Flawfinder version 2.0.10, (C) 2001-2019 David A. Wheeler.
Number of rules (primarily dangerous function names) in C/C++ ruleset: 223
Examining data/openjade-1.4devel1/acconfig.h
Examining data/openjade-1.4devel1/config.h
Examining data/openjade-1.4devel1/grove/Node.h
Examining data/openjade-1.4devel1/grove/LocNode.h
Examining data/openjade-1.4devel1/grove/LocNode.cxx
Examining data/openjade-1.4devel1/grove/Node.cxx
Examining data/openjade-1.4devel1/spgrove/GroveApp.cxx
Examining data/openjade-1.4devel1/spgrove/GroveApp.h
Examining data/openjade-1.4devel1/spgrove/GroveBuilder.h
Examining data/openjade-1.4devel1/spgrove/SdNode.cxx
Examining data/openjade-1.4devel1/spgrove/SdNode.h
Examining data/openjade-1.4devel1/spgrove/threads.h
Examining data/openjade-1.4devel1/spgrove/grove_inst.cxx
Examining data/openjade-1.4devel1/spgrove/GroveBuilder.cxx
Examining data/openjade-1.4devel1/spgrove/GroveBuilder.tmp.cxx
Examining data/openjade-1.4devel1/style/Collector.cxx
Examining data/openjade-1.4devel1/style/Collector.h
Examining data/openjade-1.4devel1/style/DssslApp.h
Examining data/openjade-1.4devel1/style/DssslAppMessages.h
Examining data/openjade-1.4devel1/style/ELObjMessageArg.cxx
Examining data/openjade-1.4devel1/style/ELObjMessageArg.h
Examining data/openjade-1.4devel1/style/ELObjPropVal.h
Examining data/openjade-1.4devel1/style/EvalContext.h
Examining data/openjade-1.4devel1/style/Expression.cxx
Examining data/openjade-1.4devel1/style/Expression.h
Examining data/openjade-1.4devel1/style/FOTBuilder.cxx
Examining data/openjade-1.4devel1/style/FOTBuilder.h
Examining data/openjade-1.4devel1/style/GroveManager.cxx
Examining data/openjade-1.4devel1/style/GroveManager.h
Examining data/openjade-1.4devel1/style/InheritedC.cxx
Examining data/openjade-1.4devel1/style/Insn.cxx
Examining data/openjade-1.4devel1/style/Insn.h
Examining data/openjade-1.4devel1/style/Insn2.h
Examining data/openjade-1.4devel1/style/Interpreter.h
Examining data/openjade-1.4devel1/style/InterpreterMessages.cxx
Examining data/openjade-1.4devel1/style/InterpreterMessages.h
Examining data/openjade-1.4devel1/style/LangObj.cxx
Examining data/openjade-1.4devel1/style/LangObj.h
Examining data/openjade-1.4devel1/style/MacroFlowObj.cxx
Examining data/openjade-1.4devel1/style/MacroFlowObj.h
Examining data/openjade-1.4devel1/style/NumberCache.cxx
Examining data/openjade-1.4devel1/style/NumberCache.h
Examining data/openjade-1.4devel1/style/Pattern.cxx
Examining data/openjade-1.4devel1/style/Pattern.h
Examining data/openjade-1.4devel1/style/ProcessContext.h
Examining data/openjade-1.4devel1/style/ProcessingMode.cxx
Examining data/openjade-1.4devel1/style/ProcessingMode.h
Examining data/openjade-1.4devel1/style/SchemeParser.cxx
Examining data/openjade-1.4devel1/style/SchemeParser.h
Examining data/openjade-1.4devel1/style/Style.cxx
Examining data/openjade-1.4devel1/style/Style.h
Examining data/openjade-1.4devel1/style/StyleEngine.cxx
Examining data/openjade-1.4devel1/style/StyleEngine.h
Examining data/openjade-1.4devel1/style/VM.h
Examining data/openjade-1.4devel1/style/charNames.h
Examining data/openjade-1.4devel1/style/charProps.h
Examining data/openjade-1.4devel1/style/dsssl_ns.h
Examining data/openjade-1.4devel1/style/primitive.h
Examining data/openjade-1.4devel1/style/sdata.h
Examining data/openjade-1.4devel1/style/style_inst.cxx
Examining data/openjade-1.4devel1/style/style_pch.h
Examining data/openjade-1.4devel1/style/stylelib.cxx
Examining data/openjade-1.4devel1/style/stylelib.h
Examining data/openjade-1.4devel1/style/TransformationMode.h
Examining data/openjade-1.4devel1/style/TransformationMode.cxx
Examining data/openjade-1.4devel1/style/DocumentGenerator.h
Examining data/openjade-1.4devel1/style/DocumentGenerator.cxx
Examining data/openjade-1.4devel1/style/FlowObj_inst.cxx
Examining data/openjade-1.4devel1/style/primitive_inst.cxx
Examining data/openjade-1.4devel1/style/DssslApp.cxx
Examining data/openjade-1.4devel1/style/DssslSpecEventHandler.cxx
Examining data/openjade-1.4devel1/style/DssslSpecEventHandler.h
Examining data/openjade-1.4devel1/style/ELObj.cxx
Examining data/openjade-1.4devel1/style/ELObj.h
Examining data/openjade-1.4devel1/style/FlowObj.cxx
Examining data/openjade-1.4devel1/style/Interpreter.cxx
Examining data/openjade-1.4devel1/style/MessageModule.cxx
Examining data/openjade-1.4devel1/style/ProcessContext.cxx
Examining data/openjade-1.4devel1/style/SosofoObj.h
Examining data/openjade-1.4devel1/style/primitive.cxx
Examining data/openjade-1.4devel1/jade/jade.cxx
Examining data/openjade-1.4devel1/jade/SgmlFOTBuilder.cxx
Examining data/openjade-1.4devel1/jade/HtmlFOTBuilder.cxx
Examining data/openjade-1.4devel1/jade/MifFOTBuilder.cxx
Examining data/openjade-1.4devel1/jade/SgmlFOTBuilder.h
Examining data/openjade-1.4devel1/jade/RtfFOTBuilder.h
Examining data/openjade-1.4devel1/jade/HtmlFOTBuilder.h
Examining data/openjade-1.4devel1/jade/TeXFOTBuilder.h
Examining data/openjade-1.4devel1/jade/TransformFOTBuilder.h
Examining data/openjade-1.4devel1/jade/MifFOTBuilder.h
Examining data/openjade-1.4devel1/jade/JadeMessages.h
Examining data/openjade-1.4devel1/jade/HtmlMessages.h
Examining data/openjade-1.4devel1/jade/RtfMessages.h
Examining data/openjade-1.4devel1/jade/TeXMessages.h
Examining data/openjade-1.4devel1/jade/MifMessages.h
Examining data/openjade-1.4devel1/jade/TmpOutputByteStream.h
Examining data/openjade-1.4devel1/jade/HtmlFOTBuilder_inst.cxx
Examining data/openjade-1.4devel1/jade/RtfFOTBuilder_inst.cxx
Examining data/openjade-1.4devel1/jade/TransformFOTBuilder_inst.cxx
Examining data/openjade-1.4devel1/jade/MifFOTBuilder_inst.cxx
Examining data/openjade-1.4devel1/jade/RtfOle.cxx
Examining data/openjade-1.4devel1/jade/RtfOle.h
Examining data/openjade-1.4devel1/jade/MessageModule.cxx
Examining data/openjade-1.4devel1/jade/RtfFOTBuilder.cxx
Examining data/openjade-1.4devel1/jade/TeXFOTBuilder.cxx
Examining data/openjade-1.4devel1/jade/TeXFOTBuilder_inst.cxx
Examining data/openjade-1.4devel1/jade/TextFOTBuilder.cxx
Examining data/openjade-1.4devel1/jade/TextFOTBuilder.h
Examining data/openjade-1.4devel1/jade/TransformFOTBuilder.cxx
Examining data/openjade-1.4devel1/intl/gettextP.h
Examining data/openjade-1.4devel1/intl/hash-string.h
Examining data/openjade-1.4devel1/intl/bindtextdom.c
Examining data/openjade-1.4devel1/intl/dcgettext.c
Examining data/openjade-1.4devel1/intl/dgettext.c
Examining data/openjade-1.4devel1/intl/gettext.c
Examining data/openjade-1.4devel1/intl/finddomain.c
Examining data/openjade-1.4devel1/intl/loadmsgcat.c
Examining data/openjade-1.4devel1/intl/localealias.c
Examining data/openjade-1.4devel1/intl/textdomain.c
Examining data/openjade-1.4devel1/intl/intl-compat.c
Examining data/openjade-1.4devel1/intl/cat-compat.c
Examining data/openjade-1.4devel1/intl/gettext.h
Examining data/openjade-1.4devel1/intl/libgettext.h
Examining data/openjade-1.4devel1/po/cat-id-tbl.c
Examining data/openjade-1.4devel1/groveoa/CGroveBuilder.cxx
Examining data/openjade-1.4devel1/groveoa/CGroveBuilder.h
Examining data/openjade-1.4devel1/groveoa/GroveNode.cxx
Examining data/openjade-1.4devel1/groveoa/GroveNode.h
Examining data/openjade-1.4devel1/groveoa/StdAfx.cxx
Examining data/openjade-1.4devel1/groveoa/StdAfx.h
Examining data/openjade-1.4devel1/groveoa/groveoa.cxx
Examining data/openjade-1.4devel1/groveoa/resource.h
FINAL RESULTS:
data/openjade-1.4devel1/intl/cat-compat.c:111:3: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy (new_name, PACKAGE);
data/openjade-1.4devel1/intl/cat-compat.c:117:7: [4] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf.
sprintf (new_name, "%s/%s/LC_MESSAGES/%s.cat", LOCALEDIR, lang,
data/openjade-1.4devel1/intl/dcgettext.c:248:7: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat (dirname, binding->dirname);
data/openjade-1.4devel1/intl/dcgettext.c:267:3: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy (xdomainname, categoryname);
data/openjade-1.4devel1/intl/dcgettext.c:269:3: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat (xdomainname, domainname);
data/openjade-1.4devel1/spgrove/GroveBuilder.tmp.cxx:1680:14: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
extern char *strcpy (char *__restrict __dest, __const char *__restrict __src)
data/openjade-1.4devel1/spgrove/GroveBuilder.tmp.cxx:1687:14: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
extern char *strcat (char *__restrict __dest, __const char *__restrict __src)
data/openjade-1.4devel1/spgrove/GroveBuilder.tmp.cxx:6495:14: [4] (tmpfile) mktemp:
Temporary file race condition (CWE-377).
extern char *mktemp (char *__template) throw ();
data/openjade-1.4devel1/spgrove/GroveBuilder.tmp.cxx:6510:12: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
extern int system (__const char *__command);
data/openjade-1.4devel1/intl/cat-compat.c:28:7: [3] (buffer) getenv:
Environment variables are untrustable input if they can be set by an
attacker. They can have any content and length, and the same variable can
be set more than once (CWE-807, CWE-20). Check environment variables
carefully before using them.
char *getenv ();
data/openjade-1.4devel1/intl/cat-compat.c:84:10: [3] (buffer) getenv:
Environment variables are untrustable input if they can be set by an
attacker. They can have any content and length, and the same variable can
be set more than once (CWE-807, CWE-20). Check environment variables
carefully before using them.
lang = getenv ("LC_ALL");
data/openjade-1.4devel1/intl/cat-compat.c:87:14: [3] (buffer) getenv:
Environment variables are untrustable input if they can be set by an
attacker. They can have any content and length, and the same variable can
be set more than once (CWE-807, CWE-20). Check environment variables
carefully before using them.
lang = getenv ("LC_MESSAGES");
data/openjade-1.4devel1/intl/cat-compat.c:89:9: [3] (buffer) getenv:
Environment variables are untrustable input if they can be set by an
attacker. They can have any content and length, and the same variable can
be set more than once (CWE-807, CWE-20). Check environment variables
carefully before using them.
lang = getenv ("LANG");
data/openjade-1.4devel1/intl/cat-compat.c:159:13: [3] (buffer) getenv:
Environment variables are untrustable input if they can be set by an
attacker. They can have any content and length, and the same variable can
be set more than once (CWE-807, CWE-20). Check environment variables
carefully before using them.
old_val = getenv ("NLSPATH");
data/openjade-1.4devel1/intl/dcgettext.c:48:7: [3] (buffer) getenv:
Environment variables are untrustable input if they can be set by an
attacker. They can have any content and length, and the same variable can
be set more than once (CWE-807, CWE-20). Check environment variables
carefully before using them.
char *getenv ();
data/openjade-1.4devel1/intl/dcgettext.c:91:7: [3] (buffer) getwd:
This does not protect against buffer overflows by itself, so use with
caution (CWE-120, CWE-20). Use getcwd instead.
char *getwd ();
data/openjade-1.4devel1/intl/dcgettext.c:92:27: [3] (buffer) getwd:
This does not protect against buffer overflows by itself, so use with
caution (CWE-120, CWE-20). Use getcwd instead.
# define getcwd(buf, max) getwd (buf)
data/openjade-1.4devel1/intl/dcgettext.c:493:12: [3] (buffer) getenv:
Environment variables are untrustable input if they can be set by an
attacker. They can have any content and length, and the same variable can
be set more than once (CWE-807, CWE-20). Check environment variables
carefully before using them.
retval = getenv ("LANGUAGE");
data/openjade-1.4devel1/intl/dcgettext.c:504:12: [3] (buffer) getenv:
Environment variables are untrustable input if they can be set by an
attacker. They can have any content and length, and the same variable can
be set more than once (CWE-807, CWE-20). Check environment variables
carefully before using them.
retval = getenv ("LC_ALL");
data/openjade-1.4devel1/intl/dcgettext.c:509:12: [3] (buffer) getenv:
Environment variables are untrustable input if they can be set by an
attacker. They can have any content and length, and the same variable can
be set more than once (CWE-807, CWE-20). Check environment variables
carefully before using them.
retval = getenv (categoryname);
data/openjade-1.4devel1/intl/dcgettext.c:514:12: [3] (buffer) getenv:
Environment variables are untrustable input if they can be set by an
attacker. They can have any content and length, and the same variable can
be set more than once (CWE-807, CWE-20). Check environment variables
carefully before using them.
retval = getenv ("LANG");
data/openjade-1.4devel1/intl/localealias.c:45:7: [3] (buffer) getenv:
Environment variables are untrustable input if they can be set by an
attacker. They can have any content and length, and the same variable can
be set more than once (CWE-807, CWE-20). Check environment variables
carefully before using them.
char *getenv ();
data/openjade-1.4devel1/spgrove/GroveBuilder.tmp.cxx:1924:14: [3] (random) strfry:
This function is not sufficiently random for security-related functions
such as key and nonce creation (CWE-327). Use a more secure technique for
acquiring random values.
extern char *strfry (char *__string) throw ();
data/openjade-1.4devel1/spgrove/GroveBuilder.tmp.cxx:6244:17: [3] (random) random:
This function is not sufficiently random for security-related functions
such as key and nonce creation (CWE-327). Use a more secure technique for
acquiring random values.
extern long int random (void) throw ();
data/openjade-1.4devel1/spgrove/GroveBuilder.tmp.cxx:6247:13: [3] (random) srandom:
This function is not sufficiently random for security-related functions
such as key and nonce creation (CWE-327). Use a more secure technique for
acquiring random values.
extern void srandom (unsigned int __seed) throw ();
data/openjade-1.4devel1/spgrove/GroveBuilder.tmp.cxx:6258:14: [3] (random) setstate:
This function is not sufficiently random for security-related functions
such as key and nonce creation (CWE-327). Use a more secure technique for
acquiring random values.
extern char *setstate (char *__statebuf) throw ();
data/openjade-1.4devel1/spgrove/GroveBuilder.tmp.cxx:6296:13: [3] (random) srand:
This function is not sufficiently random for security-related functions
such as key and nonce creation (CWE-327). Use a more secure technique for
acquiring random values.
extern void srand (unsigned int __seed) throw ();
data/openjade-1.4devel1/spgrove/GroveBuilder.tmp.cxx:6309:15: [3] (random) drand48:
This function is not sufficiently random for security-related functions
such as key and nonce creation (CWE-327). Use a more secure technique for
acquiring random values.
extern double drand48 (void) throw ();
data/openjade-1.4devel1/spgrove/GroveBuilder.tmp.cxx:6310:15: [3] (random) erand48:
This function is not sufficiently random for security-related functions
such as key and nonce creation (CWE-327). Use a more secure technique for
acquiring random values.
extern double erand48 (unsigned short int __xsubi[3]) throw ();
data/openjade-1.4devel1/spgrove/GroveBuilder.tmp.cxx:6313:17: [3] (random) lrand48:
This function is not sufficiently random for security-related functions
such as key and nonce creation (CWE-327). Use a more secure technique for
acquiring random values.
extern long int lrand48 (void) throw ();
data/openjade-1.4devel1/spgrove/GroveBuilder.tmp.cxx:6314:17: [3] (random) nrand48:
This function is not sufficiently random for security-related functions
such as key and nonce creation (CWE-327). Use a more secure technique for
acquiring random values.
extern long int nrand48 (unsigned short int __xsubi[3]) throw ();
data/openjade-1.4devel1/spgrove/GroveBuilder.tmp.cxx:6317:17: [3] (random) mrand48:
This function is not sufficiently random for security-related functions
such as key and nonce creation (CWE-327). Use a more secure technique for
acquiring random values.
extern long int mrand48 (void) throw ();
data/openjade-1.4devel1/spgrove/GroveBuilder.tmp.cxx:6318:17: [3] (random) jrand48:
This function is not sufficiently random for security-related functions
such as key and nonce creation (CWE-327). Use a more secure technique for
acquiring random values.
extern long int jrand48 (unsigned short int __xsubi[3]) throw ();
data/openjade-1.4devel1/spgrove/GroveBuilder.tmp.cxx:6322:28: [3] (random) seed48:
This function is not sufficiently random for security-related functions
such as key and nonce creation (CWE-327). Use a more secure technique for
acquiring random values.
extern unsigned short int *seed48 (unsigned short int __seed16v[3]) throw ();
data/openjade-1.4devel1/spgrove/GroveBuilder.tmp.cxx:6323:13: [3] (random) lcong48:
This function is not sufficiently random for security-related functions
such as key and nonce creation (CWE-327). Use a more secure technique for
acquiring random values.
extern void lcong48 (unsigned short int __param[7]) throw ();
data/openjade-1.4devel1/spgrove/GroveBuilder.tmp.cxx:6465:14: [3] (buffer) getenv:
Environment variables are untrustable input if they can be set by an
attacker. They can have any content and length, and the same variable can
be set more than once (CWE-807, CWE-20). Check environment variables
carefully before using them.
extern char *getenv (__const char *__name) throw ();
data/openjade-1.4devel1/spgrove/GroveBuilder.tmp.cxx:6520:14: [3] (buffer) realpath:
This function does not protect against buffer overflows, and some
implementations can overflow internally (CWE-120/CWE-785!). Ensure that the
destination buffer is at least of size MAXPATHLEN, andto protect against
implementation problems, the input argument should also be checked to
ensure it is no larger than MAXPATHLEN.
extern char *realpath (__const char *__restrict __name,
data/openjade-1.4devel1/spgrove/threads.h:69:15: [3] (misc) EnterCriticalSection:
On some versions of Windows, exceptions can be thrown in low-memory
situations. Use InitializeCriticalSectionAndSpinCount instead.
if (mp) EnterCriticalSection(&mp->cs_);
data/openjade-1.4devel1/spgrove/threads.h:78:5: [3] (misc) InitializeCriticalSection:
Exceptions can be thrown in low-memory situations. Use
InitializeCriticalSectionAndSpinCount instead.
InitializeCriticalSection(&cs_);
data/openjade-1.4devel1/groveoa/GroveNode.cxx:464:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(p, chunk.data(), chunk.size()*sizeof(*p));
data/openjade-1.4devel1/intl/bindtextdom.c:110:4: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy (new_dirname, dirname, len);
data/openjade-1.4devel1/intl/bindtextdom.c:132:7: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy (new_binding->domainname, domainname, len);
data/openjade-1.4devel1/intl/bindtextdom.c:142:4: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy (new_binding->dirname, dirname, len);
data/openjade-1.4devel1/intl/dcgettext.c:270:3: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat (xdomainname, ".mo");
data/openjade-1.4devel1/intl/finddomain.c:188:7: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy (locale, alias_value, len);
data/openjade-1.4devel1/intl/loadmsgcat.c:48:10: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
# define open __open
data/openjade-1.4devel1/intl/loadmsgcat.c:86:8: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
fd = open (domain->filename, O_RDONLY);
data/openjade-1.4devel1/intl/localealias.c:156:3: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy (full_fname, fname, fname_len);
data/openjade-1.4devel1/intl/localealias.c:157:3: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy (&full_fname[fname_len], aliasfile, sizeof aliasfile);
data/openjade-1.4devel1/intl/localealias.c:159:8: [2] (misc) fopen:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
fp = fopen (full_fname, "r");
data/openjade-1.4devel1/intl/localealias.c:171:7: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char buf[BUFSIZ];
data/openjade-1.4devel1/intl/localealias.c:227:8: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy (tp, alias, len);
data/openjade-1.4devel1/intl/localealias.c:234:8: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy (tp, value, len);
data/openjade-1.4devel1/intl/localealias.c:279:3: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy (new_map, map, nmap * sizeof (struct alias_map));
data/openjade-1.4devel1/intl/textdomain.c:84:2: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy (cp, domainname, len);
data/openjade-1.4devel1/jade/HtmlFOTBuilder.cxx:471:13: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
if (!file.open(filename.data())) {
data/openjade-1.4devel1/jade/HtmlFOTBuilder.cxx:520:18: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
static const char *styleNames[3] = {
data/openjade-1.4devel1/jade/HtmlFOTBuilder.cxx:531:18: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
static const char *textTransformNames[4] = {
data/openjade-1.4devel1/jade/HtmlFOTBuilder.cxx:569:18: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
static const char *alignNames[4] = {
data/openjade-1.4devel1/jade/HtmlFOTBuilder.cxx:585:3: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char buf[32];
data/openjade-1.4devel1/jade/HtmlFOTBuilder.cxx:586:3: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(buf, "%04ld", long(n));
data/openjade-1.4devel1/jade/HtmlFOTBuilder.cxx:595:3: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(buf, "pt");
data/openjade-1.4devel1/jade/HtmlFOTBuilder.cxx:1047:13: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
if (!file.open(filename.data())) {
data/openjade-1.4devel1/jade/HtmlFOTBuilder.cxx:1181:3: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char buf[32];
data/openjade-1.4devel1/jade/HtmlFOTBuilder.cxx:1182:3: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(buf, "%u", index);
data/openjade-1.4devel1/jade/MifFOTBuilder.cxx:1196:9: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char buf[32];
data/openjade-1.4devel1/jade/MifFOTBuilder.cxx:1197:9: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf( buf, "%.6f", p );
data/openjade-1.4devel1/jade/MifFOTBuilder.cxx:1202:9: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char buf[32];
data/openjade-1.4devel1/jade/MifFOTBuilder.cxx:1204:9: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf( buf, "%li.%.3i%n", long(d)/1000, abs(long(d)%1000), &i );
data/openjade-1.4devel1/jade/MifFOTBuilder.cxx:3552:40: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
Owner<InputSource> in(EntityManager->open(systemId,
data/openjade-1.4devel1/jade/MifFOTBuilder.cxx:4625:17: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy( byteDestPtr, s, bytesCopiedNum );
data/openjade-1.4devel1/jade/MifFOTBuilder.cxx:4701:5: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char buf[32];
data/openjade-1.4devel1/jade/MifFOTBuilder.cxx:4703:9: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf( buf, "NODE%lu.", groveIndex );
data/openjade-1.4devel1/jade/MifFOTBuilder.cxx:4709:9: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf( buf, "NODE%lu.%lu", groveIndex, elementIndex );
data/openjade-1.4devel1/jade/MifFOTBuilder.cxx:4828:5: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char colorTag[64];
data/openjade-1.4devel1/jade/MifFOTBuilder.cxx:4830:5: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf( colorTag, "RGB-%i-%i-%i", int( red ), int( green ), int( blue ) );
data/openjade-1.4devel1/jade/MifFOTBuilder.cxx:4893:9: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char keyStr[ 48 ];
data/openjade-1.4devel1/jade/MifFOTBuilder.cxx:4894:9: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf( keyStr, "Ruling-%li-%li-%li-%li-",
data/openjade-1.4devel1/jade/MifFOTBuilder.cxx:5649:17: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
if( outFile.open( fileLoc.data() ) ) {
data/openjade-1.4devel1/jade/MifFOTBuilder.cxx:5748:9: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char idxStr[32];
data/openjade-1.4devel1/jade/MifFOTBuilder.cxx:5751:13: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf( idxStr, "%u", i+1 );
data/openjade-1.4devel1/jade/MifFOTBuilder.cxx:5760:22: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
if( bookFile.open( bookFileLoc.data() ) ) {
data/openjade-1.4devel1/jade/RtfFOTBuilder.cxx:2607:41: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
Owner<InputSource> in(entityManager_->open(systemId,
data/openjade-1.4devel1/jade/RtfOle.cxx:225:13: [2] (buffer) MultiByteToWideChar:
Requires maximum length in CHARACTERS, not bytes (CWE-120).
int n = ::MultiByteToWideChar(CP_ACP, 0, mb, -1, 0, 0);
data/openjade-1.4devel1/jade/RtfOle.cxx:227:5: [2] (buffer) MultiByteToWideChar:
Requires maximum length in CHARACTERS, not bytes (CWE-120).
::MultiByteToWideChar(CP_ACP, 0, mb, -1, &w[0], n);
data/openjade-1.4devel1/jade/SgmlFOTBuilder.cxx:398:3: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char buf[128];
data/openjade-1.4devel1/jade/SgmlFOTBuilder.cxx:399:3: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(buf, "%g", d);
data/openjade-1.4devel1/jade/SgmlFOTBuilder.cxx:405:3: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char buf[32];
data/openjade-1.4devel1/jade/SgmlFOTBuilder.cxx:406:3: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(buf, "%03d", u.n);
data/openjade-1.4devel1/jade/SgmlFOTBuilder.cxx:423:3: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
strcpy(buf + i, "pt");
data/openjade-1.4devel1/jade/SgmlFOTBuilder.cxx:438:5: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char buf[128];
data/openjade-1.4devel1/jade/SgmlFOTBuilder.cxx:439:5: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(buf, "%.2f%%", ls.displaySizeFactor * 100.0);
data/openjade-1.4devel1/jade/SgmlFOTBuilder.cxx:456:5: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char buf[128];
data/openjade-1.4devel1/jade/SgmlFOTBuilder.cxx:460:7: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(buf, "%.2f%%", ls.displaySizeFactor * 100.0);
data/openjade-1.4devel1/jade/SgmlFOTBuilder.cxx:467:7: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(buf, "%.2f*", ls.tableUnitFactor);
data/openjade-1.4devel1/jade/TeXFOTBuilder.cxx:485:18: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
virtual void open( TeXFOTBuilder &builder );
data/openjade-1.4devel1/jade/TeXFOTBuilder.cxx:537:18: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
virtual void open( TeXFOTBuilder &builder )
data/openjade-1.4devel1/jade/TeXFOTBuilder.cxx:538:21: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
{ FotElement::open( builder ); builder.pushOs( &PreContent ); };
data/openjade-1.4devel1/jade/TeXFOTBuilder.cxx:690:18: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
virtual void open( TeXFOTBuilder &builder )
data/openjade-1.4devel1/jade/TeXFOTBuilder.cxx:692:28: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
CompoundFotElement::open( builder );
data/openjade-1.4devel1/jade/TeXFOTBuilder.cxx:801:18: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
virtual void open( TeXFOTBuilder &builder )
data/openjade-1.4devel1/jade/TeXFOTBuilder.cxx:803:28: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
CompoundFotElement::open( builder );
data/openjade-1.4devel1/jade/TeXFOTBuilder.cxx:1006:3: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char buf[32];
data/openjade-1.4devel1/jade/TeXFOTBuilder.cxx:1008:3: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf( buf, "%li.%.3i%n", long(length.l)/1000, abs(long(length.l)%1000), &i );
data/openjade-1.4devel1/jade/TeXFOTBuilder.cxx:1017:33: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
void TeXFOTBuilder::FotElement::open( TeXFOTBuilder &builder ) {
data/openjade-1.4devel1/jade/TeXFOTBuilder.cxx:1558:5: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char color_buf[32];
data/openjade-1.4devel1/jade/TeXFOTBuilder.cxx:1564:7: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf( color_buf, "{%.2f, %.2f, %.2f}", r, g, b );
data/openjade-1.4devel1/jade/TeXFOTBuilder.cxx:1869:3: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char buf[64];
data/openjade-1.4devel1/jade/TeXFOTBuilder.cxx:1870:3: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(buf, "%g", d);
data/openjade-1.4devel1/jade/TeXFOTBuilder.cxx:2485:14: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
curTable().open( *this);
data/openjade-1.4devel1/jade/TeXFOTBuilder.cxx:2497:29: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
curTable().curTablePart().open( *this );
data/openjade-1.4devel1/jade/TeXFOTBuilder.cxx:2579:36: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
curTable().TableParts.back().open( *this );
data/openjade-1.4devel1/jade/TeXFOTBuilder.cxx:2608:31: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
curTable().curRows().back().open( *this );
data/openjade-1.4devel1/jade/TeXFOTBuilder.cxx:2694:8: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
cell.open( *this );
data/openjade-1.4devel1/jade/TmpOutputByteStream.h:20:5: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char buf[bufSize];
data/openjade-1.4devel1/jade/TransformFOTBuilder.cxx:241:3: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char RE_[2];
data/openjade-1.4devel1/jade/TransformFOTBuilder.cxx:242:3: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char SP_[2];
data/openjade-1.4devel1/jade/TransformFOTBuilder.cxx:501:18: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
if (!ofp->fb.open(filename.data())) {
data/openjade-1.4devel1/jade/jade.cxx:161:22: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
if (!outputFile_.open(outputFilename_.data())) {
data/openjade-1.4devel1/spgrove/GroveBuilder.cxx:2229:6: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy((Char *)(chunk + 1) + chunk->size,
data/openjade-1.4devel1/spgrove/GroveBuilder.cxx:2239:6: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(chunk + 1, event.data(), dataLen * sizeof(Char));
data/openjade-1.4devel1/spgrove/GroveBuilder.cxx:2570:43: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
for (const ParentChunk *open = origin_; open; open = open->origin)
data/openjade-1.4devel1/spgrove/GroveBuilder.cxx:3557:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(chunk + 1, event.data(), dataLen * sizeof(Char));
data/openjade-1.4devel1/spgrove/GroveBuilder.tmp.cxx:1636:14: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
extern void *memcpy (void *__restrict __dest,
data/openjade-1.4devel1/spgrove/GroveBuilder.tmp.cxx:1725:9: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
const char *__names[13];
data/openjade-1.4devel1/spgrove/GroveBuilder.tmp.cxx:1846:13: [2] (buffer) bcopy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
extern void bcopy (__const void *__src, void *__dest, size_t __n) throw ();
data/openjade-1.4devel1/spgrove/GroveBuilder.tmp.cxx:2079:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(p, ptr_, size_*sizeof(T));
data/openjade-1.4devel1/spgrove/GroveBuilder.tmp.cxx:2262:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(ptr_, ptr, length*sizeof(T));
data/openjade-1.4devel1/spgrove/GroveBuilder.tmp.cxx:2280:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(ptr_, s.ptr_, length_*sizeof(T));
data/openjade-1.4devel1/spgrove/GroveBuilder.tmp.cxx:2296:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(ptr_, s.ptr_, s.length_*sizeof(T));
data/openjade-1.4devel1/spgrove/GroveBuilder.tmp.cxx:2310:3: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(ptr_ + i, s.ptr_, s.length_*sizeof(T));
data/openjade-1.4devel1/spgrove/GroveBuilder.tmp.cxx:2319:3: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(ptr_ + length_, p, length*sizeof(T));
data/openjade-1.4devel1/spgrove/GroveBuilder.tmp.cxx:2333:3: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(s, ptr_, length_*sizeof(T));
data/openjade-1.4devel1/spgrove/GroveBuilder.tmp.cxx:2383:7: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(ptr_, oldPtr, length_*sizeof(T));
data/openjade-1.4devel1/spgrove/GroveBuilder.tmp.cxx:2530:19: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
enum Position { open, close };
data/openjade-1.4devel1/spgrove/GroveBuilder.tmp.cxx:5476:12: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
extern int atoi (__const char *__nptr) throw () __attribute__ ((__pure__));
data/openjade-1.4devel1/spgrove/GroveBuilder.tmp.cxx:5478:17: [2] (integer) atol:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
extern long int atol (__const char *__nptr) throw () __attribute__ ((__pure__));
data/openjade-1.4devel1/spgrove/GroveBuilder.tmp.cxx:5693:1: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
atoi (__const char *__nptr) throw ()
data/openjade-1.4devel1/spgrove/GroveBuilder.tmp.cxx:5698:1: [2] (integer) atol:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
atol (__const char *__nptr) throw ()
data/openjade-1.4devel1/spgrove/GroveBuilder.tmp.cxx:6149:3: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char __padding[48 - sizeof (struct _pthread_fastlock)
data/openjade-1.4devel1/spgrove/GroveBuilder.tmp.cxx:6497:12: [2] (tmpfile) mkstemp:
Potential for temporary file vulnerability in some circumstances. Some
older Unix-like systems create temp files with permission to write by all
by default, so be sure to set the umask to override this. Also, some older
Unix systems might fail to use O_EXCL when opening the file, so make sure
that O_EXCL is used by the library (CWE-377).
extern int mkstemp (char *__template);
data/openjade-1.4devel1/spgrove/GroveBuilder.tmp.cxx:8716:24: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
virtual InputSource *open(const StringC &sysid,
data/openjade-1.4devel1/spgrove/GroveBuilder.tmp.cxx:9729:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(p, ptr_, size_*sizeof(T));
data/openjade-1.4devel1/spgrove/GroveBuilder.tmp.cxx:13749:23: [2] (obsolete) ssignal:
These functions are considered obsolete on most systems, and very
non-portable (Linux-based systems handle them radically different,
basically if gsignal/ssignal were the same as raise/signal respectively,
while System V considers them a separate set and obsolete) (CWE-676).
Switch to raise/signal, or some other signalling approach.
extern __sighandler_t ssignal (int __sig, __sighandler_t __handler) throw ();
data/openjade-1.4devel1/spgrove/GroveBuilder.tmp.cxx:13750:12: [2] (obsolete) gsignal:
These functions are considered obsolete on most systems, and very
non-portable (Linux-based systems handle them radically different,
basically if gsignal/ssignal were the same as raise/signal respectively,
while System V considers them a separate set and obsolete) (CWE-676).
Switch to raise/signal, or some other signalling approach.
extern int gsignal (int __sig) throw ();
data/openjade-1.4devel1/spgrove/GroveBuilder.tmp.cxx:14143:16: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
extern __const char *__const _sys_siglist[65];
data/openjade-1.4devel1/spgrove/GroveBuilder.tmp.cxx:14144:16: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
extern __const char *__const sys_siglist[65];
data/openjade-1.4devel1/spgrove/GroveBuilder.tmp.cxx:14641:11: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
Boolean open(const char *);
data/openjade-1.4devel1/spgrove/GroveBuilder.tmp.cxx:14777:8: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
void open(OutputByteStream *, const OutputCodingSystem *);
data/openjade-1.4devel1/spgrove/GroveBuilder.tmp.cxx:17307:6: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy((Char *)(chunk + 1) + chunk->size,
data/openjade-1.4devel1/spgrove/GroveBuilder.tmp.cxx:17317:6: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(chunk + 1, event.data(), dataLen * sizeof(Char));
data/openjade-1.4devel1/spgrove/GroveBuilder.tmp.cxx:17648:43: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
for (const ParentChunk *open = origin_; open; open = open->origin)
data/openjade-1.4devel1/spgrove/GroveBuilder.tmp.cxx:18635:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(chunk + 1, event.data(), dataLen * sizeof(Char));
data/openjade-1.4devel1/style/DssslApp.cxx:565:42: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
Owner<InputSource> in(entityManager()->open(sysid,
data/openjade-1.4devel1/style/DssslSpecEventHandler.cxx:577:38: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
in = eh.parser_->entityManager().open(sysid, *eh.charset_, InputSourceOrigin::make(),
data/openjade-1.4devel1/style/ELObj.cxx:636:3: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char buf[64];
data/openjade-1.4devel1/style/ELObj.cxx:700:3: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char buf[1024];
data/openjade-1.4devel1/style/ELObj.cxx:701:3: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(buf, "%g", n_);
data/openjade-1.4devel1/style/ELObj.cxx:741:3: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char buf[1024];
data/openjade-1.4devel1/style/ELObj.cxx:742:3: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(buf, "%gpt", n_ * 72.0/interp.unitsPerInch());
data/openjade-1.4devel1/style/ELObj.cxx:776:3: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char buf[1024];
data/openjade-1.4devel1/style/ELObj.cxx:777:3: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(buf, "%gpt%d", val_ * pow(72.0/interp.unitsPerInch(), double(dim_)),
data/openjade-1.4devel1/style/FOTBuilder.cxx:551:42: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
void FOTBuilder::startFence(FOTBuilder *&open, FOTBuilder *&close)
data/openjade-1.4devel1/style/FOTBuilder.cxx:1708:46: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
void SaveFOTBuilder::startFence(FOTBuilder *&open, FOTBuilder *&close)
data/openjade-1.4devel1/style/FOTBuilder.cxx:1710:31: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
*tail_ = new StartFenceCall(open, close);
data/openjade-1.4devel1/style/FOTBuilder.cxx:1863:8: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
o = &open;
data/openjade-1.4devel1/style/FOTBuilder.cxx:1871:3: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
open.emit(*o);
data/openjade-1.4devel1/style/FOTBuilder.cxx:2166:48: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
void SerialFOTBuilder::startFence(FOTBuilder *&open, FOTBuilder *&close)
data/openjade-1.4devel1/style/FOTBuilder.h:470:40: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
virtual void startFence(FOTBuilder *&open, FOTBuilder *&close);
data/openjade-1.4devel1/style/FOTBuilder.h:824:32: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
void startFence(FOTBuilder *&open, FOTBuilder *&close);
data/openjade-1.4devel1/style/FOTBuilder.h:1164:31: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
StartFenceCall(FOTBuilder *&open, FOTBuilder *&close);
data/openjade-1.4devel1/style/FOTBuilder.h:1167:18: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
SaveFOTBuilder open;
data/openjade-1.4devel1/style/FOTBuilder.h:1246:32: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
void startFence(FOTBuilder *&open, FOTBuilder *&close);
data/openjade-1.4devel1/style/Insn.cxx:74:3: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(newStack, sbase, (sp - sbase)*sizeof(ELObj *));
data/openjade-1.4devel1/style/LangObj.cxx:30:19: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
return (char *) memcpy ((char *) malloc (sizeof (char) * l), s, l);
data/openjade-1.4devel1/style/Style.cxx:412:11: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
unsigned char c[3];
data/openjade-1.4devel1/style/Style.cxx:758:12: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
unsigned char c[3];
data/openjade-1.4devel1/style/Style.cxx:835:12: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
unsigned char c[3];
data/openjade-1.4devel1/style/StyleEngine.cxx:188:21: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
if (outputFile_.open("jade-grove.out")) {
data/openjade-1.4devel1/style/primitive.cxx:1633:3: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char buf[64];
data/openjade-1.4devel1/style/primitive.cxx:1634:3: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(buf, "%04d-%02d-%02dT%02d:%02d:%02d",
data/openjade-1.4devel1/style/primitive.cxx:2007:3: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char buf[32];
data/openjade-1.4devel1/style/primitive.cxx:2008:3: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(buf, "%ld", n);
data/openjade-1.4devel1/style/primitive.cxx:5323:3: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char buf[100];
data/openjade-1.4devel1/groveoa/GroveNode.cxx:174:39: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
BSTR tem = ::SysAllocStringLen(0, strlen(s));
data/openjade-1.4devel1/intl/bindtextdom.c:105:17: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
size_t len = strlen (dirname) + 1;
data/openjade-1.4devel1/intl/bindtextdom.c:128:13: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
len = strlen (domainname) + 1;
data/openjade-1.4devel1/intl/bindtextdom.c:138:10: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
len = strlen (dirname) + 1;
data/openjade-1.4devel1/intl/cat-compat.c:103:47: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
new_name_len = sizeof (LOCALEDIR) - 1 + 1 + strlen (lang)
data/openjade-1.4devel1/intl/cat-compat.c:156:43: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
new_val_len = sizeof ("NLSPATH=") - 1 + strlen (dirname)
data/openjade-1.4devel1/intl/cat-compat.c:167:20: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
new_val_len += strlen (old_val);
data/openjade-1.4devel1/intl/dcgettext.c:218:28: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
size_t dirname_len = strlen (binding->dirname) + 1;
data/openjade-1.4devel1/intl/dcgettext.c:247:7: [1] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant character.
strcat (dirname, "/");
data/openjade-1.4devel1/intl/dcgettext.c:256:34: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
xdomainname = (char *) alloca (strlen (categoryname)
data/openjade-1.4devel1/intl/dcgettext.c:257:8: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
+ strlen (domainname) + 5);
data/openjade-1.4devel1/intl/dcgettext.c:268:3: [1] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant character.
strcat (xdomainname, "/");
data/openjade-1.4devel1/intl/dcgettext.c:274:36: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
single_locale = (char *) alloca (strlen (categoryvalue) + 1);
data/openjade-1.4devel1/intl/dcgettext.c:359:24: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
nls_uint32 len = strlen (msgid);
data/openjade-1.4devel1/intl/finddomain.c:183:20: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
size_t len = strlen (alias_value) + 1;
data/openjade-1.4devel1/intl/finddomain.c:364:35: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
filename = (char *) malloc (strlen (dirname) + 1
data/openjade-1.4devel1/intl/finddomain.c:365:9: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
+ strlen (language)
data/openjade-1.4devel1/intl/finddomain.c:367:12: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
? strlen (territory) : 0)
data/openjade-1.4devel1/intl/finddomain.c:369:12: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
? strlen (codeset) : 0)
data/openjade-1.4devel1/intl/finddomain.c:371:10: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
strlen (modifier) : 0)
data/openjade-1.4devel1/intl/finddomain.c:373:12: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
? strlen (special) : 0)
data/openjade-1.4devel1/intl/finddomain.c:375:12: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
? strlen (sponsor) : 0)
data/openjade-1.4devel1/intl/finddomain.c:377:12: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
? strlen (revision) : 0) + 1
data/openjade-1.4devel1/intl/finddomain.c:378:9: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
+ strlen (domain) + 1);
data/openjade-1.4devel1/intl/loadmsgcat.c:50:10: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
# define read __read
data/openjade-1.4devel1/intl/loadmsgcat.c:129:29: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
long int nb = (long int) read (fd, read_ptr, to_read);
data/openjade-1.4devel1/intl/localealias.c:223:14: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
len = strlen (alias) + 1;
data/openjade-1.4devel1/intl/localealias.c:230:14: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
len = strlen (value) + 1;
data/openjade-1.4devel1/intl/textdomain.c:81:20: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
size_t len = strlen (domainname) + 1;
data/openjade-1.4devel1/jade/MifFOTBuilder.cxx:122:56: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
T_string( const char *cS ) : String<char>( cS, strlen( cS ) ) {};
data/openjade-1.4devel1/jade/MifFOTBuilder.cxx:2258:52: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
targetString->append( out.str, strlen( out.str ) );
data/openjade-1.4devel1/jade/MifFOTBuilder.cxx:4896:31: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
r.Key.assign( keyStr, strlen( keyStr ) );
data/openjade-1.4devel1/jade/SgmlFOTBuilder.cxx:407:13: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
int len = strlen(buf);
data/openjade-1.4devel1/jade/TeXFOTBuilder.cxx:1567:7: [1] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant character.
strcpy( color_buf, "");
data/openjade-1.4devel1/spgrove/GroveBuilder.tmp.cxx:1683:14: [1] (buffer) strncpy:
Easily used incorrectly; doesn't always \0-terminate or check for invalid
pointers [MS-banned] (CWE-120).
extern char *strncpy (char *__restrict __dest,
data/openjade-1.4devel1/spgrove/GroveBuilder.tmp.cxx:1690:14: [1] (buffer) strncat:
Easily used incorrectly (e.g., incorrectly computing the correct maximum
size to add) [MS-banned] (CWE-120). Consider strcat_s, strlcat, snprintf,
or automatically resizing strings.
extern char *strncat (char *__restrict __dest, __const char *__restrict __src,
data/openjade-1.4devel1/spgrove/GroveBuilder.tmp.cxx:1819:15: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
extern size_t strlen (__const char *__s) throw () __attribute__ ((__pure__));
data/openjade-1.4devel1/style/DssslApp.cxx:295:18: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
size_t len = strlen(pis[i].key);
data/openjade-1.4devel1/style/ELObj.cxx:341:15: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
return p && equal(*p->car(), *car()) && equal(*p->cdr(), *cdr());
data/openjade-1.4devel1/style/ELObj.cxx:341:43: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
return p && equal(*p->car(), *car()) && equal(*p->cdr(), *cdr());
data/openjade-1.4devel1/style/ELObj.cxx:466:10: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
if (!equal(*(*this)[i], *(*v)[i]))
data/openjade-1.4devel1/style/ELObj.h:105:15: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
static bool equal(ELObj &, ELObj &);
data/openjade-1.4devel1/style/ELObj.h:571:13: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
bool ELObj::equal(ELObj &obj1, ELObj &obj2)
data/openjade-1.4devel1/style/Interpreter.cxx:1151:6: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
bool equal(const Char *s1, const char *s2, size_t n)
data/openjade-1.4devel1/style/Interpreter.cxx:1182:11: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
if (equal(s, "no", n))
data/openjade-1.4devel1/style/Interpreter.cxx:1186:11: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
if (equal(s, "yes", n))
data/openjade-1.4devel1/style/Interpreter.cxx:1190:11: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
if (equal(s, "true", n))
data/openjade-1.4devel1/style/Interpreter.cxx:1194:11: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
if (equal(s, "false", n))
data/openjade-1.4devel1/style/LangObj.cxx:29:14: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
size_t l = strlen(s) + 1;
data/openjade-1.4devel1/style/primitive.cxx:237:14: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
if (ELObj::equal(*argv[0], *argv[1]))
data/openjade-1.4devel1/style/primitive.cxx:377:16: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
if (ELObj::equal(*argv[0], *tem->car()))
data/openjade-1.4devel1/style/primitive.cxx:2014:16: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
size_t len = strlen(p);
data/openjade-1.4devel1/style/primitive.cxx:4887:18: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
if (ELObj::equal(*car->car(), *argv[0]))
ANALYSIS SUMMARY:
Hits = 237
Lines analyzed = 107156 in approximately 2.04 seconds (52561 lines/second)
Physical Source Lines of Code (SLOC) = 92027
Hits@level = [0] 2 [1] 53 [2] 145 [3] 30 [4] 9 [5] 0
Hits@level+ = [0+] 239 [1+] 237 [2+] 184 [3+] 39 [4+] 9 [5+] 0
Hits/KSLOC@level+ = [0+] 2.59706 [1+] 2.57533 [2+] 1.99941 [3+] 0.423789 [4+] 0.0977974 [5+] 0
Minimum risk level = 1
Not every hit is necessarily a security vulnerability.
There may be other security vulnerabilities; review your code!
See 'Secure Programming HOWTO'
(https://dwheeler.com/secure-programs) for more information.