Flawfinder version 2.0.10, (C) 2001-2019 David A. Wheeler. Number of rules (primarily dangerous function names) in C/C++ ruleset: 223 Examining data/svgpp-1.3.0+dfsg1/include/exboost/parameter.hpp Examining data/svgpp-1.3.0+dfsg1/include/exboost/parameter/aux_/arg_list.hpp Examining data/svgpp-1.3.0+dfsg1/include/exboost/parameter/aux_/cast.hpp Examining data/svgpp-1.3.0+dfsg1/include/exboost/parameter/aux_/default.hpp Examining data/svgpp-1.3.0+dfsg1/include/exboost/parameter/aux_/is_maybe.hpp Examining data/svgpp-1.3.0+dfsg1/include/exboost/parameter/aux_/maybe.hpp Examining data/svgpp-1.3.0+dfsg1/include/exboost/parameter/aux_/overloads.hpp Examining data/svgpp-1.3.0+dfsg1/include/exboost/parameter/aux_/parameter_requirements.hpp Examining data/svgpp-1.3.0+dfsg1/include/exboost/parameter/aux_/parenthesized_type.hpp Examining data/svgpp-1.3.0+dfsg1/include/exboost/parameter/aux_/preprocessor/flatten.hpp Examining data/svgpp-1.3.0+dfsg1/include/exboost/parameter/aux_/preprocessor/for_each.hpp Examining data/svgpp-1.3.0+dfsg1/include/exboost/parameter/aux_/python/invoker.hpp Examining data/svgpp-1.3.0+dfsg1/include/exboost/parameter/aux_/python/invoker_iterate.hpp Examining data/svgpp-1.3.0+dfsg1/include/exboost/parameter/aux_/result_of0.hpp Examining data/svgpp-1.3.0+dfsg1/include/exboost/parameter/aux_/set.hpp Examining data/svgpp-1.3.0+dfsg1/include/exboost/parameter/aux_/tag.hpp Examining data/svgpp-1.3.0+dfsg1/include/exboost/parameter/aux_/tagged_argument.hpp Examining data/svgpp-1.3.0+dfsg1/include/exboost/parameter/aux_/template_keyword.hpp Examining data/svgpp-1.3.0+dfsg1/include/exboost/parameter/aux_/unwrap_cv_reference.hpp Examining data/svgpp-1.3.0+dfsg1/include/exboost/parameter/aux_/void.hpp Examining data/svgpp-1.3.0+dfsg1/include/exboost/parameter/aux_/yesno.hpp Examining data/svgpp-1.3.0+dfsg1/include/exboost/parameter/binding.hpp Examining data/svgpp-1.3.0+dfsg1/include/exboost/parameter/config.hpp Examining data/svgpp-1.3.0+dfsg1/include/exboost/parameter/keyword.hpp Examining data/svgpp-1.3.0+dfsg1/include/exboost/parameter/macros.hpp Examining data/svgpp-1.3.0+dfsg1/include/exboost/parameter/match.hpp Examining data/svgpp-1.3.0+dfsg1/include/exboost/parameter/name.hpp Examining data/svgpp-1.3.0+dfsg1/include/exboost/parameter/parameters.hpp Examining data/svgpp-1.3.0+dfsg1/include/exboost/parameter/preprocessor.hpp Examining data/svgpp-1.3.0+dfsg1/include/exboost/parameter/python.hpp Examining data/svgpp-1.3.0+dfsg1/include/exboost/parameter/value_type.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/adapter/basic_shapes.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/adapter/circle.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/adapter/ellipse.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/adapter/line.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/adapter/list_of_points.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/adapter/marker_viewport.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/adapter/path.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/adapter/path_markers.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/adapter/rect.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/adapter/transform.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/adapter/viewport.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/attribute_dispatcher.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/attribute_traversal/attribute_traversal.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/attribute_traversal/common.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/attribute_traversal/prioritized.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/attribute_traversal/sequential.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/config.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/definitions.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/detail/adapt_context.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/detail/attribute_id.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/detail/attribute_id_to_tag.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/detail/attribute_name.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/detail/attribute_name_to_id.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/detail/element_id_to_tag.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/detail/element_type_id.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/detail/literal_char_types.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/detail/literal_values_dictionary.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/detail/names_dictionary.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/detail/namespace.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/detail/required_attributes_check.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/document_traversal.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/factory/angle.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/factory/color.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/factory/context.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/factory/icc_color_stub.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/factory/integer_color.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/factory/unitless_angle.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/factory/unitless_length.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/number_type.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/parser/angle.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/parser/animation.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/parser/color.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/parser/css_style_iterator.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/parser/detail/common.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/parser/detail/finite_function_iterator.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/parser/detail/parse_list_iterator.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/parser/detail/pass_iri_value.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/parser/detail/value_parser_parameters.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/parser/external_function/parse_all_impl.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/parser/external_function/parse_color.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/parser/external_function/parse_color_impl.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/parser/external_function/parse_length.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/parser/external_function/parse_length_impl.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/parser/external_function/parse_misc.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/parser/external_function/parse_misc_impl.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/parser/external_function/parse_paint.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/parser/external_function/parse_paint_impl.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/parser/external_function/parse_path_data.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/parser/external_function/parse_path_data_impl.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/parser/external_function/parse_preserveAspectRatio.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/parser/external_function/parse_preserveAspectRatio_impl.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/parser/external_function/parse_transform.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/parser/external_function/parse_transform_impl.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/parser/external_function/path_events_interface_proxy.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/parser/external_function/transform_events_interface_proxy.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/parser/grammar/angle.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/parser/grammar/clock_value.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/parser/grammar/color.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/parser/grammar/color_optional_icc_color.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/parser/grammar/coordinate_pair.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/parser/grammar/icc_color.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/parser/grammar/iri.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/parser/grammar/length.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/parser/grammar/path_data.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/parser/grammar/preserveAspectRatio.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/parser/grammar/transform.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/parser/grammar/urange.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/parser/iri.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/parser/length.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/parser/list_of_points.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/parser/literal_enumeration.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/parser/misc.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/parser/number.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/parser/paint.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/parser/path_data.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/parser/percentage_or_length.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/parser/string.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/parser/transform_list.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/parser/type_or_literal.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/parser/value_parser.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/parser/value_parser_fwd.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/policy/attribute_traversal.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/policy/basic_shapes.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/policy/basic_shapes_events.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/policy/detail/css_name_to_id.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/policy/detail/default_policies.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/policy/detail/load_path_splitter.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/policy/detail/path_events_splitter.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/policy/document_traversal_control.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/policy/error.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/policy/icc_color.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/policy/iri.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/policy/length.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/policy/marker_events.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/policy/markers.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/policy/notify.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/policy/path.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/policy/path_events.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/policy/text_events.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/policy/transform.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/policy/transform_events.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/policy/value_events.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/policy/viewport.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/policy/viewport_events.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/policy/xml/fwd.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/policy/xml/libxml2.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/policy/xml/msxml.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/policy/xml/rapidxml_ns.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/policy/xml/xerces.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/svgpp.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/template_parameters.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/traits/angle_units.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/traits/attribute_groups.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/traits/attribute_type.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/traits/child_element_types.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/traits/element_groups.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/traits/element_required_attributes.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/traits/element_with_text_content.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/traits/inherited_property.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/traits/length_dimension_by_attribute.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/traits/length_units.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/traits/literal_enumeration_values.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/traits/overflow_hidden_elements.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/utility/arc_endpoint_to_center.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/utility/arc_to_bezier.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/utility/boost_parameter_fixed.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/utility/calculate_viewbox_transform.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/utility/gil/blend.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/utility/gil/color_matrix.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/utility/gil/common.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/utility/gil/composite.hpp Examining data/svgpp-1.3.0+dfsg1/include/svgpp/utility/gil/mask.hpp Examining data/svgpp-1.3.0+dfsg1/src/demo/render/clip_buffer.cpp Examining data/svgpp-1.3.0+dfsg1/src/demo/render/clip_buffer.hpp Examining data/svgpp-1.3.0+dfsg1/src/demo/render/common.hpp Examining data/svgpp-1.3.0+dfsg1/src/demo/render/filter.cpp Examining data/svgpp-1.3.0+dfsg1/src/demo/render/filter.hpp Examining data/svgpp-1.3.0+dfsg1/src/demo/render/gradient.cpp Examining data/svgpp-1.3.0+dfsg1/src/demo/render/gradient.hpp Examining data/svgpp-1.3.0+dfsg1/src/demo/render/parser_libxml.cpp Examining data/svgpp-1.3.0+dfsg1/src/demo/render/parser_libxml.hpp Examining data/svgpp-1.3.0+dfsg1/src/demo/render/parser_msxml.cpp Examining data/svgpp-1.3.0+dfsg1/src/demo/render/parser_msxml.hpp Examining data/svgpp-1.3.0+dfsg1/src/demo/render/parser_rapidxml_ns.cpp Examining data/svgpp-1.3.0+dfsg1/src/demo/render/parser_rapidxml_ns.hpp Examining data/svgpp-1.3.0+dfsg1/src/demo/render/parser_xerces.cpp Examining data/svgpp-1.3.0+dfsg1/src/demo/render/parser_xerces.hpp Examining data/svgpp-1.3.0+dfsg1/src/demo/render/stb.cpp Examining data/svgpp-1.3.0+dfsg1/src/demo/render/stylable.hpp Examining data/svgpp-1.3.0+dfsg1/src/demo/render/svgpp_parser_impl.cpp Examining data/svgpp-1.3.0+dfsg1/src/demo/render/svgpp_render.cpp Examining data/svgpp-1.3.0+dfsg1/src/samples/sample01a.cpp Examining data/svgpp-1.3.0+dfsg1/src/samples/sample01b.cpp Examining data/svgpp-1.3.0+dfsg1/src/samples/sample01c.cpp Examining data/svgpp-1.3.0+dfsg1/src/samples/sample01d.cpp Examining data/svgpp-1.3.0+dfsg1/src/samples/sample01e.cpp Examining data/svgpp-1.3.0+dfsg1/src/samples/sample01f.cpp Examining data/svgpp-1.3.0+dfsg1/src/samples/sample01g.cpp Examining data/svgpp-1.3.0+dfsg1/src/samples/sample01h.cpp Examining data/svgpp-1.3.0+dfsg1/src/samples/sample01i.cpp Examining data/svgpp-1.3.0+dfsg1/src/samples/sample01j.cpp Examining data/svgpp-1.3.0+dfsg1/src/samples/sample01j.hpp Examining data/svgpp-1.3.0+dfsg1/src/samples/sample01j_impl.cpp Examining data/svgpp-1.3.0+dfsg1/src/samples/sample_animation.cpp Examining data/svgpp-1.3.0+dfsg1/src/samples/sample_filter.cpp Examining data/svgpp-1.3.0+dfsg1/src/samples/sample_gradient.cpp Examining data/svgpp-1.3.0+dfsg1/src/samples/sample_iri.cpp Examining data/svgpp-1.3.0+dfsg1/src/samples/sample_transform01.cpp Examining data/svgpp-1.3.0+dfsg1/src/samples/sample_transform02.cpp Examining data/svgpp-1.3.0+dfsg1/src/samples/sample_value01.cpp Examining data/svgpp-1.3.0+dfsg1/src/samples/sample_value02.cpp Examining data/svgpp-1.3.0+dfsg1/src/samples/svgpp_parser_impl.cpp Examining data/svgpp-1.3.0+dfsg1/src/test/attribute_traversal_test.cpp Examining data/svgpp-1.3.0+dfsg1/src/test/basic_shapes_test.cpp Examining data/svgpp-1.3.0+dfsg1/src/test/clock_value_grammar_test.cpp Examining data/svgpp-1.3.0+dfsg1/src/test/color_grammar_test.cpp Examining data/svgpp-1.3.0+dfsg1/src/test/css_style_iterator_test.cpp Examining data/svgpp-1.3.0+dfsg1/src/test/dictionary_test.cpp Examining data/svgpp-1.3.0+dfsg1/src/test/document_traversal_a_test.cpp Examining data/svgpp-1.3.0+dfsg1/src/test/full_parse_main.cpp Examining data/svgpp-1.3.0+dfsg1/src/test/full_parse_test.cpp Examining data/svgpp-1.3.0+dfsg1/src/test/full_parse_test2.cpp Examining data/svgpp-1.3.0+dfsg1/src/test/full_parse_test_common.hpp Examining data/svgpp-1.3.0+dfsg1/src/test/icc_color_grammar_test.cpp Examining data/svgpp-1.3.0+dfsg1/src/test/length_factory_test.cpp Examining data/svgpp-1.3.0+dfsg1/src/test/list_of_points_test.cpp Examining data/svgpp-1.3.0+dfsg1/src/test/path_adapter_test.cpp Examining data/svgpp-1.3.0+dfsg1/src/test/path_grammar_test.cpp Examining data/svgpp-1.3.0+dfsg1/src/test/path_markers_adapter_test.cpp Examining data/svgpp-1.3.0+dfsg1/src/test/polyline_markers_test.cpp Examining data/svgpp-1.3.0+dfsg1/src/test/preserveAspectRatio_test.cpp Examining data/svgpp-1.3.0+dfsg1/src/test/supported_value_parsers_test.cpp Examining data/svgpp-1.3.0+dfsg1/src/test/test_path_context.hpp Examining data/svgpp-1.3.0+dfsg1/src/test/transform_grammar_test.cpp Examining data/svgpp-1.3.0+dfsg1/src/test/transform_strict_grammar_test.cpp Examining data/svgpp-1.3.0+dfsg1/src/test/urange_grammar_test.cpp Examining data/svgpp-1.3.0+dfsg1/src/test/value_parser_length_test.cpp Examining data/svgpp-1.3.0+dfsg1/src/test/value_parser_paint_ie_test.cpp Examining data/svgpp-1.3.0+dfsg1/src/test/value_parser_paint_test.cpp Examining data/svgpp-1.3.0+dfsg1/src/test/value_parser_path_test.cpp Examining data/svgpp-1.3.0+dfsg1/src/test/value_parser_test.cpp Examining data/svgpp-1.3.0+dfsg1/src/test/value_parser_transform_test.cpp Examining data/svgpp-1.3.0+dfsg1/third_party/rapidxml_ns/rapidxml_ns.hpp Examining data/svgpp-1.3.0+dfsg1/third_party/rapidxml_ns/rapidxml_ns_print.hpp Examining data/svgpp-1.3.0+dfsg1/third_party/rapidxml_ns/rapidxml_ns_utils.hpp FINAL RESULTS: data/svgpp-1.3.0+dfsg1/third_party/rapidxml_ns/rapidxml_ns.hpp:353:35: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. static const unsigned char lookup_whitespace[256]; // Whitespace table data/svgpp-1.3.0+dfsg1/third_party/rapidxml_ns/rapidxml_ns.hpp:354:35: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. static const unsigned char lookup_node_name[256]; // Node name table data/svgpp-1.3.0+dfsg1/third_party/rapidxml_ns/rapidxml_ns.hpp:355:35: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. static const unsigned char lookup_node_ncname[256]; // Node NCName table data/svgpp-1.3.0+dfsg1/third_party/rapidxml_ns/rapidxml_ns.hpp:356:35: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. static const unsigned char lookup_text[256]; // Text table data/svgpp-1.3.0+dfsg1/third_party/rapidxml_ns/rapidxml_ns.hpp:357:35: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. static const unsigned char lookup_text_pure_no_ws[256]; // Text table data/svgpp-1.3.0+dfsg1/third_party/rapidxml_ns/rapidxml_ns.hpp:358:35: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. static const unsigned char lookup_text_pure_with_ws[256]; // Text table data/svgpp-1.3.0+dfsg1/third_party/rapidxml_ns/rapidxml_ns.hpp:359:35: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. static const unsigned char lookup_attribute_name[256]; // Attribute name table data/svgpp-1.3.0+dfsg1/third_party/rapidxml_ns/rapidxml_ns.hpp:360:35: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. static const unsigned char lookup_attribute_ncname[256]; // Attribute NCName table data/svgpp-1.3.0+dfsg1/third_party/rapidxml_ns/rapidxml_ns.hpp:361:35: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. static const unsigned char lookup_attribute_data_1[256]; // Attribute data table with single quote data/svgpp-1.3.0+dfsg1/third_party/rapidxml_ns/rapidxml_ns.hpp:362:35: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. static const unsigned char lookup_attribute_data_1_pure[256]; // Attribute data table with single quote data/svgpp-1.3.0+dfsg1/third_party/rapidxml_ns/rapidxml_ns.hpp:363:35: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. static const unsigned char lookup_attribute_data_2[256]; // Attribute data table with double quotes data/svgpp-1.3.0+dfsg1/third_party/rapidxml_ns/rapidxml_ns.hpp:364:35: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. static const unsigned char lookup_attribute_data_2_pure[256]; // Attribute data table with double quotes data/svgpp-1.3.0+dfsg1/third_party/rapidxml_ns/rapidxml_ns.hpp:365:35: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. static const unsigned char lookup_digits[256]; // Digits data/svgpp-1.3.0+dfsg1/third_party/rapidxml_ns/rapidxml_ns.hpp:366:35: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. static const unsigned char lookup_upcase[256]; // To uppercase conversion table for ASCII characters data/svgpp-1.3.0+dfsg1/third_party/rapidxml_ns/rapidxml_ns.hpp:847:9: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char m_static_memory[RAPIDXML_STATIC_POOL_SIZE]; // Static raw memory data/svgpp-1.3.0+dfsg1/include/svgpp/parser/css_style_iterator.hpp:129:8: [1] (buffer) equal: Function does not check the second iterator for over-read conditions (CWE-126). This function is often discouraged by most C++ coding standards in favor of its safer alternatives provided since C++14. Consider using a form of this function that checks the second iterator before potentially overflowing it. bool equal(const css_style_iterator & other) const data/svgpp-1.3.0+dfsg1/include/svgpp/parser/detail/finite_function_iterator.hpp:48:8: [1] (buffer) equal: Function does not check the second iterator for over-read conditions (CWE-126). This function is often discouraged by most C++ coding standards in favor of its safer alternatives provided since C++14. Consider using a form of this function that checks the second iterator before potentially overflowing it. bool equal(finite_function_iterator const & other) const data/svgpp-1.3.0+dfsg1/include/svgpp/policy/xml/libxml2.hpp:148:23: [1] (buffer) equal: Function does not check the second iterator for over-read conditions (CWE-126). This function is often discouraged by most C++ coding standards in favor of its safer alternatives provided since C++14. Consider using a form of this function that checks the second iterator before potentially overflowing it. if (boost::range::equal(detail::xml_namespace_uri<char>(), ns_uri)) data/svgpp-1.3.0+dfsg1/include/svgpp/policy/xml/libxml2.hpp:150:28: [1] (buffer) equal: Function does not check the second iterator for over-read conditions (CWE-126). This function is often discouraged by most C++ coding standards in favor of its safer alternatives provided since C++14. Consider using a form of this function that checks the second iterator before potentially overflowing it. else if (boost::range::equal(detail::xlink_namespace_uri<char>(), ns_uri)) data/svgpp-1.3.0+dfsg1/include/svgpp/policy/xml/libxml2.hpp:266:27: [1] (buffer) equal: Function does not check the second iterator for over-read conditions (CWE-126). This function is often discouraged by most C++ coding standards in favor of its safer alternatives provided since C++14. Consider using a form of this function that checks the second iterator before potentially overflowing it. if (boost::range::equal(detail::svg_namespace_uri<char>(), ns_uri)) data/svgpp-1.3.0+dfsg1/include/svgpp/policy/xml/msxml.hpp:247:23: [1] (buffer) equal: Function does not check the second iterator for over-read conditions (CWE-126). This function is often discouraged by most C++ coding standards in favor of its safer alternatives provided since C++14. Consider using a form of this function that checks the second iterator before potentially overflowing it. if (boost::range::equal(detail::xml_namespace_uri<wchar_t>(), ns_uri)) data/svgpp-1.3.0+dfsg1/include/svgpp/policy/xml/msxml.hpp:249:28: [1] (buffer) equal: Function does not check the second iterator for over-read conditions (CWE-126). This function is often discouraged by most C++ coding standards in favor of its safer alternatives provided since C++14. Consider using a form of this function that checks the second iterator before potentially overflowing it. else if (boost::range::equal(detail::xlink_namespace_uri<wchar_t>(), ns_uri)) data/svgpp-1.3.0+dfsg1/include/svgpp/policy/xml/msxml.hpp:412:28: [1] (buffer) equal: Function does not check the second iterator for over-read conditions (CWE-126). This function is often discouraged by most C++ coding standards in favor of its safer alternatives provided since C++14. Consider using a form of this function that checks the second iterator before potentially overflowing it. && boost::range::equal(detail::svg_namespace_uri<wchar_t>(), uri.get_range())) data/svgpp-1.3.0+dfsg1/include/svgpp/policy/xml/rapidxml_ns.hpp:50:23: [1] (buffer) equal: Function does not check the second iterator for over-read conditions (CWE-126). This function is often discouraged by most C++ coding standards in favor of its safer alternatives provided since C++14. Consider using a form of this function that checks the second iterator before potentially overflowing it. if (boost::range::equal(detail::xml_namespace_uri<Ch>(), ns_uri)) data/svgpp-1.3.0+dfsg1/include/svgpp/policy/xml/rapidxml_ns.hpp:52:28: [1] (buffer) equal: Function does not check the second iterator for over-read conditions (CWE-126). This function is often discouraged by most C++ coding standards in favor of its safer alternatives provided since C++14. Consider using a form of this function that checks the second iterator before potentially overflowing it. else if (boost::range::equal(detail::xlink_namespace_uri<Ch>(), ns_uri)) data/svgpp-1.3.0+dfsg1/include/svgpp/policy/xml/rapidxml_ns.hpp:167:27: [1] (buffer) equal: Function does not check the second iterator for over-read conditions (CWE-126). This function is often discouraged by most C++ coding standards in favor of its safer alternatives provided since C++14. Consider using a form of this function that checks the second iterator before potentially overflowing it. if (boost::range::equal(detail::svg_namespace_uri<Ch>(), ns_uri)) data/svgpp-1.3.0+dfsg1/include/svgpp/policy/xml/xerces.hpp:122:23: [1] (buffer) equal: Function does not check the second iterator for over-read conditions (CWE-126). This function is often discouraged by most C++ coding standards in favor of its safer alternatives provided since C++14. Consider using a form of this function that checks the second iterator before potentially overflowing it. if (boost::range::equal(detail::xml_namespace_uri<char_type>(), ns_uri)) data/svgpp-1.3.0+dfsg1/include/svgpp/policy/xml/xerces.hpp:124:28: [1] (buffer) equal: Function does not check the second iterator for over-read conditions (CWE-126). This function is often discouraged by most C++ coding standards in favor of its safer alternatives provided since C++14. Consider using a form of this function that checks the second iterator before potentially overflowing it. else if (boost::range::equal(detail::xlink_namespace_uri<char_type>(), ns_uri)) data/svgpp-1.3.0+dfsg1/include/svgpp/policy/xml/xerces.hpp:239:27: [1] (buffer) equal: Function does not check the second iterator for over-read conditions (CWE-126). This function is often discouraged by most C++ coding standards in favor of its safer alternatives provided since C++14. Consider using a form of this function that checks the second iterator before potentially overflowing it. if (boost::range::equal(detail::svg_namespace_uri<char_type>(), get_string_range(xml_node->getNamespaceURI()))) data/svgpp-1.3.0+dfsg1/src/demo/render/parser_libxml.cpp:13:27: [1] (buffer) equal: Function does not check the second iterator for over-read conditions (CWE-126). This function is often discouraged by most C++ coding standards in favor of its safer alternatives provided since C++14. Consider using a form of this function that checks the second iterator before potentially overflowing it. if (boost::range::equal( data/svgpp-1.3.0+dfsg1/src/demo/render/parser_rapidxml_ns.cpp:12:27: [1] (buffer) equal: Function does not check the second iterator for over-read conditions (CWE-126). This function is often discouraged by most C++ coding standards in favor of its safer alternatives provided since C++14. Consider using a form of this function that checks the second iterator before potentially overflowing it. if (boost::range::equal(boost::iterator_range<const char *>(id_attr->value(), id_attr->value() + id_attr->value_size()), id)) data/svgpp-1.3.0+dfsg1/src/demo/render/svgpp_render.cpp:1721:70: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). buffer.bitmap().Save(std::wstring(out_file_name, out_file_name + strlen(out_file_name)).c_str(), data/svgpp-1.3.0+dfsg1/src/test/attribute_traversal_test.cpp:104:47: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). std::vector<char> modified_xml(xml1, xml1 + strlen(xml1) + 1); data/svgpp-1.3.0+dfsg1/src/test/attribute_traversal_test.cpp:132:47: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). std::vector<char> modified_xml(xml1, xml1 + strlen(xml1) + 1); data/svgpp-1.3.0+dfsg1/src/test/attribute_traversal_test.cpp:160:47: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). std::vector<char> modified_xml(xml1, xml1 + strlen(xml1) + 1); data/svgpp-1.3.0+dfsg1/src/test/basic_shapes_test.cpp:115:41: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). modified_xml_.assign(xml1, xml1 + strlen(xml1) + 1); data/svgpp-1.3.0+dfsg1/src/test/document_traversal_a_test.cpp:155:47: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). std::vector<char> modified_xml(xml1, xml1 + strlen(xml1) + 1); data/svgpp-1.3.0+dfsg1/src/test/polyline_markers_test.cpp:46:47: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). std::vector<char> modified_xml(xml1, xml1 + strlen(xml1) + 1); data/svgpp-1.3.0+dfsg1/third_party/rapidxml_ns/rapidxml_ns_utils.hpp:45:20: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). stream.read(&m_data.front(), static_cast<streamsize>(size)); ANALYSIS SUMMARY: Hits = 39 Lines analyzed = 38519 in approximately 0.81 seconds (47358 lines/second) Physical Source Lines of Code (SLOC) = 30602 Hits@level = [0] 0 [1] 24 [2] 15 [3] 0 [4] 0 [5] 0 Hits@level+ = [0+] 39 [1+] 39 [2+] 15 [3+] 0 [4+] 0 [5+] 0 Hits/KSLOC@level+ = [0+] 1.27443 [1+] 1.27443 [2+] 0.490164 [3+] 0 [4+] 0 [5+] 0 Dot directories skipped = 1 (--followdotdir overrides) Minimum risk level = 1 Not every hit is necessarily a security vulnerability. There may be other security vulnerabilities; review your code! See 'Secure Programming HOWTO' (https://dwheeler.com/secure-programs) for more information.