Attachment 57856 Details for Bug 132707

flawfinder_output.txt

flawfinder_output.txt (text/plain), 2.57 KB, created by Marcus Meissner on 2005-11-21 10:41:05 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Marcus Meissner

Created: 2005-11-21 10:41:05 UTC

Size: 2.57 KB

patch

obsolete

>Flawfinder version 1.26, (C) 2001-2004 David A. Wheeler.
>Number of dangerous functions in C/C++ ruleset: 158
>Examining c_micasadk/sscs_ndk.c
>Examining c_micasadk/sscs_win_calls.c
>Warning: skipping non-regular file --context
>Warning: skipping non-regular file -m
>Warning: skipping non-regular file 5
>c_micasadk/sscs_ndk.c:187:  [2] (buffer) memcpy:
>  Does not check for buffer overflows when copying to destination. Make
>  sure destination can always hold the source data. 
>c_micasadk/sscs_ndk.c:384:  [2] (buffer) memcpy:
>  Does not check for buffer overflows when copying to destination. Make
>  sure destination can always hold the source data. 
>c_micasadk/sscs_ndk.c:419:  [2] (buffer) memcpy:
>  Does not check for buffer overflows when copying to destination. Make
>  sure destination can always hold the source data. 
>c_micasadk/sscs_ndk.c:427:  [2] (buffer) memcpy:
>  Does not check for buffer overflows when copying to destination. Make
>  sure destination can always hold the source data. 
>c_micasadk/sscs_ndk.c:1004:  [2] (buffer) memcpy:
>  Does not check for buffer overflows when copying to destination. Make
>  sure destination can always hold the source data. 
>c_micasadk/sscs_ndk.c:1170:  [2] (buffer) memcpy:
>  Does not check for buffer overflows when copying to destination. Make
>  sure destination can always hold the source data. 
>c_micasadk/sscs_ndk.c:1316:  [2] (buffer) memcpy:
>  Does not check for buffer overflows when copying to destination. Make
>  sure destination can always hold the source data. 
>c_micasadk/sscs_ndk.c:1500:  [2] (buffer) memcpy:
>  Does not check for buffer overflows when copying to destination. Make
>  sure destination can always hold the source data. 
>c_micasadk/sscs_ndk.c:2091:  [2] (buffer) memcpy:
>  Does not check for buffer overflows when copying to destination. Make
>  sure destination can always hold the source data. 
>c_micasadk/sscs_ndk.c:2661:  [1] (buffer) strlen:
>  Does not handle strings that are not \0-terminated (it could cause a
>  crash if unprotected). 
>c_micasadk/sscs_ndk.c:2673:  [1] (buffer) strlen:
>  Does not handle strings that are not \0-terminated (it could cause a
>  crash if unprotected). 
>
>Hits = 11
>Lines analyzed = 3409 in 0.81 seconds (10873 lines/second)
>Physical Source Lines of Code (SLOC) = 2298
>Hits@level = [0]   0 [1]   2 [2]   9 [3]   0 [4]   0 [5]   0
>Hits@level+ = [0+]  11 [1+]  11 [2+]   9 [3+]   0 [4+]   0 [5+]   0
>Hits/KSLOC@level+ = [0+] 4.78677 [1+] 4.78677 [2+] 3.91645 [3+]   0 [4+]   0 [5+]   0
>Minimum risk level = 1
>Not every hit is necessarily a security vulnerability.
>There may be other security vulnerabilities; review your code!

Actions: View

Attachments on bug 132707: 57770 | 57771 | 57772 | 57773 | 57854 | 57855 | 57856 | 69131 | 71550