Flawfinder version 2.0.10, (C) 2001-2019 David A. Wheeler. Number of rules (primarily dangerous function names) in C/C++ ruleset: 223 Examining data/r-cran-lwgeom-0.2-5/src/sub.cpp Examining data/r-cran-lwgeom-0.2-5/src/geos.cpp Examining data/r-cran-lwgeom-0.2-5/src/postgis_config.h Examining data/r-cran-lwgeom-0.2-5/src/lwgeom.h Examining data/r-cran-lwgeom-0.2-5/src/postgis_svn_revision.h Examining data/r-cran-lwgeom-0.2-5/src/proj.cpp Examining data/r-cran-lwgeom-0.2-5/src/io.cpp Examining data/r-cran-lwgeom-0.2-5/src/geodetic.cpp Examining data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwpsurface.c Examining data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_geojson.c Examining data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwgeodetic.c Examining data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_x3d.c Examining data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwgeom_wrapx.c Examining data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_kml.c Examining data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwin_twkb.c Examining data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwprint.c Examining data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwgeom_geos_node.c Examining data/r-cran-lwgeom-0.2-5/src/liblwgeom/liblwgeom.h Examining data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwtin.c Examining data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwutil.c Examining data/r-cran-lwgeom-0.2-5/src/liblwgeom/varint.h Examining data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwin_wkt_parse.h Examining data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwin_wkt_lex.c Examining data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwgeom_median.c Examining data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwgeom_geos_clean.c Examining data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwiterator.c Examining data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwin_encoded_polyline.c Examining data/r-cran-lwgeom-0.2-5/src/liblwgeom/bytebuffer.h Examining data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwunionfind.c Examining data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c Examining data/r-cran-lwgeom-0.2-5/src/liblwgeom/gserialized2.c Examining data/r-cran-lwgeom-0.2-5/src/liblwgeom/gserialized1.h Examining data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwgeom_topo.c Examining data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_x3d.h Examining data/r-cran-lwgeom-0.2-5/src/liblwgeom/measures3d.h Examining data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwgeom_geos_cluster.c Examining data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwgeom_log.h Examining data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwmpoint.c Examining data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwgeodetic.h Examining data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_wkt.c Examining data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwin_wkt_parse.c Examining data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwgeom_geos_split.c Examining data/r-cran-lwgeom-0.2-5/src/liblwgeom/liblwgeom_topo_internal.h Examining data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwlinearreferencing.c Examining data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwchaikins.c Examining data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwgeom.c Examining data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwgeom_geos.c Examining data/r-cran-lwgeom-0.2-5/src/liblwgeom/liblwgeom_internal.h Examining data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwline.c Examining data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwmsurface.c Examining data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwrandom.c Examining data/r-cran-lwgeom-0.2-5/src/liblwgeom/stringbuffer.c Examining data/r-cran-lwgeom-0.2-5/src/liblwgeom/liblwgeom_topo.h Examining data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwpoint.c Examining data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_twkb.c Examining data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwspheroid.c Examining data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwalgorithm.c Examining data/r-cran-lwgeom-0.2-5/src/liblwgeom/effectivearea.c Examining data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwstroke.c Examining data/r-cran-lwgeom-0.2-5/src/liblwgeom/bytebuffer.c Examining data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwkmeans.c Examining data/r-cran-lwgeom-0.2-5/src/liblwgeom/gserialized.c Examining data/r-cran-lwgeom-0.2-5/src/liblwgeom/varint.c Examining data/r-cran-lwgeom-0.2-5/src/liblwgeom/measures3d.c Examining data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwcompound.c Examining data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwin_wkt.h Examining data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwgeom_debug.c Examining data/r-cran-lwgeom-0.2-5/src/liblwgeom/effectivearea.h Examining data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwinline.h Examining data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwgeodetic_tree.c Examining data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwunionfind.h Examining data/r-cran-lwgeom-0.2-5/src/liblwgeom/ptarray.c Examining data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwmline.c Examining data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwcircstring.c Examining data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_twkb.h Examining data/r-cran-lwgeom-0.2-5/src/liblwgeom/gbox.c Examining data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwgeom_transform.c Examining data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwhomogenize.c Examining data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwcollection.c Examining data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwpoly.c Examining data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwgeom_geos.h Examining data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwtriangle.c Examining data/r-cran-lwgeom-0.2-5/src/liblwgeom/lookup3.c Examining data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwin_wkt.c Examining data/r-cran-lwgeom-0.2-5/src/liblwgeom/stringbuffer.h Examining data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwrandom.h Examining data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_svg.c Examining data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_encoded_polyline.c Examining data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwcurvepoly.c Examining data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_wkb.c Examining data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwin_wkb.c Examining data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwmval.c Examining data/r-cran-lwgeom-0.2-5/src/liblwgeom/gserialized.h Examining data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwboundingcircle.c Examining data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwmpoly.c Examining data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwmcurve.c Examining data/r-cran-lwgeom-0.2-5/src/liblwgeom/gserialized1.c Examining data/r-cran-lwgeom-0.2-5/src/liblwgeom/measures.h Examining data/r-cran-lwgeom-0.2-5/src/liblwgeom/gserialized2.h Examining data/r-cran-lwgeom-0.2-5/src/liblwgeom/measures.c Examining data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwgeodetic_tree.h Examining data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwgeom_api.c Examining data/r-cran-lwgeom-0.2-5/src/lwgeom.cpp Examining data/r-cran-lwgeom-0.2-5/src/RcppExports.cpp FINAL RESULTS: data/r-cran-lwgeom-0.2-5/src/io.cpp:14:5: [4] (format) vsnprintf: If format strings can be influenced by an attacker, they can be exploited, and note that sprintf variations do not always \0-terminate (CWE-134). Use a constant for the format specification. vsnprintf (msg, LW_MSG_MAXLEN, fmt, ap); data/r-cran-lwgeom-0.2-5/src/io.cpp:27:5: [4] (format) vsnprintf: If format strings can be influenced by an attacker, they can be exploited, and note that sprintf variations do not always \0-terminate (CWE-134). Use a constant for the format specification. vsnprintf (msg, LW_MSG_MAXLEN, fmt, ap); data/r-cran-lwgeom-0.2-5/src/liblwgeom/liblwgeom.h:260:27: [4] (format) printf: If format strings can be influenced by an attacker, they can be exploited (CWE-134). Use a constant for the format specification. __attribute__ (( format(printf, 1, 0) )); data/r-cran-lwgeom-0.2-5/src/liblwgeom/liblwgeom.h:262:27: [4] (format) printf: If format strings can be influenced by an attacker, they can be exploited (CWE-134). Use a constant for the format specification. __attribute__ (( format(printf, 2,0) )); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwgeom_api.c:43:5: [4] (format) snprintf: If format strings can be influenced by an attacker, they can be exploited, and note that sprintf variations do not always \0-terminate (CWE-134). Use a constant for the format specification. snprintf(ptr, 256, LIBLWGEOM_VERSION" r%d", POSTGIS_SVN_REVISION); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwgeom_debug.c:63:2: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. sprintf(result, "%*.s%s[%s]", data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwgeom_debug.c:78:2: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. sprintf(result, "%*.s%s[%s] with %d points", data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwgeom_debug.c:101:2: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. sprintf(result, "%*.s%s[%s] with %d element%s", data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwgeom_debug.c:116:16: [4] (buffer) strcat: Does not check for buffer overflows when concatenating to destination [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or snprintf (warning: strncat is easily misused). if ( i > 0 ) strcat(result,nl); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwgeom_debug.c:118:3: [4] (buffer) strcat: Does not check for buffer overflows when concatenating to destination [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or snprintf (warning: strncat is easily misused). strcat(result, tmp); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwgeom_debug.c:142:2: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. sprintf(result, "%*.s%s[%s] with %i ring%s", data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwgeom_debug.c:152:3: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. sprintf(tmp,"%s ring %i has %i points", data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwgeom_debug.c:154:16: [4] (buffer) strcat: Does not check for buffer overflows when concatenating to destination [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or snprintf (warning: strncat is easily misused). if ( i > 0 ) strcat(result,nl); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwgeom_debug.c:155:3: [4] (buffer) strcat: Does not check for buffer overflows when concatenating to destination [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or snprintf (warning: strncat is easily misused). strcat(result,tmp); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwgeom_geos.c:49:39: [4] (format) vsnprintf: If format strings can be influenced by an attacker, they can be exploited, and note that sprintf variations do not always \0-terminate (CWE-134). Use a constant for the format specification. if (LWGEOM_GEOS_ERRMSG_MAXSIZE - 1 < vsnprintf(lwgeom_geos_errmsg, LWGEOM_GEOS_ERRMSG_MAXSIZE - 1, fmt, ap)) data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwin_wkt_parse.c:968:21: [4] (format) fprintf: If format strings can be influenced by an attacker, they can be exploited (CWE-134). Use a constant for the format specification. # define YYFPRINTF fprintf data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_geojson.c:116:9: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf(ptr, "\"properties\":{\"name\":\"%s\"}},", srs); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_geojson.c:748:11: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf(ptr, "[%s,%s]", x, y); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_geojson.c:765:11: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf(ptr, "[%s,%s,%s]", x, y, z); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:90:10: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf(ptr, "<%sBox", prefix); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:92:21: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. if ( srs ) ptr += sprintf(ptr, " srsName=\"%s\"", srs); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:117:20: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. if ( srs ) ptr += sprintf(ptr, "<%sBox srsName=\"%s\">", prefix, srs); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:118:20: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. else ptr += sprintf(ptr, "<%sBox>", prefix); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:120:9: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf(ptr, "<%scoordinates>", prefix); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:122:9: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf(ptr, "</%scoordinates></%sBox>", prefix, prefix); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:146:10: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf(ptr, "<%sEnvelope", prefix); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:147:21: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. if ( srs ) ptr += sprintf(ptr, " srsName=\"%s\"", srs); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:170:9: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf(ptr, "<%sEnvelope", prefix); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:171:20: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. if ( srs ) ptr += sprintf(ptr, " srsName=\"%s\"", srs); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:175:9: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf(ptr, "<%slowerCorner>", prefix); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:177:9: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf(ptr, "</%slowerCorner>", prefix); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:185:9: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf(ptr, "<%supperCorner>", prefix); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:187:9: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf(ptr, "</%supperCorner>", prefix); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:189:9: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf(ptr, "</%sEnvelope>", prefix); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:287:9: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf(ptr, "<%sPoint", prefix); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:288:20: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. if ( srs ) ptr += sprintf(ptr, " srsName=\"%s\"", srs); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:295:9: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf(ptr, "<%scoordinates>", prefix); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:297:9: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf(ptr, "</%scoordinates></%sPoint>", prefix, prefix); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:332:9: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf(ptr, "<%sLineString", prefix); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:333:20: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. if ( srs ) ptr += sprintf(ptr, " srsName=\"%s\"", srs); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:342:9: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf(ptr, "<%scoordinates>", prefix); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:344:9: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf(ptr, "</%scoordinates></%sLineString>", prefix, prefix); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:388:9: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf(ptr, "<%sPolygon", prefix); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:389:20: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. if ( srs ) ptr += sprintf(ptr, " srsName=\"%s\"", srs); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:396:9: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf(ptr, "<%souterBoundaryIs><%sLinearRing><%scoordinates>", data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:399:9: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf(ptr, "</%scoordinates></%sLinearRing></%souterBoundaryIs>", prefix, prefix, prefix); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:402:10: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf(ptr, "<%sinnerBoundaryIs><%sLinearRing><%scoordinates>", prefix, prefix, prefix); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:404:10: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf(ptr, "</%scoordinates></%sLinearRing></%sinnerBoundaryIs>", prefix, prefix, prefix); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:406:9: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf(ptr, "</%sPolygon>", prefix); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:486:9: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf(ptr, "<%s%s", prefix, gmltype); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:487:20: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. if ( srs ) ptr += sprintf(ptr, " srsName=\"%s\"", srs); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:501:11: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf(ptr, "<%spointMember>", prefix); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:503:11: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf(ptr, "</%spointMember>", prefix); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:507:11: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf(ptr, "<%slineStringMember>", prefix); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:509:11: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf(ptr, "</%slineStringMember>", prefix); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:513:11: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf(ptr, "<%spolygonMember>", prefix); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:515:11: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf(ptr, "</%spolygonMember>", prefix); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:520:9: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf(ptr, "</%s%s>", prefix, gmltype); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:601:9: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf(ptr, "<%sMultiGeometry", prefix); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:602:20: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. if ( srs ) ptr += sprintf(ptr, " srsName=\"%s\"", srs); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:615:10: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf(ptr, "<%sgeometryMember>", prefix); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:635:10: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf(ptr, "</%sgeometryMember>", prefix); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:639:9: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf(ptr, "</%sMultiGeometry>", prefix); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:685:11: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf(ptr, "%s,%s", x, y); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:701:11: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf(ptr, "%s,%s,%s", x, y, z); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:795:9: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf(ptr, "<%sPoint", prefix); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:796:20: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. if ( srs ) ptr += sprintf(ptr, " srsName=\"%s\"", srs); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:797:20: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. if ( id ) ptr += sprintf(ptr, " %sid=\"%s\"", prefix, id); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:805:28: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. if (IS_DIMS(opts)) ptr += sprintf(ptr, "<%spos srsDimension=\"%d\">", prefix, dimension); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:806:22: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. else ptr += sprintf(ptr, "<%spos>", prefix); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:808:9: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf(ptr, "</%spos></%sPoint>", prefix, prefix); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:864:10: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf(ptr, "<%sLineString", prefix); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:868:10: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf(ptr, "<%sCurve", prefix); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:871:18: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. if (srs) ptr += sprintf(ptr, " srsName=\"%s\"", srs); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:872:18: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. if (id) ptr += sprintf(ptr, " %sid=\"%s\"", prefix, id); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:883:10: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf(ptr, "<%ssegments>", prefix); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:884:10: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf(ptr, "<%sLineStringSegment>", prefix); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:889:10: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf(ptr, "<%sposList srsDimension=\"%d\">", data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:894:10: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf(ptr, "<%sposList>", prefix); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:899:9: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf(ptr, "</%sposList>", prefix); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:903:10: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf(ptr, "</%sLineString>", prefix); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:907:10: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf(ptr, "</%sLineStringSegment>", prefix); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:908:10: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf(ptr, "</%ssegments>", prefix); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:909:10: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf(ptr, "</%sCurve>", prefix); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:952:9: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf(ptr, "<%sCurve", prefix); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:955:10: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf(ptr, " srsName=\"%s\"", srs); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:959:10: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf(ptr, " %sid=\"%s\"", prefix, id); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:962:9: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf(ptr, "<%ssegments>", prefix); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:963:9: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf(ptr, "<%sArcString>", prefix); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:964:9: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf(ptr, "<%sposList", prefix); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:973:9: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf(ptr, "</%sposList>", prefix); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:974:9: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf(ptr, "</%sArcString>", prefix); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:975:9: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf(ptr, "</%ssegments>", prefix); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:976:9: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf(ptr, "</%sCurve>", prefix); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1023:10: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf(ptr, "<%sPolygonPatch", prefix); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1028:10: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf(ptr, "<%sPolygon", prefix); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1031:18: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. if (srs) ptr += sprintf(ptr, " srsName=\"%s\"", srs); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1032:18: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. if (id) ptr += sprintf(ptr, " %sid=\"%s\"", prefix, id); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1041:9: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf(ptr, "<%sexterior><%sLinearRing>", prefix, prefix); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1042:28: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. if (IS_DIMS(opts)) ptr += sprintf(ptr, "<%sposList srsDimension=\"%d\">", prefix, dimension); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1043:22: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. else ptr += sprintf(ptr, "<%sposList>", prefix); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1046:9: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf(ptr, "</%sposList></%sLinearRing></%sexterior>", data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1050:10: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf(ptr, "<%sinterior><%sLinearRing>", prefix, prefix); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1051:29: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. if (IS_DIMS(opts)) ptr += sprintf(ptr, "<%sposList srsDimension=\"%d\">", prefix, dimension); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1052:23: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. else ptr += sprintf(ptr, "<%sposList>", prefix); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1054:10: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf(ptr, "</%sposList></%sLinearRing></%sinterior>", data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1057:23: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. if (is_patch) ptr += sprintf(ptr, "</%sPolygonPatch>", prefix); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1058:14: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. else ptr += sprintf(ptr, "</%sPolygon>", prefix); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1130:9: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf( ptr, "<%sCurve", prefix ); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1133:10: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf(ptr, " srsName=\"%s\"", srs); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1137:10: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf(ptr, " %sid=\"%s\"", prefix, id ); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1140:9: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf( ptr, "<%ssegments>", prefix ); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1152:11: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf( ptr, "<%sLineStringSegment><%sposList", prefix, prefix ); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1159:11: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf( ptr, "</%sposList></%sLineStringSegment>", prefix, prefix ); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1163:11: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf( ptr, "<%sArcString><%sposList" , prefix, prefix ); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1170:11: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf( ptr, "</%sposList></%sArcString>", prefix, prefix ); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1174:9: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf( ptr, "</%ssegments>", prefix ); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1175:9: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf( ptr, "</%sCurve>", prefix ); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1250:9: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf( ptr, "<%sPolygon", prefix ); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1253:10: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf(ptr, " srsName=\"%s\"", srs); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1257:10: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf(ptr, " %sid=\"%s\"", prefix, id ); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1265:11: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf( ptr, "<%sexterior>", prefix); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1269:11: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf( ptr, "<%sinterior>", prefix); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1275:11: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf( ptr, "<%sLinearRing>", prefix ); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1276:11: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf( ptr, "<%sposList", prefix ); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1283:11: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf( ptr, "</%sposList>", prefix ); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1284:11: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf( ptr, "</%sLinearRing>", prefix ); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1288:11: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf( ptr, "<%sRing>", prefix ); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1289:11: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf( ptr, "<%scurveMember>", prefix ); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1291:11: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf( ptr, "</%scurveMember>", prefix ); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1292:11: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf( ptr, "</%sRing>", prefix ); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1296:11: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf( ptr, "<%sRing>", prefix ); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1297:11: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf( ptr, "<%scurveMember>", prefix ); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1299:11: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf( ptr, "</%scurveMember>", prefix ); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1300:11: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf( ptr, "</%sRing>", prefix ); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1305:11: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf( ptr, "</%sexterior>", prefix); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1309:11: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf( ptr, "</%sinterior>", prefix); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1313:9: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf( ptr, "</%sPolygon>", prefix ); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1353:9: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf(ptr, "<%sTriangle", prefix); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1354:18: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. if (srs) ptr += sprintf(ptr, " srsName=\"%s\"", srs); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1355:18: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. if (id) ptr += sprintf(ptr, " %sid=\"%s\"", prefix, id); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1358:9: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf(ptr, "<%sexterior><%sLinearRing>", prefix, prefix); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1359:28: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. if (IS_DIMS(opts)) ptr += sprintf(ptr, "<%sposList srsDimension=\"%d\">", prefix, dimension); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1360:22: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. else ptr += sprintf(ptr, "<%sposList>", prefix); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1363:9: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf(ptr, "</%sposList></%sLinearRing></%sexterior>", data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1366:9: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf(ptr, "</%sTriangle>", prefix); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1445:9: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf(ptr, "<%s%s", prefix, gmltype); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1446:18: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. if (srs) ptr += sprintf(ptr, " srsName=\"%s\"", srs); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1447:18: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. if (id) ptr += sprintf(ptr, " %sid=\"%s\"", prefix, id); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1461:11: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf(ptr, "<%spointMember>", prefix); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1463:11: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf(ptr, "</%spointMember>", prefix); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1467:11: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf(ptr, "<%scurveMember>", prefix); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1469:11: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf(ptr, "</%scurveMember>", prefix); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1473:11: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf(ptr, "<%ssurfaceMember>", prefix); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1475:11: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf(ptr, "</%ssurfaceMember>", prefix); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1480:9: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf(ptr, "</%s%s>", prefix, gmltype); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1533:9: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf(ptr, "<%sPolyhedralSurface", prefix); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1534:18: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. if (srs) ptr += sprintf(ptr, " srsName=\"%s\"", srs); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1535:18: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. if (id) ptr += sprintf(ptr, " %sid=\"%s\"", prefix, id); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1536:9: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf(ptr, "><%spolygonPatches>", prefix); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1544:9: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf(ptr, "</%spolygonPatches></%sPolyhedralSurface>", data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1598:9: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf(ptr, "<%sTin", prefix); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1599:18: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. if (srs) ptr += sprintf(ptr, " srsName=\"%s\"", srs); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1600:18: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. if (id) ptr += sprintf(ptr, " %sid=\"%s\"", prefix, id); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1601:15: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. else ptr += sprintf(ptr, "><%strianglePatches>", prefix); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1610:9: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf(ptr, "</%strianglePatches></%sTin>", prefix, prefix); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1680:9: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf(ptr, "<%sMultiGeometry", prefix); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1681:18: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. if (srs) ptr += sprintf(ptr, " srsName=\"%s\"", srs); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1682:18: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. if (id) ptr += sprintf(ptr, " %sid=\"%s\"", prefix, id); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1694:10: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf(ptr, "<%sgeometryMember>", prefix); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1717:10: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf(ptr, "</%sgeometryMember>", prefix); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1721:9: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf(ptr, "</%sMultiGeometry>", prefix); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1776:9: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf(ptr, "<%sMultiCurve", prefix ); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1779:10: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf(ptr, " srsName=\"%s\"", srs); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1783:10: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf(ptr, " %sid=\"%s\"", prefix, id ); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1789:10: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf(ptr, "<%scurveMember>", prefix ); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1803:10: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf(ptr, "</%scurveMember>", prefix ); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1805:9: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf(ptr, "</%sMultiCurve>", prefix ); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1848:9: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf( ptr, "<%sMultiSurface", prefix ); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1851:10: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf(ptr, " srsName=\"%s\"", srs); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1855:10: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf(ptr, " %sid=\"%s\"", prefix, id ); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1871:9: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf( ptr, "</%sMultiSurface>", prefix ); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1912:12: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf(ptr, "%s %s", y, x); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1914:12: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf(ptr, "%s %s", x, y); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1932:12: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf(ptr, "%s %s %s", y, x, z); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1934:12: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf(ptr, "%s %s %s", x, y, z); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_svg.c:131:21: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. if (circle) ptr += sprintf(ptr, "x=\"%s\" y=\"%s\"", x, y); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_svg.c:132:14: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. else ptr += sprintf(ptr, "cx=\"%s\" cy=\"%s\"", x, y); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_svg.c:579:9: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf(ptr,"%s %s l", sx, sy); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_svg.c:603:10: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf(ptr," %s %s", sx, sy); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_svg.c:636:10: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. ptr += sprintf(ptr,"%s %s", x, y); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwprint.c:343:3: [4] (buffer) strcpy: Does not check for buffer overflows when copying to destination [MS-banned] (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy easily misused). strcpy(pieces[compass_dir_piece], is_negative ? neg_dir_symbol : pos_dir_symbol); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwprint.c:384:2: [4] (buffer) strcpy: Does not check for buffer overflows when copying to destination [MS-banned] (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy easily misused). strcpy(result, pieces[0]); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwprint.c:387:3: [4] (buffer) strcat: Does not check for buffer overflows when concatenating to destination [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or snprintf (warning: strncat is easily misused). strcat(result, pieces[index]); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwprint.c:413:2: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. sprintf(result, "%s %s", lat_text, lon_text); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwutil.c:122:2: [4] (format) vsnprintf: If format strings can be influenced by an attacker, they can be exploited, and note that sprintf variations do not always \0-terminate (CWE-134). Use a constant for the format specification. vsnprintf (msg, LW_MSG_MAXLEN, fmt, ap); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwutil.c:138:3: [4] (format) vsnprintf: If format strings can be influenced by an attacker, they can be exploited, and note that sprintf variations do not always \0-terminate (CWE-134). Use a constant for the format specification. vsnprintf(msg+i, LW_MSG_MAXLEN-i, fmt, ap); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwutil.c:149:2: [4] (format) vsnprintf: If format strings can be influenced by an attacker, they can be exploited, and note that sprintf variations do not always \0-terminate (CWE-134). Use a constant for the format specification. vsnprintf (msg, LW_MSG_MAXLEN, fmt, ap); data/r-cran-lwgeom-0.2-5/src/liblwgeom/stringbuffer.c:177:8: [4] (format) vsnprintf: If format strings can be influenced by an attacker, they can be exploited, and note that sprintf variations do not always \0-terminate (CWE-134). Use a constant for the format specification. len = vsnprintf(s->str_end, maxlen, fmt, ap2); data/r-cran-lwgeom-0.2-5/src/liblwgeom/stringbuffer.c:197:9: [4] (format) vsnprintf: If format strings can be influenced by an attacker, they can be exploited, and note that sprintf variations do not always \0-terminate (CWE-134). Use a constant for the format specification. len = vsnprintf(s->str_end, maxlen, fmt, ap); data/r-cran-lwgeom-0.2-5/src/io.cpp:13:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char msg[LW_MSG_MAXLEN+1]; data/r-cran-lwgeom-0.2-5/src/io.cpp:26:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char msg[LW_MSG_MAXLEN+1]; data/r-cran-lwgeom-0.2-5/src/liblwgeom/bytebuffer.c:90:4: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(s->buf_start, s->buf_static, s->capacity); data/r-cran-lwgeom-0.2-5/src/liblwgeom/bytebuffer.c:109:2: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(buf, s->buf_start, bufsz); data/r-cran-lwgeom-0.2-5/src/liblwgeom/bytebuffer.c:146:2: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(write_to->writecursor, write_from->buf_start, size); data/r-cran-lwgeom-0.2-5/src/liblwgeom/bytebuffer.c:262:2: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(s->writecursor, start, size); data/r-cran-lwgeom-0.2-5/src/liblwgeom/bytebuffer.c:299:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(buf->writecursor, iptr, WKB_INT_SIZE); data/r-cran-lwgeom-0.2-5/src/liblwgeom/bytebuffer.c:345:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(buf->writecursor, dptr, WKB_DOUBLE_SIZE); data/r-cran-lwgeom-0.2-5/src/liblwgeom/bytebuffer.c:397:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(res->buf_start+acc_size, buff_array[i]->buf_start, current_size); data/r-cran-lwgeom-0.2-5/src/liblwgeom/gbox.c:48:2: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(g, gbox, sizeof(GBOX)); data/r-cran-lwgeom-0.2-5/src/liblwgeom/gbox.c:141:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(gout, g2, sizeof(GBOX)); data/r-cran-lwgeom-0.2-5/src/liblwgeom/gbox.c:146:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(gout, g1, sizeof(GBOX)); data/r-cran-lwgeom-0.2-5/src/liblwgeom/gbox.c:429:2: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(copy, box, sizeof(GBOX)); data/r-cran-lwgeom-0.2-5/src/liblwgeom/gbox.c:437:2: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(duplicate, original, sizeof(GBOX)); data/r-cran-lwgeom-0.2-5/src/liblwgeom/gserialized1.c:181:2: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(&type, p, 4); data/r-cran-lwgeom-0.2-5/src/liblwgeom/gserialized1.c:182:2: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(&num, p+4, 4); data/r-cran-lwgeom-0.2-5/src/liblwgeom/gserialized1.c:241:2: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(b2, &srid, sizeof(int)); data/r-cran-lwgeom-0.2-5/src/liblwgeom/gserialized1.c:243:2: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(b2+sizeof(int), b1, bsz1); data/r-cran-lwgeom-0.2-5/src/liblwgeom/gserialized1.c:760:2: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(loc, &type, sizeof(uint32_t)); data/r-cran-lwgeom-0.2-5/src/liblwgeom/gserialized1.c:763:2: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(loc, &(point->point->npoints), sizeof(uint32_t)); data/r-cran-lwgeom-0.2-5/src/liblwgeom/gserialized1.c:769:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(loc, getPoint_internal(point->point, 0), ptsize); data/r-cran-lwgeom-0.2-5/src/liblwgeom/gserialized1.c:796:2: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(loc, &type, sizeof(uint32_t)); data/r-cran-lwgeom-0.2-5/src/liblwgeom/gserialized1.c:800:2: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(loc, &(line->points->npoints), sizeof(uint32_t)); data/r-cran-lwgeom-0.2-5/src/liblwgeom/gserialized1.c:809:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(loc, getPoint_internal(line->points, 0), size); data/r-cran-lwgeom-0.2-5/src/liblwgeom/gserialized1.c:833:2: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(loc, &type, sizeof(uint32_t)); data/r-cran-lwgeom-0.2-5/src/liblwgeom/gserialized1.c:837:2: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(loc, &(poly->nrings), sizeof(uint32_t)); data/r-cran-lwgeom-0.2-5/src/liblwgeom/gserialized1.c:843:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(loc, &(poly->rings[i]->npoints), sizeof(uint32_t)); data/r-cran-lwgeom-0.2-5/src/liblwgeom/gserialized1.c:865:4: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(loc, getPoint_internal(pa, 0), pasize); data/r-cran-lwgeom-0.2-5/src/liblwgeom/gserialized1.c:891:2: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(loc, &type, sizeof(uint32_t)); data/r-cran-lwgeom-0.2-5/src/liblwgeom/gserialized1.c:895:2: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(loc, &(triangle->points->npoints), sizeof(uint32_t)); data/r-cran-lwgeom-0.2-5/src/liblwgeom/gserialized1.c:904:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(loc, getPoint_internal(triangle->points, 0), size); data/r-cran-lwgeom-0.2-5/src/liblwgeom/gserialized1.c:930:2: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(loc, &type, sizeof(uint32_t)); data/r-cran-lwgeom-0.2-5/src/liblwgeom/gserialized1.c:934:2: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(loc, &curve->points->npoints, sizeof(uint32_t)); data/r-cran-lwgeom-0.2-5/src/liblwgeom/gserialized1.c:941:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(loc, getPoint_internal(curve->points, 0), size); data/r-cran-lwgeom-0.2-5/src/liblwgeom/gserialized1.c:962:2: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(loc, &type, sizeof(uint32_t)); data/r-cran-lwgeom-0.2-5/src/liblwgeom/gserialized1.c:966:2: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(loc, &coll->ngeoms, sizeof(uint32_t)); data/r-cran-lwgeom-0.2-5/src/liblwgeom/gserialized1.c:1030:2: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(loc, &f, sizeof(float)); data/r-cran-lwgeom-0.2-5/src/liblwgeom/gserialized1.c:1034:2: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(loc, &f, sizeof(float)); data/r-cran-lwgeom-0.2-5/src/liblwgeom/gserialized1.c:1038:2: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(loc, &f, sizeof(float)); data/r-cran-lwgeom-0.2-5/src/liblwgeom/gserialized1.c:1042:2: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(loc, &f, sizeof(float)); data/r-cran-lwgeom-0.2-5/src/liblwgeom/gserialized1.c:1048:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(loc, &f, sizeof(float)); data/r-cran-lwgeom-0.2-5/src/liblwgeom/gserialized1.c:1052:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(loc, &f, sizeof(float)); data/r-cran-lwgeom-0.2-5/src/liblwgeom/gserialized1.c:1063:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(loc, &f, sizeof(float)); data/r-cran-lwgeom-0.2-5/src/liblwgeom/gserialized1.c:1067:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(loc, &f, sizeof(float)); data/r-cran-lwgeom-0.2-5/src/liblwgeom/gserialized1.c:1075:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(loc, &f, sizeof(float)); data/r-cran-lwgeom-0.2-5/src/liblwgeom/gserialized1.c:1079:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(loc, &f, sizeof(float)); data/r-cran-lwgeom-0.2-5/src/liblwgeom/gserialized1.c:1539:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(g_out, g, 8); data/r-cran-lwgeom-0.2-5/src/liblwgeom/gserialized1.c:1543:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(ptr, g->data, SIZE_GET(g->size) - 8); data/r-cran-lwgeom-0.2-5/src/liblwgeom/gserialized1.c:1590:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(outptr, inptr, 8); data/r-cran-lwgeom-0.2-5/src/liblwgeom/gserialized1.c:1594:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(outptr, inptr, g_out_size - 8); data/r-cran-lwgeom-0.2-5/src/liblwgeom/gserialized1.c:1601:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(g_out, g, g_out_size); data/r-cran-lwgeom-0.2-5/src/liblwgeom/gserialized2.c:68:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(&xflags, g->data, sizeof(uint64_t)); data/r-cran-lwgeom-0.2-5/src/liblwgeom/gserialized2.c:229:2: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(&type, p, 4); data/r-cran-lwgeom-0.2-5/src/liblwgeom/gserialized2.c:230:2: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(&num, p+4, 4); data/r-cran-lwgeom-0.2-5/src/liblwgeom/gserialized2.c:283:2: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(b2, &srid, sizeof(int)); data/r-cran-lwgeom-0.2-5/src/liblwgeom/gserialized2.c:285:2: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(b2+sizeof(int), b1, bsz1); data/r-cran-lwgeom-0.2-5/src/liblwgeom/gserialized2.c:818:2: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(loc, &type, sizeof(uint32_t)); data/r-cran-lwgeom-0.2-5/src/liblwgeom/gserialized2.c:821:2: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(loc, &(point->point->npoints), sizeof(uint32_t)); data/r-cran-lwgeom-0.2-5/src/liblwgeom/gserialized2.c:827:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(loc, getPoint_internal(point->point, 0), ptsize); data/r-cran-lwgeom-0.2-5/src/liblwgeom/gserialized2.c:854:2: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(loc, &type, sizeof(uint32_t)); data/r-cran-lwgeom-0.2-5/src/liblwgeom/gserialized2.c:858:2: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(loc, &(line->points->npoints), sizeof(uint32_t)); data/r-cran-lwgeom-0.2-5/src/liblwgeom/gserialized2.c:867:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(loc, getPoint_internal(line->points, 0), size); data/r-cran-lwgeom-0.2-5/src/liblwgeom/gserialized2.c:891:2: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(loc, &type, sizeof(uint32_t)); data/r-cran-lwgeom-0.2-5/src/liblwgeom/gserialized2.c:895:2: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(loc, &(poly->nrings), sizeof(uint32_t)); data/r-cran-lwgeom-0.2-5/src/liblwgeom/gserialized2.c:901:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(loc, &(poly->rings[i]->npoints), sizeof(uint32_t)); data/r-cran-lwgeom-0.2-5/src/liblwgeom/gserialized2.c:923:4: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(loc, getPoint_internal(pa, 0), pasize); data/r-cran-lwgeom-0.2-5/src/liblwgeom/gserialized2.c:949:2: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(loc, &type, sizeof(uint32_t)); data/r-cran-lwgeom-0.2-5/src/liblwgeom/gserialized2.c:953:2: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(loc, &(triangle->points->npoints), sizeof(uint32_t)); data/r-cran-lwgeom-0.2-5/src/liblwgeom/gserialized2.c:962:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(loc, getPoint_internal(triangle->points, 0), size); data/r-cran-lwgeom-0.2-5/src/liblwgeom/gserialized2.c:988:2: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(loc, &type, sizeof(uint32_t)); data/r-cran-lwgeom-0.2-5/src/liblwgeom/gserialized2.c:992:2: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(loc, &curve->points->npoints, sizeof(uint32_t)); data/r-cran-lwgeom-0.2-5/src/liblwgeom/gserialized2.c:999:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(loc, getPoint_internal(curve->points, 0), size); data/r-cran-lwgeom-0.2-5/src/liblwgeom/gserialized2.c:1020:2: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(loc, &type, sizeof(uint32_t)); data/r-cran-lwgeom-0.2-5/src/liblwgeom/gserialized2.c:1024:2: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(loc, &coll->ngeoms, sizeof(uint32_t)); data/r-cran-lwgeom-0.2-5/src/liblwgeom/gserialized2.c:1091:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(buf, &xflags, sizeof(uint64_t)); data/r-cran-lwgeom-0.2-5/src/liblwgeom/gserialized2.c:1106:2: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(loc, &f, sizeof(float)); data/r-cran-lwgeom-0.2-5/src/liblwgeom/gserialized2.c:1110:2: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(loc, &f, sizeof(float)); data/r-cran-lwgeom-0.2-5/src/liblwgeom/gserialized2.c:1114:2: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(loc, &f, sizeof(float)); data/r-cran-lwgeom-0.2-5/src/liblwgeom/gserialized2.c:1118:2: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(loc, &f, sizeof(float)); data/r-cran-lwgeom-0.2-5/src/liblwgeom/gserialized2.c:1124:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(loc, &f, sizeof(float)); data/r-cran-lwgeom-0.2-5/src/liblwgeom/gserialized2.c:1128:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(loc, &f, sizeof(float)); data/r-cran-lwgeom-0.2-5/src/liblwgeom/gserialized2.c:1139:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(loc, &f, sizeof(float)); data/r-cran-lwgeom-0.2-5/src/liblwgeom/gserialized2.c:1143:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(loc, &f, sizeof(float)); data/r-cran-lwgeom-0.2-5/src/liblwgeom/gserialized2.c:1151:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(loc, &f, sizeof(float)); data/r-cran-lwgeom-0.2-5/src/liblwgeom/gserialized2.c:1155:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(loc, &f, sizeof(float)); data/r-cran-lwgeom-0.2-5/src/liblwgeom/gserialized2.c:1614:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(ptr_out, ptr_in, 8); ptr_out += 8; ptr_in += 8; data/r-cran-lwgeom-0.2-5/src/liblwgeom/gserialized2.c:1618:4: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(ptr_out, ptr_in, 8); ptr_out += 8; ptr_in += 8; data/r-cran-lwgeom-0.2-5/src/liblwgeom/gserialized2.c:1622:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(ptr_out, ptr_in, varsize_in - (ptr_in - ptr)); data/r-cran-lwgeom-0.2-5/src/liblwgeom/gserialized2.c:1669:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(outptr, inptr, 8); outptr += 8; inptr += 8; data/r-cran-lwgeom-0.2-5/src/liblwgeom/gserialized2.c:1673:4: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(outptr, inptr, 8); outptr += 8; inptr += 8; data/r-cran-lwgeom-0.2-5/src/liblwgeom/gserialized2.c:1678:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(outptr, inptr, g_out_size - 8); data/r-cran-lwgeom-0.2-5/src/liblwgeom/gserialized2.c:1685:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(g_out, g, g_out_size); data/r-cran-lwgeom-0.2-5/src/liblwgeom/liblwgeom.h:367:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char name[20]; /* name of ellipse */ data/r-cran-lwgeom-0.2-5/src/liblwgeom/liblwgeom.h:449:2: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char pad[1]; /* Padding to 24 bytes (unused) */ data/r-cran-lwgeom-0.2-5/src/liblwgeom/liblwgeom.h:461:2: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char pad[1]; /* Padding to 24 bytes (unused) */ data/r-cran-lwgeom-0.2-5/src/liblwgeom/liblwgeom.h:473:2: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char pad[1]; /* Padding to 24 bytes (unused) */ data/r-cran-lwgeom-0.2-5/src/liblwgeom/liblwgeom.h:485:2: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char pad[1]; /* Padding to 24 bytes (unused) */ data/r-cran-lwgeom-0.2-5/src/liblwgeom/liblwgeom.h:497:2: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char pad[1]; /* Padding to 24 bytes (unused) */ data/r-cran-lwgeom-0.2-5/src/liblwgeom/liblwgeom.h:509:2: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char pad[1]; /* Padding to 24 bytes (unused) */ data/r-cran-lwgeom-0.2-5/src/liblwgeom/liblwgeom.h:523:2: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char pad[1]; /* Padding to 24 bytes (unused) */ data/r-cran-lwgeom-0.2-5/src/liblwgeom/liblwgeom.h:537:2: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char pad[1]; /* Padding to 24 bytes (unused) */ data/r-cran-lwgeom-0.2-5/src/liblwgeom/liblwgeom.h:551:2: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char pad[1]; /* Padding to 24 bytes (unused) */ data/r-cran-lwgeom-0.2-5/src/liblwgeom/liblwgeom.h:565:2: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char pad[1]; /* Padding to 24 bytes (unused) */ data/r-cran-lwgeom-0.2-5/src/liblwgeom/liblwgeom.h:579:2: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char pad[1]; /* Padding to 24 bytes (unused) */ data/r-cran-lwgeom-0.2-5/src/liblwgeom/liblwgeom.h:593:2: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char pad[1]; /* Padding to 24 bytes (unused) */ data/r-cran-lwgeom-0.2-5/src/liblwgeom/liblwgeom.h:607:2: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char pad[1]; /* Padding to 24 bytes (unused) */ data/r-cran-lwgeom-0.2-5/src/liblwgeom/liblwgeom.h:621:2: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char pad[1]; /* Padding to 24 bytes (unused) */ data/r-cran-lwgeom-0.2-5/src/liblwgeom/liblwgeom.h:635:2: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char pad[1]; /* Padding to 24 bytes (unused) */ data/r-cran-lwgeom-0.2-5/src/liblwgeom/liblwgeom.h:649:2: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char pad[1]; /* Padding to 24 bytes (unused) */ data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwboundingcircle.c:203:4: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(&next_support, support, sizeof(SUPPORTING_POINTS)); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwchaikins.c:54:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(&p2, &p1, sizeof(POINT4D)); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwcircstring.c:180:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(ptr, getPoint_internal(points[i]->point, 0), size); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwcircstring.c:212:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(ptr, data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwcollection.c:128:2: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(ret, g, sizeof(LWCOLLECTION)); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwcollection.c:154:2: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(ret, g, sizeof(LWCOLLECTION)); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwgeodetic.c:198:2: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(d, &(gbox->xmin), 6*sizeof(double)); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwgeodetic.c:225:2: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(d, &(gbox->xmin), 6*sizeof(double)); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwgeodetic.c:276:2: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(d, &(gbox->xmin), 6*sizeof(double)); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwgeom.c:1655:4: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(mpt->geoms, out, sizeof(LWPOINT *) * n); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwgeom.c:2501:2: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(&dint, &d, dsz); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwgeom.c:2503:2: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(&d, &dint, dsz); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwgeom_api.c:39:10: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. static char buf[256]; data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwgeom_api.c:150:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(op, ptr, sizeof(POINT2D)); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwgeom_api.c:156:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(op, ptr, sizeof(POINT4D)); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwgeom_api.c:160:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(op, ptr, sizeof(POINT3DZ)); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwgeom_api.c:165:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(op, ptr, sizeof(POINT3DM)); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwgeom_api.c:241:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(op, ptr, sizeof(POINT3DZ)); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwgeom_api.c:250:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(op, ptr, sizeof(POINT2D)); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwgeom_api.c:296:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(op, ptr, sizeof(POINT3DM)); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwgeom_api.c:304:2: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(op, ptr, sizeof(POINT2D)); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwgeom_api.c:314:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(&(op->m), ptr, sizeof(double)); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwgeom_api.c:361:2: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(point, getPoint_internal(pa, n), sizeof(POINT2D)); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwgeom_api.c:381:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(ptr, p4d, sizeof(POINT4D)); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwgeom_api.c:384:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(ptr, p4d, sizeof(POINT3DZ)); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwgeom_api.c:387:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(ptr, p4d, sizeof(POINT2D)); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwgeom_api.c:389:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(ptr, &(p4d->m), sizeof(double)); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwgeom_api.c:392:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(ptr, p4d, sizeof(POINT2D)); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwgeom_debug.c:33:8: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. static char tflags[6]; data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwgeom_debug.c:130:2: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char tmp[256]; data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwgeom_debug.c:193:3: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(result, "Object is of unknown type: %d", data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwgeom_geos.c:40:1: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char lwgeom_geos_errmsg[LWGEOM_GEOS_ERRMSG_MAXSIZE]; data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwgeom_geos.c:1522:2: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char tmp[2 * sizeof(int)]; data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwgeom_geos.c:1613:4: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(tmp, (char *)cells + j * stride, size); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwgeom_geos.c:1614:4: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy((char *)cells + j * stride, (char *)cells + i * stride, size); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwgeom_geos.c:1615:4: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy((char *)cells + i * stride, tmp, size); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwgeom_geos_clean.c:295:2: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(ret, g, sizeof(LWCOLLECTION)); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwgeom_geos_cluster.c:572:5: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(components, geoms_in_cluster, j * sizeof(LWGEOM*)); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwgeom_topo.c:4197:3: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char buf[256]; data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwin_wkb.c:282:2: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(&i, s->pos, WKB_INT_SIZE); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwin_wkb.c:310:2: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(&d, s->pos, WKB_DOUBLE_SIZE); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwin_wkt_parse.c:1259:3: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char const *yyarg[YYERROR_VERBOSE_ARGS_MAXIMUM]; data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwin_wkt_parse.c:1685:3: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char yymsgbuf[128]; data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwkmeans.c:112:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(clusters_last, clusters, clusters_sz); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwline.c:99:2: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(ret, g, sizeof(LWLINE)); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwline.c:114:2: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(ret, g, sizeof(LWLINE)); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwmval.c:75:4: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(res_cursor, (double*) pa->serialized_pointlist + i*ndims, pointsize); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_geojson.c:115:9: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. ptr += sprintf(ptr, "\"crs\":{\"type\":\"name\","); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_geojson.c:151:10: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. ptr += sprintf(ptr, "\"bbox\":[%.*f,%.*f,%.*f,%.*f],", data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_geojson.c:155:10: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. ptr += sprintf(ptr, "\"bbox\":[%.*f,%.*f,%.*f,%.*f,%.*f,%.*f],", data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_geojson.c:191:9: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. ptr += sprintf(ptr, "{\"type\":\"Point\","); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_geojson.c:195:9: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. ptr += sprintf(ptr, "\"coordinates\":"); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_geojson.c:197:10: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. ptr += sprintf(ptr, "[]"); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_geojson.c:241:9: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. ptr += sprintf(ptr, "{\"type\":\"Polygon\","); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_geojson.c:246:9: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. ptr += sprintf(ptr, "\"coordinates\":[["); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_geojson.c:248:9: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. ptr += sprintf(ptr, "]]}"); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_geojson.c:289:9: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. ptr += sprintf(ptr, "{\"type\":\"LineString\","); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_geojson.c:292:9: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. ptr += sprintf(ptr, "\"coordinates\":["); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_geojson.c:294:9: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. ptr += sprintf(ptr, "]}"); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_geojson.c:346:9: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. ptr += sprintf(ptr, "{\"type\":\"Polygon\","); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_geojson.c:349:9: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. ptr += sprintf(ptr, "\"coordinates\":["); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_geojson.c:357:9: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. ptr += sprintf(ptr, "]}"); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_geojson.c:410:9: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. ptr += sprintf(ptr, "{\"type\":\"MultiPoint\","); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_geojson.c:413:9: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. ptr += sprintf(ptr, "\"coordinates\":["); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_geojson.c:421:9: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. ptr += sprintf(ptr, "]}"); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_geojson.c:475:9: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. ptr += sprintf(ptr, "{\"type\":\"MultiLineString\","); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_geojson.c:478:9: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. ptr += sprintf(ptr, "\"coordinates\":["); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_geojson.c:489:9: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. ptr += sprintf(ptr, "]}"); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_geojson.c:548:9: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. ptr += sprintf(ptr, "{\"type\":\"MultiPolygon\","); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_geojson.c:551:9: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. ptr += sprintf(ptr, "\"coordinates\":["); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_geojson.c:566:9: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. ptr += sprintf(ptr, "]}"); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_geojson.c:620:9: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. ptr += sprintf(ptr, "{\"type\":\"GeometryCollection\","); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_geojson.c:623:9: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. ptr += sprintf(ptr, "\"geometries\":["); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_geojson.c:632:9: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. ptr += sprintf(ptr, "]}"); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_geojson.c:727:2: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char x[OUT_DOUBLE_BUFFER_SIZE]; data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_geojson.c:728:2: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char y[OUT_DOUBLE_BUFFER_SIZE]; data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_geojson.c:729:2: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char z[OUT_DOUBLE_BUFFER_SIZE]; data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:94:10: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. ptr += sprintf(ptr, "/>"); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:149:10: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. ptr += sprintf(ptr, "/>"); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:172:30: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. if ( IS_DIMS(opts) ) ptr += sprintf(ptr, " srsDimension=\"%d\"", dimension); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:291:10: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. ptr += sprintf(ptr, "/>"); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:337:10: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. ptr += sprintf(ptr, "/>"); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:392:10: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. ptr += sprintf(ptr, "/>"); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:491:10: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. ptr += sprintf(ptr, "/>"); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:606:10: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. ptr += sprintf(ptr, "/>"); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:666:2: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char x[OUT_DOUBLE_BUFFER_SIZE]; data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:667:2: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char y[OUT_DOUBLE_BUFFER_SIZE]; data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:668:2: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char z[OUT_DOUBLE_BUFFER_SIZE]; data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:800:10: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. ptr += sprintf(ptr, "/>"); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:876:10: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. ptr += sprintf(ptr, "/>"); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:968:10: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. ptr += sprintf(ptr, " srsDimension=\"%d\"", dimension); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1036:10: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. ptr += sprintf(ptr, "/>"); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1155:12: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. ptr += sprintf(ptr, " srsDimension=\"%d\"", dimension); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1166:12: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. ptr += sprintf(ptr, " srsDimension=\"%d\"", dimension); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1279:12: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. ptr += sprintf(ptr, " srsDimension=\"%d\"", dimension); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1451:10: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. ptr += sprintf(ptr, "/>"); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1686:10: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. ptr += sprintf(ptr, "/>"); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1893:2: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char x[OUT_DOUBLE_BUFFER_SIZE]; data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1894:2: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char y[OUT_DOUBLE_BUFFER_SIZE]; data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1895:2: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char z[OUT_DOUBLE_BUFFER_SIZE]; data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_svg.c:122:2: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char x[OUT_DOUBLE_BUFFER_SIZE]; data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_svg.c:123:2: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char y[OUT_DOUBLE_BUFFER_SIZE]; data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_svg.c:172:9: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. ptr += sprintf(ptr, "M "); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_svg.c:221:10: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. ptr += sprintf(ptr, "M "); /* Start path with SVG MoveTo */ data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_svg.c:226:11: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. ptr += sprintf(ptr, " z"); /* SVG closepath */ data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_svg.c:231:11: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. ptr += sprintf(ptr, " Z"); /* SVG closepath */ data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_svg.c:554:2: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char sx[OUT_DOUBLE_BUFFER_SIZE]; data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_svg.c:555:2: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char sy[OUT_DOUBLE_BUFFER_SIZE]; data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_svg.c:618:2: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char x[OUT_DOUBLE_BUFFER_SIZE]; data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_svg.c:619:2: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char y[OUT_DOUBLE_BUFFER_SIZE]; data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_svg.c:634:22: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. if (i == 1) ptr += sprintf(ptr, " L "); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_wkb.c:234:4: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(buf, iptr, WKB_INT_SIZE); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_wkb.c:309:4: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(buf, dptr, WKB_DOUBLE_SIZE); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_wkb.c:417:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(buf, getPoint_internal(pa, 0), size); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_wkt.c:89:2: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char coord[buffer_size]; data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_x3d.c:505:2: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char x[OUT_DOUBLE_BUFFER_SIZE]; data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_x3d.c:506:2: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char y[OUT_DOUBLE_BUFFER_SIZE]; data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_x3d.c:507:2: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char z[OUT_DOUBLE_BUFFER_SIZE]; data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwpoint.c:245:2: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(ret, g, sizeof(LWPOINT)); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwpoly.c:217:2: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(ret, g, sizeof(LWPOLY)); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwpoly.c:232:2: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(ret, g, sizeof(LWPOLY)); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwprint.c:81:2: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char pieces[NUM_PIECES][WORK_SIZE]; data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwprint.c:357:3: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(pieces[deg_piece], "%*.*f", deg_digits, deg_dec_digits, degrees); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwprint.c:367:3: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(pieces[min_piece], "%*.*f", min_digits, min_dec_digits, minutes); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwprint.c:376:3: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(pieces[sec_piece], "%*.*f", sec_digits, sec_dec_digits, seconds); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwstroke.c:1023:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(&first, &a1, sizeof(POINT4D)); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwstroke.c:1046:4: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(&a1, &a2, sizeof(POINT4D)); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwstroke.c:1047:4: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(&a2, &a3, sizeof(POINT4D)); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwstroke.c:1048:4: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(&a3, &b, sizeof(POINT4D)); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwstroke.c:1234:2: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(ret, c, sizeof(LWCOLLECTION)); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwutil.c:121:2: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char msg[LW_MSG_MAXLEN+1]; data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwutil.c:131:2: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char msg[LW_MSG_MAXLEN+1]; data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwutil.c:148:2: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char msg[LW_MSG_MAXLEN+1]; data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwutil.c:467:7: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. const char dumb_upper_map[128] = "................................................0123456789.......ABCDEFGHIJKLMNOPQRSTUVWXYZ......ABCDEFGHIJKLMNOPQRSTUVWXYZ....."; data/r-cran-lwgeom-0.2-5/src/liblwgeom/ptarray.c:238:2: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(getPoint_internal(pa1, pa1->npoints), data/r-cran-lwgeom-0.2-5/src/liblwgeom/ptarray.c:308:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(pa->serialized_pointlist, ptlist, ptarray_point_size(pa) * npoints); data/r-cran-lwgeom-0.2-5/src/liblwgeom/ptarray.c:527:2: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy((uint8_t *)&pbuf, p, pdims*sizeof(double)); data/r-cran-lwgeom-0.2-5/src/liblwgeom/ptarray.c:537:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(getPoint_internal(ret, 0), getPoint_internal(pa, 0), ptsize*where); data/r-cran-lwgeom-0.2-5/src/liblwgeom/ptarray.c:540:2: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(getPoint_internal(ret, where), (uint8_t *)&pbuf, ptsize); data/r-cran-lwgeom-0.2-5/src/liblwgeom/ptarray.c:544:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(getPoint_internal(ret, where+1), data/r-cran-lwgeom-0.2-5/src/liblwgeom/ptarray.c:581:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(getPoint_internal(ret, 0), getPoint_internal(pa, 0), ptsize*which); data/r-cran-lwgeom-0.2-5/src/liblwgeom/ptarray.c:587:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(getPoint_internal(ret, which), getPoint_internal(pa, which+1), data/r-cran-lwgeom-0.2-5/src/liblwgeom/ptarray.c:607:2: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy( getPoint_internal(pa, 0), data/r-cran-lwgeom-0.2-5/src/liblwgeom/ptarray.c:611:2: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy( getPoint_internal(pa, pa1->npoints), data/r-cran-lwgeom-0.2-5/src/liblwgeom/ptarray.c:647:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(out->serialized_pointlist, in->serialized_pointlist, size); data/r-cran-lwgeom-0.2-5/src/liblwgeom/ptarray.c:1242:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(&p1, &p2, sizeof(POINT4D)); data/r-cran-lwgeom-0.2-5/src/liblwgeom/ptarray.c:1422:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(&x, getPoint_internal(pa, i), sizeof(double)); data/r-cran-lwgeom-0.2-5/src/liblwgeom/ptarray.c:1425:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(getPoint_internal(pa, i), &x, sizeof(double)); data/r-cran-lwgeom-0.2-5/src/liblwgeom/ptarray.c:1510:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(p_to, pt, pt_size); data/r-cran-lwgeom-0.2-5/src/liblwgeom/ptarray.c:1646:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(pa->serialized_pointlist + pt_size * kept_it, data/r-cran-lwgeom-0.2-5/src/liblwgeom/ptarray.c:1656:5: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(pa->serialized_pointlist + pt_size * kept_it, data/r-cran-lwgeom-0.2-5/src/liblwgeom/stringbuffer.c:128:2: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(str, s->str_start, size); data/r-cran-lwgeom-0.2-5/src/liblwgeom/stringbuffer.h:93:2: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(s->str_end, a, alen0); data/r-cran-lwgeom-0.2-5/src/lwgeom.cpp:63:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(&(raw[0]), wkb, size); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwalgorithm.c:724:19: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). size_t hashlen = strlen(geohash); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwgeom_debug.c:112:11: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). size += strlen(tmp)+1; data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwin_encoded_polyline.c:38:16: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). int length = strlen(encodedpolyline); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwin_wkb.c:848:15: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). hexwkb_len = strlen(hexwkb); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwin_wkt.c:84:18: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). for( i = 0; i < strlen(dimensionality); i++ ) data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwin_wkt_lex.c:1006:14: [1] (buffer) getc: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). (c = getc( yyin )) != EOF && c != '\n'; ++n ) \ data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwin_wkt_lex.c:2042:37: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). return yy_scan_bytes( yystr, (int) strlen(yystr) ); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwin_wkt_parse.c:1156:21: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). # define yystrlen strlen data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_geojson.c:105:10: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). size += strlen(srs) * sizeof(char); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_geojson.c:199:9: [1] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source is a constant character. ptr += sprintf(ptr, "}"); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_geojson.c:352:17: [1] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source is a constant character. if (i) ptr += sprintf(ptr, ","); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_geojson.c:353:10: [1] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source is a constant character. ptr += sprintf(ptr, "["); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_geojson.c:355:10: [1] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source is a constant character. ptr += sprintf(ptr, "]"); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_geojson.c:417:17: [1] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source is a constant character. if (i) ptr += sprintf(ptr, ","); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_geojson.c:482:17: [1] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source is a constant character. if (i) ptr += sprintf(ptr, ","); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_geojson.c:483:10: [1] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source is a constant character. ptr += sprintf(ptr, "["); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_geojson.c:486:10: [1] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source is a constant character. ptr += sprintf(ptr, "]"); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_geojson.c:554:17: [1] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source is a constant character. if (i) ptr += sprintf(ptr, ","); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_geojson.c:555:10: [1] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source is a constant character. ptr += sprintf(ptr, "["); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_geojson.c:559:18: [1] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source is a constant character. if (j) ptr += sprintf(ptr, ","); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_geojson.c:560:11: [1] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source is a constant character. ptr += sprintf(ptr, "["); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_geojson.c:562:11: [1] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source is a constant character. ptr += sprintf(ptr, "]"); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_geojson.c:564:10: [1] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source is a constant character. ptr += sprintf(ptr, "]"); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_geojson.c:627:17: [1] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source is a constant character. if (i) ptr += sprintf(ptr, ","); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_geojson.c:747:20: [1] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source is a constant character. if ( i ) ptr += sprintf(ptr, ","); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_geojson.c:764:20: [1] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source is a constant character. if ( i ) ptr += sprintf(ptr, ","); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:81:21: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). size_t prefixlen = strlen(prefix); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:86:22: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). if ( srs ) size += strlen(srs) + sizeof(" srsName=.."); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:113:21: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). if ( srs ) size += strlen(srs) + sizeof(" srsName=.."); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:136:21: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). size_t prefixlen = strlen(prefix); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:142:22: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). if ( srs ) size += strlen(srs) + sizeof(" srsName=.."); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:165:21: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). if ( srs ) size += strlen(srs) + sizeof(" srsName=.."); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:173:9: [1] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source is a constant character. ptr += sprintf(ptr, ">"); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:274:21: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). size_t prefixlen = strlen(prefix); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:278:21: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). if ( srs ) size += strlen(srs) + sizeof(" srsName=.."); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:294:9: [1] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source is a constant character. ptr += sprintf(ptr, ">"); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:318:21: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). size_t prefixlen = strlen(prefix); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:322:21: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). if ( srs ) size += strlen(srs) + sizeof(" srsName=.."); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:340:9: [1] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source is a constant character. ptr += sprintf(ptr, ">"); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:366:21: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). size_t prefixlen = strlen(prefix); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:369:21: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). if ( srs ) size += strlen(srs) + sizeof(" srsName=.."); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:395:9: [1] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source is a constant character. ptr += sprintf(ptr, ">"); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:434:21: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). size_t prefixlen = strlen(prefix); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:441:21: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). if ( srs ) size += strlen(srs) + sizeof(" srsName=.."); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:494:9: [1] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source is a constant character. ptr += sprintf(ptr, ">"); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:551:21: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). size_t prefixlen = strlen(prefix); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:557:21: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). if ( srs ) size += strlen(srs) + sizeof(" srsName=.."); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:609:9: [1] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source is a constant character. ptr += sprintf(ptr, ">"); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:684:20: [1] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source is a constant character. if ( i ) ptr += sprintf(ptr, " "); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:700:20: [1] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source is a constant character. if ( i ) ptr += sprintf(ptr, " "); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:777:21: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). size_t prefixlen = strlen(prefix); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:781:19: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). if (srs) size += strlen(srs) + sizeof(" srsName=.."); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:782:19: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). if (id) size += strlen(id) + strlen(prefix) + sizeof(" id=.."); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:782:32: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). if (id) size += strlen(id) + strlen(prefix) + sizeof(" id=.."); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:804:9: [1] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source is a constant character. ptr += sprintf(ptr, ">"); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:830:21: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). size_t prefixlen = strlen(prefix); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:847:19: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). if (srs) size += strlen(srs) + sizeof(" srsName=.."); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:848:19: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). if (id) size += strlen(id) + strlen(prefix) + sizeof(" id=.."); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:848:32: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). if (id) size += strlen(id) + strlen(prefix) + sizeof(" id=.."); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:879:9: [1] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source is a constant character. ptr += sprintf(ptr, ">"); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:932:21: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). size_t prefixlen = strlen(prefix); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:935:19: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). if (srs) size += strlen(srs) + sizeof(" srsName=.."); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:936:19: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). if (id) size += strlen(id) + strlen(prefix) + sizeof(" id=.."); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:936:32: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). if (id) size += strlen(id) + strlen(prefix) + sizeof(" id=.."); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:961:9: [1] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source is a constant character. ptr += sprintf(ptr, ">"); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:970:9: [1] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source is a constant character. ptr += sprintf(ptr, ">"); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:997:21: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). size_t prefixlen = strlen(prefix); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1003:19: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). if (srs) size += strlen(srs) + sizeof(" srsName=.."); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1004:19: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). if (id) size += strlen(id) + strlen(prefix) + sizeof(" id=.."); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1004:32: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). if (id) size += strlen(id) + strlen(prefix) + sizeof(" id=.."); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1039:9: [1] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source is a constant character. ptr += sprintf(ptr, ">"); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1081:21: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). size_t prefixlen = strlen(prefix); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1085:19: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). if (srs) size += strlen(srs) + sizeof(" srsName=.."); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1086:19: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). if (id) size += strlen(id) + strlen(prefix) + sizeof(" id=.."); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1086:32: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). if (id) size += strlen(id) + strlen(prefix) + sizeof(" id=.."); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1139:9: [1] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source is a constant character. ptr += sprintf( ptr, ">" ); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1157:11: [1] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source is a constant character. ptr += sprintf(ptr, ">"); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1168:11: [1] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source is a constant character. ptr += sprintf(ptr, ">"); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1193:21: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). size_t prefixlen = strlen(prefix); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1196:19: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). if (srs) size += strlen(srs) + sizeof(" srsName=.."); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1197:19: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). if (id) size += strlen(id) + strlen(prefix) + sizeof(" id=.."); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1197:32: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). if (id) size += strlen(id) + strlen(prefix) + sizeof(" id=.."); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1259:9: [1] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source is a constant character. ptr += sprintf(ptr, ">"); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1281:11: [1] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source is a constant character. ptr += sprintf( ptr, ">" ); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1333:21: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). size_t prefixlen = strlen(prefix); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1337:19: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). if (srs) size += strlen(srs) + sizeof(" srsName=.."); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1338:19: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). if (id) size += strlen(prefix) + strlen(id) + sizeof(" id=.."); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1338:36: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). if (id) size += strlen(prefix) + strlen(id) + sizeof(" id=.."); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1356:9: [1] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source is a constant character. ptr += sprintf(ptr, ">"); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1394:21: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). size_t prefixlen = strlen(prefix); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1400:19: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). if (srs) size += strlen(srs) + sizeof(" srsName=.."); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1401:19: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). if (id) size += strlen(id) + strlen(prefix) + sizeof(" id=.."); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1401:32: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). if (id) size += strlen(id) + strlen(prefix) + sizeof(" id=.."); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1454:9: [1] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source is a constant character. ptr += sprintf(ptr, ">"); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1506:21: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). size_t prefixlen = strlen(prefix); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1509:19: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). if (srs) size += strlen(srs) + sizeof(" srsName=.."); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1510:19: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). if (id) size += strlen(id) + strlen(prefix) + sizeof(" id=.."); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1510:32: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). if (id) size += strlen(id) + strlen(prefix) + sizeof(" id=.."); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1571:21: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). size_t prefixlen = strlen(prefix); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1574:19: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). if (srs) size += strlen(srs) + sizeof(" srsName=.."); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1575:19: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). if (id) size += strlen(id) + strlen(prefix) + sizeof(" id=.."); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1575:32: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). if (id) size += strlen(id) + strlen(prefix) + sizeof(" id=.."); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1635:21: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). size_t prefixlen = strlen(prefix); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1640:19: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). if (srs) size += strlen(srs) + sizeof(" srsName=.."); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1641:19: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). if (id) size += strlen(id) + strlen(prefix) + sizeof(" id=.."); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1641:32: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). if (id) size += strlen(id) + strlen(prefix) + sizeof(" id=.."); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1689:9: [1] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source is a constant character. ptr += sprintf(ptr, ">"); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1743:21: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). size_t prefixlen = strlen(prefix); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1745:19: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). if (srs) size += strlen(srs) + sizeof(" srsName=.."); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1746:19: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). if (id) size += strlen(id) + strlen(prefix) + sizeof(" id=.."); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1746:32: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). if (id) size += strlen(id) + strlen(prefix) + sizeof(" id=.."); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1785:9: [1] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source is a constant character. ptr += sprintf( ptr, ">"); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1820:21: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). size_t prefixlen = strlen(prefix); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1822:19: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). if (srs) size += strlen(srs) + sizeof(" srsName=.."); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1823:19: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). if (id) size += strlen(id) + strlen(prefix) + sizeof(" id=.."); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1823:32: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). if (id) size += strlen(id) + strlen(prefix) + sizeof(" id=.."); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1857:9: [1] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source is a constant character. ptr += sprintf( ptr, ">" ); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1910:20: [1] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source is a constant character. if ( i ) ptr += sprintf(ptr, " "); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_gml.c:1930:20: [1] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source is a constant character. if ( i ) ptr += sprintf(ptr, " "); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_svg.c:220:17: [1] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source is a constant character. if (i) ptr += sprintf(ptr, " "); /* Space beetween each ring */ data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_svg.c:282:17: [1] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source is a constant character. if (i) ptr += sprintf(ptr, ","); /* Arbitrary comma separator */ data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_svg.c:334:17: [1] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source is a constant character. if (i) ptr += sprintf(ptr, " "); /* SVG whitespace Separator */ data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_svg.c:386:17: [1] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source is a constant character. if (i) ptr += sprintf(ptr, " "); /* SVG whitespace Separator */ data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_svg.c:445:17: [1] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source is a constant character. if (i) ptr += sprintf(ptr, ";"); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwout_svg.c:635:22: [1] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source is a constant character. else if (i) ptr += sprintf(ptr, " "); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwprint.c:111:46: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). int format_length = ((NULL == format) ? 0 : strlen(format)); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwprint.c:131:19: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). format_length = strlen(format); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwprint.c:244:5: [1] (buffer) strncat: Easily used incorrectly (e.g., incorrectly computing the correct maximum size to add) [MS-banned] (CWE-120). Consider strcat_s, strlcat, snprintf, or automatically resizing strings. strncat(pieces[current_piece], &next_char, 1); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwprint.c:294:4: [1] (buffer) strncat: Easily used incorrectly (e.g., incorrectly computing the correct maximum size to add) [MS-banned] (CWE-120). Consider strcat_s, strlcat, snprintf, or automatically resizing strings. strncat(pieces[current_piece], &(format[index]), multibyte_char_width); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwprint.c:412:26: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). result = (char*)lwalloc(strlen(lat_text) + strlen(lon_text) + 2); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwprint.c:412:45: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). result = (char*)lwalloc(strlen(lat_text) + strlen(lon_text) + 2); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwprint.c:459:8: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). len = strlen(ptr); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwutil.c:255:13: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). size_t l = strlen(a)+1; data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwutil.c:257:2: [1] (buffer) strncpy: Easily used incorrectly; doesn't always \0-terminate or check for invalid pointers [MS-banned] (CWE-120). strncpy(b, a, l); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwutil.c:289:4: [1] (buffer) strncat: Easily used incorrectly (e.g., incorrectly computing the correct maximum size to add) [MS-banned] (CWE-120). Consider strcat_s, strlcat, snprintf, or automatically resizing strings. strncat(output, outstart, endpos - startpos + 1); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwutil.c:297:5: [1] (buffer) strncat: Easily used incorrectly (e.g., incorrectly computing the correct maximum size to add) [MS-banned] (CWE-120). Consider strcat_s, strlcat, snprintf, or automatically resizing strings. Risk is low because the source is a constant string. strncat(output, "...", 4); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwutil.c:298:5: [1] (buffer) strncat: Easily used incorrectly (e.g., incorrectly computing the correct maximum size to add) [MS-banned] (CWE-120). Consider strcat_s, strlcat, snprintf, or automatically resizing strings. strncat(output, outstart, maxlength - 3); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwutil.c:303:5: [1] (buffer) strncat: Easily used incorrectly (e.g., incorrectly computing the correct maximum size to add) [MS-banned] (CWE-120). Consider strcat_s, strlcat, snprintf, or automatically resizing strings. Risk is low because the source is a constant string. strncat(output, "...", 4); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwutil.c:315:4: [1] (buffer) strncat: Easily used incorrectly (e.g., incorrectly computing the correct maximum size to add) [MS-banned] (CWE-120). Consider strcat_s, strlcat, snprintf, or automatically resizing strings. strncat(output, outstart, endpos - startpos + 1); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwutil.c:323:5: [1] (buffer) strncat: Easily used incorrectly (e.g., incorrectly computing the correct maximum size to add) [MS-banned] (CWE-120). Consider strcat_s, strlcat, snprintf, or automatically resizing strings. strncat(output, outstart, maxlength - 3); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwutil.c:324:5: [1] (buffer) strncat: Easily used incorrectly (e.g., incorrectly computing the correct maximum size to add) [MS-banned] (CWE-120). Consider strcat_s, strlcat, snprintf, or automatically resizing strings. Risk is low because the source is a constant string. strncat(output, "...", 4); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwutil.c:329:5: [1] (buffer) strncat: Easily used incorrectly (e.g., incorrectly computing the correct maximum size to add) [MS-banned] (CWE-120). Consider strcat_s, strlcat, snprintf, or automatically resizing strings. Risk is low because the source is a constant string. strncat(output, "...", 4); data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwutil.c:512:18: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). for (i = 0; i < strlen(str); i++) data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwutil.c:521:14: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). tmpendpos = strlen(str) - 1; data/r-cran-lwgeom-0.2-5/src/liblwgeom/lwutil.c:522:11: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). for (i = strlen(str) - 1; i != 0; i--) data/r-cran-lwgeom-0.2-5/src/liblwgeom/stringbuffer.h:90:13: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). int alen = strlen(a); /* Length of string to append */ ANALYSIS SUMMARY: Hits = 609 Lines analyzed = 66747 in approximately 1.62 seconds (41287 lines/second) Physical Source Lines of Code (SLOC) = 45136 Hits@level = [0] 10 [1] 146 [2] 263 [3] 0 [4] 200 [5] 0 Hits@level+ = [0+] 619 [1+] 609 [2+] 463 [3+] 200 [4+] 200 [5+] 0 Hits/KSLOC@level+ = [0+] 13.7141 [1+] 13.4926 [2+] 10.2579 [3+] 4.43105 [4+] 4.43105 [5+] 0 Dot directories skipped = 1 (--followdotdir overrides) Minimum risk level = 1 Not every hit is necessarily a security vulnerability. There may be other security vulnerabilities; review your code! See 'Secure Programming HOWTO' (https://dwheeler.com/secure-programs) for more information.