Flawfinder version 2.0.10, (C) 2001-2019 David A. Wheeler. Number of rules (primarily dangerous function names) in C/C++ ruleset: 223 Examining data/rygel-0.38.3/tests/rygel-regression.c Examining data/rygel-0.38.3/tests/rygel-environment-test.c Examining data/rygel-0.38.3/tests/rygel-user-config-test.c Examining data/rygel-0.38.3/tests/rygel-user-config.c Examining data/rygel-0.38.3/tests/object-creator/rygel-search-expression.c Examining data/rygel-0.38.3/tests/object-creator/rygel-m3u-playlist.c Examining data/rygel-0.38.3/tests/object-creator/test.c Examining data/rygel-0.38.3/tests/object-creator/rygel-dlna-profile.c Examining data/rygel-0.38.3/tests/object-creator/rygel-relational-expression.c Examining data/rygel-0.38.3/tests/object-creator/rygel-serializer.c Examining data/rygel-0.38.3/tests/object-creator/rygel-object-creator.c Examining data/rygel-0.38.3/tests/object-creator/rygel-state-machine.c Examining data/rygel-0.38.3/tests/object-creator/rygel-search-criteria-parser.c Examining data/rygel-0.38.3/tests/object-creator/rygel-logical-expression.c Examining data/rygel-0.38.3/tests/rygel-playbin-renderer-test.c Examining data/rygel-0.38.3/tests/rygel-database-test.c Examining data/rygel-0.38.3/tests/rygel-configuration.c Examining data/rygel-0.38.3/tests/searchable-container/test.c Examining data/rygel-0.38.3/tests/searchable-container/rygel-searchable-container.c Examining data/rygel-0.38.3/src/librygel-ruih/rygel-ruih-icon-elem.c Examining data/rygel-0.38.3/src/librygel-ruih/rygel-ruih-server-plugin.c Examining data/rygel-0.38.3/src/librygel-ruih/rygel-ruih-protocol-elem.c Examining data/rygel-0.38.3/src/librygel-ruih/rygel-ruih.h Examining data/rygel-0.38.3/src/librygel-ruih/rygel-ruih-wildcard-filter-entry.c Examining data/rygel-0.38.3/src/librygel-ruih/rygel-ruih-servicemanager.c Examining data/rygel-0.38.3/src/librygel-ruih/rygel-ruih-ui-elem.c Examining data/rygel-0.38.3/src/librygel-ruih/rygel-ruih-service.c Examining data/rygel-0.38.3/src/librygel-ruih/rygel-ruih-filter-entry.c Examining data/rygel-0.38.3/src/librygel-ruih/rygel-ruih-service-error.c Examining data/rygel-0.38.3/src/librygel-ruih/rygel-ruih-ui-listing.c Examining data/rygel-0.38.3/src/librygel-ruih/rygel-ruih-server.c Examining data/rygel-0.38.3/src/librygel-server/rygel-search-expression.c Examining data/rygel-0.38.3/src/librygel-server/rygel-http-time-seek-response.c Examining data/rygel-0.38.3/src/librygel-server/rygel-m3u-playlist.c Examining data/rygel-0.38.3/src/librygel-server/rygel-image-item.c Examining data/rygel-0.38.3/src/librygel-server/rygel-media-engine.c Examining data/rygel-0.38.3/src/librygel-server/rygel-object-removal-queue.c Examining data/rygel-0.38.3/src/librygel-server/rygel-http-get-handler.c Examining data/rygel-0.38.3/src/librygel-server/rygel-thumbnail.c Examining data/rygel-0.38.3/src/librygel-server/rygel-media-file-item.c Examining data/rygel-0.38.3/src/librygel-server/rygel-xbox-hacks.c Examining data/rygel-0.38.3/src/librygel-server/rygel-search.c Examining data/rygel-0.38.3/src/librygel-server/rygel-http-post.c Examining data/rygel-0.38.3/src/librygel-server/rygel-music-item.c Examining data/rygel-0.38.3/src/librygel-server/rygel-content-directory.c Examining data/rygel-0.38.3/src/librygel-server/rygel-media-query-action.c Examining data/rygel-0.38.3/src/librygel-server/rygel-dtcp-cleartext-request.c Examining data/rygel-0.38.3/src/librygel-server/rygel-data-source.c Examining data/rygel-0.38.3/src/librygel-server/rygel-last-change-obj-mod.c Examining data/rygel-0.38.3/src/librygel-server/rygel-media-receiver-registrar.c Examining data/rygel-0.38.3/src/librygel-server/rygel-lg-tv-hacks.c Examining data/rygel-0.38.3/src/librygel-server/rygel-media-item.c Examining data/rygel-0.38.3/src/librygel-server/rygel-http-response.c Examining data/rygel-0.38.3/src/librygel-server/rygel-free-desktop-interfaces.c Examining data/rygel-0.38.3/src/librygel-server/rygel-media-art-store.c Examining data/rygel-0.38.3/src/librygel-server/rygel-playlist-item.c Examining data/rygel-0.38.3/src/librygel-server/rygel-seek-hacks.c Examining data/rygel-0.38.3/src/librygel-server/rygel-dlna-available-seek-request.c Examining data/rygel-0.38.3/src/librygel-server/rygel-http-byte-seek-request.c Examining data/rygel-0.38.3/src/librygel-server/rygel-media-resource.c Examining data/rygel-0.38.3/src/librygel-server/rygel-import-resource.c Examining data/rygel-0.38.3/src/librygel-server/rygel-playspeed-request.c Examining data/rygel-0.38.3/src/librygel-server/rygel-item-destroyer.c Examining data/rygel-0.38.3/src/librygel-server/rygel-subtitle-manager.c Examining data/rygel-0.38.3/src/librygel-server/rygel-media-server.c Examining data/rygel-0.38.3/src/librygel-server/rygel-media-server-plugin.c Examining data/rygel-0.38.3/src/librygel-server/rygel-http-byte-seek-response.c Examining data/rygel-0.38.3/src/librygel-server/rygel-relational-expression.c Examining data/rygel-0.38.3/src/librygel-server/rygel-last-change-obj-add.c Examining data/rygel-0.38.3/src/librygel-server/rygel-trackable-container.c Examining data/rygel-0.38.3/src/librygel-server/rygel-xbmc4xbox-hacks.c Examining data/rygel-0.38.3/src/librygel-server/rygel-dbus-thumbnailer.c Examining data/rygel-0.38.3/src/librygel-server/rygel-simple-container.c Examining data/rygel-0.38.3/src/librygel-server/rygel-photo-item.c Examining data/rygel-0.38.3/src/librygel-server/rygel-browse.c Examining data/rygel-0.38.3/src/librygel-server/rygel-last-change-obj-del.c Examining data/rygel-0.38.3/src/librygel-server/rygel-serializer.c Examining data/rygel-0.38.3/src/librygel-server/rygel-http-server.c Examining data/rygel-0.38.3/src/librygel-server/rygel-object-creator.c Examining data/rygel-0.38.3/src/librygel-server/rygel-subtitle.c Examining data/rygel-0.38.3/src/librygel-server/rygel-http-item-uri.c Examining data/rygel-0.38.3/src/librygel-server/rygel-http-subtitle-handler.c Examining data/rygel-0.38.3/src/librygel-server/rygel-searchable-container.c Examining data/rygel-0.38.3/src/librygel-server/rygel-dlna-available-seek-response.c Examining data/rygel-0.38.3/src/librygel-server/rygel-last-change-st-done.c Examining data/rygel-0.38.3/src/librygel-server/rygel-phillips-hacks.c Examining data/rygel-0.38.3/src/librygel-server/rygel-client-hacks.c Examining data/rygel-0.38.3/src/librygel-server/rygel-data-sink.c Examining data/rygel-0.38.3/src/librygel-server/rygel-playspeed.c Examining data/rygel-0.38.3/src/librygel-server/rygel-last-change.c Examining data/rygel-0.38.3/src/librygel-server/rygel-thumbnailer.c Examining data/rygel-0.38.3/src/librygel-server/rygel-writable-container.c Examining data/rygel-0.38.3/src/librygel-server/rygel-updatable-object.c Examining data/rygel-0.38.3/src/librygel-server/rygel-media-object.c Examining data/rygel-0.38.3/src/librygel-server/rygel-http-request.c Examining data/rygel-0.38.3/src/librygel-server/rygel-http-get.c Examining data/rygel-0.38.3/src/librygel-server/rygel-video-item.c Examining data/rygel-0.38.3/src/librygel-server/rygel-last-change-entry.c Examining data/rygel-0.38.3/src/librygel-server/rygel-playspeed-response.c Examining data/rygel-0.38.3/src/librygel-server/rygel-http-seek.c Examining data/rygel-0.38.3/src/librygel-server/rygel-media-objects.c Examining data/rygel-0.38.3/src/librygel-server/rygel-media-container.c Examining data/rygel-0.38.3/src/librygel-server/rygel-http-response-element.c Examining data/rygel-0.38.3/src/librygel-server/rygel-xbmc-hacks.c Examining data/rygel-0.38.3/src/librygel-server/rygel-engine-loader.c Examining data/rygel-0.38.3/src/librygel-server/rygel-http-thumbnail-handler.c Examining data/rygel-0.38.3/src/librygel-server/rygel-panasonic-hacks.c Examining data/rygel-0.38.3/src/librygel-server/rygel-samsung-tv-hacks.c Examining data/rygel-0.38.3/src/librygel-server/rygel-item-updater.c Examining data/rygel-0.38.3/src/librygel-server/rygel-dtcp-cleartext-response.c Examining data/rygel-0.38.3/src/librygel-server/rygel-audio-item.c Examining data/rygel-0.38.3/src/librygel-server/rygel-wmp-hacks.c Examining data/rygel-0.38.3/src/librygel-server/rygel-http-time-seek-request.c Examining data/rygel-0.38.3/src/librygel-server/rygel-search-criteria-parser.c Examining data/rygel-0.38.3/src/librygel-server/rygel-reference-creator.c Examining data/rygel-0.38.3/src/librygel-server/rygel-source-connection-manager.c Examining data/rygel-0.38.3/src/librygel-server/rygel-visual-item.c Examining data/rygel-0.38.3/src/librygel-server/rygel-server.h Examining data/rygel-0.38.3/src/librygel-server/rygel-trackable-item.c Examining data/rygel-0.38.3/src/librygel-server/rygel-logical-expression.c Examining data/rygel-0.38.3/src/librygel-server/rygel-http-resource-handler.c Examining data/rygel-0.38.3/src/ui/rygel-preferences-dialog.c Examining data/rygel-0.38.3/src/ui/rygel-media-pref-section.c Examining data/rygel-0.38.3/src/ui/rygel-writable-user-config.c Examining data/rygel-0.38.3/src/ui/rygel-preferences-section.c Examining data/rygel-0.38.3/src/ui/rygel-network-pref-section.c Examining data/rygel-0.38.3/src/librygel-core/rygel-basic-management-test-traceroute.c Examining data/rygel-0.38.3/src/librygel-core/rygel-media-device.c Examining data/rygel-0.38.3/src/librygel-core/rygel-xml-utils.c Examining data/rygel-0.38.3/src/librygel-core/rygel-root-device-factory.c Examining data/rygel-0.38.3/src/librygel-core/rygel-dlna-profile.c Examining data/rygel-0.38.3/src/librygel-core/rygel-core.h Examining data/rygel-0.38.3/src/librygel-core/rygel-log-handler.c Examining data/rygel-0.38.3/src/librygel-core/rygel-user-config.c Examining data/rygel-0.38.3/src/librygel-core/rygel-plugin-information.c Examining data/rygel-0.38.3/src/librygel-core/rygel-basic-management-test-nslookup.c Examining data/rygel-0.38.3/src/librygel-core/rygel-state-machine.c Examining data/rygel-0.38.3/src/librygel-core/rygel-base-configuration.c Examining data/rygel-0.38.3/src/librygel-core/rygel-plugin-loader.c Examining data/rygel-0.38.3/src/librygel-core/rygel-description-file.c Examining data/rygel-0.38.3/src/librygel-core/rygel-basic-management-test.c Examining data/rygel-0.38.3/src/librygel-core/rygel-v1-hacks.c Examining data/rygel-0.38.3/src/librygel-core/rygel-resource-info.c Examining data/rygel-0.38.3/src/librygel-core/rygel-environment-config.c Examining data/rygel-0.38.3/src/librygel-core/rygel-meta-config.c Examining data/rygel-0.38.3/src/librygel-core/rygel-recursive-module-loader.c Examining data/rygel-0.38.3/src/librygel-core/rygel-energy-management-helper.c Examining data/rygel-0.38.3/src/librygel-core/rygel-basic-management-test-ping.c Examining data/rygel-0.38.3/src/librygel-core/rygel-connection-manager.c Examining data/rygel-0.38.3/src/librygel-core/rygel-basic-management.c Examining data/rygel-0.38.3/src/librygel-core/rygel-cmdline-config.c Examining data/rygel-0.38.3/src/librygel-core/rygel-root-device.c Examining data/rygel-0.38.3/src/librygel-core/rygel-configuration.c Examining data/rygel-0.38.3/src/librygel-core/rygel-plugin.c Examining data/rygel-0.38.3/src/librygel-core/rygel-icon-info.c Examining data/rygel-0.38.3/src/librygel-core/rygel-dbus-interface.c Examining data/rygel-0.38.3/src/librygel-core/rygel-energy-management.c Examining data/rygel-0.38.3/src/librygel-renderer/rygel-media-player.c Examining data/rygel-0.38.3/src/librygel-renderer/rygel-media-renderer-plugin.c Examining data/rygel-0.38.3/src/librygel-renderer/rygel-default-player-controller.c Examining data/rygel-0.38.3/src/librygel-renderer/rygel-sink-connection-manager.c Examining data/rygel-0.38.3/src/librygel-renderer/rygel-time-utils.c Examining data/rygel-0.38.3/src/librygel-renderer/rygel-player-controller.c Examining data/rygel-0.38.3/src/librygel-renderer/rygel-volume.c Examining data/rygel-0.38.3/src/librygel-renderer/rygel-changelog.c Examining data/rygel-0.38.3/src/librygel-renderer/rygel-av-transport.c Examining data/rygel-0.38.3/src/librygel-renderer/rygel-renderer.h Examining data/rygel-0.38.3/src/librygel-renderer/rygel-media-renderer.c Examining data/rygel-0.38.3/src/librygel-renderer/rygel-rendering-control.c Examining data/rygel-0.38.3/src/librygel-db/database.c Examining data/rygel-0.38.3/src/librygel-db/database-cursor.c Examining data/rygel-0.38.3/src/librygel-db/collate.c Examining data/rygel-0.38.3/src/librygel-db/sql-operator.c Examining data/rygel-0.38.3/src/librygel-db/sql-function.c Examining data/rygel-0.38.3/src/librygel-db/rygel-db.h Examining data/rygel-0.38.3/src/rygel/rygel-acl.c Examining data/rygel-0.38.3/src/rygel/rygel-dbus-service.c Examining data/rygel-0.38.3/src/rygel/rygel-main.c Examining data/rygel-0.38.3/src/plugins/ruih/rygel-ruih-module.c Examining data/rygel-0.38.3/src/plugins/ruih/rygel-ruih-plugin.c Examining data/rygel-0.38.3/src/plugins/external/rygel-external-plugin.c Examining data/rygel-0.38.3/src/plugins/external/rygel-free-desktop-interfaces.c Examining data/rygel-0.38.3/src/plugins/external/rygel-external-interfaces.c Examining data/rygel-0.38.3/src/plugins/external/rygel-external-album-art-factory.c Examining data/rygel-0.38.3/src/plugins/external/rygel-external-item-factory.c Examining data/rygel-0.38.3/src/plugins/external/rygel-external-dummy-container.c Examining data/rygel-0.38.3/src/plugins/external/rygel-external-variant-util.c Examining data/rygel-0.38.3/src/plugins/external/rygel-external-container.c Examining data/rygel-0.38.3/src/plugins/external/rygel-external-plugin-factory.c Examining data/rygel-0.38.3/src/plugins/external/rygel-external-icon-factory.c Examining data/rygel-0.38.3/src/plugins/external/rygel-external-thumbnail-factory.c Examining data/rygel-0.38.3/src/plugins/lms/rygel-lms-image-years.c Examining data/rygel-0.38.3/src/plugins/lms/rygel-lms-image-year.c Examining data/rygel-0.38.3/src/plugins/lms/rygel-lms-artists.c Examining data/rygel-0.38.3/src/plugins/lms/rygel-lms-all-images.c Examining data/rygel-0.38.3/src/plugins/lms/rygel-lms-root-container.c Examining data/rygel-0.38.3/src/plugins/lms/rygel-lms-music-root.c Examining data/rygel-0.38.3/src/plugins/lms/rygel-lms-plugin.c Examining data/rygel-0.38.3/src/plugins/lms/rygel-lms-dbus-interfaces.c Examining data/rygel-0.38.3/src/plugins/lms/rygel-lms-image-root.c Examining data/rygel-0.38.3/src/plugins/lms/rygel-lms-albums.c Examining data/rygel-0.38.3/src/plugins/lms/rygel-lms-artist.c Examining data/rygel-0.38.3/src/plugins/lms/rygel-lms-category-container.c Examining data/rygel-0.38.3/src/plugins/lms/rygel-lms-album.c Examining data/rygel-0.38.3/src/plugins/lms/rygel-lms-plugin-factory.c Examining data/rygel-0.38.3/src/plugins/lms/rygel-lms-all-videos.c Examining data/rygel-0.38.3/src/plugins/lms/rygel-lms-all-music.c Examining data/rygel-0.38.3/src/plugins/lms/rygel-lms-database.c Examining data/rygel-0.38.3/src/plugins/gst-launch/rygel-gst-launch-root-container.c Examining data/rygel-0.38.3/src/plugins/gst-launch/rygel-gst-launch-audio-item.c Examining data/rygel-0.38.3/src/plugins/gst-launch/rygel-gst-launch-video-item.c Examining data/rygel-0.38.3/src/plugins/gst-launch/rygel-gst-launch-plugin.c Examining data/rygel-0.38.3/src/plugins/media-export/rygel-media-export-generic-extractor.c Examining data/rygel-0.38.3/src/plugins/media-export/rygel-media-export-plugin.c Examining data/rygel-0.38.3/src/plugins/media-export/rygel-media-export-harvesting-task.c Examining data/rygel-0.38.3/src/plugins/media-export/rygel-media-export-object-factory.c Examining data/rygel-0.38.3/src/plugins/media-export/rygel-media-export-media-cache-upgrader.c Examining data/rygel-0.38.3/src/plugins/media-export/rygel-media-export-internal.h Examining data/rygel-0.38.3/src/plugins/media-export/rygel-media-export-null-container.c Examining data/rygel-0.38.3/src/plugins/media-export/rygel-media-export-dummy-container.c Examining data/rygel-0.38.3/src/plugins/media-export/rygel-media-export-dvd-container.c Examining data/rygel-0.38.3/src/plugins/media-export/rygel-media-export-leaf-query-container.c Examining data/rygel-0.38.3/src/plugins/media-export/rygel-media-export-video-item.c Examining data/rygel-0.38.3/src/plugins/media-export/rygel-media-export-recursive-file-monitor.c Examining data/rygel-0.38.3/src/plugins/media-export/rygel-media-export-sql-factory.c Examining data/rygel-0.38.3/src/plugins/media-export/rygel-media-export-dvd-parser.c Examining data/rygel-0.38.3/src/plugins/media-export/rygel-media-export-trackable-db-container.c Examining data/rygel-0.38.3/src/plugins/media-export/rygel-media-export-extract.c Examining data/rygel-0.38.3/src/plugins/media-export/rygel-media-export-query-container-factory.c Examining data/rygel-0.38.3/src/plugins/media-export/rygel-media-export-image-extractor.c Examining data/rygel-0.38.3/src/plugins/media-export/rygel-media-export-playlist-root-container.c Examining data/rygel-0.38.3/src/plugins/media-export/rygel-media-export.h Examining data/rygel-0.38.3/src/plugins/media-export/rygel-media-export-metadata-extractor.c Examining data/rygel-0.38.3/src/plugins/media-export/rygel-media-export-music-item.c Examining data/rygel-0.38.3/src/plugins/media-export/rygel-media-export-dvd-track.c Examining data/rygel-0.38.3/src/plugins/media-export/constants.c Examining data/rygel-0.38.3/src/plugins/media-export/rygel-media-export-item-factory.c Examining data/rygel-0.38.3/src/plugins/media-export/rygel-media-export-media-cache.c Examining data/rygel-0.38.3/src/plugins/media-export/rygel-media-export-writable-db-container.c Examining data/rygel-0.38.3/src/plugins/media-export/rygel-media-export-photo-item.c Examining data/rygel-0.38.3/src/plugins/media-export/rygel-media-export-harvester.c Examining data/rygel-0.38.3/src/plugins/media-export/rygel-media-export-playlist-extractor.c Examining data/rygel-0.38.3/src/plugins/media-export/rygel-media-export-playlist-item.c Examining data/rygel-0.38.3/src/plugins/media-export/rygel-media-export-extractor.c Examining data/rygel-0.38.3/src/plugins/media-export/rygel-media-export-root-container.c Examining data/rygel-0.38.3/src/plugins/media-export/rygel-media-export-updatable-object.c Examining data/rygel-0.38.3/src/plugins/media-export/rygel-media-export-node-query-container.c Examining data/rygel-0.38.3/src/plugins/media-export/rygel-media-export-playlist-container.c Examining data/rygel-0.38.3/src/plugins/media-export/rygel-media-export-db-container.c Examining data/rygel-0.38.3/src/plugins/media-export/rygel-media-export-query-container.c Examining data/rygel-0.38.3/src/plugins/playbin/rygel-playbin-plugin.c Examining data/rygel-0.38.3/src/plugins/playbin/rygel-playbin-module.c Examining data/rygel-0.38.3/src/plugins/tracker/rygel-tracker-root-container.c Examining data/rygel-0.38.3/src/plugins/tracker/rygel-tracker-years.c Examining data/rygel-0.38.3/src/plugins/tracker/rygel-tracker-category-container.c Examining data/rygel-0.38.3/src/plugins/tracker/rygel-tracker-metadata-multivalues.c Examining data/rygel-0.38.3/src/plugins/tracker/rygel-tracker-albums.c Examining data/rygel-0.38.3/src/plugins/tracker/rygel-tracker-titles.c Examining data/rygel-0.38.3/src/plugins/tracker/rygel-tracker-metadata-values.c Examining data/rygel-0.38.3/src/plugins/tracker/rygel-tracker-videos.c Examining data/rygel-0.38.3/src/plugins/tracker/rygel-tracker-item-factory.c Examining data/rygel-0.38.3/src/plugins/tracker/rygel-tracker-query-triplet.c Examining data/rygel-0.38.3/src/plugins/tracker/rygel-tracker-search-container.c Examining data/rygel-0.38.3/src/plugins/tracker/rygel-tracker-query-triplets.c Examining data/rygel-0.38.3/src/plugins/tracker/rygel-tracker-category-all-container.c Examining data/rygel-0.38.3/src/plugins/tracker/rygel-tracker-music-item-factory.c Examining data/rygel-0.38.3/src/plugins/tracker/rygel-tracker-genre.c Examining data/rygel-0.38.3/src/plugins/tracker/rygel-tracker-picture-item-factory.c Examining data/rygel-0.38.3/src/plugins/tracker/rygel-tracker-cleanup-query.c Examining data/rygel-0.38.3/src/plugins/tracker/rygel-tracker-upnp-property-map.c Examining data/rygel-0.38.3/src/plugins/tracker/rygel-tracker-plugin.c Examining data/rygel-0.38.3/src/plugins/tracker/rygel-tracker-tags.c Examining data/rygel-0.38.3/src/plugins/tracker/rygel-tracker-query.c Examining data/rygel-0.38.3/src/plugins/tracker/rygel-tracker-artists.c Examining data/rygel-0.38.3/src/plugins/tracker/rygel-tracker-plugin-factory.c Examining data/rygel-0.38.3/src/plugins/tracker/rygel-tracker-pictures.c Examining data/rygel-0.38.3/src/plugins/tracker/rygel-tracker-deletion-query.c Examining data/rygel-0.38.3/src/plugins/tracker/rygel-tracker-music.c Examining data/rygel-0.38.3/src/plugins/tracker/rygel-tracker-selection-query.c Examining data/rygel-0.38.3/src/plugins/tracker/rygel-tracker-new.c Examining data/rygel-0.38.3/src/plugins/tracker/rygel-tracker-insertion-query.c Examining data/rygel-0.38.3/src/plugins/tracker/rygel-tracker-interfaces.c Examining data/rygel-0.38.3/src/plugins/tracker/rygel-tracker-metadata-container.c Examining data/rygel-0.38.3/src/plugins/tracker/rygel-tracker-video-item-factory.c Examining data/rygel-0.38.3/src/plugins/mpris/rygel-free-desktop-interfaces.c Examining data/rygel-0.38.3/src/plugins/mpris/rygel-mpris-plugin-factory.c Examining data/rygel-0.38.3/src/plugins/mpris/rygel-mpris-interfaces.c Examining data/rygel-0.38.3/src/plugins/mpris/rygel-mpris-player.c Examining data/rygel-0.38.3/src/plugins/mpris/rygel-mpris-plugin.c Examining data/rygel-0.38.3/src/media-engines/simple/rygel-simple-data-source.c Examining data/rygel-0.38.3/src/media-engines/simple/rygel-simple-media-engine.c Examining data/rygel-0.38.3/src/media-engines/gstreamer/rygel-gst-media-engine.c Examining data/rygel-0.38.3/src/media-engines/gstreamer/rygel-gst-utils.c Examining data/rygel-0.38.3/src/media-engines/gstreamer/rygel-gst-data-source.c Examining data/rygel-0.38.3/src/media-engines/gstreamer/rygel-mp3-transcoder.c Examining data/rygel-0.38.3/src/media-engines/gstreamer/rygel-avc-transcoder.c Examining data/rygel-0.38.3/src/media-engines/gstreamer/rygel-wmv-transcoder.c Examining data/rygel-0.38.3/src/media-engines/gstreamer/rygel-mp2ts-transcoder.c Examining data/rygel-0.38.3/src/media-engines/gstreamer/rygel-gst-transcoder.c Examining data/rygel-0.38.3/src/media-engines/gstreamer/rygel-audio-transcoder.c Examining data/rygel-0.38.3/src/media-engines/gstreamer/rygel-video-transcoder.c Examining data/rygel-0.38.3/src/media-engines/gstreamer/rygel-aac-transcoder.c Examining data/rygel-0.38.3/src/media-engines/gstreamer/rygel-jpeg-transcoder.c Examining data/rygel-0.38.3/src/media-engines/gstreamer/rygel-l16-transcoder.c Examining data/rygel-0.38.3/src/media-engines/gstreamer/rygel-gst-sink.c Examining data/rygel-0.38.3/src/librygel-renderer-gst/rygel-playbin-player.c Examining data/rygel-0.38.3/src/librygel-renderer-gst/rygel-playbin-renderer.c Examining data/rygel-0.38.3/src/librygel-renderer-gst/rygel-renderer-gst.h Examining data/rygel-0.38.3/examples/fullscreen-renderer.c Examining data/rygel-0.38.3/examples/standalone-renderer-gst.c Examining data/rygel-0.38.3/examples/server-plugins/vala/example-server-plugin-vala.c Examining data/rygel-0.38.3/examples/server-plugins/vala/example-root-container-vala.c Examining data/rygel-0.38.3/examples/server-plugins/C/example-root-container.h Examining data/rygel-0.38.3/examples/server-plugins/C/example-server-plugin.h Examining data/rygel-0.38.3/examples/server-plugins/C/example-root-container.c Examining data/rygel-0.38.3/examples/server-plugins/C/example-server-plugin.c Examining data/rygel-0.38.3/examples/standalone-ruih.c Examining data/rygel-0.38.3/examples/standalone-server.c Examining data/rygel-0.38.3/examples/org.gnome.Rygel.FullscreenRenderer.gresource.c Examining data/rygel-0.38.3/examples/renderer-plugins/vala/example-player-vala.c Examining data/rygel-0.38.3/examples/renderer-plugins/vala/example-renderer-plugin-vala.c Examining data/rygel-0.38.3/examples/renderer-plugins/C/example-player.h Examining data/rygel-0.38.3/examples/renderer-plugins/C/example-player.c Examining data/rygel-0.38.3/examples/renderer-plugins/C/example-renderer-plugin.h Examining data/rygel-0.38.3/examples/renderer-plugins/C/example-renderer-plugin.c FINAL RESULTS: data/rygel-0.38.3/src/librygel-core/rygel-user-config.c:455:65: [4] (shell) system: This causes a new program to execute and is difficult to use safely (CWE-78). try using a library call that implements the same functionality if available. GFile* system); data/rygel-0.38.3/src/librygel-core/rygel-user-config.c:2664:60: [4] (shell) system: This causes a new program to execute and is difficult to use safely (CWE-78). try using a library call that implements the same functionality if available. GFile* system) data/rygel-0.38.3/src/librygel-core/rygel-user-config.c:2671:20: [4] (shell) system: This causes a new program to execute and is difficult to use safely (CWE-78). try using a library call that implements the same functionality if available. g_return_if_fail (system != NULL); data/rygel-0.38.3/src/librygel-core/rygel-user-config.c:2677:29: [4] (shell) system: This causes a new program to execute and is difficult to use safely (CWE-78). try using a library call that implements the same functionality if available. _tmp1_ = g_file_get_path (system); data/rygel-0.38.3/src/rygel/rygel-main.c:1283:3: [4] (shell) execvp: This causes a new program to execute and is difficult to use safely (CWE-78). try using a library call that implements the same functionality if available. execvp (_tmp14_, _tmp15_); data/rygel-0.38.3/tests/rygel-user-config.c:455:65: [4] (shell) system: This causes a new program to execute and is difficult to use safely (CWE-78). try using a library call that implements the same functionality if available. GFile* system); data/rygel-0.38.3/tests/rygel-user-config.c:2664:60: [4] (shell) system: This causes a new program to execute and is difficult to use safely (CWE-78). try using a library call that implements the same functionality if available. GFile* system) data/rygel-0.38.3/tests/rygel-user-config.c:2671:20: [4] (shell) system: This causes a new program to execute and is difficult to use safely (CWE-78). try using a library call that implements the same functionality if available. g_return_if_fail (system != NULL); data/rygel-0.38.3/tests/rygel-user-config.c:2677:29: [4] (shell) system: This causes a new program to execute and is difficult to use safely (CWE-78). try using a library call that implements the same functionality if available. _tmp1_ = g_file_get_path (system); data/rygel-0.38.3/src/plugins/media-export/rygel-media-export-root-container.c:1383:11: [3] (buffer) g_get_home_dir: This function is synonymous with 'getenv("HOME")';it returns untrustable input if the environment can beset by an attacker. It can have any content and length, and the same variable can be set more than once (CWE-807, CWE-20). Check environment variables carefully before using them. _tmp7_ = g_get_home_dir (); data/rygel-0.38.3/src/plugins/tracker/rygel-tracker-selection-query.c:572:12: [3] (buffer) g_get_home_dir: This function is synonymous with 'getenv("HOME")';it returns untrustable input if the environment can beset by an attacker. It can have any content and length, and the same variable can be set more than once (CWE-807, CWE-20). Check environment variables carefully before using them. _tmp11_ = g_get_home_dir (); data/rygel-0.38.3/src/ui/rygel-media-pref-section.c:350:12: [3] (buffer) g_get_home_dir: This function is synonymous with 'getenv("HOME")';it returns untrustable input if the environment can beset by an attacker. It can have any content and length, and the same variable can be set more than once (CWE-807, CWE-20). Check environment variables carefully before using them. _tmp32_ = g_get_home_dir (); data/rygel-0.38.3/src/librygel-core/rygel-basic-management-test-ping.c:737:23: [2] (integer) atoi: Unless checked, the resulting number can exceed the expected range (CWE-190). If source untrusted, check both minimum and maximum, even if the input had no minus sign (large numbers can roll over into negative number; consider saving to an unsigned value if that is intended). _tmp12_ = (guint) atoi (_tmp11_); data/rygel-0.38.3/src/librygel-core/rygel-basic-management-test-ping.c:747:23: [2] (integer) atoi: Unless checked, the resulting number can exceed the expected range (CWE-190). If source untrusted, check both minimum and maximum, even if the input had no minus sign (large numbers can roll over into negative number; consider saving to an unsigned value if that is intended). _tmp19_ = (guint) atoi (_tmp18_); data/rygel-0.38.3/src/librygel-core/rygel-cmdline-config.c:1325:14: [2] (integer) atoi: Unless checked, the resulting number can exceed the expected range (CWE-190). If source untrusted, check both minimum and maximum, even if the input had no minus sign (large numbers can roll over into negative number; consider saving to an unsigned value if that is intended). value = atoi (_tmp20_); data/rygel-0.38.3/src/librygel-core/rygel-cmdline-config.c:1484:94: [2] (integer) atoi: Unless checked, the resulting number can exceed the expected range (CWE-190). If source untrusted, check both minimum and maximum, even if the input had no minus sign (large numbers can roll over into negative number; consider saving to an unsigned value if that is intended). gee_abstract_collection_add ((GeeAbstractCollection*) _tmp25_, (gpointer) ((gintptr) atoi (_tmp26_))); data/rygel-0.38.3/src/librygel-core/rygel-connection-manager.c:339:13: [2] (integer) atoi: Unless checked, the resulting number can exceed the expected range (CWE-190). If source untrusted, check both minimum and maximum, even if the input had no minus sign (large numbers can roll over into negative number; consider saving to an unsigned value if that is intended). _tmp4_ = atoi (_tmp6_) == 0; data/rygel-0.38.3/src/librygel-core/rygel-environment-config.c:899:89: [2] (integer) atoi: Unless checked, the resulting number can exceed the expected range (CWE-190). If source untrusted, check both minimum and maximum, even if the input had no minus sign (large numbers can roll over into negative number; consider saving to an unsigned value if that is intended). gee_abstract_collection_add ((GeeAbstractCollection*) _tmp5_, (gpointer) ((gintptr) atoi (_tmp6_))); data/rygel-0.38.3/src/librygel-core/rygel-environment-config.c:1031:18: [2] (integer) atoi: Unless checked, the resulting number can exceed the expected range (CWE-190). If source untrusted, check both minimum and maximum, even if the input had no minus sign (large numbers can roll over into negative number; consider saving to an unsigned value if that is intended). result = CLAMP (atoi (_tmp5_), min, max); data/rygel-0.38.3/src/librygel-core/rygel-log-handler.c:326:30: [2] (integer) atoi: Unless checked, the resulting number can exceed the expected range (CWE-190). If source untrusted, check both minimum and maximum, even if the input had no minus sign (large numbers can roll over into negative number; consider saving to an unsigned value if that is intended). level = (RygelLogLevel) atoi (_tmp19_); data/rygel-0.38.3/src/librygel-core/rygel-log-handler.c:347:30: [2] (integer) atoi: Unless checked, the resulting number can exceed the expected range (CWE-190). If source untrusted, check both minimum and maximum, even if the input had no minus sign (large numbers can roll over into negative number; consider saving to an unsigned value if that is intended). level = (RygelLogLevel) atoi (_tmp25_); data/rygel-0.38.3/src/librygel-renderer/rygel-av-transport.c:2118:13: [2] (integer) atoi: Unless checked, the resulting number can exceed the expected range (CWE-190). If source untrusted, check both minimum and maximum, even if the input had no minus sign (large numbers can roll over into negative number; consider saving to an unsigned value if that is intended). track = atoi (_tmp21_); data/rygel-0.38.3/src/librygel-ruih/rygel-ruih-filter-entry.c:299:14: [2] (integer) atoi: Unless checked, the resulting number can exceed the expected range (CWE-190). If source untrusted, check both minimum and maximum, even if the input had no minus sign (large numbers can roll over into negative number; consider saving to an unsigned value if that is intended). result = atoi (_tmp8_) == atoi (value); data/rygel-0.38.3/src/librygel-ruih/rygel-ruih-filter-entry.c:299:31: [2] (integer) atoi: Unless checked, the resulting number can exceed the expected range (CWE-190). If source untrusted, check both minimum and maximum, even if the input had no minus sign (large numbers can roll over into negative number; consider saving to an unsigned value if that is intended). result = atoi (_tmp8_) == atoi (value); data/rygel-0.38.3/src/librygel-server/rygel-http-item-uri.c:755:2: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy (_result_, self, (gsize) string_length); data/rygel-0.38.3/src/librygel-server/rygel-http-item-uri.c:1124:55: [2] (integer) atoi: Unless checked, the resulting number can exceed the expected range (CWE-190). If source untrusted, check both minimum and maximum, even if the input had no minus sign (large numbers can roll over into negative number; consider saving to an unsigned value if that is intended). rygel_http_item_uri_set_thumbnail_index (self, atoi (_tmp43_)); data/rygel-0.38.3/src/librygel-server/rygel-http-item-uri.c:1138:54: [2] (integer) atoi: Unless checked, the resulting number can exceed the expected range (CWE-190). If source untrusted, check both minimum and maximum, even if the input had no minus sign (large numbers can roll over into negative number; consider saving to an unsigned value if that is intended). rygel_http_item_uri_set_subtitle_index (self, atoi (_tmp45_)); data/rygel-0.38.3/src/librygel-server/rygel-playspeed.c:269:21: [2] (integer) atoi: Unless checked, the resulting number can exceed the expected range (CWE-190). If source untrusted, check both minimum and maximum, even if the input had no minus sign (large numbers can roll over into negative number; consider saving to an unsigned value if that is intended). self->numerator = atoi (speed); data/rygel-0.38.3/src/librygel-server/rygel-playspeed.c:318:21: [2] (integer) atoi: Unless checked, the resulting number can exceed the expected range (CWE-190). If source untrusted, check both minimum and maximum, even if the input had no minus sign (large numbers can roll over into negative number; consider saving to an unsigned value if that is intended). self->numerator = atoi (_tmp7_); data/rygel-0.38.3/src/librygel-server/rygel-playspeed.c:322:31: [2] (integer) atoi: Unless checked, the resulting number can exceed the expected range (CWE-190). If source untrusted, check both minimum and maximum, even if the input had no minus sign (large numbers can roll over into negative number; consider saving to an unsigned value if that is intended). self->denominator = (guint) atoi (_tmp9_); data/rygel-0.38.3/src/librygel-server/rygel-relational-expression.c:897:13: [2] (integer) atoi: Unless checked, the resulting number can exceed the expected range (CWE-190). If source untrusted, check both minimum and maximum, even if the input had no minus sign (large numbers can roll over into negative number; consider saving to an unsigned value if that is intended). operand2 = atoi ((const gchar*) _tmp0_); data/rygel-0.38.3/src/media-engines/gstreamer/rygel-gst-utils.c:360:36: [2] (integer) atoi: Unless checked, the resulting number can exceed the expected range (CWE-190). If source untrusted, check both minimum and maximum, even if the input had no minus sign (large numbers can roll over into negative number; consider saving to an unsigned value if that is intended). _dynamic_set_title5 (_tmp14_, atoi ((const gchar*) _tmp16_)); data/rygel-0.38.3/src/media-engines/simple/rygel-simple-data-source.c:444:8: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). fd = open (_tmp5_, O_RDONLY, (mode_t) 0); data/rygel-0.38.3/src/plugins/lms/rygel-lms-category-container.c:1694:37: [2] (integer) atoi: Unless checked, the resulting number can exceed the expected range (CWE-190). If source untrusted, check both minimum and maximum, even if the input had no minus sign (large numbers can roll over into negative number; consider saving to an unsigned value if that is intended). g_value_set_int (&_data_->_tmp9_, atoi (_data_->_tmp8_)); data/rygel-0.38.3/src/plugins/media-export/rygel-media-export-dvd-container.c:513:18: [2] (integer) atoi: Unless checked, the resulting number can exceed the expected range (CWE-190). If source untrusted, check both minimum and maximum, even if the input had no minus sign (large numbers can roll over into negative number; consider saving to an unsigned value if that is intended). _data_->track = atoi (_data_->_tmp3_); data/rygel-0.38.3/src/plugins/media-export/rygel-media-export-dvd-container.c:555:85: [2] (integer) atoi: Unless checked, the resulting number can exceed the expected range (CWE-190). If source untrusted, check both minimum and maximum, even if the input had no minus sign (large numbers can roll over into negative number; consider saving to an unsigned value if that is intended). _data_->_tmp22_ = rygel_media_export_dvd_container_get_item_for_xml (_data_->self, atoi (_data_->_tmp18_), _data_->_tmp21_); data/rygel-0.38.3/src/plugins/media-export/rygel-media-export-dvd-parser.c:613:22: [2] (integer) atoi: Unless checked, the resulting number can exceed the expected range (CWE-190). If source untrusted, check both minimum and maximum, even if the input had no minus sign (large numbers can roll over into negative number; consider saving to an unsigned value if that is intended). _data_->width = atoi (_data_->_tmp57_); data/rygel-0.38.3/src/plugins/media-export/rygel-media-export-dvd-parser.c:623:24: [2] (integer) atoi: Unless checked, the resulting number can exceed the expected range (CWE-190). If source untrusted, check both minimum and maximum, even if the input had no minus sign (large numbers can roll over into negative number; consider saving to an unsigned value if that is intended). _data_->height = atoi (_data_->_tmp63_); data/rygel-0.38.3/src/plugins/media-export/rygel-media-export-dvd-track.c:394:60: [2] (integer) atoi: Unless checked, the resulting number can exceed the expected range (CWE-190). If source untrusted, check both minimum and maximum, even if the input had no minus sign (large numbers can roll over into negative number; consider saving to an unsigned value if that is intended). rygel_visual_item_set_width ((RygelVisualItem*) self, atoi (_tmp27_)); data/rygel-0.38.3/src/plugins/media-export/rygel-media-export-dvd-track.c:407:62: [2] (integer) atoi: Unless checked, the resulting number can exceed the expected range (CWE-190). If source untrusted, check both minimum and maximum, even if the input had no minus sign (large numbers can roll over into negative number; consider saving to an unsigned value if that is intended). rygel_visual_item_set_height ((RygelVisualItem*) self, atoi (_tmp32_)); data/rygel-0.38.3/src/plugins/media-export/rygel-media-export-media-cache-upgrader.c:200:35: [2] (integer) atoi: Unless checked, the resulting number can exceed the expected range (CWE-190). If source untrusted, check both minimum and maximum, even if the input had no minus sign (large numbers can roll over into negative number; consider saving to an unsigned value if that is intended). result = _vala_current_version < atoi (RYGEL_MEDIA_EXPORT_SQL_FACTORY_SCHEMA_VERSION); data/rygel-0.38.3/src/plugins/media-export/rygel-media-export-media-cache-upgrader.c:333:20: [2] (integer) atoi: Unless checked, the resulting number can exceed the expected range (CWE-190). If source untrusted, check both minimum and maximum, even if the input had no minus sign (large numbers can roll over into negative number; consider saving to an unsigned value if that is intended). current_version = atoi (RYGEL_MEDIA_EXPORT_SQL_FACTORY_SCHEMA_VERSION); data/rygel-0.38.3/src/plugins/media-export/rygel-media-export-media-cache.c:3399:20: [2] (integer) atoi: Unless checked, the resulting number can exceed the expected range (CWE-190). If source untrusted, check both minimum and maximum, even if the input had no minus sign (large numbers can roll over into negative number; consider saving to an unsigned value if that is intended). current_version = atoi (RYGEL_MEDIA_EXPORT_SQL_FACTORY_SCHEMA_VERSION); data/rygel-0.38.3/src/plugins/tracker/rygel-tracker-interfaces.c:385:2: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy (dup, self, sizeof (Event)); data/rygel-0.38.3/src/plugins/tracker/rygel-tracker-search-container.c:1432:80: [2] (integer) atoi: Unless checked, the resulting number can exceed the expected range (CWE-190). If source untrusted, check both minimum and maximum, even if the input had no minus sign (large numbers can roll over into negative number; consider saving to an unsigned value if that is intended). rygel_media_container_set_child_count ((RygelMediaContainer*) _data_->self, atoi (_data_->_tmp13_)); data/rygel-0.38.3/src/plugins/tracker/rygel-tracker-years.c:361:34: [2] (integer) atoi: Unless checked, the resulting number can exceed the expected range (CWE-190). If source untrusted, check both minimum and maximum, even if the input had no minus sign (large numbers can roll over into negative number; consider saving to an unsigned value if that is intended). _tmp2_ = g_strdup_printf ("%i", atoi (_tmp1_) + 1); data/rygel-0.38.3/tests/object-creator/rygel-relational-expression.c:787:13: [2] (integer) atoi: Unless checked, the resulting number can exceed the expected range (CWE-190). If source untrusted, check both minimum and maximum, even if the input had no minus sign (large numbers can roll over into negative number; consider saving to an unsigned value if that is intended). operand2 = atoi ((const gchar*) _tmp0_); data/rygel-0.38.3/tests/rygel-user-config-test.c:1978:2: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy (dup, self, sizeof (gboolean)); data/rygel-0.38.3/tests/rygel-user-config-test.c:1993:2: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy (dup, self, sizeof (gint)); data/rygel-0.38.3/examples/org.gnome.Rygel.FullscreenRenderer.gresource.c:1533:31: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). __pragma(section(".CRT$XCU",read)) \ data/rygel-0.38.3/examples/org.gnome.Rygel.FullscreenRenderer.gresource.c:1541:31: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). __pragma(section(".CRT$XCU",read)) \ data/rygel-0.38.3/examples/org.gnome.Rygel.FullscreenRenderer.gresource.c:1553:22: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). section(".CRT$XCU",read) data/rygel-0.38.3/examples/org.gnome.Rygel.FullscreenRenderer.gresource.c:1560:22: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). section(".CRT$XCU",read) data/rygel-0.38.3/src/librygel-core/rygel-basic-management-test-nslookup.c:581:13: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). _tmp15_ = strlen (_tmp14_); data/rygel-0.38.3/src/librygel-core/rygel-basic-management-test-nslookup.c:869:12: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). _tmp1_ = strlen (self); data/rygel-0.38.3/src/librygel-core/rygel-basic-management-test-nslookup.c:958:16: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). _tmp10_ = strlen ("Name:"); data/rygel-0.38.3/src/librygel-core/rygel-basic-management-test-nslookup.c:995:16: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). _tmp20_ = strlen ("Address:"); data/rygel-0.38.3/src/librygel-core/rygel-basic-management-test-nslookup.c:1031:17: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). _tmp35_ = strlen ("Address:"); data/rygel-0.38.3/src/librygel-core/rygel-basic-management-test-ping.c:605:12: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). _tmp1_ = strlen (self); data/rygel-0.38.3/src/librygel-core/rygel-basic-management-test-ping.c:655:13: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). _tmp0_ = strlen ("ping:"); data/rygel-0.38.3/src/librygel-core/rygel-basic-management-test-traceroute.c:668:11: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). _tmp0_ = strlen (self); data/rygel-0.38.3/src/librygel-core/rygel-basic-management-test-traceroute.c:924:14: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). _tmp36_ = strlen (_tmp35_); data/rygel-0.38.3/src/librygel-core/rygel-basic-management.c:600:14: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). _tmp13_ = strlen (_tmp12_); data/rygel-0.38.3/src/librygel-core/rygel-description-file.c:809:16: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). _tmp13_ = strlen ((const gchar*) _tmp12_); data/rygel-0.38.3/src/librygel-core/rygel-description-file.c:825:13: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). _tmp16_ = strlen ((const gchar*) separator); data/rygel-0.38.3/src/librygel-core/rygel-description-file.c:1114:11: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). _tmp0_ = strlen (self); data/rygel-0.38.3/src/librygel-core/rygel-description-file.c:1246:16: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). _tmp22_ = strlen (_tmp21_); data/rygel-0.38.3/src/librygel-core/rygel-energy-management-helper.c:60:5: [1] (buffer) strncpy: Easily used incorrectly; doesn't always \0-terminate or check for invalid pointers [MS-banned] (CWE-120). strncpy (ifr.ifr_name, iface, IFNAMSIZ - 1); data/rygel-0.38.3/src/librygel-core/rygel-root-device-factory.c:464:16: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). _tmp13_ = strlen ((const gchar*) _tmp12_); data/rygel-0.38.3/src/librygel-core/rygel-root-device-factory.c:480:13: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). _tmp16_ = strlen ((const gchar*) separator); data/rygel-0.38.3/src/librygel-core/rygel-root-device-factory.c:1255:12: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). _tmp1_ = strlen (self); data/rygel-0.38.3/src/librygel-core/rygel-v1-hacks.c:338:16: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). _tmp13_ = strlen ((const gchar*) _tmp12_); data/rygel-0.38.3/src/librygel-core/rygel-v1-hacks.c:354:13: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). _tmp16_ = strlen ((const gchar*) separator); data/rygel-0.38.3/src/librygel-renderer/rygel-av-transport.c:1242:11: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). _tmp3_ = strlen (str); data/rygel-0.38.3/src/librygel-renderer/rygel-rendering-control.c:458:11: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). _tmp3_ = strlen (str); data/rygel-0.38.3/src/librygel-renderer/rygel-time-utils.c:139:12: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). _tmp1_ = strlen (self); data/rygel-0.38.3/src/librygel-ruih/rygel-ruih-protocol-elem.c:524:16: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). _tmp23_ = strlen (_tmp22_); data/rygel-0.38.3/src/librygel-ruih/rygel-ruih-servicemanager.c:676:12: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). _tmp2_ = strlen (device_profile); data/rygel-0.38.3/src/librygel-ruih/rygel-ruih-servicemanager.c:689:12: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). _tmp4_ = strlen (device_profile); data/rygel-0.38.3/src/librygel-ruih/rygel-ruih-servicemanager.c:1075:12: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). _tmp1_ = strlen (self); data/rygel-0.38.3/src/librygel-ruih/rygel-ruih-servicemanager.c:1110:11: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). _tmp0_ = strlen (filter); data/rygel-0.38.3/src/librygel-ruih/rygel-ruih-servicemanager.c:1150:14: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). _tmp9_ = strlen (filter); data/rygel-0.38.3/src/librygel-ruih/rygel-ruih-servicemanager.c:1155:16: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). _tmp11_ = strlen (filter); data/rygel-0.38.3/src/librygel-ruih/rygel-ruih-servicemanager.c:1235:17: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). _tmp24_ = strlen (_tmp23_); data/rygel-0.38.3/src/librygel-ruih/rygel-ruih-servicemanager.c:1276:18: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). _tmp38_ = strlen (_tmp37_); data/rygel-0.38.3/src/librygel-ruih/rygel-ruih-servicemanager.c:1305:19: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). _tmp47_ = strlen (_tmp46_); data/rygel-0.38.3/src/librygel-ruih/rygel-ruih-servicemanager.c:1334:19: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). _tmp53_ = strlen (_tmp52_); data/rygel-0.38.3/src/librygel-ruih/rygel-ruih-ui-elem.c:738:12: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). _tmp42_ = strlen (_tmp41_); data/rygel-0.38.3/src/librygel-ruih/rygel-ruih-ui-elem.c:810:13: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). _tmp66_ = strlen (_tmp65_); data/rygel-0.38.3/src/librygel-server/rygel-dtcp-cleartext-request.c:312:12: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). _tmp1_ = strlen (self); data/rygel-0.38.3/src/librygel-server/rygel-dtcp-cleartext-request.c:350:11: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). _tmp3_ = strlen (str); data/rygel-0.38.3/src/librygel-server/rygel-dtcp-cleartext-request.c:511:12: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). _tmp23_ = strlen (_tmp22_); data/rygel-0.38.3/src/librygel-server/rygel-dtcp-cleartext-request.c:576:12: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). _tmp38_ = strlen (_tmp37_); data/rygel-0.38.3/src/librygel-server/rygel-http-byte-seek-request.c:243:12: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). _tmp1_ = strlen (self); data/rygel-0.38.3/src/librygel-server/rygel-http-byte-seek-request.c:294:11: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). _tmp3_ = strlen (str); data/rygel-0.38.3/src/librygel-server/rygel-http-byte-seek-request.c:517:13: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). _tmp34_ = strlen (_tmp33_); data/rygel-0.38.3/src/librygel-server/rygel-http-byte-seek-request.c:707:11: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). _tmp0_ = strlen (self); data/rygel-0.38.3/src/librygel-server/rygel-http-byte-seek-request.c:747:13: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). _tmp1_ = strlen (number_string); data/rygel-0.38.3/src/librygel-server/rygel-http-byte-seek-request.c:768:12: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). _tmp5_ = strlen (number_string); data/rygel-0.38.3/src/librygel-server/rygel-http-item-uri.c:458:12: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). _tmp1_ = strlen (self); data/rygel-0.38.3/src/librygel-server/rygel-http-item-uri.c:746:11: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). _tmp0_ = strlen (self); data/rygel-0.38.3/src/librygel-server/rygel-http-time-seek-request.c:252:12: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). _tmp1_ = strlen (self); data/rygel-0.38.3/src/librygel-server/rygel-item-updater.c:659:12: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). _tmp1_ = strlen (self); data/rygel-0.38.3/src/librygel-server/rygel-item-updater.c:687:11: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). _tmp1_ = strlen (tag_values); data/rygel-0.38.3/src/librygel-server/rygel-item-updater.c:742:12: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). _tmp9_ = strlen (_tmp8_); data/rygel-0.38.3/src/librygel-server/rygel-item-updater.c:1039:11: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). _tmp1_ = strlen (tag_values); data/rygel-0.38.3/src/librygel-server/rygel-item-updater.c:1084:17: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). _tmp7_ = strlen (_tmp6_); data/rygel-0.38.3/src/librygel-server/rygel-item-updater.c:1100:19: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). _tmp12_ = strlen (_tmp11_); data/rygel-0.38.3/src/librygel-server/rygel-last-change-entry.c:192:12: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). _tmp24_ = strlen (_tmp23_); data/rygel-0.38.3/src/librygel-server/rygel-media-container.c:985:11: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). _tmp0_ = strlen (self); data/rygel-0.38.3/src/librygel-server/rygel-media-file-item.c:781:12: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). _tmp1_ = strlen (self); data/rygel-0.38.3/src/librygel-server/rygel-media-objects.c:384:12: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). _tmp1_ = strlen (self); data/rygel-0.38.3/src/librygel-server/rygel-media-query-action.c:837:11: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). _tmp0_ = strlen (self); data/rygel-0.38.3/src/librygel-server/rygel-media-query-action.c:966:15: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). _tmp20_ = strlen (_tmp19_); data/rygel-0.38.3/src/librygel-server/rygel-music-item.c:579:12: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). _tmp7_ = strlen (_tmp6_); data/rygel-0.38.3/src/librygel-server/rygel-object-creator.c:3779:12: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). _tmp1_ = strlen (self); data/rygel-0.38.3/src/librygel-server/rygel-object-creator.c:3823:11: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). _tmp0_ = strlen (title); data/rygel-0.38.3/src/librygel-server/rygel-search-criteria-parser.c:483:19: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). _data_->_tmp4_ = strlen (_data_->_tmp3_); data/rygel-0.38.3/src/librygel-server/rygel-subtitle-manager.c:204:11: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). _tmp0_ = strlen (self); data/rygel-0.38.3/src/librygel-server/rygel-xbox-hacks.c:573:16: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). _tmp13_ = strlen ((const gchar*) _tmp12_); data/rygel-0.38.3/src/librygel-server/rygel-xbox-hacks.c:589:13: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). _tmp16_ = strlen ((const gchar*) separator); data/rygel-0.38.3/src/librygel-server/rygel-xbox-hacks.c:1122:11: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). _tmp0_ = strlen (self); data/rygel-0.38.3/src/librygel-server/rygel-xbox-hacks.c:1168:12: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). _tmp2_ = strlen (*sort_criteria); data/rygel-0.38.3/src/media-engines/simple/rygel-simple-data-source.c:523:17: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). len = (gint) read (fd, _tmp12_, (gsize) _tmp13__length1); data/rygel-0.38.3/src/plugins/lms/rygel-lms-album.c:205:12: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). _tmp7_ = strlen (_tmp6_); data/rygel-0.38.3/src/plugins/lms/rygel-lms-album.c:326:11: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). _tmp0_ = strlen (filter); data/rygel-0.38.3/src/plugins/lms/rygel-lms-album.c:365:11: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). _tmp0_ = strlen (filter); data/rygel-0.38.3/src/plugins/lms/rygel-lms-albums.c:200:11: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). _tmp0_ = strlen (filter); data/rygel-0.38.3/src/plugins/lms/rygel-lms-albums.c:224:11: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). _tmp0_ = strlen (filter); data/rygel-0.38.3/src/plugins/lms/rygel-lms-albums.c:259:11: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). _tmp1_ = strlen (where_filter); data/rygel-0.38.3/src/plugins/lms/rygel-lms-albums.c:350:11: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). _tmp2_ = strlen (where_filter); data/rygel-0.38.3/src/plugins/lms/rygel-lms-all-images.c:189:12: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). _tmp7_ = strlen (_tmp6_); data/rygel-0.38.3/src/plugins/lms/rygel-lms-all-music.c:158:11: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). _tmp0_ = strlen (filter); data/rygel-0.38.3/src/plugins/lms/rygel-lms-all-music.c:193:11: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). _tmp0_ = strlen (filter); data/rygel-0.38.3/src/plugins/lms/rygel-lms-all-music.c:267:12: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). _tmp7_ = strlen (_tmp6_); data/rygel-0.38.3/src/plugins/lms/rygel-lms-all-videos.c:229:12: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). _tmp9_ = strlen (_tmp8_); data/rygel-0.38.3/src/plugins/lms/rygel-lms-category-container.c:1557:12: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). _tmp1_ = strlen (self); data/rygel-0.38.3/src/plugins/lms/rygel-lms-category-container.c:1613:11: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). _tmp0_ = strlen (self); data/rygel-0.38.3/src/plugins/lms/rygel-lms-category-container.c:1678:19: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). _data_->_tmp2_ = strlen (_data_->_tmp1_); data/rygel-0.38.3/src/plugins/lms/rygel-lms-image-year.c:200:12: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). _tmp7_ = strlen (_tmp6_); data/rygel-0.38.3/src/plugins/media-export/rygel-media-export-dvd-container.c:847:16: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). _tmp13_ = strlen ((const gchar*) _tmp12_); data/rygel-0.38.3/src/plugins/media-export/rygel-media-export-dvd-container.c:863:13: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). _tmp16_ = strlen ((const gchar*) separator); data/rygel-0.38.3/src/plugins/media-export/rygel-media-export-extract.c:578:11: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). _tmp0_ = strlen (self); data/rygel-0.38.3/src/plugins/media-export/rygel-media-export-media-cache.c:5445:11: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). _tmp0_ = strlen (self); data/rygel-0.38.3/src/plugins/media-export/rygel-media-export-media-cache.c:5563:15: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). _tmp8_ = strlen (_tmp7_); data/rygel-0.38.3/src/plugins/media-export/rygel-media-export-metadata-extractor.c:302:11: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). _tmp0_ = strlen (self); data/rygel-0.38.3/src/plugins/media-export/rygel-media-export-query-container-factory.c:693:16: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). _tmp13_ = strlen ((const gchar*) _tmp12_); data/rygel-0.38.3/src/plugins/media-export/rygel-media-export-query-container-factory.c:709:13: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). _tmp16_ = strlen ((const gchar*) separator); data/rygel-0.38.3/src/plugins/media-export/rygel-media-export-root-container.c:2667:11: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). _tmp0_ = strlen (self); data/rygel-0.38.3/src/plugins/tracker/rygel-tracker-search-container.c:1635:12: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). _tmp1_ = strlen (self); data/rygel-0.38.3/src/plugins/tracker/rygel-tracker-selection-query.c:402:16: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). _tmp13_ = strlen ((const gchar*) _tmp12_); data/rygel-0.38.3/src/plugins/tracker/rygel-tracker-selection-query.c:418:13: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). _tmp16_ = strlen ((const gchar*) separator); data/rygel-0.38.3/src/plugins/tracker/rygel-tracker-years.c:290:12: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). _tmp1_ = strlen (self); data/rygel-0.38.3/tests/object-creator/rygel-object-creator.c:3722:12: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). _tmp1_ = strlen (self); data/rygel-0.38.3/tests/object-creator/rygel-object-creator.c:3766:11: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). _tmp0_ = strlen (title); data/rygel-0.38.3/tests/object-creator/rygel-search-criteria-parser.c:502:19: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). _data_->_tmp4_ = strlen (_data_->_tmp3_); data/rygel-0.38.3/tests/object-creator/test.c:3834:11: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). _tmp0_ = strlen (DIDL_ITEM); ANALYSIS SUMMARY: Hits = 157 Lines analyzed = 260294 in approximately 5.79 seconds (44967 lines/second) Physical Source Lines of Code (SLOC) = 234695 Hits@level = [0] 6 [1] 108 [2] 37 [3] 3 [4] 9 [5] 0 Hits@level+ = [0+] 163 [1+] 157 [2+] 49 [3+] 12 [4+] 9 [5+] 0 Hits/KSLOC@level+ = [0+] 0.694518 [1+] 0.668953 [2+] 0.208782 [3+] 0.0511302 [4+] 0.0383476 [5+] 0 Dot directories skipped = 1 (--followdotdir overrides) Minimum risk level = 1 Not every hit is necessarily a security vulnerability. There may be other security vulnerabilities; review your code! See 'Secure Programming HOWTO' (https://dwheeler.com/secure-programs) for more information.