Flawfinder version 2.0.10, (C) 2001-2019 David A. Wheeler.
Number of rules (primarily dangerous function names) in C/C++ ruleset: 223
Examining data/python-ijson-3.0.3/ijson/backends/yajl2_c/async_reading_generator.c
Examining data/python-ijson-3.0.3/ijson/backends/yajl2_c/async_reading_generator.h
Examining data/python-ijson-3.0.3/ijson/backends/yajl2_c/basic_parse.c
Examining data/python-ijson-3.0.3/ijson/backends/yajl2_c/basic_parse.h
Examining data/python-ijson-3.0.3/ijson/backends/yajl2_c/basic_parse_async.c
Examining data/python-ijson-3.0.3/ijson/backends/yajl2_c/basic_parse_async.h
Examining data/python-ijson-3.0.3/ijson/backends/yajl2_c/basic_parse_basecoro.c
Examining data/python-ijson-3.0.3/ijson/backends/yajl2_c/basic_parse_basecoro.h
Examining data/python-ijson-3.0.3/ijson/backends/yajl2_c/builder.h
Examining data/python-ijson-3.0.3/ijson/backends/yajl2_c/common.h
Examining data/python-ijson-3.0.3/ijson/backends/yajl2_c/coro_utils.c
Examining data/python-ijson-3.0.3/ijson/backends/yajl2_c/coro_utils.h
Examining data/python-ijson-3.0.3/ijson/backends/yajl2_c/items.c
Examining data/python-ijson-3.0.3/ijson/backends/yajl2_c/items.h
Examining data/python-ijson-3.0.3/ijson/backends/yajl2_c/items_async.c
Examining data/python-ijson-3.0.3/ijson/backends/yajl2_c/items_async.h
Examining data/python-ijson-3.0.3/ijson/backends/yajl2_c/items_basecoro.c
Examining data/python-ijson-3.0.3/ijson/backends/yajl2_c/items_basecoro.h
Examining data/python-ijson-3.0.3/ijson/backends/yajl2_c/kvitems.c
Examining data/python-ijson-3.0.3/ijson/backends/yajl2_c/kvitems.h
Examining data/python-ijson-3.0.3/ijson/backends/yajl2_c/kvitems_async.c
Examining data/python-ijson-3.0.3/ijson/backends/yajl2_c/kvitems_async.h
Examining data/python-ijson-3.0.3/ijson/backends/yajl2_c/kvitems_basecoro.c
Examining data/python-ijson-3.0.3/ijson/backends/yajl2_c/kvitems_basecoro.h
Examining data/python-ijson-3.0.3/ijson/backends/yajl2_c/module.c
Examining data/python-ijson-3.0.3/ijson/backends/yajl2_c/parse.c
Examining data/python-ijson-3.0.3/ijson/backends/yajl2_c/parse.h
Examining data/python-ijson-3.0.3/ijson/backends/yajl2_c/parse_async.c
Examining data/python-ijson-3.0.3/ijson/backends/yajl2_c/parse_async.h
Examining data/python-ijson-3.0.3/ijson/backends/yajl2_c/parse_basecoro.c
Examining data/python-ijson-3.0.3/ijson/backends/yajl2_c/parse_basecoro.h
Examining data/python-ijson-3.0.3/ijson/backends/yajl2_c/reading_generator.c
Examining data/python-ijson-3.0.3/ijson/backends/yajl2_c/reading_generator.h

FINAL RESULTS:

data/python-ijson-3.0.3/ijson/backends/yajl2_c/basic_parse_basecoro.c:68:3:  [2] (buffer) memcpy:
  Does not check for buffer overflows when copying to destination (CWE-120).
  Make sure destination can always hold the source data.
		memcpy(nval, numberVal, numberLen);
data/python-ijson-3.0.3/ijson/backends/yajl2_c/module.c:96:63:  [1] (buffer) strlen:
  Does not handle strings that are not \0-terminated; if given one it may
  perform an over-read (it could cause a crash if unprotected) (CWE-126).
#define INIT_ENAME(x) enames.x##_ename = STRING_FROM_UTF8(#x, strlen(#x))

ANALYSIS SUMMARY:

Hits = 2
Lines analyzed = 2419 in approximately 0.06 seconds (37215 lines/second)
Physical Source Lines of Code (SLOC) = 1544
Hits@level = [0]   0 [1]   1 [2]   1 [3]   0 [4]   0 [5]   0
Hits@level+ = [0+]   2 [1+]   2 [2+]   1 [3+]   0 [4+]   0 [5+]   0
Hits/KSLOC@level+ = [0+] 1.29534 [1+] 1.29534 [2+] 0.647668 [3+]   0 [4+]   0 [5+]   0
Dot directories skipped = 1 (--followdotdir overrides)
Minimum risk level = 1
Not every hit is necessarily a security vulnerability.
There may be other security vulnerabilities; review your code!
See 'Secure Programming HOWTO'
(https://dwheeler.com/secure-programs) for more information.