/util/netatalk_conf.c:955:9:  [4] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused).
        strcat(tmpname, suffix);
data/netatalk-3.1.12~ds/libatalk/util/netatalk_conf.c:988:9:  [4] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused).
        strcat(tmpname, suffix);
data/netatalk-3.1.12~ds/libatalk/util/unix.c:79:9:  [4] (shell) execvp:
  This causes a new program to execute and is difficult to use safely
  (CWE-78). try using a library call that implements the same functionality
  if available.
        execvp("mv", cmd_argv);
data/netatalk-3.1.12~ds/libatalk/vfs/ea_ad.c:264:9:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
        strcpy(buf, (*(ea->ea_entries))[count].ea_name);
data/netatalk-3.1.12~ds/libatalk/vfs/ea_ad.c:1435:9:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
        strcpy(srceapath, eapath);
data/netatalk-3.1.12~ds/libatalk/vfs/ea_ad.c:1550:9:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
        strcpy(srceapath, eapath);
data/netatalk-3.1.12~ds/libatalk/vfs/extattr.c:922:5:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
				strcpy(list + len, de->d_name);
data/netatalk-3.1.12~ds/libatalk/vfs/vfs.c:266:5:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
    strcpy( adsrc, vol->ad_path(src, 0 ));
data/netatalk-3.1.12~ds/libatalk/vfs/vfs.c:620:5:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
    strcpy( adsrc, vol->ad_path(src, 0 ));
data/netatalk-3.1.12~ds/libevent/evdns.c:447:49:  [4] (format) printf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
#define EVDNS_LOG_CHECK	 __attribute__ ((format(printf, 2, 3)))
data/netatalk-3.1.12~ds/libevent/evutil.c:1576:6:  [4] (format) vsnprintf:
  If format strings can be influenced by an attacker, they can be exploited,
  and note that sprintf variations do not always \0-terminate (CWE-134). Use
  a constant for the format specification.
	r = vsnprintf(buf, buflen, format, ap);
data/netatalk-3.1.12~ds/libevent/evutil.c:2172:3:  [4] (buffer) _tcscat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120).
  _tcscat(path, TEXT("\\"));
data/netatalk-3.1.12~ds/libevent/evutil.c:2173:3:  [4] (buffer) _tcscat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120).
  _tcscat(path, library_name);
data/netatalk-3.1.12~ds/libevent/include/event2/buffer.h:479:25:  [4] (format) printf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
  __attribute__((format(printf, 2, 3)))
data/netatalk-3.1.12~ds/libevent/include/event2/util.h:446:24:  [4] (format) printf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
	__attribute__((format(printf, 3, 4)))
data/netatalk-3.1.12~ds/libevent/log-internal.h:33:49:  [4] (format) printf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
#define EV_CHECK_FMT(a,b) __attribute__((format(printf, a, b)))
data/netatalk-3.1.12~ds/libevent/test/tinytest_local.h:9:8:  [4] (format) snprintf:
  If format strings can be influenced by an attacker, they can be exploited,
  and note that sprintf variations do not always \0-terminate (CWE-134). Use
  a constant for the format specification.
#ifdef snprintf
data/netatalk-3.1.12~ds/libevent/test/tinytest_local.h:10:8:  [4] (format) snprintf:
  If format strings can be influenced by an attacker, they can be exploited,
  and note that sprintf variations do not always \0-terminate (CWE-134). Use
  a constant for the format specification.
#undef snprintf
data/netatalk-3.1.12~ds/libevent/test/tinytest_local.h:12:9:  [4] (format) snprintf:
  If format strings can be influenced by an attacker, they can be exploited,
  and note that sprintf variations do not always \0-terminate (CWE-134). Use
  a constant for the format specification.
#define snprintf evutil_snprintf
data/netatalk-3.1.12~ds/libevent/test/tinytest_macros.h:44:2:  [4] (format) printf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
	printf args ;						\
data/netatalk-3.1.12~ds/libevent/util-internal.h:206:10:  [4] (format) fprintf:
  If format strings can be influenced by an attacker, they can be exploited
  (CWE-134). Use a constant for the format specification.
			(void)fprintf(stderr,				\
data/netatalk-3.1.12~ds/test/afpd/afpfunc_helpers.c:101:5:  [4] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused).
    strcpy(p, name);
data/netatalk-3.1.12~ds/bin/ad/ad_cp.c:205:18:  [3] (buffer) getopt:
  Some older implementations do not protect against internal buffer overflows
  (CWE-120, CWE-20). Check implementation on installation, or limit the size
  of all string inputs.
    while ((ch = getopt(argc, argv, "afinpRvx")) != -1)
data/netatalk-3.1.12~ds/bin/ad/ad_find.c:91:17:  [3] (buffer) getopt:
  Some older implementations do not protect against internal buffer overflows
  (CWE-120, CWE-20). Check implementation on installation, or limit the size
  of all string inputs.
    while ((c = getopt(argc-1, &argv[1], ":v:")) != -1) {
data/netatalk-3.1.12~ds/bin/ad/ad_ls.c:603:17:  [3] (buffer) getopt:
  Some older implementations do not protect against internal buffer overflows
  (CWE-120, CWE-20). Check implementation on installation, or limit the size
  of all string inputs.
    while ((c = getopt(argc, argv, ":adlRu")) != -1) {
data/netatalk-3.1.12~ds/bin/ad/ad_mv.c:136:18:  [3] (buffer) getopt:
  Some older implementations do not protect against internal buffer overflows
  (CWE-120, CWE-20). Check implementation on installation, or limit the size
  of all string inputs.
    while ((ch = getopt(argc, argv, "finv")) != -1)
data/netatalk-3.1.12~ds/bin/ad/ad_mv.c:306:25:  [3] (buffer) realpath:
  This function does not protect against buffer overflows, and some
  implementations can overflow internally (CWE-120/CWE-785!). Ensure that the
  destination buffer is at least of size MAXPATHLEN, andto protect against
  implementation problems, the input argument should also be checked to
  ensure it is no larger than MAXPATHLEN.
                    if (realpath(from, path) == NULL) {
data/netatalk-3.1.12~ds/bin/ad/ad_rm.c:142:18:  [3] (buffer) getopt:
  Some older implementations do not protect against internal buffer overflows
  (CWE-120, CWE-20). Check implementation on installation, or limit the size
  of all string inputs.
    while ((ch = getopt(argc, argv, "vR")) != -1)
data/netatalk-3.1.12~ds/bin/ad/ad_set.c:264:17:  [3] (buffer) getopt:
  Some older implementations do not protect against internal buffer overflows
  (CWE-120, CWE-20). Check implementation on installation, or limit the size
  of all string inputs.
    while ((c = getopt(argc, argv, ":l:t:c:f:a:")) != -1) {
data/netatalk-3.1.12~ds/bin/afppasswd/afppasswd.c:279:15:  [3] (buffer) getopt:
  Some older implementations do not protect against internal buffer overflows
  (CWE-120, CWE-20). Check implementation on installation, or limit the size
  of all string inputs.
  while ((i = getopt(argc, argv, OPTIONS)) != EOF) {
data/netatalk-3.1.12~ds/bin/misc/fce.c:114:17:  [3] (buffer) getopt:
  Some older implementations do not protect against internal buffer overflows
  (CWE-120, CWE-20). Check implementation on installation, or limit the size
  of all string inputs.
    while ((c = getopt(argc, argv, "h:")) != -1) {
data/netatalk-3.1.12~ds/bin/misc/netacnv.c:45:19:  [3] (buffer) getopt:
  Some older implementations do not protect against internal buffer overflows
  (CWE-120, CWE-20). Check implementation on installation, or limit the size
  of all string inputs.
    while ((opt = getopt(argc, argv, "m:o:f:t:")) != -1) {
data/netatalk-3.1.12~ds/bin/misc/uuidtest.c:83:17:  [3] (buffer) getopt:
  Some older implementations do not protect against internal buffer overflows
  (CWE-120, CWE-20). Check implementation on installation, or limit the size
  of all string inputs.
    while ((c = getopt(argc, argv, ":vu:g:i:")) != -1) {
data/netatalk-3.1.12~ds/etc/afpd/afp_options.c:215:25:  [3] (buffer) getopt:
  Some older implementations do not protect against internal buffer overflows
  (CWE-120, CWE-20). Check implementation on installation, or limit the size
  of all string inputs.
    while (EOF != ( c = getopt( ac, av, "dF:vVh" )) ) {
data/netatalk-3.1.12~ds/etc/afpd/afprun.c:60:14:  [3] (buffer) getenv:
  Environment variables are untrustable input if they can be set by an
  attacker. They can have any content and length, and the same variable can
  be set more than once (CWE-807, CWE-20). Check environment variables
  carefully before using them.
    if ((p = getenv("TMPDIR")))
data/netatalk-3.1.12~ds/etc/afpd/dircache.c:623:10:  [3] (tmpfile) tmpnam:
  Temporary file race condition (CWE-377).
    char tmpnam[64];
data/netatalk-3.1.12~ds/etc/afpd/dircache.c:633:13:  [3] (tmpfile) tmpnam:
  Temporary file race condition (CWE-377).
    sprintf(tmpnam, "/tmp/dircache.%u", getpid());
data/netatalk-3.1.12~ds/etc/afpd/dircache.c:634:23:  [3] (tmpfile) tmpnam:
  Temporary file race condition (CWE-377).
    if ((dump = fopen(tmpnam, "w+")) == NULL) {
data/netatalk-3.1.12~ds/etc/afpd/uam.c:312:9:  [3] (random) srandom:
  This function is not sufficiently random for security-related functions
  such as key and nonce creation (CWE-327). Use a more secure technique for
  acquiring random values.
        srandom(tv.tv_sec + (unsigned long) obj + (unsigned long) obj->dsi);
data/netatalk-3.1.12~ds/etc/afpd/uam.c:314:22:  [3] (random) random:
  This function is not sufficiently random for security-related functions
  such as key and nonce creation (CWE-327). Use a more secure technique for
  acquiring random values.
            result = random();
data/netatalk-3.1.12~ds/etc/cnid_dbd/cmd_dbd.c:143:17:  [3] (buffer) getopt:
  Some older implementations do not protect against internal buffer overflows
  (CWE-120, CWE-20). Check implementation on installation, or limit the size
  of all string inputs.
    while ((c = getopt(argc, argv, ":cfF:rstu:vV")) != -1) {
data/netatalk-3.1.12~ds/etc/cnid_dbd/cnid_metad.c:475:19:  [3] (buffer) getopt:
  Some older implementations do not protect against internal buffer overflows
  (CWE-120, CWE-20). Check implementation on installation, or limit the size
  of all string inputs.
    while (( cc = getopt( argc, argv, "dF:vV")) != -1 ) {
data/netatalk-3.1.12~ds/etc/cnid_dbd/main.c:497:20:  [3] (buffer) getopt:
  Some older implementations do not protect against internal buffer overflows
  (CWE-120, CWE-20). Check implementation on installation, or limit the size
  of all string inputs.
    while (( ret = getopt( argc, argv, ":dF:l:p:t:u:vV")) != -1 ) {
data/netatalk-3.1.12~ds/etc/netatalk/netatalk.c:406:17:  [3] (buffer) getopt:
  Some older implementations do not protect against internal buffer overflows
  (CWE-120, CWE-20). Check implementation on installation, or limit the size
  of all string inputs.
    while ((c = getopt(argc, argv, ":dF:vV")) != -1) {
data/netatalk-3.1.12~ds/etc/uams/uams_dhx_passwd.c:88:23:  [3] (random) random:
  This function is not sufficiently random for security-related functions
  such as key and nonce creation (CWE-327). Use a more secure technique for
  acquiring random values.
        rnd_seed[i] = random();
data/netatalk-3.1.12~ds/libatalk/util/netatalk_conf.c:1165:18:  [3] (buffer) realpath:
  This function does not protect against buffer overflows, and some
  implementations can overflow internally (CWE-120/CWE-785!). Ensure that the
  destination buffer is at least of size MAXPATHLEN, andto protect against
  implementation problems, the input argument should also be checked to
  ensure it is no larger than MAXPATHLEN.
            if ((realpath(pwent->pw_dir, tmp)) == NULL) {
data/netatalk-3.1.12~ds/libatalk/util/unix.c:415:9:  [3] (random) srandom:
  This function is not sufficiently random for security-related functions
  such as key and nonce creation (CWE-327). Use a more secure technique for
  acquiring random values.
        srandom((unsigned int)tv.tv_usec);
data/netatalk-3.1.12~ds/libatalk/util/unix.c:417:20:  [3] (random) random:
  This function is not sufficiently random for security-related functions
  such as key and nonce creation (CWE-327). Use a more secure technique for
  acquiring random values.
            p[i] = random() & 0xFF;
data/netatalk-3.1.12~ds/libatalk/util/unix.c:443:26:  [3] (buffer) realpath:
  This function does not protect against buffer overflows, and some
  implementations can overflow internally (CWE-120/CWE-785!). Ensure that the
  destination buffer is at least of size MAXPATHLEN, andto protect against
  implementation problems, the input argument should also be checked to
  ensure it is no larger than MAXPATHLEN.
    if ((resolved_path = realpath(path, NULL)) == NULL) {
data/netatalk-3.1.12~ds/libatalk/util/unix.c:451:9:  [3] (buffer) realpath:
  This function does not protect against buffer overflows, and some
  implementations can overflow internally (CWE-120/CWE-785!). Ensure that the
  destination buffer is at least of size MAXPATHLEN, andto protect against
  implementation problems, the input argument should also be checked to
  ensure it is no larger than MAXPATHLEN.
    if (realpath(path, resolved_path) == NULL) {
data/netatalk-3.1.12~ds/libevent/event_iocp.c:78:3:  [3] (misc) EnterCriticalSection:
  On some versions of Windows, exceptions can be thrown in low-memory
  situations. Use InitializeCriticalSectionAndSpinCount instead.
		EnterCriticalSection(&port->lock);
data/netatalk-3.1.12~ds/libevent/event_iocp.c:94:2:  [3] (misc) EnterCriticalSection:
  On some versions of Windows, exceptions can be thrown in low-memory
  situations. Use InitializeCriticalSectionAndSpinCount instead.
	EnterCriticalSection(&port->lock);
data/netatalk-3.1.12~ds/libevent/event_iocp.c:251:2:  [3] (misc) EnterCriticalSection:
  On some versions of Windows, exceptions can be thrown in low-memory
  situations. Use InitializeCriticalSectionAndSpinCount instead.
	EnterCriticalSection(&port->lock);
data/netatalk-3.1.12~ds/libevent/event_iocp.c:260:2:  [3] (misc) EnterCriticalSection:
  On some versions of Windows, exceptions can be thrown in low-memory
  situations. Use InitializeCriticalSectionAndSpinCount instead.
	EnterCriticalSection(&port->lock);
data/netatalk-3.1.12~ds/libevent/evthread_win32.c:76:3:  [3] (misc) EnterCriticalSection:
  On some versions of Windows, exceptions can be thrown in low-memory
  situations. Use InitializeCriticalSectionAndSpinCount instead.
		EnterCriticalSection(lock);
data/netatalk-3.1.12~ds/libevent/evthread_win32.c:219:2:  [3] (misc) EnterCriticalSection:
  On some versions of Windows, exceptions can be thrown in low-memory
  situations. Use InitializeCriticalSectionAndSpinCount instead.
	EnterCriticalSection(&cond->lock);
data/netatalk-3.1.12~ds/libevent/evthread_win32.c:242:2:  [3] (misc) EnterCriticalSection:
  On some versions of Windows, exceptions can be thrown in low-memory
  situations. Use InitializeCriticalSectionAndSpinCount instead.
	EnterCriticalSection(&cond->lock);
data/netatalk-3.1.12~ds/libevent/evthread_win32.c:253:3:  [3] (misc) EnterCriticalSection:
  On some versions of Windows, exceptions can be thrown in low-memory
  situations. Use InitializeCriticalSectionAndSpinCount instead.
		EnterCriticalSection(&cond->lock);
data/netatalk-3.1.12~ds/libevent/evthread_win32.c:287:2:  [3] (misc) EnterCriticalSection:
  On some versions of Windows, exceptions can be thrown in low-memory
  situations. Use InitializeCriticalSectionAndSpinCount instead.
	EnterCriticalSection(lock);
data/netatalk-3.1.12~ds/libevent/evthread_win32.c:289:2:  [3] (misc) EnterCriticalSection:
  On some versions of Windows, exceptions can be thrown in low-memory
  situations. Use InitializeCriticalSectionAndSpinCount instead.
	EnterCriticalSection(&cond->lock);
data/netatalk-3.1.12~ds/libevent/evutil.c:2098:9:  [3] (buffer) getenv:
  Environment variables are untrustable input if they can be set by an
  attacker. They can have any content and length, and the same variable can
  be set more than once (CWE-807, CWE-20). Check environment variables
  carefully before using them.
	return getenv(varname);
data/netatalk-3.1.12~ds/libevent/evutil.c:2107:9:  [3] (random) random:
  This function is not sufficiently random for security-related functions
  such as key and nonce creation (CWE-327). Use a more secure technique for
  acquiring random values.
	return random();
data/netatalk-3.1.12~ds/libevent/evutil.c:2174:10:  [3] (misc) LoadLibrary:
  Ensure that the full path to the library is specified, or current directory
  may be used (CWE-829, CWE-20). Use registry entry or GetWindowsDirectory to
  find library path, if you aren't already.
  return LoadLibrary(path);
data/netatalk-3.1.12~ds/libevent/listener.c:603:2:  [3] (misc) EnterCriticalSection:
  On some versions of Windows, exceptions can be thrown in low-memory
  situations. Use InitializeCriticalSectionAndSpinCount instead.
	EnterCriticalSection(&as->lock);
data/netatalk-3.1.12~ds/libevent/listener.c:647:2:  [3] (misc) EnterCriticalSection:
  On some versions of Windows, exceptions can be thrown in low-memory
  situations. Use InitializeCriticalSectionAndSpinCount instead.
	EnterCriticalSection(&as->lock);
data/netatalk-3.1.12~ds/libevent/listener.c:659:2:  [3] (misc) EnterCriticalSection:
  On some versions of Windows, exceptions can be thrown in low-memory
  situations. Use InitializeCriticalSectionAndSpinCount instead.
	EnterCriticalSection(&as->lock);
data/netatalk-3.1.12~ds/libevent/listener.c:708:3:  [3] (misc) EnterCriticalSection:
  On some versions of Windows, exceptions can be thrown in low-memory
  situations. Use InitializeCriticalSectionAndSpinCount instead.
		EnterCriticalSection(&as->lock);
data/netatalk-3.1.12~ds/libevent/listener.c:730:3:  [3] (misc) EnterCriticalSection:
  On some versions of Windows, exceptions can be thrown in low-memory
  situations. Use InitializeCriticalSectionAndSpinCount instead.
		EnterCriticalSection(&as->lock);
data/netatalk-3.1.12~ds/libevent/listener.c:852:4:  [3] (misc) EnterCriticalSection:
  On some versions of Windows, exceptions can be thrown in low-memory
  situations. Use InitializeCriticalSectionAndSpinCount instead.
			EnterCriticalSection(&lev->accepting[i]->lock);
data/netatalk-3.1.12~ds/libevent/poll.c:183:6:  [3] (random) random:
  This function is not sufficiently random for security-related functions
  such as key and nonce creation (CWE-327). Use a more secure technique for
  acquiring random values.
	i = random() % nfds;
data/netatalk-3.1.12~ds/libevent/select.c:180:6:  [3] (random) random:
  This function is not sufficiently random for security-related functions
  such as key and nonce creation (CWE-327). Use a more secure technique for
  acquiring random values.
	i = random() % nfds;
data/netatalk-3.1.12~ds/libevent/test/bench.c:142:14:  [3] (buffer) getopt:
  Some older implementations do not protect against internal buffer overflows
  (CWE-120, CWE-20). Check implementation on installation, or limit the size
  of all string inputs.
	while ((c = getopt(argc, argv, "n:a:w:")) != -1) {
data/netatalk-3.1.12~ds/libevent/test/bench_cascade.c:144:14:  [3] (buffer) getopt:
  Some older implementations do not protect against internal buffer overflows
  (CWE-120, CWE-20). Check implementation on installation, or limit the size
  of all string inputs.
	while ((c = getopt(argc, argv, "n:")) != -1) {
data/netatalk-3.1.12~ds/libevent/test/regress.c:1951:6:  [3] (buffer) getenv:
  Environment variables are untrustable input if they can be set by an
  attacker. They can have any content and length, and the same variable can
  be set more than once (CWE-807, CWE-20). Check environment variables
  carefully before using them.
	if (getenv("EVENT_NOWAFFLES") != NULL) {
data/netatalk-3.1.12~ds/libevent/test/regress_main.c:386:7:  [3] (buffer) getenv:
  Environment variables are untrustable input if they can be set by an
  attacker. They can have any content and length, and the same variable can
  be set more than once (CWE-807, CWE-20). Check environment variables
  carefully before using them.
	if (!getenv("EVENT_NO_DEBUG_LOCKS"))
data/netatalk-3.1.12~ds/libevent/test/test-ratelim.c:95:10:  [3] (random) random:
  This function is not sufficiently random for security-related functions
  such as key and nonce creation (CWE-327). Use a more secure technique for
  acquiring random values.
	int r = random() % 256;
data/netatalk-3.1.12~ds/libevent/test/test-ratelim.c:467:3:  [3] (random) srand:
  This function is not sufficiently random for security-related functions
  such as key and nonce creation (CWE-327). Use a more secure technique for
  acquiring random values.
		srand(tv.tv_usec);
data/netatalk-3.1.12~ds/libevent/test/test-ratelim.c:469:3:  [3] (random) srandom:
  This function is not sufficiently random for security-related functions
  such as key and nonce creation (CWE-327). Use a more secure technique for
  acquiring random values.
		srandom(tv.tv_usec);
data/netatalk-3.1.12~ds/libevent/test/test-time.c:57:15:  [3] (random) random:
  This function is not sufficiently random for security-related functions
  such as key and nonce creation (CWE-327). Use a more secure technique for
  acquiring random values.
	return (int)(random() % n);
data/netatalk-3.1.12~ds/bin/ad/ad.h:56:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char           db_stamp[ADEDLEN_PRIVSYN];
data/netatalk-3.1.12~ds/bin/ad/ad.h:79:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char p_path[MAXPATHLEN + 2];/* pointer to the start of a path */
data/netatalk-3.1.12~ds/bin/ad/ad_cp.c:639:20:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
    if ((from_fd = open(spath, O_RDONLY, 0)) == -1) {
data/netatalk-3.1.12~ds/bin/ad/ad_cp.c:677:21:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
            to_fd = open(to.p_path, O_WRONLY | O_TRUNC | O_CREAT,
data/netatalk-3.1.12~ds/bin/ad/ad_cp.c:681:21:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
            to_fd = open(to.p_path, O_WRONLY | O_TRUNC, 0);
data/netatalk-3.1.12~ds/bin/ad/ad_cp.c:684:17:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
        to_fd = open(to.p_path, O_WRONLY | O_TRUNC | O_CREAT,
data/netatalk-3.1.12~ds/bin/ad/ad_cp.c:794:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char llink[PATH_MAX];
data/netatalk-3.1.12~ds/bin/ad/ad_find.c:118:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char namebuf[MAXPATHLEN + 1];
data/netatalk-3.1.12~ds/bin/ad/ad_find.c:131:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char resbuf[DBD_MAX_SRCH_RSLTS * sizeof(cnid_t)];
data/netatalk-3.1.12~ds/bin/ad/ad_find.c:144:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy(&cnid, bufp, sizeof(cnid_t));
data/netatalk-3.1.12~ds/bin/ad/ad_find.c:150:13:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
            char buffer[12 + MAXPATHLEN + 1];
data/netatalk-3.1.12~ds/bin/ad/ad_ls.c:200:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char buf[100], *fmt;
data/netatalk-3.1.12~ds/bin/ad/ad_ls.c:222:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char type[5] = "----";
data/netatalk-3.1.12~ds/bin/ad/ad_ls.c:223:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char creator[5] = "----";
data/netatalk-3.1.12~ds/bin/ad/ad_ls.c:240:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(&FinderFlags, FinderInfo + 8, 2);
data/netatalk-3.1.12~ds/bin/ad/ad_ls.c:243:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(type, FinderInfo, 4);
data/netatalk-3.1.12~ds/bin/ad/ad_ls.c:244:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(creator, FinderInfo + 4, 4);
data/netatalk-3.1.12~ds/bin/ad/ad_ls.c:477:12:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    static char cwdpath[MAXPATHLEN+1];
data/netatalk-3.1.12~ds/bin/ad/ad_ls.c:499:16:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
    if ((cwd = open(".", O_RDONLY)) == -1) {
data/netatalk-3.1.12~ds/bin/ad/ad_mv.c:127:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char path[MAXPATHLEN];
data/netatalk-3.1.12~ds/bin/ad/ad_mv.c:294:17:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
                char path[MAXPATHLEN];
data/netatalk-3.1.12~ds/bin/ad/ad_set.c:98:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(FinderInfo, new_type, 4);
data/netatalk-3.1.12~ds/bin/ad/ad_set.c:106:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(FinderInfo + 4, new_creator, 4);
data/netatalk-3.1.12~ds/bin/ad/ad_set.c:123:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy(&FinderFlags, FinderInfo + 8, 2);
data/netatalk-3.1.12~ds/bin/ad/ad_set.c:132:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy(FinderInfo + 8, &FinderFlags, 2);
data/netatalk-3.1.12~ds/bin/ad/ad_set.c:192:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(&FinderFlags, FinderInfo + 8, 2);
data/netatalk-3.1.12~ds/bin/ad/ad_set.c:253:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(FinderInfo + 8, &FinderFlags, 2);
data/netatalk-3.1.12~ds/bin/ad/ad_util.c:81:12:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    static char logbuffer[1024];
data/netatalk-3.1.12~ds/bin/ad/ad_util.c:155:12:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    static char  mpath[ MAXPATHLEN + 2]; /* for convert_charset dest_len parameter +2 */
data/netatalk-3.1.12~ds/bin/ad/ad_util.c:208:12:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    static char buf[MAXPATHLEN+2];
data/netatalk-3.1.12~ds/bin/afppasswd/afppasswd.c:60:8:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
static char buf[MAXPATHLEN + 1];
data/netatalk-3.1.12~ds/bin/afppasswd/afppasswd.c:113:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
  char password[PASSWDLEN + 1], *p, *passwd;
data/netatalk-3.1.12~ds/bin/afppasswd/afppasswd.c:118:13:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
  if ((fp = fopen(path, "r+")) == NULL) {
data/netatalk-3.1.12~ds/bin/afppasswd/afppasswd.c:126:5:  [2] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused). Risk is low because the
  source is a constant string.
    strcat(buf, ".key");
data/netatalk-3.1.12~ds/bin/afppasswd/afppasswd.c:127:13:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
    keyfd = open(buf, O_RDONLY);
data/netatalk-3.1.12~ds/bin/afppasswd/afppasswd.c:223:13:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
  if ((fd = open(path, O_CREAT | O_TRUNC | O_RDWR, 0600)) < 0) {
data/netatalk-3.1.12~ds/bin/afppasswd/afppasswd.c:291:17:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
      uid_min = atoi(optarg);
data/netatalk-3.1.12~ds/bin/misc/fce.c:44:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(&packet->fcep_magic[0], p, sizeof(packet->fcep_magic));
data/netatalk-3.1.12~ds/bin/misc/fce.c:77:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(&packet->fcep_user[0], p, packet->fcep_userlen);
data/netatalk-3.1.12~ds/bin/misc/fce.c:87:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(&packet->fcep_path1[0], p, packet->fcep_pathlen1);
data/netatalk-3.1.12~ds/bin/misc/fce.c:95:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(&packet->fcep_path2[0], p, packet->fcep_pathlen2);
data/netatalk-3.1.12~ds/bin/misc/fce.c:109:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char buf[MAXBUFLEN];
data/netatalk-3.1.12~ds/bin/misc/fce.c:111:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char s[INET6_ADDRSTRLEN];
data/netatalk-3.1.12~ds/bin/misc/netacnv.c:35:1:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
char buffer[MAXPATHLEN +2];
data/netatalk-3.1.12~ds/etc/afpd/acls.c:1085:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(darwin_ace_count, &mapped_aces, sizeof(uint32_t));
data/netatalk-3.1.12~ds/etc/afpd/acls.c:1170:17:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
                memcpy(&new_aces[new_aces_count], &old_aces[i], sizeof(ace_t));
data/netatalk-3.1.12~ds/etc/afpd/acls.c:1191:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy(&new_aces[new_aces_count], &old_aces[i], sizeof(ace_t));
data/netatalk-3.1.12~ds/etc/afpd/acls.c:1546:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(&darwin_ace_rights, ibuf, 4);
data/netatalk-3.1.12~ds/etc/afpd/acls.c:1597:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(rbuf, ibuf, sizeof( bitmap ));
data/netatalk-3.1.12~ds/etc/afpd/acls.c:1742:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(&ace_count, ibuf, sizeof(uint32_t));
data/netatalk-3.1.12~ds/etc/afpd/afp_config.c:90:12:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    static char interfaddr[NI_MAXHOST];
data/netatalk-3.1.12~ds/etc/afpd/afp_config.c:220:24:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
    obj->fce_version = atoi(r);
data/netatalk-3.1.12~ds/etc/afpd/afp_dsi.c:568:17:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
                char logstr[50];
data/netatalk-3.1.12~ds/etc/afpd/afp_dsi.c:570:17:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
                sprintf(logstr, "/tmp/afpd.%u.XXXXXX", getpid());
data/netatalk-3.1.12~ds/etc/afpd/afprun.c:72:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char path[MAXPATHLEN +1];
data/netatalk-3.1.12~ds/etc/afpd/afprun.c:77:7:  [2] (tmpfile) mkstemp:
  Potential for temporary file vulnerability in some circumstances. Some
  older Unix-like systems create temp files with permission to write by all
  by default, so be sure to set the umask to override this. Also, some older
  Unix systems might fail to use O_EXCL when opening the file, so make sure
  that O_EXCL is used by the library (CWE-377).
	fd = mkstemp(path);
data/netatalk-3.1.12~ds/etc/afpd/afpstats_obj.c:82:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char buf[256];
data/netatalk-3.1.12~ds/etc/afpd/afs.c:35:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char		venuspace[ sizeof( struct VolumeStatus ) + 3 ];
data/netatalk-3.1.12~ds/etc/afpd/afs.c:131:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char		buf[ 1024 ];
data/netatalk-3.1.12~ds/etc/afpd/afs.c:226:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char	name[ MAXKTCNAMELEN ], instance[ MAXKTCNAMELEN ];
data/netatalk-3.1.12~ds/etc/afpd/afs.c:227:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char	realm[ MAXKTCREALMLEN ];
data/netatalk-3.1.12~ds/etc/afpd/afs.c:228:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char	oldpw[ 9 ], newpw[ 9 ];
data/netatalk-3.1.12~ds/etc/afpd/afs.c:269:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy( oldpw, ibuf, len );
data/netatalk-3.1.12~ds/etc/afpd/afs.c:278:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy( newpw, ibuf, len );
data/netatalk-3.1.12~ds/etc/afpd/appl.c:55:23:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
    if (( sa.sdt_fd = open( dtf, flags, ad_mode( dtf, mode ))) < 0 ) {
data/netatalk-3.1.12~ds/etc/afpd/appl.c:70:31:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
            if (( sa.sdt_fd = open( dtf, flags, ad_mode( dtf, mode ))) < 0 ) {
data/netatalk-3.1.12~ds/etc/afpd/appl.c:77:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy( sa.sdt_creator, creator, sizeof( CreatorType ));
data/netatalk-3.1.12~ds/etc/afpd/appl.c:91:14:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    unsigned char	appltag[ 4 ];
data/netatalk-3.1.12~ds/etc/afpd/appl.c:92:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char	buf[ MAXPATHLEN ];
data/netatalk-3.1.12~ds/etc/afpd/appl.c:133:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy( p, path, strlen( path )); 
data/netatalk-3.1.12~ds/etc/afpd/appl.c:141:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(p, cfrombstr(dir->d_m_name), blength(dir->d_m_name) + 1);
data/netatalk-3.1.12~ds/etc/afpd/appl.c:149:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char buffer[12 + MAXPATHLEN + 1];
data/netatalk-3.1.12~ds/etc/afpd/appl.c:210:14:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    unsigned char		creator[ 4 ];
data/netatalk-3.1.12~ds/etc/afpd/appl.c:211:14:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    unsigned char		appltag[ 4 ];
data/netatalk-3.1.12~ds/etc/afpd/appl.c:251:17:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
    if (( tfd = open( tempfile, O_RDWR|O_CREAT, 0666 )) < 0 ) {
data/netatalk-3.1.12~ds/etc/afpd/appl.c:265:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy( p, &mplen, sizeof( mplen ));
data/netatalk-3.1.12~ds/etc/afpd/appl.c:268:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(p, appltag, sizeof( appltag ));
data/netatalk-3.1.12~ds/etc/afpd/appl.c:299:14:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    unsigned char		creator[ 4 ];
data/netatalk-3.1.12~ds/etc/afpd/appl.c:336:17:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
    if (( tfd = open( tempfile, O_RDWR|O_CREAT, 0666 )) < 0 ) {
data/netatalk-3.1.12~ds/etc/afpd/appl.c:369:14:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    unsigned char		creator[ 4 ];
data/netatalk-3.1.12~ds/etc/afpd/appl.c:370:14:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    unsigned char		appltag[ 4 ];
data/netatalk-3.1.12~ds/etc/afpd/appl.c:441:9:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
        char	utomname[ MAXPATHLEN + 1];
data/netatalk-3.1.12~ds/etc/afpd/appl.c:476:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy( q, p, len );
data/netatalk-3.1.12~ds/etc/afpd/appl.c:497:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy( rbuf, &bitmap, sizeof( bitmap ));
data/netatalk-3.1.12~ds/etc/afpd/appl.c:499:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy( rbuf, appltag, sizeof( appltag ));
data/netatalk-3.1.12~ds/etc/afpd/auth.c:86:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy( data, afp_versions[ i ].av_name , len );
data/netatalk-3.1.12~ds/etc/afpd/auth.c:90:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(start + AFPSTATUS_UAMSOFF, &status, sizeof(status));
data/netatalk-3.1.12~ds/etc/afpd/auth.c:114:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy( data, uams->uam_name, len );
data/netatalk-3.1.12~ds/etc/afpd/auth.c:121:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(start + AFPSTATUS_ICONOFF, &status, sizeof(status));
data/netatalk-3.1.12~ds/etc/afpd/auth.c:306:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(&data, ibuf, 4); /* flag */
data/netatalk-3.1.12~ds/etc/afpd/auth.c:346:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(rbuf, &data, sizeof(data));
data/netatalk-3.1.12~ds/etc/afpd/auth.c:369:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(obj->sinfo.sessiontoken, &pid, sizeof(pid_t));
data/netatalk-3.1.12~ds/etc/afpd/auth.c:458:17:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
                memcpy(obj->sinfo.clientid, p, idlen + 8);
data/netatalk-3.1.12~ds/etc/afpd/auth.c:481:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(rbuf, &tp, sizeof(tklen));
data/netatalk-3.1.12~ds/etc/afpd/auth.c:485:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(rbuf, token, tklen);
data/netatalk-3.1.12~ds/etc/afpd/auth.c:526:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(&token, ibuf, tklen);
data/netatalk-3.1.12~ds/etc/afpd/auth.c:825:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char username[MACFILELEN + 1], *start = ibuf;
data/netatalk-3.1.12~ds/etc/afpd/auth.c:854:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(username, ibuf, len);
data/netatalk-3.1.12~ds/etc/afpd/auth.c:865:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(username, obj->username, len);
data/netatalk-3.1.12~ds/etc/afpd/auth.c:918:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(rbuf, ibuf, sizeof(bitmap));
data/netatalk-3.1.12~ds/etc/afpd/auth.c:926:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(rbuf, &id, sizeof(id));
data/netatalk-3.1.12~ds/etc/afpd/auth.c:933:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(rbuf, &id, sizeof(id));
data/netatalk-3.1.12~ds/etc/afpd/auth.c:942:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy(bitmapp, &bitmap, sizeof(bitmap));
data/netatalk-3.1.12~ds/etc/afpd/auth.c:954:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy(rbuf, uuid, UUID_BINSIZE);
data/netatalk-3.1.12~ds/etc/afpd/auth.c:1003:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char name[MAXPATHLEN + 1], buf[MAXPATHLEN + 1], *p, *last;
data/netatalk-3.1.12~ds/etc/afpd/catsearch.c:70:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char reserved[22]; /* Unknown (at least for now...) */
data/netatalk-3.1.12~ds/etc/afpd/catsearch.c:73:9:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
typedef char packed_finder[ADEDLEN_FINDERI];
data/netatalk-3.1.12~ds/etc/afpd/catsearch.c:102:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char lname[64];             /* Long name */ 
data/netatalk-3.1.12~ds/etc/afpd/catsearch.c:103:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char utf8name[514];         /* UTF8 or UCS2 name */ /* for convert_charset dest_len parameter +2 */
data/netatalk-3.1.12~ds/etc/afpd/catsearch.c:251:9:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	static char convbuf[514]; /* for convert_charset dest_len parameter +2 */
data/netatalk-3.1.12~ds/etc/afpd/catsearch.c:453:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy ( *buf, &resultsize, sizeof(resultsize) );
data/netatalk-3.1.12~ds/etc/afpd/catsearch.c:532:16:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
    if ((cwd = open(".", O_RDONLY)) < 0) {
data/netatalk-3.1.12~ds/etc/afpd/catsearch.c:712:12:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    static char resbuf[DBD_MAX_SRCH_RSLTS * sizeof(cnid_t)];
data/netatalk-3.1.12~ds/etc/afpd/catsearch.c:719:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char buffer[MAXPATHLEN +2];
data/netatalk-3.1.12~ds/etc/afpd/catsearch.c:762:9:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
        char resolvebuf[12 + MAXPATHLEN + 1];
data/netatalk-3.1.12~ds/etc/afpd/catsearch.c:766:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(&cnid, resbuf + cur_pos * sizeof(cnid_t), sizeof(cnid_t));
data/netatalk-3.1.12~ds/etc/afpd/catsearch.c:860:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char  	    tmppath[256];
data/netatalk-3.1.12~ds/etc/afpd/catsearch.c:937:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy(&c1.pdid, spec1, sizeof(pdid));
data/netatalk-3.1.12~ds/etc/afpd/catsearch.c:939:6:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	    memcpy(&c2.pdid, spec2, sizeof(pdid));
data/netatalk-3.1.12~ds/etc/afpd/catsearch.c:1008:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(tmppath, bspec1 + spec1[1] + 1, (bspec1 + spec1[1])[0]);
data/netatalk-3.1.12~ds/etc/afpd/catsearch.c:1016:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(c2.lname, bspec2 + spec2[1] + 1, (bspec2 + spec2[1])[0]);
data/netatalk-3.1.12~ds/etc/afpd/catsearch.c:1035:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy (c1.utf8name, spec1+2, namelen);
data/netatalk-3.1.12~ds/etc/afpd/catsearch.c:1059:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(rbuf, catpos, sizeof(catpos));
data/netatalk-3.1.12~ds/etc/afpd/catsearch.c:1063:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(rbuf, &c1.fbitmap, sizeof(c1.fbitmap));
data/netatalk-3.1.12~ds/etc/afpd/catsearch.c:1067:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(rbuf, &c1.dbitmap, sizeof(c1.dbitmap));
data/netatalk-3.1.12~ds/etc/afpd/catsearch.c:1071:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(rbuf, &nrecs, sizeof(nrecs));
data/netatalk-3.1.12~ds/etc/afpd/desktop.c:48:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char		wd[ MAXPATHLEN + 1];
data/netatalk-3.1.12~ds/etc/afpd/desktop.c:50:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char		modbuf[ 12 + 1], *m;
data/netatalk-3.1.12~ds/etc/afpd/desktop.c:146:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char		wd[ MAXPATHLEN + 1];
data/netatalk-3.1.12~ds/etc/afpd/desktop.c:147:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char		modbuf[12 + 1], *m;
data/netatalk-3.1.12~ds/etc/afpd/desktop.c:215:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char *cmd_argv[4];
data/netatalk-3.1.12~ds/etc/afpd/desktop.c:263:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy( rbuf, &vid, sizeof(vid));
data/netatalk-3.1.12~ds/etc/afpd/desktop.c:276:8:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
static char *icon_dtfile(struct vol *vol, u_char creator[ 4 ])
data/netatalk-3.1.12~ds/etc/afpd/desktop.c:296:23:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
    if (( si.sdt_fd = open( dtf, flags, ad_mode( dtf, mode ))) < 0 ) {
data/netatalk-3.1.12~ds/etc/afpd/desktop.c:311:31:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
            if (( si.sdt_fd = open( dtf, flags, ad_mode( dtf, mode ))) < 0 ) {
data/netatalk-3.1.12~ds/etc/afpd/desktop.c:320:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy( si.sdt_creator, creator, sizeof( CreatorType ));
data/netatalk-3.1.12~ds/etc/afpd/desktop.c:384:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy( p, &itag, sizeof( itag ));
data/netatalk-3.1.12~ds/etc/afpd/desktop.c:386:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy( p, &ftype, sizeof( ftype ));
data/netatalk-3.1.12~ds/etc/afpd/desktop.c:391:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy( p, &bsize, sizeof( bsize ));
data/netatalk-3.1.12~ds/etc/afpd/desktop.c:499:14:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    unsigned char	fcreator[ 4 ], ih[ 12 ];
data/netatalk-3.1.12~ds/etc/afpd/desktop.c:520:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy( ih, utag, sizeof( utag ));
data/netatalk-3.1.12~ds/etc/afpd/desktop.c:521:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy( ih + sizeof( utag ), utype, sizeof( utype ));
data/netatalk-3.1.12~ds/etc/afpd/desktop.c:524:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy( ih + sizeof( utag ) + sizeof( utype ) + 2, &usize,
data/netatalk-3.1.12~ds/etc/afpd/desktop.c:526:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy( rbuf, ih, sizeof( ih ));
data/netatalk-3.1.12~ds/etc/afpd/desktop.c:558:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy( rbuf, ih, sizeof( ih ));
data/netatalk-3.1.12~ds/etc/afpd/desktop.c:599:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy( rbuf, uicon, bsize);
data/netatalk-3.1.12~ds/etc/afpd/desktop.c:716:12:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    static char	path[ MAXPATHLEN + 1];
data/netatalk-3.1.12~ds/etc/afpd/desktop.c:721:5:  [2] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused). Risk is low because the
  source is a constant string.
    strcat( path, "/" APPLEDESKTOP "/" );
data/netatalk-3.1.12~ds/etc/afpd/desktop.c:755:12:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    static char  upath[ MAXPATHLEN + 2]; /* for convert_charset dest_len parameter +2 */
data/netatalk-3.1.12~ds/etc/afpd/desktop.c:796:12:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    static char  mpath[ MAXPATHLEN + 2]; /* for convert_charset dest_len parameter +2 */
data/netatalk-3.1.12~ds/etc/afpd/desktop.c:872:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy( ad_entry( adp, ADEID_COMMENT ), ibuf, clen );
data/netatalk-3.1.12~ds/etc/afpd/desktop.c:950:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy( rbuf, ad_entry( adp, ADEID_COMMENT ), clen);
data/netatalk-3.1.12~ds/etc/afpd/desktop.h:40:18:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
typedef unsigned char CreatorType[4];
data/netatalk-3.1.12~ds/etc/afpd/dircache.c:623:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char tmpnam[64];
data/netatalk-3.1.12~ds/etc/afpd/dircache.c:633:5:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
    sprintf(tmpnam, "/tmp/dircache.%u", getpid());
data/netatalk-3.1.12~ds/etc/afpd/dircache.c:634:17:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
    if ((dump = fopen(tmpnam, "w+")) == NULL) {
data/netatalk-3.1.12~ds/etc/afpd/directory.c:139:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char path[MAXPATHLEN + 1];
data/netatalk-3.1.12~ds/etc/afpd/directory.c:190:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char spath[MAXPATHLEN + 1], dpath[MAXPATHLEN + 1];
data/netatalk-3.1.12~ds/etc/afpd/directory.c:306:12:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    static char temp[ MAXPATHLEN + 1];
data/netatalk-3.1.12~ds/etc/afpd/directory.c:389:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(ret->m_name, cfrombstr(dir->d_m_name), blength(dir->d_m_name) + 1); /* 3 */
data/netatalk-3.1.12~ds/etc/afpd/directory.c:394:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy(ret->u_name, cfrombstr(dir->d_u_name), blength(dir->d_u_name) + 1);
data/netatalk-3.1.12~ds/etc/afpd/directory.c:410:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(ret->m_name, cfrombstr(dir->d_m_name), blength(dir->d_m_name) + 1);
data/netatalk-3.1.12~ds/etc/afpd/directory.c:415:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy(ret->u_name, cfrombstr(dir->d_u_name), blength(dir->d_u_name) + 1);
data/netatalk-3.1.12~ds/etc/afpd/directory.c:555:12:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    static char  buffer[12 + MAXPATHLEN + 1];
data/netatalk-3.1.12~ds/etc/afpd/directory.c:1075:12:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    static char        path[ MAXPATHLEN + 1];
data/netatalk-3.1.12~ds/etc/afpd/directory.c:1490:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy( data, &ashort, sizeof( ashort ));
data/netatalk-3.1.12~ds/etc/afpd/directory.c:1495:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy( data, &pdid, sizeof( pdid ));
data/netatalk-3.1.12~ds/etc/afpd/directory.c:1504:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy( data, &aint, sizeof( aint ));
data/netatalk-3.1.12~ds/etc/afpd/directory.c:1510:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy( data, &aint, sizeof( aint ));
data/netatalk-3.1.12~ds/etc/afpd/directory.c:1517:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy( data, &aint, sizeof( aint ));
data/netatalk-3.1.12~ds/etc/afpd/directory.c:1523:17:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
                memcpy( data, ad_entry( &ad, ADEID_FINDERI ), 32 );
data/netatalk-3.1.12~ds/etc/afpd/directory.c:1529:21:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
                    memcpy(data + FINDERINFO_FRFLAGOFF, &ashort, sizeof(ashort));
data/netatalk-3.1.12~ds/etc/afpd/directory.c:1549:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy( data, &dir->d_did, sizeof( aint ));
data/netatalk-3.1.12~ds/etc/afpd/directory.c:1566:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy( data, &ashort, sizeof( ashort ));
data/netatalk-3.1.12~ds/etc/afpd/directory.c:1572:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy( data, &aint, sizeof( aint ));
data/netatalk-3.1.12~ds/etc/afpd/directory.c:1578:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy( data, &aint, sizeof( aint ));
data/netatalk-3.1.12~ds/etc/afpd/directory.c:1603:17:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
                memcpy(data, &aint, sizeof( aint ));
data/netatalk-3.1.12~ds/etc/afpd/directory.c:1610:17:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
                memcpy( data, &ashort, sizeof( ashort ));
data/netatalk-3.1.12~ds/etc/afpd/directory.c:1622:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy( data, &aint, sizeof( aint ));
data/netatalk-3.1.12~ds/etc/afpd/directory.c:1625:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy( data, &aint, sizeof( aint ));
data/netatalk-3.1.12~ds/etc/afpd/directory.c:1630:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy( data, &aint, sizeof( aint ));
data/netatalk-3.1.12~ds/etc/afpd/directory.c:1650:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy( l_nameoff, &ashort, sizeof( ashort ));
data/netatalk-3.1.12~ds/etc/afpd/directory.c:1655:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy( utf_nameoff, &ashort, sizeof( ashort ));
data/netatalk-3.1.12~ds/etc/afpd/directory.c:1795:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy( finder_buf, buf, 32 );
data/netatalk-3.1.12~ds/etc/afpd/directory.c:1904:17:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
                memcpy(&fflags, finder_buf + FINDERINFO_FRFLAGOFF, sizeof(uint16_t));
data/netatalk-3.1.12~ds/etc/afpd/directory.c:1906:17:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
                memcpy(finder_buf + FINDERINFO_FRFLAGOFF, &fflags, sizeof(uint16_t));
data/netatalk-3.1.12~ds/etc/afpd/directory.c:1918:21:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
                    memcpy( ad_entry( &ad, ADEID_FINDERI ), finder_buf, 10 );
data/netatalk-3.1.12~ds/etc/afpd/directory.c:1919:21:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
                    memcpy( ad_entry( &ad, ADEID_FINDERI ) + 14, finder_buf + 14, 18 );
data/netatalk-3.1.12~ds/etc/afpd/directory.c:1921:21:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
                    memcpy( ad_entry( &ad, ADEID_FINDERI ), finder_buf, 32 );
data/netatalk-3.1.12~ds/etc/afpd/directory.c:2127:27:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
        if ( -1 == (dfd = open(vol->ad_path(".", ADFLAGS_DIR), O_RDWR))) {
data/netatalk-3.1.12~ds/etc/afpd/directory.c:2222:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy( rbuf, &dir->d_did, sizeof( uint32_t ));
data/netatalk-3.1.12~ds/etc/afpd/directory.c:2420:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy( rbuf, &id, sizeof( id ));
data/netatalk-3.1.12~ds/etc/afpd/directory.c:2423:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy( rbuf, &id, sizeof( id ));
data/netatalk-3.1.12~ds/etc/afpd/directory.c:2432:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy( rbuf, &id, sizeof( id ));
data/netatalk-3.1.12~ds/etc/afpd/directory.c:2435:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy( rbuf, &id, sizeof( id ));
data/netatalk-3.1.12~ds/etc/afpd/directory.c:2453:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(rbuf, &tp, sizeof(tp));
data/netatalk-3.1.12~ds/etc/afpd/directory.c:2462:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy( rbuf, name, len );
data/netatalk-3.1.12~ds/etc/afpd/directory.c:2522:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy( rbuf, &id, sizeof( id ));
data/netatalk-3.1.12~ds/etc/afpd/directory.c:2535:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy( rbuf, &id, sizeof( id ));
data/netatalk-3.1.12~ds/etc/afpd/directory.c:2634:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(rbuf, &curdir->d_did, sizeof(curdir->d_did));
data/netatalk-3.1.12~ds/etc/afpd/enumerate.c:78:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy( sd->sd_last, de->d_name, len + 1 );
data/netatalk-3.1.12~ds/etc/afpd/enumerate.c:82:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy( sd->sd_last, mname, lenm + 1 );
data/netatalk-3.1.12~ds/etc/afpd/enumerate.c:441:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy( data, &temp16, sizeof( temp16 ));
data/netatalk-3.1.12~ds/etc/afpd/enumerate.c:476:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy( rbuf, &fbitmap, sizeof( fbitmap ));
data/netatalk-3.1.12~ds/etc/afpd/enumerate.c:479:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy( rbuf, &dbitmap, sizeof( dbitmap ));
data/netatalk-3.1.12~ds/etc/afpd/enumerate.c:482:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy( rbuf, &actcnt, sizeof( actcnt ));
data/netatalk-3.1.12~ds/etc/afpd/extattrs.c:47:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char buf[100];
data/netatalk-3.1.12~ds/etc/afpd/extattrs.c:51:15:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
        len = sprintf(bufp, "%02x ", *p++);
data/netatalk-3.1.12~ds/etc/afpd/extattrs.c:84:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char                emptyFinderInfo[32] = { 0 };
data/netatalk-3.1.12~ds/etc/afpd/extattrs.c:87:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char                attrnamebuf[ATTRNAMEBUFSIZ];
data/netatalk-3.1.12~ds/etc/afpd/extattrs.c:213:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy( rbuf, &bitmap, sizeof(bitmap));
data/netatalk-3.1.12~ds/etc/afpd/extattrs.c:218:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy( rbuf, &tmpattr, sizeof(tmpattr));
data/netatalk-3.1.12~ds/etc/afpd/extattrs.c:223:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy( rbuf, attrnamebuf, attrbuflen);
data/netatalk-3.1.12~ds/etc/afpd/extattrs.c:236:8:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
static char attrmname[256];
data/netatalk-3.1.12~ds/etc/afpd/extattrs.c:252:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char                attruname[256];
data/netatalk-3.1.12~ds/etc/afpd/extattrs.c:314:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(rbuf, &bitmap, sizeof(bitmap));
data/netatalk-3.1.12~ds/etc/afpd/extattrs.c:347:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char                attruname[256];
data/netatalk-3.1.12~ds/etc/afpd/extattrs.c:441:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char                attruname[256];
data/netatalk-3.1.12~ds/etc/afpd/fce_api.c:79:17:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
static unsigned char iobuf[MAXIOBUF];
data/netatalk-3.1.12~ds/etc/afpd/fce_api.c:143:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(&udp_entry->addrinfo, p, sizeof(struct addrinfo));
data/netatalk-3.1.12~ds/etc/afpd/fce_api.c:144:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(&udp_entry->sockaddr, p->ai_addr, sizeof(struct sockaddr_storage));
data/netatalk-3.1.12~ds/etc/afpd/fce_api.c:191:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(p, FCE_PACKET_MAGIC, 8);
data/netatalk-3.1.12~ds/etc/afpd/fce_api.c:230:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(p, &uint32, sizeof(uint32));
data/netatalk-3.1.12~ds/etc/afpd/fce_api.c:238:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(p, &uint64, sizeof(uint64));
data/netatalk-3.1.12~ds/etc/afpd/fce_api.c:247:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(p, &uint16, sizeof(uint16));
data/netatalk-3.1.12~ds/etc/afpd/fce_api.c:250:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(p, user, strlen(user));
data/netatalk-3.1.12~ds/etc/afpd/fce_api.c:260:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(p, &uint16, sizeof(uint16));
data/netatalk-3.1.12~ds/etc/afpd/fce_api.c:263:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(p, path, pathlen);
data/netatalk-3.1.12~ds/etc/afpd/fce_api.c:273:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(p, &uint16, sizeof(uint16));
data/netatalk-3.1.12~ds/etc/afpd/fce_api.c:276:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(p, oldpath, pathlen);
data/netatalk-3.1.12~ds/etc/afpd/fce_api.c:579:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char target_ip[256] = {""};
data/netatalk-3.1.12~ds/etc/afpd/fce_api_internal.h:35:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char           fce_h_path[MAXPATHLEN + 1];
data/netatalk-3.1.12~ds/etc/afpd/fce_api_internal.h:41:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char path[MAXPATHLEN + 1];
data/netatalk-3.1.12~ds/etc/afpd/file.c:90:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(data, ad_finder, ADEDLEN_FINDERI);
data/netatalk-3.1.12~ds/etc/afpd/file.c:96:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(data, ufinderi, ADEDLEN_FINDERI);
data/netatalk-3.1.12~ds/etc/afpd/file.c:102:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy((char *)data + FINDERINFO_FRFLAGOFF, &ashort, sizeof(ashort));
data/netatalk-3.1.12~ds/etc/afpd/file.c:108:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(&linkflag, (char *)data + FINDERINFO_FRFLAGOFF, 2);
data/netatalk-3.1.12~ds/etc/afpd/file.c:110:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy((char *)data + FINDERINFO_FRFLAGOFF, &linkflag, 2);
data/netatalk-3.1.12~ds/etc/afpd/file.c:111:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy((char *)data + FINDERINFO_FRTYPEOFF,"slnk",4); 
data/netatalk-3.1.12~ds/etc/afpd/file.c:112:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy((char *)data + FINDERINFO_FRCREATOFF,"rhap",4); 
data/netatalk-3.1.12~ds/etc/afpd/file.c:117:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(data, em->em_type, sizeof( em->em_type ));
data/netatalk-3.1.12~ds/etc/afpd/file.c:118:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy((char *)data + 4, em->em_creator, sizeof(em->em_creator));
data/netatalk-3.1.12~ds/etc/afpd/file.c:161:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(data, &utf8, sizeof(utf8));
data/netatalk-3.1.12~ds/etc/afpd/file.c:165:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(data, &temp, sizeof(temp));
data/netatalk-3.1.12~ds/etc/afpd/file.c:169:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy( data, src, aint );
data/netatalk-3.1.12~ds/etc/afpd/file.c:395:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy(data, &ashort, sizeof( ashort ));
data/netatalk-3.1.12~ds/etc/afpd/file.c:402:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy(data, &dir->d_did, sizeof( uint32_t ));
data/netatalk-3.1.12~ds/etc/afpd/file.c:411:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy(data, &aint, sizeof( aint ));
data/netatalk-3.1.12~ds/etc/afpd/file.c:423:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy(data, &aint, sizeof( int ));
data/netatalk-3.1.12~ds/etc/afpd/file.c:430:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy(data, &aint, sizeof( int ));
data/netatalk-3.1.12~ds/etc/afpd/file.c:450:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy(data, &id, sizeof( id ));
data/netatalk-3.1.12~ds/etc/afpd/file.c:461:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy(data, &aint, sizeof( aint ));
data/netatalk-3.1.12~ds/etc/afpd/file.c:478:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy(data, &aint, sizeof( aint ));
data/netatalk-3.1.12~ds/etc/afpd/file.c:495:17:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
                memcpy(data, &aint, sizeof( aint ));
data/netatalk-3.1.12~ds/etc/afpd/file.c:500:21:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
                    memcpy(fdType, ad_entry( adp, ADEID_FINDERI ), 4 );
data/netatalk-3.1.12~ds/etc/afpd/file.c:534:17:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
                memcpy(data, &ashort, sizeof( ashort ));
data/netatalk-3.1.12~ds/etc/afpd/file.c:542:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy(data, &aint, sizeof( aint ));
data/netatalk-3.1.12~ds/etc/afpd/file.c:545:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy(data, &aint, sizeof( aint ));
data/netatalk-3.1.12~ds/etc/afpd/file.c:551:17:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
                memcpy(data, &aint, sizeof( aint ));
data/netatalk-3.1.12~ds/etc/afpd/file.c:554:17:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
                memcpy(data, &aint, sizeof( aint ));
data/netatalk-3.1.12~ds/etc/afpd/file.c:558:17:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
                memcpy(data, &rlen, sizeof(rlen));
data/netatalk-3.1.12~ds/etc/afpd/file.c:567:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy( data, &aint, sizeof( aint ));
data/netatalk-3.1.12~ds/etc/afpd/file.c:570:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy( data, &aint, sizeof( aint ));
data/netatalk-3.1.12~ds/etc/afpd/file.c:580:10:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	        memcpy(fdType, ad_entry( adp, ADEID_FINDERI ), 4 );
data/netatalk-3.1.12~ds/etc/afpd/file.c:587:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy( data, &aint, sizeof( aint ));
data/netatalk-3.1.12~ds/etc/afpd/file.c:604:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(l_nameoff, &ashort, sizeof( ashort ));
data/netatalk-3.1.12~ds/etc/afpd/file.c:609:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(utf_nameoff, &ashort, sizeof( ashort ));
data/netatalk-3.1.12~ds/etc/afpd/file.c:860:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char symbuf[MAXPATHLEN+1];
data/netatalk-3.1.12~ds/etc/afpd/file.c:906:27:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
                if ((fp = open(path->u_name, O_RDONLY)) == -1) {
data/netatalk-3.1.12~ds/etc/afpd/file.c:928:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy(finder_buf, buf, 32 );
data/netatalk-3.1.12~ds/etc/afpd/file.c:1054:17:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
                memcpy(finder_buf, ufinderi, 8 );
data/netatalk-3.1.12~ds/etc/afpd/file.c:1056:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy(ad_entry( adp, ADEID_FINDERI ), finder_buf, 32 );
data/netatalk-3.1.12~ds/etc/afpd/file.c:1065:17:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
                memcpy(ad_entry( adp, ADEID_FINDERI ), fdType, 4 );
data/netatalk-3.1.12~ds/etc/afpd/file.c:1066:17:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
                memcpy(ad_entry( adp, ADEID_FINDERI ) + 4, "pdos", 4 );
data/netatalk-3.1.12~ds/etc/afpd/file.c:1703:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(rbuf, &id, sizeof(id));
data/netatalk-3.1.12~ds/etc/afpd/file.c:1709:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(rbuf, &id, sizeof(id));
data/netatalk-3.1.12~ds/etc/afpd/file.c:1790:12:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    static char buffer[12 + MAXPATHLEN + 1];
data/netatalk-3.1.12~ds/etc/afpd/file.c:1882:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(rbuf, ibuf, sizeof(bitmap));
data/netatalk-3.1.12~ds/etc/afpd/file.c:1898:12:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    static char buffer[12 + MAXPATHLEN + 1];
data/netatalk-3.1.12~ds/etc/afpd/file.c:2029:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char		*spath, temp[17], *p;
data/netatalk-3.1.12~ds/etc/afpd/file.c:2151:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(temp, APPLETEMP, sizeof(APPLETEMP));
data/netatalk-3.1.12~ds/etc/afpd/file.c:2153:15:  [2] (tmpfile) mkstemp:
  Potential for temporary file vulnerability in some circumstances. Some
  older Unix-like systems create temp files with permission to write by all
  by default, so be sure to set the umask to override this. Also, some older
  Unix systems might fail to use O_EXCL when opening the file, so make sure
  that O_EXCL is used by the library (CWE-377).
    if ((fd = mkstemp(temp)) == -1) {
data/netatalk-3.1.12~ds/etc/afpd/filedir.c:125:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy( rbuf, &fbitmap, sizeof( fbitmap ));
data/netatalk-3.1.12~ds/etc/afpd/filedir.c:128:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy( rbuf, &dbitmap, sizeof( dbitmap ));
data/netatalk-3.1.12~ds/etc/afpd/filedir.c:290:23:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
        if ((cwd_fd = open(".", O_RDONLY)) == -1)
data/netatalk-3.1.12~ds/etc/afpd/filedir.c:467:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(oldname, cfrombstr(sdir->d_m_name), blength(sdir->d_m_name) +1);
data/netatalk-3.1.12~ds/etc/afpd/filedir.c:512:20:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
    EC_NEG1( pwd = open(".", O_RDONLY));
data/netatalk-3.1.12~ds/etc/afpd/filedir.c:678:12:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    static char pathbuf[MAXPATHLEN + 1];
data/netatalk-3.1.12~ds/etc/afpd/filedir.c:764:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(oldname, cfrombstr(sdir->d_m_name), blength(sdir->d_m_name) + 1);
data/netatalk-3.1.12~ds/etc/afpd/filedir.c:768:20:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
    if ((sdir_fd = open(".", O_RDONLY)) == -1)
data/netatalk-3.1.12~ds/etc/afpd/fork.c:122:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(rbuf, &temp, sizeof( temp ));
data/netatalk-3.1.12~ds/etc/afpd/fork.c:128:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(rbuf, &temp, sizeof( temp ));
data/netatalk-3.1.12~ds/etc/afpd/fork.c:442:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(rbuf, &bitmap, sizeof( uint16_t ));
data/netatalk-3.1.12~ds/etc/afpd/fork.c:454:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy(rbuf, &ofrefnum, sizeof(ofrefnum));
data/netatalk-3.1.12~ds/etc/afpd/fork.c:479:17:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
                memcpy(rbuf, &ofrefnum, sizeof(ofrefnum));
data/netatalk-3.1.12~ds/etc/afpd/fork.c:498:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(rbuf, &ofrefnum, sizeof(ofrefnum));
data/netatalk-3.1.12~ds/etc/afpd/fork.c:1344:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(rbuf, &bitmap, sizeof( bitmap ));
data/netatalk-3.1.12~ds/etc/afpd/hash.c:908:9:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
typedef char input_t[256];
data/netatalk-3.1.12~ds/etc/afpd/hash.c:942:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(new, str, sz);
data/netatalk-3.1.12~ds/etc/afpd/mangle.c:46:12:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    static char buffer[MAXPATHLEN +2];  /* for convert_charset dest_len parameter +2 */
data/netatalk-3.1.12~ds/etc/afpd/mangle.c:55:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char buf[MAX_EXT_LENGTH + 2];  /* for convert_charset dest_len parameter +2 */
data/netatalk-3.1.12~ds/etc/afpd/mangle.c:140:12:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    static char buffer[12 + MAXPATHLEN + 1];
data/netatalk-3.1.12~ds/etc/afpd/mangle.c:246:12:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    static char mfilename[MAXPATHLEN]; /* way > maxlen */
data/netatalk-3.1.12~ds/etc/afpd/mangle.c:247:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char mangle_suffix[MANGLE_LENGTH + 1];
data/netatalk-3.1.12~ds/etc/afpd/mangle.c:248:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char ext[MAX_EXT_LENGTH +2];  /* for convert_charset dest_len parameter +2 */
data/netatalk-3.1.12~ds/etc/afpd/mangle.c:266:9:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
    k = sprintf(mangle_suffix, "%c%X", MANGLE_CHAR, ntohl(id));
data/netatalk-3.1.12~ds/etc/afpd/mangle.c:279:9:  [2] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused). Risk is low because the
  source is a constant string.
        strcat(m, "???");
data/netatalk-3.1.12~ds/etc/afpd/messages.c:27:8:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
static char servermesg[MAXPATHLEN] = "";
data/netatalk-3.1.12~ds/etc/afpd/messages.c:28:8:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
static char localized_message[MAXPATHLEN] = "";
data/netatalk-3.1.12~ds/etc/afpd/messages.c:70:13:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
    message=fopen(filename, "r");
data/netatalk-3.1.12~ds/etc/afpd/messages.c:74:17:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
        message=fopen(filename, "r");
data/netatalk-3.1.12~ds/etc/afpd/messages.c:153:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(rbuf, &type, sizeof(type));
data/netatalk-3.1.12~ds/etc/afpd/messages.c:156:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(rbuf, &bitmap, sizeof(bitmap));
data/netatalk-3.1.12~ds/etc/afpd/messages.c:169:10:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    	    memcpy(rbuf+((utf8)?2:1), message, msglen); /*FIXME*/
data/netatalk-3.1.12~ds/etc/afpd/messages.c:174:6:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	    memcpy(rbuf+((utf8)?2:1), localized_message, outlen);
data/netatalk-3.1.12~ds/etc/afpd/messages.c:181:6:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    	memcpy(rbuf, &msgsize, sizeof(msgsize));
data/netatalk-3.1.12~ds/etc/afpd/nfsquota.c:84:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(&server_addr.sin_addr, hp->h_addr, hp->h_length);
data/netatalk-3.1.12~ds/etc/afpd/ofork.c:272:12:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    static char pathname[ MAXPATHLEN + 1] = "../";
data/netatalk-3.1.12~ds/etc/afpd/quota.c:200:13:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
            char tmp[1024];         /* Just temporary buffer */
data/netatalk-3.1.12~ds/etc/afpd/quota.c:224:23:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
            if ((qf = fopen("/proc/fs/quota", "r"))) {
data/netatalk-3.1.12~ds/etc/afpd/quota.c:378:18:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
    if (( mtab = fopen( "/etc/mnttab", "r" )) == NULL ) {
data/netatalk-3.1.12~ds/etc/afpd/quota.c:619:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char		buf[ MAXPATHLEN + 1];
data/netatalk-3.1.12~ds/etc/afpd/quota.c:636:32:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
            if (( vol->v_qfd = open( buf, O_RDONLY, 0 )) < 0 ) {
data/netatalk-3.1.12~ds/etc/afpd/quota.c:663:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char pathstring[MNAMELEN];
data/netatalk-3.1.12~ds/etc/afpd/spotlight.c:103:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char datestring[256];
data/netatalk-3.1.12~ds/etc/afpd/spotlight.c:137:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy(&i, dd->dd_talloc_array[n], sizeof(uint64_t));
data/netatalk-3.1.12~ds/etc/afpd/spotlight.c:164:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy(&bl, dd->dd_talloc_array[n], sizeof(sl_bool_t));
data/netatalk-3.1.12~ds/etc/afpd/spotlight.c:182:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy(&t, dd->dd_talloc_array[n], sizeof(sl_time_t));
data/netatalk-3.1.12~ds/etc/afpd/spotlight.c:197:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy(&cnids, dd->dd_talloc_array[n], sizeof(sl_cnids_t));
data/netatalk-3.1.12~ds/etc/afpd/spotlight.c:260:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(&cnids[i], p->dd_talloc_array[i], sizeof(uint64_t));
data/netatalk-3.1.12~ds/etc/afpd/spotlight.c:804:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(uuid.sl_uuid, v->v_uuid, 16);
data/netatalk-3.1.12~ds/etc/afpd/spotlight.c:831:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char slq_host[MAXPATHLEN + 1];
data/netatalk-3.1.12~ds/etc/afpd/spotlight.c:1064:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(&uint64, cnids->ca_cnids->dd_talloc_array[0], sizeof(uint64_t));
data/netatalk-3.1.12~ds/etc/afpd/spotlight.c:1074:9:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
        char buffer[12 + MAXPATHLEN + 1];
data/netatalk-3.1.12~ds/etc/afpd/spotlight.c:1114:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(&uint64, cnids->ca_cnids->dd_talloc_array[0], sizeof(uint64_t));
data/netatalk-3.1.12~ds/etc/afpd/spotlight.c:1124:9:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
        char buffer[12 + MAXPATHLEN + 1];
data/netatalk-3.1.12~ds/etc/afpd/spotlight.c:1179:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char buffer[12 + MAXPATHLEN + 1];
data/netatalk-3.1.12~ds/etc/afpd/spotlight.c:1206:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(&uint64, cnids->ca_cnids->dd_talloc_array[0], sizeof(uint64_t));
data/netatalk-3.1.12~ds/etc/afpd/spotlight_marshalling.c:212:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(buf + offset + 8, uuid, 16);
data/netatalk-3.1.12~ds/etc/afpd/spotlight_marshalling.c:244:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy(&id, cnids->ca_cnids->dd_talloc_array[i], sizeof(uint64_t));
data/netatalk-3.1.12~ds/etc/afpd/spotlight_marshalling.c:372:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy(&i, query->dd_talloc_array[n], sizeof(uint64_t));
data/netatalk-3.1.12~ds/etc/afpd/spotlight_marshalling.c:378:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy(&bl, query->dd_talloc_array[n], sizeof(sl_bool_t));
data/netatalk-3.1.12~ds/etc/afpd/spotlight_marshalling.c:382:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy(&d, query->dd_talloc_array[n], sizeof(double));
data/netatalk-3.1.12~ds/etc/afpd/spotlight_marshalling.c:388:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy(&t, query->dd_talloc_array[n], sizeof(sl_time_t));
data/netatalk-3.1.12~ds/etc/afpd/spotlight_marshalling.c:467:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(uuid.sl_uuid, buf + offset, 16);
data/netatalk-3.1.12~ds/etc/afpd/spotlight_marshalling.c:768:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char toc_buf[MAX_SLQ_TOC];
data/netatalk-3.1.12~ds/etc/afpd/spotlight_marshalling.c:772:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(buf, "432130dm", 8);
data/netatalk-3.1.12~ds/etc/afpd/spotlight_marshalling.c:780:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(buf + 16 + len, toc_buf, (toc_index + 1 ) * 8);
data/netatalk-3.1.12~ds/etc/afpd/status.c:92:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(data + AFPSTATUS_FLAGOFF, &status, sizeof(status));
data/netatalk-3.1.12~ds/etc/afpd/status.c:99:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char		buf[32];
data/netatalk-3.1.12~ds/etc/afpd/status.c:113:6:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    	memcpy( data, Obj, len );
data/netatalk-3.1.12~ds/etc/afpd/status.c:117:6:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    	memcpy( data, buf, len );
data/netatalk-3.1.12~ds/etc/afpd/status.c:138:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(start + AFPSTATUS_MACHOFF, &status, sizeof(status));
data/netatalk-3.1.12~ds/etc/afpd/status.c:152:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char buf[AFPSTATUS_MACHLEN+1];
data/netatalk-3.1.12~ds/etc/afpd/status.c:172:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy( data, buf, len );
data/netatalk-3.1.12~ds/etc/afpd/status.c:176:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(start + AFPSTATUS_VERSOFF, &status, sizeof(status));
data/netatalk-3.1.12~ds/etc/afpd/status.c:196:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(data, options->signature, 16);
data/netatalk-3.1.12~ds/etc/afpd/status.c:202:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(status + *servoffset, &offset, sizeof(offset));
data/netatalk-3.1.12~ds/etc/afpd/status.c:241:17:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
                memcpy(data, &inaddr->sin_addr.s_addr,
data/netatalk-3.1.12~ds/etc/afpd/status.c:249:17:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
                memcpy(data, &inaddr->sin_addr.s_addr,
data/netatalk-3.1.12~ds/etc/afpd/status.c:252:17:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
                memcpy(data, &inaddr->sin_port, sizeof(inaddr->sin_port));
data/netatalk-3.1.12~ds/etc/afpd/status.c:261:17:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
                memcpy(data, &sa6->sin6_addr.s6_addr, sizeof(sa6->sin6_addr.s6_addr));
data/netatalk-3.1.12~ds/etc/afpd/status.c:268:17:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
                memcpy(data, &sa6->sin6_addr.s6_addr, sizeof(sa6->sin6_addr.s6_addr));
data/netatalk-3.1.12~ds/etc/afpd/status.c:270:17:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
                memcpy(data, &sa6->sin6_port, sizeof(sa6->sin6_port));
data/netatalk-3.1.12~ds/etc/afpd/status.c:284:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy(data, options->fqdn, len);
data/netatalk-3.1.12~ds/etc/afpd/status.c:299:17:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
                memcpy(data, options->fqdn, len);
data/netatalk-3.1.12~ds/etc/afpd/status.c:308:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(begin + *servoffset, &offset, sizeof(offset));
data/netatalk-3.1.12~ds/etc/afpd/status.c:337:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(data, options->k5principal, options->k5principal_buflen);
data/netatalk-3.1.12~ds/etc/afpd/status.c:344:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(begin + *diroffset, &offset, sizeof(uint16_t));
data/netatalk-3.1.12~ds/etc/afpd/status.c:378:6:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    	memcpy( data, &namelen, sizeof(namelen));
data/netatalk-3.1.12~ds/etc/afpd/status.c:382:6:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    	memcpy(begin + *nameoffset, &offset, sizeof(uint16_t));
data/netatalk-3.1.12~ds/etc/afpd/status.c:404:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy( data, icondata, iconlen);
data/netatalk-3.1.12~ds/etc/afpd/status.c:411:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(sigdata, &ret, sizeof(ret));
data/netatalk-3.1.12~ds/etc/afpd/status.c:500:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char buf[1024], *p;
data/netatalk-3.1.12~ds/etc/afpd/status.c:525:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(options->signature, options->signatureopt, len);
data/netatalk-3.1.12~ds/etc/afpd/status.c:532:19:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
        if ((fp = fopen(options->sigconffile, "r")) != NULL) {  /* read open? */
data/netatalk-3.1.12~ds/etc/afpd/status.c:652:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(rbuf, obj->dsi->status, obj->dsi->statuslen);
data/netatalk-3.1.12~ds/etc/afpd/uam.c:51:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char buf[MAXPATHLEN + 1], *p;
data/netatalk-3.1.12~ds/etc/afpd/uam.c:202:12:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    static char username[256];
data/netatalk-3.1.12~ds/etc/afpd/uam.c:203:12:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    static char user[256];
data/netatalk-3.1.12~ds/etc/afpd/uam.c:204:12:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    static char pwname[256];
data/netatalk-3.1.12~ds/etc/afpd/uam.c:305:15:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
    if ((fd = open("/dev/urandom", O_RDONLY)) < 0) {
data/netatalk-3.1.12~ds/etc/afpd/uam.c:315:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy(buf + i, &result, sizeof(result));
data/netatalk-3.1.12~ds/etc/afpd/uam.c:395:16:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
        static char hbuf[NI_MAXHOST];
data/netatalk-3.1.12~ds/etc/afpd/volume.c:75:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char buf[512];
data/netatalk-3.1.12~ds/etc/afpd/volume.c:78:28:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
    EC_NULL_LOGSTR( file = fopen(path, "r"),
data/netatalk-3.1.12~ds/etc/afpd/volume.c:334:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy(ad_entry( &ad, ADEID_NAME ), slash,
data/netatalk-3.1.12~ds/etc/afpd/volume.c:406:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy(data, &ashort, sizeof( ashort ));
data/netatalk-3.1.12~ds/etc/afpd/volume.c:412:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy(data, &ashort, sizeof( ashort ));
data/netatalk-3.1.12~ds/etc/afpd/volume.c:418:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy(data, &aint, sizeof( aint ));
data/netatalk-3.1.12~ds/etc/afpd/volume.c:427:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy(data, &aint, sizeof( aint ));
data/netatalk-3.1.12~ds/etc/afpd/volume.c:434:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy(data, &aint, sizeof( aint ));
data/netatalk-3.1.12~ds/etc/afpd/volume.c:439:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy(data, &vol->v_vid, sizeof( vol->v_vid ));
data/netatalk-3.1.12~ds/etc/afpd/volume.c:445:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy(data, &bfree, sizeof( bfree ));
data/netatalk-3.1.12~ds/etc/afpd/volume.c:451:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy(data, &btotal, sizeof( btotal ));
data/netatalk-3.1.12~ds/etc/afpd/volume.c:458:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy(data, &xbfree, sizeof( xbfree ));
data/netatalk-3.1.12~ds/etc/afpd/volume.c:464:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy(data, &xbtotal, sizeof( xbtotal ));
data/netatalk-3.1.12~ds/etc/afpd/volume.c:476:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy(data, &bsize, sizeof(bsize));
data/netatalk-3.1.12~ds/etc/afpd/volume.c:491:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(nameoff, &ashort, sizeof( ashort ));
data/netatalk-3.1.12~ds/etc/afpd/volume.c:531:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(rbuf, &bitmap, sizeof( bitmap ));
data/netatalk-3.1.12~ds/etc/afpd/volume.c:591:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(data, namebuf, len );
data/netatalk-3.1.12~ds/etc/afpd/volume.c:606:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(data, &aint, sizeof( uint32_t));
data/netatalk-3.1.12~ds/etc/cnid_dbd/cmd_dbd.c:120:12:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    static char logbuffer[1024];
data/netatalk-3.1.12~ds/etc/cnid_dbd/cmd_dbd.c:197:17:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
    if ((cdir = open(".", O_RDONLY)) < 0) {
data/netatalk-3.1.12~ds/etc/cnid_dbd/cmd_dbd_scanvol.c:50:8:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
static char           cwdbuf[MAXPATHLEN+1];
data/netatalk-3.1.12~ds/etc/cnid_dbd/cmd_dbd_scanvol.c:53:8:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
static char           stamp[CNID_DEV_LEN];
data/netatalk-3.1.12~ds/etc/cnid_dbd/cmd_dbd_scanvol.c:66:8:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
static char pname[MAXPATHLEN] = "../";
data/netatalk-3.1.12~ds/etc/cnid_dbd/cmd_dbd_scanvol.c:73:12:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    static char  mpath[ MAXPATHLEN + 2]; /* for convert_charset dest_len parameter +2 */
data/netatalk-3.1.12~ds/etc/cnid_dbd/cmd_dbd_scanvol.c:239:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char eaname[MAXPATHLEN];
data/netatalk-3.1.12~ds/etc/cnid_dbd/cmd_dbd_scanvol.c:776:30:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
            if (-1 == (cwd = open(".", O_RDONLY))) {
data/netatalk-3.1.12~ds/etc/cnid_dbd/cnid_metad.c:175:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char buf1[8];
data/netatalk-3.1.12~ds/etc/cnid_dbd/cnid_metad.c:176:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char buf2[8];
data/netatalk-3.1.12~ds/etc/cnid_dbd/cnid_metad.c:270:9:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
        sprintf(buf1, "%i", sv[1]);
data/netatalk-3.1.12~ds/etc/cnid_dbd/cnid_metad.c:271:9:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
        sprintf(buf2, "%i", rqstfd);
data/netatalk-3.1.12~ds/etc/cnid_dbd/cnid_metad.c:313:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char *cmd_argv[4];
data/netatalk-3.1.12~ds/etc/cnid_dbd/db_param.c:97:12:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    static char key[MAXKEYLEN + 1];
data/netatalk-3.1.12~ds/etc/cnid_dbd/db_param.c:98:12:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    static char val[MAXPATHLEN + 1];
data/netatalk-3.1.12~ds/etc/cnid_dbd/db_param.c:99:12:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    static char pfn[MAXPATHLEN + 1];
data/netatalk-3.1.12~ds/etc/cnid_dbd/db_param.c:110:15:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
    if ((fp = fopen(pfn, "r")) == NULL) {
data/netatalk-3.1.12~ds/etc/cnid_dbd/db_param.h:30:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char usock_file[MAXPATHLEN + 1];    
data/netatalk-3.1.12~ds/etc/cnid_dbd/dbd_add.c:39:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(data.data, &rply->cnid, sizeof(rply->cnid));
data/netatalk-3.1.12~ds/etc/cnid_dbd/dbd_add.c:76:12:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    static char buf[ROOTINFO_DATALEN];
data/netatalk-3.1.12~ds/etc/cnid_dbd/dbd_add.c:94:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(buf, (char *)rootinfo_data.data, ROOTINFO_DATALEN);
data/netatalk-3.1.12~ds/etc/cnid_dbd/dbd_add.c:128:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(buf + CNID_TYPE_OFS, &hint, sizeof(hint));
data/netatalk-3.1.12~ds/etc/cnid_dbd/dbd_get.c:29:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char start[CNID_DID_LEN + MAXPATHLEN + 1], *buf;
data/netatalk-3.1.12~ds/etc/cnid_dbd/dbd_get.c:39:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(buf, &rqst->did, sizeof(rqst->did));
data/netatalk-3.1.12~ds/etc/cnid_dbd/dbd_get.c:41:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(buf, rqst->name, rqst->namelen);
data/netatalk-3.1.12~ds/etc/cnid_dbd/dbd_lookup.c:170:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(&id_devino, devdata.data, sizeof(rply->cnid));
data/netatalk-3.1.12~ds/etc/cnid_dbd/dbd_lookup.c:188:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(&id_didname, diddata.data, sizeof(rply->cnid));
data/netatalk-3.1.12~ds/etc/cnid_dbd/dbd_rebuild_add.c:41:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(data.data, &rqst->cnid, sizeof(cnid_t));
data/netatalk-3.1.12~ds/etc/cnid_dbd/dbd_rebuild_add.c:65:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(&tmp, (char *) data.data + CNID_TYPE_OFS, sizeof(cnid_t));
data/netatalk-3.1.12~ds/etc/cnid_dbd/dbd_rebuild_add.c:71:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy((char *) data.data + CNID_TYPE_OFS, &rqst->cnid, sizeof(cnid_t));
data/netatalk-3.1.12~ds/etc/cnid_dbd/dbd_resolve.c:51:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(&rply->did, (char *) data.data + CNID_DID_OFS, sizeof(cnid_t));
data/netatalk-3.1.12~ds/etc/cnid_dbd/dbd_search.c:25:12:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    static char resbuf[DBD_MAX_SRCH_RSLTS * sizeof(cnid_t)];
data/netatalk-3.1.12~ds/etc/cnid_dbd/dbd_update.c:50:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(data.data, &rqst->cnid, sizeof(rqst->cnid));
data/netatalk-3.1.12~ds/etc/cnid_dbd/dbif.c:46:16:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
    if ((cwd = open(".", O_RDONLY)) < 0) {
data/netatalk-3.1.12~ds/etc/cnid_dbd/dbif.c:65:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(buffer, &st.st_ctime, sizeof(st.st_ctime));
data/netatalk-3.1.12~ds/etc/cnid_dbd/dbif.c:93:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char buf[ROOTINFO_DATALEN];
data/netatalk-3.1.12~ds/etc/cnid_dbd/dbif.c:105:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(buf, ROOTINFO_DATA, ROOTINFO_DATALEN);
data/netatalk-3.1.12~ds/etc/cnid_dbd/dbif.c:108:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(buf + CNID_TYPE_OFS, &uint32, sizeof(uint32));
data/netatalk-3.1.12~ds/etc/cnid_dbd/dbif.c:111:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(buf + CNID_DID_OFS, &uint32, sizeof(uint32));
data/netatalk-3.1.12~ds/etc/cnid_dbd/dbif.c:148:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(version, (char *)data.data + CNID_DID_OFS, sizeof(uint32_t));
data/netatalk-3.1.12~ds/etc/cnid_dbd/dbif.c:198:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy((char *)data.data + CNID_DID_OFS, &v, sizeof(v));
data/netatalk-3.1.12~ds/etc/cnid_dbd/dbif.c:250:16:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
    if ((cwd = open(".", O_RDONLY)) < 0) {
data/netatalk-3.1.12~ds/etc/cnid_dbd/dbif.c:262:27:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
    if ((dbd->db_errlog = fopen(DB_ERRLOGFILE, "a")) == NULL)
data/netatalk-3.1.12~ds/etc/cnid_dbd/dbif.c:294:16:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
    if ((cwd = open(".", O_RDONLY)) < 0) {
data/netatalk-3.1.12~ds/etc/cnid_dbd/dbif.c:410:33:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
        if ((ret = dbd->db_env->open(dbd->db_env, dbd->db_envhome, dbenv_oflags | DB_PRIVATE, 0))) {
data/netatalk-3.1.12~ds/etc/cnid_dbd/dbif.c:467:29:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
    if ((ret = dbd->db_env->open(dbd->db_env, dbd->db_envhome, dbenv_oflags, 0))) {
data/netatalk-3.1.12~ds/etc/cnid_dbd/dbif.c:520:20:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
        if ((cwd = open(".", O_RDONLY)) < 0) {
data/netatalk-3.1.12~ds/etc/cnid_dbd/dbif.c:587:34:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
        if (dbd->db_table[i].db->open(dbd->db_table[i].db,
data/netatalk-3.1.12~ds/etc/cnid_dbd/dbif.c:744:29:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
    if ((ret = dbd->db_env->open(dbd->db_env, 
data/netatalk-3.1.12~ds/etc/cnid_dbd/dbif.c:940:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(cnids, pkey.data, sizeof(cnid_t));
data/netatalk-3.1.12~ds/etc/cnid_dbd/dbif.c:941:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(&cnid, pkey.data, sizeof(cnid_t));
data/netatalk-3.1.12~ds/etc/cnid_dbd/dbif.c:1113:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char *typestring[2] = {"f", "d"};
data/netatalk-3.1.12~ds/etc/cnid_dbd/dbif.c:1114:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char timebuf[64];
data/netatalk-3.1.12~ds/etc/cnid_dbd/dbif.c:1127:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(&cnid, key.data, 4);
data/netatalk-3.1.12~ds/etc/cnid_dbd/dbif.c:1134:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy(&stamp, (char *)data.data + CNID_DEV_OFS, sizeof(time_t));
data/netatalk-3.1.12~ds/etc/cnid_dbd/dbif.c:1135:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy(&lastid, (char *)data.data + CNID_TYPE_OFS, CNID_TYPE_LEN);
data/netatalk-3.1.12~ds/etc/cnid_dbd/dbif.c:1137:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy(&version, (char *)data.data + CNID_DID_OFS, CNID_DID_LEN);
data/netatalk-3.1.12~ds/etc/cnid_dbd/dbif.c:1145:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy(&dev, (char *)data.data + CNID_DEV_OFS, 8);
data/netatalk-3.1.12~ds/etc/cnid_dbd/dbif.c:1148:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy(&ino, (char *)data.data + CNID_INO_OFS, 8);
data/netatalk-3.1.12~ds/etc/cnid_dbd/dbif.c:1151:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy(&type, (char *)data.data + CNID_TYPE_OFS, 4);
data/netatalk-3.1.12~ds/etc/cnid_dbd/dbif.c:1154:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy(&did, (char *)data.data + CNID_DID_OFS, 4);
data/netatalk-3.1.12~ds/etc/cnid_dbd/dbif.c:1197:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy(&cnid, data.data, CNID_LEN);
data/netatalk-3.1.12~ds/etc/cnid_dbd/dbif.c:1203:17:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
                memcpy(&dev, key.data, CNID_DEV_LEN);
data/netatalk-3.1.12~ds/etc/cnid_dbd/dbif.c:1206:17:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
                memcpy(&ino, (char *)key.data + CNID_DEV_LEN, CNID_INO_LEN);
data/netatalk-3.1.12~ds/etc/cnid_dbd/dbif.c:1242:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy(&cnid, data.data, CNID_LEN);
data/netatalk-3.1.12~ds/etc/cnid_dbd/dbif.c:1248:17:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
                memcpy(&did, key.data, CNID_LEN);
data/netatalk-3.1.12~ds/etc/cnid_dbd/dbif.c:1309:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(cnid, key.data, sizeof(cnid_t));
data/netatalk-3.1.12~ds/etc/cnid_dbd/main.c:104:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char lockpath[PATH_MAX];
data/netatalk-3.1.12~ds/etc/cnid_dbd/main.c:138:27:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
            if ((lockfd = open(lockpath, O_RDWR | O_CREAT, 0644)) < 0) {
data/netatalk-3.1.12~ds/etc/cnid_dbd/main.c:219:20:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
    EC_NEG1( cwd = open(".", O_RDONLY) );
data/netatalk-3.1.12~ds/etc/cnid_dbd/main.c:293:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char timebuf[64];
data/netatalk-3.1.12~ds/etc/cnid_dbd/main.c:294:12:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    static char namebuf[MAXPATHLEN + 1];
data/netatalk-3.1.12~ds/etc/cnid_dbd/main.c:510:22:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
            clntfd = atoi(optarg);
data/netatalk-3.1.12~ds/etc/cnid_dbd/main.c:513:22:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
            ctrlfd = atoi(optarg);
data/netatalk-3.1.12~ds/etc/cnid_dbd/pack.c:79:12:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    static char buffer[MAXPATHLEN +2];
data/netatalk-3.1.12~ds/etc/cnid_dbd/pack.c:110:21:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    static unsigned char start[CNID_HEADER_LEN + MAXPATHLEN + 1];
data/netatalk-3.1.12~ds/etc/cnid_dbd/pack.c:118:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(buf, &i, sizeof(i));
data/netatalk-3.1.12~ds/etc/cnid_dbd/pack.c:122:11:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    buf = memcpy(buf, &rqst->did, sizeof(rqst->did));
data/netatalk-3.1.12~ds/etc/cnid_dbd/pack.c:124:11:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    buf = memcpy(buf, rqst->name, rqst->namelen);
data/netatalk-3.1.12~ds/etc/netatalk/afp_avahi.c:48:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char name[MAXINSTANCENAMELEN+1];
data/netatalk-3.1.12~ds/etc/netatalk/afp_avahi.c:51:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char tmpname[256];
data/netatalk-3.1.12~ds/etc/netatalk/afp_avahi.c:92:16:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
        port = atoi(ctx->obj->options.port);
data/netatalk-3.1.12~ds/etc/netatalk/afp_mdns.c:162:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char                                        name[MAXINSTANCENAMELEN+1];
data/netatalk-3.1.12~ds/etc/netatalk/afp_mdns.c:166:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char                                        tmpname[256];
data/netatalk-3.1.12~ds/etc/netatalk/afp_mdns.c:213:12:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
    port = atoi(obj->options.port);
data/netatalk-3.1.12~ds/etc/netatalk/netatalk.c:311:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char *myargv[MYARVSIZE];
data/netatalk-3.1.12~ds/etc/uams/uams_dhx2_pam.c:276:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(rbuf, &uint16, sizeof(uint16_t));
data/netatalk-3.1.12~ds/etc/uams/uams_dhx2_pam.c:292:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(rbuf, &uint16, sizeof(uint16_t));
data/netatalk-3.1.12~ds/etc/uams/uams_dhx2_pam.c:359:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(username, ibuf, len );
data/netatalk-3.1.12~ds/etc/uams/uams_dhx2_pam.c:398:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(username, uname +2, len );
data/netatalk-3.1.12~ds/etc/uams/uams_dhx2_pam.c:411:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char serverNonce_bin[16];
data/netatalk-3.1.12~ds/etc/uams/uams_dhx2_pam.c:501:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(rbuf, &uint16, sizeof(uint16_t));
data/netatalk-3.1.12~ds/etc/uams/uams_dhx2_pam.c:508:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(rbuf+16, serverNonce_bin, 16);
data/netatalk-3.1.12~ds/etc/uams/uams_dhx2_pam.c:732:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(&retID, ibuf, sizeof(uint16_t));
data/netatalk-3.1.12~ds/etc/uams/uams_dhx2_passwd.c:213:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(rbuf, &uint16, sizeof(uint16_t));
data/netatalk-3.1.12~ds/etc/uams/uams_dhx2_passwd.c:228:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(rbuf, &uint16, sizeof(uint16_t));
data/netatalk-3.1.12~ds/etc/uams/uams_dhx2_passwd.c:295:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(username, ibuf, len );
data/netatalk-3.1.12~ds/etc/uams/uams_dhx2_passwd.c:334:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(username, uname +2, len );
data/netatalk-3.1.12~ds/etc/uams/uams_dhx2_passwd.c:350:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char serverNonce_bin[16];
data/netatalk-3.1.12~ds/etc/uams/uams_dhx2_passwd.c:442:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(rbuf, &uint16, sizeof(uint16_t));
data/netatalk-3.1.12~ds/etc/uams/uams_dhx2_passwd.c:449:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(rbuf+16, serverNonce_bin, 16);
data/netatalk-3.1.12~ds/etc/uams/uams_dhx2_passwd.c:593:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(&retID, ibuf, sizeof(uint16_t));
data/netatalk-3.1.12~ds/etc/uams/uams_dhx_pam.c:253:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char errbuf[256];
data/netatalk-3.1.12~ds/etc/uams/uams_dhx_pam.c:278:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(rbuf, &sessid, sizeof(sessid));
data/netatalk-3.1.12~ds/etc/uams/uams_dhx_pam.c:298:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(rbuf, &randbuf, sizeof(randbuf));
data/netatalk-3.1.12~ds/etc/uams/uams_dhx_pam.c:311:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(rbuf + KEYSIZE, buf, KEYSIZE); 
data/netatalk-3.1.12~ds/etc/uams/uams_dhx_pam.c:375:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(username, ibuf, len );
data/netatalk-3.1.12~ds/etc/uams/uams_dhx_pam.c:415:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(username, uname +2, len );
data/netatalk-3.1.12~ds/etc/uams/uams_dhx_passwd.c:167:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(rbuf, &sessid, sizeof(sessid));
data/netatalk-3.1.12~ds/etc/uams/uams_dhx_passwd.c:183:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(rbuf, &randbuf, sizeof(randbuf));
data/netatalk-3.1.12~ds/etc/uams/uams_dhx_passwd.c:192:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(rbuf + KEYSIZE, name, KEYSIZE); 
data/netatalk-3.1.12~ds/etc/uams/uams_dhx_passwd.c:233:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(username, ibuf, len );
data/netatalk-3.1.12~ds/etc/uams/uams_dhx_passwd.c:274:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(username, uname +2, len );
data/netatalk-3.1.12~ds/etc/uams/uams_dhx_passwd.c:341:9:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
        char hostname[256];
data/netatalk-3.1.12~ds/etc/uams/uams_gss.c:228:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(sinfo->cryptedkey, wrap_buff.value, wrap_buff.length);
data/netatalk-3.1.12~ds/etc/uams/uams_gss.c:320:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(rbuf, &auth_len, sizeof(auth_len));
data/netatalk-3.1.12~ds/etc/uams/uams_gss.c:325:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(rbuf, authenticator_buff.value, authenticator_buff.length);
data/netatalk-3.1.12~ds/etc/uams/uams_gss.c:354:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(rbuf, &temp16, sizeof(temp16));
data/netatalk-3.1.12~ds/etc/uams/uams_gss.c:607:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char principal[255];
data/netatalk-3.1.12~ds/etc/uams/uams_guest.c:106:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(username, p,  MIN( UAM_USERNAMELEN, q - p ));
data/netatalk-3.1.12~ds/etc/uams/uams_pam.c:228:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(username, ibuf, len );
data/netatalk-3.1.12~ds/etc/uams/uams_pam.c:261:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(username, uname +2, len );
data/netatalk-3.1.12~ds/etc/uams/uams_pam.c:279:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char pw[PASSWDLEN + 1];
data/netatalk-3.1.12~ds/etc/uams/uams_pam.c:285:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(pw, ibuf, PASSWDLEN);
data/netatalk-3.1.12~ds/etc/uams/uams_pam.c:339:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char	password[PASSWDLEN + 1] = "\0";
data/netatalk-3.1.12~ds/etc/uams/uams_pam.c:369:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(username, p, MIN(UAM_USERNAMELEN, q - p) );
data/netatalk-3.1.12~ds/etc/uams/uams_pam.c:378:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(password, p, MIN(PASSWDLEN, (q - p)) );
data/netatalk-3.1.12~ds/etc/uams/uams_passwd.c:113:9:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
        char hostname[256];
data/netatalk-3.1.12~ds/etc/uams/uams_passwd.c:157:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(username, ibuf, len );
data/netatalk-3.1.12~ds/etc/uams/uams_passwd.c:198:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(username, uname +2, len );
data/netatalk-3.1.12~ds/etc/uams/uams_passwd.c:213:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char pw[PASSWDLEN + 1], *p;
data/netatalk-3.1.12~ds/etc/uams/uams_passwd.c:220:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(pw, ibuf, PASSWDLEN);
data/netatalk-3.1.12~ds/etc/uams/uams_passwd.c:258:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char	password[PASSWDLEN + 1] = "\0";
data/netatalk-3.1.12~ds/etc/uams/uams_passwd.c:287:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(username, p,  MIN( UAM_USERNAMELEN, q - p ));
data/netatalk-3.1.12~ds/etc/uams/uams_passwd.c:296:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(password, p, MIN(PASSWDLEN, q - p) );
data/netatalk-3.1.12~ds/etc/uams/uams_pgp.c:75:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(name, ibuf, len );
data/netatalk-3.1.12~ds/etc/uams/uams_pgp.c:99:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(rbuf + KEYSIZE, name, KEYSIZE); 
data/netatalk-3.1.12~ds/etc/uams/uams_randnum.c:56:14:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
  if ( (fd = open(path, (set) ? O_WRONLY : O_RDONLY)) < 0 ) {
data/netatalk-3.1.12~ds/etc/uams/uams_randnum.c:126:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
  char buf[MAXPATHLEN + 1], *p;
data/netatalk-3.1.12~ds/etc/uams/uams_randnum.c:133:13:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
  if ((fp = fopen(path, (set) ? "r+" : "r")) == NULL) {
data/netatalk-3.1.12~ds/etc/uams/uams_randnum.c:141:5:  [2] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused). Risk is low because the
  source is a constant string.
    strcat(buf, ".key");
data/netatalk-3.1.12~ds/etc/uams/uams_randnum.c:142:13:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
    keyfd = open(buf, O_RDONLY);
data/netatalk-3.1.12~ds/etc/uams/uams_randnum.c:209:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(p, key, sizeof(key));
data/netatalk-3.1.12~ds/etc/uams/uams_randnum.c:225:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(passwd, p, len);
data/netatalk-3.1.12~ds/etc/uams/uams_randnum.c:249:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char path[MAXPATHLEN + 1];
data/netatalk-3.1.12~ds/etc/uams/uams_randnum.c:314:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
  memcpy(rbuf, &sessid, sizeof(sessid));
data/netatalk-3.1.12~ds/etc/uams/uams_randnum.c:319:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
  memcpy(rbuf, randbuf, sizeof(randbuf));
data/netatalk-3.1.12~ds/etc/uams/uams_randnum.c:494:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(username, ibuf, len );
data/netatalk-3.1.12~ds/etc/uams/uams_randnum.c:529:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(username, uname +2, len );
data/netatalk-3.1.12~ds/include/atalk/adouble.h:198:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char                ad_filler[16];
data/netatalk-3.1.12~ds/include/atalk/adouble.h:225:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char                ad_data[AD_DATASZ_MAX];
data/netatalk-3.1.12~ds/include/atalk/byteorder.h:110:52:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
#define CVAL(buf,pos) ((unsigned)(((const unsigned char *)(buf))[pos]))
data/netatalk-3.1.12~ds/include/atalk/byteorder.h:111:38:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
#define CVAL_NC(buf,pos) (((unsigned char *)(buf))[pos]) /* Non-const version of CVAL */
data/netatalk-3.1.12~ds/include/atalk/cnid_bdb_private.h:63:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char      stamp[ADEDLEN_PRIVSYN]; /* db timestamp */
data/netatalk-3.1.12~ds/include/atalk/dsi.h:64:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char     status[1400];
data/netatalk-3.1.12~ds/include/atalk/fce_api.h:113:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char          fcep_magic[8];
data/netatalk-3.1.12~ds/include/atalk/fce_api.h:120:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char          fcep_user[MAXPATHLEN];
data/netatalk-3.1.12~ds/include/atalk/fce_api.h:122:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char          fcep_path1[MAXPATHLEN];
data/netatalk-3.1.12~ds/include/atalk/fce_api.h:124:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char          fcep_path2[MAXPATHLEN];
data/netatalk-3.1.12~ds/include/atalk/globals.h:111:14:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    unsigned char signature[16];
data/netatalk-3.1.12~ds/include/atalk/globals.h:150:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char username[MAXUSERLEN];
data/netatalk-3.1.12~ds/include/atalk/globals.h:152:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char oldtmp[AFPOBJ_TMPSIZ + 1], newtmp[AFPOBJ_TMPSIZ + 1];
data/netatalk-3.1.12~ds/include/atalk/logger.h:134:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char           processname[16];
data/netatalk-3.1.12~ds/include/atalk/spotlight.h:57:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char sl_uuid[16];
data/netatalk-3.1.12~ds/include/atalk/uuid.h:21:18:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
typedef unsigned char atalk_uuid_t[UUID_BINSIZE];
data/netatalk-3.1.12~ds/include/atalk/volume.h:26:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char		em_creator[4];
data/netatalk-3.1.12~ds/include/atalk/volume.h:27:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char		em_type[4];
data/netatalk-3.1.12~ds/include/atalk/volume.h:51:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char            v_stamp[ADEDLEN_PRIVSYN];
data/netatalk-3.1.12~ds/libatalk/acl/cache.c:50:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char timestr[200];
data/netatalk-3.1.12~ds/libatalk/acl/cache.c:156:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(uuid, inuuid, UUID_BINSIZE);
data/netatalk-3.1.12~ds/libatalk/acl/cache.c:238:17:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
                memcpy(uuid, entry->uuid, UUID_BINSIZE);
data/netatalk-3.1.12~ds/libatalk/acl/cache.c:328:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(uuid, inuuid, UUID_BINSIZE);
data/netatalk-3.1.12~ds/libatalk/acl/ldap.c:227:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(*result, attribute_values[0]->bv_val, attribute_values[0]->bv_len + 1);
data/netatalk-3.1.12~ds/libatalk/acl/ldap.c:279:12:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    static char filter[MAX_FILTER_SIZE];
data/netatalk-3.1.12~ds/libatalk/acl/ldap.c:280:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char stripped[MAX_FILTER_SIZE];
data/netatalk-3.1.12~ds/libatalk/acl/ldap.c:283:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char ldap_bytes[LDAP_BIN_UUID_LEN];
data/netatalk-3.1.12~ds/libatalk/acl/ldap.c:346:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char filter[256];           /* this should really be enough. we don't want to malloc everything! */
data/netatalk-3.1.12~ds/libatalk/acl/ldap_config.c:37:21:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
            free(*((char **)(ldap_prefs[i].pref)));
data/netatalk-3.1.12~ds/libatalk/acl/ldap_config.c:38:16:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
            *((char **)(ldap_prefs[i].pref)) = NULL;
data/netatalk-3.1.12~ds/libatalk/acl/ldap_config.c:59:54:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
                    *((int *)(ldap_prefs[i].pref)) = atoi(val);
data/netatalk-3.1.12~ds/libatalk/acl/ldap_config.c:62:30:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
                    *((const char **)(ldap_prefs[i].pref)) = strdup(val);
data/netatalk-3.1.12~ds/libatalk/acl/unix.c:109:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(&new_aces[i], &aces1[i], sizeof(ace_t));
data/netatalk-3.1.12~ds/libatalk/acl/unix.c:117:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(&new_aces[j], &aces2[i], sizeof(ace_t));
data/netatalk-3.1.12~ds/libatalk/acl/unix.c:152:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy(&new_aces[j], &aces[i], sizeof(ace_t));
data/netatalk-3.1.12~ds/libatalk/acl/unix.c:191:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy(&new_aces[j], &aces[i], sizeof(ace_t));
data/netatalk-3.1.12~ds/libatalk/acl/uuid.c:58:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(buf, local_group_uuid, 12);
data/netatalk-3.1.12~ds/libatalk/acl/uuid.c:62:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(buf, local_user_uuid, 12);
data/netatalk-3.1.12~ds/libatalk/acl/uuid.c:67:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(buf + 12, &tmp, 4);
data/netatalk-3.1.12~ds/libatalk/acl/uuid.c:111:12:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    static char uuidstring[64];
data/netatalk-3.1.12~ds/libatalk/acl/uuid.c:128:9:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
        sprintf(uuidstring + i, "%02X", c);
data/netatalk-3.1.12~ds/libatalk/acl/uuid.c:150:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char nulluuid[16] = {0,0,0,0, 0,0,0,0, 0,0,0,0, 0,0,0,0};
data/netatalk-3.1.12~ds/libatalk/acl/uuid.c:187:21:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
                    memcpy(uuid, nulluuid, 16);
data/netatalk-3.1.12~ds/libatalk/acl/uuid.c:200:21:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
                    memcpy(uuid, nulluuid, 16);
data/netatalk-3.1.12~ds/libatalk/acl/uuid.c:253:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(&tmp, uuidp + 12, sizeof(uint32_t));
data/netatalk-3.1.12~ds/libatalk/acl/uuid.c:271:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(&tmp, uuidp + 12, sizeof(uint32_t));
data/netatalk-3.1.12~ds/libatalk/adouble/ad_attr.c:25:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(attr, ad_entry(ad, ADEID_AFPFILEI) + AFPFILEIOFF_ATTR, 2);
data/netatalk-3.1.12~ds/libatalk/adouble/ad_attr.c:28:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(&fflags, ad_entry(ad, ADEID_FINDERI) + FINDERINFO_FRFLAGOFF, 2);
data/netatalk-3.1.12~ds/libatalk/adouble/ad_attr.c:64:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(ad_entry(ad, ADEID_AFPFILEI) + AFPFILEIOFF_ATTR, &attr, sizeof(attr));
data/netatalk-3.1.12~ds/libatalk/adouble/ad_attr.c:67:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(&fflags, ad_entry(ad, ADEID_FINDERI) + FINDERINFO_FRFLAGOFF, 2);
data/netatalk-3.1.12~ds/libatalk/adouble/ad_attr.c:80:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(ad_entry(ad, ADEID_FINDERI) + FINDERINFO_FRFLAGOFF, &fflags, 2);
data/netatalk-3.1.12~ds/libatalk/adouble/ad_attr.c:98:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(ad_entry( adp, ADEID_PRIVID ), &tmp, sizeof(tmp));
data/netatalk-3.1.12~ds/libatalk/adouble/ad_attr.c:104:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(ad_entry( adp, ADEID_PRIVDEV ), &dev, sizeof(dev_t));
data/netatalk-3.1.12~ds/libatalk/adouble/ad_attr.c:108:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(ad_entry( adp, ADEID_PRIVINO ), &ino, sizeof(ino_t));
data/netatalk-3.1.12~ds/libatalk/adouble/ad_attr.c:111:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(ad_entry( adp, ADEID_DID ), &did, sizeof(did));
data/netatalk-3.1.12~ds/libatalk/adouble/ad_attr.c:114:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(ad_entry( adp, ADEID_PRIVSYN ), stamp, ADEDLEN_PRIVSYN);
data/netatalk-3.1.12~ds/libatalk/adouble/ad_attr.c:129:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy(&dev, ad_entry(adp, ADEID_PRIVDEV), sizeof(dev_t));
data/netatalk-3.1.12~ds/libatalk/adouble/ad_attr.c:130:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy(&ino, ad_entry(adp, ADEID_PRIVINO), sizeof(ino_t));
data/netatalk-3.1.12~ds/libatalk/adouble/ad_attr.c:131:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy(&a_did, ad_entry(adp, ADEID_DID), sizeof(cnid_t));
data/netatalk-3.1.12~ds/libatalk/adouble/ad_attr.c:172:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(ad_entry( ad, ADEID_NAME ), path, len);
data/netatalk-3.1.12~ds/libatalk/adouble/ad_conv.c:46:8:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
static char emptyfilad[32] = {0,0,0,0,0,0,0,0,
data/netatalk-3.1.12~ds/libatalk/adouble/ad_conv.c:51:8:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
static char emptydirad[32] = {0,0,0,0,0,0,0,0,
data/netatalk-3.1.12~ds/libatalk/adouble/ad_conv.c:210:12:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    static char buf[MAXPATHLEN];
data/netatalk-3.1.12~ds/libatalk/adouble/ad_date.c:23:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(ad_entry(ad, ADEID_FILEDATESI) + dateoff, &date, sizeof(date));
data/netatalk-3.1.12~ds/libatalk/adouble/ad_date.c:39:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(date, ad_entry(ad, ADEID_FILEDATESI) + dateoff, sizeof(uint32_t));
data/netatalk-3.1.12~ds/libatalk/adouble/ad_flush.c:69:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(buf, &temp, sizeof( temp ));
data/netatalk-3.1.12~ds/libatalk/adouble/ad_flush.c:73:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(buf, &temp, sizeof( temp ));
data/netatalk-3.1.12~ds/libatalk/adouble/ad_flush.c:84:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(buf, &temp, sizeof( temp ));
data/netatalk-3.1.12~ds/libatalk/adouble/ad_flush.c:88:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(buf, &temp, sizeof( temp ));
data/netatalk-3.1.12~ds/libatalk/adouble/ad_flush.c:92:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(buf, &temp, sizeof( temp ));
data/netatalk-3.1.12~ds/libatalk/adouble/ad_flush.c:97:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(nentp, &nent, sizeof( nent ));
data/netatalk-3.1.12~ds/libatalk/adouble/ad_flush.c:114:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(buf, &temp, sizeof( temp ));
data/netatalk-3.1.12~ds/libatalk/adouble/ad_flush.c:118:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(buf, &temp, sizeof( temp ));
data/netatalk-3.1.12~ds/libatalk/adouble/ad_flush.c:129:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(buf, &temp, sizeof( temp ));
data/netatalk-3.1.12~ds/libatalk/adouble/ad_flush.c:133:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(buf, &temp, sizeof( temp ));
data/netatalk-3.1.12~ds/libatalk/adouble/ad_flush.c:137:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(buf, &temp, sizeof( temp ));
data/netatalk-3.1.12~ds/libatalk/adouble/ad_flush.c:142:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(nentp, &nent, sizeof( nent ));
data/netatalk-3.1.12~ds/libatalk/adouble/ad_flush.c:161:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(buf, &temp, sizeof( temp ));
data/netatalk-3.1.12~ds/libatalk/adouble/ad_flush.c:165:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(buf, &temp, sizeof( temp ));
data/netatalk-3.1.12~ds/libatalk/adouble/ad_flush.c:168:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(buf, AD_FILLER_NETATALK, strlen(AD_FILLER_NETATALK));
data/netatalk-3.1.12~ds/libatalk/adouble/ad_flush.c:172:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(buf, &nent, sizeof( nent ));
data/netatalk-3.1.12~ds/libatalk/adouble/ad_flush.c:177:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(buf, &temp, sizeof( temp ));
data/netatalk-3.1.12~ds/libatalk/adouble/ad_flush.c:181:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(buf, &temp, sizeof( temp ));
data/netatalk-3.1.12~ds/libatalk/adouble/ad_flush.c:185:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(buf, &temp, sizeof( temp ));
data/netatalk-3.1.12~ds/libatalk/adouble/ad_flush.c:188:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(adbuf + ADEDOFF_FINDERI_OSX, ad_entry(ad, ADEID_FINDERI), ADEDLEN_FINDERI);
data/netatalk-3.1.12~ds/libatalk/adouble/ad_flush.c:192:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(buf, &temp, sizeof( temp ));
data/netatalk-3.1.12~ds/libatalk/adouble/ad_flush.c:196:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(buf, &temp, sizeof( temp ));
data/netatalk-3.1.12~ds/libatalk/adouble/ad_flush.c:200:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(buf, &temp, sizeof( temp ));
data/netatalk-3.1.12~ds/libatalk/adouble/ad_flush.c:230:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy( ad_entry( add, eid ), ad_entry( ads, eid ), len );
data/netatalk-3.1.12~ds/libatalk/adouble/ad_flush.c:238:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(&id, ad_entry(add, ADEID_PRIVID), sizeof(cnid_t));
data/netatalk-3.1.12~ds/libatalk/adouble/ad_flush.c:240:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(ad_entry(add, ADEID_PRIVID), &id, sizeof(cnid_t));
data/netatalk-3.1.12~ds/libatalk/adouble/ad_flush.c:288:40:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
                    EC_NEG1_LOG( cwd = open(".", O_RDONLY) );
data/netatalk-3.1.12~ds/libatalk/adouble/ad_flush.c:345:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char    adbuf[AD_DATASZ_OSX];
data/netatalk-3.1.12~ds/libatalk/adouble/ad_lock.c:128:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(lock, lock + ad->adf_lockcount - i, sizeof(adf_lock_t));
data/netatalk-3.1.12~ds/libatalk/adouble/ad_lock.c:313:12:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    static char buf[LTYPE2STRBUFSIZ];
data/netatalk-3.1.12~ds/libatalk/adouble/ad_lock.c:455:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(&adflock->lock, &lock, sizeof(lock));
data/netatalk-3.1.12~ds/libatalk/adouble/ad_lock.c:480:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(&adflock->lock, &lock, sizeof(lock));
data/netatalk-3.1.12~ds/libatalk/adouble/ad_open.c:175:12:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    static char buf[ADFLAGS2LOGSTRBUFSIZ];
data/netatalk-3.1.12~ds/libatalk/adouble/ad_open.c:263:12:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    static char buf[OPENFLAGS2LOGSTRBUFSIZ];
data/netatalk-3.1.12~ds/libatalk/adouble/ad_open.c:370:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(ad_entry(ad, ADEID_FINDERI) + FINDERINFO_FRTYPEOFF,"\0\0\0\0", 4);
data/netatalk-3.1.12~ds/libatalk/adouble/ad_open.c:371:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(ad_entry(ad, ADEID_FINDERI) + FINDERINFO_FRCREATOFF,"\0\0\0\0", 4);
data/netatalk-3.1.12~ds/libatalk/adouble/ad_open.c:381:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(ad_entry(ad, ADEID_FINDERI) + FINDERINFO_FRFLAGOFF, &ashort, sizeof(ashort));
data/netatalk-3.1.12~ds/libatalk/adouble/ad_open.c:533:19:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
    EC_NEG1( fd = open(path, O_RDONLY) );
data/netatalk-3.1.12~ds/libatalk/adouble/ad_open.c:631:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(ad_entry(&adea, ADEID_FINDERI),
data/netatalk-3.1.12~ds/libatalk/adouble/ad_open.c:1017:31:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
    ad->ad_data_fork.adf_fd = open(path, oflags, admode);
data/netatalk-3.1.12~ds/libatalk/adouble/ad_open.c:1027:52:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
                EC_NEG1( ad->ad_data_fork.adf_fd = open(path, oflags, admode) );
data/netatalk-3.1.12~ds/libatalk/adouble/ad_open.c:1101:26:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
    ad_meta_fileno(ad) = open(ad_p, nocreatflags);
data/netatalk-3.1.12~ds/libatalk/adouble/ad_open.c:1113:47:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
                EC_NEG1( ad_meta_fileno(ad) = open(ad_p, nocreatflags) );
data/netatalk-3.1.12~ds/libatalk/adouble/ad_open.c:1142:43:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
            EC_NEG1( ad_meta_fileno(ad) = open(ad_p, oflags, admode) );
data/netatalk-3.1.12~ds/libatalk/adouble/ad_open.c:1231:42:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
            EC_NEG1(ad_meta_fileno(ad) = open(path, oflags));
data/netatalk-3.1.12~ds/libatalk/adouble/ad_open.c:1438:31:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
    if ((ad_reso_fileno(ad) = open(rfpath, oflags)) == -1) {
data/netatalk-3.1.12~ds/libatalk/adouble/ad_open.c:1450:43:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
                if ((ad_reso_fileno(ad) = open(rfpath, oflags)) == -1) {
data/netatalk-3.1.12~ds/libatalk/adouble/ad_open.c:1463:47:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
            EC_NEG1_LOG( ad_reso_fileno(ad) = open(rfpath, oflags, mode) );
data/netatalk-3.1.12~ds/libatalk/adouble/ad_open.c:1571:12:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    static char pathbuf[ MAXPATHLEN + 1];
data/netatalk-3.1.12~ds/libatalk/adouble/ad_open.c:1572:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char    c, *slash, buf[MAXPATHLEN + 1];
data/netatalk-3.1.12~ds/libatalk/adouble/ad_open.c:1606:12:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    static char pathbuf[ MAXPATHLEN + 1];
data/netatalk-3.1.12~ds/libatalk/adouble/ad_open.c:1624:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy( pathbuf, path, l);
data/netatalk-3.1.12~ds/libatalk/adouble/ad_open.c:1643:12:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    static char     modebuf[ MAXPATHLEN + 1];
data/netatalk-3.1.12~ds/libatalk/adouble/ad_open.c:1659:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy( modebuf, path, len );
data/netatalk-3.1.12~ds/libatalk/adouble/ad_open.c:1955:23:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
        if (((cwdfd = open(".", O_RDONLY)) == -1) || (fchdir(dirfd) != 0)) {
data/netatalk-3.1.12~ds/libatalk/adouble/ad_open.c:2039:23:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
        if (((cwdfd = open(".", O_RDONLY)) == -1) || (fchdir(dirfd) != 0))
data/netatalk-3.1.12~ds/libatalk/adouble/ad_read.c:76:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy(buf, ad->ad_data_fork.adf_syml, cc);
data/netatalk-3.1.12~ds/libatalk/adouble/ad_write.c:224:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char    fixedbuf[8192];
data/netatalk-3.1.12~ds/libatalk/bstring/bstradd.c:48:29:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
#define bstr__memcpy(d,s,l) memcpy ((d), (s), (l))
data/netatalk-3.1.12~ds/libatalk/bstring/bstrlib.c:42:29:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
#define bstr__memcpy(d,s,l) memcpy ((d), (s), (l))
data/netatalk-3.1.12~ds/libatalk/bstring/bstrlib.c:705:39:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		if (b0->data[i] != ((const unsigned char *) blk)[i]) {
data/netatalk-3.1.12~ds/libatalk/bstring/bstrlib.c:707:35:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
			    downcase (((const unsigned char *) blk)[i])) return 0;
data/netatalk-3.1.12~ds/libatalk/bstring/bstrlib.c:816:39:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		if (b0->data[i] != ((const unsigned char *) blk)[i]) return BSTR_OK;
data/netatalk-3.1.12~ds/libatalk/bstring/bstrlib.c:1285:29:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
struct charField { unsigned char content[CFCLEN]; };
data/netatalk-3.1.12~ds/libatalk/cnid/cdb/cnid_cdb_add.c:47:21:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    static unsigned char start[CNID_HEADER_LEN + MAXPATHLEN + 1];
data/netatalk-3.1.12~ds/libatalk/cnid/cdb/cnid_cdb_add.c:59:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(buf, &i, sizeof(i));
data/netatalk-3.1.12~ds/libatalk/cnid/cdb/cnid_cdb_add.c:63:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(buf, &did, sizeof(did));
data/netatalk-3.1.12~ds/libatalk/cnid/cdb/cnid_cdb_add.c:66:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(buf, name, len);
data/netatalk-3.1.12~ds/libatalk/cnid/cdb/cnid_cdb_add.c:81:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(buffer,&t, sizeof(time_t));
data/netatalk-3.1.12~ds/libatalk/cnid/cdb/cnid_cdb_add.c:95:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char buf[ROOTINFO_DATALEN];
data/netatalk-3.1.12~ds/libatalk/cnid/cdb/cnid_cdb_add.c:96:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char stamp[CNID_DEV_LEN];
data/netatalk-3.1.12~ds/libatalk/cnid/cdb/cnid_cdb_add.c:133:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(buf, ROOTINFO_DATA, ROOTINFO_DATALEN);
data/netatalk-3.1.12~ds/libatalk/cnid/cdb/cnid_cdb_add.c:136:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy((char *)rootinfo_data.data +CNID_TYPE_OFS, &hint, sizeof(hint));
data/netatalk-3.1.12~ds/libatalk/cnid/cdb/cnid_cdb_add.c:141:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy((char *)rootinfo_data.data +CNID_DEV_OFS, stamp, sizeof(stamp));
data/netatalk-3.1.12~ds/libatalk/cnid/cdb/cnid_cdb_add.c:206:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(data.data, &hint, sizeof(hint));
data/netatalk-3.1.12~ds/libatalk/cnid/cdb/cnid_cdb_add.c:284:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(buffer, (char*)data.data + CNID_DEV_OFS, len);
data/netatalk-3.1.12~ds/libatalk/cnid/cdb/cnid_cdb_get.c:11:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char start[CNID_DID_LEN + MAXPATHLEN + 1], *buf;
data/netatalk-3.1.12~ds/libatalk/cnid/cdb/cnid_cdb_get.c:25:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(buf, &did, sizeof(did));
data/netatalk-3.1.12~ds/libatalk/cnid/cdb/cnid_cdb_get.c:27:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(buf, name, len);
data/netatalk-3.1.12~ds/libatalk/cnid/cdb/cnid_cdb_lookup.c:19:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char dev[CNID_DEV_LEN];
data/netatalk-3.1.12~ds/libatalk/cnid/cdb/cnid_cdb_lookup.c:20:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char ino[CNID_INO_LEN];  
data/netatalk-3.1.12~ds/libatalk/cnid/cdb/cnid_cdb_lookup.c:49:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(dev, buf + CNID_DEV_OFS, CNID_DEV_LEN);
data/netatalk-3.1.12~ds/libatalk/cnid/cdb/cnid_cdb_lookup.c:50:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(ino, buf + CNID_INO_OFS, CNID_INO_LEN);
data/netatalk-3.1.12~ds/libatalk/cnid/cdb/cnid_cdb_lookup.c:61:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(&id_devino, devdata.data, sizeof(cnid_t));
data/netatalk-3.1.12~ds/libatalk/cnid/cdb/cnid_cdb_lookup.c:79:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(&id_didname, diddata.data, sizeof(cnid_t));
data/netatalk-3.1.12~ds/libatalk/cnid/cdb/cnid_cdb_open.c:106:15:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
    return p->open(p, NULL, f, d, t, flags, mode);
data/netatalk-3.1.12~ds/libatalk/cnid/cdb/cnid_cdb_open.c:108:15:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
    return p->open(p, f, d, t, flags, mode);
data/netatalk-3.1.12~ds/libatalk/cnid/cdb/cnid_cdb_open.c:150:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char path[MAXPATHLEN + 1];
data/netatalk-3.1.12~ds/libatalk/cnid/cdb/cnid_cdb_open.c:181:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char path[MAXPATHLEN + 1];
data/netatalk-3.1.12~ds/libatalk/cnid/cdb/cnid_cdb_open.c:242:26:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
    if ((rc = db->dbenv->open(db->dbenv, path, DBOPTIONS, 0666 & ~vol->v_umask)) != 0) {
data/netatalk-3.1.12~ds/libatalk/cnid/cdb/cnid_cdb_open.c:255:30:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
        if ((rc = db->dbenv->open(db->dbenv, path, DB_INIT_MPOOL, 0666 & ~vol->v_umask)) != 0) {
data/netatalk-3.1.12~ds/libatalk/cnid/cdb/cnid_cdb_open.c:258:34:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
            if ((rc = db->dbenv->open(db->dbenv, path, 0, 0666 & ~vol->v_umask)) != 0) {
data/netatalk-3.1.12~ds/libatalk/cnid/cdb/cnid_cdb_private.h:50:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
  char          name[50];
data/netatalk-3.1.12~ds/libatalk/cnid/cdb/cnid_cdb_private.h:60:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char lock_file[MAXPATHLEN + 1];
data/netatalk-3.1.12~ds/libatalk/cnid/cdb/cnid_cdb_rebuild_add.c:24:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char buf[ROOTINFO_DATALEN];
data/netatalk-3.1.12~ds/libatalk/cnid/cdb/cnid_cdb_rebuild_add.c:36:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(buf, (char *)rootinfo_data.data, ROOTINFO_DATALEN);
data/netatalk-3.1.12~ds/libatalk/cnid/cdb/cnid_cdb_rebuild_add.c:41:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(buf, ROOTINFO_DATA, ROOTINFO_DATALEN);
data/netatalk-3.1.12~ds/libatalk/cnid/cdb/cnid_cdb_rebuild_add.c:44:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(buf + CNID_DEV_OFS, &t, sizeof(time_t));
data/netatalk-3.1.12~ds/libatalk/cnid/cdb/cnid_cdb_rebuild_add.c:46:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(buf + CNID_TYPE_OFS, &id, sizeof(id));
data/netatalk-3.1.12~ds/libatalk/cnid/cdb/cnid_cdb_rebuild_add.c:59:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(buf + CNID_TYPE_OFS, &hint, sizeof(hint));
data/netatalk-3.1.12~ds/libatalk/cnid/cdb/cnid_cdb_rebuild_add.c:111:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(data.data, &hint, sizeof(hint));
data/netatalk-3.1.12~ds/libatalk/cnid/cdb/cnid_cdb_resolve.c:41:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(id, (char *)data.data +CNID_DID_OFS, sizeof(cnid_t));
data/netatalk-3.1.12~ds/libatalk/cnid/cdb/cnid_cdb_update.c:21:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char getbuf[CNID_HEADER_LEN + MAXPATHLEN +1];
data/netatalk-3.1.12~ds/libatalk/cnid/cdb/cnid_cdb_update.c:88:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(data.data, &id, sizeof(id));
data/netatalk-3.1.12~ds/libatalk/cnid/cnid.c:64:4:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
   char tmp[MAXPATHLEN];
data/netatalk-3.1.12~ds/libatalk/cnid/cnid.c:269:6:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    	memcpy(buffer, &t, sizeof(time_t));
data/netatalk-3.1.12~ds/libatalk/cnid/dbd/cnid_dbd.c:517:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char  stamp[ADEDLEN_PRIVSYN];
data/netatalk-3.1.12~ds/libatalk/cnid/dbd/cnid_dbd.c:530:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(db->client_stamp, stamp, ADEDLEN_PRIVSYN);
data/netatalk-3.1.12~ds/libatalk/cnid/dbd/cnid_dbd.c:531:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(db->stamp, stamp, ADEDLEN_PRIVSYN);
data/netatalk-3.1.12~ds/libatalk/cnid/mysql/cnid_mysql.c:50:8:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
static char               stmt_param_name[MAXPATHLEN];
data/netatalk-3.1.12~ds/libatalk/cnid/mysql/cnid_mysql.c:62:8:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
static char               lookup_result_name[MAXPATHLEN];
data/netatalk-3.1.12~ds/libatalk/cnid/mysql/cnid_mysql.c:646:20:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
        id = htonl(atoi(row[0]));
data/netatalk-3.1.12~ds/libatalk/cnid/mysql/cnid_mysql.c:683:17:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
    *id = htonl(atoi(row[0]));
data/netatalk-3.1.12~ds/libatalk/cnid/mysql/cnid_mysql.c:735:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(buffer, row[0], len);
data/netatalk-3.1.12~ds/libatalk/cnid/mysql/cnid_mysql.c:820:12:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    static char stripped[33];
data/netatalk-3.1.12~ds/libatalk/cnid/mysql/cnid_mysql.c:873:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char stamp[8];
data/netatalk-3.1.12~ds/libatalk/cnid/mysql/cnid_mysql.c:875:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(stamp, &now, sizeof(time_t));
data/netatalk-3.1.12~ds/libatalk/cnid/mysql/cnid_mysql.c:876:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char blob[16+1];
data/netatalk-3.1.12~ds/libatalk/cnid/mysql/cnid_mysql.c:909:24:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
        int depleted = atoi(row[0]);
data/netatalk-3.1.12~ds/libatalk/cnid/tdb/cnid_tdb_add.c:44:21:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    static unsigned char start[CNID_HEADER_LEN + MAXPATHLEN + 1];
data/netatalk-3.1.12~ds/libatalk/cnid/tdb/cnid_tdb_add.c:56:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(buf, &i, sizeof(i));
data/netatalk-3.1.12~ds/libatalk/cnid/tdb/cnid_tdb_add.c:60:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(buf, &did, sizeof(did));
data/netatalk-3.1.12~ds/libatalk/cnid/tdb/cnid_tdb_add.c:63:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(buf, name, len);
data/netatalk-3.1.12~ds/libatalk/cnid/tdb/cnid_tdb_add.c:122:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(&hint, data.dptr, sizeof(cnid_t));
data/netatalk-3.1.12~ds/libatalk/cnid/tdb/cnid_tdb_add.c:197:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(data.dptr, &hint, sizeof(hint));
data/netatalk-3.1.12~ds/libatalk/cnid/tdb/cnid_tdb_get.c:12:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char start[CNID_DID_LEN + MAXPATHLEN + 1], *buf;
data/netatalk-3.1.12~ds/libatalk/cnid/tdb/cnid_tdb_get.c:25:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(buf, &did, sizeof(did));
data/netatalk-3.1.12~ds/libatalk/cnid/tdb/cnid_tdb_get.c:27:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(buf, name, len);
data/netatalk-3.1.12~ds/libatalk/cnid/tdb/cnid_tdb_lookup.c:16:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char dev[CNID_DEV_LEN];
data/netatalk-3.1.12~ds/libatalk/cnid/tdb/cnid_tdb_lookup.c:17:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char ino[CNID_INO_LEN];  
data/netatalk-3.1.12~ds/libatalk/cnid/tdb/cnid_tdb_lookup.c:42:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(dev, buf + CNID_DEV_OFS, CNID_DEV_LEN);
data/netatalk-3.1.12~ds/libatalk/cnid/tdb/cnid_tdb_lookup.c:43:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(ino, buf + CNID_INO_OFS, CNID_INO_LEN);
data/netatalk-3.1.12~ds/libatalk/cnid/tdb/cnid_tdb_lookup.c:59:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy(&id_devino, devdata.dptr, sizeof(cnid_t));
data/netatalk-3.1.12~ds/libatalk/cnid/tdb/cnid_tdb_lookup.c:83:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy(&id_didname, diddata.dptr, sizeof(cnid_t));
data/netatalk-3.1.12~ds/libatalk/cnid/tdb/cnid_tdb_open.c:65:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char                      path[MAXPATHLEN + 1];
data/netatalk-3.1.12~ds/libatalk/cnid/tdb/cnid_tdb_resolve.c:27:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy(id, (char *)data.dptr + +CNID_DID_OFS, sizeof(cnid_t));
data/netatalk-3.1.12~ds/libatalk/cnid/tdb/cnid_tdb_update.c:76:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(data.dptr, &id, sizeof(id));
data/netatalk-3.1.12~ds/libatalk/compat/getusershell.c:102:12:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
	if ((fp = fopen(SHELLS, "r")) == (FILE *)0)
data/netatalk-3.1.12~ds/libatalk/compat/mktemp.c:38:1:  [2] (tmpfile) mkstemp:
  Potential for temporary file vulnerability in some circumstances. Some
  older Unix-like systems create temp files with permission to write by all
  by default, so be sure to set the umask to override this. Also, some older
  Unix systems might fail to use O_EXCL when opening the file, so make sure
  that O_EXCL is used by the library (CWE-377).
mkstemp(path)
data/netatalk-3.1.12~ds/libatalk/compat/mktemp.c:93:8:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
			    open(path, O_CREAT|O_EXCL|O_RDWR, 0600)) >= 0)
data/netatalk-3.1.12~ds/libatalk/compat/strlcpy.c:46:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(d, s, len);
data/netatalk-3.1.12~ds/libatalk/compat/strlcpy.c:69:17:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
                memcpy(d+len1, s, len2);
data/netatalk-3.1.12~ds/libatalk/dsi/dsi_attn.c:32:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
  char block[DSI_BLOCKSIZ + sizeof(AFPUserBytes)];
data/netatalk-3.1.12~ds/libatalk/dsi/dsi_attn.c:50:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
  memcpy(block + 2, &id, sizeof(id));
data/netatalk-3.1.12~ds/libatalk/dsi/dsi_attn.c:52:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
  memcpy(block + 8, &nlen, sizeof(nlen));
data/netatalk-3.1.12~ds/libatalk/dsi/dsi_attn.c:53:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
  memcpy(block + 16, &flags, sizeof(flags));
data/netatalk-3.1.12~ds/libatalk/dsi/dsi_getstat.c:25:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
  memcpy(dsi->commands, dsi->status, dsi->statuslen);
data/netatalk-3.1.12~ds/libatalk/dsi/dsi_opensess.c:52:7:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
      memcpy(&dsi->attn_quantum, &dsi->commands[i], option_len);
data/netatalk-3.1.12~ds/libatalk/dsi/dsi_opensess.c:77:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
  memcpy(dsi->commands + 2, &servquant, sizeof(servquant));
data/netatalk-3.1.12~ds/libatalk/dsi/dsi_opensess.c:84:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
  memcpy(dsi->commands + offs + 2, &replcsize, sizeof(replcsize));
data/netatalk-3.1.12~ds/libatalk/dsi/dsi_stream.c:47:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(buf + 2, &dsi->header.dsi_requestID, sizeof(dsi->header.dsi_requestID));           
data/netatalk-3.1.12~ds/libatalk/dsi/dsi_stream.c:48:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(buf + 4, &dsi->header.dsi_data.dsi_code, sizeof(dsi->header.dsi_data.dsi_code));
data/netatalk-3.1.12~ds/libatalk/dsi/dsi_stream.c:49:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(buf + 8, &dsi->header.dsi_len, sizeof(dsi->header.dsi_len));
data/netatalk-3.1.12~ds/libatalk/dsi/dsi_stream.c:50:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(buf + 12, &dsi->header.dsi_reserved, sizeof(dsi->header.dsi_reserved));
data/netatalk-3.1.12~ds/libatalk/dsi/dsi_stream.c:154:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(buf, dsi->start, nbe);
data/netatalk-3.1.12~ds/libatalk/dsi/dsi_stream.c:342:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char block[DSI_BLOCKSIZ];
data/netatalk-3.1.12~ds/libatalk/dsi/dsi_stream.c:524:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
  char block[DSI_BLOCKSIZ];
data/netatalk-3.1.12~ds/libatalk/dsi/dsi_stream.c:571:30:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
          iov[0].iov_base = (char *) iov[0].iov_base + len;
data/netatalk-3.1.12~ds/libatalk/dsi/dsi_stream.c:579:30:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
          iov[0].iov_base = (char *) iov[0].iov_base + len;
data/netatalk-3.1.12~ds/libatalk/dsi/dsi_stream.c:600:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
  char block[DSI_BLOCKSIZ];
data/netatalk-3.1.12~ds/libatalk/dsi/dsi_tcp.c:285:30:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
        sa->sin_port = htons(atoi(port));
data/netatalk-3.1.12~ds/libatalk/dsi/dsi_tcp.c:383:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(&dsi->server, p->ai_addr, p->ai_addrlen);
data/netatalk-3.1.12~ds/libatalk/dsi/dsi_tcp.c:509:22:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
            unsigned char ipv6loopb[16] = {0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1};
data/netatalk-3.1.12~ds/libatalk/dsi/dsi_tcp.c:517:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(&dsi->server, p->ai_addr, p->ai_addrlen);
data/netatalk-3.1.12~ds/libatalk/dsi/dsi_tickle.c:22:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
  char block[DSI_BLOCKSIZ];
data/netatalk-3.1.12~ds/libatalk/dsi/dsi_tickle.c:33:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
  memcpy(block + 2, &id, sizeof(id));
data/netatalk-3.1.12~ds/libatalk/iniparser/dictionary.c:47:12:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    static char buf[MAXKEYSIZE];
data/netatalk-3.1.12~ds/libatalk/iniparser/dictionary.c:68:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(newptr, ptr, size);
data/netatalk-3.1.12~ds/libatalk/iniparser/iniparser.c:55:12:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    static char l[ASCIILINESZ+1];
data/netatalk-3.1.12~ds/libatalk/iniparser/iniparser.c:188:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char    keym[ASCIILINESZ+1];
data/netatalk-3.1.12~ds/libatalk/iniparser/iniparser.c:462:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char        line[ASCIILINESZ+1];
data/netatalk-3.1.12~ds/libatalk/iniparser/iniparser.c:532:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char line    [ASCIILINESZ+1] ;
data/netatalk-3.1.12~ds/libatalk/iniparser/iniparser.c:533:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char section [ASCIILINESZ+1] ;
data/netatalk-3.1.12~ds/libatalk/iniparser/iniparser.c:534:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char key     [ASCIILINESZ+1] ;
data/netatalk-3.1.12~ds/libatalk/iniparser/iniparser.c:535:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char val     [ASCIILINESZ+1] ;
data/netatalk-3.1.12~ds/libatalk/iniparser/iniparser.c:544:18:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
    if ((inifile=fopen(ininame, "r"))==NULL) {
data/netatalk-3.1.12~ds/libatalk/iniparser/iniparser.c:605:32:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
                if ((include = fopen(val, "r")) == NULL) {
data/netatalk-3.1.12~ds/libatalk/talloc/dalloc.c:141:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(talloc_chunk, obj, size);
data/netatalk-3.1.12~ds/libatalk/unicode/charcnv.c:671:8:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
static char  debugbuf[ MAXPATHLEN +1 ];
data/netatalk-3.1.12~ds/libatalk/unicode/charcnv.c:683:9:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
        sprintf(q, "%2.2x.", *p);
data/netatalk-3.1.12~ds/libatalk/unicode/charcnv.c:736:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(outbuf, &ucs2, sizeof(ucs2_t));
data/netatalk-3.1.12~ds/libatalk/unicode/charcnv.c:738:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(outbuf + sizeof(ucs2_t), &ucs2, sizeof(ucs2_t));
data/netatalk-3.1.12~ds/libatalk/unicode/charcnv.c:740:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(outbuf + 2 * sizeof(ucs2_t), &ucs2, sizeof(ucs2_t));
data/netatalk-3.1.12~ds/libatalk/unicode/charcnv.c:789:21:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
                    char h[MAXPATHLEN];
data/netatalk-3.1.12~ds/libatalk/unicode/charcnv.c:824:21:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
                    memcpy(outbuf, &ucs2, sizeof(ucs2_t));
data/netatalk-3.1.12~ds/libatalk/unicode/charcnv.c:826:21:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
                    memcpy(outbuf + sizeof(ucs2_t), &ucs2, sizeof(ucs2_t));
data/netatalk-3.1.12~ds/libatalk/unicode/charcnv.c:828:21:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
                    memcpy(outbuf + 2 * sizeof(ucs2_t), &ucs2, sizeof(ucs2_t));
data/netatalk-3.1.12~ds/libatalk/unicode/charcnv.c:836:21:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
                    memcpy(outbuf, &slash, sizeof(ucs2_t));
data/netatalk-3.1.12~ds/libatalk/unicode/charcnv.c:844:21:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
                    memcpy(outbuf, &ucs2, sizeof(ucs2_t));
data/netatalk-3.1.12~ds/libatalk/unicode/charcnv.c:858:21:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
                    memcpy(outbuf, &ucs2, sizeof(ucs2_t));
data/netatalk-3.1.12~ds/libatalk/unicode/charcnv.c:860:21:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
                    memcpy(outbuf + sizeof(ucs2_t), &ucs2, sizeof(ucs2_t));
data/netatalk-3.1.12~ds/libatalk/unicode/charcnv.c:862:21:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
                    memcpy(outbuf + 2 * sizeof(ucs2_t), &ucs2, sizeof(ucs2_t));
data/netatalk-3.1.12~ds/libatalk/unicode/charcnv.c:871:21:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
                    memcpy(outbuf, &ucs2, sizeof(ucs2_t));
data/netatalk-3.1.12~ds/libatalk/unicode/charcnv.c:879:21:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
                    memcpy(outbuf, &ucs2, sizeof(ucs2_t));
data/netatalk-3.1.12~ds/libatalk/unicode/charsets/generic_cjk.c:63:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(*outbuf, buf, n);
data/netatalk-3.1.12~ds/libatalk/unicode/charsets/generic_cjk.c:105:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(*outbuf, buf, n * sizeof(ucs2_t));
data/netatalk-3.1.12~ds/libatalk/unicode/charsets/generic_cjk.c:151:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(out, buf + i, sizeof(buf) - sizeof(*buf) * i);
data/netatalk-3.1.12~ds/libatalk/unicode/charsets/mac_centraleurope.h:63:23:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
static const unsigned char mac_centraleurope_page00[224] = {
data/netatalk-3.1.12~ds/libatalk/unicode/charsets/mac_centraleurope.h:94:23:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
static const unsigned char mac_centraleurope_page20[48] = {
data/netatalk-3.1.12~ds/libatalk/unicode/charsets/mac_centraleurope.h:102:23:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
static const unsigned char mac_centraleurope_page22[32] = {
data/netatalk-3.1.12~ds/libatalk/unicode/charsets/mac_centraleurope.h:108:23:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
static const unsigned char mac_centraleurope_page22_1[8] = {
data/netatalk-3.1.12~ds/libatalk/unicode/charsets/mac_cyrillic.h:63:23:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
static const unsigned char mac_cyrillic_page00[32] = {
data/netatalk-3.1.12~ds/libatalk/unicode/charsets/mac_cyrillic.h:69:23:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
static const unsigned char mac_cyrillic_page04[96] = {
data/netatalk-3.1.12~ds/libatalk/unicode/charsets/mac_cyrillic.h:83:23:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
static const unsigned char mac_cyrillic_page20[24] = {
data/netatalk-3.1.12~ds/libatalk/unicode/charsets/mac_cyrillic.h:88:23:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
static const unsigned char mac_cyrillic_page21[24] = {
data/netatalk-3.1.12~ds/libatalk/unicode/charsets/mac_cyrillic.h:93:23:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
static const unsigned char mac_cyrillic_page22[104] = {
data/netatalk-3.1.12~ds/libatalk/unicode/charsets/mac_greek.h:52:23:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
static const unsigned char mac_greek_page00[96] = {
data/netatalk-3.1.12~ds/libatalk/unicode/charsets/mac_greek.h:66:23:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
static const unsigned char mac_greek_page03[80] = {
data/netatalk-3.1.12~ds/libatalk/unicode/charsets/mac_greek.h:78:23:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
static const unsigned char mac_greek_page20[40] = {
data/netatalk-3.1.12~ds/libatalk/unicode/charsets/mac_greek.h:85:23:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
static const unsigned char mac_greek_page22[32] = {
data/netatalk-3.1.12~ds/libatalk/unicode/charsets/mac_hebrew.h:67:23:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
static const unsigned char mac_hebrew_page00[96] = {
data/netatalk-3.1.12~ds/libatalk/unicode/charsets/mac_hebrew.h:83:23:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
static const unsigned char mac_hebrew_page05[64] = {
data/netatalk-3.1.12~ds/libatalk/unicode/charsets/mac_hebrew.h:95:23:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
static const unsigned char mac_hebrew_page20[24] = {
data/netatalk-3.1.12~ds/libatalk/unicode/charsets/mac_hebrew.h:102:23:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
static const unsigned char mac_hebrew_pagefb[56] = {
data/netatalk-3.1.12~ds/libatalk/unicode/charsets/mac_roman.h:23:23:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
static const unsigned char mac_roman_page00[96] = {
data/netatalk-3.1.12~ds/libatalk/unicode/charsets/mac_roman.h:37:23:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
static const unsigned char mac_roman_page01[104] = {
data/netatalk-3.1.12~ds/libatalk/unicode/charsets/mac_roman.h:52:23:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
static const unsigned char mac_roman_page02[32] = {
data/netatalk-3.1.12~ds/libatalk/unicode/charsets/mac_roman.h:58:23:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
static const unsigned char mac_roman_page20[56] = {
data/netatalk-3.1.12~ds/libatalk/unicode/charsets/mac_roman.h:67:23:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
static const unsigned char mac_roman_page21[8] = {
data/netatalk-3.1.12~ds/libatalk/unicode/charsets/mac_roman.h:70:23:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
static const unsigned char mac_roman_page22[104] = {
data/netatalk-3.1.12~ds/libatalk/unicode/charsets/mac_roman.h:85:23:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
static const unsigned char mac_roman_pagefb[8] = {
data/netatalk-3.1.12~ds/libatalk/unicode/charsets/mac_turkish.h:70:23:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
static const unsigned char mac_turkish_page00[96] = {
data/netatalk-3.1.12~ds/libatalk/unicode/charsets/mac_turkish.h:84:23:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
static const unsigned char mac_turkish_page01[128] = {
data/netatalk-3.1.12~ds/libatalk/unicode/charsets/mac_turkish.h:102:23:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
static const unsigned char mac_turkish_page02[32] = {
data/netatalk-3.1.12~ds/libatalk/unicode/charsets/mac_turkish.h:108:23:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
static const unsigned char mac_turkish_page20[40] = {
data/netatalk-3.1.12~ds/libatalk/unicode/charsets/mac_turkish.h:115:23:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
static const unsigned char mac_turkish_page21[8] = {
data/netatalk-3.1.12~ds/libatalk/unicode/charsets/mac_turkish.h:118:23:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
static const unsigned char mac_turkish_page22[104] = {
data/netatalk-3.1.12~ds/libatalk/unicode/iconv.c:217:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char cvtbuf[2048];
data/netatalk-3.1.12~ds/libatalk/unicode/util_unistr.c:354:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(dest, src, len * sizeof(ucs2_t));
data/netatalk-3.1.12~ds/libatalk/unicode/util_unistr.c:408:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(&dest[start], src, len*sizeof(ucs2_t));
data/netatalk-3.1.12~ds/libatalk/unicode/util_unistr.c:425:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(&dest[start], src, len*sizeof(ucs2_t));
data/netatalk-3.1.12~ds/libatalk/util/bprint.c:22:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char	xout[ BPXLEN ], aout[ BPALEN ];
data/netatalk-3.1.12~ds/libatalk/util/cnid.c:82:23:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
    EC_NEG1_LOG(cwd = open(".", O_RDONLY));
data/netatalk-3.1.12~ds/libatalk/util/ftw.c:49:46:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
#define mempcpy(D, S, N) ((void *) ((char *) memcpy (D, S, N) + (N)))
data/netatalk-3.1.12~ds/libatalk/util/ftw.c:699:17:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
        cwdfd = open (".", O_RDONLY);
data/netatalk-3.1.12~ds/libatalk/util/logger.c:126:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char buf[256];
data/netatalk-3.1.12~ds/libatalk/util/logger.c:261:36:  [2] (tmpfile) mkstemp:
  Potential for temporary file vulnerability in some circumstances. Some
  older Unix-like systems create temp files with permission to write by all
  by default, so be sure to set the umask to override this. Also, some older
  Unix systems might fail to use O_EXCL when opening the file, so make sure
  that O_EXCL is used by the library (CWE-377).
        type_configs[logtype].fd = mkstemp(tmp);
data/netatalk-3.1.12~ds/libatalk/util/logger.c:266:36:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
        type_configs[logtype].fd = open(filename,
data/netatalk-3.1.12~ds/libatalk/util/netatalk_conf.c:80:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char buf[1024], uuid[UUID_PRINTABLE_STRING_LENGTH], *p;
data/netatalk-3.1.12~ds/libatalk/util/netatalk_conf.c:85:15:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
    if ((fp = fopen(obj->options.uuidconf, "r")) != NULL) {  /* read open? */
data/netatalk-3.1.12~ds/libatalk/util/netatalk_conf.c:139:22:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
    } else if ((fp = fopen(obj->options.uuidconf, "a+")) == NULL) { /* not found */
data/netatalk-3.1.12~ds/libatalk/util/netatalk_conf.c:180:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char buf[EABUFSZ];
data/netatalk-3.1.12~ds/libatalk/util/netatalk_conf.c:448:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char buf[MAXPATHLEN + 1], *p, *b;
data/netatalk-3.1.12~ds/libatalk/util/netatalk_conf.c:478:24:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
            mask_int = atoi(mask_char); /* apply_ip_mask does range checking on it */
data/netatalk-3.1.12~ds/libatalk/util/netatalk_conf.c:601:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char        tmpname[AFPVOL_U8MNAMELEN+1];
data/netatalk-3.1.12~ds/libatalk/util/netatalk_conf.c:602:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char        path[MAXPATHLEN + 1];
data/netatalk-3.1.12~ds/libatalk/util/netatalk_conf.c:604:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char        suffix[6]; /* max is #FFFF */
data/netatalk-3.1.12~ds/libatalk/util/netatalk_conf.c:944:9:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
        strcpy(tmpname, "???");
data/netatalk-3.1.12~ds/libatalk/util/netatalk_conf.c:970:9:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
        strcpy(tmpname, "???");
data/netatalk-3.1.12~ds/libatalk/util/netatalk_conf.c:1132:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char        volname[AFPVOL_U8MNAMELEN + 1];
data/netatalk-3.1.12~ds/libatalk/util/netatalk_conf.c:1133:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char        path[MAXPATHLEN + 1], tmp[MAXPATHLEN + 1];
data/netatalk-3.1.12~ds/libatalk/util/netatalk_conf.c:1179:17:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
                char errbuf[1024];
data/netatalk-3.1.12~ds/libatalk/util/netatalk_conf.c:1358:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char        ext[256];
data/netatalk-3.1.12~ds/libatalk/util/netatalk_conf.c:1359:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char        buf[256];
data/netatalk-3.1.12~ds/libatalk/util/netatalk_conf.c:1360:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char        type[5], creator[5];
data/netatalk-3.1.12~ds/libatalk/util/netatalk_conf.c:1364:26:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
    EC_NULL_LOGSTR( fp = fopen(file, "r"), "Couldn't open extension maping file %s", file);
data/netatalk-3.1.12~ds/libatalk/util/netatalk_conf.c:1539:10:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
    fd = open(obj->options.configfile, O_RDONLY);
data/netatalk-3.1.12~ds/libatalk/util/netatalk_conf.c:1715:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char        volname[AFPVOL_U8MNAMELEN + 1];
data/netatalk-3.1.12~ds/libatalk/util/netatalk_conf.c:1716:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char        abspath[MAXPATHLEN + 1];
data/netatalk-3.1.12~ds/libatalk/util/netatalk_conf.c:1717:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char        volpath[MAXPATHLEN + 1], *realvolpath = NULL;
data/netatalk-3.1.12~ds/libatalk/util/netatalk_conf.c:1718:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char        tmpbuf[MAXPATHLEN + 1];
data/netatalk-3.1.12~ds/libatalk/util/netatalk_conf.c:1781:9:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
        char errbuf[1024];
data/netatalk-3.1.12~ds/libatalk/util/netatalk_conf.c:1898:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char val[MAXVAL];
data/netatalk-3.1.12~ds/libatalk/util/server_ipc.c:62:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy (&pid, ipc->msg, sizeof(pid_t));
data/netatalk-3.1.12~ds/libatalk/util/server_ipc.c:95:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy (clientid, p, idlen);
data/netatalk-3.1.12~ds/libatalk/util/server_ipc.c:120:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(&child->afpch_state, ipc->msg, sizeof(uint16_t));
data/netatalk-3.1.12~ds/libatalk/util/server_ipc.c:175:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char      buf[IPC_MAXMSGSIZE], *p;
data/netatalk-3.1.12~ds/libatalk/util/server_ipc.c:267:4:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
   char block[IPC_MAXMSGSIZE], *p;
data/netatalk-3.1.12~ds/libatalk/util/server_ipc.c:278:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
   memcpy(p, &command, sizeof(command));
data/netatalk-3.1.12~ds/libatalk/util/server_ipc.c:282:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
   memcpy(p, &pid, sizeof(pid_t));
data/netatalk-3.1.12~ds/libatalk/util/server_ipc.c:291:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
   memcpy(p, &uid, sizeof(uid_t));
data/netatalk-3.1.12~ds/libatalk/util/server_ipc.c:294:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
   memcpy(p, &len, 4);
data/netatalk-3.1.12~ds/libatalk/util/server_ipc.c:297:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
   memcpy(p, msg, len);
data/netatalk-3.1.12~ds/libatalk/util/server_lock.c:37:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
  char buf[10];
data/netatalk-3.1.12~ds/libatalk/util/server_lock.c:45:13:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
  if ((pf = fopen(pidfile, "r"))) {
data/netatalk-3.1.12~ds/libatalk/util/server_lock.c:46:52:  [2] (integer) atol:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
    if (fgets(buf, sizeof(buf), pf) && !kill(pid = atol(buf), 0)) {
data/netatalk-3.1.12~ds/libatalk/util/server_lock.c:55:13:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
  if ((pf = fopen(pidfile, "w")) == NULL) {
data/netatalk-3.1.12~ds/libatalk/util/server_lock.c:75:11:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
      i = open( "/dev/null", O_RDWR );
data/netatalk-3.1.12~ds/libatalk/util/server_lock.c:76:11:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
      i = open( "/dev/null", O_RDWR );
data/netatalk-3.1.12~ds/libatalk/util/server_lock.c:77:11:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
      i = open( "/dev/null", O_RDWR );
data/netatalk-3.1.12~ds/libatalk/util/server_lock.c:80:17:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
      if (( i = open( "/dev/tty", O_RDWR )) >= 0 ) {
data/netatalk-3.1.12~ds/libatalk/util/server_lock.c:109:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char buf[10];
data/netatalk-3.1.12~ds/libatalk/util/server_lock.c:114:15:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
    if ((pf = fopen(pidfile, "r"))) {
data/netatalk-3.1.12~ds/libatalk/util/server_lock.c:115:56:  [2] (integer) atol:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
        if (fgets(buf, sizeof(buf), pf) && !kill(pid = atol(buf), 0)) {
data/netatalk-3.1.12~ds/libatalk/util/server_lock.c:141:15:  [2] (misc) fopen:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
    if ((pf = fopen(pidfile, "w")) == NULL) {
data/netatalk-3.1.12~ds/libatalk/util/socket.c:294:12:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    static char ip4[INET_ADDRSTRLEN];
data/netatalk-3.1.12~ds/libatalk/util/socket.c:295:12:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    static char ip6[INET6_ADDRSTRLEN];
data/netatalk-3.1.12~ds/libatalk/util/socket.c:631:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char buf[CMSG_SPACE(sizeof(int))];
data/netatalk-3.1.12~ds/libatalk/util/socket.c:632:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char dbuf[80];
data/netatalk-3.1.12~ds/libatalk/util/unix.c:143:9:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
        open("/dev/null",O_RDWR);
data/netatalk-3.1.12~ds/libatalk/util/unix.c:181:12:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    static char cwd[MAXPATHLEN + 1];
data/netatalk-3.1.12~ds/libatalk/util/unix.c:197:12:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    static char wd[MAXPATHLEN + 1];
data/netatalk-3.1.12~ds/libatalk/util/unix.c:325:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char buf[MAXPATHLEN+1];
data/netatalk-3.1.12~ds/libatalk/util/unix.c:326:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char cwd[MAXPATHLEN+1];
data/netatalk-3.1.12~ds/libatalk/util/unix.c:402:15:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
    if ((fd = open("/dev/urandom", O_RDONLY)) != -1) {
data/netatalk-3.1.12~ds/libatalk/util/unix.c:473:12:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    static char buf[MAXPATHLEN+1];
data/netatalk-3.1.12~ds/libatalk/util/unix.c:544:12:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    static char groupsstr[GROUPSTR_BUFSIZE];
data/netatalk-3.1.12~ds/libatalk/vfs/acl.c:64:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy(&new_aces[new_aces_count], &old_aces[i], sizeof(ace_t));
data/netatalk-3.1.12~ds/libatalk/vfs/ea_ad.c:77:12:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    static char  upath[ MAXPATHLEN + 2]; /* for convert_charset dest_len parameter +2 */
data/netatalk-3.1.12~ds/libatalk/vfs/ea_ad.c:133:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(&uint32, buf, sizeof(uint32_t));
data/netatalk-3.1.12~ds/libatalk/vfs/ea_ad.c:140:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(&uint16, buf, sizeof(uint16_t));
data/netatalk-3.1.12~ds/libatalk/vfs/ea_ad.c:149:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(&uint16, buf, sizeof(uint16_t));
data/netatalk-3.1.12~ds/libatalk/vfs/ea_ad.c:167:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(&uint32, buf, 4); /* EA size */
data/netatalk-3.1.12~ds/libatalk/vfs/ea_ad.c:247:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(ea->ea_data + EA_COUNT_OFF, &uint16, 2);
data/netatalk-3.1.12~ds/libatalk/vfs/ea_ad.c:260:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(buf, &uint32, 4);
data/netatalk-3.1.12~ds/libatalk/vfs/ea_ad.c:401:15:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
    if ((fd = open(uname, O_RDWR | O_CREAT | O_EXCL, 0666 & ~ea->vol->v_umask)) == -1) {
data/netatalk-3.1.12~ds/libatalk/vfs/ea_ad.c:416:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(ptr, &uint32, sizeof(uint32_t));
data/netatalk-3.1.12~ds/libatalk/vfs/ea_ad.c:420:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(ptr, &uint16, sizeof(uint16_t));
data/netatalk-3.1.12~ds/libatalk/vfs/ea_ad.c:481:15:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
    if ((fd = open(eaname, O_RDWR | O_CREAT | O_EXCL, 0666 & ~ea->vol->v_umask)) == -1) {
data/netatalk-3.1.12~ds/libatalk/vfs/ea_ad.c:615:12:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    static char pathbuf[MAXPATHLEN + 1];
data/netatalk-3.1.12~ds/libatalk/vfs/ea_ad.c:749:22:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
    if ((ea->ea_fd = open(eaname, (ea->ea_flags & EA_RDWR) ? O_RDWR : O_RDONLY)) == -1) {
data/netatalk-3.1.12~ds/libatalk/vfs/ea_ad.c:845:23:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
        if (((cwdfd = open(".", O_RDONLY)) == -1) || (fchdir(dirfd) != 0)) {
data/netatalk-3.1.12~ds/libatalk/vfs/ea_ad.c:1026:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy(rbuf, &uint32, 4);
data/netatalk-3.1.12~ds/libatalk/vfs/ea_ad.c:1092:23:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
            if ((fd = open(eafile, O_RDONLY)) == -1) {
data/netatalk-3.1.12~ds/libatalk/vfs/ea_ad.c:1107:13:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
            memcpy(rbuf, &uint32, 4);
data/netatalk-3.1.12~ds/libatalk/vfs/ea_ad.c:1347:21:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
        if (((cwd = open(".", O_RDONLY)) == -1) || (fchdir(dirfd) != 0)) {
data/netatalk-3.1.12~ds/libatalk/vfs/ea_ad.c:1386:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char   srceapath[ MAXPATHLEN + 1];
data/netatalk-3.1.12~ds/libatalk/vfs/ea_ad.c:1502:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char   srceapath[ MAXPATHLEN + 1];
data/netatalk-3.1.12~ds/libatalk/vfs/ea_sys.c:129:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(rbuf, &attrsize, 4);
data/netatalk-3.1.12~ds/libatalk/vfs/ea_sys.c:250:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(rbuf, &attrsize, 4);
data/netatalk-3.1.12~ds/libatalk/vfs/ea_sys.c:392:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(eabuf, ibuf, attrsize);
data/netatalk-3.1.12~ds/libatalk/vfs/ea_sys.c:538:20:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
        if ((cwd = open(".", O_RDONLY)) == -1) {
data/netatalk-3.1.12~ds/libatalk/vfs/extattr.c:81:8:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
static char attr_name[256 +5] = "user.";
data/netatalk-3.1.12~ds/libatalk/vfs/extattr.c:373:8:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
static char attr_buffer[ATTR_MAX_VALUELEN];
data/netatalk-3.1.12~ds/libatalk/vfs/extattr.c:950:20:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
    if ((filedes = open(path, O_RDONLY | (oflag & O_NOFOLLOW), mode)) == -1) {
data/netatalk-3.1.12~ds/libatalk/vfs/unix.c:140:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char   filebuf[NETATALK_DIOSZ_STACK];
data/netatalk-3.1.12~ds/libatalk/vfs/unix.c:180:11:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
    sfd = open(src, O_RDONLY);
data/netatalk-3.1.12~ds/libatalk/vfs/unix.c:188:16:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
    if ((dfd = open(dst, O_WRONLY | O_CREAT | O_TRUNC, mode)) < 0) {
data/netatalk-3.1.12~ds/libatalk/vfs/unix.c:234:24:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
    EC_NEG1_LOG( sfd = open(src, O_RDONLY) );
data/netatalk-3.1.12~ds/libatalk/vfs/unix.c:236:24:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
    EC_NEG1_LOG( dfd = open(dst, O_WRONLY, mode) );
data/netatalk-3.1.12~ds/libatalk/vfs/unix.c:350:21:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
        if (((cwd = open(".", O_RDONLY)) == -1) || (fchdir(dirfd) != 0)) {
data/netatalk-3.1.12~ds/libatalk/vfs/vfs.c:58:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char            buf[ MAXPATHLEN + 1];
data/netatalk-3.1.12~ds/libatalk/vfs/vfs.c:263:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char  adsrc[ MAXPATHLEN + 1];
data/netatalk-3.1.12~ds/libatalk/vfs/vfs.c:370:12:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    static char buf[ MAXPATHLEN + 1];
data/netatalk-3.1.12~ds/libatalk/vfs/vfs.c:390:12:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    static char buf[ MAXPATHLEN + 1];
data/netatalk-3.1.12~ds/libatalk/vfs/vfs.c:617:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char  adsrc[ MAXPATHLEN + 1];
data/netatalk-3.1.12~ds/libevent/arc4random.c:79:11:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	unsigned char s[256];
data/netatalk-3.1.12~ds/libevent/arc4random.c:151:11:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	unsigned char buf[ADD_ENTROPY];
data/netatalk-3.1.12~ds/libevent/arc4random.c:181:11:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	unsigned char buf[ADD_ENTROPY];
data/netatalk-3.1.12~ds/libevent/arc4random.c:218:11:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	unsigned char buf[ADD_ENTROPY];
data/netatalk-3.1.12~ds/libevent/arc4random.c:259:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char buf[128];
data/netatalk-3.1.12~ds/libevent/arc4random.c:260:11:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	unsigned char entropy[64];
data/netatalk-3.1.12~ds/libevent/arc4random.c:302:11:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	unsigned char buf[ADD_ENTROPY];
data/netatalk-3.1.12~ds/libevent/buffer.c:780:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(tmp->buffer, chain->buffer + chain->misalign,
data/netatalk-3.1.12~ds/libevent/buffer.c:1061:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(data, chain->buffer + chain->misalign, chain->off);
data/netatalk-3.1.12~ds/libevent/buffer.c:1071:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(data, chain->buffer + chain->misalign, datlen);
data/netatalk-3.1.12~ds/libevent/buffer.c:1248:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(buffer, chain->buffer + chain->misalign, chain->off);
data/netatalk-3.1.12~ds/libevent/buffer.c:1260:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(buffer, chain->buffer + chain->misalign, size);
data/netatalk-3.1.12~ds/libevent/buffer.c:1440:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(&it2, &it, sizeof(it));
data/netatalk-3.1.12~ds/libevent/buffer.c:1563:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy(chain->buffer + chain->misalign + chain->off,
data/netatalk-3.1.12~ds/libevent/buffer.c:1574:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy(chain->buffer + chain->off, data, datlen);
data/netatalk-3.1.12~ds/libevent/buffer.c:1596:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(chain->buffer + chain->misalign + chain->off,
data/netatalk-3.1.12~ds/libevent/buffer.c:1606:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(tmp->buffer, data, datlen);
data/netatalk-3.1.12~ds/libevent/buffer.c:1649:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy(chain->buffer + chain->misalign - datlen,
data/netatalk-3.1.12~ds/libevent/buffer.c:1658:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy(chain->buffer,
data/netatalk-3.1.12~ds/libevent/buffer.c:1681:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(tmp->buffer + tmp->misalign, data, datlen);
data/netatalk-3.1.12~ds/libevent/buffer.c:1803:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(tmp->buffer, chain->buffer + chain->misalign,
data/netatalk-3.1.12~ds/libevent/buffer.c:2642:27:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
#define	va_copy(dst, src)	memcpy(&(dst), &(src), sizeof(va_list))
data/netatalk-3.1.12~ds/libevent/bufferevent_ratelim.c:168:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(&r->tick_timeout, tick_len, sizeof(struct timeval));
data/netatalk-3.1.12~ds/libevent/bufferevent_sock.c:465:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char portbuf[10];
data/netatalk-3.1.12~ds/libevent/evdns.c:214:4:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
			char name[HOST_NAME_MAX];
data/netatalk-3.1.12~ds/libevent/evdns.c:369:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char hostname[1];
data/netatalk-3.1.12~ds/libevent/evdns.c:457:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char buf[512];
data/netatalk-3.1.12~ds/libevent/evdns.c:527:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(&timeout, &ns->base->global_nameserver_probe_initial_timeout,
data/netatalk-3.1.12~ds/libevent/evdns.c:545:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char addrbuf[128];
data/netatalk-3.1.12~ds/libevent/evdns.c:561:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char addrbuf[128];
data/netatalk-3.1.12~ds/libevent/evdns.c:619:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char addrbuf[128];
data/netatalk-3.1.12~ds/libevent/evdns.c:829:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(&d->reply, reply, sizeof(struct reply));
data/netatalk-3.1.12~ds/libevent/evdns.c:848:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char addrbuf[128];
data/netatalk-3.1.12~ds/libevent/evdns.c:879:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
				char msg[64];
data/netatalk-3.1.12~ds/libevent/evdns.c:940:53:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
#define GET32(x) do { if (j + 4 > length) goto err; memcpy(&_t32, packet + j, 4); j += 4; x = ntohl(_t32); } while (0)
data/netatalk-3.1.12~ds/libevent/evdns.c:941:53:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
#define GET16(x) do { if (j + 2 > length) goto err; memcpy(&_t, packet + j, 2); j += 2; x = ntohs(_t); } while (0)
data/netatalk-3.1.12~ds/libevent/evdns.c:976:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(cp, packet + j, label_len);
data/netatalk-3.1.12~ds/libevent/evdns.c:997:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char tmp_name[256], cmp_name[256]; /* used by the macros */
data/netatalk-3.1.12~ds/libevent/evdns.c:1099:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy(&reply.data.a.addresses[reply.data.a.addrcount],
data/netatalk-3.1.12~ds/libevent/evdns.c:1116:4:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
			char cname[HOST_NAME_MAX];
data/netatalk-3.1.12~ds/libevent/evdns.c:1137:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy(&reply.data.aaaa.addresses[reply.data.aaaa.addrcount],
data/netatalk-3.1.12~ds/libevent/evdns.c:1198:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char tmp_name[256]; /* used by the macros */
data/netatalk-3.1.12~ds/libevent/evdns.c:1225:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(&server_req->addr, addr, addrlen);
data/netatalk-3.1.12~ds/libevent/evdns.c:1248:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(q->name, tmp_name, namelen+1);
data/netatalk-3.1.12~ds/libevent/evdns.c:1353:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char addrbuf[128];
data/netatalk-3.1.12~ds/libevent/evdns.c:1460:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char addrbuf[128];
data/netatalk-3.1.12~ds/libevent/evdns.c:1589:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(buf + j, &_t, 2);				\
data/netatalk-3.1.12~ds/libevent/evdns.c:1596:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(buf + j, &_t32, 4);				\
data/netatalk-3.1.12~ds/libevent/evdns.c:1616:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy(buf + j, start, label_len);
data/netatalk-3.1.12~ds/libevent/evdns.c:1627:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy(buf + j, start, label_len);
data/netatalk-3.1.12~ds/libevent/evdns.c:1796:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy(item->data, data, datalen);
data/netatalk-3.1.12~ds/libevent/evdns.c:1831:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char buf[32];
data/netatalk-3.1.12~ds/libevent/evdns.c:1871:11:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	unsigned char buf[1500];
data/netatalk-3.1.12~ds/libevent/evdns.c:1934:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
				memcpy(buf+len_idx, &_t, 2);
data/netatalk-3.1.12~ds/libevent/evdns.c:1939:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
				memcpy(buf+j, item->data, item->datalen);
data/netatalk-3.1.12~ds/libevent/evdns.c:1959:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(req->response, buf, req->response_len);
data/netatalk-3.1.12~ds/libevent/evdns.c:2129:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(sa, &(req->addr), req->addrlen);
data/netatalk-3.1.12~ds/libevent/evdns.c:2272:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char addrbuf[128];
data/netatalk-3.1.12~ds/libevent/evdns.c:2437:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char addrbuf[128];
data/netatalk-3.1.12~ds/libevent/evdns.c:2475:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(&ns->address, address, addrlen);
data/netatalk-3.1.12~ds/libevent/evdns.c:2678:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char namebuf[256];
data/netatalk-3.1.12~ds/libevent/evdns.c:2697:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char randbits[(sizeof(namebuf)+7)/8];
data/netatalk-3.1.12~ds/libevent/evdns.c:2868:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char buf[32];
data/netatalk-3.1.12~ds/libevent/evdns.c:2903:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char buf[73];
data/netatalk-3.1.12~ds/libevent/evdns.c:2918:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(cp, "ip6.arpa", strlen("ip6.arpa")+1);
data/netatalk-3.1.12~ds/libevent/evdns.c:3026:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy( ((u8 *) sdomain) + sizeof(struct search_domain), domain, domain_len);
data/netatalk-3.1.12~ds/libevent/evdns.c:3078:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char hostname[HOST_NAME_MAX + 1], *domainname;
data/netatalk-3.1.12~ds/libevent/evdns.c:3103:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy(newname, base_name, base_len);
data/netatalk-3.1.12~ds/libevent/evdns.c:3105:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy(newname + base_len + need_to_append_dot, postfix, postfix_len);
data/netatalk-3.1.12~ds/libevent/evdns.c:3371:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(&base->global_timeout, &tv, sizeof(struct timeval));
data/netatalk-3.1.12~ds/libevent/evdns.c:3378:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(&base->global_getaddrinfo_allow_skew, &tv,
data/netatalk-3.1.12~ds/libevent/evdns.c:3422:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(&base->global_nameserver_probe_initial_timeout, &tv,
data/netatalk-3.1.12~ds/libevent/evdns.c:3502:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char path[MAX_PATH+1];
data/netatalk-3.1.12~ds/libevent/evdns.c:3595:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(buf, addr, ips-addr);
data/netatalk-3.1.12~ds/libevent/evdns.c:4035:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(&he->addr, &ss, socklen);
data/netatalk-3.1.12~ds/libevent/evdns.c:4036:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(he->hostname, hostname, namelen+1);
data/netatalk-3.1.12~ds/libevent/evdns.c:4060:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char tmp[64];
data/netatalk-3.1.12~ds/libevent/evdns.c:4377:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(addrp, ((char*)addresses)+i*addrlen, addrlen);
data/netatalk-3.1.12~ds/libevent/event.c:475:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char environment[64];
data/netatalk-3.1.12~ds/libevent/event.c:1188:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(&tv, duration, sizeof(struct timeval));
data/netatalk-3.1.12~ds/libevent/event.c:1955:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char buf[1];
data/netatalk-3.1.12~ds/libevent/event.c:2645:4:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
			memcpy(p, str, ln+1);
data/netatalk-3.1.12~ds/libevent/event.c:2705:11:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	unsigned char buf[1024];
data/netatalk-3.1.12~ds/libevent/evrpc.c:219:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(constructed_uri, EVRPC_URI_PREFIX, strlen(EVRPC_URI_PREFIX));
data/netatalk-3.1.12~ds/libevent/evrpc.c:220:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(constructed_uri + strlen(EVRPC_URI_PREFIX), uri, strlen(uri));
data/netatalk-3.1.12~ds/libevent/evrpc.c:1049:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(meta->data, data, data_size);
data/netatalk-3.1.12~ds/libevent/evthread.c:101:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(target, cbs, sizeof(_evthread_lock_fns));
data/netatalk-3.1.12~ds/libevent/evthread.c:139:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(target, cbs, sizeof(_evthread_cond_fns));
data/netatalk-3.1.12~ds/libevent/evthread.c:279:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(&_original_lock_fns, &_evthread_lock_fns,
data/netatalk-3.1.12~ds/libevent/evthread.c:281:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(&_evthread_lock_fns, &cbs,
data/netatalk-3.1.12~ds/libevent/evthread.c:284:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(&_original_cond_fns, &_evthread_cond_fns,
data/netatalk-3.1.12~ds/libevent/evutil.c:83:9:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
#define open _open
data/netatalk-3.1.12~ds/libevent/evutil.c:100:8:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
		fd = open(pathname, flags, (mode_t)mode);
data/netatalk-3.1.12~ds/libevent/evutil.c:102:8:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
		fd = open(pathname, flags);
data/netatalk-3.1.12~ds/libevent/evutil.c:560:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char buf[128];
data/netatalk-3.1.12~ds/libevent/evutil.c:678:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(res->ai_addr, sa, socklen);
data/netatalk-3.1.12~ds/libevent/evutil.c:1022:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(addrp, ent->h_addr_list[i], ent->h_length);
data/netatalk-3.1.12~ds/libevent/evutil.c:1172:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(ai_new, ai, sizeof(*ai_new));
data/netatalk-3.1.12~ds/libevent/evutil.c:1304:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char buf[2048];
data/netatalk-3.1.12~ds/libevent/evutil.c:1310:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char buf[2048];
data/netatalk-3.1.12~ds/libevent/evutil.c:1607:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char buf[64], *cp;
data/netatalk-3.1.12~ds/libevent/evutil.c:1797:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char buf[128];
data/netatalk-3.1.12~ds/libevent/evutil.c:1818:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(buf, ip_as_string+1, len);
data/netatalk-3.1.12~ds/libevent/evutil.c:1835:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(buf, ip_as_string, cp-ip_as_string);
data/netatalk-3.1.12~ds/libevent/evutil.c:1848:10:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
		port = atoi(port_part);
data/netatalk-3.1.12~ds/libevent/evutil.c:1871:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(out, &sin6, sizeof(sin6));
data/netatalk-3.1.12~ds/libevent/evutil.c:1890:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(out, &sin, sizeof(sin));
data/netatalk-3.1.12~ds/libevent/evutil.c:1899:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char b[128];
data/netatalk-3.1.12~ds/libevent/evutil.c:1983:23:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
static const unsigned char EVUTIL_TOUPPER_TABLE[256] = {
data/netatalk-3.1.12~ds/libevent/evutil.c:2001:23:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
static const unsigned char EVUTIL_TOLOWER_TABLE[256] = {
data/netatalk-3.1.12~ds/libevent/evutil.c:2114:15:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	static const char LOOPBACK_S6[16] =
data/netatalk-3.1.12~ds/libevent/evutil.c:2167:3:  [2] (buffer) TCHAR:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
  TCHAR path[MAX_PATH];
data/netatalk-3.1.12~ds/libevent/evutil_rand.c:70:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(b, &u, n_bytes);
data/netatalk-3.1.12~ds/libevent/evutil_rand.c:81:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(b, &u, n);
data/netatalk-3.1.12~ds/libevent/http.c:124:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char tmpserv[16];
data/netatalk-3.1.12~ds/libevent/http.c:287:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(p, replaced, len);
data/netatalk-3.1.12~ds/libevent/http.c:461:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char size[22];
data/netatalk-3.1.12~ds/libevent/http.c:498:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char date[50];
data/netatalk-3.1.12~ds/libevent/http.c:525:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char len[22];
data/netatalk-3.1.12~ds/libevent/http.c:1501:23:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
	req->response_code = atoi(number);
data/netatalk-3.1.12~ds/libevent/http.c:1775:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(newval + old_len, line, line_len + 1);
data/netatalk-3.1.12~ds/libevent/http.c:2632:14:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
static const char uri_chars[256] = {
data/netatalk-3.1.12~ds/libevent/http.c:2726:4:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
			char tmp[3];
data/netatalk-3.1.12~ds/libevent/http.c:3613:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
				memcpy(req->host_cache, host, len);
data/netatalk-3.1.12~ds/libevent/http.c:3684:31:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
		http->base, NULL, hostname, atoi(portname));
data/netatalk-3.1.12~ds/libevent/http.c:3776:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char ntop[NI_MAXHOST];
data/netatalk-3.1.12~ds/libevent/http.c:3777:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char strport[NI_MAXSERV];
data/netatalk-3.1.12~ds/libevent/http.c:3854:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char strport[NI_MAXSERV];
data/netatalk-3.1.12~ds/libevent/http.c:4032:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char buf[64];
data/netatalk-3.1.12~ds/libevent/http.c:4037:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(buf, s+1, n_chars);
data/netatalk-3.1.12~ds/libevent/http.c:4100:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(uri->host, cp, eos-cp);
data/netatalk-3.1.12~ds/libevent/include/event2/dns_struct.h:72:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char name[1];
data/netatalk-3.1.12~ds/libevent/listener.c:450:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char addrbuf[1];
data/netatalk-3.1.12~ds/libevent/log.c:172:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char buf[1024];
data/netatalk-3.1.12~ds/libevent/poll.c:147:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(pop->event_set_copy, pop->event_set,
data/netatalk-3.1.12~ds/libevent/poll.c:308:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(&pop->event_set[i], &pop->event_set[pop->nfds],
data/netatalk-3.1.12~ds/libevent/sample/dns-example.c:43:9:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	static char buf[32];
data/netatalk-3.1.12~ds/libevent/sample/dns-example.c:82:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char buf[128];
data/netatalk-3.1.12~ds/libevent/sample/event-test.c:34:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char buf[255];
data/netatalk-3.1.12~ds/libevent/sample/event-test.c:112:11:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
	socket = open(fifo, O_RDWR | O_NONBLOCK, 0);
data/netatalk-3.1.12~ds/libevent/sample/event-test.c:114:11:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
	socket = open(fifo, O_RDONLY | O_NONBLOCK, 0);
data/netatalk-3.1.12~ds/libevent/sample/http-server.c:53:9:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
#define open _open
data/netatalk-3.1.12~ds/libevent/sample/http-server.c:58:1:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
char uri_root[512];
data/netatalk-3.1.12~ds/libevent/sample/http-server.c:134:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char cbuf[128];
data/netatalk-3.1.12~ds/libevent/sample/http-server.c:226:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(pattern, whole_path, dirlen);
data/netatalk-3.1.12~ds/libevent/sample/http-server.c:277:13:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
		if ((fd = open(whole_path, O_RDONLY)) < 0) {
data/netatalk-3.1.12~ds/libevent/sample/http-server.c:369:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char addrbuf[128];
data/netatalk-3.1.12~ds/libevent/sample/le-proxy.c:232:11:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
		int p = atoi(argv[i]);
data/netatalk-3.1.12~ds/libevent/select.c:152:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(sop->event_readset_out, sop->event_readset_in,
data/netatalk-3.1.12~ds/libevent/select.c:154:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(sop->event_writeset_out, sop->event_writeset_in,
data/netatalk-3.1.12~ds/libevent/signal.c:132:9:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	static char signals[1024];
data/netatalk-3.1.12~ds/libevent/test/bench.c:145:16:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
			num_pipes = atoi(optarg);
data/netatalk-3.1.12~ds/libevent/test/bench.c:148:17:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
			num_active = atoi(optarg);
data/netatalk-3.1.12~ds/libevent/test/bench.c:151:17:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
			num_writes = atoi(optarg);
data/netatalk-3.1.12~ds/libevent/test/bench_cascade.c:147:16:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
			num_pipes = atoi(optarg);
data/netatalk-3.1.12~ds/libevent/test/regress.c:80:8:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
static char wbuf[4096];
data/netatalk-3.1.12~ds/libevent/test/regress.c:81:8:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
static char rbuf[4096];
data/netatalk-3.1.12~ds/libevent/test/regress.c:111:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char buf[256];
data/netatalk-3.1.12~ds/libevent/test/regress.c:130:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char buf[256];
data/netatalk-3.1.12~ds/libevent/test/regress.c:262:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char buf[128];
data/netatalk-3.1.12~ds/libevent/test/regress.c:280:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char buf[128];
data/netatalk-3.1.12~ds/libevent/test/regress.c:415:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char buf[1024];
data/netatalk-3.1.12~ds/libevent/test/regress.c:1439:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char buf[256];
data/netatalk-3.1.12~ds/libevent/test/regress.c:1627:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char buf[256];
data/netatalk-3.1.12~ds/libevent/test/regress.c:1744:4:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	((char *)EVBUFFER_DATA(tmp))[1] = '\xff';
data/netatalk-3.1.12~ds/libevent/test/regress.c:1905:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char b[256];
data/netatalk-3.1.12~ds/libevent/test/regress.c:1917:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char b[256];
data/netatalk-3.1.12~ds/libevent/test/regress.c:1945:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char varbuf[128];
data/netatalk-3.1.12~ds/libevent/test/regress.c:2203:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(mem, "{[<guardedram>]}", 16);
data/netatalk-3.1.12~ds/libevent/test/regress.gen.c:882:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
  memcpy(msg->some_bytes_data, value, len);
data/netatalk-3.1.12~ds/libevent/test/regress.gen.c:890:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
  memcpy(msg->fixed_bytes_data, value, 24);
data/netatalk-3.1.12~ds/libevent/test/regress_buffer.c:171:9:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	static char buffer[512], *tmp;
data/netatalk-3.1.12~ds/libevent/test/regress_buffer.c:297:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char buf[2];
data/netatalk-3.1.12~ds/libevent/test/regress_buffer.c:496:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char data[4096];
data/netatalk-3.1.12~ds/libevent/test/regress_buffer.c:992:4:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
			char format[32];
data/netatalk-3.1.12~ds/libevent/test/regress_buffer.c:1032:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char test3[EVBUFFER_INITIAL_LENGTH];
data/netatalk-3.1.12~ds/libevent/test/regress_buffer.c:1295:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char tmp[16];
data/netatalk-3.1.12~ds/libevent/test/regress_buffer.c:1370:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char tmp[128];
data/netatalk-3.1.12~ds/libevent/test/regress_buffer.c:1546:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char charbuf[128];
data/netatalk-3.1.12~ds/libevent/test/regress_bufferevent.c:126:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char buffer[8333];
data/netatalk-3.1.12~ds/libevent/test/regress_bufferevent.c:231:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char buffer[65000];
data/netatalk-3.1.12~ds/libevent/test/regress_bufferevent.c:336:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char buffer[8333];
data/netatalk-3.1.12~ds/libevent/test/regress_bufferevent.c:448:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char buf[512];
data/netatalk-3.1.12~ds/libevent/test/regress_bufferevent.c:675:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char buf[1024];
data/netatalk-3.1.12~ds/libevent/test/regress_dns.c:104:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char buf[INET6_ADDRSTRLEN+1];
data/netatalk-3.1.12~ds/libevent/test/regress_dns.c:250:4:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
			char addr6[17] = "abcdefghijklmnop";
data/netatalk-3.1.12~ds/libevent/test/regress_dns.c:325:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char buf[INET6_ADDRSTRLEN+1];
data/netatalk-3.1.12~ds/libevent/test/regress_dns.c:419:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(resolve_addr6.s6_addr,
data/netatalk-3.1.12~ds/libevent/test/regress_dns.c:455:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char addrs_buf[256];
data/netatalk-3.1.12~ds/libevent/test/regress_dns.c:483:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(res->addrs_buf, addresses, len);
data/netatalk-3.1.12~ds/libevent/test/regress_dns.c:515:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char buf[64];
data/netatalk-3.1.12~ds/libevent/test/regress_dns.c:601:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char buf[64];
data/netatalk-3.1.12~ds/libevent/test/regress_dns.c:676:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char buf[64];
data/netatalk-3.1.12~ds/libevent/test/regress_dns.c:765:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char buf1[64], buf2[64];
data/netatalk-3.1.12~ds/libevent/test/regress_dns.c:829:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char buf[64];
data/netatalk-3.1.12~ds/libevent/test/regress_dns.c:1056:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char buf[128];
data/netatalk-3.1.12~ds/libevent/test/regress_dns.c:1208:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char buf[128];
data/netatalk-3.1.12~ds/libevent/test/regress_http.c:134:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char strport[NI_MAXSERV];
data/netatalk-3.1.12~ds/libevent/test/regress_http.c:708:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char buf[4096];
data/netatalk-3.1.12~ds/libevent/test/regress_http.c:932:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char address[64];
data/netatalk-3.1.12~ds/libevent/test/regress_http.c:2000:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char url_tmp[4096];
data/netatalk-3.1.12~ds/libevent/test/regress_http.c:3362:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char long_str[8192];
data/netatalk-3.1.12~ds/libevent/test/regress_iocp.c:243:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char junk[1024];
data/netatalk-3.1.12~ds/libevent/test/regress_iocp.c:310:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char buf[128];
data/netatalk-3.1.12~ds/libevent/test/regress_main.c:115:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char tmpfilename[32];
data/netatalk-3.1.12~ds/libevent/test/regress_main.c:117:2:  [2] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant string.
	strcpy(tmpfilename, "/tmp/eventtmp.XXXXXX");
data/netatalk-3.1.12~ds/libevent/test/regress_main.c:118:7:  [2] (tmpfile) mkstemp:
  Potential for temporary file vulnerability in some circumstances. Some
  older Unix-like systems create temp files with permission to write by all
  by default, so be sure to set the umask to override this. Also, some older
  Unix systems might fail to use O_EXCL when opening the file, so make sure
  that O_EXCL is used by the library (CWE-377).
	fd = mkstemp(tmpfilename);
data/netatalk-3.1.12~ds/libevent/test/regress_main.c:131:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char tmpfilepath[MAX_PATH];
data/netatalk-3.1.12~ds/libevent/test/regress_main.c:132:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char tmpfilename[MAX_PATH];
data/netatalk-3.1.12~ds/libevent/test/regress_ssl.c:173:6:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
	n = atoi(line);
data/netatalk-3.1.12~ds/libevent/test/regress_testutils.c:159:13:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
		int err = atoi(tab->ans);
data/netatalk-3.1.12~ds/libevent/test/regress_testutils.c:163:13:  [2] (integer) atoi:
  Unless checked, the resulting number can exceed the expected range
  (CWE-190). If source untrusted, check both minimum and maximum, even if the
  input had no minus sign (large numbers can roll over into negative number;
  consider saving to an unsigned value if that is intended).
		int err = atoi(tab->ans);
data/netatalk-3.1.12~ds/libevent/test/regress_thread.c:334:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(&alerted[5].delay, &tv_timeout, sizeof(tv_timeout));
data/netatalk-3.1.12~ds/libevent/test/regress_thread.c:335:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(&alerted[6].delay, &tv_timeout, sizeof(tv_timeout));
data/netatalk-3.1.12~ds/libevent/test/regress_util.c:114:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char written[128];
data/netatalk-3.1.12~ds/libevent/test/regress_util.c:161:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char written[128];
data/netatalk-3.1.12~ds/libevent/test/regress_util.c:288:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char cbuf[128];
data/netatalk-3.1.12~ds/libevent/test/regress_util.c:381:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char buf[16];
data/netatalk-3.1.12~ds/libevent/test/regress_util.c:515:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char buf[128];
data/netatalk-3.1.12~ds/libevent/test/regress_util.c:605:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char buf[8];
data/netatalk-3.1.12~ds/libevent/test/regress_util.c:774:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char buf[128];
data/netatalk-3.1.12~ds/libevent/test/regress_util.c:826:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char buf1[32];
data/netatalk-3.1.12~ds/libevent/test/regress_util.c:827:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char buf2[32];
data/netatalk-3.1.12~ds/libevent/test/regress_util.c:882:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char buf[128];
data/netatalk-3.1.12~ds/libevent/test/regress_zlib.c:277:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char buffer[8333];
data/netatalk-3.1.12~ds/libevent/test/test-eof.c:62:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char buf[256];
data/netatalk-3.1.12~ds/libevent/test/test-ratelim.c:91:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char buf[1024];
data/netatalk-3.1.12~ds/libevent/test/tinytest.c:70:8:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
static char commandname[MAX_PATH+1];
data/netatalk-3.1.12~ds/libevent/test/tinytest.c:117:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char buffer[LONGEST_TEST_NAME+256];
data/netatalk-3.1.12~ds/libevent/test/tinytest.c:167:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char b[1];
data/netatalk-3.1.12~ds/libevent/test/tinytest.c:182:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char b[1];
data/netatalk-3.1.12~ds/libevent/test/tinytest.c:255:2:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
	char fullname[LONGEST_TEST_NAME];
data/netatalk-3.1.12~ds/libevent/util-internal.h:224:3:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
		char ss_padding[128];
data/netatalk-3.1.12~ds/libevent/win32select.c:258:2:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
	memcpy(out->fd_array, in->fd_array, in->fd_count * (sizeof(SOCKET)));
data/netatalk-3.1.12~ds/test/afpd/afpfunc_helpers.c:46:8:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
static char rbuf[rbufsize];
data/netatalk-3.1.12~ds/test/afpd/afpfunc_helpers.c:53:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy((p), (val), (size));    \
data/netatalk-3.1.12~ds/test/afpd/afpfunc_helpers.c:60:9:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
        memcpy(p, &type, sizeof(type));           \
data/netatalk-3.1.12~ds/test/afpd/afpfunc_helpers.c:94:12:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    static char buf[256];
data/netatalk-3.1.12~ds/test/afpd/afpfunc_helpers.c:110:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char buf[bufsize];
data/netatalk-3.1.12~ds/test/afpd/afpfunc_helpers.c:129:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char buf[bufsize];
data/netatalk-3.1.12~ds/test/afpd/afpfunc_helpers.c:145:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char buf[bufsize];
data/netatalk-3.1.12~ds/test/afpd/afpfunc_helpers.c:160:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char buf[bufsize];
data/netatalk-3.1.12~ds/test/afpd/afpfunc_helpers.c:175:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char buf[bufsize];
data/netatalk-3.1.12~ds/test/afpd/afpfunc_helpers.c:205:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char buf[bufsize];
data/netatalk-3.1.12~ds/test/afpd/afpfunc_helpers.c:214:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(p, &bitmap, 2);
data/netatalk-3.1.12~ds/test/afpd/afpfunc_helpers.c:220:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(p, name, len);
data/netatalk-3.1.12~ds/test/afpd/afpfunc_helpers.c:232:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(&bitmap, p, 2);
data/netatalk-3.1.12~ds/test/afpd/afpfunc_helpers.c:238:5:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
    memcpy(&vid, p, 2);
data/netatalk-3.1.12~ds/test/afpd/subtests.c:47:5:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
    char dirname[20];
data/netatalk-3.1.12~ds/test/afpd/subtests.c:49:9:  [2] (buffer) sprintf:
  Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
  vsnprintf. Risk is low because the source has a constant maximum length.
        sprintf(dirname, "dir%04u", start);
data/netatalk-3.1.12~ds/bin/ad/ad_cp.c:253:28:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    to.p_end = to.p_path + strlen(to.p_path);
data/netatalk-3.1.12~ds/bin/ad/ad_cp.c:323:13:  [1] (access) umask:
  Ensure that umask is given most restrictive possible setting (e.g., 066 or
  077) (CWE-732).
    mask = ~umask(0777);
data/netatalk-3.1.12~ds/bin/ad/ad_cp.c:324:5:  [1] (access) umask:
  Ensure that umask is given most restrictive possible setting (e.g., 066 or
  077) (CWE-732).
    umask(~mask);
data/netatalk-3.1.12~ds/bin/ad/ad_cp.c:410:24:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
                base = strlen(path);
data/netatalk-3.1.12~ds/bin/ad/ad_cp.c:414:16:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
        nlen = strlen(path) - base;
data/netatalk-3.1.12~ds/bin/ad/ad_cp.c:424:15:  [1] (buffer) strncat:
  Easily used incorrectly (e.g., incorrectly computing the correct maximum
  size to add) [MS-banned] (CWE-120). Consider strcat_s, strlcat, snprintf,
  or automatically resizing strings.
        (void)strncat(target_mid, p, nlen);
data/netatalk-3.1.12~ds/bin/ad/ad_cp.c:492:28:  [1] (access) umask:
  Ensure that umask is given most restrictive possible setting (e.g., 066 or
  077) (CWE-732).
            mode_t omask = umask(0);
data/netatalk-3.1.12~ds/bin/ad/ad_cp.c:538:13:  [1] (access) umask:
  Ensure that umask is given most restrictive possible setting (e.g., 066 or
  077) (CWE-732).
            umask(omask);
data/netatalk-3.1.12~ds/bin/ad/ad_cp.c:567:28:  [1] (access) umask:
  Ensure that umask is given most restrictive possible setting (e.g., 066 or
  077) (CWE-732).
            mode_t omask = umask(0);
data/netatalk-3.1.12~ds/bin/ad/ad_cp.c:605:13:  [1] (access) umask:
  Ensure that umask is given most restrictive possible setting (e.g., 066 or
  077) (CWE-732).
            umask(omask);
data/netatalk-3.1.12~ds/bin/ad/ad_cp.c:662:28:  [1] (buffer) getchar:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
            checkch = ch = getchar();
data/netatalk-3.1.12~ds/bin/ad/ad_cp.c:664:22:  [1] (buffer) getchar:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
                ch = getchar();
data/netatalk-3.1.12~ds/bin/ad/ad_cp.c:745:26:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
        while ((rcount = read(from_fd, buf, bufsize)) > 0) {
data/netatalk-3.1.12~ds/bin/ad/ad_find.c:123:25:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
                        strlen(argv[optind]),
data/netatalk-3.1.12~ds/bin/ad/ad_find.c:134:28:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
                           strlen(namebuf),
data/netatalk-3.1.12~ds/bin/ad/ad_ls.c:485:9:  [1] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused). Risk is low because the
  source is a constant character.
        strcat(cwdpath, "/");
data/netatalk-3.1.12~ds/bin/ad/ad_mv.c:188:9:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    if (strlen(argv[argc - 1]) > sizeof(path) - 1)
data/netatalk-3.1.12~ds/bin/ad/ad_mv.c:192:15:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    baselen = strlen(path);
data/netatalk-3.1.12~ds/bin/ad/ad_mv.c:204:21:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
        p = *argv + strlen(*argv);
data/netatalk-3.1.12~ds/bin/ad/ad_mv.c:210:31:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
        if ((baselen + (len = strlen(p))) >= PATH_MAX) {
data/netatalk-3.1.12~ds/bin/ad/ad_mv.c:258:26:  [1] (buffer) getchar:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
            first = ch = getchar();
data/netatalk-3.1.12~ds/bin/ad/ad_mv.c:260:22:  [1] (buffer) getchar:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
                ch = getchar();
data/netatalk-3.1.12~ds/bin/ad/ad_mv.c:345:70:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
        if (cnid_update(dvolume.vol->v_cdb, cnid, &sb, newdid, name, strlen(name)) != 0) {
data/netatalk-3.1.12~ds/bin/ad/ad_util.c:166:14:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    outlen = strlen(upath);
data/netatalk-3.1.12~ds/bin/ad/ad_util.c:225:38:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
                              bname, strlen(bname),
data/netatalk-3.1.12~ds/bin/afppasswd/afppasswd.c:81:5:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
    read(keyfd, key, sizeof(key));
data/netatalk-3.1.12~ds/bin/afppasswd/afppasswd.c:125:7:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
  if (strlen(path) < sizeof(buf) - 5) {
data/netatalk-3.1.12~ds/bin/afppasswd/afppasswd.c:135:11:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
      if (strlen(name) == (p - buf) && 
data/netatalk-3.1.12~ds/bin/afppasswd/afppasswd.c:153:17:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    fwrite(buf, strlen(buf), 1, fp);
data/netatalk-3.1.12~ds/bin/afppasswd/afppasswd.c:233:9:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    if (strlen(pwd->pw_name) + FORMAT_LEN > sizeof(buf) - 1)
data/netatalk-3.1.12~ds/bin/afppasswd/afppasswd.c:237:11:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    len = strlen(buf);
data/netatalk-3.1.12~ds/bin/misc/netacnv.c:95:48:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
                                       string, strlen(string),
data/netatalk-3.1.12~ds/etc/afpd/afs.c:114:16:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    *rbuflen = strlen( vi.out ) + 1;
data/netatalk-3.1.12~ds/etc/afpd/afs.c:249:10:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    if ( strlen( name ) < 2 || strlen( name ) > 18 ) {
data/netatalk-3.1.12~ds/etc/afpd/afs.c:249:32:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    if ( strlen( name ) < 2 || strlen( name ) > 18 ) {
data/netatalk-3.1.12~ds/etc/afpd/appl.c:94:19:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
    while (( cc = read( sfd, buf, sizeof(appltag) + sizeof( u_short ))) > 0 ) {
data/netatalk-3.1.12~ds/etc/afpd/appl.c:99:20:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
        if (( cc = read( sa.sdt_fd, p, len )) < len ) {
data/netatalk-3.1.12~ds/etc/afpd/appl.c:132:10:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    p -= strlen( path );
data/netatalk-3.1.12~ds/etc/afpd/appl.c:133:22:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    memcpy( p, path, strlen( path )); 
data/netatalk-3.1.12~ds/etc/afpd/appl.c:411:19:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
    while (( cc = read( sa.sdt_fd, buf, sizeof( appltag )
data/netatalk-3.1.12~ds/etc/afpd/appl.c:417:20:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
        if (( cc = read( sa.sdt_fd, p, len )) < len ) {
data/netatalk-3.1.12~ds/etc/afpd/auth.c:84:15:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
        len = strlen( afp_versions[ i ].av_name );
data/netatalk-3.1.12~ds/etc/afpd/auth.c:112:19:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
            len = strlen( uams->uam_name);
data/netatalk-3.1.12~ds/etc/afpd/auth.c:283:11:  [1] (access) umask:
  Ensure that umask is given most restrictive possible setting (e.g., 066 or
  077) (CWE-732).
    (void)umask(obj->options.umask);
data/netatalk-3.1.12~ds/etc/afpd/auth.c:283:30:  [1] (access) umask:
  Ensure that umask is given most restrictive possible setting (e.g., 066 or
  077) (CWE-732).
    (void)umask(obj->options.umask);
data/netatalk-3.1.12~ds/etc/afpd/auth.c:864:41:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
        len = MIN(sizeof(username) - 1, strlen(obj->username));
data/netatalk-3.1.12~ds/etc/afpd/auth.c:1008:44:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    if (!path || !*path || !list || (len = strlen(path)) > sizeof(name) - 2)
data/netatalk-3.1.12~ds/etc/afpd/auth.c:1019:9:  [1] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused). Risk is low because the
  source is a constant character.
        strcat(name, "/");
data/netatalk-3.1.12~ds/etc/afpd/catsearch.c:275:77:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
        	id = get_id(vol, adp, &path->st, path->d_dir->d_did, path->u_name, strlen(path->u_name));
data/netatalk-3.1.12~ds/etc/afpd/catsearch.c:308:93:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		if ( (size_t)(-1) == (len = convert_charset( CH_UTF8_MAC, CH_UCS2, CH_UTF8, path->m_name, strlen(path->m_name), convbuf, 512, &flags))) {
data/netatalk-3.1.12~ds/etc/afpd/catsearch.c:606:25:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
                unlen = strlen(path.u_name);
data/netatalk-3.1.12~ds/etc/afpd/catsearch.c:735:29:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
                            strlen(uname),
data/netatalk-3.1.12~ds/etc/afpd/catsearch.c:749:33:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
                                strlen(uname),
data/netatalk-3.1.12~ds/etc/afpd/desktop.c:75:55:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
                strcmp( deskp->d_name, ".." ) == 0 || strlen( deskp->d_name ) > 2 ) {
data/netatalk-3.1.12~ds/etc/afpd/desktop.c:79:9:  [1] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused). Risk is low because the
  source is a constant character.
        strcat( modbuf, "/" );
data/netatalk-3.1.12~ds/etc/afpd/desktop.c:169:17:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
                strlen( deskp->d_name ) > 2 ) {
data/netatalk-3.1.12~ds/etc/afpd/desktop.c:173:9:  [1] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused). Risk is low because the
  source is a constant character.
        strcat( modbuf, "/" );
data/netatalk-3.1.12~ds/etc/afpd/desktop.c:393:19:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
    while (( cc = read( si.sdt_fd, irh, sizeof( irh ))) > 0 ) {
data/netatalk-3.1.12~ds/etc/afpd/desktop.c:546:14:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
        if ( read( si.sdt_fd, ih, sizeof( ih )) != sizeof( ih )) {
data/netatalk-3.1.12~ds/etc/afpd/desktop.c:618:19:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
    while (( rc = read( si.sdt_fd, ih, sizeof( ih ))) > 0 ) {
data/netatalk-3.1.12~ds/etc/afpd/desktop.c:682:22:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
            buflen = read(si.sdt_fd, rbuf, *rbuflen);
data/netatalk-3.1.12~ds/etc/afpd/desktop.c:704:14:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
        if ( read( si.sdt_fd, rbuf, rc ) < rc ) {
data/netatalk-3.1.12~ds/etc/afpd/desktop.c:762:9:  [1] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant character.
        strcpy(upath, ".");
data/netatalk-3.1.12~ds/etc/afpd/desktop.c:777:14:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    inplen = strlen(m);
data/netatalk-3.1.12~ds/etc/afpd/desktop.c:802:14:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    outlen = strlen(upath);
data/netatalk-3.1.12~ds/etc/afpd/desktop.c:828:24:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    m = mangle(vol, u, strlen(u), upath, id, (utf8)?3:1);
data/netatalk-3.1.12~ds/etc/afpd/dircache.c:380:23:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    AFP_ASSERT(len == strlen(name));
data/netatalk-3.1.12~ds/etc/afpd/directory.c:147:16:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    if ((len = strlen(dir)) +2 > sizeof(path))
data/netatalk-3.1.12~ds/etc/afpd/directory.c:155:5:  [1] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused). Risk is low because the
  source is a constant character.
    strcat(path, "/");
data/netatalk-3.1.12~ds/etc/afpd/directory.c:163:13:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
        if (strlen(de->d_name) > remain) {
data/netatalk-3.1.12~ds/etc/afpd/directory.c:200:18:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    if (((slen = strlen(src)) > sizeof(spath) - 2) ||
data/netatalk-3.1.12~ds/etc/afpd/directory.c:201:18:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
        ((dlen = strlen(dst)) > sizeof(dpath) - 2) ||
data/netatalk-3.1.12~ds/etc/afpd/directory.c:213:5:  [1] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused). Risk is low because the
  source is a constant character.
    strcat(spath, "/");
data/netatalk-3.1.12~ds/etc/afpd/directory.c:218:5:  [1] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused). Risk is low because the
  source is a constant character.
    strcat(dpath, "/");
data/netatalk-3.1.12~ds/etc/afpd/directory.c:228:13:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
        if (strlen(de->d_name) > srem) {
data/netatalk-3.1.12~ds/etc/afpd/directory.c:235:17:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
            if (strlen(de->d_name) > drem) {
data/netatalk-3.1.12~ds/etc/afpd/directory.c:324:47:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
                if (mtoUTF8(vol, ret->m_name, strlen(ret->m_name), temp, MAXPATHLEN) == (size_t)-1) {
data/netatalk-3.1.12~ds/etc/afpd/directory.c:838:65:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    if ((cdir = dircache_search_by_name(vol, dir, path->u_name, strlen(path->u_name))) != NULL) {
data/netatalk-3.1.12~ds/etc/afpd/directory.c:1253:28:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
            int unamelen = strlen(ret.u_name);
data/netatalk-3.1.12~ds/etc/afpd/directory.c:2202:45:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    if ((dir = dir_add(vol, curdir, s_path, strlen(s_path->u_name))) == NULL) {
data/netatalk-3.1.12~ds/etc/afpd/directory.c:2449:15:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
        len = strlen( name );
data/netatalk-3.1.12~ds/etc/afpd/enumerate.c:59:11:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    len = strlen(de->d_name);
data/netatalk-3.1.12~ds/etc/afpd/enumerate.c:121:9:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    if (strlen(m_name) > vol->max_filename)
data/netatalk-3.1.12~ds/etc/afpd/enumerate.c:369:92:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
                s_path.id = cnid_lookup(vol->v_cdb, &s_path.st, curdir->d_did, sd.sd_last, strlen(sd.sd_last));
data/netatalk-3.1.12~ds/etc/afpd/enumerate.c:373:119:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
                    int cnid_up_ret = cnid_update(vol->v_cdb, s_path.id, &s_path.st, curdir->d_did, (char *)convname, strlen(convname));
data/netatalk-3.1.12~ds/etc/afpd/enumerate.c:393:23:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
            int len = strlen(s_path.u_name);
data/netatalk-3.1.12~ds/etc/afpd/extattrs.c:181:27:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
            attrbuflen += strlen(ea_finderinfo) + 1;
data/netatalk-3.1.12~ds/etc/afpd/extattrs.c:191:27:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
            attrbuflen += strlen(ea_resourcefork) + 1;
data/netatalk-3.1.12~ds/etc/afpd/fce_api.c:245:18:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
        uint16 = strlen(user);
data/netatalk-3.1.12~ds/etc/afpd/fce_api.c:250:25:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
        memcpy(p, user, strlen(user));
data/netatalk-3.1.12~ds/etc/afpd/fce_api.c:251:14:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
        p += strlen(user);
data/netatalk-3.1.12~ds/etc/afpd/fce_api.c:252:20:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
        datalen += strlen(user);
data/netatalk-3.1.12~ds/etc/afpd/fce_api.c:256:20:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    if ((pathlen = strlen(path)) >= MAXPATHLEN)
data/netatalk-3.1.12~ds/etc/afpd/fce_api.c:269:24:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
        if ((pathlen = strlen(oldpath)) >= MAXPATHLEN)
data/netatalk-3.1.12~ds/etc/afpd/fce_api.c:461:5:  [1] (buffer) strncpy:
  Easily used incorrectly; doesn't always \0-terminate or check for invalid
  pointers [MS-banned] (CWE-120).
    strncpy(last_close_event.path, path, MAXPATHLEN);
data/netatalk-3.1.12~ds/etc/afpd/fce_api.c:581:2:  [1] (buffer) strncpy:
  Easily used incorrectly; doesn't always \0-terminate or check for invalid
  pointers [MS-banned] (CWE-120).
	strncpy(target_ip, target, sizeof(target_ip) -1);
data/netatalk-3.1.12~ds/etc/afpd/fce_util.c:135:39:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
			if (!strncmp(fh->fce_h_path, path, strlen(fh->fce_h_path)))
data/netatalk-3.1.12~ds/etc/afpd/fce_util.c:143:39:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
			if (!strncmp(fh->fce_h_path, path, strlen(fh->fce_h_path)))
data/netatalk-3.1.12~ds/etc/afpd/fce_util.c:157:5:  [1] (buffer) strncpy:
  Easily used incorrectly; doesn't always \0-terminate or check for invalid
  pointers [MS-banned] (CWE-120).
    strncpy(fce_history_list[oldest_entry_idx].fce_h_path, path, MAXPATHLEN);
data/netatalk-3.1.12~ds/etc/afpd/file.c:131:12:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    aint = strlen( name );
data/netatalk-3.1.12~ds/etc/afpd/file.c:145:24:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
                aint = strlen(m);
data/netatalk-3.1.12~ds/etc/afpd/file.c:320:23:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
            int len = strlen(upath);
data/netatalk-3.1.12~ds/etc/afpd/file.c:759:56:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    if ((id = get_id(vol, &ad, &st, dir->d_did, upath, strlen(upath))) == CNID_INVALID) {
data/netatalk-3.1.12~ds/etc/afpd/file.c:910:23:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
                len = read(fp, symbuf, MAXPATHLEN);
data/netatalk-3.1.12~ds/etc/afpd/file.c:1007:69:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
        if ((id = get_id(vol, adp, &path->st, curdir->d_did, upath, strlen(upath))) == CNID_INVALID) {
data/netatalk-3.1.12~ds/etc/afpd/file.c:1222:17:  [1] (buffer) strncpy:
  Easily used incorrectly; doesn't always \0-terminate or check for invalid
  pointers [MS-banned] (CWE-120).
                strncpy( newname, ibuf, plen );
data/netatalk-3.1.12~ds/etc/afpd/file.c:1225:17:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
            if (strlen(newname) != plen) {
data/netatalk-3.1.12~ds/etc/afpd/file.c:1245:13:  [1] (buffer) strncpy:
  Easily used incorrectly; doesn't always \0-terminate or check for invalid
  pointers [MS-banned] (CWE-120).
            strncpy( newname, ibuf, plen );
data/netatalk-3.1.12~ds/etc/afpd/file.c:1247:17:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
            if (strlen(newname) != plen) {
data/netatalk-3.1.12~ds/etc/afpd/file.c:1471:67:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
        if ((id = get_id(d_vol, &add, &stdest, d_dir->d_did, dst, strlen(dst))) == CNID_INVALID) {
data/netatalk-3.1.12~ds/etc/afpd/file.c:1620:60:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
            id = cnid_get(vol->v_cdb, curdir->d_did, file, strlen(file));
data/netatalk-3.1.12~ds/etc/afpd/file.c:1700:56:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    id = cnid_lookup(vol->v_cdb, st, did, upath, len = strlen(upath));
data/netatalk-3.1.12~ds/etc/afpd/file.c:1736:60:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    aint = cnid_add(vol->v_cdb, &path.st, did, de->d_name, strlen(de->d_name), 0); /* ignore errors */
data/netatalk-3.1.12~ds/etc/afpd/file.c:2100:70:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    sid = cnid_lookup(vol->v_cdb, &srcst, sdir->d_did, supath,slen = strlen(supath));
data/netatalk-3.1.12~ds/etc/afpd/file.c:2145:73:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    did = cnid_lookup(vol->v_cdb, &destst, curdir->d_did, upath, dlen = strlen(upath));
data/netatalk-3.1.12~ds/etc/afpd/filedir.c:250:61:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
        id = cnid_get(vol->v_cdb, sdir->d_did, oldunixname, strlen(oldunixname));
data/netatalk-3.1.12~ds/etc/afpd/filedir.c:391:63:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
        cnid_update(vol->v_cdb, id, st, curdir->d_did, upath, strlen(upath));
data/netatalk-3.1.12~ds/etc/afpd/filedir.c:619:71:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
            if ((deldir = dircache_search_by_name(vol, curdir, upath, strlen(upath)))) {
data/netatalk-3.1.12~ds/etc/afpd/filedir.c:625:70:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
                delcnid = cnid_get(vol->v_cdb, curdir->d_did, upath, strlen(upath));
data/netatalk-3.1.12~ds/etc/afpd/filedir.c:662:72:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
            if ((cachedfile = dircache_search_by_name(vol, dir, upath, strlen(upath)))) {
data/netatalk-3.1.12~ds/etc/afpd/filedir.c:697:5:  [1] (buffer) strncpy:
  Easily used incorrectly; doesn't always \0-terminate or check for invalid
  pointers [MS-banned] (CWE-120).
    strncpy(pathbuf, cfrombstr(path), blength(path) + 1);
data/netatalk-3.1.12~ds/etc/afpd/fork.c:400:72:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
            if ((id = get_id(vol, ofork->of_ad, st, dir->d_did, upath, strlen(upath))) == CNID_INVALID) {
data/netatalk-3.1.12~ds/etc/afpd/hash.c:863:11:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    len = strlen((char *)data);
data/netatalk-3.1.12~ds/etc/afpd/hash.c:939:14:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    int sz = strlen(str) + 1;
data/netatalk-3.1.12~ds/etc/afpd/main.c:208:29:  [1] (access) umask:
  Ensure that umask is given most restrictive possible setting (e.g., 066 or
  077) (CWE-732).
    obj.options.save_mask = umask(obj.options.umask);
data/netatalk-3.1.12~ds/etc/afpd/main.c:208:47:  [1] (access) umask:
  Ensure that umask is given most restrictive possible setting (e.g., 066 or
  077) (CWE-732).
    obj.options.save_mask = umask(obj.options.umask);
data/netatalk-3.1.12~ds/etc/afpd/mangle.c:35:28:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
				 vol->v_maccharset, p, strlen(p),
data/netatalk-3.1.12~ds/etc/afpd/mangle.c:76:18:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
				      uname, strlen(uname), buffer, MAXPATHLEN, &flags)) ) {
data/netatalk-3.1.12~ds/etc/afpd/mangle.c:80:20:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    mfilenamelen = strlen(mfilename);
data/netatalk-3.1.12~ds/etc/afpd/mangle.c:120:35:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	                          uname, strlen(uname), buffer, MAXPATHLEN, &flags)) ) {
data/netatalk-3.1.12~ds/etc/afpd/mangle.c:164:35:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    if ((*t != 0 && *t != '.') || strlen(t) > MAX_EXT_LENGTH || id < 17) {
data/netatalk-3.1.12~ds/etc/afpd/mangle.c:272:32:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
				 vol->v_maccharset, uname, strlen(uname),
data/netatalk-3.1.12~ds/etc/afpd/mangle.c:283:2:  [1] (buffer) strncat:
  Easily used incorrectly (e.g., incorrectly computing the correct maximum
  size to add) [MS-banned] (CWE-120). Consider strcat_s, strlcat, snprintf,
  or automatically resizing strings.
	strncat(m, ext, ext_len);
data/netatalk-3.1.12~ds/etc/afpd/messages.c:80:21:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
        while ((( c=fgetc(message)) != EOF) && (i < (maxmsgsize - 1))) {
data/netatalk-3.1.12~ds/etc/afpd/messages.c:161:14:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    msglen = strlen(message);
data/netatalk-3.1.12~ds/etc/afpd/ofork.c:287:5:  [1] (buffer) strncpy:
  Easily used incorrectly; doesn't always \0-terminate or check for invalid
  pointers [MS-banned] (CWE-120).
    strncpy(pathname + 3, cfrombstr(path->d_dir->d_u_name), len + 1);
data/netatalk-3.1.12~ds/etc/afpd/quota.c:628:48:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
            if (( vol->v_gvs = (char *)malloc( strlen( p ) + 1 )) == NULL ) {
data/netatalk-3.1.12~ds/etc/afpd/quota.c:650:44:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
        if (( vol->v_gvs = (char *)malloc( strlen( p ) + 1 )) == NULL ) {
data/netatalk-3.1.12~ds/etc/afpd/spotlight.c:870:37:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
                          sl_query, strlen(sl_query), slq_host, MAXPATHLEN,
data/netatalk-3.1.12~ds/etc/afpd/spotlight.c:1417:15:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
        len = strlen(vol->v_path) + 1;
data/netatalk-3.1.12~ds/etc/afpd/spotlight.c:1418:9:  [1] (buffer) strncpy:
  Easily used incorrectly; doesn't always \0-terminate or check for invalid
  pointers [MS-banned] (CWE-120).
        strncpy(rbuf + 8, vol->v_path, len);
data/netatalk-3.1.12~ds/etc/afpd/spotlight_marshalling.c:331:11:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    len = strlen(s);
data/netatalk-3.1.12~ds/etc/afpd/spotlight_marshalling.c:346:5:  [1] (buffer) strncpy:
  Easily used incorrectly; doesn't always \0-terminate or check for invalid
  pointers [MS-banned] (CWE-120).
    strncpy(buf + offset, s, len);
data/netatalk-3.1.12~ds/etc/afpd/spotlight_marshalling.c:643:44:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
            p = dalloc_strndup(query, tmp, strlen(tmp));
data/netatalk-3.1.12~ds/etc/afpd/status.c:111:19:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
        len = MIN(strlen(Obj), 31);
data/netatalk-3.1.12~ds/etc/afpd/status.c:157:10:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    if ((strlen(machine) + strlen(VERSION)) <= AFPSTATUS_MACHLEN) {
data/netatalk-3.1.12~ds/etc/afpd/status.c:157:28:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    if ((strlen(machine) + strlen(VERSION)) <= AFPSTATUS_MACHLEN) {
data/netatalk-3.1.12~ds/etc/afpd/status.c:160:13:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
        if (strlen(VERSION) > AFPSTATUS_MACHLEN) {
data/netatalk-3.1.12~ds/etc/afpd/status.c:164:54:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
            (void)snprintf(buf + AFPSTATUS_MACHLEN - strlen(VERSION),
data/netatalk-3.1.12~ds/etc/afpd/status.c:165:28:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
                           strlen(VERSION) + 1,
data/netatalk-3.1.12~ds/etc/afpd/status.c:280:22:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
        size_t len = strlen(options->fqdn);
data/netatalk-3.1.12~ds/etc/afpd/status.c:506:11:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    len = strlen(options->signatureopt);
data/netatalk-3.1.12~ds/etc/afpd/status.c:579:24:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
                    if(fgetc(fp) != '\n') fputc('\n', fp); /* last char is \n? */
data/netatalk-3.1.12~ds/etc/afpd/uam.c:124:41:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    if ((uam = auth_uamfind(type, name, strlen(name)))) {
data/netatalk-3.1.12~ds/etc/afpd/uam.c:184:36:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    uam = auth_uamfind(type, name, strlen(name));
data/netatalk-3.1.12~ds/etc/afpd/uam.c:223:23:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
            int len = strlen(pwent->pw_name);              
data/netatalk-3.1.12~ds/etc/afpd/uam.c:225:17:  [1] (buffer) strncpy:
  Easily used incorrectly; doesn't always \0-terminate or check for invalid
  pointers [MS-banned] (CWE-120).
                strncpy(name,pwent->pw_name, MAXUSERLEN);  
data/netatalk-3.1.12~ds/etc/afpd/uam.c:318:15:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
        ret = read(fd, buf, len);
data/netatalk-3.1.12~ds/etc/afpd/uam.c:347:20:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
            *len = strlen(obj->options.guest);
data/netatalk-3.1.12~ds/etc/afpd/uam.c:357:20:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
            *len = strlen(obj->options.passwdfile);
data/netatalk-3.1.12~ds/etc/afpd/uam.c:388:20:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
            *len = strlen(obj->options.hostname);
data/netatalk-3.1.12~ds/etc/afpd/uam.c:415:27:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
            *len = (*buf)?strlen(*buf):0;
data/netatalk-3.1.12~ds/etc/afpd/uam.c:420:27:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
            *len = (*buf)?strlen(*buf):0;
data/netatalk-3.1.12~ds/etc/afpd/uam.c:425:27:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
            *len = (*buf)?strlen(*buf):0;
data/netatalk-3.1.12~ds/etc/afpd/volume.c:180:17:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
            && (strlen(entry->d_name) == (p + strlen("sparsebundle") - entry->d_name))) {
data/netatalk-3.1.12~ds/etc/afpd/volume.c:180:47:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
            && (strlen(entry->d_name) == (p + strlen("sparsebundle") - entry->d_name))) {
data/netatalk-3.1.12~ds/etc/afpd/volume.c:333:46:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
            ad_setentrylen( &ad, ADEID_NAME, strlen( slash ));
data/netatalk-3.1.12~ds/etc/cnid_dbd/cmd_dbd.c:223:9:  [1] (buffer) strncpy:
  Easily used incorrectly; doesn't always \0-terminate or check for invalid
  pointers [MS-banned] (CWE-120).
        strncpy(obj.username, username, MAXUSERLEN);
data/netatalk-3.1.12~ds/etc/cnid_dbd/cmd_dbd_scanvol.c:83:14:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    outlen = strlen(upath);
data/netatalk-3.1.12~ds/etc/cnid_dbd/cmd_dbd_scanvol.c:145:65:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    if ((id = cnid_lookup(vol->v_cdb, sp, did, (char *)oldname, strlen(oldname))) == CNID_INVALID)
data/netatalk-3.1.12~ds/etc/cnid_dbd/cmd_dbd_scanvol.c:150:63:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    if (cnid_update(vol->v_cdb, id, sp, did, (char *)newname, strlen(newname)) < 0)
data/netatalk-3.1.12~ds/etc/cnid_dbd/cmd_dbd_scanvol.c:591:64:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    if ((db_cnid = cnid_add(vol->v_cdb, st, did, (char *)name, strlen(name), ad_cnid)) == CNID_INVALID)
data/netatalk-3.1.12~ds/etc/cnid_dbd/cmd_dbd_scanvol.c:618:9:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    if (strlen(name) < 3)
data/netatalk-3.1.12~ds/etc/cnid_dbd/cmd_dbd_scanvol.c:739:63:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
        if (S_ISREG(st.st_mode) && (strncmp(ep->d_name, "._", strlen("._")) == 0)) {
data/netatalk-3.1.12~ds/etc/cnid_dbd/cmd_dbd_scanvol.c:773:13:  [1] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused). Risk is low because the
  source is a constant character.
            strcat(cwdbuf, "/");
data/netatalk-3.1.12~ds/etc/cnid_dbd/cmd_dbd_scanvol.c:823:5:  [1] (access) umask:
  Ensure that umask is given most restrictive possible setting (e.g., 066 or
  077) (CWE-732).
    umask(0);
data/netatalk-3.1.12~ds/etc/cnid_dbd/db_param.c:41:15:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
        len = strlen(dir);
data/netatalk-3.1.12~ds/etc/cnid_dbd/db_param.c:42:23:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
        if (len + 1 + strlen(fn) > maxlen)
data/netatalk-3.1.12~ds/etc/cnid_dbd/db_param.c:46:13:  [1] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused). Risk is low because the
  source is a constant character.
            strcat(path, "/");
data/netatalk-3.1.12~ds/etc/cnid_dbd/db_param.c:49:13:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
        if (strlen(fn) > maxlen)
data/netatalk-3.1.12~ds/etc/cnid_dbd/db_param.c:112:17:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
            if (strlen(params.usock_file) == 0) {
data/netatalk-3.1.12~ds/etc/cnid_dbd/db_param.c:171:9:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    if (strlen(params.usock_file) == 0) {
data/netatalk-3.1.12~ds/etc/cnid_dbd/main.c:130:19:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
            if ( (strlen(dbpath) + strlen(LOCKFILENAME+1)) > (PATH_MAX - 1) ) {
data/netatalk-3.1.12~ds/etc/cnid_dbd/main.c:130:36:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
            if ( (strlen(dbpath) + strlen(LOCKFILENAME+1)) > (PATH_MAX - 1) ) {
data/netatalk-3.1.12~ds/etc/cnid_dbd/main.c:134:13:  [1] (buffer) strncpy:
  Easily used incorrectly; doesn't always \0-terminate or check for invalid
  pointers [MS-banned] (CWE-120).
            strncpy(lockpath, dbpath, PATH_MAX - 1);
data/netatalk-3.1.12~ds/etc/cnid_dbd/main.c:135:13:  [1] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused). Risk is low because the
  source is a constant character.
            strcat(lockpath, "/");
data/netatalk-3.1.12~ds/etc/cnid_dbd/pack.c:62:11:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    len = strlen((char *)skey->data + CNID_DID_LEN);
data/netatalk-3.1.12~ds/etc/cnid_dbd/pack.c:87:25:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
                        strlen((char *)pdata->data + CNID_NAME_OFS),
data/netatalk-3.1.12~ds/etc/cnid_dbd/pack.c:95:18:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    skey->size = strlen(skey->data);
data/netatalk-3.1.12~ds/etc/cnid_dbd/usockfd.c:48:5:  [1] (buffer) strncpy:
  Easily used incorrectly; doesn't always \0-terminate or check for invalid
  pointers [MS-banned] (CWE-120).
    strncpy(addr.sun_path, usock_fn, sizeof(addr.sun_path) - 1);
data/netatalk-3.1.12~ds/etc/netatalk/afp_mdns.c:52:63:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    if( kDNSServiceErr_NoError != TXTRecordSetValue(rec, key, strlen(str), str) ) {
data/netatalk-3.1.12~ds/etc/netatalk/afp_mdns.c:77:63:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    if( kDNSServiceErr_NoError != TXTRecordSetValue(rec, key, strlen(str), str) ) {
data/netatalk-3.1.12~ds/etc/uams/uams_dhx2_pam.c:707:28:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
        memset(utfpass, 0, strlen(utfpass));
data/netatalk-3.1.12~ds/etc/uams/uams_gss.c:172:21:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    size_t cnblen = strlen(client_name_buffer.value);
data/netatalk-3.1.12~ds/etc/uams/uams_gss.c:493:18:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    size_t len = strlen(principal);
data/netatalk-3.1.12~ds/etc/uams/uams_gss.c:511:5:  [1] (buffer) strncpy:
  Easily used incorrectly; doesn't always \0-terminate or check for invalid
  pointers [MS-banned] (CWE-120).
    strncpy(obj->options.k5principal + 2, principal, len);
data/netatalk-3.1.12~ds/etc/uams/uams_gss.c:541:41:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
                                        strlen(obj->options.k5realm),
data/netatalk-3.1.12~ds/etc/uams/uams_guest.c:118:26:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    append(out, loginok, strlen(loginok));
data/netatalk-3.1.12~ds/etc/uams/uams_pam.c:383:45:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    if (( pwd = uam_getname(NULL, username, strlen(username))) == NULL ) {
data/netatalk-3.1.12~ds/etc/uams/uams_pam.c:438:26:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    append(out, loginok, strlen(loginok));
data/netatalk-3.1.12~ds/etc/uams/uams_passwd.c:301:12:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    ulen = strlen(username);
data/netatalk-3.1.12~ds/etc/uams/uams_passwd.c:351:26:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    append(out, loginok, strlen(loginok));
data/netatalk-3.1.12~ds/etc/uams/uams_randnum.c:83:9:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
    if (read(fd, passwd, len) < 0) {
data/netatalk-3.1.12~ds/etc/uams/uams_randnum.c:149:12:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
      if ( strlen(pwd->pw_name) == (p - buf) &&
data/netatalk-3.1.12~ds/etc/uams/uams_randnum.c:177:7:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
      read(keyfd, key, sizeof(key));
data/netatalk-3.1.12~ds/etc/uams/uams_randnum.c:180:27:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
      for (i = j = 0; i < strlen((char *) key); i += 2, j++)
data/netatalk-3.1.12~ds/etc/uams/uams_randnum.c:247:7:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
  i = strlen(file);
data/netatalk-3.1.12~ds/etc/uams/uams_randnum.c:251:11:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    if ( (strlen(pwd->pw_dir) + i - 1) > MAXPATHLEN)
data/netatalk-3.1.12~ds/etc/uams/uams_randnum.c:255:5:  [1] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused). Risk is low because the
  source is a constant character.
    strcat(path, "/" );
data/netatalk-3.1.12~ds/include/atalk/bstrlib.h:218:37:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    (t).slen = ((t).data) ? ((int) (strlen) ((char *)(t).data)) : 0; \
data/netatalk-3.1.12~ds/include/atalk/globals.h:117:12:  [1] (access) umask:
  Ensure that umask is given most restrictive possible setting (e.g., 066 or
  077) (CWE-732).
    mode_t umask;
data/netatalk-3.1.12~ds/libatalk/acl/cache.c:134:19:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    name = malloc(strlen(inname)+1);
data/netatalk-3.1.12~ds/libatalk/acl/cache.c:286:32:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
                *name = malloc(strlen(entry->name)+1);
data/netatalk-3.1.12~ds/libatalk/acl/cache.c:306:19:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    name = malloc(strlen(inname)+1);
data/netatalk-3.1.12~ds/libatalk/acl/uuid.c:125:16:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    while (i < strlen(uuidmask)) {
data/netatalk-3.1.12~ds/libatalk/adouble/ad_attr.c:168:16:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    if ((len = strlen(path)) > ADEDLEN_NAME)
data/netatalk-3.1.12~ds/libatalk/adouble/ad_flush.c:168:37:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    memcpy(buf, AD_FILLER_NETATALK, strlen(AD_FILLER_NETATALK));
data/netatalk-3.1.12~ds/libatalk/adouble/ad_open.c:536:27:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
    EC_NEG1( header_len = read(fd, buf, AD_DATASZ_OSX) );
data/netatalk-3.1.12~ds/libatalk/adouble/ad_open.c:553:17:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
                strlen(AD_FILLER_NETATALK)) != 0)
data/netatalk-3.1.12~ds/libatalk/adouble/ad_open.c:621:9:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    if (strlen(path) < 3)
data/netatalk-3.1.12~ds/libatalk/adouble/ad_read.c:49:16:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
    if (( cc = read( ad_fd->adf_fd, buf, count )) < 0 ) {
data/netatalk-3.1.12~ds/libatalk/adouble/ad_read.c:72:18:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
            cc = strlen(ad->ad_data_fork.adf_syml);
data/netatalk-3.1.12~ds/libatalk/adouble/ad_recvfile.c:91:20:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
        read_ret = read(fromfd, buffer, toread);
data/netatalk-3.1.12~ds/libatalk/adouble/ad_size.c:23:16:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
        return strlen(ad->ad_data_fork.adf_syml);
data/netatalk-3.1.12~ds/libatalk/adouble/ad_write.c:280:19:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
        if ((cc = read(sfd, filebuf, buflen)) < 0) {
data/netatalk-3.1.12~ds/libatalk/bstring/bstradd.c:83:6:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	j = strlen(str);
data/netatalk-3.1.12~ds/libatalk/bstring/bstrlib.c:189:7:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	j = (strlen) (str);
data/netatalk-3.1.12~ds/libatalk/bstring/bstrlib.c:217:7:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	j = (strlen) (str);
data/netatalk-3.1.12~ds/libatalk/bstring/bstrlib.c:381:45:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	return bcatblk (b, (const void *) s, (int) strlen (s));
data/netatalk-3.1.12~ds/libatalk/bstring/bstrlib.c:516:8:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	len = strlen (str + i);
data/netatalk-3.1.12~ds/libatalk/bstring/bstrlib.c:2783:20:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	if ((n = (int) (2*strlen (fmt))) < START_VSNBUFF) n = START_VSNBUFF;
data/netatalk-3.1.12~ds/libatalk/bstring/bstrlib.c:2795:23:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		buff->slen = (int) (strlen) ((char *) buff->data);
data/netatalk-3.1.12~ds/libatalk/bstring/bstrlib.c:2831:20:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	if ((n = (int) (2*strlen (fmt))) < START_VSNBUFF) n = START_VSNBUFF;
data/netatalk-3.1.12~ds/libatalk/bstring/bstrlib.c:2843:23:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		buff->slen = (int) (strlen) ((char *) buff->data);
data/netatalk-3.1.12~ds/libatalk/bstring/bstrlib.c:2878:20:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	if ((n = (int) (2*strlen (fmt))) < START_VSNBUFF) n = START_VSNBUFF;
data/netatalk-3.1.12~ds/libatalk/bstring/bstrlib.c:2890:23:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		buff->slen = (int) (strlen) ((char *) buff->data);
data/netatalk-3.1.12~ds/libatalk/bstring/bstrlib.c:2938:33:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	if (n >= (l = b->slen + (int) (strlen) ((const char *) b->data + b->slen))) {
data/netatalk-3.1.12~ds/libatalk/cnid/cdb/cnid_cdb_open.c:72:11:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    len = strlen((char *)skey->data + CNID_DID_LEN);
data/netatalk-3.1.12~ds/libatalk/cnid/cdb/cnid_cdb_open.c:157:11:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    len = strlen(path);
data/netatalk-3.1.12~ds/libatalk/cnid/cdb/cnid_cdb_open.c:159:9:  [1] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused). Risk is low because the
  source is a constant character.
        strcat(path, "/");
data/netatalk-3.1.12~ds/libatalk/cnid/cdb/cnid_cdb_open.c:191:16:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    if ((len = strlen(vol->v_path)) > (MAXPATHLEN - DBHOMELEN - DBLEN - 2)) {
data/netatalk-3.1.12~ds/libatalk/cnid/cdb/cnid_cdb_open.c:210:9:  [1] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused). Risk is low because the
  source is a constant character.
        strcat(path, "/");
data/netatalk-3.1.12~ds/libatalk/cnid/dbd/cnid_dbd.c:248:14:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    len[0] = strlen(vol->v_configname) + 1;
data/netatalk-3.1.12~ds/libatalk/cnid/dbd/cnid_dbd.c:249:14:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    len[1] = strlen(vol->v_path) + 1;
data/netatalk-3.1.12~ds/libatalk/cnid/dbd/cnid_dbd.c:250:14:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    len[2] = strlen(vol->v_obj->username);
data/netatalk-3.1.12~ds/libatalk/cnid/mysql/cnid_mysql.c:115:64:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    EC_ZERO_LOG( mysql_stmt_prepare(db->cnid_lookup_stmt, sql, strlen(sql)) );
data/netatalk-3.1.12~ds/libatalk/cnid/mysql/cnid_mysql.c:151:61:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    EC_ZERO_LOG( mysql_stmt_prepare(db->cnid_add_stmt, sql, strlen(sql)) );
data/netatalk-3.1.12~ds/libatalk/cnid/mysql/cnid_mysql.c:191:61:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    EC_ZERO_LOG( mysql_stmt_prepare(db->cnid_put_stmt, sql, strlen(sql)) );
data/netatalk-3.1.12~ds/libatalk/cnid/mysql/cnid_mysql.c:332:9:  [1] (buffer) strncpy:
  Easily used incorrectly; doesn't always \0-terminate or check for invalid
  pointers [MS-banned] (CWE-120).
        strncpy(stmt_param_name, name, sizeof(stmt_param_name));
data/netatalk-3.1.12~ds/libatalk/cnid/mysql/cnid_mysql.c:392:5:  [1] (buffer) strncpy:
  Easily used incorrectly; doesn't always \0-terminate or check for invalid
  pointers [MS-banned] (CWE-120).
    strncpy(stmt_param_name, name, sizeof(stmt_param_name));
data/netatalk-3.1.12~ds/libatalk/cnid/mysql/cnid_mysql.c:545:13:  [1] (buffer) strncpy:
  Easily used incorrectly; doesn't always \0-terminate or check for invalid
  pointers [MS-banned] (CWE-120).
            strncpy(stmt_param_name, name, sizeof(stmt_param_name));
data/netatalk-3.1.12~ds/libatalk/cnid/mysql/cnid_mysql.c:684:5:  [1] (buffer) strncpy:
  Easily used incorrectly; doesn't always \0-terminate or check for invalid
  pointers [MS-banned] (CWE-120).
    strncpy(buffer, row[1], len);
data/netatalk-3.1.12~ds/libatalk/cnid/tdb/cnid_tdb_open.c:76:16:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    if ((len = strlen(vol->v_path)) > (MAXPATHLEN - DBLEN - 1)) {
data/netatalk-3.1.12~ds/libatalk/cnid/tdb/cnid_tdb_open.c:83:9:  [1] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused). Risk is low because the
  source is a constant character.
        strcat(path, "/");
data/netatalk-3.1.12~ds/libatalk/cnid/tdb/cnid_tdb_open.c:98:5:  [1] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused). Risk is low because the
  source is a constant character.
    strcat(path, "/");
data/netatalk-3.1.12~ds/libatalk/compat/strlcpy.c:37:22:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
        size_t len = strlen(s);
data/netatalk-3.1.12~ds/libatalk/compat/strlcpy.c:58:23:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
        size_t len1 = strlen(d);
data/netatalk-3.1.12~ds/libatalk/compat/strlcpy.c:59:23:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
        size_t len2 = strlen(s);
data/netatalk-3.1.12~ds/libatalk/iniparser/dictionary.c:88:16:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    t = malloc(strlen(s)+1) ;
data/netatalk-3.1.12~ds/libatalk/iniparser/dictionary.c:116:8:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	len = strlen(key);
data/netatalk-3.1.12~ds/libatalk/iniparser/iniparser.c:63:16:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    last = l + strlen(l);
data/netatalk-3.1.12~ds/libatalk/iniparser/iniparser.c:207:24:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
        seclen  = (int)strlen(secname);
data/netatalk-3.1.12~ds/libatalk/iniparser/iniparser.c:466:16:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    len = (int)strlen(line);
data/netatalk-3.1.12~ds/libatalk/iniparser/iniparser.c:573:20:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
        len = (int)strlen(line)-1;
data/netatalk-3.1.12~ds/libatalk/unicode/charcnv.c:258:22:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
            srclen = strlen((const char *)src);
data/netatalk-3.1.12~ds/libatalk/unicode/charcnv.c:549:22:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    size_t src_len = strlen(src);
data/netatalk-3.1.12~ds/libatalk/unicode/charcnv.c:565:22:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    size_t src_len = strlen(src);
data/netatalk-3.1.12~ds/libatalk/unicode/charcnv.c:603:22:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    size_t src_len = strlen(src);
data/netatalk-3.1.12~ds/libatalk/unicode/charcnv.c:717:18:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
        srclen = strlen(src) + 1;
data/netatalk-3.1.12~ds/libatalk/util/cnid.c:120:15:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    int len = strlen(volpath);
data/netatalk-3.1.12~ds/libatalk/util/ftw.c:32:24:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
#define NAMLEN(dirent) strlen ((dirent)->d_name)
data/netatalk-3.1.12~ds/libatalk/util/ftw.c:207:17:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    return (a + strlen(a));
data/netatalk-3.1.12~ds/libatalk/util/ftw.c:535:29:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    startp = data->dirbuf + strlen(data->dirbuf);
data/netatalk-3.1.12~ds/libatalk/util/ftw.c:659:32:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    data.dirbufsize = MAX (2 * strlen (dir), PATH_MAX);
data/netatalk-3.1.12~ds/libatalk/util/gettok.c:155:13:  [1] (buffer) strcat:
  Does not check for buffer overflows when concatenating to destination
  [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
  snprintf (warning: strncat is easily misused). Risk is low because the
  source is a constant character.
            strcat( buf, "/" );
data/netatalk-3.1.12~ds/libatalk/util/logger.c:259:34:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    } else if (strcmp(filename + strlen(filename) - 6, "XXXXXX") == 0) {
data/netatalk-3.1.12~ds/libatalk/util/logger.c:394:5:  [1] (buffer) strncpy:
  Easily used incorrectly; doesn't always \0-terminate or check for invalid
  pointers [MS-banned] (CWE-120).
    strncpy(log_config.processname, processname, 15);
data/netatalk-3.1.12~ds/libatalk/util/module.c:31:38:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
   if ((underscore = (char *) malloc(strlen(name) + 2)) == NULL)
data/netatalk-3.1.12~ds/libatalk/util/module.c:33:4:  [1] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant character.
   strcpy(underscore, "_");
data/netatalk-3.1.12~ds/libatalk/util/module.c:60:38:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
   if ((underscore = (char *) malloc(strlen(name) + 2)) == NULL)
data/netatalk-3.1.12~ds/libatalk/util/module.c:63:4:  [1] (buffer) strcpy:
  Does not check for buffer overflows when copying to destination [MS-banned]
  (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
  easily misused). Risk is low because the source is a constant character.
   strcpy(underscore, "_");
data/netatalk-3.1.12~ds/libatalk/util/netatalk_conf.c:112:17:  [1] (buffer) sscanf:
  It's unclear if the %s limit in the format string is small enough
  (CWE-120). Check that the limit is sufficiently small, or use a different
  input function.
            if (sscanf(p, "%36s", uuid) == 1 ) {
data/netatalk-3.1.12~ds/libatalk/util/netatalk_conf.c:151:12:  [1] (buffer) fgetc:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
        if(fgetc(fp) != '\n') fputc('\n', fp); /* last char is \n? */
data/netatalk-3.1.12~ds/libatalk/util/netatalk_conf.c:192:55:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    if ((sys_setxattr(vol->v_path, eaname, eacontent, strlen(eacontent) + 1, 0)) == 0) {
data/netatalk-3.1.12~ds/libatalk/util/netatalk_conf.c:383:36:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
            len = MIN(p == q ? 2 : strlen(q), destlen);
data/netatalk-3.1.12~ds/libatalk/util/netatalk_conf.c:384:13:  [1] (buffer) strncpy:
  Easily used incorrectly; doesn't always \0-terminate or check for invalid
  pointers [MS-banned] (CWE-120).
            strncpy(dest, q, len);
data/netatalk-3.1.12~ds/libatalk/util/netatalk_conf.c:394:13:  [1] (buffer) strncpy:
  Easily used incorrectly; doesn't always \0-terminate or check for invalid
  pointers [MS-banned] (CWE-120).
            strncpy(dest, src, len);
data/netatalk-3.1.12~ds/libatalk/util/netatalk_conf.c:669:36:  [1] (access) umask:
  Ensure that umask is given most restrictive possible setting (e.g., 066 or
  077) (CWE-732).
    volume->v_umask = obj->options.umask;
data/netatalk-3.1.12~ds/libatalk/util/netatalk_conf.c:697:12:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    vlen = strlen(name);
data/netatalk-3.1.12~ds/libatalk/util/netatalk_conf.c:956:19:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
        tmpvlen = strlen(tmpname);
data/netatalk-3.1.12~ds/libatalk/util/netatalk_conf.c:989:19:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
        tmpvlen = strlen(tmpname);
data/netatalk-3.1.12~ds/libatalk/util/netatalk_conf.c:1367:18:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
        initline(strlen(buf), buf);
data/netatalk-3.1.12~ds/libatalk/util/netatalk_conf.c:1670:29:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    if (strncmp(path, hdir, strlen(hdir)) != 0)
data/netatalk-3.1.12~ds/libatalk/util/netatalk_conf.c:1741:19:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    abspath_len = strlen(abspath);
data/netatalk-3.1.12~ds/libatalk/util/netatalk_conf.c:1748:29:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
        size_t v_path_len = strlen(tmp->v_path);
data/netatalk-3.1.12~ds/libatalk/util/netatalk_conf.c:1750:30:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
            if (v_path_len < strlen(path) && path[v_path_len] != '/') {
data/netatalk-3.1.12~ds/libatalk/util/netatalk_conf.c:1794:5:  [1] (buffer) strncpy:
  Easily used incorrectly; doesn't always \0-terminate or check for invalid
  pointers [MS-banned] (CWE-120).
    strncpy(tmpbuf, path + match[0].rm_so, match[0].rm_eo - match[0].rm_so);
data/netatalk-3.1.12~ds/libatalk/util/netatalk_conf.c:1878:46:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
        if (strncmp(name, tmp->v_configname, strlen(tmp->v_configname)) == 0) {
data/netatalk-3.1.12~ds/libatalk/util/netatalk_conf.c:2014:49:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
        EC_NULL_LOG( options->k5keytab = malloc(strlen(p) + 14) );
data/netatalk-3.1.12~ds/libatalk/util/netatalk_conf.c:2015:37:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
        snprintf(options->k5keytab, strlen(p) + 14, "KRB5_KTNAME=%s", p);
data/netatalk-3.1.12~ds/libatalk/util/server_ipc.c:177:16:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
    if ((ret = read(fd, buf, IPC_HEADERLEN)) != IPC_HEADERLEN) {
data/netatalk-3.1.12~ds/libatalk/util/server_ipc.c:208:17:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
	    if ((ret = read(fd, buf, ipc.len)) != (int) ipc.len) {
data/netatalk-3.1.12~ds/libatalk/util/server_lock.c:43:10:  [1] (access) umask:
  Ensure that umask is given most restrictive possible setting (e.g., 066 or
  077) (CWE-732).
  mask = umask(022);
data/netatalk-3.1.12~ds/libatalk/util/server_lock.c:60:3:  [1] (access) umask:
  Ensure that umask is given most restrictive possible setting (e.g., 066 or
  077) (CWE-732).
  umask(mask);
data/netatalk-3.1.12~ds/libatalk/util/server_lock.c:140:12:  [1] (access) umask:
  Ensure that umask is given most restrictive possible setting (e.g., 066 or
  077) (CWE-732).
    mask = umask(022);
data/netatalk-3.1.12~ds/libatalk/util/server_lock.c:146:5:  [1] (access) umask:
  Ensure that umask is given most restrictive possible setting (e.g., 066 or
  077) (CWE-732).
    umask(mask);
data/netatalk-3.1.12~ds/libatalk/util/unix.c:226:13:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    int i = strlen(p) - 1;
data/netatalk-3.1.12~ds/libatalk/util/unix.c:404:13:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
        if (read(fd, buf, n) != n) {
data/netatalk-3.1.12~ds/libatalk/vfs/ea_ad.c:94:14:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    inplen = strlen(m);
data/netatalk-3.1.12~ds/libatalk/vfs/ea_ad.c:176:49:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
        (*(ea->ea_entries))[count].ea_namelen = strlen((*(ea->ea_entries))[count].ea_name);
data/netatalk-3.1.12~ds/libatalk/vfs/ea_ad.c:353:52:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    (*(ea->ea_entries))[ea->ea_count].ea_namelen = strlen(attruname);
data/netatalk-3.1.12~ds/libatalk/vfs/ea_ad.c:773:9:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
    if (read(ea->ea_fd, ea->ea_data, ea->ea_size) != (ssize_t)ea->ea_size) {
data/netatalk-3.1.12~ds/libatalk/vfs/ea_ad.c:1111:17:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
            if (read(fd, rbuf, toread) != (ssize_t)toread) {
data/netatalk-3.1.12~ds/libatalk/vfs/ea_sys.c:317:15:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
        len = strlen(ptr);
data/netatalk-3.1.12~ds/libatalk/vfs/extattr.c:393:14:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		ent_size = strlen(ae->a_name) + sizeof("user.");
data/netatalk-3.1.12~ds/libatalk/vfs/extattr.c:395:7:  [1] (buffer) strncpy:
  Easily used incorrectly; doesn't always \0-terminate or check for invalid
  pointers [MS-banned] (CWE-120). Risk is low because the source is a
  constant string.
		    strncpy(bp, "user.", sizeof("user."));
data/netatalk-3.1.12~ds/libatalk/vfs/extattr.c:396:7:  [1] (buffer) strncat:
  Easily used incorrectly (e.g., incorrectly computing the correct maximum
  size to add) [MS-banned] (CWE-120). Consider strcat_s, strlcat, snprintf,
  or automatically resizing strings.
		    strncat(bp, ae->a_name, ent_size - sizeof("user."));
data/netatalk-3.1.12~ds/libatalk/vfs/extattr.c:419:18:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		    ent_size = strlen(ae->a_name) + sizeof("system.");
data/netatalk-3.1.12~ds/libatalk/vfs/extattr.c:421:4:  [1] (buffer) strncpy:
  Easily used incorrectly; doesn't always \0-terminate or check for invalid
  pointers [MS-banned] (CWE-120). Risk is low because the source is a
  constant string.
			strncpy(bp, "system.", sizeof("system."));
data/netatalk-3.1.12~ds/libatalk/vfs/extattr.c:422:4:  [1] (buffer) strncat:
  Easily used incorrectly (e.g., incorrectly computing the correct maximum
  size to add) [MS-banned] (CWE-120). Consider strcat_s, strlcat, snprintf,
  or automatically resizing strings.
			strncat(bp, ae->a_name, ent_size - sizeof("system."));
data/netatalk-3.1.12~ds/libatalk/vfs/extattr.c:453:9:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		len = strlen(ptr1) +1;
data/netatalk-3.1.12~ds/libatalk/vfs/extattr.c:887:9:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
	return read(attrfd, value, sbuf.st_size);
data/netatalk-3.1.12~ds/libatalk/vfs/extattr.c:911:13:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		listlen = strlen(de->d_name);
data/netatalk-3.1.12~ds/libatalk/vfs/unix.c:142:18:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
    while ((cc = read(sfd, filebuf, sizeof(filebuf)))) {
data/netatalk-3.1.12~ds/libatalk/vfs/vfs.c:488:29:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    if (strncmp(name, "._", strlen("._")) == 0) {
data/netatalk-3.1.12~ds/libevent/arc4random.c:131:12:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
		result = read(fd, buf+numread, count-numread);
data/netatalk-3.1.12~ds/libevent/arc4random.c:266:7:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
		n = read(fd, buf, sizeof(buf));
data/netatalk-3.1.12~ds/libevent/buffer.c:2138:6:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
	n = read(fd, p, howmuch);
data/netatalk-3.1.12~ds/libevent/buffer.c:2208:6:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
	n = read((int)fd, v[0].iov_base, (unsigned int)v[0].iov_len);
data/netatalk-3.1.12~ds/libevent/buffer.c:2215:7:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
		n = read((int)fd, v[1].iov_base, (unsigned int)v[1].iov_len);
data/netatalk-3.1.12~ds/libevent/buffer.c:2833:14:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
		ev_ssize_t read;
data/netatalk-3.1.12~ds/libevent/buffer.c:2856:14:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
			length -= read;
data/netatalk-3.1.12~ds/libevent/bufferevent_openssl.c:224:37:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	return bio_bufferevent_write(b, s, strlen(s));
data/netatalk-3.1.12~ds/libevent/evdns.c:1242:18:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		namelen = (int)strlen(tmp_name);
data/netatalk-3.1.12~ds/libevent/evdns.c:1898:45:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		j = dnsname_to_labels(buf, buf_len, j, s, strlen(s), &table);
data/netatalk-3.1.12~ds/libevent/evdns.c:1917:55:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
			r = dnsname_to_labels(buf, buf_len, j, item->name, strlen(item->name), &table);
data/netatalk-3.1.12~ds/libevent/evdns.c:1929:56:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
				r = dnsname_to_labels(buf, buf_len, j, item->data, strlen(item->data), &table);
data/netatalk-3.1.12~ds/libevent/evdns.c:2671:26:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	const size_t name_len = strlen(name);
data/netatalk-3.1.12~ds/libevent/evdns.c:2917:21:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	EVUTIL_ASSERT(cp + strlen("ip6.arpa") < buf+sizeof(buf));
data/netatalk-3.1.12~ds/libevent/evdns.c:2918:25:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	memcpy(cp, "ip6.arpa", strlen("ip6.arpa")+1);
data/netatalk-3.1.12~ds/libevent/evdns.c:3017:15:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	domain_len = strlen(domain);
data/netatalk-3.1.12~ds/libevent/evdns.c:3091:26:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	const size_t base_len = strlen(base_name);
data/netatalk-3.1.12~ds/libevent/evdns.c:3343:18:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	size_t optlen = strlen(optionname);
data/netatalk-3.1.12~ds/libevent/evdns.c:3344:16:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	size_t slen = strlen(s1);
data/netatalk-3.1.12~ds/libevent/evdns.c:3509:12:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	len_out = strlen(path)+strlen(hostfile);
data/netatalk-3.1.12~ds/libevent/evdns.c:3509:25:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	len_out = strlen(path)+strlen(hostfile);
data/netatalk-3.1.12~ds/libevent/evdns.c:4029:13:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		namelen = strlen(hostname);
data/netatalk-3.1.12~ds/libevent/event.c:2642:15:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		size_t ln = strlen(str);
data/netatalk-3.1.12~ds/libevent/event.c:2692:6:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
	r = read(fd, (void*) &msg, sizeof(msg));
data/netatalk-3.1.12~ds/libevent/event.c:2711:9:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
	while (read(fd, (char*)buf, sizeof(buf)) > 0)
data/netatalk-3.1.12~ds/libevent/event_tagging.c:292:47:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	evtag_marshal(buf, tag, string, (ev_uint32_t)strlen(string));
data/netatalk-3.1.12~ds/libevent/evrpc.c:215:24:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	constructed_uri_len = strlen(EVRPC_URI_PREFIX) + strlen(uri) + 1;
data/netatalk-3.1.12~ds/libevent/evrpc.c:215:51:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	constructed_uri_len = strlen(EVRPC_URI_PREFIX) + strlen(uri) + 1;
data/netatalk-3.1.12~ds/libevent/evrpc.c:219:44:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	memcpy(constructed_uri, EVRPC_URI_PREFIX, strlen(EVRPC_URI_PREFIX));
data/netatalk-3.1.12~ds/libevent/evrpc.c:220:27:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	memcpy(constructed_uri + strlen(EVRPC_URI_PREFIX), uri, strlen(uri));
data/netatalk-3.1.12~ds/libevent/evrpc.c:220:58:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	memcpy(constructed_uri + strlen(EVRPC_URI_PREFIX), uri, strlen(uri));
data/netatalk-3.1.12~ds/libevent/evutil.c:84:9:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
#define read _read
data/netatalk-3.1.12~ds/libevent/evutil.c:163:14:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
	while ((r = read(fd, mem+read_so_far, N_TO_READ(st.st_size - read_so_far))) > 0) {
data/netatalk-3.1.12~ds/libevent/evutil.c:1628:8:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
			if (strlen(buf) > len)
data/netatalk-3.1.12~ds/libevent/evutil.c:1664:11:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
				cp += strlen(cp);
data/netatalk-3.1.12~ds/libevent/evutil.c:1670:7:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		if (strlen(buf) > len)
data/netatalk-3.1.12~ds/libevent/evutil.c:1709:14:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
			eow = src+strlen(src);
data/netatalk-3.1.12~ds/libevent/evutil.c:2170:21:  [1] (buffer) _tcslen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
  if (n == 0 || n + _tcslen(library_name) + 2 >= MAX_PATH)
data/netatalk-3.1.12~ds/libevent/http.c:208:16:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	EVUTIL_ASSERT(strlen(del) == 1);
data/netatalk-3.1.12~ds/libevent/http.c:265:13:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	old_size = strlen(html);
data/netatalk-3.1.12~ds/libevent/http.c:870:8:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
			if (strlen(p) == 0) {
data/netatalk-3.1.12~ds/libevent/http.c:1768:12:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	old_len = strlen(header->value);
data/netatalk-3.1.12~ds/libevent/http.c:1769:13:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	line_len = strlen(line);
data/netatalk-3.1.12~ds/libevent/http.c:2675:13:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		end = uri+strlen(uri);
data/netatalk-3.1.12~ds/libevent/http.c:2746:23:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	if ((ret = mm_malloc(strlen(uri) + 1)) == NULL) {
data/netatalk-3.1.12~ds/libevent/http.c:2748:22:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
			  (unsigned long)(strlen(uri) + 1));
data/netatalk-3.1.12~ds/libevent/http.c:2752:34:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	evhttp_decode_uri_internal(uri, strlen(uri),
data/netatalk-3.1.12~ds/libevent/http.c:2764:23:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	if ((ret = mm_malloc(strlen(uri) + 1)) == NULL) {
data/netatalk-3.1.12~ds/libevent/http.c:2766:22:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
			  (unsigned long)(strlen(uri) + 1));
data/netatalk-3.1.12~ds/libevent/http.c:2770:38:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	n = evhttp_decode_uri_internal(uri, strlen(uri),
data/netatalk-3.1.12~ds/libevent/http.c:2809:22:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	if (!query_part || !strlen(query_part)) {
data/netatalk-3.1.12~ds/libevent/http.c:2830:34:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		if ((decoded_value = mm_malloc(strlen(value) + 1)) == NULL) {
data/netatalk-3.1.12~ds/libevent/http.c:2834:37:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		evhttp_decode_uri_internal(value, strlen(value),
data/netatalk-3.1.12~ds/libevent/http.c:2874:11:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	offset = strlen(path);
data/netatalk-3.1.12~ds/libevent/http.c:3603:15:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
			p = host + strlen(host) - 1;
data/netatalk-3.1.12~ds/libevent/http.c:4146:10:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
			cp += strlen(cp);
data/netatalk-3.1.12~ds/libevent/http.c:4341:47:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
#define _URI_ADD(f)	evbuffer_add(tmp, uri->f, strlen(uri->f))
data/netatalk-3.1.12~ds/libevent/http.c:4450:42:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	if (scheme && !scheme_ok(scheme, scheme+strlen(scheme)))
data/netatalk-3.1.12~ds/libevent/http.c:4459:50:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	if (userinfo && !userinfo_ok(userinfo, userinfo+strlen(userinfo)))
data/netatalk-3.1.12~ds/libevent/http.c:4469:37:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
			if (! bracket_addr_ok(host, host+strlen(host)))
data/netatalk-3.1.12~ds/libevent/http.c:4472:32:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
			if (! regname_ok(host, host+strlen(host)))
data/netatalk-3.1.12~ds/libevent/http.c:4494:64:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	if (path && end_of_cpath(path, PART_PATH, uri->flags) != path+strlen(path))
data/netatalk-3.1.12~ds/libevent/http.c:4503:68:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	if (query && end_of_cpath(query, PART_QUERY, uri->flags) != query+strlen(query))
data/netatalk-3.1.12~ds/libevent/http.c:4511:80:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	if (fragment && end_of_cpath(fragment, PART_FRAGMENT, uri->flags) != fragment+strlen(fragment))
data/netatalk-3.1.12~ds/libevent/log.c:181:9:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		len = strlen(buf);
data/netatalk-3.1.12~ds/libevent/sample/event-test.c:58:8:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
	len = read(fd, buf, sizeof(buf) - 1);
data/netatalk-3.1.12~ds/libevent/sample/hello-world.c:105:34:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	bufferevent_write(bev, MESSAGE, strlen(MESSAGE));
data/netatalk-3.1.12~ds/libevent/sample/http-server.c:192:8:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	len = strlen(decoded_path)+strlen(docroot)+2;
data/netatalk-3.1.12~ds/libevent/sample/http-server.c:192:29:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	len = strlen(decoded_path)+strlen(docroot)+2;
data/netatalk-3.1.12~ds/libevent/sample/http-server.c:220:8:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		if (!strlen(path) || path[strlen(path)-1] != '/')
data/netatalk-3.1.12~ds/libevent/sample/http-server.c:220:29:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		if (!strlen(path) || path[strlen(path)-1] != '/')
data/netatalk-3.1.12~ds/libevent/sample/http-server.c:224:12:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		dirlen = strlen(whole_path);
data/netatalk-3.1.12~ds/libevent/test/regress.c:98:9:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
#define read(fd,buf,len) recv((fd),(buf),(int)(len),0)
data/netatalk-3.1.12~ds/libevent/test/regress.c:114:8:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
	len = read(fd, buf, sizeof(buf));
data/netatalk-3.1.12~ds/libevent/test/regress.c:134:8:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
	len = read(fd, buf, sizeof(buf));
data/netatalk-3.1.12~ds/libevent/test/regress.c:171:25:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	len = write(fd, TEST1, strlen(TEST1) + 1);
data/netatalk-3.1.12~ds/libevent/test/regress.c:217:8:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
	len = read(fd, rbuf + roff, sizeof(rbuf) - roff);
data/netatalk-3.1.12~ds/libevent/test/regress.c:265:8:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
	len = read(fd, buf, sizeof(buf));
data/netatalk-3.1.12~ds/libevent/test/regress.c:319:28:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	if (write(pair[0], TEST1, strlen(TEST1)+1) < 0) {
data/netatalk-3.1.12~ds/libevent/test/regress.c:364:28:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	if (write(pair[0], TEST1, strlen(TEST1)+1) < 0) {
data/netatalk-3.1.12~ds/libevent/test/regress.c:820:28:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	if (write(pair[0], TEST1, strlen(TEST1)+1) < 0) {
data/netatalk-3.1.12~ds/libevent/test/regress.c:862:28:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	if (write(pair[0], TEST1, strlen(TEST1)+1) < 0) {
data/netatalk-3.1.12~ds/libevent/test/regress.c:879:28:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	if (write(pair[0], TEST1, strlen(TEST1)+1) < 0) {
data/netatalk-3.1.12~ds/libevent/test/regress.c:1297:21:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	int towrite = (int)strlen(TEST1)+1;
data/netatalk-3.1.12~ds/libevent/test/regress.c:1443:6:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
	if (read(fd, buf, sizeof(buf)) < 0) {
data/netatalk-3.1.12~ds/libevent/test/regress.c:1606:30:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
   if (write(pair[1], TEST1, strlen(TEST1)+1) < 0) {
data/netatalk-3.1.12~ds/libevent/test/regress.c:1630:8:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
	len = read(fd, buf, sizeof(buf));
data/netatalk-3.1.12~ds/libevent/test/regress.c:1636:29:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		if (write(pair[0], TEST1, strlen(TEST1)+1) < 0) {
data/netatalk-3.1.12~ds/libevent/test/regress.c:1656:28:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	if (write(pair[0], TEST1, strlen(TEST1)+1) < 0) {
data/netatalk-3.1.12~ds/libevent/test/regress.c:2053:34:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	if (write(data->pair[1], TEST1, strlen(TEST1)+1) < 0) {
data/netatalk-3.1.12~ds/libevent/test/regress.c:2136:3:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		strlen("Hello world")), >, 0);
data/netatalk-3.1.12~ds/libevent/test/regress_buffer.c:187:22:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	evbuffer_drain(evb, strlen("hello/"));
data/netatalk-3.1.12~ds/libevent/test/regress_buffer.c:573:21:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	tt_int_op(len, ==, strlen(data));
data/netatalk-3.1.12~ds/libevent/test/regress_buffer.c:589:46:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	tt_assert(evbuffer_add_reference(src, data, strlen(data),
data/netatalk-3.1.12~ds/libevent/test/regress_buffer.c:592:30:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	evbuffer_reserve_space(dst, strlen(data), v, 1);
data/netatalk-3.1.12~ds/libevent/test/regress_buffer.c:604:3:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		strlen(data) - 10) != -1);
data/netatalk-3.1.12~ds/libevent/test/regress_buffer.c:606:17:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	v[0].iov_len = strlen(data);
data/netatalk-3.1.12~ds/libevent/test/regress_buffer.c:614:41:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	tt_assert(!memcmp(evbuffer_pullup(dst, strlen(data)),
data/netatalk-3.1.12~ds/libevent/test/regress_buffer.c:615:12:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
			  data, strlen(data)));
data/netatalk-3.1.12~ds/libevent/test/regress_buffer.c:671:12:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	datalen = strlen(data);
data/netatalk-3.1.12~ds/libevent/test/regress_buffer.c:689:45:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	tt_int_op(evbuffer_read(src, pair[1], (int)strlen(data)), ==, datalen);
data/netatalk-3.1.12~ds/libevent/test/regress_buffer.c:725:19:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	if (!cp || sz != strlen(content) || strcmp(cp, content)) {	\
data/netatalk-3.1.12~ds/libevent/test/regress_buffer.c:732:23:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	evbuffer_add(evb, s, strlen(s)+2);
data/netatalk-3.1.12~ds/libevent/test/regress_buffer.c:744:23:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	evbuffer_add(evb, s, strlen(s));
data/netatalk-3.1.12~ds/libevent/test/regress_buffer.c:760:23:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	evbuffer_add(evb, s, strlen(s));
data/netatalk-3.1.12~ds/libevent/test/regress_buffer.c:790:23:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	evbuffer_add(evb, s, strlen(s));
data/netatalk-3.1.12~ds/libevent/test/regress_buffer.c:815:23:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	evbuffer_add(evb, s, strlen(s));
data/netatalk-3.1.12~ds/libevent/test/regress_buffer.c:835:23:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	evbuffer_add(evb, s, strlen(s));
data/netatalk-3.1.12~ds/libevent/test/regress_buffer.c:860:27:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	evbuffer_add(evb_tmp, s, strlen(s));
data/netatalk-3.1.12~ds/libevent/test/regress_buffer.c:865:27:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	evbuffer_add(evb_tmp, s, strlen(s));
data/netatalk-3.1.12~ds/libevent/test/regress_buffer.c:870:27:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	evbuffer_add(evb_tmp, s, strlen(s));
data/netatalk-3.1.12~ds/libevent/test/regress_buffer.c:899:27:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	evbuffer_add(evb_tmp, s, strlen(s));
data/netatalk-3.1.12~ds/libevent/test/regress_buffer.c:939:23:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	evbuffer_add(buf, s, strlen(s));
data/netatalk-3.1.12~ds/libevent/test/regress_buffer.c:991:19:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		for (j = 1; j < strlen(abc); ++j) {
data/netatalk-3.1.12~ds/libevent/test/regress_buffer.c:1037:36:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	evbuffer_add(buf, (u_char*)test1, strlen(test1));
data/netatalk-3.1.12~ds/libevent/test/regress_buffer.c:1039:22:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	evbuffer_drain(buf, strlen(test1));
data/netatalk-3.1.12~ds/libevent/test/regress_buffer.c:1041:36:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	evbuffer_add(buf, (u_char*)test2, strlen(test2));
data/netatalk-3.1.12~ds/libevent/test/regress_buffer.c:1050:22:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	evbuffer_drain(buf, strlen(test2));
data/netatalk-3.1.12~ds/libevent/test/regress_buffer.c:1296:16:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	size_t len1 = strlen(chunk1), len2=strlen(chunk2);
data/netatalk-3.1.12~ds/libevent/test/regress_buffer.c:1296:37:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	size_t len1 = strlen(chunk1), len2=strlen(chunk2);
data/netatalk-3.1.12~ds/libevent/test/regress_buffer.c:1433:30:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	tt_int_op((v)->iov_len, ==, strlen(s));			\
data/netatalk-3.1.12~ds/libevent/test/regress_buffer.c:1434:40:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	tt_assert(!memcmp((v)->iov_base, (s), strlen(s)))
data/netatalk-3.1.12~ds/libevent/test/regress_buffer.c:1558:28:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	evbuffer_add(buf, string, strlen(string));
data/netatalk-3.1.12~ds/libevent/test/regress_dns.c:474:9:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		len = strlen(addresses)+1;
data/netatalk-3.1.12~ds/libevent/test/regress_et.c:107:27:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	send(pair[0], test, (int)strlen(test)+1, 0);
data/netatalk-3.1.12~ds/libevent/test/regress_http.c:178:16:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	size_t s_sz = strlen(s);
data/netatalk-3.1.12~ds/libevent/test/regress_http.c:200:32:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	ptr = evbuffer_search(buf, s, strlen(s), NULL);
data/netatalk-3.1.12~ds/libevent/test/regress_http.c:272:30:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
			if (strcmp("END", multi + strlen(multi) - 3) == 0)
data/netatalk-3.1.12~ds/libevent/test/regress_http.c:353:39:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	bufferevent_write(bev, http_request, strlen(http_request));
data/netatalk-3.1.12~ds/libevent/test/regress_http.c:388:39:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	bufferevent_write(bev, http_request, strlen(http_request));
data/netatalk-3.1.12~ds/libevent/test/regress_http.c:415:39:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	bufferevent_write(bev, http_request, strlen(http_request));
data/netatalk-3.1.12~ds/libevent/test/regress_http.c:438:39:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	bufferevent_write(bev, http_request, strlen(http_request));
data/netatalk-3.1.12~ds/libevent/test/regress_http.c:574:39:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	bufferevent_write(bev, http_request, strlen(http_request));
data/netatalk-3.1.12~ds/libevent/test/regress_http.c:608:39:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	bufferevent_write(bev, http_request, strlen(http_request));
data/netatalk-3.1.12~ds/libevent/test/regress_http.c:689:39:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	bufferevent_write(bev, http_request, strlen(http_request));
data/netatalk-3.1.12~ds/libevent/test/regress_http.c:754:40:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	bufferevent_write(bev1, http_request, strlen(http_request));
data/netatalk-3.1.12~ds/libevent/test/regress_http.c:771:40:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	bufferevent_write(bev2, http_request, strlen(http_request));
data/netatalk-3.1.12~ds/libevent/test/regress_http.c:788:40:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	bufferevent_write(bev3, http_request, strlen(http_request));
data/netatalk-3.1.12~ds/libevent/test/regress_http.c:803:47:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	tt_assert(!strncmp(result1, "HTTP/1.1 501 ", strlen("HTTP/1.1 501 ")));
data/netatalk-3.1.12~ds/libevent/test/regress_http.c:807:47:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	tt_assert(!strncmp(result2, "HTTP/1.1 200 ", strlen("HTTP/1.1 200 ")));
data/netatalk-3.1.12~ds/libevent/test/regress_http.c:811:47:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	tt_assert(!strncmp(result3, "HTTP/1.1 501 ", strlen("HTTP/1.1 501 ")));
data/netatalk-3.1.12~ds/libevent/test/regress_http.c:1136:67:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	if (evbuffer_get_length(evhttp_request_get_input_buffer(req)) != strlen(what)) {
data/netatalk-3.1.12~ds/libevent/test/regress_http.c:1308:39:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	bufferevent_write(bev, http_request, strlen(http_request));
data/netatalk-3.1.12~ds/libevent/test/regress_http.c:1395:67:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	if (evbuffer_get_length(evhttp_request_get_input_buffer(req)) != strlen(what)) {
data/netatalk-3.1.12~ds/libevent/test/regress_http.c:1397:96:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		    (unsigned long)evbuffer_get_length(evhttp_request_get_input_buffer(req)), (unsigned long)strlen(what));
data/netatalk-3.1.12~ds/libevent/test/regress_http.c:1534:67:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	if (evbuffer_get_length(evhttp_request_get_input_buffer(req)) != strlen(POST_DATA)) {
data/netatalk-3.1.12~ds/libevent/test/regress_http.c:1536:98:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		    (unsigned long) evbuffer_get_length(evhttp_request_get_input_buffer(req)), (unsigned long) strlen(POST_DATA));
data/netatalk-3.1.12~ds/libevent/test/regress_http.c:1577:67:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	if (evbuffer_get_length(evhttp_request_get_input_buffer(req)) != strlen(what)) {
data/netatalk-3.1.12~ds/libevent/test/regress_http.c:1579:96:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		    (unsigned long)evbuffer_get_length(evhttp_request_get_input_buffer(req)), (unsigned long)strlen(what));
data/netatalk-3.1.12~ds/libevent/test/regress_http.c:1652:67:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	if (evbuffer_get_length(evhttp_request_get_input_buffer(req)) != strlen(PUT_DATA)) {
data/netatalk-3.1.12~ds/libevent/test/regress_http.c:1654:96:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		    (unsigned long)evbuffer_get_length(evhttp_request_get_input_buffer(req)), (unsigned long)strlen(PUT_DATA));
data/netatalk-3.1.12~ds/libevent/test/regress_http.c:1695:67:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	if (evbuffer_get_length(evhttp_request_get_input_buffer(req)) != strlen(what)) {
data/netatalk-3.1.12~ds/libevent/test/regress_http.c:1697:96:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		    (unsigned long)evbuffer_get_length(evhttp_request_get_input_buffer(req)), (unsigned long)strlen(what));
data/netatalk-3.1.12~ds/libevent/test/regress_http.c:1747:39:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	bufferevent_write(bev, http_request, strlen(http_request));
data/netatalk-3.1.12~ds/libevent/test/regress_http.c:2390:19:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		tt_int_op(sz,==,strlen(from));			\
data/netatalk-3.1.12~ds/libevent/test/regress_http.c:2400:19:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
		tt_int_op(sz,==,strlen(want));			\
data/netatalk-3.1.12~ds/libevent/test/regress_http.c:2503:39:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	bufferevent_write(bev, http_request, strlen(http_request));
data/netatalk-3.1.12~ds/libevent/test/regress_http.c:2584:39:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	bufferevent_write(bev, http_request, strlen(http_request));
data/netatalk-3.1.12~ds/libevent/test/regress_http.c:2793:39:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	bufferevent_write(bev, http_request, strlen(http_request));
data/netatalk-3.1.12~ds/libevent/test/regress_http.c:2959:37:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	_http_stream_in_test(arg, "/test", strlen(BASIC_REQUEST_BODY),
data/netatalk-3.1.12~ds/libevent/test/regress_http.c:3271:45:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	bufferevent_write(bev, http_start_request, strlen(http_start_request));
data/netatalk-3.1.12~ds/libevent/test/regress_http.c:3547:39:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	bufferevent_write(bev, http_request, strlen(http_request));
data/netatalk-3.1.12~ds/libevent/test/regress_iocp.c:328:41:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	bufferevent_write(bea1, "Hello world", strlen("Hello world")+1);
data/netatalk-3.1.12~ds/libevent/test/regress_thread.c:409:22:  [1] (obsolete) usleep:
  This C routine is considered obsolete (as opposed to the shell command by
  the same name). The interaction of this function with SIGALRM and other
  timer functions such as sleep(), alarm(), setitimer(), and nanosleep() is
  unspecified (CWE-676). Use nanosleep(2) or setitimer(2) instead.
#define SLEEP_MS(ms) usleep((ms) * 1000)
data/netatalk-3.1.12~ds/libevent/test/test-eof.c:109:27:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	send(pair[0], test, (int)strlen(test)+1, 0);
data/netatalk-3.1.12~ds/libevent/test/test-weof.c:68:28:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
	len = send(fd, test, (int)strlen(test) + 1, 0);
data/netatalk-3.1.12~ds/libevent/test/tinytest.c:186:12:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
		r = (int)read(outcome_pipe[0], b, 1);
data/netatalk-3.1.12~ds/libevent/win32select.c:119:76:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
do_fd_set(struct win32op *op, struct idx_info *ent, evutil_socket_t s, int read)
data/netatalk-3.1.12~ds/libevent/win32select.c:121:27:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
	struct win_fd_set *set = read ? op->readset_in : op->writeset_in;
data/netatalk-3.1.12~ds/libevent/win32select.c:122:6:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
	if (read) {
data/netatalk-3.1.12~ds/libevent/win32select.c:133:9:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
		set = read ? op->readset_in : op->writeset_in;
data/netatalk-3.1.12~ds/libevent/win32select.c:136:6:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
	if (read)
data/netatalk-3.1.12~ds/libevent/win32select.c:145:50:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
			struct win32op *op, struct idx_info *ent, int read)
data/netatalk-3.1.12~ds/libevent/win32select.c:148:27:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
	struct win_fd_set *set = read ? op->readset_in : op->writeset_in;
data/netatalk-3.1.12~ds/libevent/win32select.c:149:6:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
	if (read) {
data/netatalk-3.1.12~ds/libevent/win32select.c:167:7:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
		if (read)
data/netatalk-3.1.12~ds/test/afpd/afpfunc_helpers.c:68:16:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    int slen = strlen(name);
data/netatalk-3.1.12~ds/test/afpd/afpfunc_helpers.c:100:32:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    PUSHVAL(p, uint16_t, ntohs(strlen(name)), len);
data/netatalk-3.1.12~ds/test/afpd/afpfunc_helpers.c:207:16:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    char len = strlen(name);
data/netatalk-3.1.12~ds/test/afpd/test.h:54:13:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    alignok(strlen(#a));               \
data/netatalk-3.1.12~ds/test/afpd/test.h:60:13:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    alignok(strlen(#a));                          \
data/netatalk-3.1.12~ds/test/afpd/test.h:68:13:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
    alignok(strlen(#a));                             \

ANALYSIS SUMMARY:

Hits = 1975
Lines analyzed = 162971 in approximately 5.02 seconds (32485 lines/second)
Physical Source Lines of Code (SLOC) = 115318
Hits@level = [0] 479 [1] 507 [2] 1202 [3]  57 [4] 185 [5]  24
Hits@level+ = [0+] 2454 [1+] 1975 [2+] 1468 [3+] 266 [4+] 209 [5+]  24
Hits/KSLOC@level+ = [0+] 21.2803 [1+] 17.1266 [2+] 12.73 [3+] 2.30667 [4+] 1.81238 [5+] 0.20812
Dot directories skipped = 1 (--followdotdir overrides)
Minimum risk level = 1
Not every hit is necessarily a security vulnerability.
There may be other security vulnerabilities; review your code!
See 'Secure Programming HOWTO'
(https://dwheeler.com/secure-programs) for more information.