Flawfinder version 2.0.10, (C) 2001-2019 David A. Wheeler. Number of rules (primarily dangerous function names) in C/C++ ruleset: 223 Examining data/pd-fftease-2.5.2.git20121005/MSPd.h Examining data/pd-fftease-2.5.2.git20121005/PenroseOscil.c Examining data/pd-fftease-2.5.2.git20121005/PenroseOscil.h Examining data/pd-fftease-2.5.2.git20121005/PenroseRand.c Examining data/pd-fftease-2.5.2.git20121005/PenroseRand.h Examining data/pd-fftease-2.5.2.git20121005/bloscbank.c Examining data/pd-fftease-2.5.2.git20121005/bthresher~.c Examining data/pd-fftease-2.5.2.git20121005/burrow~.c Examining data/pd-fftease-2.5.2.git20121005/cavoc27~.c Examining data/pd-fftease-2.5.2.git20121005/cavoc~.c Examining data/pd-fftease-2.5.2.git20121005/centerring~.c Examining data/pd-fftease-2.5.2.git20121005/codepend~.c Examining data/pd-fftease-2.5.2.git20121005/convert.c Examining data/pd-fftease-2.5.2.git20121005/crossx~.c Examining data/pd-fftease-2.5.2.git20121005/dentist~.c Examining data/pd-fftease-2.5.2.git20121005/disarrain~.c Examining data/pd-fftease-2.5.2.git20121005/disarray~.c Examining data/pd-fftease-2.5.2.git20121005/drown~.c Examining data/pd-fftease-2.5.2.git20121005/ether~.c Examining data/pd-fftease-2.5.2.git20121005/fft.c Examining data/pd-fftease-2.5.2.git20121005/fft4.c Examining data/pd-fftease-2.5.2.git20121005/fftease.h Examining data/pd-fftease-2.5.2.git20121005/fftease_setup.c Examining data/pd-fftease-2.5.2.git20121005/fold.c Examining data/pd-fftease-2.5.2.git20121005/leaker~.c Examining data/pd-fftease-2.5.2.git20121005/leanconvert.c Examining data/pd-fftease-2.5.2.git20121005/leanunconvert.c Examining data/pd-fftease-2.5.2.git20121005/limit_fftsize.c Examining data/pd-fftease-2.5.2.git20121005/makewindows.c Examining data/pd-fftease-2.5.2.git20121005/mindwarp~.c Examining data/pd-fftease-2.5.2.git20121005/morphine~.c Examining data/pd-fftease-2.5.2.git20121005/multyq~.c Examining data/pd-fftease-2.5.2.git20121005/overlapadd.c Examining data/pd-fftease-2.5.2.git20121005/power_of_two.c Examining data/pd-fftease-2.5.2.git20121005/presidency~.c Examining data/pd-fftease-2.5.2.git20121005/pvcompand~.c Examining data/pd-fftease-2.5.2.git20121005/pvgrain~.c Examining data/pd-fftease-2.5.2.git20121005/pvharm~.c Examining data/pd-fftease-2.5.2.git20121005/pvoc~.c Examining data/pd-fftease-2.5.2.git20121005/pvtuner.h Examining data/pd-fftease-2.5.2.git20121005/pvtuner~.c Examining data/pd-fftease-2.5.2.git20121005/pvwarp~.c Examining data/pd-fftease-2.5.2.git20121005/qsortE.c Examining data/pd-fftease-2.5.2.git20121005/reanimator~.c Examining data/pd-fftease-2.5.2.git20121005/resent~.c Examining data/pd-fftease-2.5.2.git20121005/residency_buffer~.c Examining data/pd-fftease-2.5.2.git20121005/residency~.c Examining data/pd-fftease-2.5.2.git20121005/scrape~.c Examining data/pd-fftease-2.5.2.git20121005/shapee~.c Examining data/pd-fftease-2.5.2.git20121005/swinger~.c Examining data/pd-fftease-2.5.2.git20121005/taint~.c Examining data/pd-fftease-2.5.2.git20121005/thresher~.c Examining data/pd-fftease-2.5.2.git20121005/unconvert.c Examining data/pd-fftease-2.5.2.git20121005/vacancy~.c Examining data/pd-fftease-2.5.2.git20121005/xsyn~.c FINAL RESULTS: data/pd-fftease-2.5.2.git20121005/cavoc27~.c:399:4: [3] (random) srand: This function is not sufficiently random for security-related functions such as key and nonce creation (CWE-327). Use a more secure technique for acquiring random values. srand(time(0)); data/pd-fftease-2.5.2.git20121005/cavoc~.c:328:4: [3] (random) srand: This function is not sufficiently random for security-related functions such as key and nonce creation (CWE-327). Use a more secure technique for acquiring random values. srand(time(0)); data/pd-fftease-2.5.2.git20121005/disarrain~.c:368:3: [3] (random) srand: This function is not sufficiently random for security-related functions such as key and nonce creation (CWE-327). Use a more secure technique for acquiring random values. srand(time(0)); data/pd-fftease-2.5.2.git20121005/disarray~.c:228:5: [3] (random) srand: This function is not sufficiently random for security-related functions such as key and nonce creation (CWE-327). Use a more secure technique for acquiring random values. srand( time( 0 ) ); data/pd-fftease-2.5.2.git20121005/pvwarp~.c:447:4: [3] (random) srand: This function is not sufficiently random for security-related functions such as key and nonce creation (CWE-327). Use a more secure technique for acquiring random values. srand(clock()); data/pd-fftease-2.5.2.git20121005/resent~.c:494:3: [3] (random) srand: This function is not sufficiently random for security-related functions such as key and nonce creation (CWE-327). Use a more secure technique for acquiring random values. srand(clock()); data/pd-fftease-2.5.2.git20121005/bthresher~.c:247:12: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. case 0:sprintf(dst,"(signal) Input");break; data/pd-fftease-2.5.2.git20121005/bthresher~.c:248:12: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. case 1:sprintf(dst,"(signal/float) Threshold Scalar");break; data/pd-fftease-2.5.2.git20121005/bthresher~.c:249:12: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. case 2:sprintf(dst,"(signal/float) Damping Factor Scalar");break; data/pd-fftease-2.5.2.git20121005/bthresher~.c:253:12: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. case 0:sprintf(dst,"(signal) Output");break; data/pd-fftease-2.5.2.git20121005/bthresher~.c:254:12: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. case 1:sprintf(dst,"(list) Current State");break; data/pd-fftease-2.5.2.git20121005/burrow~.c:205:14: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. case 0: sprintf(dst,"(signal) Source Sound"); break; data/pd-fftease-2.5.2.git20121005/burrow~.c:206:11: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. case 1: sprintf(dst,"(signal) Burrow Filtering Sound"); break; data/pd-fftease-2.5.2.git20121005/burrow~.c:207:11: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. case 2: sprintf(dst,"(signal/float) Filter Threshold"); break; data/pd-fftease-2.5.2.git20121005/burrow~.c:208:11: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. case 3: sprintf(dst,"(signal/float) Filter Multiplier"); break; data/pd-fftease-2.5.2.git20121005/burrow~.c:214:7: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(dst,"(signal) Output"); data/pd-fftease-2.5.2.git20121005/cavoc27~.c:288:7: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(dst,"unused(signal)"); data/pd-fftease-2.5.2.git20121005/cavoc27~.c:294:7: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(dst,"output(signal)"); break; data/pd-fftease-2.5.2.git20121005/cavoc~.c:264:14: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. case 0: sprintf(dst,"(signal) Trigger");break; data/pd-fftease-2.5.2.git20121005/cavoc~.c:268:13: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. case 0:sprintf(dst,"(signal) Output"); break; data/pd-fftease-2.5.2.git20121005/centerring~.c:172:15: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. case 0: sprintf(dst,"(signal) Input"); data/pd-fftease-2.5.2.git20121005/centerring~.c:175:15: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. case 1: sprintf(dst,"(signal/float) Base Modulation Frequency"); data/pd-fftease-2.5.2.git20121005/centerring~.c:178:12: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. case 2: sprintf(dst,"(signal/float) Frequency Deviation Bandwidth"); data/pd-fftease-2.5.2.git20121005/centerring~.c:181:12: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. case 3: sprintf(dst,"(signal/float) Frequency Deviation Constant"); data/pd-fftease-2.5.2.git20121005/centerring~.c:189:7: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(dst,"(signal) Output"); data/pd-fftease-2.5.2.git20121005/codepend~.c:232:14: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. case 0: sprintf(dst,"(signal) Input One");break; data/pd-fftease-2.5.2.git20121005/codepend~.c:233:14: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. case 1: sprintf(dst,"(signal) Input Two"); break; data/pd-fftease-2.5.2.git20121005/codepend~.c:234:14: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. case 2: sprintf(dst,"(signal/float) Scaling Exponent"); break; data/pd-fftease-2.5.2.git20121005/codepend~.c:235:14: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. case 3: sprintf(dst,"(signal/float) Inverse Threshold"); break; data/pd-fftease-2.5.2.git20121005/codepend~.c:242:7: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(dst,"(signal) Output"); data/pd-fftease-2.5.2.git20121005/crossx~.c:126:7: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(dst,"(signal) Driver Sound"); data/pd-fftease-2.5.2.git20121005/crossx~.c:129:7: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(dst,"(signal) Filter Sound"); data/pd-fftease-2.5.2.git20121005/crossx~.c:132:7: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(dst,"(float/signal) Cross Synthesis Threshold"); data/pd-fftease-2.5.2.git20121005/crossx~.c:137:5: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(dst,"(signal) Output"); data/pd-fftease-2.5.2.git20121005/dentist~.c:221:7: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(dst,"(signal) Input "); data/pd-fftease-2.5.2.git20121005/dentist~.c:226:13: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. case 0: sprintf(dst,"(signal) Output"); break; data/pd-fftease-2.5.2.git20121005/dentist~.c:227:13: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. case 1: sprintf(dst,"(signal) Interpolation Sync"); break; data/pd-fftease-2.5.2.git20121005/dentist~.c:228:13: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. case 2: sprintf(dst,"(list) Current Selected Bins"); break; data/pd-fftease-2.5.2.git20121005/disarrain~.c:339:13: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. case 0: sprintf(dst,"(signal) Input"); break; data/pd-fftease-2.5.2.git20121005/disarrain~.c:343:13: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. case 0: sprintf(dst,"(signal) Output"); break; data/pd-fftease-2.5.2.git20121005/disarrain~.c:344:13: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. case 1: sprintf(dst,"(signal) Interpolation Sync"); break; data/pd-fftease-2.5.2.git20121005/disarrain~.c:345:13: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. case 2: sprintf(dst,"(list) Current State"); break; data/pd-fftease-2.5.2.git20121005/disarray~.c:200:12: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. case 0: sprintf(dst,"(signal) Input "); break; data/pd-fftease-2.5.2.git20121005/disarray~.c:204:12: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. case 0: sprintf(dst,"(signal) Output "); break; data/pd-fftease-2.5.2.git20121005/disarray~.c:205:12: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. case 1: sprintf(dst,"(list) Current State "); break; data/pd-fftease-2.5.2.git20121005/drown~.c:173:13: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. case 0: sprintf(dst,"(signal) Input"); break; data/pd-fftease-2.5.2.git20121005/drown~.c:174:13: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. case 1: sprintf(dst,"(signal/float) Threshold Generator"); break; data/pd-fftease-2.5.2.git20121005/drown~.c:175:13: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. case 2: sprintf(dst,"(signal/float) Multiplier for Weak Bins"); break; data/pd-fftease-2.5.2.git20121005/drown~.c:178:5: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(dst,"(signal) Output"); data/pd-fftease-2.5.2.git20121005/ether~.c:127:15: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. case 0: sprintf(dst,"(signal) Input One");break; data/pd-fftease-2.5.2.git20121005/ether~.c:128:15: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. case 1: sprintf(dst,"(signal) Input Two"); break; data/pd-fftease-2.5.2.git20121005/ether~.c:129:15: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. case 2: sprintf(dst,"(signal) Composite Index"); break; data/pd-fftease-2.5.2.git20121005/ether~.c:136:7: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(dst,"(signal) Output"); data/pd-fftease-2.5.2.git20121005/leaker~.c:228:13: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. case 0: sprintf(dst,"(signal) Input 1");break; data/pd-fftease-2.5.2.git20121005/leaker~.c:229:13: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. case 1: sprintf(dst,"(signal) Input 2");break; data/pd-fftease-2.5.2.git20121005/leaker~.c:230:13: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. case 2: sprintf(dst,"(signal/float) Crossfade Position (0.0 - 1.0)");break; data/pd-fftease-2.5.2.git20121005/leaker~.c:233:5: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(dst,"(signal) Output "); data/pd-fftease-2.5.2.git20121005/mindwarp~.c:151:15: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. case 0: sprintf(dst,"(signal) Formant Input"); data/pd-fftease-2.5.2.git20121005/mindwarp~.c:154:15: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. case 1: sprintf(dst,"(signal/float) Warp Factor"); data/pd-fftease-2.5.2.git20121005/mindwarp~.c:157:12: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. case 2: sprintf(dst,"(signal/float) Shape Width"); data/pd-fftease-2.5.2.git20121005/mindwarp~.c:165:7: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(dst,"(signal) Mindwarp Output"); data/pd-fftease-2.5.2.git20121005/morphine~.c:162:15: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. case 0: sprintf(dst,"(signal) Input One"); break; data/pd-fftease-2.5.2.git20121005/morphine~.c:163:15: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. case 1: sprintf(dst,"(signal) Input Two"); break; data/pd-fftease-2.5.2.git20121005/morphine~.c:164:15: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. case 2: sprintf(dst,"(signal/float) Morph Index"); break; data/pd-fftease-2.5.2.git20121005/morphine~.c:171:7: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(dst,"(signal) output"); data/pd-fftease-2.5.2.git20121005/multyq~.c:687:13: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. case 0: sprintf(dst,"(signal) Input"); break; data/pd-fftease-2.5.2.git20121005/multyq~.c:688:13: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. case 1: sprintf(dst,"(signal/float) Cf1");break; data/pd-fftease-2.5.2.git20121005/multyq~.c:689:13: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. case 2: sprintf(dst,"(signal/float) Bw1"); break; data/pd-fftease-2.5.2.git20121005/multyq~.c:690:13: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. case 3: sprintf(dst,"(signal/float) Gain1"); break; data/pd-fftease-2.5.2.git20121005/multyq~.c:691:13: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. case 4: sprintf(dst,"(signal/float) Cf2"); break; data/pd-fftease-2.5.2.git20121005/multyq~.c:692:13: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. case 5: sprintf(dst,"(signal/float) Bw2"); break; data/pd-fftease-2.5.2.git20121005/multyq~.c:693:13: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. case 6: sprintf(dst,"(signal/float) Gain2"); break; data/pd-fftease-2.5.2.git20121005/multyq~.c:694:13: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. case 7: sprintf(dst,"(signal/float) Cf3"); break; data/pd-fftease-2.5.2.git20121005/multyq~.c:695:13: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. case 8: sprintf(dst,"(signal/float) Bw3"); break; data/pd-fftease-2.5.2.git20121005/multyq~.c:696:13: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. case 9: sprintf(dst,"(signal/float) Gain3"); break; data/pd-fftease-2.5.2.git20121005/multyq~.c:697:14: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. case 10: sprintf(dst,"(signal/float) Cf4"); break; data/pd-fftease-2.5.2.git20121005/multyq~.c:698:14: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. case 11: sprintf(dst,"(signal/float) Bw4"); break; data/pd-fftease-2.5.2.git20121005/multyq~.c:699:14: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. case 12: sprintf(dst,"(signal/float) Gain4"); break; data/pd-fftease-2.5.2.git20121005/multyq~.c:702:5: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(dst,"(signal) Output"); data/pd-fftease-2.5.2.git20121005/presidency~.c:749:13: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. case 0: sprintf(dst,"(signal) Input"); break; data/pd-fftease-2.5.2.git20121005/presidency~.c:750:13: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. case 1: sprintf(dst,"(signal/float) Frame Increment"); break; data/pd-fftease-2.5.2.git20121005/presidency~.c:751:13: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. case 2: sprintf(dst,"(signal/float) Frame Position [0-1]"); break; data/pd-fftease-2.5.2.git20121005/presidency~.c:752:12: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. case 3: sprintf(dst,"(signal/float) Transposition Factor"); break; data/pd-fftease-2.5.2.git20121005/presidency~.c:756:13: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. case 0: sprintf(dst,"(signal) Output"); break; data/pd-fftease-2.5.2.git20121005/presidency~.c:757:13: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. case 1: sprintf(dst,"(signal/float) Record Sync"); break; data/pd-fftease-2.5.2.git20121005/pvcompand~.c:152:7: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(dst,"(signal) Input"); data/pd-fftease-2.5.2.git20121005/pvcompand~.c:155:7: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(dst,"(float/signal) Threshold"); data/pd-fftease-2.5.2.git20121005/pvcompand~.c:160:5: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(dst,"(signal) Output"); data/pd-fftease-2.5.2.git20121005/pvgrain~.c:235:7: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(dst,"(signal) Input"); data/pd-fftease-2.5.2.git20121005/pvgrain~.c:240:5: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(dst,"(list) Amplitude/Frequency Pairs"); data/pd-fftease-2.5.2.git20121005/pvharm~.c:172:12: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. case 0: sprintf(dst,"(signal) Input"); break; data/pd-fftease-2.5.2.git20121005/pvharm~.c:173:12: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. case 1: sprintf(dst,"(signal/float) Pitch Multiplier 1"); break; data/pd-fftease-2.5.2.git20121005/pvharm~.c:174:12: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. case 2: sprintf(dst,"(signal/float) Pitch Multiplier 2"); break; data/pd-fftease-2.5.2.git20121005/pvharm~.c:175:12: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. case 3: sprintf(dst,"(signal/float) Synthesis Threshold"); break; data/pd-fftease-2.5.2.git20121005/pvharm~.c:178:3: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(dst,"(signal) Output"); data/pd-fftease-2.5.2.git20121005/pvoc~.c:197:12: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. case 0: sprintf(dst,"(signal) Input"); break; data/pd-fftease-2.5.2.git20121005/pvoc~.c:198:12: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. case 1: sprintf(dst,"(signal/float) Pitch Modification Factor"); break; data/pd-fftease-2.5.2.git20121005/pvoc~.c:199:12: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. case 2: sprintf(dst,"(signal/float) Synthesis Threshold"); break; data/pd-fftease-2.5.2.git20121005/pvoc~.c:202:3: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(dst,"(signal) Output"); data/pd-fftease-2.5.2.git20121005/pvtuner~.c:385:14: [2] (misc) fopen: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if( ! (fp = fopen( filename->s_name, "r")) ){ data/pd-fftease-2.5.2.git20121005/pvtuner~.c:672:5: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(dst,"(signal) Input"); data/pd-fftease-2.5.2.git20121005/pvtuner~.c:675:5: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(dst,"(signal/float) Pitch Modification Factor"); data/pd-fftease-2.5.2.git20121005/pvtuner~.c:678:5: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(dst,"(signal/float) Synthesis Threshold"); data/pd-fftease-2.5.2.git20121005/pvtuner~.c:682:3: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(dst,"(signal) Output"); data/pd-fftease-2.5.2.git20121005/pvwarp~.c:362:5: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(dst,"(signal) Input "); data/pd-fftease-2.5.2.git20121005/pvwarp~.c:365:5: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(dst,"(signal/float) Center Frequency 1"); data/pd-fftease-2.5.2.git20121005/pvwarp~.c:368:5: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(dst,"(signal/float) Bandwidth Factor 1"); data/pd-fftease-2.5.2.git20121005/pvwarp~.c:371:5: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(dst,"(signal/float) Warp Factor 1"); data/pd-fftease-2.5.2.git20121005/pvwarp~.c:374:5: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(dst,"(signal/float) Center Frequency 2"); data/pd-fftease-2.5.2.git20121005/pvwarp~.c:377:5: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(dst,"(signal/float) Bandwidth Factor 2"); data/pd-fftease-2.5.2.git20121005/pvwarp~.c:380:5: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(dst,"(signal/float) Warp Factor 2"); data/pd-fftease-2.5.2.git20121005/pvwarp~.c:383:5: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(dst,"(signal/float) Function Offset (0.0-1.0) "); data/pd-fftease-2.5.2.git20121005/pvwarp~.c:386:5: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(dst,"(signal/float) Pitch Factor"); data/pd-fftease-2.5.2.git20121005/pvwarp~.c:389:5: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(dst,"(signal/float) Synthesis Gate Value"); data/pd-fftease-2.5.2.git20121005/pvwarp~.c:394:3: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(dst,"(signal) Output"); data/pd-fftease-2.5.2.git20121005/reanimator~.c:237:5: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(dst,"(signal) Driver Sound "); data/pd-fftease-2.5.2.git20121005/reanimator~.c:240:5: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(dst,"(signal) Texture Sound"); data/pd-fftease-2.5.2.git20121005/reanimator~.c:247:5: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(dst,"(signal) Output"); data/pd-fftease-2.5.2.git20121005/reanimator~.c:250:5: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(dst,"(signal) Matched Frame"); data/pd-fftease-2.5.2.git20121005/reanimator~.c:253:5: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(dst,"(signal) Sync"); data/pd-fftease-2.5.2.git20121005/resent~.c:354:7: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(dst,"(signal/bang) Input, Sample Trigger"); data/pd-fftease-2.5.2.git20121005/resent~.c:360:7: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(dst,"(signal) Output "); data/pd-fftease-2.5.2.git20121005/resent~.c:363:7: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(dst,"(signal) Recording Sync"); data/pd-fftease-2.5.2.git20121005/residency_buffer~.c:174:5: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(dst,"(signal/bang) Input, Sampling Trigger"); data/pd-fftease-2.5.2.git20121005/residency_buffer~.c:177:5: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(dst,"(signal/float) Frame Increment"); data/pd-fftease-2.5.2.git20121005/residency_buffer~.c:180:5: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(dst,"(signal/float) Frame Position [0-1]"); data/pd-fftease-2.5.2.git20121005/residency_buffer~.c:186:12: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. case 1: sprintf(dst,"(signal) Output"); break; data/pd-fftease-2.5.2.git20121005/residency_buffer~.c:187:12: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. case 2: sprintf(dst,"(signal) Record Sync"); break; data/pd-fftease-2.5.2.git20121005/residency~.c:581:12: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. case 0: sprintf(dst,"(signal/bang) Input, Sampling Trigger"); break; data/pd-fftease-2.5.2.git20121005/residency~.c:582:12: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. case 1: sprintf(dst,"(signal/float) Frame Increment");break; data/pd-fftease-2.5.2.git20121005/residency~.c:583:11: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. case 2:sprintf(dst,"(signal/float) Frame Position [0-1]");break; data/pd-fftease-2.5.2.git20121005/residency~.c:588:12: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. case 0: sprintf(dst,"(signal) Output"); break; data/pd-fftease-2.5.2.git20121005/residency~.c:589:12: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. case 1: sprintf(dst,"(signal) Recording Sync"); break; data/pd-fftease-2.5.2.git20121005/scrape~.c:133:12: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. case 0: sprintf(dst,"(signal) Input ");break; data/pd-fftease-2.5.2.git20121005/scrape~.c:134:12: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. case 1: sprintf(dst,"(float/signal) Knee Frequency"); break; data/pd-fftease-2.5.2.git20121005/scrape~.c:135:12: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. case 2: sprintf(dst,"(float/signal) Cutoff Frequency"); break; data/pd-fftease-2.5.2.git20121005/scrape~.c:136:12: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. case 3: sprintf(dst,"(float/signal) Knee Threshold"); break; data/pd-fftease-2.5.2.git20121005/scrape~.c:137:12: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. case 4: sprintf(dst,"(float/signal) Cutoff Threshold"); break; data/pd-fftease-2.5.2.git20121005/scrape~.c:138:12: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. case 5: sprintf(dst,"(float/signal) Multiplier For Weak Bins"); break; data/pd-fftease-2.5.2.git20121005/scrape~.c:141:3: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(dst,"(signal) Output"); data/pd-fftease-2.5.2.git20121005/shapee~.c:123:15: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. case 0: sprintf(dst,"(signal) Frequency Reference");break; data/pd-fftease-2.5.2.git20121005/shapee~.c:124:15: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. case 1: sprintf(dst,"(signal) Amplitude Reference");break; data/pd-fftease-2.5.2.git20121005/shapee~.c:125:14: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. case 2: sprintf(dst,"(signal/float) Shape Width"); break; data/pd-fftease-2.5.2.git20121005/shapee~.c:132:7: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(dst,"(signal) Output"); data/pd-fftease-2.5.2.git20121005/swinger~.c:123:13: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. case 0: sprintf(dst,"(signal) Signal to be Phase Replaced "); data/pd-fftease-2.5.2.git20121005/swinger~.c:126:13: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. case 1: sprintf(dst,"(signal) Signal to Supply Phase Information "); data/pd-fftease-2.5.2.git20121005/swinger~.c:134:4: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(dst,"(signal) Swinger Output"); data/pd-fftease-2.5.2.git20121005/taint~.c:229:13: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. case 0: sprintf(dst,"(signal) Input One");break; data/pd-fftease-2.5.2.git20121005/taint~.c:230:13: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. case 1: sprintf(dst,"(signal) Input Two"); break; data/pd-fftease-2.5.2.git20121005/taint~.c:231:13: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. case 2: sprintf(dst,"(signal/float) Scaling Exponent"); break; data/pd-fftease-2.5.2.git20121005/taint~.c:232:13: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. case 3: sprintf(dst,"(signal/float) Inverse Threshold"); break; data/pd-fftease-2.5.2.git20121005/taint~.c:239:4: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(dst,"(signal) Output"); data/pd-fftease-2.5.2.git20121005/thresher~.c:185:5: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(dst,"(signal) Input"); data/pd-fftease-2.5.2.git20121005/thresher~.c:188:5: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(dst,"(signal/float) Threshold"); data/pd-fftease-2.5.2.git20121005/thresher~.c:191:5: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(dst,"(signal/float) Damping Factor"); data/pd-fftease-2.5.2.git20121005/thresher~.c:195:3: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(dst,"(signal) Output"); data/pd-fftease-2.5.2.git20121005/vacancy~.c:156:15: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. case 0: sprintf(dst,"(signal) Input One"); break; data/pd-fftease-2.5.2.git20121005/vacancy~.c:157:15: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. case 1: sprintf(dst,"(signal) Input Two"); break; data/pd-fftease-2.5.2.git20121005/vacancy~.c:158:15: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. case 2: sprintf(dst,"(signal) Mixing Threshold"); break; data/pd-fftease-2.5.2.git20121005/vacancy~.c:165:7: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(dst,"(signal) Output"); data/pd-fftease-2.5.2.git20121005/xsyn~.c:174:5: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(dst,"(signal) Input 1 "); data/pd-fftease-2.5.2.git20121005/xsyn~.c:177:5: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(dst,"(signal) Input 2 "); data/pd-fftease-2.5.2.git20121005/xsyn~.c:181:3: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(dst,"(signal) Output "); ANALYSIS SUMMARY: Hits = 163 Lines analyzed = 21937 in approximately 0.55 seconds (40150 lines/second) Physical Source Lines of Code (SLOC) = 17797 Hits@level = [0] 2 [1] 0 [2] 157 [3] 6 [4] 0 [5] 0 Hits@level+ = [0+] 165 [1+] 163 [2+] 163 [3+] 6 [4+] 0 [5+] 0 Hits/KSLOC@level+ = [0+] 9.27123 [1+] 9.15885 [2+] 9.15885 [3+] 0.337135 [4+] 0 [5+] 0 Dot directories skipped = 1 (--followdotdir overrides) Minimum risk level = 1 Not every hit is necessarily a security vulnerability. There may be other security vulnerabilities; review your code! See 'Secure Programming HOWTO' (https://dwheeler.com/secure-programs) for more information.