Flawfinder version 2.0.10, (C) 2001-2019 David A. Wheeler.
Number of rules (primarily dangerous function names) in C/C++ ruleset: 223
Examining data/ros-image-pipeline-1.15.2/depth_image_proc/include/depth_image_proc/depth_conversions.h
Examining data/ros-image-pipeline-1.15.2/depth_image_proc/include/depth_image_proc/depth_traits.h
Examining data/ros-image-pipeline-1.15.2/depth_image_proc/src/nodelets/convert_metric.cpp
Examining data/ros-image-pipeline-1.15.2/depth_image_proc/src/nodelets/crop_foremost.cpp
Examining data/ros-image-pipeline-1.15.2/depth_image_proc/src/nodelets/disparity.cpp
Examining data/ros-image-pipeline-1.15.2/depth_image_proc/src/nodelets/point_cloud_xyz.cpp
Examining data/ros-image-pipeline-1.15.2/depth_image_proc/src/nodelets/point_cloud_xyz_radial.cpp
Examining data/ros-image-pipeline-1.15.2/depth_image_proc/src/nodelets/point_cloud_xyzi.cpp
Examining data/ros-image-pipeline-1.15.2/depth_image_proc/src/nodelets/point_cloud_xyzi_radial.cpp
Examining data/ros-image-pipeline-1.15.2/depth_image_proc/src/nodelets/point_cloud_xyzrgb.cpp
Examining data/ros-image-pipeline-1.15.2/depth_image_proc/src/nodelets/register.cpp
Examining data/ros-image-pipeline-1.15.2/image_proc/include/image_proc/advertisement_checker.h
Examining data/ros-image-pipeline-1.15.2/image_proc/include/image_proc/processor.h
Examining data/ros-image-pipeline-1.15.2/image_proc/src/libimage_proc/advertisement_checker.cpp
Examining data/ros-image-pipeline-1.15.2/image_proc/src/libimage_proc/processor.cpp
Examining data/ros-image-pipeline-1.15.2/image_proc/src/nodelets/crop_decimate.cpp
Examining data/ros-image-pipeline-1.15.2/image_proc/src/nodelets/crop_non_zero.cpp
Examining data/ros-image-pipeline-1.15.2/image_proc/src/nodelets/debayer.cpp
Examining data/ros-image-pipeline-1.15.2/image_proc/src/nodelets/edge_aware.cpp
Examining data/ros-image-pipeline-1.15.2/image_proc/src/nodelets/edge_aware.h
Examining data/ros-image-pipeline-1.15.2/image_proc/src/nodelets/rectify.cpp
Examining data/ros-image-pipeline-1.15.2/image_proc/src/nodelets/resize.cpp
Examining data/ros-image-pipeline-1.15.2/image_proc/src/nodes/image_proc.cpp
Examining data/ros-image-pipeline-1.15.2/image_proc/test/rostest.cpp
Examining data/ros-image-pipeline-1.15.2/image_proc/test/test_rectify.cpp
Examining data/ros-image-pipeline-1.15.2/image_publisher/src/node/image_publisher.cpp
Examining data/ros-image-pipeline-1.15.2/image_publisher/src/nodelet/image_publisher_nodelet.cpp
Examining data/ros-image-pipeline-1.15.2/image_rotate/src/node/image_rotate.cpp
Examining data/ros-image-pipeline-1.15.2/image_rotate/src/nodelet/image_rotate_nodelet.cpp
Examining data/ros-image-pipeline-1.15.2/image_view/src/nodelets/disparity_nodelet.cpp
Examining data/ros-image-pipeline-1.15.2/image_view/src/nodelets/image_nodelet.cpp
Examining data/ros-image-pipeline-1.15.2/image_view/src/nodelets/window_thread.cpp
Examining data/ros-image-pipeline-1.15.2/image_view/src/nodelets/window_thread.h
Examining data/ros-image-pipeline-1.15.2/image_view/src/nodes/disparity_view.cpp
Examining data/ros-image-pipeline-1.15.2/image_view/src/nodes/extract_images.cpp
Examining data/ros-image-pipeline-1.15.2/image_view/src/nodes/image_saver.cpp
Examining data/ros-image-pipeline-1.15.2/image_view/src/nodes/image_view.cpp
Examining data/ros-image-pipeline-1.15.2/image_view/src/nodes/stereo_view.cpp
Examining data/ros-image-pipeline-1.15.2/image_view/src/nodes/video_recorder.cpp
Parsing failed to find end of parameter list; semicolon terminated it in (filename,
#if CV_MAJOR_VERSION >= 3
cv::VideoWriter::fourcc(codec.c_str()[0],
#else
CV_FOURCC(codec.c_str()[0],
#endif
codec.c_str()[1],
Examining data/ros-image-pipeline-1.15.2/stereo_image_proc/include/stereo_image_proc/processor.h
Examining data/ros-image-pipeline-1.15.2/stereo_image_proc/src/libstereo_image_proc/processor.cpp
Examining data/ros-image-pipeline-1.15.2/stereo_image_proc/src/nodelets/disparity.cpp
Examining data/ros-image-pipeline-1.15.2/stereo_image_proc/src/nodelets/point_cloud2.cpp
Examining data/ros-image-pipeline-1.15.2/stereo_image_proc/src/nodes/stereo_image_proc.cpp
FINAL RESULTS:
data/ros-image-pipeline-1.15.2/image_proc/src/nodelets/crop_decimate.cpp:163:7: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(dst_pixel, src_pixel, N); // Should inline with small, fixed N
data/ros-image-pipeline-1.15.2/image_publisher/src/nodelet/image_publisher_nodelet.cpp:143:16: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
cap_.open(num);
data/ros-image-pipeline-1.15.2/image_publisher/src/nodelet/image_publisher_nodelet.cpp:145:16: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
cap_.open(filename_);
data/ros-image-pipeline-1.15.2/image_view/src/nodes/extract_images.cpp:127:20: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
raw_file.open(filename.c_str());
data/ros-image-pipeline-1.15.2/image_view/src/nodes/stereo_view.cpp:67:17: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
static unsigned char colormap[768] =
data/ros-image-pipeline-1.15.2/image_view/src/nodes/video_recorder.cpp:50:21: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
outputVideo.open(filename,
data/ros-image-pipeline-1.15.2/stereo_image_proc/src/libstereo_image_proc/processor.cpp:255:9: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy (&points.data[i * points.point_step + 0], &dense_points_(u,v)[0], sizeof (float));
data/ros-image-pipeline-1.15.2/stereo_image_proc/src/libstereo_image_proc/processor.cpp:256:9: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy (&points.data[i * points.point_step + 4], &dense_points_(u,v)[1], sizeof (float));
data/ros-image-pipeline-1.15.2/stereo_image_proc/src/libstereo_image_proc/processor.cpp:257:9: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy (&points.data[i * points.point_step + 8], &dense_points_(u,v)[2], sizeof (float));
data/ros-image-pipeline-1.15.2/stereo_image_proc/src/libstereo_image_proc/processor.cpp:260:9: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy (&points.data[i * points.point_step + 0], &bad_point, sizeof (float));
data/ros-image-pipeline-1.15.2/stereo_image_proc/src/libstereo_image_proc/processor.cpp:261:9: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy (&points.data[i * points.point_step + 4], &bad_point, sizeof (float));
data/ros-image-pipeline-1.15.2/stereo_image_proc/src/libstereo_image_proc/processor.cpp:262:9: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy (&points.data[i * points.point_step + 8], &bad_point, sizeof (float));
data/ros-image-pipeline-1.15.2/stereo_image_proc/src/libstereo_image_proc/processor.cpp:276:11: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy (&points.data[i * points.point_step + 12], &rgb, sizeof (int32_t));
data/ros-image-pipeline-1.15.2/stereo_image_proc/src/libstereo_image_proc/processor.cpp:279:11: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy (&points.data[i * points.point_step + 12], &bad_point, sizeof (float));
data/ros-image-pipeline-1.15.2/stereo_image_proc/src/libstereo_image_proc/processor.cpp:290:11: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy (&points.data[i * points.point_step + 12], &rgb_packed, sizeof (int32_t));
data/ros-image-pipeline-1.15.2/stereo_image_proc/src/libstereo_image_proc/processor.cpp:293:11: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy (&points.data[i * points.point_step + 12], &bad_point, sizeof (float));
data/ros-image-pipeline-1.15.2/stereo_image_proc/src/libstereo_image_proc/processor.cpp:304:11: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy (&points.data[i * points.point_step + 12], &rgb_packed, sizeof (int32_t));
data/ros-image-pipeline-1.15.2/stereo_image_proc/src/libstereo_image_proc/processor.cpp:307:11: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy (&points.data[i * points.point_step + 12], &bad_point, sizeof (float));
data/ros-image-pipeline-1.15.2/image_publisher/src/nodelet/image_publisher_nodelet.cpp:97:21: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
if ( ! cap_.read(image_) ) {
data/ros-image-pipeline-1.15.2/image_publisher/src/nodelet/image_publisher_nodelet.cpp:148:14: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
cap_.read(image_);
ANALYSIS SUMMARY:
Hits = 20
Lines analyzed = 9051 in approximately 0.31 seconds (29618 lines/second)
Physical Source Lines of Code (SLOC) = 5755
Hits@level = [0] 0 [1] 2 [2] 18 [3] 0 [4] 0 [5] 0
Hits@level+ = [0+] 20 [1+] 20 [2+] 18 [3+] 0 [4+] 0 [5+] 0
Hits/KSLOC@level+ = [0+] 3.47524 [1+] 3.47524 [2+] 3.12772 [3+] 0 [4+] 0 [5+] 0
Dot directories skipped = 2 (--followdotdir overrides)
Minimum risk level = 1
Not every hit is necessarily a security vulnerability.
There may be other security vulnerabilities; review your code!
See 'Secure Programming HOWTO'
(https://dwheeler.com/secure-programs) for more information.