Flawfinder version 2.0.10, (C) 2001-2019 David A. Wheeler. Number of rules (primarily dangerous function names) in C/C++ ruleset: 223 Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/include/rom.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/adf/adf_nbuf.c Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/adf/adf_nbuf_pvt.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/adf/adf_net.c Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/adf/adf_net_pvt.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/adf/adf_os_atomic_pvt.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/adf/adf_os_defer_pvt.c Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/adf/adf_os_defer_pvt.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/adf/adf_os_dma.c Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/adf/adf_os_dma_pvt.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/adf/adf_os_io_pvt.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/adf/adf_os_irq_pvt.c Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/adf/adf_os_irq_pvt.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/adf/adf_os_lock_pvt.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/adf/adf_os_mem_pvt.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/adf/adf_os_module_pvt.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/adf/adf_os_pci_pvt.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/adf/adf_os_time_pvt.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/adf/adf_os_timer.c Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/adf/adf_os_timer_pvt.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/adf/adf_os_types_pvt.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/adf/adf_os_util_pvt.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/buf_pool/buf_pool_api.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/buf_pool/buf_pool_static.c Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/buf_pool/buf_pool_static.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/cmnos/clock_api.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/cmnos/cmnos_api.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/cmnos/cmnos_sflash.c Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/cmnos/dbg_api.c Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/cmnos/dbg_api.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/cmnos/k2_cmnos_clock_patch.c Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/cmnos/k2_fw_cmnos_printf.c Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/cmnos/printf_api.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/cmnos/sflash_api.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/hif/k2_HIF_usb_patch.c Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/hif/usb_api_k2_patch.c Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/hif/usb_api_magpie_patch.c Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/hif/usb_api_main_patch.c Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/htc/htc.c Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/htc/htc_api.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/htc/htc_internal.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/inc/OTUS/OTUS_soc.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/inc/adf_nbuf.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/inc/adf_net.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/inc/adf_net_sw.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/inc/adf_net_types.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/inc/adf_net_wcmd.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/inc/adf_os_atomic.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/inc/adf_os_defer.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/inc/adf_os_dma.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/inc/adf_os_io.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/inc/adf_os_irq.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/inc/adf_os_lock.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/inc/adf_os_mem.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/inc/adf_os_module.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/inc/adf_os_pci.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/inc/adf_os_stdtypes.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/inc/adf_os_time.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/inc/adf_os_timer.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/inc/adf_os_types.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/inc/adf_os_util.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/inc/allocram_api.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/inc/asf_bitmap.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/inc/asf_queue.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/inc/athos_api.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/inc/dma_engine_api.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/inc/dma_lib.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/inc/dt_defs.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/inc/eeprom_api.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/inc/hif_api.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/inc/hif_gmac.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/inc/hif_pci.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/inc/hif_usb.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/inc/intr_api.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/inc/k2/Magpie_api.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/inc/k2/k2/reg_defs.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/inc/k2/k2/rom_cfg.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/inc/k2/k2_mem.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/inc/k2/sys_cfg.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/inc/magpie/Magpie_api.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/inc/magpie/magpie/reg_defs.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/inc/magpie/magpie/rom_cfg.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/inc/magpie/magpie_mem.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/inc/magpie/sys_cfg.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/inc/magpie_regdump.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/inc/mem_api.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/inc/misc_api.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/inc/osapi.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/inc/regdump.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/inc/romp_api.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/inc/string_api.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/inc/tasklet_api.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/inc/timer_api.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/inc/uart_api.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/inc/usb_api.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/inc/usb_defs.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/inc/usb_extr.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/inc/usb_pre.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/inc/usb_std.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/inc/usb_table.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/inc/usb_type.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/inc/usbfifo_api.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/inc/vbuf_api.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/inc/vdesc_api.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/inc/wdt_api.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/inc/xtensa-elf/xtensa/config/core.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/inc/xtensa-elf/xtensa/corebits.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/inc/xtensa-elf/xtensa/hal.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/inc/xtensa-elf/xtensa/xtruntime.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/inc/xtensa/config/core-isa.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/inc/xtensa/config/core-matmap.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/inc/xtensa/config/specreg.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/inc/xtensa/config/tie.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/init/app_start.c Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/init/app_start.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/init/init.c Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/init/init.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/init/magpie.c Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/rompatch/HIF_usb_patch.c Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/rompatch/cmnos_clock_patch.c Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/wlan/wlan_pci.c Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/wlan/wlan_pci.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/wmi/wmi_internal.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/wmi/wmi_svc.c Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/wmi/wmi_svc_api.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/wlan/_ieee80211.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/wlan/ah.c Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/wlan/ah.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/wlan/ah_desc.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/wlan/ah_internal.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/wlan/ah_osdep.c Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/wlan/ah_osdep.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/wlan/ar5416.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/wlan/ar5416Phy.c Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/wlan/ar5416_hw.c Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/wlan/ar5416_phy.c Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/wlan/ar5416desc.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/wlan/ar5416reg.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/wlan/ieee80211.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/wlan/ieee80211_linux.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/wlan/ieee80211_node.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/wlan/ieee80211_output.c Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/wlan/ieee80211_proto.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/wlan/ieee80211_var.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/wlan/if_ath.c Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/wlan/if_ath_pci.c Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/wlan/if_ath_pci.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/wlan/if_athrate.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/wlan/if_athvar.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/wlan/if_llc.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/wlan/if_owl.c Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/wlan/include/athdefs.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/wlan/include/htc.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/wlan/include/htc_services.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/wlan/include/k2/wlan_cfg.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/wlan/include/magpie/wlan_cfg.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/wlan/include/wlan_hdr.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/wlan/include/wmi.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/wlan/ratectrl.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/wlan/ratectrl11n.h Examining data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/wlan/ratectrl_11n_ln.c FINAL RESULTS: data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/cmnos/cmnos_api.h:173:47: [4] (format) printf: If format strings can be influenced by an attacker, they can be exploited (CWE-134). Use a constant for the format specification. #define A_PRINTF_INIT() A_CMN(printf._printf_init()) data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/cmnos/cmnos_api.h:174:47: [4] (format) printf: If format strings can be influenced by an attacker, they can be exploited (CWE-134). Use a constant for the format specification. #define A_PRINTF A_CMN(printf._printf) data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/cmnos/cmnos_api.h:551:26: [4] (format) printf: If format strings can be influenced by an attacker, they can be exploited (CWE-134). Use a constant for the format specification. struct printf_api printf; data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/hif/usb_api_k2_patch.c:125:19: [4] (format) printf: If format strings can be influenced by an attacker, they can be exploited (CWE-134). Use a constant for the format specification. _indir_tbl.cmnos.printf._printf = save_cmnos_printf; data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/inc/osapi.h:63:57: [4] (format) printf: If format strings can be influenced by an attacker, they can be exploited (CWE-134). Use a constant for the format specification. #define __ATTRIB_PRINTF __attribute__ ((format (printf, 1, 2))) data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/init/app_start.c:147:40: [4] (format) printf: If format strings can be influenced by an attacker, they can be exploited (CWE-134). Use a constant for the format specification. save_cmnos_printf = _indir_tbl.cmnos.printf._printf; data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/init/app_start.c:148:20: [4] (format) printf: If format strings can be influenced by an attacker, they can be exploited (CWE-134). Use a constant for the format specification. _indir_tbl.cmnos.printf._printf = fw_cmnos_printf; data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/adf/adf_os_util_pvt.h:92:3: [2] (buffer) bcopy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. bcopy(&v, dp, len > sizeof(u_int32_t) ? sizeof(u_int32_t) : len); data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/cmnos/dbg_api.c:117:1: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char cmd_buffer[COMMAND_BUFFER_SIZE][DB_MAX_COMMAND_LENGTH]; /* Backup previous command */ data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/cmnos/dbg_api.c:120:1: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char raw_cmd[DB_MAX_COMMAND_LENGTH]; data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/cmnos/dbg_api.c:121:1: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char cmd_str[DB_MAX_COMMAND_LENGTH*4]; data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/cmnos/dbg_api.c:447:2: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char val_str[20]; data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/cmnos/dbg_api.c:448:2: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char addr_str[20]; data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/cmnos/dbg_api.c:489:2: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char val_str[20]; data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/cmnos/dbg_api.c:490:2: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char addr_str[20]; data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/cmnos/k2_fw_cmnos_printf.c:75:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char temp[80]; data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/cmnos/k2_fw_cmnos_printf.c:100:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char buf[sizeof(long)*8]; data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/inc/adf_net_wcmd.h:1447:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char if_name[ADF_NET_WCMD_NAME_SIZE];/**< Iface name*/ data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/inc/osapi.h:39:13: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. typedef char assertion_name[(predicate) ? 1 : -1]; data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/inc/xtensa-elf/xtensa/hal.h:197:14: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. extern const char * const Xthal_cp_names[XTHAL_MAX_CPS]; data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/inc/xtensa-elf/xtensa/hal.h:592:23: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. extern const unsigned char Xthal_intlevel[XTHAL_MAX_INTERRUPTS]; data/open-ath9k-htc-firmware-1.4.0-97-g75b3e59+dfsg/target_firmware/magpie_fw_dev/target/inc/xtensa-elf/xtensa/hal.h:595:23: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. extern const unsigned char Xthal_inttype[XTHAL_MAX_INTERRUPTS]; ANALYSIS SUMMARY: Hits = 22 Lines analyzed = 40616 in approximately 1.12 seconds (36320 lines/second) Physical Source Lines of Code (SLOC) = 23738 Hits@level = [0] 0 [1] 0 [2] 15 [3] 0 [4] 7 [5] 0 Hits@level+ = [0+] 22 [1+] 22 [2+] 22 [3+] 7 [4+] 7 [5+] 0 Hits/KSLOC@level+ = [0+] 0.926784 [1+] 0.926784 [2+] 0.926784 [3+] 0.294886 [4+] 0.294886 [5+] 0 Dot directories skipped = 1 (--followdotdir overrides) Minimum risk level = 1 Not every hit is necessarily a security vulnerability. There may be other security vulnerabilities; review your code! See 'Secure Programming HOWTO' (https://dwheeler.com/secure-programs) for more information.