Flawfinder version 2.0.10, (C) 2001-2019 David A. Wheeler.
Number of rules (primarily dangerous function names) in C/C++ ruleset: 223
Examining data/pt2-clone-1.18+ds/pt_pal_editor/src/main.c
Examining data/pt2-clone-1.18+ds/pt_pal_editor/src/palette.c
Examining data/pt2-clone-1.18+ds/pt_pal_editor/src/gui.c
Examining data/pt2-clone-1.18+ds/pt_pal_editor/src/unicode.h
Examining data/pt2-clone-1.18+ds/pt_pal_editor/src/palette.h
Examining data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c
Parsing failed to find end of parameter list; semicolon terminated it in (aoResultHexRGB, "#%02hx%02hx%02hx",
#else
sprintf(aoResultHexRGB, "#%02hhx%02hhx%02hhx",
#endif
aRGB[0], aRGB[1], aRGB[2]);
Examining data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.h
Examining data/pt2-clone-1.18+ds/pt_pal_editor/src/unicode.c
Examining data/pt2-clone-1.18+ds/pt_pal_editor/src/gui.h
Examining data/pt2-clone-1.18+ds/pt_pal_editor/src/gfx/gfx_font.c
Examining data/pt2-clone-1.18+ds/pt_pal_editor/src/gfx/gfx_visuals.c
Examining data/pt2-clone-1.18+ds/pt_pal_editor/src/gfx/gfx_songname.c
Examining data/pt2-clone-1.18+ds/pt_pal_editor/src/gfx/gfx_diskop.c
Examining data/pt2-clone-1.18+ds/pt_pal_editor/src/gfx/gfx_patterneditor.c
Examining data/pt2-clone-1.18+ds/pt_pal_editor/src/gfx/gfx_misc.c
Examining data/pt2-clone-1.18+ds/pt_pal_editor/src/gfx/gfx_sampler.c
Examining data/pt2-clone-1.18+ds/pt_pal_editor/src/gfx/gfx_spectrum.c
Examining data/pt2-clone-1.18+ds/pt_pal_editor/src/config.h
Examining data/pt2-clone-1.18+ds/pt_pal_editor/src/config.c
Examining data/pt2-clone-1.18+ds/src/pt2_sampler.c
Examining data/pt2-clone-1.18+ds/src/pt2_mouse.h
Examining data/pt2-clone-1.18+ds/src/pt2_module_loader.c
Examining data/pt2-clone-1.18+ds/src/pt2_tables.c
Examining data/pt2-clone-1.18+ds/src/pt2_sampler.h
Examining data/pt2-clone-1.18+ds/src/pt2_visuals.c
Examining data/pt2-clone-1.18+ds/src/pt2_scopes.h
Examining data/pt2-clone-1.18+ds/src/pt2_main.c
Examining data/pt2-clone-1.18+ds/src/pt2_module_saver.c
Examining data/pt2-clone-1.18+ds/src/pt2_structs.c
Examining data/pt2-clone-1.18+ds/src/pt2_mod2wav.h
Examining data/pt2-clone-1.18+ds/src/pt2_helpers.h
Examining data/pt2-clone-1.18+ds/src/pt2_keyboard.h
Examining data/pt2-clone-1.18+ds/src/pt2_diskop.h
Examining data/pt2-clone-1.18+ds/src/pt2_pattern_viewer.h
Examining data/pt2-clone-1.18+ds/src/pt2_audio.c
Examining data/pt2-clone-1.18+ds/src/pt2_textout.h
Examining data/pt2-clone-1.18+ds/src/pt2_sample_saver.c
Examining data/pt2-clone-1.18+ds/src/pt2_sync.c
Examining data/pt2-clone-1.18+ds/src/pt2_structs.h
Examining data/pt2-clone-1.18+ds/src/pt2_sample_saver.h
Examining data/pt2-clone-1.18+ds/src/pt2_unicode.c
Examining data/pt2-clone-1.18+ds/src/pt2_replayer.c
Examining data/pt2-clone-1.18+ds/src/pt2_audio.h
Examining data/pt2-clone-1.18+ds/src/pt2_config.h
Examining data/pt2-clone-1.18+ds/src/pt2_module_saver.h
Examining data/pt2-clone-1.18+ds/src/pt2_sample_loader.h
Examining data/pt2-clone-1.18+ds/src/pt2_module_loader.h
Examining data/pt2-clone-1.18+ds/src/pt2_palette.c
Examining data/pt2-clone-1.18+ds/src/pt2_sinc.h
Examining data/pt2-clone-1.18+ds/src/pt2_sample_loader.c
Examining data/pt2-clone-1.18+ds/src/pt2_sync.h
Examining data/pt2-clone-1.18+ds/src/pt2_header.h
Examining data/pt2-clone-1.18+ds/src/pt2_unicode.h
Examining data/pt2-clone-1.18+ds/src/pt2_mod2wav.c
Examining data/pt2-clone-1.18+ds/src/pt2_pattern_viewer.c
Examining data/pt2-clone-1.18+ds/src/pt2_pat2smp.h
Examining data/pt2-clone-1.18+ds/src/pt2_blep.h
Examining data/pt2-clone-1.18+ds/src/pt2_textout.c
Examining data/pt2-clone-1.18+ds/src/pt2_tables.h
Examining data/pt2-clone-1.18+ds/src/gfx/pt2_gfx_patcursor.c
Examining data/pt2-clone-1.18+ds/src/gfx/pt2_gfx_sampler.c
Examining data/pt2-clone-1.18+ds/src/gfx/pt2_gfx_tracker.c
Examining data/pt2-clone-1.18+ds/src/gfx/pt2_gfx_pat2smp_dialog.c
Examining data/pt2-clone-1.18+ds/src/gfx/pt2_gfx_editop.c
Examining data/pt2-clone-1.18+ds/src/gfx/pt2_gfx_spectrum.c
Examining data/pt2-clone-1.18+ds/src/gfx/pt2_gfx_aboutscreen.c
Examining data/pt2-clone-1.18+ds/src/gfx/pt2_gfx_arrow.c
Examining data/pt2-clone-1.18+ds/src/gfx/pt2_gfx_mute_buttons.c
Examining data/pt2-clone-1.18+ds/src/gfx/pt2_gfx_font.c
Examining data/pt2-clone-1.18+ds/src/gfx/pt2_gfx_clear.c
Examining data/pt2-clone-1.18+ds/src/gfx/pt2_gfx_diskop.c
Examining data/pt2-clone-1.18+ds/src/gfx/pt2_gfx_yes_no_dialog.c
Examining data/pt2-clone-1.18+ds/src/gfx/pt2_gfx_loop_pins.c
Examining data/pt2-clone-1.18+ds/src/gfx/pt2_gfx_posed.c
Examining data/pt2-clone-1.18+ds/src/gfx/pt2_gfx_pointer.c
Examining data/pt2-clone-1.18+ds/src/gfx/pt2_gfx_mod2wav.c
Examining data/pt2-clone-1.18+ds/src/gfx/pt2_gfx_vumeter.c
Examining data/pt2-clone-1.18+ds/src/gfx/pt2_gfx_icon.c
Examining data/pt2-clone-1.18+ds/src/gfx/bmp/bmp2pth.c
Examining data/pt2-clone-1.18+ds/src/pt2_scopes.c
Examining data/pt2-clone-1.18+ds/src/pt2_sinc.c
Examining data/pt2-clone-1.18+ds/src/pt2_visuals.h
Examining data/pt2-clone-1.18+ds/src/pt2_config.c
Examining data/pt2-clone-1.18+ds/src/pt2_edit.h
Examining data/pt2-clone-1.18+ds/src/pt2_bmp.c
Examining data/pt2-clone-1.18+ds/src/pt2_pat2smp.c
Examining data/pt2-clone-1.18+ds/src/pt2_sampling.c
Examining data/pt2-clone-1.18+ds/src/pt2_edit.c
Examining data/pt2-clone-1.18+ds/src/pt2_diskop.c
Examining data/pt2-clone-1.18+ds/src/pt2_sampling.h
Examining data/pt2-clone-1.18+ds/src/pt2_mouse.c
Examining data/pt2-clone-1.18+ds/src/pt2_helpers.c
Examining data/pt2-clone-1.18+ds/src/pt2_blep.c
Examining data/pt2-clone-1.18+ds/src/pt2_palette.h
Examining data/pt2-clone-1.18+ds/src/pt2_bmp.h
Examining data/pt2-clone-1.18+ds/src/pt2_keyboard.c
FINAL RESULTS:
data/pt2-clone-1.18+ds/pt_pal_editor/src/main.c:156:2: [4] (format) vsnprintf:
If format strings can be influenced by an attacker, they can be exploited,
and note that sprintf variations do not always \0-terminate (CWE-134). Use
a constant for the format specification.
vsnprintf(strBuf, sizeof (strBuf), fmt, args);
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:252:25: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(aoDestination, lTmp + 1);
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:256:25: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(aoDestination, aSource);
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:274:25: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat( lastcar , SLASH ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:288:25: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(lColorChannel, aHexRGB ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:347:17: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy( aoDestination , aSource ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:359:17: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat( aoDestination , lNewSubStr ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:362:9: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat( aoDestination , p ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:566:25: [4] (buffer) wcscpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using a function version that stops copying at the end
of the buffer.
wcscpy(aoDestination, lTmp + 1);
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:570:25: [4] (buffer) wcscpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using a function version that stops copying at the end
of the buffer.
wcscpy(aoDestination, aSource);
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:589:25: [4] (buffer) wcscpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using a function version that stops copying at the end
of the buffer.
wcscpy(lColorChannel, aHexRGB);
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:616:25: [4] (format) swprintf:
Potential format string problem (CWE-134). Make format string constant.
swprintf(aoResultHexRGB,
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:1030:17: [4] (buffer) wcscat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120).
wcscat(lDialogString, aTitle);
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:1036:17: [4] (buffer) wcscat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120).
wcscat(lDialogString, aMessage);
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:1042:17: [4] (buffer) wcscat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120).
wcscat(lDialogString, aIconType);
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:1109:4: [4] (format) swprintf:
Potential format string problem (CWE-134). Make format string constant.
swprintf(lDialogString,
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:1117:17: [4] (format) swprintf:
Potential format string problem (CWE-134). Make format string constant.
swprintf(lDialogString,
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:1135:25: [4] (buffer) wcscat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120).
wcscat(lDialogString, aMessage);
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:1140:25: [4] (buffer) wcscat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120).
wcscat(lDialogString, aDefaultInput);
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:1216:17: [4] (buffer) wcscat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120).
wcscat(lDialogString, aMessage ? aMessage : L"");
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:1248:17: [4] (format) swprintf:
Potential format string problem (CWE-134). Make format string constant.
swprintf(lDialogString,
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:1277:9: [4] (format) swprintf:
Potential format string problem (CWE-134). Make format string constant.
swprintf(lDialogString,
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:1304:4: [4] (format) swprintf:
Potential format string problem (CWE-134). Make format string constant.
swprintf(lDialogString,
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:1313:17: [4] (format) swprintf:
Potential format string problem (CWE-134). Make format string constant.
swprintf(lDialogString,
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:1388:9: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(aoBuff, lTmpChar);
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:1423:25: [4] (buffer) wcscpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using a function version that stops copying at the end
of the buffer.
wcscpy(lFilterPatterns, aSingleFilterDescription);
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:1426:17: [4] (buffer) wcscat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120).
wcscat(lFilterPatterns, aFilterPatterns[0]);
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:1430:25: [4] (buffer) wcscat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120).
wcscat(lFilterPatterns, aFilterPatterns[i]);
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:1435:25: [4] (buffer) wcscpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using a function version that stops copying at the end
of the buffer.
wcscpy(lDialogString, lFilterPatterns);
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:1436:25: [4] (buffer) wcscat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120).
wcscat(lFilterPatterns, lDialogString);
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:1535:9: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(aoBuff, lTmpChar);
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:1574:25: [4] (buffer) wcscpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using a function version that stops copying at the end
of the buffer.
wcscpy(lFilterPatterns, aSingleFilterDescription);
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:1577:17: [4] (buffer) wcscat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120).
wcscat(lFilterPatterns, aFilterPatterns[0]);
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:1581:25: [4] (buffer) wcscat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120).
wcscat(lFilterPatterns, aFilterPatterns[i]);
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:1586:25: [4] (buffer) wcscpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using a function version that stops copying at the end
of the buffer.
wcscpy(lDialogString, lFilterPatterns);
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:1587:25: [4] (buffer) wcscat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120).
wcscat(lFilterPatterns, lDialogString);
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:1723:9: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(aoBuff, lTmpChar);
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:1813:9: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(aoBuff, lTmpChar);
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:1913:9: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(lResultHexRGB, lTmpChar);
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2032:25: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(lFilterPatterns, aSingleFilterDescription);
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2035:17: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lFilterPatterns, aFilterPatterns[0]);
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2039:25: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lFilterPatterns, aFilterPatterns[i]);
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2044:25: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(lDialogString, lFilterPatterns);
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2045:25: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lFilterPatterns, lDialogString);
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2125:25: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(lFilterPatterns, aSingleFilterDescription);
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2128:17: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lFilterPatterns, aFilterPatterns[0]);
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2132:25: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lFilterPatterns, aFilterPatterns[i]);
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2137:25: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(lDialogString, lFilterPatterns);
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2138:25: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lFilterPatterns, lDialogString);
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2365:17: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lDialogString, aTitle) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2411:17: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lDialogString, lBuff) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2427:9: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(lDialogFile, getenv("USERPROFILE"));
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2429:9: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lDialogString, lDialogFile);
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2432:9: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
system( lDialogString ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2475:9: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(lDialogFile, getenv("USERPROFILE"));
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2478:9: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lDialogString, lDialogFile);
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2485:17: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lDialogString, aTitle) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2509:17: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lDialogString, aMessage) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2515:17: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lDialogString, aDefaultInput) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2520:9: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(lDialogFile, getenv("USERPROFILE"));
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2522:9: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lDialogString, lDialogFile);
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2524:9: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lDialogString, lDialogFile);
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2527:9: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
system( lDialogString ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2571:17: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lDialogString, aTitle) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2584:17: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(lPathAndFile, aDefaultPathAndFile);
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2593:9: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lDialogString, lPathAndFile) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2595:9: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(lPathAndFile, getenv("USERPROFILE"));
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2597:9: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lDialogString, lPathAndFile);
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2600:9: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
system( lDialogString ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2636:17: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lDialogString, aTitle) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2649:17: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(lFilterPatterns, aDefaultPathAndFile);
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2658:9: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lDialogString, lFilterPatterns) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2660:9: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(lFilterPatterns, getenv("USERPROFILE"));
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2662:9: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lDialogString, lFilterPatterns);
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2665:9: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
system( lDialogString ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2695:17: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lDialogString, aTitle) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2708:17: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(lString, aDefaultPath) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2711:17: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lDialogString, lString) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2719:9: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(lString, getenv("USERPROFILE"));
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2721:9: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lDialogString, lString);
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2724:9: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
system( lDialogString ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3213:5: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat( lTestedString , aExecutable ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3215:11: [4] (shell) popen:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
lIn = popen( lTestedString , "r" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3240:5: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy( lTestedString , aExecutable ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3243:11: [4] (shell) popen:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
lIn = popen( lTestedString , "r" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3276:15: [4] (shell) popen:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
lIn = popen( aCommand , "r" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3341:9: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(lBuff,lVersion);
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3351:9: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(lVersion,lBuff);
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3399:33: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lTerminalName , lShellName ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3410:25: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lTerminalName , lShellName ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3416:25: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lTerminalName , lShellName ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3422:25: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lTerminalName , lShellName ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3428:25: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lTerminalName , lShellName ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3434:25: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lTerminalName , lShellName ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3440:25: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lTerminalName , lShellName ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3446:25: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lTerminalName , lShellName ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3452:25: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lTerminalName , lShellName ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3458:25: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lTerminalName , lShellName ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3464:25: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lTerminalName , lShellName ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3470:25: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lTerminalName , lShellName ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3477:25: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lTerminalName , lShellName ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3625:31: [4] (shell) popen:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
lIn = popen( "perl -MNet::DBus -e \"Net::DBus->session->get_service('org.freedesktop.Notifications')\" 2>&1" , "r" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3649:31: [4] (shell) popen:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
lIn = popen( "test -e /System/Library/Sounds/Ping.aiff || echo Ping" , "r" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3707:31: [4] (shell) popen:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
lIn = popen( "kdialog --attach 2>&1" , "r" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3721:39: [4] (shell) popen:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
lIn = popen( "kdialog --passivepopup 2>&1" , "r" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3794:31: [4] (shell) popen:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
lIn = popen( "zenity --version" , "r" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3833:23: [4] (shell) popen:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
lIn = popen( "osascript -e 'set osver to system version of (system info)'" , "r" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3931:21: [4] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf.
sprintf( lPythonCommand , "%s %s" , gPython2Name , lPythonParams ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3952:25: [4] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf.
sprintf( lPythonCommand , "%s %s" , gPython3Name , lPythonParams ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3975:25: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(gPythonName , gPython2Name ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3976:25: [4] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf.
sprintf( lPythonCommand , "%s %s" , gPythonName , lPythonParams ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3982:25: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(gPythonName , gPython3Name ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3983:25: [4] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf.
sprintf( lPythonCommand , "%s %s" , gPythonName , lPythonParams ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3997:22: [4] (shell) popen:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
if ( ( lIn = popen( "pactl unload-module module-sine" , "r" ) ) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4041:22: [4] (shell) popen:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
if ( ( lIn = popen( lDialogString , "r" ) ) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4091:25: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lDialogString, aMessage) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4097:25: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lDialogString, aTitle) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4206:25: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat( lDialogString , aMessage ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4217:25: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lDialogString, aTitle) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4290:25: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lDialogString, aTitle) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4296:25: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lDialogString, aMessage) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4306:33: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat( lDialogString , aIconType ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4328:17: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy( lDialogString , gPython2Name ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4389:33: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat( lDialogString , aIconType ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4400:33: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lDialogString, aTitle) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4429:17: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy( lDialogString , gPython3Name ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4478:25: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat( lDialogString , aIconType ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4489:25: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lDialogString, aTitle) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4569:25: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat( lDialogString , aMessage ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4575:25: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat( lDialogString , aTitle ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4604:33: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy( lDialogString , terminalName() ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4606:33: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat( lDialogString , dialogName() ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4619:25: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy( lDialogString , terminalName() ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4626:25: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lDialogString, aTitle) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4674:25: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lDialogString, aMessage) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4728:17: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy( lDialogString , terminalName() ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4734:25: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat( lDialogString, gTitle) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4737:25: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat( lDialogString, tinyfd_needs) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4743:25: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat( lDialogString, aTitle) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4749:25: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat( lDialogString, aMessage) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4796:17: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy( lDialogString , gPythonName ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4803:25: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat( lDialogString , aIconType ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4808:25: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lDialogString, aTitle) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4822:17: [4] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf.
sprintf( lDialogString , "perl -e \"use Net::DBus;\
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4838:25: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat( lDialogString , aIconType ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4844:25: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lDialogString, aTitle) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4852:25: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lDialogString, lBuff) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4939:24: [4] (shell) popen:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
if ( ! ( lIn = popen( lDialogString , "r" ) ) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5008:25: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lDialogString, aMessage) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5014:25: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lDialogString, aTitle) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5029:25: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat( lDialogString , aIconType ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5035:25: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat( lDialogString , aTitle ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5043:25: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat( lDialogString , aMessage ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5077:25: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat( lDialogString , aIconType ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5084:25: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lDialogString, aTitle) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5089:25: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat( lDialogString , aMessage ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5096:17: [4] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf.
sprintf( lDialogString , "perl -e \"use Net::DBus;\
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5107:17: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy( lDialogString , gPythonName ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5114:25: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat( lDialogString , aIconType ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5119:25: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lDialogString, aTitle) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5136:25: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat( lDialogString , aIconType ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5142:25: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lDialogString, aTitle) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5150:25: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lDialogString, lBuff) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5161:24: [4] (shell) popen:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
if ( ! ( lIn = popen( lDialogString , "r" ) ) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5211:25: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lDialogString, aMessage) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5217:25: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lDialogString, aDefaultInput) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5227:25: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lDialogString, aTitle) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5259:25: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lDialogString, aMessage ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5264:25: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lDialogString, aDefaultInput ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5270:25: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lDialogString, aTitle) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5311:25: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lDialogString, aTitle) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5317:25: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lDialogString, aMessage) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5323:25: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lDialogString, aDefaultInput) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5347:25: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat( lDialogString , aMessage ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5353:25: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat( lDialogString , aTitle ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5359:25: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat( lDialogString , aDefaultInput ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5367:17: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy( lDialogString , gPython2Name ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5387:25: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lDialogString, aTitle) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5403:33: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lDialogString, aDefaultInput) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5417:17: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy( lDialogString , gPython3Name ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5424:25: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lDialogString, aTitle) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5440:33: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lDialogString, aDefaultInput) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5476:33: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy( lDialogString , terminalName() ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5478:33: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat( lDialogString , dialogName() ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5491:25: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy( lDialogString , terminalName() ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5498:25: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lDialogString, aTitle) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5528:25: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lDialogString, aMessage) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5534:25: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lDialogString, aDefaultInput) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5563:17: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy( lDialogString , terminalName() ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5573:25: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat( lDialogString, aTitle) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5580:25: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat( lDialogString, aMessage) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5662:15: [4] (shell) popen:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
lIn = popen( lDialogString , "r" );
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5751:25: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lDialogString, aTitle) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5758:25: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lDialogString, lString ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5765:25: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lDialogString, lString ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5791:25: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lDialogString, aDefaultPathAndFile ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5804:33: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat( lDialogString , aFilterPatterns [i] ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5810:33: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat( lDialogString , aSingleFilterDescription ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5817:25: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lDialogString, aTitle) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5856:25: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lDialogString, aTitle) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5862:25: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lDialogString, aDefaultPathAndFile) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5870:33: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat( lDialogString , aSingleFilterDescription ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5875:33: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat( lDialogString , aFilterPatterns [i] ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5884:17: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy( lDialogString , gPython2Name ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5903:25: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lDialogString, aTitle) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5912:33: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lDialogString, lString ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5919:33: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lDialogString, lString ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5931:33: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat( lDialogString , aSingleFilterDescription ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5937:33: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat( lDialogString , aFilterPatterns [i] ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5948:17: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy( lDialogString , gPython3Name ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5955:25: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lDialogString, aTitle) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5964:33: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lDialogString, lString ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5971:33: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lDialogString, lString ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5983:33: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat( lDialogString , aSingleFilterDescription ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5989:33: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat( lDialogString , aFilterPatterns [i] ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6014:25: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy( lDialogString , terminalName() ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6016:25: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat( lDialogString , dialogName() ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6023:25: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lDialogString, aTitle) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6042:25: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lDialogString, aDefaultPathAndFile) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6046:25: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lDialogString, getenv("HOME")) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6090:20: [4] (shell) popen:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
if ( ! ( lIn = popen( lDialogString , "r" ) ) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6161:25: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lDialogString, aTitle) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6168:25: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lDialogString, lString ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6174:25: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat( lDialogString , aFilterPatterns [0] + 2 ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6179:33: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat( lDialogString , aFilterPatterns [i] + 2) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6224:25: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lDialogString, aDefaultPathAndFile ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6237:33: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat( lDialogString , aFilterPatterns [i] ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6243:33: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat( lDialogString , aSingleFilterDescription ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6254:25: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lDialogString, aTitle) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6297:25: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lDialogString, aTitle) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6303:25: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lDialogString, aDefaultPathAndFile) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6311:33: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat( lDialogString , aSingleFilterDescription ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6316:33: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat( lDialogString , aFilterPatterns [i] ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6325:17: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy( lDialogString , gPython2Name ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6347:25: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lDialogString, aTitle) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6356:33: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lDialogString, lString ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6363:33: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lDialogString, lString ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6375:33: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat( lDialogString , aSingleFilterDescription ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6381:33: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat( lDialogString , aFilterPatterns [i] ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6395:17: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy( lDialogString , gPython3Name ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6406:25: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lDialogString, aTitle) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6415:33: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lDialogString, lString ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6422:33: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lDialogString, lString ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6434:33: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat( lDialogString , aSingleFilterDescription ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6440:33: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat( lDialogString , aFilterPatterns [i] ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6468:25: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy( lDialogString , terminalName() ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6470:25: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat( lDialogString , dialogName() ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6477:25: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lDialogString, aTitle) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6496:25: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lDialogString, aDefaultPathAndFile) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6500:25: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lDialogString, getenv("HOME")) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6538:20: [4] (shell) popen:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
if ( ! ( lIn = popen( lDialogString , "r" ) ) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6604:17: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lDialogString, aTitle) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6610:25: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lDialogString, aDefaultPath ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6635:25: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lDialogString, aDefaultPath ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6646:25: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lDialogString, aTitle) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6685:25: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lDialogString, aTitle) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6691:25: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lDialogString, aDefaultPath) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6698:17: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy( lDialogString , gPython2Name ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6717:25: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lDialogString, aTitle) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6723:33: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lDialogString, aDefaultPath ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6731:17: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy( lDialogString , gPython3Name ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6738:25: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lDialogString, aTitle) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6744:25: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lDialogString, aDefaultPath ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6766:25: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy( lDialogString , terminalName() ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6768:25: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat( lDialogString , dialogName() ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6775:25: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lDialogString, aTitle) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6790:25: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lDialogString, aDefaultPath) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6795:25: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lDialogString, getenv("HOME")) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6832:20: [4] (shell) popen:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
if ( ! ( lIn = popen( lDialogString , "r" ) ) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6909:17: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lDialogString, lTmp ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6912:17: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lDialogString, lTmp ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6915:17: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lDialogString, lTmp ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6937:17: [4] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf.
sprintf( lDialogString + strlen(lDialogString) , " --getcolor --default '%s'" , lpDefaultHexRGB ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6942:25: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lDialogString, aTitle) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6978:17: [4] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf.
sprintf( lDialogString + strlen(lDialogString), " --color=%s" , lpDefaultHexRGB ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6983:25: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lDialogString, aTitle) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6994:25: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lDialogString, aTitle) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6999:17: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lDialogString, lTmp) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:7005:17: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy( lDialogString , gPython2Name ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:7022:17: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lDialogString, lpDefaultHexRGB ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:7029:25: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lDialogString, aTitle) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:7038:17: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy( lDialogString , gPython3Name ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:7042:17: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lDialogString, lpDefaultHexRGB ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:7048:25: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lDialogString, aTitle) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:7075:24: [4] (shell) popen:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
if ( ! ( lIn = popen( lDialogString , "r" ) ) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:7188:25: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(lDialogString, aTitle) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:7197:33: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat( lDialogString , aColumns [i] ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:7208:33: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat( lDialogString , aCells [i] ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:7220:24: [4] (shell) popen:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
if ( ! ( lIn = popen( lDialogString , "r" ) ) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/unicode.h:10:35: [4] (buffer) wcscpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using a function version that stops copying at the end
of the buffer.
#define UNICHAR_STRCPY(a, b) wcscpy(a, b)
data/pt2-clone-1.18+ds/pt_pal_editor/src/unicode.h:15:35: [4] (buffer) wcscat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120).
#define UNICHAR_STRCAT(a, b) wcscat(a, b)
data/pt2-clone-1.18+ds/pt_pal_editor/src/unicode.h:26:34: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
#define UNICHAR_STRCPY(a, b) strcpy(a, b)
data/pt2-clone-1.18+ds/pt_pal_editor/src/unicode.h:31:34: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
#define UNICHAR_STRCAT(a, b) strcat(a, b)
data/pt2-clone-1.18+ds/src/gfx/bmp/bmp2pth.c:29:2: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(input, argv[1]);
data/pt2-clone-1.18+ds/src/gfx/bmp/bmp2pth.c:38:3: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
system("PAUSE");
data/pt2-clone-1.18+ds/src/gfx/bmp/bmp2pth.c:47:3: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
system("PAUSE");
data/pt2-clone-1.18+ds/src/gfx/bmp/bmp2pth.c:51:2: [4] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf.
sprintf(out_filename, "%s.c", input);
data/pt2-clone-1.18+ds/src/gfx/bmp/bmp2pth.c:59:3: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
system("PAUSE");
data/pt2-clone-1.18+ds/src/gfx/bmp/bmp2pth.c:69:3: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
system("PAUSE");
data/pt2-clone-1.18+ds/src/gfx/bmp/bmp2pth.c:89:3: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
system("PAUSE");
data/pt2-clone-1.18+ds/src/gfx/bmp/bmp2pth.c:101:3: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
system("PAUSE");
data/pt2-clone-1.18+ds/src/gfx/bmp/bmp2pth.c:114:3: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
system("PAUSE");
data/pt2-clone-1.18+ds/src/gfx/bmp/bmp2pth.c:151:4: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
system("PAUSE");
data/pt2-clone-1.18+ds/src/gfx/bmp/bmp2pth.c:165:4: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
system("PAUSE");
data/pt2-clone-1.18+ds/src/gfx/bmp/bmp2pth.c:179:4: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
system("PAUSE");
data/pt2-clone-1.18+ds/src/gfx/bmp/bmp2pth.c:193:4: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
system("PAUSE");
data/pt2-clone-1.18+ds/src/pt2_diskop.c:472:3: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(pathTmp, config.defModulesDir);
data/pt2-clone-1.18+ds/src/pt2_diskop.c:488:3: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(pathTmp, config.defSamplesDir);
data/pt2-clone-1.18+ds/src/pt2_diskop.c:587:3: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(&p[1], fileNameBuffer);
data/pt2-clone-1.18+ds/src/pt2_diskop.c:591:3: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(p, fileNameBuffer);
data/pt2-clone-1.18+ds/src/pt2_edit.c:116:4: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(pathU, editor.currPath);
data/pt2-clone-1.18+ds/src/pt2_helpers.c:70:2: [4] (format) vsnprintf:
If format strings can be influenced by an attacker, they can be exploited,
and note that sprintf variations do not always \0-terminate (CWE-134). Use
a constant for the format specification.
vsnprintf(strBuf, sizeof (strBuf), fmt, args);
data/pt2-clone-1.18+ds/src/pt2_helpers.c:133:5: [4] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf.
sprintf(titleTemp, "ProTracker 2 clone v%s - \"mod.%s\" (unsaved)", PROG_VER_STR, song->header.name);
data/pt2-clone-1.18+ds/src/pt2_helpers.c:135:5: [4] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf.
sprintf(titleTemp, "ProTracker 2 clone v%s - \"%s.mod\" (unsaved)", PROG_VER_STR, song->header.name);
data/pt2-clone-1.18+ds/src/pt2_helpers.c:140:5: [4] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf.
sprintf(titleTemp, "ProTracker 2 clone v%s - \"mod.%s\"", PROG_VER_STR, song->header.name);
data/pt2-clone-1.18+ds/src/pt2_helpers.c:142:5: [4] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf.
sprintf(titleTemp, "ProTracker 2 clone v%s - \"%s.mod\"", PROG_VER_STR, song->header.name);
data/pt2-clone-1.18+ds/src/pt2_helpers.c:150:5: [4] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf.
sprintf(titleTemp, "ProTracker 2 clone v%s - \"mod.untitled\" (unsaved)", PROG_VER_STR);
data/pt2-clone-1.18+ds/src/pt2_helpers.c:152:5: [4] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf.
sprintf(titleTemp, "ProTracker 2 clone v%s - \"untitled.mod\" (unsaved)", PROG_VER_STR);
data/pt2-clone-1.18+ds/src/pt2_helpers.c:157:5: [4] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf.
sprintf(titleTemp, "ProTracker 2 clone v%s - \"mod.untitled\"", PROG_VER_STR);
data/pt2-clone-1.18+ds/src/pt2_helpers.c:159:5: [4] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf.
sprintf(titleTemp, "ProTracker 2 clone v%s - \"untitled.mod\"", PROG_VER_STR);
data/pt2-clone-1.18+ds/src/pt2_main.c:790:6: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy((char *)sharedMemBuf, argv[1]);
data/pt2-clone-1.18+ds/src/pt2_module_loader.c:981:2: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(filenameU, arg);
data/pt2-clone-1.18+ds/src/pt2_module_loader.c:1023:3: [4] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf.
sprintf(begStr, "%s.", ext);
data/pt2-clone-1.18+ds/src/pt2_module_loader.c:1027:3: [4] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf.
sprintf(endStr, ".%s", ext);
data/pt2-clone-1.18+ds/src/pt2_module_loader.c:1068:2: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(fullPathU, fullPath);
data/pt2-clone-1.18+ds/src/pt2_module_saver.c:189:6: [4] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf.
sprintf(fileName, "mod.%s-%d", tmpBuffer, i);
data/pt2-clone-1.18+ds/src/pt2_module_saver.c:207:6: [4] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf.
sprintf(fileName, "%s-%d.mod", tmpBuffer, i);
data/pt2-clone-1.18+ds/src/pt2_sample_loader.c:223:3: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(editor.entryNameTmp, entryName);
data/pt2-clone-1.18+ds/src/pt2_sample_loader.c:1273:3: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(editor.entryNameTmp, entryName);
data/pt2-clone-1.18+ds/src/pt2_sample_saver.c:98:3: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(fileName, tmpBuffer);
data/pt2-clone-1.18+ds/src/pt2_sample_saver.c:123:5: [4] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf.
sprintf(fileName, "%s-%d", tmpBuffer, j);
data/pt2-clone-1.18+ds/src/pt2_sampling.c:264:4: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(audioInputDevs[i], deviceName);
data/pt2-clone-1.18+ds/src/pt2_textout.c:694:2: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(ui.statusMessage, ui.prevStatusMessage);
data/pt2-clone-1.18+ds/src/pt2_textout.c:703:3: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(ui.prevStatusMessage, msg);
data/pt2-clone-1.18+ds/src/pt2_textout.c:705:2: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(ui.statusMessage, msg);
data/pt2-clone-1.18+ds/src/pt2_unicode.h:10:36: [4] (buffer) wcscpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using a function version that stops copying at the end
of the buffer.
#define UNICHAR_STRCPY(a, b) wcscpy(a, b)
data/pt2-clone-1.18+ds/src/pt2_unicode.h:16:36: [4] (buffer) wcscat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120).
#define UNICHAR_STRCAT(a, b) wcscat(a, b)
data/pt2-clone-1.18+ds/src/pt2_unicode.h:27:36: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
#define UNICHAR_STRCPY(a, b) strcpy(a, b)
data/pt2-clone-1.18+ds/src/pt2_unicode.h:33:36: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
#define UNICHAR_STRCAT(a, b) strcat(a, b)
data/pt2-clone-1.18+ds/src/pt2_visuals.c:1184:2: [4] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf.
sprintf(verString, "v%s", PROG_VER_STR);
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2427:29: [3] (buffer) getenv:
Environment variables are untrustable input if they can be set by an
attacker. They can have any content and length, and the same variable can
be set more than once (CWE-807, CWE-20). Check environment variables
carefully before using them.
strcpy(lDialogFile, getenv("USERPROFILE"));
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2475:29: [3] (buffer) getenv:
Environment variables are untrustable input if they can be set by an
attacker. They can have any content and length, and the same variable can
be set more than once (CWE-807, CWE-20). Check environment variables
carefully before using them.
strcpy(lDialogFile, getenv("USERPROFILE"));
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2520:29: [3] (buffer) getenv:
Environment variables are untrustable input if they can be set by an
attacker. They can have any content and length, and the same variable can
be set more than once (CWE-807, CWE-20). Check environment variables
carefully before using them.
strcpy(lDialogFile, getenv("USERPROFILE"));
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2595:30: [3] (buffer) getenv:
Environment variables are untrustable input if they can be set by an
attacker. They can have any content and length, and the same variable can
be set more than once (CWE-807, CWE-20). Check environment variables
carefully before using them.
strcpy(lPathAndFile, getenv("USERPROFILE"));
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2660:33: [3] (buffer) getenv:
Environment variables are untrustable input if they can be set by an
attacker. They can have any content and length, and the same variable can
be set more than once (CWE-807, CWE-20). Check environment variables
carefully before using them.
strcpy(lFilterPatterns, getenv("USERPROFILE"));
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2719:25: [3] (buffer) getenv:
Environment variables are untrustable input if they can be set by an
attacker. They can have any content and length, and the same variable can
be set more than once (CWE-807, CWE-20). Check environment variables
carefully before using them.
strcpy(lString, getenv("USERPROFILE"));
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2752:22: [3] (buffer) getenv:
Environment variables are untrustable input if they can be set by an
attacker. They can have any content and length, and the same variable can
be set more than once (CWE-807, CWE-20). Check environment variables
carefully before using them.
&& (!getenv("SSH_CLIENT") || getenv("DISPLAY")))
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2752:46: [3] (buffer) getenv:
Environment variables are untrustable input if they can be set by an
attacker. They can have any content and length, and the same variable can
be set more than once (CWE-807, CWE-20). Check environment variables
carefully before using them.
&& (!getenv("SSH_CLIENT") || getenv("DISPLAY")))
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2856:23: [3] (buffer) getenv:
Environment variables are untrustable input if they can be set by an
attacker. They can have any content and length, and the same variable can
be set more than once (CWE-807, CWE-20). Check environment variables
carefully before using them.
&& ( !getenv("SSH_CLIENT") || getenv("DISPLAY") ) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2856:47: [3] (buffer) getenv:
Environment variables are untrustable input if they can be set by an
attacker. They can have any content and length, and the same variable can
be set more than once (CWE-807, CWE-20). Check environment variables
carefully before using them.
&& ( !getenv("SSH_CLIENT") || getenv("DISPLAY") ) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2885:23: [3] (buffer) getenv:
Environment variables are untrustable input if they can be set by an
attacker. They can have any content and length, and the same variable can
be set more than once (CWE-807, CWE-20). Check environment variables
carefully before using them.
&& ( !getenv("SSH_CLIENT") || getenv("DISPLAY") ) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2885:47: [3] (buffer) getenv:
Environment variables are untrustable input if they can be set by an
attacker. They can have any content and length, and the same variable can
be set more than once (CWE-807, CWE-20). Check environment variables
carefully before using them.
&& ( !getenv("SSH_CLIENT") || getenv("DISPLAY") ) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2964:17: [3] (buffer) getenv:
Environment variables are untrustable input if they can be set by an
attacker. They can have any content and length, and the same variable can
be set more than once (CWE-807, CWE-20). Check environment variables
carefully before using them.
&& ( !getenv("SSH_CLIENT") || getenv("DISPLAY") ) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2964:41: [3] (buffer) getenv:
Environment variables are untrustable input if they can be set by an
attacker. They can have any content and length, and the same variable can
be set more than once (CWE-807, CWE-20). Check environment variables
carefully before using them.
&& ( !getenv("SSH_CLIENT") || getenv("DISPLAY") ) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3022:17: [3] (buffer) getenv:
Environment variables are untrustable input if they can be set by an
attacker. They can have any content and length, and the same variable can
be set more than once (CWE-807, CWE-20). Check environment variables
carefully before using them.
&& ( !getenv("SSH_CLIENT") || getenv("DISPLAY") ) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3022:41: [3] (buffer) getenv:
Environment variables are untrustable input if they can be set by an
attacker. They can have any content and length, and the same variable can
be set more than once (CWE-807, CWE-20). Check environment variables
carefully before using them.
&& ( !getenv("SSH_CLIENT") || getenv("DISPLAY") ) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3077:17: [3] (buffer) getenv:
Environment variables are untrustable input if they can be set by an
attacker. They can have any content and length, and the same variable can
be set more than once (CWE-807, CWE-20). Check environment variables
carefully before using them.
&& ( !getenv("SSH_CLIENT") || getenv("DISPLAY") ) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3077:41: [3] (buffer) getenv:
Environment variables are untrustable input if they can be set by an
attacker. They can have any content and length, and the same variable can
be set more than once (CWE-807, CWE-20). Check environment variables
carefully before using them.
&& ( !getenv("SSH_CLIENT") || getenv("DISPLAY") ) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3129:16: [3] (buffer) getenv:
Environment variables are untrustable input if they can be set by an
attacker. They can have any content and length, and the same variable can
be set more than once (CWE-807, CWE-20). Check environment variables
carefully before using them.
&& (!getenv("SSH_CLIENT") || getenv("DISPLAY")) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3129:40: [3] (buffer) getenv:
Environment variables are untrustable input if they can be set by an
attacker. They can have any content and length, and the same variable can
be set more than once (CWE-807, CWE-20). Check environment variables
carefully before using them.
&& (!getenv("SSH_CLIENT") || getenv("DISPLAY")) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3532:16: [3] (buffer) getenv:
Environment variables are untrustable input if they can be set by an
attacker. They can have any content and length, and the same variable can
be set more than once (CWE-807, CWE-20). Check environment variables
carefully before using them.
&& ( getenv("DISPLAY")
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3533:33: [3] (buffer) getenv:
Environment variables are untrustable input if they can be set by an
attacker. They can have any content and length, and the same variable can
be set more than once (CWE-807, CWE-20). Check environment variables
carefully before using them.
|| (isDarwin() && (!getenv("SSH_TTY") || getenv("DISPLAY") ) ) ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3533:54: [3] (buffer) getenv:
Environment variables are untrustable input if they can be set by an
attacker. They can have any content and length, and the same variable can
be set more than once (CWE-807, CWE-20). Check environment variables
carefully before using them.
|| (isDarwin() && (!getenv("SSH_TTY") || getenv("DISPLAY") ) ) ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3689:40: [3] (buffer) getenv:
Environment variables are untrustable input if they can be set by an
attacker. They can have any content and length, and the same variable can
be set more than once (CWE-807, CWE-20). Check environment variables
carefully before using them.
gWarningDisplayed |= !!getenv("SSH_TTY");
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3692:55: [3] (buffer) getenv:
Environment variables are untrustable input if they can be set by an
attacker. They can have any content and length, and the same variable can
be set more than once (CWE-807, CWE-20). Check environment variables
carefully before using them.
return lOsascriptPresent && graphicMode() && !getenv("SSH_TTY") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3705:42: [3] (buffer) getenv:
Environment variables are untrustable input if they can be set by an
attacker. They can have any content and length, and the same variable can
be set more than once (CWE-807, CWE-20). Check environment variables
carefully before using them.
if ( lKdialogPresent && !getenv("SSH_TTY") )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3936:69: [3] (buffer) getenv:
Environment variables are untrustable input if they can be set by an
attacker. They can have any content and length, and the same variable can
be set more than once (CWE-807, CWE-20). Check environment variables
carefully before using them.
return lTkinter2Present && graphicMode() && !(isDarwin() && getenv("SSH_TTY") );
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3957:69: [3] (buffer) getenv:
Environment variables are untrustable input if they can be set by an
attacker. They can have any content and length, and the same variable can
be set more than once (CWE-807, CWE-20). Check environment variables
carefully before using them.
return lTkinter3Present && graphicMode() && !(isDarwin() && getenv("SSH_TTY") );
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3990:65: [3] (buffer) getenv:
Environment variables are untrustable input if they can be set by an
attacker. They can have any content and length, and the same variable can
be set more than once (CWE-807, CWE-20). Check environment variables
carefully before using them.
return lDbusPresent && graphicMode() && !(isDarwin() && getenv("SSH_TTY") );
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4236:58: [3] (buffer) getenv:
Environment variables are untrustable input if they can be set by an
attacker. They can have any content and length, and the same variable can
be set more than once (CWE-807, CWE-20). Check environment variables
carefully before using them.
if ( (zenity3Present() >= 4) && !getenv("SSH_TTY") )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4255:31: [3] (buffer) getenv:
Environment variables are untrustable input if they can be set by an
attacker. They can have any content and length, and the same variable can
be set more than once (CWE-807, CWE-20). Check environment variables
carefully before using them.
if ( !getenv("SSH_TTY") )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4987:14: [3] (buffer) getenv:
Environment variables are untrustable input if they can be set by an
attacker. They can have any content and length, and the same variable can
be set more than once (CWE-807, CWE-20). Check environment variables
carefully before using them.
if ( getenv("SSH_TTY") )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5282:58: [3] (buffer) getenv:
Environment variables are untrustable input if they can be set by an
attacker. They can have any content and length, and the same variable can
be set more than once (CWE-807, CWE-20). Check environment variables
carefully before using them.
if ( (zenity3Present() >= 4) && !getenv("SSH_TTY") )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5301:31: [3] (buffer) getenv:
Environment variables are untrustable input if they can be set by an
attacker. They can have any content and length, and the same variable can
be set more than once (CWE-807, CWE-20). Check environment variables
carefully before using them.
if ( !getenv("SSH_TTY") )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5827:58: [3] (buffer) getenv:
Environment variables are untrustable input if they can be set by an
attacker. They can have any content and length, and the same variable can
be set more than once (CWE-807, CWE-20). Check environment variables
carefully before using them.
if ( (zenity3Present() >= 4) && !getenv("SSH_TTY") )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5846:31: [3] (buffer) getenv:
Environment variables are untrustable input if they can be set by an
attacker. They can have any content and length, and the same variable can
be set more than once (CWE-807, CWE-20). Check environment variables
carefully before using them.
if ( !getenv("SSH_TTY") )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6046:47: [3] (buffer) getenv:
Environment variables are untrustable input if they can be set by an
attacker. They can have any content and length, and the same variable can
be set more than once (CWE-807, CWE-20). Check environment variables
carefully before using them.
strcat(lDialogString, getenv("HOME")) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6264:58: [3] (buffer) getenv:
Environment variables are untrustable input if they can be set by an
attacker. They can have any content and length, and the same variable can
be set more than once (CWE-807, CWE-20). Check environment variables
carefully before using them.
if ( (zenity3Present() >= 4) && !getenv("SSH_TTY") )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6283:31: [3] (buffer) getenv:
Environment variables are untrustable input if they can be set by an
attacker. They can have any content and length, and the same variable can
be set more than once (CWE-807, CWE-20). Check environment variables
carefully before using them.
if ( !getenv("SSH_TTY") )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6500:47: [3] (buffer) getenv:
Environment variables are untrustable input if they can be set by an
attacker. They can have any content and length, and the same variable can
be set more than once (CWE-807, CWE-20). Check environment variables
carefully before using them.
strcat(lDialogString, getenv("HOME")) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6656:58: [3] (buffer) getenv:
Environment variables are untrustable input if they can be set by an
attacker. They can have any content and length, and the same variable can
be set more than once (CWE-807, CWE-20). Check environment variables
carefully before using them.
if ( (zenity3Present() >= 4) && !getenv("SSH_TTY") )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6675:31: [3] (buffer) getenv:
Environment variables are untrustable input if they can be set by an
attacker. They can have any content and length, and the same variable can
be set more than once (CWE-807, CWE-20). Check environment variables
carefully before using them.
if ( !getenv("SSH_TTY") )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6795:47: [3] (buffer) getenv:
Environment variables are untrustable input if they can be set by an
attacker. They can have any content and length, and the same variable can
be set more than once (CWE-807, CWE-20). Check environment variables
carefully before using them.
strcat(lDialogString, getenv("HOME")) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6953:58: [3] (buffer) getenv:
Environment variables are untrustable input if they can be set by an
attacker. They can have any content and length, and the same variable can
be set more than once (CWE-807, CWE-20). Check environment variables
carefully before using them.
if ( (zenity3Present() >= 4) && !getenv("SSH_TTY") )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6972:31: [3] (buffer) getenv:
Environment variables are untrustable input if they can be set by an
attacker. They can have any content and length, and the same variable can
be set more than once (CWE-807, CWE-20). Check environment variables
carefully before using them.
if ( !getenv("SSH_TTY") )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:7159:58: [3] (buffer) getenv:
Environment variables are untrustable input if they can be set by an
attacker. They can have any content and length, and the same variable can
be set more than once (CWE-807, CWE-20). Check environment variables
carefully before using them.
if ( (zenity3Present() >= 4) && !getenv("SSH_TTY") )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:7178:31: [3] (buffer) getenv:
Environment variables are untrustable input if they can be set by an
attacker. They can have any content and length, and the same variable can
be set more than once (CWE-807, CWE-20). Check environment variables
carefully before using them.
if ( !getenv("SSH_TTY") )
data/pt2-clone-1.18+ds/src/pt2_diskop.c:427:13: [3] (buffer) getenv:
Environment variables are untrustable input if they can be set by an
attacker. They can have any content and length, and the same variable can
be set more than once (CWE-807, CWE-20). Check environment variables
carefully before using them.
homePath = getenv("HOME");
data/pt2-clone-1.18+ds/pt_pal_editor/src/config.c:184:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char cfgString[26];
data/pt2-clone-1.18+ds/pt_pal_editor/src/gui.c:79:9: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(dstPtr, srcPtr, w * sizeof (int32_t));
data/pt2-clone-1.18+ds/pt_pal_editor/src/gui.c:1002:5: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char strBuf[24];
data/pt2-clone-1.18+ds/pt_pal_editor/src/gui.c:1045:5: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(strBuf, "%06X", RGB12_to_RGB24(palette[currColor]));
data/pt2-clone-1.18+ds/pt_pal_editor/src/gui.c:1050:5: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(strBuf, "%06X", RGB12_to_RGB24(palette[currColor]));
data/pt2-clone-1.18+ds/pt_pal_editor/src/gui.c:1078:5: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char strBuf[24];
data/pt2-clone-1.18+ds/pt_pal_editor/src/gui.c:1154:5: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(strBuf, "%06X", pixel24);
data/pt2-clone-1.18+ds/pt_pal_editor/src/gui.c:1160:5: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(strBuf, "%06X", pixel24);
data/pt2-clone-1.18+ds/pt_pal_editor/src/main.c:151:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char strBuf[1024];
data/pt2-clone-1.18+ds/pt_pal_editor/src/palette.c:54:2: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(can1Cols, palette, sizeof (palette));
data/pt2-clone-1.18+ds/pt_pal_editor/src/palette.c:77:2: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(can2ColsVu, vuColors, sizeof (vuColors));
data/pt2-clone-1.18+ds/pt_pal_editor/src/palette.c:78:2: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(can2ColsAna, analyzerColors, sizeof (analyzerColors));
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:132:1: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char const tinyfd_version [8] = "3.3.5";
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:147:1: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char tinyfd_response[1024];
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:280:22: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
static void Hex2RGB( char const aHexRGB [8] ,
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:281:51: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
unsigned char aoResultRGB [3] )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:283:9: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char lColorChannel [8] ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:305:31: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
static void RGB2Hex( unsigned char const aRGB [3] ,
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:306:42: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char aoResultHexRGB [8] )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:313:25: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(aoResultHexRGB, "#%02hx%02hx%02hx",
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:315:25: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(aoResultHexRGB, "#%02hhx%02hhx%02hhx",
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:386:15: [2] (misc) fopen:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
lIn = fopen( aFilePathAndName , "r" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:408:15: [2] (misc) fopen:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
lIn = fopen( aFilePathAndName , "r" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:428:28: [2] (misc) fopen:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
if ((lIn = fopen(aFilename, "w")))
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:581:22: [2] (buffer) wchar_t:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
static void Hex2RGBW(wchar_t const aHexRGB[8],
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:582:18: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
unsigned char aoResultRGB[3])
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:584:9: [2] (buffer) wchar_t:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
wchar_t lColorChannel[8];
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:608:18: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
unsigned char const aRGB[3],
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:609:9: [2] (buffer) wchar_t:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
wchar_t aoResultHexRGB[8])
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:640:16: [2] (buffer) MultiByteToWideChar:
Requires maximum length in CHARACTERS, not bytes (CWE-120).
return MultiByteToWideChar(CP_UTF8, MB_ERR_INVALID_CHARS,
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:666:17: [2] (buffer) MultiByteToWideChar:
Requires maximum length in CHARACTERS, not bytes (CWE-120).
lSize = MultiByteToWideChar(CP_UTF8, MB_ERR_INVALID_CHARS,
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:682:17: [2] (buffer) MultiByteToWideChar:
Requires maximum length in CHARACTERS, not bytes (CWE-120).
lSize = MultiByteToWideChar(CP_ACP, 0,
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:781:23: [2] (misc) fopen:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
lIn = fopen(aFilePathAndName, "r");
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:845:9: [2] (buffer) wchar_t:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
wchar_t lTitleName[MAX_PATH];
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:898:56: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if (aTitle&&!wcscmp(aTitle, L"tinyfd_query")){ strcpy(tinyfd_response, "windows_wchar"); return 1; }
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:997:56: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if (aTitle&&!wcscmp(aTitle, L"tinyfd_query")){ strcpy(tinyfd_response, "windows_wchar"); return 1; }
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:1004:9: [2] (buffer) wcscpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using a function version that stops copying at the end
of the buffer. Risk is low because the source is a constant string.
wcscpy(lDialogString, L"powershell.exe -command \"\
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:1017:9: [2] (buffer) wcscat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Risk is low because the source is a constant string.
wcscat(lDialogString, L"\
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:1029:17: [2] (buffer) wcscat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Risk is low because the source is a constant string.
wcscat(lDialogString, L" -Title '");
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:1035:17: [2] (buffer) wcscat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Risk is low because the source is a constant string.
wcscat(lDialogString, L" -Message '");
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:1041:17: [2] (buffer) wcscat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Risk is low because the source is a constant string.
wcscat(lDialogString, L" -IconType '");
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:1091:16: [2] (buffer) wchar_t:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
static wchar_t lBuff[MAX_PATH_OR_CMD];
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:1100:56: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if (aTitle&&!wcscmp(aTitle, L"tinyfd_query")){ strcpy(tinyfd_response, "windows_wchar"); return (wchar_t const *)1; }
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:1132:17: [2] (buffer) wcscpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using a function version that stops copying at the end
of the buffer. Risk is low because the source is a constant string.
wcscpy(lDialogString, L"Dim result:result=InputBox(\"");
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:1137:17: [2] (buffer) wcscat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Risk is low because the source is a constant string.
wcscat(lDialogString, L"\",\"tinyfiledialogsTopWindow\",\"");
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:1142:17: [2] (buffer) wcscat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Risk is low because the source is a constant string.
wcscat(lDialogString, L"\"):If IsEmpty(result) then:WScript.Echo 0");
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:1143:17: [2] (buffer) wcscat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Risk is low because the source is a constant string.
wcscat(lDialogString, L":Else: WScript.Echo \"1\" & result : End If");
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:1147:17: [2] (buffer) wcscpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using a function version that stops copying at the end
of the buffer. Risk is low because the source is a constant string.
wcscpy(lDialogString, L"\n\
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:1152:17: [2] (buffer) wcscat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Risk is low because the source is a constant string.
wcscat(lDialogString, L"tinyfiledialogsTopWindow");
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:1153:17: [2] (buffer) wcscat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Risk is low because the source is a constant string.
wcscat(lDialogString, L"</title>\n\
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:1177:17: [2] (buffer) wcscat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Risk is low because the source is a constant string.
wcscat(lDialogString, L"\
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:1201:17: [2] (buffer) wcscat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Risk is low because the source is a constant string.
wcscat(lDialogString, L"Sub Default_Buttons\n\
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:1218:17: [2] (buffer) wcscat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Risk is low because the source is a constant string.
wcscat(lDialogString, L"\n\
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:1231:17: [2] (buffer) wcscat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Risk is low because the source is a constant string.
wcscat(lDialogString, L"<table width = '100%' height = '100%' align = 'center' border = '0'>\n\
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:1263:17: [2] (buffer) wcscpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using a function version that stops copying at the end
of the buffer. Risk is low because the source is a constant string.
wcscpy(lDialogString, L"cmd.exe /c cscript.exe //U //Nologo ");
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:1264:17: [2] (buffer) wcscat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Risk is low because the source is a constant string.
wcscat(lDialogString, L"%USERPROFILE%\\AppData\\Local\\Temp\\tinyfd.vbs ");
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:1265:17: [2] (buffer) wcscat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Risk is low because the source is a constant string.
wcscat(lDialogString, L">> %USERPROFILE%\\AppData\\Local\\Temp\\tinyfd.txt");
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:1269:17: [2] (buffer) wcscpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using a function version that stops copying at the end
of the buffer. Risk is low because the source is a constant string.
wcscpy(lDialogString,
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:1402:16: [2] (buffer) wchar_t:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
static wchar_t lBuff[MAX_PATH_OR_CMD];
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:1403:9: [2] (buffer) wchar_t:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
wchar_t lDirname[MAX_PATH_OR_CMD];
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:1404:9: [2] (buffer) wchar_t:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
wchar_t lDialogString[MAX_PATH_OR_CMD];
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:1405:9: [2] (buffer) wchar_t:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
wchar_t lFilterPatterns[MAX_PATH_OR_CMD] = L"";
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:1412:56: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if (aTitle&&!wcscmp(aTitle, L"tinyfd_query")){ strcpy(tinyfd_response, "windows_wchar"); return (wchar_t const *)1; }
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:1438:17: [2] (buffer) wcscat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Risk is low because the source is a constant string.
wcscat(lFilterPatterns, L"All Files\n*.*\n");
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:1550:16: [2] (buffer) wchar_t:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
static wchar_t lBuff[MAX_MULTIPLE_FILES*MAX_PATH_OR_CMD];
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:1553:9: [2] (buffer) wchar_t:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
wchar_t lDirname[MAX_PATH_OR_CMD];
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:1554:9: [2] (buffer) wchar_t:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
wchar_t lFilterPatterns[MAX_PATH_OR_CMD] = L"";
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:1555:9: [2] (buffer) wchar_t:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
wchar_t lDialogString[MAX_PATH_OR_CMD];
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:1556:9: [2] (buffer) wchar_t:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
wchar_t * lPointers[MAX_MULTIPLE_FILES];
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:1563:56: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if (aTitle&&!wcscmp(aTitle, L"tinyfd_query")){ strcpy(tinyfd_response, "windows_wchar"); return (wchar_t const *)1; }
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:1589:17: [2] (buffer) wcscat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Risk is low because the source is a constant string.
wcscat(lFilterPatterns, L"All Files\n*.*\n");
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:1752:16: [2] (buffer) wchar_t:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
static wchar_t lBuff[MAX_PATH_OR_CMD];
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:1758:56: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if (aTitle&&!wcscmp(aTitle, L"tinyfd_query")){ strcpy(tinyfd_response, "windows_wchar"); return (wchar_t const *)1; }
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:1824:18: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
unsigned char const aDefaultRGB[3], /* { 0 , 255 , 255 } */
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:1825:18: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
unsigned char aoResultRGB[3]) /* { 0 , 0 , 0 } */
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:1827:16: [2] (buffer) wchar_t:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
static wchar_t lResultHexRGB[8];
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:1830:18: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
unsigned char lDefaultRGB[3];
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:1835:56: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if (aTitle&&!wcscmp(aTitle, L"tinyfd_query")){ strcpy(tinyfd_response, "windows_wchar"); return (wchar_t const *)1; }
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:1886:18: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
unsigned char const aDefaultRGB[3], /* { 0 , 255 , 255 } */
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:1887:18: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
unsigned char aoResultRGB[3]) /* { 0 , 0 , 0 } */
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:1889:16: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
static char lResultHexRGB[8];
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2014:9: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char lDirname [MAX_PATH_OR_CMD] ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2015:9: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char lDialogString[MAX_PATH_OR_CMD];
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2016:9: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char lFilterPatterns[MAX_PATH_OR_CMD] = "";
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2047:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lFilterPatterns, "All Files\n*.*\n");
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2104:9: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char lDirname [MAX_PATH_OR_CMD] ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2105:9: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char lFilterPatterns[MAX_PATH_OR_CMD] = "";
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2106:9: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char lDialogString[MAX_PATH_OR_CMD] ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2107:9: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char * lPointers[MAX_MULTIPLE_FILES];
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2140:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lFilterPatterns, "All Files\n*.*\n");
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2266:18: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
unsigned char const aDefaultRGB[3], /* { 0 , 255 , 255 } */
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2267:18: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
unsigned char aoResultRGB[3]) /* { 0 , 0 , 0 } */
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2269:16: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
static char lResultHexRGB[8];
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2273:18: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
unsigned char lDefaultRGB[3];
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2319:9: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char lBuff [MAX_PATH_OR_CMD] ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2356:9: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char lDialogString[MAX_PATH_OR_CMD];
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2357:9: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char lDialogFile[MAX_PATH_OR_CMD];
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2359:9: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char lBuff [MAX_PATH_OR_CMD] = "";
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2361:9: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
strcpy( lDialogString , "dialog " ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2364:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "--title \"") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2366:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "\" ") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2372:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "--backtitle \"") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2373:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "tab: move focus") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2374:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "\" ") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2381:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "--defaultno " ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2383:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString ,
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2390:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "--defaultno " ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2392:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "--yesno " ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2398:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "--defaultno ");
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2400:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "--menu ");
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2404:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "--msgbox " ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2414:9: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "\" ");
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2418:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "0 60 0 Yes \"\" No \"\"");
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2419:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "2>>");
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2423:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "10 60");
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2424:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, " && echo 1 > ");
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2428:9: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogFile, "\\AppData\\Local\\Temp\\tinyfd.txt");
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2434:21: [2] (misc) fopen:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
if (!(lIn = fopen(lDialogFile, "r")))
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2470:9: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char lDialogString[MAX_PATH_OR_CMD];
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2471:9: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char lDialogFile[MAX_PATH_OR_CMD];
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2476:9: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogFile, "\\AppData\\Local\\Temp\\tinyfd.txt");
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2477:9: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
strcpy(lDialogString , "echo|set /p=1 >" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2479:9: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , " & " ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2481:9: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "dialog " ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2484:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "--title \"") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2486:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "\" ") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2489:9: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "--backtitle \"") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2490:9: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "tab: move focus") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2493:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, " (sometimes nothing, no blink nor star, is shown in text field)") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2496:9: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "\" ") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2500:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "--insecure --passwordbox" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2504:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "--inputbox" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2506:9: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , " \"" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2511:9: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString,"\" 10 60 ") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2516:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "\" ") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2519:9: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "2>>");
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2521:9: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogFile, "\\AppData\\Local\\Temp\\tinyfd.txt");
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2523:9: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, " || echo 0 > ");
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2529:21: [2] (misc) fopen:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
if (!(lIn = fopen(lDialogFile, "r")))
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2563:9: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char lDialogString[MAX_PATH_OR_CMD];
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2564:9: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char lPathAndFile[MAX_PATH_OR_CMD] = "";
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2567:9: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
strcpy( lDialogString , "dialog " ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2570:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "--title \"") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2572:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "\" ") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2575:9: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "--backtitle \"") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2576:9: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString,
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2578:9: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "\" ") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2580:9: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "--fselect \"" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2591:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "./") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2594:9: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "\" 0 60 2>");
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2596:9: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lPathAndFile, "\\AppData\\Local\\Temp\\tinyfd.txt");
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2602:21: [2] (misc) fopen:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
if (!(lIn = fopen(lPathAndFile, "r")))
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2628:9: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char lFilterPatterns[MAX_PATH_OR_CMD] = "";
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2629:9: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char lDialogString[MAX_PATH_OR_CMD] ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2632:9: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
strcpy( lDialogString , "dialog " ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2635:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "--title \"") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2637:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "\" ") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2640:9: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "--backtitle \"") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2641:9: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString,
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2643:9: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "\" ") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2645:9: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "--fselect \"" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2656:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "./") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2659:9: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "\" 0 60 2>");
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2661:9: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lFilterPatterns, "\\AppData\\Local\\Temp\\tinyfd.txt");
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2667:21: [2] (misc) fopen:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
if (!(lIn = fopen(lFilterPatterns, "r")))
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2687:9: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char lDialogString [MAX_PATH_OR_CMD] ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2688:9: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char lString [MAX_PATH_OR_CMD] ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2691:9: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
strcpy( lDialogString , "dialog " ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2694:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "--title \"") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2696:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "\" ") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2699:9: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "--backtitle \"") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2700:9: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString,
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2702:9: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "\" ") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2704:9: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "--dselect \"" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2716:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "./") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2718:9: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "\" 0 60 2>");
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2720:9: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lString, "\\AppData\\Local\\Temp\\tinyfd.txt");
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2726:21: [2] (misc) fopen:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
if (!(lIn = fopen(lString, "r")))
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2754:63: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if (aTitle&&!strcmp(aTitle, "tinyfd_query")){ strcpy(tinyfd_response, "windows"); return 1; }
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2770:61: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if (aTitle&&!strcmp(aTitle,"tinyfd_query")){strcpy(tinyfd_response,"dialog");return 0;}
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2776:61: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if (aTitle&&!strcmp(aTitle,"tinyfd_query")){strcpy(tinyfd_response,"basicinput");return 0;}
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2858:61: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if (aTitle&&!strcmp(aTitle,"tinyfd_query")){strcpy(tinyfd_response,"windows");return 1;}
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2875:16: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
static char lBuff [MAX_PATH_OR_CMD] ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2887:61: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if (aTitle&&!strcmp(aTitle,"tinyfd_query")){strcpy(tinyfd_response,"windows");return (char const *)1;}
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2895:61: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if (aTitle&&!strcmp(aTitle,"tinyfd_query")){strcpy(tinyfd_response,"dialog");return (char const *)0;}
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2901:51: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if (aTitle&&!strcmp(aTitle,"tinyfd_query")){strcpy(tinyfd_response,"basicinput");return (char const *)0;}
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2958:16: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
static char lBuff [MAX_PATH_OR_CMD] ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2959:9: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char lString[MAX_PATH_OR_CMD] ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2966:61: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if (aTitle&&!strcmp(aTitle,"tinyfd_query")){strcpy(tinyfd_response,"windows");return (char const *)1;}
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2982:61: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if (aTitle&&!strcmp(aTitle,"tinyfd_query")){strcpy(tinyfd_response,"dialog");return (char const *)0;}
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2987:61: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if (aTitle&&!strcmp(aTitle,"tinyfd_query")){strcpy(tinyfd_response,"basicinput");return (char const *)0;}
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3018:16: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
static char lBuff[MAX_MULTIPLE_FILES*MAX_PATH_OR_CMD];
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3024:61: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if (aTitle&&!strcmp(aTitle,"tinyfd_query")){strcpy(tinyfd_response,"windows");return (char const *)1;}
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3042:61: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if (aTitle&&!strcmp(aTitle,"tinyfd_query")){strcpy(tinyfd_response,"dialog");return (char const *)0;}
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3048:61: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if (aTitle&&!strcmp(aTitle,"tinyfd_query")){strcpy(tinyfd_response,"basicinput");return (char const *)0;}
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3073:12: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
static char lBuff [MAX_PATH_OR_CMD] ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3079:61: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if (aTitle&&!strcmp(aTitle,"tinyfd_query")){strcpy(tinyfd_response,"windows");return (char const *)1;}
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3095:61: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if (aTitle&&!strcmp(aTitle,"tinyfd_query")){strcpy(tinyfd_response,"dialog");return (char const *)0;}
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3100:61: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if (aTitle&&!strcmp(aTitle,"tinyfd_query")){strcpy(tinyfd_response,"basicinput");return (char const *)0;}
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3119:18: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
unsigned char const aDefaultRGB[3], /* { 0 , 255 , 255 } */
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3120:18: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
unsigned char aoResultRGB[3]) /* { 0 , 0 , 0 } */
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3122:9: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char lDefaultHexRGB[8];
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3131:61: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if (aTitle&&!strcmp(aTitle,"tinyfd_query")){strcpy(tinyfd_response,"windows");return (char const *)1;}
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3176:8: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
static char gPython2Name[16];
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3177:8: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
static char gPython3Name[16];
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3178:8: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
static char gPythonName[16];
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3209:9: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char lBuff [MAX_PATH_OR_CMD] ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3210:9: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char lTestedString [MAX_PATH_OR_CMD] = "which " ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3214:9: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lTestedString, " 2>/dev/null ");
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3235:9: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
static char lBuff [MAX_PATH_OR_CMD] ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3236:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char lTestedString [MAX_PATH_OR_CMD] ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3241:5: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lTestedString , " --version" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3259:14: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
lArray[0] = atoi( strtok(lTmp," ,.-") ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3261:14: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
lArray[1] = atoi( strtok(0," ,.-") ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3263:14: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
lArray[2] = atoi( strtok(0," ,.-") ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3273:9: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char lBuff [MAX_PATH_OR_CMD] ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3305:16: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
static char lDialogName[128] = "*" ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3308:36: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if ( isDarwin() && strcpy(lDialogName , "/opt/local/bin/dialog" )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3311:27: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
else if ( strcpy(lDialogName , "dialog" )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3333:9: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char lBuff[128] ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3342:18: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
lMajor = atoi( strtok(lVersion," ,.-") ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3345:18: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
lMinor = atoi( lMinorP ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3347:17: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
lDate = atoi( strtok(0," ,.-") ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3373:16: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
static char lTerminalName[128] = "*" ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3374:9: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char lShellName[64] = "*" ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3381:25: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
strcpy(lShellName , "bash -c " ) ; /*good for basic input*/
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3385:7: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
strcpy(lShellName , "sh -c " ) ; /*good enough for dialog & whiptail*/
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3395:30: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if ( strcpy(lTerminalName , "/opt/X11/bin/xterm" )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3398:33: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lTerminalName , " -fa 'DejaVu Sans Mono' -fs 10 -title tinyfiledialogs -e " ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3406:27: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
else if ( strcpy(lTerminalName,"xterm") /*good (small without parameters)*/
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3409:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lTerminalName , " -fa 'DejaVu Sans Mono' -fs 10 -title tinyfiledialogs -e " ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3412:27: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
else if ( strcpy(lTerminalName,"terminator") /*good*/
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3415:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lTerminalName , " -x " ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3418:27: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
else if ( strcpy(lTerminalName,"lxterminal") /*good*/
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3421:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lTerminalName , " -e " ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3424:27: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
else if ( strcpy(lTerminalName,"konsole") /*good*/
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3427:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lTerminalName , " -e " ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3430:27: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
else if ( strcpy(lTerminalName,"kterm") /*good*/
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3433:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lTerminalName , " -e " ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3436:27: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
else if ( strcpy(lTerminalName,"tilix") /*good*/
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3439:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lTerminalName , " -e " ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3442:27: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
else if ( strcpy(lTerminalName,"xfce4-terminal") /*good*/
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3445:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lTerminalName , " -x " ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3448:27: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
else if ( strcpy(lTerminalName,"mate-terminal") /*good*/
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3451:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lTerminalName , " -x " ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3454:27: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
else if ( strcpy(lTerminalName,"Eterm") /*good*/
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3457:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lTerminalName , " -e " ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3460:27: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
else if ( strcpy(lTerminalName,"evilvte") /*good*/
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3463:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lTerminalName , " -e " ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3466:27: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
else if ( strcpy(lTerminalName,"pterm") /*good (only letters)*/
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3469:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lTerminalName , " -e " ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3472:27: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
else if ( strcpy(lTerminalName,"gnome-terminal")
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3476:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lTerminalName , " --disable-factory -x " ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3617:9: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char lBuff [MAX_PATH_OR_CMD] ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3641:9: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char lBuff [MAX_PATH_OR_CMD] ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3699:9: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char lBuff [MAX_PATH_OR_CMD] ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3785:9: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char lBuff [MAX_PATH_OR_CMD] ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3797:38: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
if ( atoi(lBuff) >= 3 )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3800:21: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
lIntTmp = atoi(strtok(lBuff,".")+2 ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3810:45: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
else if ( ( atoi(lBuff) == 2 ) && ( atoi(strtok(lBuff,".")+2 ) >= 32 ) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3810:69: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
else if ( ( atoi(lBuff) == 2 ) && ( atoi(strtok(lBuff,".")+2 ) >= 32 ) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3826:9: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char lBuff [MAX_PATH_OR_CMD] ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3858:17: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
strcpy(gPython2Name , "python2" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3864:33: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf( gPython2Name , "python2.%d" , i ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3892:17: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
strcpy(gPython3Name , "python3" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3898:33: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf( gPython3Name , "python3.%d" , i ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3921:9: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char lPythonCommand[256];
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3922:9: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char lPythonParams[256] =
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3943:9: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char lPythonCommand[256];
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3944:9: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char lPythonParams[256] =
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3964:9: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char lPythonCommand[256];
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3965:9: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char lPythonParams[256] =
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4005:9: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char lDialogString [256] ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4012:25: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
strcpy( lDialogString , "afplay /System/Library/Sounds/Ping.aiff") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4016:25: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
strcpy( lDialogString , "osascript -e 'tell application \"System Events\" to beep'") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4023:17: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
strcpy( lDialogString , "thnum=$(pactl load-module module-sine frequency=440);sleep .3;pactl unload-module $thnum" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4028:17: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
strcpy( lDialogString , "( speaker-test -t sine -f 440 > /dev/tty )& pid=$!;sleep .3; kill -9 $pid" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4032:17: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
strcpy( lDialogString , "beep.exe 440 300" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4036:17: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
strcpy( lDialogString , "printf '\a' > /dev/tty" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4060:9: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char lBuff [MAX_PATH_OR_CMD] ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4084:61: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if (aTitle&&!strcmp(aTitle,"tinyfd_query")){strcpy(tinyfd_response,"applescript");return 1;}
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4086:17: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
strcpy( lDialogString , "osascript ");
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4087:41: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
if ( ! osx9orBetter() ) strcat( lDialogString , " -e 'tell application \"System Events\"' -e 'Activate'");
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4088:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , " -e 'try' -e 'set {vButton} to {button returned} of ( display dialog \"") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4093:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "\" ") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4096:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "with title \"") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4098:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "\" ") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4100:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "with icon ") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4103:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "stop " ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4107:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "caution " ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4111:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "note " ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4117:33: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString ,"default button \"Cancel\" " ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4122:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString ,"buttons {\"No\", \"Yes\"} " ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4125:33: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString ,"default button \"Yes\" " ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4129:33: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString ,"default button \"No\" " ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4131:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString ,"cancel button \"No\"" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4135:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString ,"buttons {\"No\", \"Yes\", \"Cancel\"} " ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4138:41: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
case 1: strcat( lDialogString ,"default button \"Yes\" " ) ; break;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4139:41: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
case 2: strcat( lDialogString ,"default button \"No\" " ) ; break;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4140:41: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
case 0: strcat( lDialogString ,"default button \"Cancel\" " ) ; break;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4142:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString ,"cancel button \"Cancel\"" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4146:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString ,"buttons {\"OK\"} " ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4147:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString ,"default button \"OK\" " ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4149:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString, ")' ") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4151:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString,
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4157:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString, "-e 'on error number -128' " ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4158:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString, "-e '0' " );
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4160:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString, "-e 'end try'") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4161:41: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
if ( ! osx9orBetter() ) strcat( lDialogString, " -e 'end tell'") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4165:61: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if (aTitle&&!strcmp(aTitle,"tinyfd_query")){strcpy(tinyfd_response,"kdialog");return 1;}
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4167:17: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
strcpy( lDialogString , "kdialog" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4170:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, " --attach=$(xprop -root 32x '\t$0' _NET_ACTIVE_WINDOW | cut -f 2)"); /* contribution: Paul Rouget */
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4173:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , " --" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4180:33: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "warning" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4184:33: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "yesnocancel" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4188:33: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "yesno" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4193:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "error" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4197:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "sorry" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4201:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "msgbox" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4203:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , " \"" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4211:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString ,
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4216:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, " --title \"") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4223:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "; x=$? ;if [ $x = 0 ] ;then echo 1;elif [ $x = 1 ] ;then echo 2;else echo 0;fi");
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4227:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , ";if [ $? = 0 ];then echo 1;else echo 0;fi");
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4234:69: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if (aTitle&&!strcmp(aTitle,"tinyfd_query")){strcpy(tinyfd_response,"zenity");return 1;}
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4235:25: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
strcpy( lDialogString , "szAnswer=$(zenity" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4238:33: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, " --attach=$(sleep .01;xprop -root 32x '\t$0' _NET_ACTIVE_WINDOW | cut -f 2)"); /* contribution: Paul Rouget */
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4243:69: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if (aTitle&&!strcmp(aTitle,"tinyfd_query")){strcpy(tinyfd_response,"matedialog");return 1;}
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4244:25: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
strcpy( lDialogString , "szAnswer=$(matedialog" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4248:69: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if (aTitle&&!strcmp(aTitle,"tinyfd_query")){strcpy(tinyfd_response,"shellementary");return 1;}
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4249:25: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
strcpy( lDialogString , "szAnswer=$(shellementary" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4253:69: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if (aTitle&&!strcmp(aTitle,"tinyfd_query")){strcpy(tinyfd_response,"qarma");return 1;}
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4254:25: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
strcpy( lDialogString , "szAnswer=$(qarma" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4257:33: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, " --attach=$(xprop -root 32x '\t$0' _NET_ACTIVE_WINDOW | cut -f 2)"); /* contribution: Paul Rouget */
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4260:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, " --");
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4264:33: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString ,
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4269:33: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "question" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4273:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "list --column \"\" --hide-header \"Yes\" \"No\"" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4277:21: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "error" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4281:21: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "warning" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4285:21: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "info" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4289:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, " --title=\"") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4295:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, " --no-wrap --text=\"") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4301:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , " --icon-name=dialog-" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4310:33: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "information" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4316:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString ,
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4321:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , ");if [ $? = 0 ];then echo 1;else echo 0;fi");
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4326:61: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if (aTitle&&!strcmp(aTitle,"tinyfd_query")){strcpy(tinyfd_response,"python2-tkinter");return 1;}
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4331:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , " -i" ) ; /* for osx without console */
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4334:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString ,
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4339:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString ,
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4344:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString ,"res=tkMessageBox." ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4347:19: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "askokcancel(" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4350:33: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "default=tkMessageBox.OK," ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4354:33: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "default=tkMessageBox.CANCEL," ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4359:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "askyesno(" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4362:33: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "default=tkMessageBox.YES," ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4366:33: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "default=tkMessageBox.NO," ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4371:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "askyesnocancel(" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4374:41: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
case 1: strcat( lDialogString , "default=tkMessageBox.YES," ); break;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4375:41: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
case 2: strcat( lDialogString , "default=tkMessageBox.NO," ); break;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4376:41: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
case 0: strcat( lDialogString , "default=tkMessageBox.CANCEL," ); break;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4381:33: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "showinfo(" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4384:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "icon='" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4393:33: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "info" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4396:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "',") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4399:33: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "title='") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4401:33: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "',") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4405:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "message='") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4413:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, ");\n\
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4420:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, ");\n\
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4427:61: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if (aTitle&&!strcmp(aTitle,"tinyfd_query")){strcpy(tinyfd_response,"python3-tkinter");return 1;}
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4430:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString ,
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4433:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString ,"res=messagebox." ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4436:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "askokcancel(" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4439:33: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "default=messagebox.OK," ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4443:33: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "default=messagebox.CANCEL," ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4448:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "askyesno(" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4451:33: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "default=messagebox.YES," ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4455:33: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "default=messagebox.NO," ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4460:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "askyesnocancel(" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4463:33: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
case 1: strcat( lDialogString , "default=messagebox.YES," ); break;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4464:33: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
case 2: strcat( lDialogString , "default=messagebox.NO," ); break;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4465:33: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
case 0: strcat( lDialogString , "default=messagebox.CANCEL," ); break;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4470:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "showinfo(" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4473:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "icon='" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4482:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "info" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4485:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "',") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4488:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "title='") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4490:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "',") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4494:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "message='") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4502:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, ");\n\
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4509:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, ");\n\
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4518:69: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if (aTitle&&!strcmp(aTitle,"tinyfd_query")){strcpy(tinyfd_response,"gxmessage");return 1;}
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4519:25: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
strcpy( lDialogString , "gxmessage");
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4523:69: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if (aTitle&&!strcmp(aTitle,"tinyfd_query")){strcpy(tinyfd_response,"gmessage");return 1;}
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4524:25: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
strcpy( lDialogString , "gmessage");
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4528:69: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if (aTitle&&!strcmp(aTitle,"tinyfd_query")){strcpy(tinyfd_response,"xmessage");return 1;}
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4529:25: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
strcpy( lDialogString , "xmessage");
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4534:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , " -buttons Ok:1,Cancel:0");
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4537:41: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
case 1: strcat( lDialogString , " -default Ok"); break;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4538:41: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
case 0: strcat( lDialogString , " -default Cancel"); break;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4543:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , " -buttons Yes:1,No:0");
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4546:41: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
case 1: strcat( lDialogString , " -default Yes"); break;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4547:41: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
case 0: strcat( lDialogString , " -default No"); break;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4552:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , " -buttons Yes:1,No:2,Cancel:0");
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4555:41: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
case 1: strcat( lDialogString , " -default Yes"); break;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4556:41: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
case 2: strcat( lDialogString , " -default No"); break;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4557:41: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
case 0: strcat( lDialogString , " -default Cancel"); break;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4562:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , " -buttons Ok:1");
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4563:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , " -default Ok");
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4566:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , " -center \"");
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4574:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , " -title \"");
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4578:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , " ; echo $? ");
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4584:69: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if (aTitle&&!strcmp(aTitle,"tinyfd_query")){strcpy(tinyfd_response,"gdialog");return 1;}
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4586:25: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
strcpy( lDialogString , "(gdialog " ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4590:69: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if (aTitle&&!strcmp(aTitle,"tinyfd_query")){strcpy(tinyfd_response,"xdialog");return 1;}
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4592:25: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
strcpy( lDialogString , "(Xdialog " ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4596:69: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if (aTitle&&!strcmp(aTitle,"tinyfd_query")){strcpy(tinyfd_response,"dialog");return 0;}
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4599:33: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
strcpy( lDialogString , "(dialog " ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4605:33: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "'(" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4612:69: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if (aTitle&&!strcmp(aTitle,"tinyfd_query")){strcpy(tinyfd_response,"whiptail");return 0;}
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4613:25: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
strcpy( lDialogString , "(whiptail " ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4617:69: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if (aTitle&&!strcmp(aTitle,"tinyfd_query")){strcpy(tinyfd_response,"whiptail");return 0;}
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4620:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "'(whiptail " ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4625:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "--title \"") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4627:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "\" ") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4635:33: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "--backtitle \"") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4636:33: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "tab: move focus") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4637:33: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "\" ") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4645:33: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "--defaultno " ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4647:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString ,
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4654:33: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "--defaultno " ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4656:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "--yesno " ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4662:33: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "--defaultno ");
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4664:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "--menu ");
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4668:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "--msgbox " ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4676:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "\" ");
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4682:33: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString,"0 60 0 Yes \"\" No \"\") 2>/tmp/tinyfd.txt;\
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4688:33: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString,
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4696:33: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString,"0 60 0 Yes \"\" No \"\" >/dev/tty ) 2>/tmp/tinyfd.txt;\
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4702:41: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString," >/tmp/tinyfd0.txt';cat /tmp/tinyfd0.txt");
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4706:41: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "; clear >/dev/tty") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4711:33: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "10 60 >/dev/tty) 2>&1;if [ $? = 0 ];");
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4714:41: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString ,
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4719:36: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString,
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4727:61: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if (aTitle&&!strcmp(aTitle,"tinyfd_query")){strcpy(tinyfd_response,"basicinput");return 0;}
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4733:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "echo \"" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4735:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "\";" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4736:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "echo \"" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4738:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "\";echo;echo;" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4742:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "echo \"" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4744:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "\";echo;" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4748:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "echo \"" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4750:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "\"; " ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4754:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "echo -n \"y/n: \"; " ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4755:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "stty sane -echo;" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4756:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString ,
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4758:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString ,
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4760:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "\techo 1\nelse\n\techo 0\nfi" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4764:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "echo -n \"[O]kay/[C]ancel: \"; " ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4765:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "stty sane -echo;" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4766:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString ,
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4768:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString ,
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4770:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "\techo 1\nelse\n\techo 0\nfi" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4774:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "echo -n \"[Y]es/[N]o/[C]ancel: \"; " ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4775:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "stty sane -echo;" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4776:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString ,
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4778:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString ,
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4780:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "elif echo \"$answer\" | grep -iq \"^n\";then\n\techo 2\n" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4781:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "else\n\techo 0\nfi" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4785:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString , "echo -n \"press enter to continue \"; ");
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4786:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "stty sane -echo;" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4787:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString ,
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4790:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString ,
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4795:61: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if (aTitle&&!strcmp(aTitle,"tinyfd_query")){strcpy(tinyfd_response,"python-dbus");return 1;}
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4797:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString ," -c \"import dbus;bus=dbus.SessionBus();");
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4798:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString ,"notif=bus.get_object('org.freedesktop.Notifications','/org/freedesktop/Notifications');" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4799:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString ,"notify=dbus.Interface(notif,'org.freedesktop.Notifications');" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4800:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString ,"notify.Notify('',0,'" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4805:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "','") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4810:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "','") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4816:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "','','',5000)\"") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4820:61: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if (aTitle&&!strcmp(aTitle,"tinyfd_query")){strcpy(tinyfd_response,"perl-dbus");return 1;}
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4833:61: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if (aTitle&&!strcmp(aTitle,"tinyfd_query")){strcpy(tinyfd_response,"notifysend");return 1;}
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4834:17: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
strcpy( lDialogString , "notify-send" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4837:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , " -i '" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4841:9: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , " \"" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4845:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , " | " ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4858:61: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if (aTitle&&!strcmp(aTitle,"tinyfd_query")){strcpy(tinyfd_response,"basicinput");return 0;}
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4980:5: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char lBuff[MAX_PATH_OR_CMD];
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5001:61: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if (aTitle&&!strcmp(aTitle,"tinyfd_query")){strcpy(tinyfd_response,"applescript");return 1;}
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5003:17: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
strcpy( lDialogString , "osascript ");
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5004:41: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
if ( ! osx9orBetter() ) strcat( lDialogString , " -e 'tell application \"System Events\"' -e 'Activate'");
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5005:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , " -e 'try' -e 'display notification \"") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5010:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, " \" ") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5013:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "with title \"") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5015:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "\" ") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5018:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString, "' -e 'end try'") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5019:41: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
if ( ! osx9orBetter() ) strcat( lDialogString, " -e 'end tell'") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5023:61: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if (aTitle&&!strcmp(aTitle,"tinyfd_query")){strcpy(tinyfd_response,"kdialog");return 1;}
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5024:17: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
strcpy( lDialogString , "kdialog" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5028:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , " --icon '" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5034:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , " --title \"" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5039:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , " --passivepopup" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5040:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , " \"" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5045:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , " \" 5" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5053:69: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if (aTitle&&!strcmp(aTitle,"tinyfd_query")){strcpy(tinyfd_response,"zenity");return 1;}
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5054:25: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
strcpy( lDialogString , "zenity" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5058:69: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if (aTitle&&!strcmp(aTitle,"tinyfd_query")){strcpy(tinyfd_response,"matedialog");return 1;}
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5059:25: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
strcpy( lDialogString , "matedialog" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5063:69: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if (aTitle&&!strcmp(aTitle,"tinyfd_query")){strcpy(tinyfd_response,"shellementary");return 1;}
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5064:25: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
strcpy( lDialogString , "shellementary" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5068:69: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if (aTitle&&!strcmp(aTitle,"tinyfd_query")){strcpy(tinyfd_response,"qarma");return 1;}
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5069:25: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
strcpy( lDialogString , "qarma" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5072:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , " --notification");
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5076:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , " --window-icon '");
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5081:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , " --text \"" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5091:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , " \"" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5095:61: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if (aTitle&&!strcmp(aTitle,"tinyfd_query")){strcpy(tinyfd_response,"perl-dbus");return 1;}
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5106:61: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if (aTitle&&!strcmp(aTitle,"tinyfd_query")){strcpy(tinyfd_response,"python-dbus");return 1;}
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5108:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString ," -c \"import dbus;bus=dbus.SessionBus();");
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5109:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString ,"notif=bus.get_object('org.freedesktop.Notifications','/org/freedesktop/Notifications');" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5110:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString ,"notify=dbus.Interface(notif,'org.freedesktop.Notifications');" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5111:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString ,"notify.Notify('',0,'" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5116:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "','") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5121:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "','") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5127:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "','','',5000)\"") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5131:61: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if (aTitle&&!strcmp(aTitle,"tinyfd_query")){strcpy(tinyfd_response,"notifysend");return 1;}
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5132:17: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
strcpy( lDialogString , "notify-send" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5135:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , " -i '" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5139:9: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , " \"" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5143:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , " | " ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5179:16: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
static char lBuff[MAX_PATH_OR_CMD];
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5205:61: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if (aTitle&&!strcmp(aTitle,"tinyfd_query")){strcpy(tinyfd_response,"applescript");return (char const *)1;}
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5206:17: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
strcpy( lDialogString , "osascript ");
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5207:41: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
if ( ! osx9orBetter() ) strcat( lDialogString , " -e 'tell application \"System Events\"' -e 'Activate'");
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5208:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , " -e 'try' -e 'display dialog \"") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5213:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "\" ") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5214:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "default answer \"") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5219:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "\" ") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5222:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "hidden answer true ") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5226:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "with title \"") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5228:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "\" ") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5230:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "with icon note' ") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5231:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "-e '\"1\" & text returned of result' " );
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5232:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "-e 'on error number -128' " ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5233:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "-e '0' " );
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5234:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "-e 'end try'") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5235:41: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
if ( ! osx9orBetter() ) strcat(lDialogString, " -e 'end tell'") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5239:61: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if (aTitle&&!strcmp(aTitle,"tinyfd_query")){strcpy(tinyfd_response,"kdialog");return (char const *)1;}
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5240:17: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
strcpy( lDialogString , "szAnswer=$(kdialog" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5244:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, " --attach=$(xprop -root 32x '\t$0' _NET_ACTIVE_WINDOW | cut -f 2)"); /* contribution: Paul Rouget */
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5249:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, " --password ") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5253:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, " --inputbox ") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5261:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString , "\" \"" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5269:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, " --title \"") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5273:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString ,
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5280:69: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if (aTitle&&!strcmp(aTitle,"tinyfd_query")){strcpy(tinyfd_response,"zenity");return (char const *)1;}
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5281:25: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
strcpy( lDialogString , "szAnswer=$(zenity" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5284:33: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString, " --attach=$(sleep .01;xprop -root 32x '\t$0' _NET_ACTIVE_WINDOW | cut -f 2)"); /* contribution: Paul Rouget */
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5289:69: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if (aTitle&&!strcmp(aTitle,"tinyfd_query")){strcpy(tinyfd_response,"matedialog");return (char const *)1;}
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5290:25: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
strcpy( lDialogString , "szAnswer=$(matedialog" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5294:69: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if (aTitle&&!strcmp(aTitle,"tinyfd_query")){strcpy(tinyfd_response,"shellementary");return (char const *)1;}
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5295:25: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
strcpy( lDialogString , "szAnswer=$(shellementary" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5299:69: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if (aTitle&&!strcmp(aTitle,"tinyfd_query")){strcpy(tinyfd_response,"qarma");return (char const *)1;}
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5300:25: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
strcpy( lDialogString , "szAnswer=$(qarma" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5303:33: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, " --attach=$(xprop -root 32x '\t$0' _NET_ACTIVE_WINDOW | cut -f 2)"); /* contribution: Paul Rouget */
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5306:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString ," --entry" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5310:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, " --title=\"") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5316:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, " --text=\"") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5322:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, " --entry-text=\"") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5328:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, " --hide-text") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5330:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString ,
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5336:69: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if (aTitle&&!strcmp(aTitle,"tinyfd_query")){strcpy(tinyfd_response,"gxmessage");return (char const *)1;}
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5337:25: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
strcpy( lDialogString , "szAnswer=$(gxmessage -buttons Ok:1,Cancel:0 -center \"");
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5341:69: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if (aTitle&&!strcmp(aTitle,"tinyfd_query")){strcpy(tinyfd_response,"gmessage");return (char const *)1;}
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5342:25: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
strcpy( lDialogString , "szAnswer=$(gmessage -buttons Ok:1,Cancel:0 -center \"");
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5352:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , " -title \"");
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5354:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "\" " ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5356:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, " -entrytext \"" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5362:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , ");echo $?$szAnswer");
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5366:61: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if (aTitle&&!strcmp(aTitle,"tinyfd_query")){strcpy(tinyfd_response,"python2-tkinter");return (char const *)1;}
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5370:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , " -i" ) ; /* for osx without console */
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5373:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString ,
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5378:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString ,
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5383:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString ,"res=tkSimpleDialog.askstring(" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5386:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "title='") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5388:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "',") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5393:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "prompt='") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5396:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "',") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5402:33: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "initialvalue='") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5404:33: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "',") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5409:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "show='*'") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5411:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, ");\nif res is None :\n\tprint 0");
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5412:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "\nelse :\n\tprint '1'+res\n\"" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5416:61: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if (aTitle&&!strcmp(aTitle,"tinyfd_query")){strcpy(tinyfd_response,"python3-tkinter");return (char const *)1;}
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5418:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString ,
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5420:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString ,"res=simpledialog.askstring(" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5423:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "title='") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5425:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "',") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5430:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "prompt='") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5433:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "',") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5439:33: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "initialvalue='") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5441:33: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "',") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5446:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "show='*'") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5448:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, ");\nif res is None :\n\tprint(0)");
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5449:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "\nelse :\n\tprint('1'+res)\n\"" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5455:69: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if (aTitle&&!strcmp(aTitle,"tinyfd_query")){strcpy(tinyfd_response,"gdialog");return (char const *)1;}
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5458:25: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
strcpy( lDialogString , "(gdialog " ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5462:69: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if (aTitle&&!strcmp(aTitle,"tinyfd_query")){strcpy(tinyfd_response,"xdialog");return (char const *)1;}
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5464:25: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
strcpy( lDialogString , "(Xdialog " ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5468:69: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if (aTitle&&!strcmp(aTitle,"tinyfd_query")){strcpy(tinyfd_response,"dialog");return (char const *)0;}
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5471:33: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
strcpy( lDialogString , "(dialog " ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5477:33: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "'(" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5484:69: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if (aTitle&&!strcmp(aTitle,"tinyfd_query")){strcpy(tinyfd_response,"whiptail");return (char const *)0;}
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5485:25: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
strcpy( lDialogString , "(whiptail " ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5489:69: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if (aTitle&&!strcmp(aTitle,"tinyfd_query")){strcpy(tinyfd_response,"whiptail");return (char const *)0;}
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5492:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "'(whiptail " ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5497:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "--title \"") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5499:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "\" ") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5504:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "--backtitle \"") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5505:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "tab: move focus") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5508:33: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, " (sometimes nothing, no blink nor star, is shown in text field)") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5510:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "\" ") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5515:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "--inputbox" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5521:33: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "--insecure " ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5523:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "--passwordbox" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5525:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , " \"" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5530:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString,"\" 10 60 ") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5535:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "\" ") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5539:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString,") 2>/tmp/tinyfd.txt;\
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5545:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString,">/dev/tty ) 2>/tmp/tinyfd.txt;\
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5551:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString," >/tmp/tinyfd0.txt';cat /tmp/tinyfd0.txt");
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5555:33: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "; clear >/dev/tty") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5561:61: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if (aTitle&&!strcmp(aTitle,"tinyfd_query")){strcpy(tinyfd_response,"basicinput");return (char const *)0;}
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5572:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "echo \"" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5574:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "\";echo;" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5577:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "echo \"" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5582:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "\";read " ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5585:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "-s " ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5587:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "-p \"" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5588:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "(esc+enter to cancel): \" ANSWER " ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5589:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , ";echo 1$ANSWER >/tmp/tinyfd.txt';" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5590:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "cat -v /tmp/tinyfd.txt");
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5595:48: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if (aTitle&&!strcmp(aTitle,"tinyfd_query")){strcpy(tinyfd_response,"no_solution");return (char const *)0;}
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5600:61: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if (aTitle&&!strcmp(aTitle,"tinyfd_query")){strcpy(tinyfd_response,"basicinput");return (char const *)0;}
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5732:16: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
static char lBuff [MAX_PATH_OR_CMD] ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5733:9: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char lDialogString [MAX_PATH_OR_CMD] ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5734:9: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char lString [MAX_PATH_OR_CMD] ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5744:61: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if (aTitle&&!strcmp(aTitle,"tinyfd_query")){strcpy(tinyfd_response,"applescript");return (char const *)1;}
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5745:17: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
strcpy( lDialogString , "osascript ");
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5746:41: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
if ( ! osx9orBetter() ) strcat( lDialogString , " -e 'tell application \"Finder\"' -e 'Activate'");
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5747:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , " -e 'try' -e 'POSIX path of ( choose file name " );
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5750:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "with prompt \"") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5752:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "\" ") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5757:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "default location \"") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5759:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString , "\" " ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5764:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "default name \"") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5766:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString , "\" " ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5768:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , ")' " ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5769:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "-e 'on error number -128' " ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5770:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "-e 'end try'") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5771:41: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
if ( ! osx9orBetter() ) strcat( lDialogString, " -e 'end tell'") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5775:61: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if (aTitle&&!strcmp(aTitle,"tinyfd_query")){strcpy(tinyfd_response,"kdialog");return (char const *)1;}
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5777:17: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
strcpy( lDialogString , "kdialog" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5780:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, " --attach=$(xprop -root 32x '\t$0' _NET_ACTIVE_WINDOW | cut -f 2)"); /* contribution: Paul Rouget */
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5782:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , " --getsavefilename " ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5788:33: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "$PWD/") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5796:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "$PWD/") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5801:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString , " \"" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5809:33: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , " | " ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5816:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, " --title \"") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5825:69: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if (aTitle&&!strcmp(aTitle,"tinyfd_query")){strcpy(tinyfd_response,"zenity");return (char const *)1;}
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5826:25: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
strcpy( lDialogString , "zenity" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5829:33: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString, " --attach=$(sleep .01;xprop -root 32x '\t$0' _NET_ACTIVE_WINDOW | cut -f 2)"); /* contribution: Paul Rouget */
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5834:69: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if (aTitle&&!strcmp(aTitle,"tinyfd_query")){strcpy(tinyfd_response,"matedialog");return (char const *)1;}
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5835:25: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
strcpy( lDialogString , "matedialog" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5839:69: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if (aTitle&&!strcmp(aTitle,"tinyfd_query")){strcpy(tinyfd_response,"shellementary");return (char const *)1;}
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5840:25: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
strcpy( lDialogString , "shellementary" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5844:69: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if (aTitle&&!strcmp(aTitle,"tinyfd_query")){strcpy(tinyfd_response,"qarma");return (char const *)1;}
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5845:25: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
strcpy( lDialogString , "qarma" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5848:33: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, " --attach=$(xprop -root 32x '\t$0' _NET_ACTIVE_WINDOW | cut -f 2)"); /* contribution: Paul Rouget */
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5851:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, " --file-selection --save --confirm-overwrite" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5855:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, " --title=\"") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5861:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, " --filename=\"") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5867:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , " --file-filter='" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5871:33: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , " | " ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5878:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "' --file-filter='All files | *'" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5883:61: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if (aTitle&&!strcmp(aTitle,"tinyfd_query")){strcpy(tinyfd_response,"python2-tkinter");return (char const *)1;}
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5887:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , " -i" ) ; /* for osx without console */
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5889:13: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString ,
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5894:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString ,
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5899:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "print tkFileDialog.asksaveasfilename(");
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5902:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "title='") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5904:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "',") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5911:33: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "initialdir='") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5913:33: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString , "'," ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5918:33: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "initialfile='") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5920:33: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString , "'," ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5927:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString , "filetypes=(" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5928:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "('" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5933:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "',(" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5938:33: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "'," ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5940:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "))," ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5941:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "('All files','*'))" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5943:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , ")\"" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5947:61: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if (aTitle&&!strcmp(aTitle,"tinyfd_query")){strcpy(tinyfd_response,"python3-tkinter");return (char const *)1;}
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5949:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString ,
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5951:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "print( filedialog.asksaveasfilename(");
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5954:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "title='") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5956:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "',") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5963:33: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "initialdir='") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5965:33: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString , "'," ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5970:33: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "initialfile='") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5972:33: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString , "'," ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5979:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString , "filetypes=(" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5980:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "('" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5985:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "',(" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5990:33: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "'," ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5992:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "))," ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5993:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "('All files','*'))" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5995:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "))\"" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6001:69: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if (aTitle&&!strcmp(aTitle,"tinyfd_query")){strcpy(tinyfd_response,"xdialog");return (char const *)1;}
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6003:25: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
strcpy( lDialogString , "(Xdialog " ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6007:69: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if (aTitle&&!strcmp(aTitle,"tinyfd_query")){strcpy(tinyfd_response,"dialog");return (char const *)0;}
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6008:25: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
strcpy( lDialogString , "(dialog " ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6012:69: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if (aTitle&&!strcmp(aTitle,"tinyfd_query")){strcpy(tinyfd_response,"dialog");return (char const *)0;}
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6015:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "'(" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6022:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "--title \"") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6024:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "\" ") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6029:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "--backtitle \"") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6030:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString,
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6032:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "\" ") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6035:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "--fselect \"" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6040:33: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "./") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6051:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "./") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6056:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "\" 0 60 ) 2>&1 ") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6060:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "\" 0 60 >/dev/tty) ") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6063:27: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString ,
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6068:33: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "2>&1 ; clear >/dev/tty") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6129:16: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
static char lBuff [MAX_MULTIPLE_FILES*MAX_PATH_OR_CMD] ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6130:9: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char lDialogString [MAX_PATH_OR_CMD] ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6131:9: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char lString [MAX_PATH_OR_CMD] ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6143:61: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if (aTitle&&!strcmp(aTitle,"tinyfd_query")){strcpy(tinyfd_response,"applescript");return (char const *)1;}
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6144:17: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
strcpy( lDialogString , "osascript ");
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6145:41: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
if ( ! osx9orBetter() ) strcat( lDialogString , " -e 'tell application \"System Events\"' -e 'Activate'");
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6146:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , " -e 'try' -e '" );
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6151:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "POSIX path of ( " );
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6155:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "set mylist to " );
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6157:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "choose file " );
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6160:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "with prompt \"") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6162:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "\" ") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6167:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "default location \"") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6169:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString , "\" " ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6173:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString , "of type {\"" );
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6178:33: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , ",\"" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6182:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "} " ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6186:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "multiple selections allowed true ' " ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6187:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString ,
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6189:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString ,
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6191:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "-e 'set mystring to mystring & \"|\"' " );
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6192:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString ,
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6194:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "-e 'end repeat' " );
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6195:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "-e 'mystring' " );
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6199:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , ")' " ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6201:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "-e 'on error number -128' " ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6202:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "-e 'end try'") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6203:41: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
if ( ! osx9orBetter() ) strcat( lDialogString, " -e 'end tell'") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6207:61: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if (aTitle&&!strcmp(aTitle,"tinyfd_query")){strcpy(tinyfd_response,"kdialog");return (char const *)1;}
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6210:17: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
strcpy( lDialogString , "kdialog" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6213:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, " --attach=$(xprop -root 32x '\t$0' _NET_ACTIVE_WINDOW | cut -f 2)"); /* contribution: Paul Rouget */
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6215:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , " --getopenfilename " ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6221:33: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "$PWD/") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6229:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "$PWD/") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6234:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString , " \"" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6242:33: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , " | " ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6249:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , " --multiple --separate-output" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6253:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, " --title \"") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6262:69: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if (aTitle&&!strcmp(aTitle,"tinyfd_query")){strcpy(tinyfd_response,"zenity");return (char const *)1;}
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6263:25: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
strcpy( lDialogString , "zenity" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6266:33: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString, " --attach=$(sleep .01;xprop -root 32x '\t$0' _NET_ACTIVE_WINDOW | cut -f 2)"); /* contribution: Paul Rouget */
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6271:69: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if (aTitle&&!strcmp(aTitle,"tinyfd_query")){strcpy(tinyfd_response,"matedialog");return (char const *)1;}
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6272:25: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
strcpy( lDialogString , "matedialog" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6276:69: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if (aTitle&&!strcmp(aTitle,"tinyfd_query")){strcpy(tinyfd_response,"shellementary");return (char const *)1;}
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6277:25: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
strcpy( lDialogString , "shellementary" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6281:69: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if (aTitle&&!strcmp(aTitle,"tinyfd_query")){strcpy(tinyfd_response,"qarma");return (char const *)1;}
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6282:25: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
strcpy( lDialogString , "qarma" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6285:33: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, " --attach=$(xprop -root 32x '\t$0' _NET_ACTIVE_WINDOW | cut -f 2)"); /* contribution: Paul Rouget */
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6288:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , " --file-selection" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6292:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , " --multiple" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6296:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, " --title=\"") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6302:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, " --filename=\"") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6308:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , " --file-filter='" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6312:33: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , " | " ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6319:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "' --file-filter='All files | *'" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6324:61: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if (aTitle&&!strcmp(aTitle,"tinyfd_query")){strcpy(tinyfd_response,"python2-tkinter");return (char const *)1;}
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6328:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , " -i" ) ; /* for osx without console */
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6330:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString ,
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6335:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString ,
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6339:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "lFiles=tkFileDialog.askopenfilename(");
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6342:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "multiple=1," ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6346:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "title='") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6348:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "',") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6355:33: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "initialdir='") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6357:33: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString , "'," ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6362:33: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "initialfile='") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6364:33: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString , "'," ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6371:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString , "filetypes=(" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6372:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "('" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6377:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "',(" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6382:33: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "'," ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6384:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "))," ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6385:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "('All files','*'))" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6387:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , ");\
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6394:61: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if (aTitle&&!strcmp(aTitle,"tinyfd_query")){strcpy(tinyfd_response,"python3-tkinter");return (char const *)1;}
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6396:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString ,
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6398:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "lFiles=filedialog.askopenfilename(");
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6401:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "multiple=1," ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6405:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "title='") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6407:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "',") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6414:33: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "initialdir='") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6416:33: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString , "'," ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6421:33: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "initialfile='") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6423:33: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString , "'," ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6430:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString , "filetypes=(" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6431:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "('" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6436:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "',(" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6441:33: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "'," ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6443:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "))," ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6444:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "('All files','*'))" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6446:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , ");\
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6455:69: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if (aTitle&&!strcmp(aTitle,"tinyfd_query")){strcpy(tinyfd_response,"xdialog");return (char const *)1;}
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6457:25: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
strcpy( lDialogString , "(Xdialog " ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6461:69: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if (aTitle&&!strcmp(aTitle,"tinyfd_query")){strcpy(tinyfd_response,"dialog");return (char const *)0;}
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6462:25: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
strcpy( lDialogString , "(dialog " ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6466:69: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if (aTitle&&!strcmp(aTitle,"tinyfd_query")){strcpy(tinyfd_response,"dialog");return (char const *)0;}
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6469:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "'(" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6476:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "--title \"") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6478:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "\" ") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6483:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "--backtitle \"") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6484:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString,
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6486:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "\" ") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6489:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "--fselect \"" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6494:33: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "./") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6505:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "./") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6510:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "\" 0 60 ) 2>&1 ") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6514:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "\" 0 60 >/dev/tty) ") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6517:33: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString ,
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6522:33: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "2>&1 ; clear >/dev/tty") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6587:16: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
static char lBuff [MAX_PATH_OR_CMD] ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6588:9: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char lDialogString [MAX_PATH_OR_CMD] ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6597:61: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if (aTitle&&!strcmp(aTitle,"tinyfd_query")){strcpy(tinyfd_response,"applescript");return (char const *)1;}
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6598:17: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
strcpy( lDialogString , "osascript ");
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6599:41: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
if ( ! osx9orBetter() ) strcat( lDialogString , " -e 'tell application \"System Events\"' -e 'Activate'");
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6600:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , " -e 'try' -e 'POSIX path of ( choose folder ");
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6603:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "with prompt \"") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6605:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "\" ") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6609:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "default location \"") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6611:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString , "\" " ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6613:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , ")' " ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6614:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "-e 'on error number -128' " ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6615:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "-e 'end try'") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6616:41: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
if ( ! osx9orBetter() ) strcat( lDialogString, " -e 'end tell'") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6620:61: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if (aTitle&&!strcmp(aTitle,"tinyfd_query")){strcpy(tinyfd_response,"kdialog");return (char const *)1;}
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6621:17: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
strcpy( lDialogString , "kdialog" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6624:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, " --attach=$(xprop -root 32x '\t$0' _NET_ACTIVE_WINDOW | cut -f 2)"); /* contribution: Paul Rouget */
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6626:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , " --getexistingdirectory " ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6632:33: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "$PWD/") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6640:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "$PWD/") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6645:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, " --title \"") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6654:69: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if (aTitle&&!strcmp(aTitle,"tinyfd_query")){strcpy(tinyfd_response,"zenity");return (char const *)1;}
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6655:25: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
strcpy( lDialogString , "zenity" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6658:33: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString, " --attach=$(sleep .01;xprop -root 32x '\t$0' _NET_ACTIVE_WINDOW | cut -f 2)"); /* contribution: Paul Rouget */
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6663:69: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if (aTitle&&!strcmp(aTitle,"tinyfd_query")){strcpy(tinyfd_response,"matedialog");return (char const *)1;}
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6664:25: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
strcpy( lDialogString , "matedialog" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6668:69: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if (aTitle&&!strcmp(aTitle,"tinyfd_query")){strcpy(tinyfd_response,"shellementary");return (char const *)1;}
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6669:25: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
strcpy( lDialogString , "shellementary" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6673:69: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if (aTitle&&!strcmp(aTitle,"tinyfd_query")){strcpy(tinyfd_response,"qarma");return (char const *)1;}
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6674:25: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
strcpy( lDialogString , "qarma" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6677:33: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, " --attach=$(xprop -root 32x '\t$0' _NET_ACTIVE_WINDOW | cut -f 2)"); /* contribution: Paul Rouget */
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6680:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , " --file-selection --directory" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6684:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, " --title=\"") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6690:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, " --filename=\"") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6697:61: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if (aTitle&&!strcmp(aTitle,"tinyfd_query")){strcpy(tinyfd_response,"python2-tkinter");return (char const *)1;}
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6701:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , " -i" ) ; /* for osx without console */
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6703:9: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString ,
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6708:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString ,
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6713:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "print tkFileDialog.askdirectory(");
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6716:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "title='") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6718:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "',") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6722:33: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "initialdir='") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6726:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , ")\"" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6730:61: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if (aTitle&&!strcmp(aTitle,"tinyfd_query")){strcpy(tinyfd_response,"python3-tkinter");return (char const *)1;}
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6732:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString ,
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6734:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "print( filedialog.askdirectory(");
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6737:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "title='") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6739:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "',") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6743:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "initialdir='") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6747:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , ") )\"" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6753:69: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if (aTitle&&!strcmp(aTitle,"tinyfd_query")){strcpy(tinyfd_response,"xdialog");return (char const *)1;}
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6755:25: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
strcpy( lDialogString , "(Xdialog " ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6759:69: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if (aTitle&&!strcmp(aTitle,"tinyfd_query")){strcpy(tinyfd_response,"dialog");return (char const *)0;}
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6760:25: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
strcpy( lDialogString , "(dialog " ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6764:69: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if (aTitle&&!strcmp(aTitle,"tinyfd_query")){strcpy(tinyfd_response,"dialog");return (char const *)0;}
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6767:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "'(" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6774:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "--title \"") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6776:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "\" ") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6781:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "--backtitle \"") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6782:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString,
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6784:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "\" ") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6787:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "--dselect \"" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6800:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "./") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6805:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "\" 0 60 ) 2>&1 ") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6809:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "\" 0 60 >/dev/tty) ") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6812:27: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString ,
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6817:33: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "2>&1 ; clear >/dev/tty") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6859:18: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
unsigned char const aDefaultRGB[3] , /* { 0 , 255 , 255 } */
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6860:18: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
unsigned char aoResultRGB[3] ) /* { 0 , 0 , 0 } */
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6862:16: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
static char lBuff [128] ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6863:9: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char lTmp [128] ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6864:9: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char lDialogString [MAX_PATH_OR_CMD] ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6865:9: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char lDefaultHexRGB[8];
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6867:18: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
unsigned char lDefaultRGB[3];
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6892:61: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if (aTitle&&!strcmp(aTitle,"tinyfd_query")){strcpy(tinyfd_response,"applescript");return (char const *)1;}
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6894:17: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
strcpy( lDialogString , "osascript");
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6898:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , " -e 'tell application \"System Events\"' -e 'Activate'");
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6899:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , " -e 'try' -e 'set mycolor to choose color default color {");
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6903:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString ,
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6908:17: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(lTmp, "%d", 256 * lDefaultRGB[0] ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6911:17: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(lTmp, "%d", 256 * lDefaultRGB[1] ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6914:17: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(lTmp, "%d", 256 * lDefaultRGB[2] ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6916:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "}' " ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6917:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString ,
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6919:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString ,
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6921:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString ,
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6923:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "-e 'end repeat' " );
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6924:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "-e 'mystring' ");
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6925:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "-e 'on error number -128' " ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6926:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "-e 'end try'") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6927:41: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
if ( ! osx9orBetter() ) strcat( lDialogString, " -e 'end tell'") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6931:61: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if (aTitle&&!strcmp(aTitle,"tinyfd_query")){strcpy(tinyfd_response,"kdialog");return (char const *)1;}
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6932:17: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
strcpy( lDialogString , "kdialog" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6935:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, " --attach=$(xprop -root 32x '\t$0' _NET_ACTIVE_WINDOW | cut -f 2)"); /* contribution: Paul Rouget */
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6941:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, " --title \"") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6951:69: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if (aTitle&&!strcmp(aTitle,"tinyfd_query")){strcpy(tinyfd_response,"zenity3");return (char const *)1;}
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6952:25: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
strcpy( lDialogString , "zenity" );
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6955:33: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString, " --attach=$(sleep .01;xprop -root 32x '\t$0' _NET_ACTIVE_WINDOW | cut -f 2)"); /* contribution: Paul Rouget */
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6960:69: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if (aTitle&&!strcmp(aTitle,"tinyfd_query")){strcpy(tinyfd_response,"matedialog");return (char const *)1;}
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6961:25: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
strcpy( lDialogString , "matedialog" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6965:69: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if (aTitle&&!strcmp(aTitle,"tinyfd_query")){strcpy(tinyfd_response,"shellementary");return (char const *)1;}
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6966:25: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
strcpy( lDialogString , "shellementary" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6970:69: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if (aTitle&&!strcmp(aTitle,"tinyfd_query")){strcpy(tinyfd_response,"qarma");return (char const *)1;}
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6971:25: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
strcpy( lDialogString , "qarma" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6974:33: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, " --attach=$(xprop -root 32x '\t$0' _NET_ACTIVE_WINDOW | cut -f 2)"); /* contribution: Paul Rouget */
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6977:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , " --color-selection --show-palette" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6982:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, " --title=\"") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6989:61: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if (aTitle&&!strcmp(aTitle,"tinyfd_query")){strcpy(tinyfd_response,"xdialog");return (char const *)1;}
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6991:17: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
strcpy( lDialogString , "Xdialog --colorsel \"" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6996:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, "\" 0 60 ") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6997:17: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(lTmp,"%hhu %hhu %hhu",lDefaultRGB[0],
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:7000:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, " 2>&1");
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:7004:61: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if (aTitle&&!strcmp(aTitle,"tinyfd_query")){strcpy(tinyfd_response,"python2-tkinter");return (char const *)1;}
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:7008:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , " -i" ) ; /* for osx without console */
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:7011:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString ,
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:7016:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString ,
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:7021:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "res=tkColorChooser.askcolor(color='" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:7028:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, ",title='") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:7032:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , ");\
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:7037:61: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if (aTitle&&!strcmp(aTitle,"tinyfd_query")){strcpy(tinyfd_response,"python3-tkinter");return (char const *)1;}
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:7039:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString ,
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:7041:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "res=colorchooser.askcolor(color='" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:7047:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, ",title='") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:7051:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , ");\
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:7146:16: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
static char lBuff [MAX_PATH_OR_CMD] ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:7147:9: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char lDialogString [MAX_PATH_OR_CMD] ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:7157:69: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if (aTitle&&!strcmp(aTitle,"tinyfd_query")){strcpy(tinyfd_response,"zenity");return (char const *)1;}
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:7158:25: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
strcpy( lDialogString , "zenity" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:7161:33: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString, " --attach=$(sleep .01;xprop -root 32x '\t$0' _NET_ACTIVE_WINDOW | cut -f 2)"); /* contribution: Paul Rouget */
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:7166:69: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if (aTitle&&!strcmp(aTitle,"tinyfd_query")){strcpy(tinyfd_response,"matedialog");return (char const *)1;}
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:7167:25: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
strcpy( lDialogString , "matedialog" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:7171:69: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if (aTitle&&!strcmp(aTitle,"tinyfd_query")){strcpy(tinyfd_response,"shellementary");return (char const *)1;}
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:7172:25: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
strcpy( lDialogString , "shellementary" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:7176:69: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
if (aTitle&&!strcmp(aTitle,"tinyfd_query")){strcpy(tinyfd_response,"qarma");return (char const *)1;}
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:7177:25: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
strcpy( lDialogString , "qarma" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:7180:33: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, " --attach=$(xprop -root 32x '\t$0' _NET_ACTIVE_WINDOW | cut -f 2)"); /* contribution: Paul Rouget */
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:7183:17: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , " --list --print-column=ALL" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:7187:25: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(lDialogString, " --title=\"") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:7196:33: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , " --column=\"" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:7209:33: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat( lDialogString , "\" " ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.h:104:8: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
extern char const tinyfd_version[8]; /* contains tinyfd current version number */
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.h:123:8: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
extern char tinyfd_response[1024];
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.h:185:11: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
unsigned char const aDefaultRGB[3] , /* { 0 , 255 , 255 } */
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.h:186:11: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
unsigned char aoResultRGB[3] ) ; /* { 0 , 0 , 0 } */
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.h:249:11: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
unsigned char const aDefaultRGB[3] , /* { 0 , 255 , 255 } */
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.h:250:11: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
unsigned char aoResultRGB[3] ) ; /* { 0 , 0 , 0 } */
data/pt2-clone-1.18+ds/pt_pal_editor/src/unicode.h:33:34: [2] (misc) fopen:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
#define UNICHAR_FOPEN(a, b) fopen(a, b)
data/pt2-clone-1.18+ds/src/gfx/bmp/bmp2pth.c:9:8: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
static char input[4096 + 1];
data/pt2-clone-1.18+ds/src/gfx/bmp/bmp2pth.c:15:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char bitmap_magic[2], *out_filename;
data/pt2-clone-1.18+ds/src/gfx/bmp/bmp2pth.c:31:2: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
strcpy(input, "debug.bmp");
data/pt2-clone-1.18+ds/src/gfx/bmp/bmp2pth.c:34:7: [2] (misc) fopen:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
in = fopen(input, "rb");
data/pt2-clone-1.18+ds/src/gfx/bmp/bmp2pth.c:53:8: [2] (misc) fopen:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
out = fopen(out_filename, "w");
data/pt2-clone-1.18+ds/src/pt2_config.c:26:8: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
static char oldCwd[PATH_MAX];
data/pt2-clone-1.18+ds/src/pt2_config.c:79:6: [2] (misc) fopen:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
f = fopen("protracker.ini", "r");
data/pt2-clone-1.18+ds/src/pt2_config.c:84:6: [2] (misc) fopen:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
f = fopen("protracker.ini", "r");
data/pt2-clone-1.18+ds/src/pt2_config.c:91:7: [2] (misc) fopen:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
f = fopen("protracker.ini", "r");
data/pt2-clone-1.18+ds/src/pt2_config.c:301:25: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
const int32_t num = atoi(&configLine[9]);
data/pt2-clone-1.18+ds/src/pt2_config.c:397:25: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
const int32_t num = atoi(&configLine[13]);
data/pt2-clone-1.18+ds/src/pt2_config.c:414:25: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
const int32_t num = atoi(&configLine[10]);
data/pt2-clone-1.18+ds/src/pt2_config.c:424:25: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
const int32_t num = atoi(&configLine[11]);
data/pt2-clone-1.18+ds/src/pt2_config.c:434:25: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
const int32_t num = atoi(&configLine[17]);
data/pt2-clone-1.18+ds/src/pt2_config.c:448:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char tmpFilename[16];
data/pt2-clone-1.18+ds/src/pt2_config.c:452:6: [2] (misc) fopen:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
f = fopen("PT.Config", "rb"); // PT didn't read PT.Config with no number, but let's support it
data/pt2-clone-1.18+ds/src/pt2_config.c:457:4: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(tmpFilename, "PT.Config-%02d", i);
data/pt2-clone-1.18+ds/src/pt2_config.c:458:8: [2] (misc) fopen:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
f = fopen(tmpFilename, "rb");
data/pt2-clone-1.18+ds/src/pt2_config.c:472:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char cfgString[24];
data/pt2-clone-1.18+ds/src/pt2_config.c:624:6: [2] (misc) fopen:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
f = fopen("colors.ini", "r");
data/pt2-clone-1.18+ds/src/pt2_diskop.c:45:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char dateChanged[6 + 1];
data/pt2-clone-1.18+ds/src/pt2_diskop.c:66:8: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
static char fileNameBuffer[PATH_MAX + 1];
data/pt2-clone-1.18+ds/src/pt2_diskop.c:75:24: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
case DISKOP_SMP_WAV: strcat(fileName, ".wav"); break;
data/pt2-clone-1.18+ds/src/pt2_diskop.c:76:24: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
case DISKOP_SMP_IFF: strcat(fileName, ".iff"); break;
data/pt2-clone-1.18+ds/src/pt2_diskop.c:470:3: [2] (buffer) MultiByteToWideChar:
Requires maximum length in CHARACTERS, not bytes (CWE-120).
MultiByteToWideChar(CP_ACP, MB_PRECOMPOSED, config.defModulesDir, -1, pathTmp, PATH_MAX);
data/pt2-clone-1.18+ds/src/pt2_diskop.c:486:3: [2] (buffer) MultiByteToWideChar:
Requires maximum length in CHARACTERS, not bytes (CWE-120).
MultiByteToWideChar(CP_ACP, MB_PRECOMPOSED, config.defSamplesDir, -1, pathTmp, PATH_MAX);
data/pt2-clone-1.18+ds/src/pt2_diskop.c:676:3: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(&diskOpEntry[diskop.numEntries], &tmpBuffer, sizeof (fileEntry_t));
data/pt2-clone-1.18+ds/src/pt2_diskop.c:696:4: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(&diskOpEntry[diskop.numEntries], &tmpBuffer, sizeof (fileEntry_t));
data/pt2-clone-1.18+ds/src/pt2_diskop.c:734:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char tmpStr[7];
data/pt2-clone-1.18+ds/src/pt2_edit.c:114:4: [2] (buffer) MultiByteToWideChar:
Requires maximum length in CHARACTERS, not bytes (CWE-120).
MultiByteToWideChar(CP_ACP, MB_PRECOMPOSED, editor.currPath, -1, pathU, PATH_MAX);
data/pt2-clone-1.18+ds/src/pt2_edit.c:1087:2: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(editor.undoBuffer, song->patterns[song->currPattern], sizeof (note_t) * (AMIGA_VOICES * MOD_ROWS));
data/pt2-clone-1.18+ds/src/pt2_edit.c:1140:3: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(&song->sampleData[smpTo->offset], &song->sampleData[smpFrom->offset], MAX_SAMPLE_LEN);
data/pt2-clone-1.18+ds/src/pt2_helpers.c:65:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char strBuf[1024];
data/pt2-clone-1.18+ds/src/pt2_helpers.c:121:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char titleTemp[128];
data/pt2-clone-1.18+ds/src/pt2_keyboard.c:317:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char str[32];
data/pt2-clone-1.18+ds/src/pt2_keyboard.c:325:2: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(str, "MULTI=%d-%d-%d-%d", editor.multiModeNext[0], editor.multiModeNext[1],
data/pt2-clone-1.18+ds/src/pt2_keyboard.c:886:6: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(editor.patternBuffer, song->patterns[song->currPattern],
data/pt2-clone-1.18+ds/src/pt2_keyboard.c:937:6: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(editor.patternBuffer, song->patterns[song->currPattern],
data/pt2-clone-1.18+ds/src/pt2_keyboard.c:983:6: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(song->patterns[song->currPattern],
data/pt2-clone-1.18+ds/src/pt2_main.c:470:2: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
strcpy(editor.mixText, "MIX 01+02 TO 03");
data/pt2-clone-1.18+ds/src/pt2_main.c:755:4: [2] (buffer) CopyMemory:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
CopyMemory((PVOID)sharedMemBuf, &video.hWnd, sizeof (HWND));
data/pt2-clone-1.18+ds/src/pt2_main.c:778:4: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(&hWnd_to, sharedMemBuf, sizeof (HWND));
data/pt2-clone-1.18+ds/src/pt2_main.c:790:14: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
strcpy((char *)sharedMemBuf, argv[1]);
data/pt2-clone-1.18+ds/src/pt2_main.c:847:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char fileName[32];
data/pt2-clone-1.18+ds/src/pt2_main.c:865:5: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(fileName, "backup%03d.mod", i);
data/pt2-clone-1.18+ds/src/pt2_mod2wav.c:150:9: [2] (misc) fopen:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
fOut = fopen(fileName, "wb");
data/pt2-clone-1.18+ds/src/pt2_module_loader.c:39:8: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
static char oldFullPath[(PATH_MAX * 2) + 2];
data/pt2-clone-1.18+ds/src/pt2_module_loader.c:168:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char modID[4], tmpChar;
data/pt2-clone-1.18+ds/src/pt2_module_loader.c:754:2: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(buffer, buf->_ptr, pcnt);
data/pt2-clone-1.18+ds/src/pt2_module_loader.c:979:2: [2] (buffer) MultiByteToWideChar:
Requires maximum length in CHARACTERS, not bytes (CWE-120).
MultiByteToWideChar(CP_UTF8, 0, arg, -1, filenameU, filenameLen);
data/pt2-clone-1.18+ds/src/pt2_module_loader.c:1009:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char *fileName, begStr[8], endStr[8];
data/pt2-clone-1.18+ds/src/pt2_module_loader.c:1066:2: [2] (buffer) MultiByteToWideChar:
Requires maximum length in CHARACTERS, not bytes (CWE-120).
MultiByteToWideChar(CP_UTF8, 0, fullPath, -1, fullPathU, fullPathLen);
data/pt2-clone-1.18+ds/src/pt2_module_loader.c:1097:4: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(oldFullPath, fullPath, fullPathLen);
data/pt2-clone-1.18+ds/src/pt2_module_saver.c:24:6: [2] (misc) fopen:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
f = fopen(fileName, "wb");
data/pt2-clone-1.18+ds/src/pt2_module_saver.c:129:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char fileName[128], tmpBuffer[64];
data/pt2-clone-1.18+ds/src/pt2_module_saver.c:138:4: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(fileName, "mod.untitled");
data/pt2-clone-1.18+ds/src/pt2_module_saver.c:142:4: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(fileName, "mod.");
data/pt2-clone-1.18+ds/src/pt2_module_saver.c:156:4: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(fileName, "untitled.mod");
data/pt2-clone-1.18+ds/src/pt2_module_saver.c:166:4: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(fileName, ".mod");
data/pt2-clone-1.18+ds/src/pt2_module_saver.c:179:6: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(fileName, "mod.untitled-%d", i);
data/pt2-clone-1.18+ds/src/pt2_module_saver.c:197:6: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(fileName, "untitled-%d.mod", i);
data/pt2-clone-1.18+ds/src/pt2_mouse.c:1729:4: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(&song->sampleData[s->offset], editor.tempSample, MAX_SAMPLE_LEN);
data/pt2-clone-1.18+ds/src/pt2_mouse.c:2406:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char pat2SmpText[24];
data/pt2-clone-1.18+ds/src/pt2_mouse.c:2426:5: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(pat2SmpText, "ROW 00 TO SMP %02X?", editor.currSample + 1);
data/pt2-clone-1.18+ds/src/pt2_mouse.c:2428:5: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(pat2SmpText, "ROW %02d TO SMP %02X?", song->currRow, editor.currSample + 1);
data/pt2-clone-1.18+ds/src/pt2_mouse.c:2674:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(ptr8_1, &song->sampleData[s->offset], MAX_SAMPLE_LEN);
data/pt2-clone-1.18+ds/src/pt2_mouse.c:2911:4: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(ptr8_2, ptr8_1, MAX_SAMPLE_LEN);
data/pt2-clone-1.18+ds/src/pt2_mouse.c:3058:4: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(&song->sampleData[s->offset], &song->sampleData[s->offset + editor.samplePos], MAX_SAMPLE_LEN - editor.samplePos);
data/pt2-clone-1.18+ds/src/pt2_pat2smp.c:86:3: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
strcpy(s->text, "pat2smp (a-3 tune:+4)");
data/pt2-clone-1.18+ds/src/pt2_pat2smp.c:91:3: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
strcpy(s->text, "pat2smp (f-3 tune:+1)");
data/pt2-clone-1.18+ds/src/pt2_pattern_viewer.c:14:14: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
static const char emptyDottedEffect[4] = { 0x02, 0x02, 0x02, 0x00 };
data/pt2-clone-1.18+ds/src/pt2_pattern_viewer.c:15:14: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
static const char emptyDottedSample[3] = { 0x02, 0x02, 0x00 };
data/pt2-clone-1.18+ds/src/pt2_sample_loader.c:900:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char tmpCharBuf[23];
data/pt2-clone-1.18+ds/src/pt2_sample_loader.c:1094:3: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(&song->sampleData[s->offset], sampleData, sampleLength);
data/pt2-clone-1.18+ds/src/pt2_sample_loader.c:1139:3: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(s->text, tmpCharBuf, nameLen);
data/pt2-clone-1.18+ds/src/pt2_sample_loader.c:1147:3: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(s->text, entryName, nameLen);
data/pt2-clone-1.18+ds/src/pt2_sample_loader.c:1253:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char compType[4];
data/pt2-clone-1.18+ds/src/pt2_sample_saver.c:68:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char fileName[128], tmpBuffer[64];
data/pt2-clone-1.18+ds/src/pt2_sample_saver.c:87:3: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
strcpy(fileName, "untitled");
data/pt2-clone-1.18+ds/src/pt2_sample_saver.c:111:5: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(fileName, "untitled-%d", j);
data/pt2-clone-1.18+ds/src/pt2_sample_saver.c:152:6: [2] (misc) fopen:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
f = fopen(fileName, "wb");
data/pt2-clone-1.18+ds/src/pt2_sampler.c:200:3: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(editor.tempSample, &song->sampleData[s->offset], s->length);
data/pt2-clone-1.18+ds/src/pt2_sampler.c:734:3: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(&song->sampleData[s->offset], editor.smpRedoBuffer[sample], editor.smpRedoLengths[sample]);
data/pt2-clone-1.18+ds/src/pt2_sampler.c:789:4: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(editor.smpRedoBuffer[sample], &song->sampleData[s->offset], s->length);
data/pt2-clone-1.18+ds/src/pt2_sampler.c:917:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char smpText[22 + 1];
data/pt2-clone-1.18+ds/src/pt2_sampler.c:1020:3: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(s->text, smpText, sizeof (smpText));
data/pt2-clone-1.18+ds/src/pt2_sampler.c:1205:2: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(readData, writeData, readLength);
data/pt2-clone-1.18+ds/src/pt2_sampler.c:1354:2: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(&song->sampleData[s3->offset], mixPtr, mixLength);
data/pt2-clone-1.18+ds/src/pt2_sampler.c:1656:2: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(sampler.copyBuf, &song->sampleData[s->offset+editor.markStartOfs], sampler.copyBufSize);
data/pt2-clone-1.18+ds/src/pt2_sampler.c:1742:2: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(tmpBuf, &song->sampleData[s->offset], editor.markStartOfs);
data/pt2-clone-1.18+ds/src/pt2_sampler.c:1746:3: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(&tmpBuf[editor.markStartOfs], &song->sampleData[s->offset+markEnd], sampleLength - markEnd);
data/pt2-clone-1.18+ds/src/pt2_sampler.c:1749:2: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(&song->sampleData[s->offset], tmpBuf, copyLength);
data/pt2-clone-1.18+ds/src/pt2_sampler.c:1902:3: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(&tmpBuf[readPos], &song->sampleData[s->offset], markStart);
data/pt2-clone-1.18+ds/src/pt2_sampler.c:1907:2: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(&tmpBuf[readPos], sampler.copyBuf, sampler.copyBufSize);
data/pt2-clone-1.18+ds/src/pt2_sampler.c:1915:4: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(&tmpBuf[readPos], &song->sampleData[s->offset+markStart], s->length - markStart);
data/pt2-clone-1.18+ds/src/pt2_sampler.c:1970:2: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(&song->sampleData[s->offset], tmpBuf, s->length);
data/pt2-clone-1.18+ds/src/pt2_sampler.c:2789:2: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(&video.frameBuffer[121 * SCREEN_W], &trackerFrameBMP[121 * SCREEN_W], 320 * 134 * sizeof (int32_t));
data/pt2-clone-1.18+ds/src/pt2_sampler.c:2813:2: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(&video.frameBuffer[(121 * SCREEN_W)], samplerScreenBMP, 320 * 134 * sizeof (int32_t));
data/pt2-clone-1.18+ds/src/pt2_sampling.c:51:8: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
static char *audioInputDevs[MAX_INPUT_DEVICES];
data/pt2-clone-1.18+ds/src/pt2_sampling.c:313:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char str[16];
data/pt2-clone-1.18+ds/src/pt2_sampling.c:314:2: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(str, "%05dHZ", roundedOutputFrequency);
data/pt2-clone-1.18+ds/src/pt2_structs.h:52:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char name[20 + 1];
data/pt2-clone-1.18+ds/src/pt2_structs.h:61:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char text[22 + 1];
data/pt2-clone-1.18+ds/src/pt2_structs.h:158:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char mixText[16];
data/pt2-clone-1.18+ds/src/pt2_structs.h:205:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char statusMessage[18], prevStatusMessage[18];
data/pt2-clone-1.18+ds/src/pt2_tables.c:5:7: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
const char *ftuneStrTab[16] =
data/pt2-clone-1.18+ds/src/pt2_tables.c:26:7: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
const char hexTable[16] =
data/pt2-clone-1.18+ds/src/pt2_tables.c:49:7: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
const char *noteNames1[2+36] =
data/pt2-clone-1.18+ds/src/pt2_tables.c:57:7: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
const char *noteNames2[2+36] =
data/pt2-clone-1.18+ds/src/pt2_tables.c:65:7: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
const char *noteNames3[2+36] = // for PATTDOTS mode
data/pt2-clone-1.18+ds/src/pt2_tables.c:73:7: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
const char *noteNames4[2+36] = // for PATTDOTS mode
data/pt2-clone-1.18+ds/src/pt2_tables.h:8:14: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
extern const char *ftuneStrTab[16];
data/pt2-clone-1.18+ds/src/pt2_tables.h:10:14: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
extern const char hexTable[16];
data/pt2-clone-1.18+ds/src/pt2_tables.h:12:14: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
extern const char *noteNames1[2+36];
data/pt2-clone-1.18+ds/src/pt2_tables.h:13:14: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
extern const char *noteNames2[2+36];
data/pt2-clone-1.18+ds/src/pt2_tables.h:14:14: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
extern const char *noteNames3[2+36];
data/pt2-clone-1.18+ds/src/pt2_tables.h:15:14: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
extern const char *noteNames4[2+36];
data/pt2-clone-1.18+ds/src/pt2_textout.c:354:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char numberText[7];
data/pt2-clone-1.18+ds/src/pt2_textout.c:543:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char numberText[6];
data/pt2-clone-1.18+ds/src/pt2_textout.c:573:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char numberText[7];
data/pt2-clone-1.18+ds/src/pt2_unicode.h:35:36: [2] (misc) fopen:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
#define UNICHAR_FOPEN(a, b) fopen(a, b)
data/pt2-clone-1.18+ds/src/pt2_visuals.c:81:3: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(dstPtr, srcPtr, w * sizeof (int32_t));
data/pt2-clone-1.18+ds/src/pt2_visuals.c:1157:3: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(dstPtr, srcPtr, 200 * sizeof (int32_t));
data/pt2-clone-1.18+ds/src/pt2_visuals.c:1174:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char verString[16];
data/pt2-clone-1.18+ds/src/pt2_visuals.c:1641:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char fileName[20 + 4 + 1];
data/pt2-clone-1.18+ds/src/pt2_visuals.c:1803:5: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(fileName, ".wav");
data/pt2-clone-1.18+ds/src/pt2_visuals.c:1807:5: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
strcpy(fileName, "untitled.wav");
data/pt2-clone-1.18+ds/src/pt2_visuals.c:1827:5: [2] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant string.
strcat(fileName, ".wav");
data/pt2-clone-1.18+ds/src/pt2_visuals.c:1831:5: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
strcpy(fileName, "untitled.wav");
data/pt2-clone-1.18+ds/pt_pal_editor/src/config.c:67:23: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
lineLen = (uint32_t)strlen(configLine);
data/pt2-clone-1.18+ds/pt_pal_editor/src/config.c:90:24: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
lineLen = (uint32_t)strlen(configLine);
data/pt2-clone-1.18+ds/pt_pal_editor/src/config.c:114:24: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
lineLen = (uint32_t)strlen(configLine);
data/pt2-clone-1.18+ds/pt_pal_editor/src/main.c:219:17: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
tmpPathLen = strlen(tmpPath);
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:221:25: [1] (buffer) strncpy:
Easily used incorrectly; doesn't always \0-terminate or check for invalid
pointers [MS-banned] (CWE-120).
strncpy(aoDestination, aSource, lTmp - aSource );
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:269:27: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aioString && strlen( aioString ) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:271:46: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
char * lastcar = aioString + strlen( aioString ) - 1 ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:338:29: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
size_t lOldSubLen = strlen( aOldSubStr ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:358:17: [1] (buffer) strncat:
Easily used incorrectly (e.g., incorrectly computing the correct maximum
size to add) [MS-banned] (CWE-120). Consider strcat_s, strlcat, snprintf,
or automatically resizing strings.
strncat( aoDestination , p , pOccurence - p ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:369:16: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
|| ! strlen(aFileNameWithoutPath)
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:382:38: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( ! aFilePathAndName || ! strlen(aFilePathAndName) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:400:38: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( ! aFilePathAndName || ! strlen(aFilePathAndName) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:475:27: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if (!aDirPath || !strlen(aDirPath))
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:535:25: [1] (buffer) wcsncpy:
Easily used incorrectly; doesn't always \0-terminate or check for invalid
pointers [MS-banned] (CWE-120).
wcsncpy(aoDestination, aSource, lTmp - aSource);
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:731:27: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if (!aDirPath || !strlen(aDirPath))
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:762:35: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if (!aFilePathAndName || !strlen(aFilePathAndName))
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:807:16: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
lLen = strlen(aSourcePathsAndNames);
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:829:24: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
lLen = strlen(p);
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:862:26: [1] (buffer) wcslen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if (!aString || !wcslen(aString) ) return;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:999:30: [1] (buffer) wcslen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
lTitleLen = aTitle ? wcslen(aTitle) : 0;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:1000:34: [1] (buffer) wcslen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
lMessageLen = aMessage ? wcslen(aMessage) : 0;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:1027:23: [1] (buffer) wcslen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if (aTitle && wcslen(aTitle))
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:1031:17: [1] (buffer) wcscat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Risk is low because the source is a constant
character.
wcscat(lDialogString, L"'");
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:1033:25: [1] (buffer) wcslen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if (aMessage && wcslen(aMessage))
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:1037:17: [1] (buffer) wcscat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Risk is low because the source is a constant
character.
wcscat(lDialogString, L"'");
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:1039:25: [1] (buffer) wcslen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if (aMessage && wcslen(aIconType))
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:1043:17: [1] (buffer) wcscat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Risk is low because the source is a constant
character.
wcscat(lDialogString, L"'");
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:1045:9: [1] (buffer) wcscat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Risk is low because the source is a constant
character.
wcscat(lDialogString, L"\"");
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:1102:31: [1] (buffer) wcslen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
lTitleLen = aTitle ? wcslen(aTitle) : 0 ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:1103:35: [1] (buffer) wcslen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
lMessageLen = aMessage ? wcslen(aMessage) : 0 ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:1133:33: [1] (buffer) wcslen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if (aMessage && wcslen(aMessage))
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:1138:38: [1] (buffer) wcslen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if (aDefaultInput && wcslen(aDefaultInput))
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:1421:49: [1] (buffer) wcslen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if (aSingleFilterDescription && wcslen(aSingleFilterDescription))
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:1424:25: [1] (buffer) wcscat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Risk is low because the source is a constant
character.
wcscat(lFilterPatterns, L"\n");
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:1429:25: [1] (buffer) wcscat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Risk is low because the source is a constant
character.
wcscat(lFilterPatterns, L";");
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:1432:17: [1] (buffer) wcscat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Risk is low because the source is a constant
character.
wcscat(lFilterPatterns, L"\n");
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:1433:51: [1] (buffer) wcslen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if (!(aSingleFilterDescription && wcslen(aSingleFilterDescription)))
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:1450:46: [1] (buffer) wcslen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
ofn.lpstrFilter = lFilterPatterns && wcslen(lFilterPatterns) ? lFilterPatterns : NULL;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:1459:43: [1] (buffer) wcslen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
ofn.lpstrInitialDir = lDirname && wcslen(lDirname) ? lDirname : NULL;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:1460:36: [1] (buffer) wcslen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
ofn.lpstrTitle = aTitle && wcslen(aTitle) ? aTitle : NULL;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:1572:49: [1] (buffer) wcslen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if (aSingleFilterDescription && wcslen(aSingleFilterDescription))
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:1575:25: [1] (buffer) wcscat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Risk is low because the source is a constant
character.
wcscat(lFilterPatterns, L"\n");
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:1580:25: [1] (buffer) wcscat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Risk is low because the source is a constant
character.
wcscat(lFilterPatterns, L";");
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:1583:17: [1] (buffer) wcscat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Risk is low because the source is a constant
character.
wcscat(lFilterPatterns, L"\n");
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:1584:51: [1] (buffer) wcslen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if (!(aSingleFilterDescription && wcslen(aSingleFilterDescription)))
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:1601:46: [1] (buffer) wcslen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
ofn.lpstrFilter = lFilterPatterns && wcslen(lFilterPatterns) ? lFilterPatterns : NULL;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:1609:43: [1] (buffer) wcslen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
ofn.lpstrInitialDir = lDirname && wcslen(lDirname) ? lDirname : NULL;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:1610:36: [1] (buffer) wcslen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
ofn.lpstrTitle = aTitle && wcslen(aTitle) ? aTitle : NULL;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:1630:28: [1] (buffer) wcslen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
lBuffLen = wcslen(lBuff);
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:1641:47: [1] (buffer) wcslen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
lLengths[i] = wcslen(lPointers[i]);
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:1765:37: [1] (buffer) wcslen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
bInfo.lpszTitle = aTitle && wcslen(aTitle) ? aTitle : NULL;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2030:50: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aSingleFilterDescription && strlen(aSingleFilterDescription) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2033:25: [1] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant character.
strcat(lFilterPatterns, "\n");
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2038:25: [1] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant character.
strcat(lFilterPatterns, ";");
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2041:17: [1] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant character.
strcat(lFilterPatterns, "\n");
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2042:53: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( ! (aSingleFilterDescription && strlen(aSingleFilterDescription) ) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2059:54: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
ofn.lpstrFilter = lFilterPatterns && strlen(lFilterPatterns) ? lFilterPatterns : NULL;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2068:43: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
ofn.lpstrInitialDir = lDirname && strlen(lDirname) ? lDirname : NULL;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2069:45: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
ofn.lpstrTitle = aTitle && strlen(aTitle) ? aTitle : NULL;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2123:50: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aSingleFilterDescription && strlen(aSingleFilterDescription) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2126:25: [1] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant character.
strcat(lFilterPatterns, "\n");
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2131:25: [1] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant character.
strcat(lFilterPatterns, ";");
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2134:17: [1] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant character.
strcat(lFilterPatterns, "\n");
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2135:53: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( ! (aSingleFilterDescription && strlen(aSingleFilterDescription) ) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2152:54: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
ofn.lpstrFilter = lFilterPatterns && strlen(lFilterPatterns) ? lFilterPatterns : NULL;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2160:43: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
ofn.lpstrInitialDir = lDirname && strlen(lDirname) ? lDirname : NULL;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2161:45: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
ofn.lpstrTitle = aTitle && strlen(aTitle) ? aTitle : NULL;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2181:28: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
lBuffLen = strlen(aoBuff) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2192:47: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
lLengths[i] = strlen(lPointers[i]);
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2239:37: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
bInfo.lpszTitle = aTitle && strlen(aTitle) ? aTitle : NULL;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2332:28: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( lBuff[strlen( lBuff ) -1] == '\n' )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2334:31: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
lBuff[strlen( lBuff ) -1] = '\0' ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2336:35: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( strcmp(lBuff+strlen(lBuff)-strlen(lString),lString) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2336:49: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( strcmp(lBuff+strlen(lBuff)-strlen(lString),lString) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2362:24: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aTitle && strlen(aTitle) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2407:9: [1] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant character.
strcat( lDialogString , "\"" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2408:26: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aMessage && strlen(aMessage) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2443:16: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( lBuff[strlen( lBuff ) -1] == '\n' )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2445:15: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
lBuff[strlen( lBuff ) -1] = '\0' ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2449:16: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( ! strlen(lBuff) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2482:24: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aTitle && strlen(aTitle) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2507:26: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aMessage && strlen(aMessage) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2512:31: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aDefaultInput && strlen(aDefaultInput) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2514:17: [1] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant character.
strcat(lDialogString, "\"") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2540:17: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aoBuff[strlen( aoBuff ) -1] == '\n' )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2542:16: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
aoBuff[strlen( aoBuff ) -1] = '\0' ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2568:24: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aTitle && strlen(aTitle) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2581:37: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aDefaultPathAndFile && strlen(aDefaultPathAndFile) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2614:16: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( ! strlen(lDialogString) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2633:24: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aTitle && strlen(aTitle) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2646:37: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aDefaultPathAndFile && strlen(aDefaultPathAndFile) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2692:24: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aTitle && strlen(aTitle) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2705:30: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aDefaultPath && strlen(aDefaultPath) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2783:32: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aTitle && strlen(aTitle) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2791:50: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aMessage && strlen(aMessage) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2806:50: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aMessage && strlen(aMessage) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2821:49: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if (aMessage && strlen(aMessage))
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2833:42: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aMessage && strlen(aMessage) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2909:22: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aTitle && strlen(aTitle) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2913:24: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aMessage && strlen(aMessage) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2942:18: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( lBuff[strlen( lBuff ) -1] == '\n' )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2944:17: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
lBuff[strlen( lBuff ) -1] = '\0' ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2991:23: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( ! p || ! strlen( p ) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:2996:14: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( strlen( lString ) && ! dirExists( lString ) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3052:23: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( ! p || ! strlen( p ) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3104:23: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( ! p || ! strlen( p ) || ! dirExists( p ) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3158:21: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( !p || (strlen(p) != 7) || (p[0] != '#') )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3195:30: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( ! aDirPath || ! strlen( aDirPath ) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3316:25: [1] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant character.
strcpy(lDialogName , "" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3338:16: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( ! strlen(lDialogName) || !(lVersion = (char *) getVersion(lDialogName)) ) return 0 ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3350:29: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
lLetter = lMinorP + strlen(lMinorP) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3383:15: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
else if ( strlen(dialogNameOnly()) || whiptailPresentOnly() )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3389:6: [1] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant character.
strcpy(lTerminalName , "" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3403:33: [1] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant character.
strcpy(lTerminalName , "" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3481:25: [1] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant character.
strcpy(lTerminalName , "" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3487:14: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( strlen(lTerminalName) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:3502:14: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( strlen(lDialogName) && ( isTerminalRunning() || terminalName() ) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4075:31: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
lTitleLen = aTitle ? strlen(aTitle) : 0 ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4076:35: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
lMessageLen = aMessage ? strlen(aMessage) : 0 ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4089:34: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aMessage && strlen(aMessage) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4094:32: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aTitle && strlen(aTitle) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4208:17: [1] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant character.
strcat( lDialogString , "\"" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4214:32: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aTitle && strlen(aTitle) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4218:25: [1] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant character.
strcat(lDialogString, "\"") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4287:32: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aTitle && strlen(aTitle) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4291:25: [1] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant character.
strcat(lDialogString, "\"") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4293:34: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aMessage && strlen(aMessage) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4297:25: [1] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant character.
strcat(lDialogString, "\"") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4397:32: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aTitle && strlen(aTitle) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4403:34: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aMessage && strlen(aMessage) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4406:58: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
lpDialogString = lDialogString + strlen(lDialogString);
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4408:25: [1] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant character.
strcat(lDialogString, "'") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4486:32: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aTitle && strlen(aTitle) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4492:34: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aMessage && strlen(aMessage) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4495:58: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
lpDialogString = lDialogString + strlen(lDialogString);
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4497:25: [1] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant character.
strcat(lDialogString, "'") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4567:34: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aMessage && strlen(aMessage) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4571:17: [1] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant character.
strcat(lDialogString, "\"" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4572:32: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aTitle && strlen(aTitle) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4576:25: [1] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant character.
strcat( lDialogString, "\"" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4607:33: [1] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant character.
strcat( lDialogString , " " ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4623:32: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aTitle && strlen(aTitle) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4671:17: [1] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant character.
strcat( lDialogString , "\"" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4672:34: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aMessage && strlen(aMessage) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4729:17: [1] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant character.
strcat( lDialogString , "'" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4740:32: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aTitle && strlen(aTitle) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4746:34: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aMessage && strlen(aMessage) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4801:35: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aIconType && strlen(aIconType) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4806:32: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aTitle && strlen(aTitle) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4811:34: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aMessage && strlen(aMessage) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4813:58: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
lpDialogString = lDialogString + strlen(lDialogString);
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4835:35: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aIconType && strlen(aIconType) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4839:25: [1] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant character.
strcat( lDialogString , "'" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4842:32: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aTitle && strlen(aTitle) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4847:34: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aMessage && strlen(aMessage) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4854:17: [1] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant character.
strcat( lDialogString , "\"" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4865:32: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aTitle && strlen(aTitle) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4880:50: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aMessage && strlen(aMessage) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4885:50: [1] (buffer) getchar:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
lChar = tolower( getchar() ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4895:50: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aMessage && strlen(aMessage) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4900:50: [1] (buffer) getchar:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
lChar = tolower( getchar() ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4910:50: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aMessage && strlen(aMessage) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4915:50: [1] (buffer) getchar:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
lChar = tolower( getchar() ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4923:42: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aMessage && strlen(aMessage) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4928:25: [1] (buffer) getchar:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
getchar() ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4950:20: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( lBuff[strlen( lBuff ) -1] == '\n' )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4952:23: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
lBuff[strlen( lBuff ) -1] = '\0' ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4960:58: [1] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant character.
if ( !strcmp( lBuff+1 , "Yes" )) strcpy(lBuff,"1");
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4961:62: [1] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant character.
else if ( !strcmp( lBuff+1 , "No" )) strcpy(lBuff,"2");
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4992:31: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
lTitleLen = aTitle ? strlen(aTitle) : 0 ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:4993:35: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
lMessageLen = aMessage ? strlen(aMessage) : 0 ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5006:34: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aMessage && strlen(aMessage) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5011:32: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aTitle && strlen(aTitle) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5026:35: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aIconType && strlen(aIconType) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5030:25: [1] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant character.
strcat( lDialogString , "'" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5032:32: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aTitle && strlen(aTitle) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5036:25: [1] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant character.
strcat( lDialogString , "\"" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5074:35: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aIconType && strlen( aIconType ) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5078:25: [1] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant character.
strcat( lDialogString , "'" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5082:32: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aTitle && strlen(aTitle) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5085:25: [1] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant character.
strcat(lDialogString, "\n") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5087:34: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aMessage && strlen( aMessage ) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5112:35: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aIconType && strlen(aIconType) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5117:32: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aTitle && strlen(aTitle) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5122:34: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aMessage && strlen(aMessage) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5124:58: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
lpDialogString = lDialogString + strlen(lDialogString);
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5133:35: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aIconType && strlen(aIconType) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5137:25: [1] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant character.
strcat( lDialogString , "'" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5140:32: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aTitle && strlen(aTitle) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5145:34: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aMessage && strlen(aMessage) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5152:17: [1] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant character.
strcat( lDialogString , "\"" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5196:31: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
lTitleLen = aTitle ? strlen(aTitle) : 0 ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5197:35: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
lMessageLen = aMessage ? strlen(aMessage) : 0 ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5209:34: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aMessage && strlen(aMessage) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5215:39: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aDefaultInput && strlen(aDefaultInput) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5224:32: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aTitle && strlen(aTitle) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5256:17: [1] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant character.
strcat(lDialogString, "\"") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5257:34: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aMessage && strlen(aMessage) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5262:39: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aDefaultInput && strlen(aDefaultInput) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5266:17: [1] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant character.
strcat(lDialogString , "\"" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5267:32: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aTitle && strlen(aTitle) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5271:25: [1] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant character.
strcat(lDialogString, "\"") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5308:32: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aTitle && strlen(aTitle) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5312:25: [1] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant character.
strcat(lDialogString, "\"") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5314:34: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aMessage && strlen(aMessage) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5318:25: [1] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant character.
strcat(lDialogString, "\"") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5320:39: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aDefaultInput && strlen(aDefaultInput) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5324:25: [1] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant character.
strcat(lDialogString, "\"") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5345:34: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aMessage && strlen(aMessage) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5349:17: [1] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant character.
strcat(lDialogString, "\"" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5350:32: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aTitle && strlen(aTitle) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5357:39: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aDefaultInput && strlen(aDefaultInput) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5361:17: [1] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant character.
strcat(lDialogString, "\"" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5384:32: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aTitle && strlen(aTitle) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5390:34: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aMessage && strlen(aMessage) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5394:58: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
lpDialogString = lDialogString + strlen(lDialogString);
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5400:30: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( strlen(aDefaultInput) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5421:32: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aTitle && strlen(aTitle) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5427:34: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aMessage && strlen(aMessage) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5431:58: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
lpDialogString = lDialogString + strlen(lDialogString);
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5437:30: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( strlen(aDefaultInput) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5479:33: [1] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant character.
strcat( lDialogString , " " ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5495:32: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aTitle && strlen(aTitle) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5526:34: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aMessage && strlen(aMessage) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5531:39: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aDefaultInput && strlen(aDefaultInput) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5533:25: [1] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant character.
strcat(lDialogString, "\"") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5564:17: [1] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant character.
strcat( lDialogString , "'" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5570:32: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aTitle && strlen(aTitle) && !tinyfd_forceConsole)
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5578:34: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aMessage && strlen(aMessage) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5606:32: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aTitle && strlen(aTitle) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5610:34: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aMessage && strlen(aMessage) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5653:28: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( lBuff[strlen( lBuff ) -1] == '\n' )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5655:31: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
lBuff[strlen( lBuff ) -1] = '\0' ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5696:20: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( lBuff[strlen( lBuff ) -1] == '\n' )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5698:23: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
lBuff[strlen( lBuff ) -1] = '\0' ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5748:32: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aTitle && strlen(aTitle) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5755:22: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( strlen(lString) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5762:22: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( strlen(lString) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5784:45: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aDefaultPathAndFile && strlen(aDefaultPathAndFile) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5790:25: [1] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant character.
strcat(lDialogString, "\"") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5792:25: [1] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant character.
strcat(lDialogString , "\"" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5805:33: [1] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant character.
strcat( lDialogString , " " ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5807:58: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aSingleFilterDescription && strlen(aSingleFilterDescription) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5812:25: [1] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant character.
strcat( lDialogString , "\"" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5814:32: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aTitle && strlen(aTitle) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5818:25: [1] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant character.
strcat(lDialogString, "\"") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5853:32: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aTitle && strlen(aTitle) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5857:25: [1] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant character.
strcat(lDialogString, "\"") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5859:45: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aDefaultPathAndFile && strlen(aDefaultPathAndFile) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5863:25: [1] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant character.
strcat(lDialogString, "\"") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5868:58: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aSingleFilterDescription && strlen(aSingleFilterDescription) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5876:33: [1] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant character.
strcat( lDialogString , " " ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5900:32: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aTitle && strlen(aTitle) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5906:41: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aDefaultPathAndFile && strlen(aDefaultPathAndFile) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5909:30: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( strlen(lString) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5916:30: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( strlen(lString) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5925:49: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
&& ( aFilterPatterns[0][strlen(aFilterPatterns[0])-1] != '*' ) ) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5929:58: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aSingleFilterDescription && strlen(aSingleFilterDescription) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5936:33: [1] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant character.
strcat( lDialogString , "'" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5952:32: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aTitle && strlen(aTitle) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5958:45: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aDefaultPathAndFile && strlen(aDefaultPathAndFile) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5961:30: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( strlen(lString) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5968:30: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( strlen(lString) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5977:49: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
&& ( aFilterPatterns[0][strlen(aFilterPatterns[0])-1] != '*' ) ) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5981:58: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aSingleFilterDescription && strlen(aSingleFilterDescription) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:5988:33: [1] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant character.
strcat( lDialogString , "'" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6017:25: [1] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant character.
strcat( lDialogString , " " ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6020:32: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aTitle && strlen(aTitle) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6036:45: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aDefaultPathAndFile && strlen(aDefaultPathAndFile) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6047:25: [1] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant character.
strcat(lDialogString, "/") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6077:22: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( strlen( lString ) && ! dirExists( lString ) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6082:24: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( ! strlen(lString) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6097:16: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( lBuff[strlen( lBuff ) -1] == '\n' )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6099:15: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
lBuff[strlen( lBuff ) -1] = '\0' ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6102:16: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( ! strlen(lBuff) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6107:10: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( strlen( lString ) && ! dirExists( lString ) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6158:28: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aTitle && strlen(aTitle) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6165:22: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( strlen(lString) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6175:25: [1] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant character.
strcat( lDialogString , "\"" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6180:33: [1] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant character.
strcat( lDialogString , "\"" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6217:45: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aDefaultPathAndFile && strlen(aDefaultPathAndFile) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6223:25: [1] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant character.
strcat(lDialogString, "\"") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6225:25: [1] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant character.
strcat(lDialogString , "\"" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6238:33: [1] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant character.
strcat( lDialogString , " " ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6240:58: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aSingleFilterDescription && strlen(aSingleFilterDescription) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6245:25: [1] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant character.
strcat( lDialogString , "\"" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6251:32: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aTitle && strlen(aTitle) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6255:25: [1] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant character.
strcat(lDialogString, "\"") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6294:32: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aTitle && strlen(aTitle) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6298:25: [1] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant character.
strcat(lDialogString, "\"") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6300:45: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aDefaultPathAndFile && strlen(aDefaultPathAndFile) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6304:25: [1] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant character.
strcat(lDialogString, "\"") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6309:58: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aSingleFilterDescription && strlen(aSingleFilterDescription) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6317:33: [1] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant character.
strcat( lDialogString , " " ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6344:20: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aTitle && strlen(aTitle) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6350:33: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aDefaultPathAndFile && strlen(aDefaultPathAndFile) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6353:30: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( strlen(lString) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6360:30: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( strlen(lString) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6369:57: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
&& ( aFilterPatterns[0][strlen(aFilterPatterns[0])-1] != '*' ) ) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6373:58: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aSingleFilterDescription && strlen(aSingleFilterDescription) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6380:33: [1] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant character.
strcat( lDialogString , "'" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6403:32: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aTitle && strlen(aTitle) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6409:45: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aDefaultPathAndFile && strlen(aDefaultPathAndFile) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6412:30: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( strlen(lString) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6419:30: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( strlen(lString) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6428:49: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
&& ( aFilterPatterns[0][strlen(aFilterPatterns[0])-1] != '*' ) ) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6432:58: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aSingleFilterDescription && strlen(aSingleFilterDescription) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6439:33: [1] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant character.
strcat( lDialogString , "'" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6471:25: [1] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant character.
strcat( lDialogString , " " ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6474:32: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aTitle && strlen(aTitle) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6490:45: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aDefaultPathAndFile && strlen(aDefaultPathAndFile) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6501:25: [1] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant character.
strcat(lDialogString, "/");
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6546:22: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
p += strlen( p );
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6549:16: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( lBuff[strlen( lBuff ) -1] == '\n' )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6551:15: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
lBuff[strlen( lBuff ) -1] = '\0' ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6561:16: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( ! strlen( lBuff ) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6601:32: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aTitle && strlen(aTitle) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6607:38: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aDefaultPath && strlen(aDefaultPath) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6628:38: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aDefaultPath && strlen(aDefaultPath) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6634:25: [1] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant character.
strcat(lDialogString, "\"") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6636:25: [1] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant character.
strcat(lDialogString , "\"" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6643:32: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aTitle && strlen(aTitle) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6647:25: [1] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant character.
strcat(lDialogString, "\"") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6682:32: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aTitle && strlen(aTitle) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6686:25: [1] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant character.
strcat(lDialogString, "\"") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6688:38: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aDefaultPath && strlen(aDefaultPath) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6692:25: [1] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant character.
strcat(lDialogString, "\"") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6714:28: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aTitle && strlen(aTitle) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6720:30: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aDefaultPath && strlen(aDefaultPath) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6724:33: [1] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant character.
strcat(lDialogString , "'" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6735:32: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aTitle && strlen(aTitle) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6741:38: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aDefaultPath && strlen(aDefaultPath) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6745:25: [1] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant character.
strcat(lDialogString , "'" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6769:25: [1] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant character.
strcat( lDialogString , " " ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6772:32: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aTitle && strlen(aTitle) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6788:38: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aDefaultPath && strlen(aDefaultPath) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6796:25: [1] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant character.
strcat(lDialogString, "/");
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6825:30: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( !p || ! strlen( p ) || ! dirExists( p ) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6839:16: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( lBuff[strlen( lBuff ) -1] == '\n' )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6841:15: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
lBuff[strlen( lBuff ) -1] = '\0' ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6844:16: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( ! strlen( lBuff ) || ! dirExists( lBuff ) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6910:17: [1] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant character.
strcat(lDialogString, "," ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6913:17: [1] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant character.
strcat(lDialogString, "," ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6937:42: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
sprintf( lDialogString + strlen(lDialogString) , " --getcolor --default '%s'" , lpDefaultHexRGB ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6939:32: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aTitle && strlen(aTitle) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6943:25: [1] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant character.
strcat(lDialogString, "\"") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6978:42: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
sprintf( lDialogString + strlen(lDialogString), " --color=%s" , lpDefaultHexRGB ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6980:32: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aTitle && strlen(aTitle) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6984:25: [1] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant character.
strcat(lDialogString, "\"") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:6992:32: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aTitle && strlen(aTitle) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:7023:17: [1] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant character.
strcat(lDialogString, "'") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:7026:28: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aTitle && strlen(aTitle) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:7030:25: [1] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant character.
strcat(lDialogString, "'") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:7043:17: [1] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant character.
strcat(lDialogString, "'") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:7045:32: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aTitle && strlen(aTitle) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:7049:25: [1] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant character.
strcat(lDialogString, "'") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:7059:29: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( !p || (strlen(p) != 7) || (p[0] != '#') )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:7083:12: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( ! strlen( lBuff ) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:7089:16: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( lBuff[strlen( lBuff ) -1] == '\n' )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:7091:15: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
lBuff[strlen( lBuff ) -1] = '\0' ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:7098:30: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( strlen(lBuff)>7 )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:7185:32: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( aTitle && strlen(aTitle) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:7189:25: [1] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant character.
strcat(lDialogString, "\"") ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:7198:33: [1] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant character.
strcat( lDialogString , "\"" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:7204:25: [1] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant character.
strcat( lDialogString , " " ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:7207:33: [1] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant character.
strcat( lDialogString , "\"" ) ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:7215:61: [1] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant character.
if (aTitle&&!strcmp(aTitle,"tinyfd_query")){strcpy(tinyfd_response,"");return (char const *)0;}
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:7227:20: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( lBuff[strlen( lBuff ) -1] == '\n' )
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:7229:23: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
lBuff[strlen( lBuff ) -1] = '\0' ;
data/pt2-clone-1.18+ds/pt_pal_editor/src/tinyfiledialogs/tinyfiledialogs.c:7232:16: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if ( ! strlen( lBuff ) )
data/pt2-clone-1.18+ds/pt_pal_editor/src/unicode.h:11:35: [1] (buffer) wcsncpy:
Easily used incorrectly; doesn't always \0-terminate or check for invalid
pointers [MS-banned] (CWE-120).
#define UNICHAR_STRNCPY(a, b, c) wcsncpy(a, b, c)
data/pt2-clone-1.18+ds/pt_pal_editor/src/unicode.h:22:35: [1] (buffer) wcslen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
#define UNICHAR_STRLEN(a) wcslen(a)
data/pt2-clone-1.18+ds/pt_pal_editor/src/unicode.h:27:34: [1] (buffer) strncpy:
Easily used incorrectly; doesn't always \0-terminate or check for invalid
pointers [MS-banned] (CWE-120).
#define UNICHAR_STRNCPY(a, b, c) strncpy(a, b, c)
data/pt2-clone-1.18+ds/pt_pal_editor/src/unicode.h:38:34: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
#define UNICHAR_STRLEN(a) strlen(a)
data/pt2-clone-1.18+ds/src/gfx/bmp/bmp2pth.c:42:32: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
out_filename = (char *)malloc(strlen(input) + 3);
data/pt2-clone-1.18+ds/src/pt2_config.c:178:23: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
lineLen = (uint32_t)strlen(configLine);
data/pt2-clone-1.18+ds/src/pt2_config.c:359:6: [1] (buffer) strncpy:
Easily used incorrectly; doesn't always \0-terminate or check for invalid
pointers [MS-banned] (CWE-120).
strncpy(config.defModulesDir, &configLine[i], (lineLen > PATH_MAX) ? PATH_MAX : lineLen);
data/pt2-clone-1.18+ds/src/pt2_config.c:374:6: [1] (buffer) strncpy:
Easily used incorrectly; doesn't always \0-terminate or check for invalid
pointers [MS-banned] (CWE-120).
strncpy(config.defSamplesDir, &configLine[i], (lineLen > PATH_MAX) ? PATH_MAX : lineLen);
data/pt2-clone-1.18+ds/src/pt2_config.c:649:23: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
lineLen = (uint32_t)strlen(configLine);
data/pt2-clone-1.18+ds/src/pt2_config.c:673:24: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
lineLen = (uint32_t)strlen(configLine);
data/pt2-clone-1.18+ds/src/pt2_config.c:697:24: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
lineLen = (uint32_t)strlen(configLine);
data/pt2-clone-1.18+ds/src/pt2_diskop.c:572:21: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
nameLen = (int32_t)strlen(fileNameBuffer);
data/pt2-clone-1.18+ds/src/pt2_diskop.c:842:26: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
entryLength = (int32_t)strlen(entryName);
data/pt2-clone-1.18+ds/src/pt2_helpers.c:32:6: [1] (obsolete) usleep:
This C routine is considered obsolete (as opposed to the shell command by
the same name). The interaction of this function with SIGALRM and other
timer functions such as sleep(), alarm(), setitimer(), and nanosleep() is
unspecified (CWE-676). Use nanosleep(2) or setitimer(2) instead.
void usleep(uint32_t usec)
data/pt2-clone-1.18+ds/src/pt2_helpers.h:58:6: [1] (obsolete) usleep:
This C routine is considered obsolete (as opposed to the shell command by
the same name). The interaction of this function with SIGALRM and other
timer functions such as sleep(), alarm(), setitimer(), and nanosleep() is
unspecified (CWE-676). Use nanosleep(2) or setitimer(2) instead.
void usleep(uint32_t usec);
data/pt2-clone-1.18+ds/src/pt2_main.c:403:47: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
loadDroppedFile(event.drop.file, (uint32_t)strlen(event.drop.file), false, true);
data/pt2-clone-1.18+ds/src/pt2_main.c:600:17: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
tmpPathLen = strlen(tmpPath);
data/pt2-clone-1.18+ds/src/pt2_main.c:829:54: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
loadDroppedFile((char *)sharedMemBuf, (uint32_t)strlen(sharedMemBuf), true, true);
data/pt2-clone-1.18+ds/src/pt2_module_loader.c:134:29: [1] (buffer) fgetc:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
ppCrunchData[0] = (uint8_t)fgetc(f);
data/pt2-clone-1.18+ds/src/pt2_module_loader.c:135:29: [1] (buffer) fgetc:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
ppCrunchData[1] = (uint8_t)fgetc(f);
data/pt2-clone-1.18+ds/src/pt2_module_loader.c:136:29: [1] (buffer) fgetc:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
ppCrunchData[2] = (uint8_t)fgetc(f);
data/pt2-clone-1.18+ds/src/pt2_module_loader.c:137:29: [1] (buffer) fgetc:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
ppCrunchData[3] = (uint8_t)fgetc(f);
data/pt2-clone-1.18+ds/src/pt2_module_loader.c:969:26: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
filenameLen = (uint32_t)strlen(arg);
data/pt2-clone-1.18+ds/src/pt2_module_loader.c:1020:26: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
fileNameLen = (uint32_t)strlen(fileName);
data/pt2-clone-1.18+ds/src/pt2_sample_loader.c:849:24: [1] (buffer) fgetc:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
s->text[i] = (char)fgetc(f);
data/pt2-clone-1.18+ds/src/pt2_sample_loader.c:866:23: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
nameLen = (uint32_t)strlen(entryName);
data/pt2-clone-1.18+ds/src/pt2_sample_loader.c:875:22: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
nameLen = (uint32_t)strlen(s->text);
data/pt2-clone-1.18+ds/src/pt2_sample_loader.c:997:6: [1] (buffer) fgetc:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
if (fgetc(f) != 0) // sample type
data/pt2-clone-1.18+ds/src/pt2_sample_loader.c:1135:23: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
nameLen = (uint32_t)strlen(tmpCharBuf);
data/pt2-clone-1.18+ds/src/pt2_sample_loader.c:1143:23: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
nameLen = (uint32_t)strlen(entryName);
data/pt2-clone-1.18+ds/src/pt2_sample_loader.c:1151:22: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
nameLen = (uint32_t)strlen(s->text);
data/pt2-clone-1.18+ds/src/pt2_sample_loader.c:1206:22: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
nameLen = (uint32_t)strlen(entryName);
data/pt2-clone-1.18+ds/src/pt2_sample_loader.c:1695:22: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
nameLen = (uint32_t)strlen(entryName);
data/pt2-clone-1.18+ds/src/pt2_sample_loader.c:1703:22: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
nameLen = (uint32_t)strlen(s->text);
data/pt2-clone-1.18+ds/src/pt2_sample_saver.c:25:29: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
filenameLength = (uint32_t)strlen(text);
data/pt2-clone-1.18+ds/src/pt2_sample_saver.c:248:25: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
chunkLen = (uint32_t)strlen(s->text);
data/pt2-clone-1.18+ds/src/pt2_sampling.c:257:40: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
const uint32_t stringLen = (uint32_t)strlen(deviceName);
data/pt2-clone-1.18+ds/src/pt2_scopes.c:348:5: [1] (obsolete) usleep:
This C routine is considered obsolete (as opposed to the shell command by
the same name). The interaction of this function with SIGALRM and other
timer functions such as sleep(), alarm(), setitimer(), and nanosleep() is
unspecified (CWE-676). Use nanosleep(2) or setitimer(2) instead.
usleep(time32);
data/pt2-clone-1.18+ds/src/pt2_unicode.h:11:36: [1] (buffer) wcsncpy:
Easily used incorrectly; doesn't always \0-terminate or check for invalid
pointers [MS-banned] (CWE-120).
#define UNICHAR_STRNCPY(a, b, c) wcsncpy(a, b, c)
data/pt2-clone-1.18+ds/src/pt2_unicode.h:23:36: [1] (buffer) wcslen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
#define UNICHAR_STRLEN(a) wcslen(a)
data/pt2-clone-1.18+ds/src/pt2_unicode.h:28:36: [1] (buffer) strncpy:
Easily used incorrectly; doesn't always \0-terminate or check for invalid
pointers [MS-banned] (CWE-120).
#define UNICHAR_STRNCPY(a, b, c) strncpy(a, b, c)
data/pt2-clone-1.18+ds/src/pt2_unicode.h:40:36: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
#define UNICHAR_STRLEN(a) strlen(a)
data/pt2-clone-1.18+ds/src/pt2_visuals.c:154:33: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
const int32_t textW = (int32_t)strlen(text) * (FONT_CHAR_W-1);
data/pt2-clone-1.18+ds/src/pt2_visuals.c:245:4: [1] (obsolete) usleep:
This C routine is considered obsolete (as opposed to the shell command by
the same name). The interaction of this function with SIGALRM and other
timer functions such as sleep(), alarm(), setitimer(), and nanosleep() is
unspecified (CWE-676). Use nanosleep(2) or setitimer(2) instead.
usleep(time32);
data/pt2-clone-1.18+ds/src/pt2_visuals.c:1185:40: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
verStringX = 260 + (((63 - ((uint32_t)strlen(verString) * (FONT_CHAR_W - 1))) + 1) / 2);
ANALYSIS SUMMARY:
Hits = 1929
Lines analyzed = 49107 in approximately 2.18 seconds (22551 lines/second)
Physical Source Lines of Code (SLOC) = 40869
Hits@level = [0] 207 [1] 415 [2] 1126 [3] 48 [4] 340 [5] 0
Hits@level+ = [0+] 2136 [1+] 1929 [2+] 1514 [3+] 388 [4+] 340 [5+] 0
Hits/KSLOC@level+ = [0+] 52.2646 [1+] 47.1996 [2+] 37.0452 [3+] 9.49375 [4+] 8.31926 [5+] 0
Dot directories skipped = 1 (--followdotdir overrides)
Minimum risk level = 1
Not every hit is necessarily a security vulnerability.
There may be other security vulnerabilities; review your code!
See 'Secure Programming HOWTO'
(https://dwheeler.com/secure-programs) for more information.