is low because the source has a constant maximum length.
sprintf(logbuf, "Requested GOPHER test number %ld part %ld",
- ./curl-83.40.2/curl/tests/server/sws.c:786: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move
things around to create a race condition, control its ancestors, or change
its contents?.
req->open &&
- ./curl-83.40.2/curl/tests/server/sws.c:852: [2] (misc) fopen:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move
things around to create a race condition, control its ancestors, or change
its contents?.
dump = fopen(dumpfile, "ab");
- ./curl-83.40.2/curl/tests/server/sws.c:1041: [2] (buffer) char:
Statically-sized arrays can be overflowed. Perform bounds checking,
use functions that limit length, or ensure that the size is larger than
the maximum possible length.
static char weare[256];
- ./curl-83.40.2/curl/tests/server/sws.c:1069: [2] (buffer) char:
Statically-sized arrays can be overflowed. Perform bounds checking,
use functions that limit length, or ensure that the size is larger than
the maximum possible length.
char msgbuf[64];
- ./curl-83.40.2/curl/tests/server/sws.c:1079: [2] (buffer) sprintf:
Does not check for buffer overflows. Use snprintf or vsnprintf. Risk
is low because the source has a constant maximum length.
sprintf(msgbuf, "WE ROOLZ: %ld\r\n", (long)getpid());
- ./curl-83.40.2/curl/tests/server/sws.c:1098: [2] (buffer) char:
Statically-sized arrays can be overflowed. Perform bounds checking,
use functions that limit length, or ensure that the size is larger than
the maximum possible length.
char partbuf[80];
- ./curl-83.40.2/curl/tests/server/sws.c:1112: [2] (misc) fopen:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move
things around to create a race condition, control its ancestors, or change
its contents?.
stream=fopen(filename, "rb");
- ./curl-83.40.2/curl/tests/server/sws.c:1135: [2] (misc) fopen:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move
things around to create a race condition, control its ancestors, or change
its contents?.
stream=fopen(filename, "rb");
- ./curl-83.40.2/curl/tests/server/sws.c:1175: [2] (misc) fopen:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move
things around to create a race condition, control its ancestors, or change
its contents?.
dump = fopen(responsedump, "ab");
- ./curl-83.40.2/curl/tests/server/sws.c:1243: [2] (buffer) char:
Statically-sized arrays can be overflowed. Perform bounds checking,
use functions that limit length, or ensure that the size is larger than
the maximum possible length.
char command[32];
- ./curl-83.40.2/curl/tests/server/sws.c:1405: [2] (buffer) char:
Statically-sized arrays can be overflowed. Perform bounds checking,
use functions that limit length, or ensure that the size is larger than
the maximum possible length.
char readclient[2][256];
- ./curl-83.40.2/curl/tests/server/sws.c:1406: [2] (buffer) char:
Statically-sized arrays can be overflowed. Perform bounds checking,
use functions that limit length, or ensure that the size is larger than
the maximum possible length.
char readserver[2][256];
- ./curl-83.40.2/curl/tests/server/sws.c:1905: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move
things around to create a race condition, control its ancestors, or change
its contents?.
if(!req->open) {
- ./curl-83.40.2/curl/tests/server/sws.c:1930: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move
things around to create a race condition, control its ancestors, or change
its contents?.
if(req->open) {
- ./curl-83.40.2/curl/tests/server/sws.c:1957: [2] (buffer) char:
Statically-sized arrays can be overflowed. Perform bounds checking,
use functions that limit length, or ensure that the size is larger than
the maximum possible length.
char port_str[11];
- ./curl-83.40.2/curl/tests/server/sws.c:2302: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move
things around to create a race condition, control its ancestors, or change
its contents?.
if(!req.open)
- ./curl-83.40.2/curl/tests/server/tftp.h:45: [2] (buffer) char:
Statically-sized arrays can be overflowed. Perform bounds checking,
use functions that limit length, or ensure that the size is larger than
the maximum possible length.
char th_data[1]; /* data or error string */
- ./curl-83.40.2/curl/tests/server/tftpd.c:128: [2] (buffer) char:
Statically-sized arrays can be overflowed. Perform bounds checking,
use functions that limit length, or ensure that the size is larger than
the maximum possible length.
char storage[PKTSIZE];
- ./curl-83.40.2/curl/tests/server/tftpd.c:493: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination. Make
sure destination can always hold the source data.
memcpy(dp->th_data, test->rptr, copy_n);
- ./curl-83.40.2/curl/tests/server/tftpd.c:566: [2] (buffer) char:
Statically-sized arrays can be overflowed. Perform bounds checking,
use functions that limit length, or ensure that the size is larger than
the maximum possible length.
char outfile[256];
- ./curl-83.40.2/curl/tests/server/tftpd.c:568: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move
things around to create a race condition, control its ancestors, or change
its contents?.
test->ofile=open(outfile, O_CREAT|O_RDWR, 0777);
- ./curl-83.40.2/curl/tests/server/tftpd.c:629: [2] (buffer) char:
Statically-sized arrays can be overflowed. Perform bounds checking,
use functions that limit length, or ensure that the size is larger than
the maximum possible length.
char rbuf[PKTSIZE];
- ./curl-83.40.2/curl/tests/server/tftpd.c:956: [2] (misc) fopen:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move
things around to create a race condition, control its ancestors, or change
its contents?.
server = fopen(REQUEST_DUMP, "ab");
- ./curl-83.40.2/curl/tests/server/tftpd.c:1041: [2] (misc) fopen:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move
things around to create a race condition, control its ancestors, or change
its contents?.
stream=fopen(filename, "rb");
- ./curl-83.40.2/curl/tests/server/tftpd.c:1107: [2] (buffer) char:
Statically-sized arrays can be overflowed. Perform bounds checking,
use functions that limit length, or ensure that the size is larger than
the maximum possible length.
char partbuf[80]="data";
- ./curl-83.40.2/curl/tests/server/tftpd.c:1112: [2] (buffer) char:
Statically-sized arrays can be overflowed. Perform bounds checking,
use functions that limit length, or ensure that the size is larger than
the maximum possible length.
char weare[128];
- ./curl-83.40.2/curl/tests/server/tftpd.c:1113: [2] (buffer) sprintf:
Does not check for buffer overflows. Use snprintf or vsnprintf. Risk
is low because the source has a constant maximum length.
size_t count = sprintf(weare, "WE ROOLZ: %ld\r\n", (long)getpid());
- ./curl-83.40.2/curl/tests/server/tftpd.c:1155: [2] (buffer) sprintf:
Does not check for buffer overflows. Use snprintf or vsnprintf. Risk
is low because the source has a constant maximum length.
sprintf(partbuf, "data%ld", partno);
- ./curl-83.40.2/curl/tests/server/tftpd.c:1158: [2] (misc) fopen:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move
things around to create a race condition, control its ancestors, or change
its contents?.
FILE *stream=fopen(file, "rb");
- ./curl-83.40.2/curl/tests/server/tftpd.c:1394: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination. Make
sure destination can always hold the source data.
memcpy(tp->th_msg, pe->e_msg, length + 1);
- ./curl-83.40.2/curl/tests/server/util.c:68: [2] (buffer) char:
Statically-sized arrays can be overflowed. Perform bounds checking,
use functions that limit length, or ensure that the size is larger than
the maximum possible length.
static char buf[256*3];
- ./curl-83.40.2/curl/tests/server/util.c:80: [2] (buffer) sprintf:
Does not check for buffer overflows. Use snprintf or vsnprintf. Risk
is low because the source has a constant maximum length.
sprintf(optr, "%%%02x", *iptr++);
- ./curl-83.40.2/curl/tests/server/util.c:92: [2] (buffer) char:
Statically-sized arrays can be overflowed. Perform bounds checking,
use functions that limit length, or ensure that the size is larger than
the maximum possible length.
char buffer[2048 + 1];
- ./curl-83.40.2/curl/tests/server/util.c:98: [2] (buffer) char:
Statically-sized arrays can be overflowed. Perform bounds checking,
use functions that limit length, or ensure that the size is larger than
the maximum possible length.
char timebuf[20];
- ./curl-83.40.2/curl/tests/server/util.c:122: [2] (misc) fopen:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move
things around to create a race condition, control its ancestors, or change
its contents?.
logfp = fopen(serverlogfile, "ab");
- ./curl-83.40.2/curl/tests/server/util.c:140: [2] (buffer) char:
Statically-sized arrays can be overflowed. Perform bounds checking,
use functions that limit length, or ensure that the size is larger than
the maximum possible length.
char buf[512];
- ./curl-83.40.2/curl/tests/server/util.c:189: [2] (buffer) char:
Statically-sized arrays can be overflowed. Perform bounds checking,
use functions that limit length, or ensure that the size is larger than
the maximum possible length.
static char filename[256];
- ./curl-83.40.2/curl/tests/server/util.c:257: [2] (misc) fopen:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move
things around to create a race condition, control its ancestors, or change
its contents?.
pidfile = fopen(filename, "wb");
- ./curl-83.40.2/curl/tests/server/util.c:275: [2] (misc) fopen:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move
things around to create a race condition, control its ancestors, or change
its contents?.
lockfile = fopen(filename, "wb");
- ./curl-83.40.2/curl/tests/unit/unit1304.c:28: [2] (buffer) char:
Statically-sized arrays can be overflowed. Perform bounds checking,
use functions that limit length, or ensure that the size is larger than
the maximum possible length.
static char filename[64];
- ./curl-83.40.2/curl/tests/unit/unit1304.c:52: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination. Make
sure destination can always hold the source data.
memcpy(filename, filename1, strlen(filename1));
- ./curl-83.40.2/curl/tests/unit/unit1307.c:34: [2] (buffer) char:
Statically-sized arrays can be overflowed. Perform bounds checking,
use functions that limit length, or ensure that the size is larger than
the maximum possible length.
char pattern[MAX_PATTERN_L];
- ./curl-83.40.2/curl/tests/unit/unit1307.c:35: [2] (buffer) char:
Statically-sized arrays can be overflowed. Perform bounds checking,
use functions that limit length, or ensure that the size is larger than
the maximum possible length.
char string[MAX_STRING_L];
- ./curl-83.40.2/curl/tests/unit/unit1395.c:68: [2] (buffer) char:
Statically-sized arrays can be overflowed. Perform bounds checking,
use functions that limit length, or ensure that the size is larger than
the maximum possible length.
char *out = Curl_dedotdotify((char *)pairs[i].input);
- ./curl-83.40.2/curl/tests/unit/unit1398.c:32: [2] (buffer) char:
Statically-sized arrays can be overflowed. Perform bounds checking,
use functions that limit length, or ensure that the size is larger than
the maximum possible length.
char buf[3] = {'b', 'u', 'g'};
- ./curl-83.40.2/curl/tests/unit/unit1398.c:35: [2] (buffer) char:
Statically-sized arrays can be overflowed. Perform bounds checking,
use functions that limit length, or ensure that the size is larger than
the maximum possible length.
char output[24];
- ./curl-83.40.2/curl/tests/unit/unit1600.c:43: [2] (buffer) char:
Statically-sized arrays can be overflowed. Perform bounds checking,
use functions that limit length, or ensure that the size is larger than
the maximum possible length.
unsigned char output[21];
- ./curl-83.40.2/curl/tests/unit/unit1601.c:38: [2] (buffer) char:
Statically-sized arrays can be overflowed. Perform bounds checking,
use functions that limit length, or ensure that the size is larger than
the maximum possible length.
unsigned char output[16];
- ./curl-83.40.2/curl/docs/examples/anyauthput.c:103: [1] (buffer) read:
Check buffer boundaries if used in a loop.
retcode = read(fd, ptr, size * nmemb);
- ./curl-83.40.2/curl/docs/examples/asiohiper.cpp:318: [1] (buffer) strncpy:
Easily used incorrectly; doesn't always \0-terminate or check for
invalid pointers.
strncpy(pBuffer, (const char *)ptr, written);
- ./curl-83.40.2/curl/docs/examples/cookie_interface.c:91: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
snprintf(nline, sizeof(nline), "%s\t%s\t%s\t%s\t%lu\t%s\t%s",
- ./curl-83.40.2/curl/docs/examples/cookie_interface.c:105: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
snprintf(nline, sizeof(nline),
- ./curl-83.40.2/curl/docs/examples/curlx.c:406: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
serverurl = malloc(9+strlen(hostporturl));
- ./curl-83.40.2/curl/docs/examples/curlx.c:444: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
contenttype = malloc(15+strlen(mimetype));
- ./curl-83.40.2/curl/docs/examples/evhiperfifo.c:368: [1] (buffer) fscanf:
it's unclear if the %s limit in the format string is small enough.
Check that the limit is sufficiently small, or use a different input
function.
rv=fscanf(g->input, "%1023s%n", s, &n);
- ./curl-83.40.2/curl/docs/examples/fopen.c:479: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
fwrite(buffer,1,strlen(buffer),outf);
- ./curl-83.40.2/curl/docs/examples/hiperfifo.c:357: [1] (buffer) fscanf:
it's unclear if the %s limit in the format string is small enough.
Check that the limit is sufficiently small, or use a different input
function.
rv=fscanf(g->input, "%1023s%n", s, &n);
- ./curl-83.40.2/curl/docs/examples/http2-upload.c:128: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
snprintf(timebuf, sizeof(timebuf), "%02d:%02d:%02d.%06ld",
- ./curl-83.40.2/curl/docs/examples/imap-append.c:67: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
size_t len = strlen(data);
- ./curl-83.40.2/curl/docs/examples/post-callback.c:61: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
pooh.sizeleft = (long)strlen(data);
- ./curl-83.40.2/curl/docs/examples/postinmemory.c:82: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
curl_easy_setopt(curl, CURLOPT_POSTFIELDSIZE, (long)strlen(postthis));
- ./curl-83.40.2/curl/docs/examples/rtsp.c:49: [1] (buffer) getchar:
Check buffer boundaries if used in a loop.
ch = getchar();
- ./curl-83.40.2/curl/docs/examples/rtsp.c:206: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
char *uri = malloc(strlen(url) + 32);
- ./curl-83.40.2/curl/docs/examples/rtsp.c:207: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
char *sdp_filename = malloc(strlen(url) + 32);
- ./curl-83.40.2/curl/docs/examples/rtsp.c:208: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
char *control = malloc(strlen(url) + 32);
- ./curl-83.40.2/curl/docs/examples/sendrecv.c:106: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
res = curl_easy_send(curl, request, strlen(request), &iolen);
- ./curl-83.40.2/curl/docs/examples/simplepost.c:40: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
curl_easy_setopt(curl, CURLOPT_POSTFIELDSIZE, (long)strlen(postthis));
- ./curl-83.40.2/curl/docs/examples/smtp-mail.c:68: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
size_t len = strlen(data);
- ./curl-83.40.2/curl/docs/examples/smtp-multi.c:69: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
size_t len = strlen(data);
- ./curl-83.40.2/curl/docs/examples/smtp-ssl.c:69: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
size_t len = strlen(data);
- ./curl-83.40.2/curl/docs/examples/smtp-tls.c:69: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
size_t len = strlen(data);
- ./curl-83.40.2/curl/docs/examples/synctime.c:147: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
if (strlen((char *)(ptr)) > 50) /* Can prevent buffer overflow to
- ./curl-83.40.2/curl/docs/examples/synctime.c:184: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
if (strlen(proxy_port) > 0)
- ./curl-83.40.2/curl/docs/examples/synctime.c:187: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
if (strlen(proxy_user_password) > 0)
- ./curl-83.40.2/curl/docs/examples/synctime.c:274: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
snprintf(conf->timeserver, MAX_STRING, "%s", &argv[OptionIndex][9]);
- ./curl-83.40.2/curl/docs/examples/synctime.c:283: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
snprintf(conf->proxy_user, MAX_STRING, "%s", &argv[OptionIndex][13]);
- ./curl-83.40.2/curl/docs/examples/synctime.c:286: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
snprintf(conf->http_proxy, MAX_STRING, "%s", &argv[OptionIndex][8]);
- ./curl-83.40.2/curl/docs/examples/synctime.c:298: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
snprintf(conf->timeserver, MAX_STRING, "%s", DefaultTimeServer[0]);
- ./curl-83.40.2/curl/docs/examples/synctime.c:316: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
snprintf(tzoneBuf, 15, "%+03d'00'", tzonediffWord);
- ./curl-83.40.2/curl/docs/examples/synctime.c:318: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
snprintf(tzoneBuf, 15, "%+03d'30'", tzonediffWord);
- ./curl-83.40.2/curl/docs/examples/synctime.c:323: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
snprintf(timeBuf, 60, "%s, %02d %s %04d %02d:%02d:%02d.%03d, ",
- ./curl-83.40.2/curl/docs/examples/synctime.c:337: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
snprintf(timeBuf, 60, "%s, %02d %s %04d %02d:%02d:%02d.%03d, ",
- ./curl-83.40.2/curl/docs/examples/synctime.c:353: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
snprintf(timeBuf, 60, "%s, %02d %s %04d %02d:%02d:%02d.%03d, ",
- ./curl-83.40.2/curl/lib/asyn-thread.c:274: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
snprintf(service, sizeof(service), "%d", tsd->port);
- ./curl-83.40.2/curl/lib/asyn-thread.c:642: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
snprintf(sbuf, sizeof(sbuf), "%d", port);
- ./curl-83.40.2/curl/lib/base64.c:114: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
srclen = strlen(src);
- ./curl-83.40.2/curl/lib/base64.c:191: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
insize = strlen(indata);
- ./curl-83.40.2/curl/lib/base64.c:232: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
snprintf(output, 5, "%c%c==",
- ./curl-83.40.2/curl/lib/base64.c:237: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
snprintf(output, 5, "%c%c%c=",
- ./curl-83.40.2/curl/lib/base64.c:243: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
snprintf(output, 5, "%c%c%c%c",
- ./curl-83.40.2/curl/lib/base64.c:257: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
*outlen = strlen(base64data); /* return the length of the new data */
- ./curl-83.40.2/curl/lib/conncache.c:149: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
bundle = Curl_hash_pick(&connc->hash, key, strlen(key));
- ./curl-83.40.2/curl/lib/conncache.c:161: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
void *p = Curl_hash_add(&connc->hash, key, strlen(key), bundle);
- ./curl-83.40.2/curl/lib/connect.c:268: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
if(dev && (strlen(dev)<255) ) {
- ./curl-83.40.2/curl/lib/connect.c:276: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
if(strncmp(if_prefix, dev, strlen(if_prefix)) == 0) {
- ./curl-83.40.2/curl/lib/connect.c:277: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
dev += strlen(if_prefix);
- ./curl-83.40.2/curl/lib/connect.c:280: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
else if(strncmp(host_prefix, dev, strlen(host_prefix)) == 0) {
- ./curl-83.40.2/curl/lib/connect.c:281: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
dev += strlen(host_prefix);
- ./curl-83.40.2/curl/lib/connect.c:321: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
dev, (curl_socklen_t)strlen(dev)+1) != 0) {
- ./curl-83.40.2/curl/lib/connect.c:644: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
snprintf(addr, MAX_IPADR_LEN, "%s", su->sun_path);
- ./curl-83.40.2/curl/lib/cookie.c:119: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
size_t cookie_domain_len = strlen(cooke_domain);
- ./curl-83.40.2/curl/lib/cookie.c:120: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
size_t hostname_len = strlen(hostname);
- ./curl-83.40.2/curl/lib/cookie.c:155: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
cookie_path_len = strlen(cookie_path);
- ./curl-83.40.2/curl/lib/cookie.c:169: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
if(0 == strlen(uri_path) || uri_path[0] != '/') {
- ./curl-83.40.2/curl/lib/cookie.c:185: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
uri_path_len = strlen(uri_path);
- ./curl-83.40.2/curl/lib/cookie.c:228: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
len = strlen(new_path);
- ./curl-83.40.2/curl/lib/cookie.c:421: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
size_t len=strlen(what);
- ./curl-83.40.2/curl/lib/cookie.c:422: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
const char *endofn = &ptr[ strlen(name) ];
- ./curl-83.40.2/curl/lib/cookie.c:972: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
l1 = c1->path ? strlen(c1->path) : 0;
- ./curl-83.40.2/curl/lib/cookie.c:973: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
l2 = c2->path ? strlen(c2->path) : 0;
- ./curl-83.40.2/curl/lib/cookie.c:979: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
l1 = c1->domain ? strlen(c1->domain) : 0;
- ./curl-83.40.2/curl/lib/cookie.c:980: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
l2 = c2->domain ? strlen(c2->domain) : 0;
- ./curl-83.40.2/curl/lib/curl_addrinfo.c:494: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
path_len = strlen(path);
- ./curl-83.40.2/curl/lib/curl_gethostname.c:69: [1] (buffer) strncpy:
Easily used incorrectly; doesn't always \0-terminate or check for
invalid pointers.
strncpy(name, force_hostname, namelen);
- ./curl-83.40.2/curl/lib/curl_gssapi.c:100: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
snprintf(buf, sizeof(buf), "%s", prefix);
- ./curl-83.40.2/curl/lib/curl_gssapi.c:101: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
len = strlen(buf);
- ./curl-83.40.2/curl/lib/curl_gssapi.c:110: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
snprintf(buf + len, sizeof(buf) - len,
- ./curl-83.40.2/curl/lib/curl_ntlm.c:74: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
header += strlen("NTLM");
- ./curl-83.40.2/curl/lib/curl_ntlm_core.c:428: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
size_t len = CURLMIN(strlen(password), 14);
- ./curl-83.40.2/curl/lib/curl_ntlm_core.c:517: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
size_t len = strlen(password);
- ./curl-83.40.2/curl/lib/curl_ntlm_msgs.c:265: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
if(strlen(type2msg) && *type2msg != '=') {
- ./curl-83.40.2/curl/lib/curl_ntlm_msgs.c:523: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
userlen = strlen(user);
- ./curl-83.40.2/curl/lib/curl_ntlm_msgs.c:532: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
hostlen = strlen(host);
- ./curl-83.40.2/curl/lib/curl_ntlm_wb.c:261: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
size_t len_in = strlen(input), len_out = 0;
- ./curl-83.40.2/curl/lib/curl_sasl.c:84: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
result = Curl_convert_to_network(a, (char *)b, strlen((const char*)b)); \
- ./curl-83.40.2/curl/lib/curl_sasl.c:169: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
snprintf((char *)&dest[i*2], 3, "%02x", source[i]);
- ./curl-83.40.2/curl/lib/curl_sasl.c:220: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
find_pos += strlen(key);
- ./curl-83.40.2/curl/lib/curl_sasl.c:309: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
ulen = strlen(userp);
- ./curl-83.40.2/curl/lib/curl_sasl.c:310: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
plen = strlen(passwdp);
- ./curl-83.40.2/curl/lib/curl_sasl.c:353: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
size_t vlen = strlen(valuep);
- ./curl-83.40.2/curl/lib/curl_sasl.c:414: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
size_t chlg64len = strlen(chlg64);
- ./curl-83.40.2/curl/lib/curl_sasl.c:457: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
chlglen = strlen(chlg);
- ./curl-83.40.2/curl/lib/curl_sasl.c:462: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
curlx_uztoui(strlen(passwdp)));
- ./curl-83.40.2/curl/lib/curl_sasl.c:521: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
size_t chlg64len = strlen(chlg64);
- ./curl-83.40.2/curl/lib/curl_sasl.c:543: [1] (buffer) strcpy:
Does not check for buffer overflows when copying to destination.
Consider using strncpy or strlcpy (warning, strncpy is easily misused). Risk
is low because the source is a constant character.
strcpy(realm, "");
- ./curl-83.40.2/curl/lib/curl_sasl.c:637: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
snprintf(cnonce, sizeof(cnonce), "%08x%08x%08x%08x",
- ./curl-83.40.2/curl/lib/curl_sasl.c:646: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
curlx_uztoui(strlen(userp)));
- ./curl-83.40.2/curl/lib/curl_sasl.c:649: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
curlx_uztoui(strlen(realm)));
- ./curl-83.40.2/curl/lib/curl_sasl.c:652: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
curlx_uztoui(strlen(passwdp)));
- ./curl-83.40.2/curl/lib/curl_sasl.c:662: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
curlx_uztoui(strlen(nonce)));
- ./curl-83.40.2/curl/lib/curl_sasl.c:665: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
curlx_uztoui(strlen(cnonce)));
- ./curl-83.40.2/curl/lib/curl_sasl.c:670: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
snprintf(&HA1_hex[2 * i], 3, "%02x", digest[i]);
- ./curl-83.40.2/curl/lib/curl_sasl.c:686: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
curlx_uztoui(strlen(method)));
- ./curl-83.40.2/curl/lib/curl_sasl.c:689: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
curlx_uztoui(strlen(spn)));
- ./curl-83.40.2/curl/lib/curl_sasl.c:693: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
snprintf(&HA2_hex[2 * i], 3, "%02x", digest[i]);
- ./curl-83.40.2/curl/lib/curl_sasl.c:706: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
curlx_uztoui(strlen(nonce)));
- ./curl-83.40.2/curl/lib/curl_sasl.c:710: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
curlx_uztoui(strlen(nonceCount)));
- ./curl-83.40.2/curl/lib/curl_sasl.c:713: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
curlx_uztoui(strlen(cnonce)));
- ./curl-83.40.2/curl/lib/curl_sasl.c:716: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
curlx_uztoui(strlen(qop)));
- ./curl-83.40.2/curl/lib/curl_sasl.c:723: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
snprintf(&resp_hash_hex[2 * i], 3, "%02x", digest[i]);
- ./curl-83.40.2/curl/lib/curl_sasl.c:922: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
snprintf(cnoncebuf, sizeof(cnoncebuf), "%08x%08x%08x%08x",
- ./curl-83.40.2/curl/lib/curl_sasl.c:926: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
result = Curl_base64_encode(data, cnoncebuf, strlen(cnoncebuf),
- ./curl-83.40.2/curl/lib/curl_sasl.c:1102: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
*outlen = strlen(response);
- ./curl-83.40.2/curl/lib/curl_sasl.c:1186: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
result = Curl_base64_encode(data, xoauth, strlen(xoauth), outptr, outlen);
- ./curl-83.40.2/curl/lib/curl_sasl.c:1478: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
strlen(mech) + len > sasl->params->maxirlen) {
- ./curl-83.40.2/curl/lib/curl_sasl_gssapi.c:115: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
spn_token.length = strlen(spn);
- ./curl-83.40.2/curl/lib/curl_sasl_gssapi.c:132: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
if(strlen(chlg64) && *chlg64 != '=') {
- ./curl-83.40.2/curl/lib/curl_sasl_gssapi.c:226: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
if(strlen(chlg64) && *chlg64 != '=') {
- ./curl-83.40.2/curl/lib/curl_sasl_sspi.c:141: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
if(strlen(chlg64) && *chlg64 != '=') {
- ./curl-83.40.2/curl/lib/curl_sasl_sspi.c:320: [1] (buffer) _tcslen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
identity->DomainLength = curlx_uztoul(_tcslen(dup_domain.tchar_ptr));
- ./curl-83.40.2/curl/lib/curl_sasl_sspi.c:361: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
size_t chlglen = strlen(chlg);
- ./curl-83.40.2/curl/lib/curl_sasl_sspi.c:479: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
chlg_buf[1].cbBuffer = curlx_uztoul(strlen((const char *) request));
- ./curl-83.40.2/curl/lib/curl_sasl_sspi.c:700: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
if(strlen(type2msg) && *type2msg != '=') {
- ./curl-83.40.2/curl/lib/curl_sasl_sspi.c:944: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
if(strlen(chlg64) && *chlg64 != '=') {
- ./curl-83.40.2/curl/lib/curl_sasl_sspi.c:1058: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
if(strlen(chlg64) && *chlg64 != '=') {
- ./curl-83.40.2/curl/lib/curl_sasl_sspi.c:1157: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
messagelen = sizeof(outdata) + strlen(user_name) + 1;
- ./curl-83.40.2/curl/lib/curl_setup_once.h:131: [1] (buffer) read:
Check buffer boundaries if used in a loop.
#define sread(x,y,z) (ssize_t)read((RECV_TYPE_ARG1)(x), \
- ./curl-83.40.2/curl/lib/curl_sspi.c:205: [1] (buffer) _tcslen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
identity->UserLength = curlx_uztoul(_tcslen(dup_user.tchar_ptr));
- ./curl-83.40.2/curl/lib/curl_sspi.c:214: [1] (buffer) _tcsncpy:
Easily used incorrectly; doesn't always \0-terminate or check for
invalid pointers.
_tcsncpy(dup_domain.tchar_ptr, domain.tchar_ptr, domlen);
- ./curl-83.40.2/curl/lib/curl_sspi.c:232: [1] (buffer) _tcslen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
identity->PasswordLength = curlx_uztoul(_tcslen(dup_passwd.tchar_ptr));
- ./curl-83.40.2/curl/lib/dotdot.c:52: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
size_t inlen = strlen(input);
- ./curl-83.40.2/curl/lib/dotdot.c:164: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
qlen = strlen(&input[oindex]);
- ./curl-83.40.2/curl/lib/easy.c:160: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
snprintf(buf, sizeof(buf), "CHARSET=cp%u", cp);
- ./curl-83.40.2/curl/lib/escape.c:81: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
size_t alloc = (inlength?(size_t)inlength:strlen(string))+1;
- ./curl-83.40.2/curl/lib/escape.c:123: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
snprintf(&ns[strindex], 4, "%%%02X", in);
- ./curl-83.40.2/curl/lib/escape.c:148: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
size_t alloc = (length?length:strlen(string))+1;
- ./curl-83.40.2/curl/lib/file.c:471: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
snprintf(buf, sizeof(data->state.buffer),
- ./curl-83.40.2/curl/lib/file.c:491: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
snprintf(buf, BUFSIZE-1,
- ./curl-83.40.2/curl/lib/file.c:558: [1] (buffer) read:
Check buffer boundaries if used in a loop.
nread = read(fd, buf, bytestoread);
- ./curl-83.40.2/curl/lib/formdata.c:86: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
post->namelength = (long)(name?(namelength?namelength:strlen(name)):0);
- ./curl-83.40.2/curl/lib/formdata.c:196: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
if(strlen(filename) >= strlen(ctts[i].extension)) {
- ./curl-83.40.2/curl/lib/formdata.c:196: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
if(strlen(filename) >= strlen(ctts[i].extension)) {
- ./curl-83.40.2/curl/lib/formdata.c:198: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
strlen(filename) - strlen(ctts[i].extension),
- ./curl-83.40.2/curl/lib/formdata.c:198: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
strlen(filename) - strlen(ctts[i].extension),
- ./curl-83.40.2/curl/lib/formdata.c:644: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
strlen(form->name)+1);
- ./curl-83.40.2/curl/lib/formdata.c:658: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
strlen(form->value)+1);
- ./curl-83.40.2/curl/lib/formdata.c:822: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
length = strlen((char *)line);
- ./curl-83.40.2/curl/lib/formdata.c:1069: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
filename_escaped = malloc(strlen(filename)*2+1);
- ./curl-83.40.2/curl/lib/ftp.c:1005: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
(strlen(data->set.str[STRING_FTPPORT]) > 1)) {
- ./curl-83.40.2/curl/lib/ftp.c:1008: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
size_t addrlen = INET6_ADDRSTRLEN > strlen(string_ftpport) ?
- ./curl-83.40.2/curl/lib/ftp.c:1009: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
INET6_ADDRSTRLEN : strlen(string_ftpport);
- ./curl-83.40.2/curl/lib/ftp.c:1011: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
size_t addrlen = INET_ADDRSTRLEN > strlen(string_ftpport) ?
- ./curl-83.40.2/curl/lib/ftp.c:1012: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
INET_ADDRSTRLEN : strlen(string_ftpport);
- ./curl-83.40.2/curl/lib/ftp.c:1028: [1] (buffer) strncpy:
Easily used incorrectly; doesn't always \0-terminate or check for
invalid pointers.
strncpy(addr, ip_start, ip_end - ip_start);
- ./curl-83.40.2/curl/lib/ftp.c:1048: [1] (buffer) strncpy:
Easily used incorrectly; doesn't always \0-terminate or check for
invalid pointers.
strncpy(addr, string_ftpport, ip_end - ip_start );
- ./curl-83.40.2/curl/lib/ftp.c:1307: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
snprintf(dest, 20, ",%d,%d", (int)(port>>8), (int)(port&0xff));
- ./curl-83.40.2/curl/lib/ftp.c:1507: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
if(lstArg[strlen(lstArg) - 1] != '/') {
- ./curl-83.40.2/curl/lib/ftp.c:2158: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
snprintf(buf, sizeof(conn->data->state.buffer),
- ./curl-83.40.2/curl/lib/ftp.c:2182: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
snprintf(buf, BUFSIZE-1,
- ./curl-83.40.2/curl/lib/ftp.c:2369: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
snprintf(buf, sizeof(data->state.buffer),
- ./curl-83.40.2/curl/lib/ftp.c:3297: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
size_t flen = ftpc->file?strlen(ftpc->file):0; /* file is "raw" already */
- ./curl-83.40.2/curl/lib/ftp.c:3298: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
size_t dlen = strlen(path)-flen;
- ./curl-83.40.2/curl/lib/ftp.c:4253: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
(data->state.path[strlen(data->state.path) - 1] != '/') )
- ./curl-83.40.2/curl/lib/ftp.c:4401: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
dlen -= ftpc->file?curlx_uztosi(strlen(ftpc->file)):0;
- ./curl-83.40.2/curl/lib/ftp.c:4402: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
if((dlen == curlx_uztosi(strlen(ftpc->prevpath))) &&
- ./curl-83.40.2/curl/lib/gopher.c:90: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
if(strlen(path) <= 2)
- ./curl-83.40.2/curl/lib/gopher.c:102: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
j = strlen(newp);
- ./curl-83.40.2/curl/lib/gopher.c:116: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
k = curlx_uztosz(strlen(sel));
- ./curl-83.40.2/curl/lib/hostcheck.c:71: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
size_t len = strlen(hostname);
- ./curl-83.40.2/curl/lib/hostcheck.c:74: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
len = strlen(pattern);
- ./curl-83.40.2/curl/lib/hostip.c:304: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
entry_len = strlen(entry_id);
- ./curl-83.40.2/curl/lib/hostip.c:389: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
entry_len = strlen(entry_id);
- ./curl-83.40.2/curl/lib/hostip.c:800: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
entry_len = strlen(entry_id);
- ./curl-83.40.2/curl/lib/hostip.c:820: [1] (buffer) sscanf:
it's unclear if the %s limit in the format string is small enough.
Check that the limit is sufficiently small, or use a different input
function.
if(3 != sscanf(hostp->data, "%255[^:]:%d:%255s", hostname, &port,
- ./curl-83.40.2/curl/lib/hostip.c:841: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
entry_len = strlen(entry_id);
- ./curl-83.40.2/curl/lib/hostip4.c:147: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
snprintf(sbuf, sizeof(sbuf), "%d", port);
- ./curl-83.40.2/curl/lib/hostip6.c:206: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
snprintf(sbuf, sizeof(sbuf), "%d", port);
- ./curl-83.40.2/curl/lib/http.c:196: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
size_t thislen = strlen(thisheader);
- ./curl-83.40.2/curl/lib/http.c:220: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
size_t thislen = strlen(thisheader);
- ./curl-83.40.2/curl/lib/http.c:314: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
snprintf(data->state.buffer, sizeof(data->state.buffer), "%s:%s", user, pwd);
- ./curl-83.40.2/curl/lib/http.c:317: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
data->state.buffer, strlen(data->state.buffer),
- ./curl-83.40.2/curl/lib/http.c:430: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
expectsend = (curl_off_t)strlen(data->set.postfields);
- ./curl-83.40.2/curl/lib/http.c:849: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
auth += strlen("NTLM");
- ./curl-83.40.2/curl/lib/http.c:1226: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
CURLcode result = Curl_add_buffer(in, s, strlen(s));
- ./curl-83.40.2/curl/lib/http.c:1311: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
size_t hlen = strlen(header);
- ./curl-83.40.2/curl/lib/http.c:1339: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
clen = strlen(content); /* length of the word to find */
- ./curl-83.40.2/curl/lib/http.c:1718: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
snprintf(buf, BUFSIZE-1,
- ./curl-83.40.2/curl/lib/http.c:1987: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
memmove(cookiehost, cookiehost + 1, strlen(cookiehost) - 1);
- ./curl-83.40.2/curl/lib/http.c:2053: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
size_t currlen = strlen(conn->host.dispname);
- ./curl-83.40.2/curl/lib/http.c:2054: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
size_t newlen = strlen(conn->host.name);
- ./curl-83.40.2/curl/lib/http.c:2055: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
size_t urllen = strlen(url);
- ./curl-83.40.2/curl/lib/http.c:2099: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
if(!*data->state.path && ppath[strlen(ppath) - 1] != '/') {
- ./curl-83.40.2/curl/lib/http.c:2102: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
snprintf(p, sizeof(ftp_typecode) - 1, ";type=%c",
- ./curl-83.40.2/curl/lib/http.c:2268: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
result = Curl_add_buffer(req_buffer, ppath, strlen(ppath));
- ./curl-83.40.2/curl/lib/http.c:2569: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
(data->set.postfields? (curl_off_t)strlen(data->set.postfields):-1);
- ./curl-83.40.2/curl/lib/http.c:2776: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
if(CURLE_OK != Curl_convert_from_network(data, scratch, strlen(s)+1)) {
- ./curl-83.40.2/curl/lib/http.c:2814: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
if(CURLE_OK != Curl_convert_from_network(data, scratch, strlen(s)+1)) {
- ./curl-83.40.2/curl/lib/http.c:3260: [1] (buffer) strncpy:
Easily used incorrectly; doesn't always \0-terminate or check for
invalid pointers.
strncpy(&scratch[0], k->p, SCRATCHSIZE);
- ./curl-83.40.2/curl/lib/http.c:3422: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
result = Curl_convert_from_network(data, k->p, strlen(k->p));
- ./curl-83.40.2/curl/lib/http.c:3665: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
k->timeofdoc = curl_getdate(k->p+strlen("Last-Modified:"),
- ./curl-83.40.2/curl/lib/http2.c:170: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
return snprintf(p, len, " nghttp2/%s", h2->version_str);
- ./curl-83.40.2/curl/lib/http2.c:1069: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
nva[0].namelen = (uint16_t)strlen((char *)nva[0].name);
- ./curl-83.40.2/curl/lib/http2.c:1078: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
nva[1].namelen = (uint16_t)strlen((char *)nva[1].name);
- ./curl-83.40.2/curl/lib/http2.c:1084: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
nva[2].namelen = (uint16_t)strlen((char *)nva[2].name);
- ./curl-83.40.2/curl/lib/http2.c:1089: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
nva[2].valuelen = (uint16_t)strlen((char *)nva[2].value);
- ./curl-83.40.2/curl/lib/http2.c:1103: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
nva[i].namelen = (uint16_t)strlen((char *)nva[i].name);
- ./curl-83.40.2/curl/lib/http_digest.c:64: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
header += strlen("Digest");
- ./curl-83.40.2/curl/lib/http_negotiate.c:74: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
spn_token.length = strlen(spn);
- ./curl-83.40.2/curl/lib/http_negotiate.c:91: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
header += strlen("Negotiate");
- ./curl-83.40.2/curl/lib/http_negotiate.c:95: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
len = strlen(header);
- ./curl-83.40.2/curl/lib/http_negotiate_sspi.c:121: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
header += strlen("Negotiate");
- ./curl-83.40.2/curl/lib/http_negotiate_sspi.c:125: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
len = strlen(header);
- ./curl-83.40.2/curl/lib/http_proxy.c:473: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
strlen("Content-Length:"), NULL, 10);
- ./curl-83.40.2/curl/lib/if2ip.c:170: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
snprintf(scope, sizeof(scope), "%%%u", scopeid);
- ./curl-83.40.2/curl/lib/if2ip.c:177: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
snprintf(buf, buf_size, "%s%s", ip, scope);
- ./curl-83.40.2/curl/lib/if2ip.c:221: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
len = strlen(interf);
- ./curl-83.40.2/curl/lib/imap.c:249: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
size_t cmd_len = strlen(cmd);
- ./curl-83.40.2/curl/lib/imap.c:290: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
size_t id_len = strlen(id);
- ./curl-83.40.2/curl/lib/imap.c:400: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
for(len = strlen(message); len--;)
- ./curl-83.40.2/curl/lib/imap.c:1025: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
size_t len = strlen(line);
- ./curl-83.40.2/curl/lib/imap.c:1254: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
size_t len = strlen(line);
- ./curl-83.40.2/curl/lib/imap.c:1459: [1] (buffer) strcpy:
Does not check for buffer overflows when copying to destination.
Consider using strncpy or strlcpy (warning, strncpy is easily misused). Risk
is low because the source is a constant character.
strcpy(imapc->resptag, "*");
- ./curl-83.40.2/curl/lib/imap.c:1790: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
snprintf(imapc->resptag, sizeof(imapc->resptag), "%c%03d",
- ./curl-83.40.2/curl/lib/imap.c:1849: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
newlen = strlen(str) + backsp_count + quote_count + (space_exists ? 2 : 0);
- ./curl-83.40.2/curl/lib/inet_ntop.c:59: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
(void)snprintf(tmp, sizeof(tmp), "%d.%d.%d.%d",
- ./curl-83.40.2/curl/lib/inet_ntop.c:65: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
len = strlen(tmp);
- ./curl-83.40.2/curl/lib/inet_ntop.c:149: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
tp += strlen(tp);
- ./curl-83.40.2/curl/lib/inet_ntop.c:152: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
tp += snprintf(tp, 5, "%lx", words[i]);
- ./curl-83.40.2/curl/lib/krb5.c:197: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
input_buffer.length = snprintf(input_buffer.value, BUFSIZE, "%s@%s",
- ./curl-83.40.2/curl/lib/ldap.c:463: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
name_len = strlen(name);
- ./curl-83.40.2/curl/lib/ldap.c:523: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
attr_len = strlen(attr);
- ./curl-83.40.2/curl/lib/md5.c:513: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
MD5_Update(&ctx, input, curlx_uztoui(strlen((char *)input)));
- ./curl-83.40.2/curl/lib/memdebug.c:232: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
len=strlen(str)+1;
- ./curl-83.40.2/curl/lib/memdebug.c:256: [1] (buffer) wcslen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
wsiz = wcslen(str) + 1;
- ./curl-83.40.2/curl/lib/mprintf.c:810: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
len = strlen(str);
- ./curl-83.40.2/curl/lib/mprintf.c:868: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
size_t left = sizeof(formatbuf)-strlen(formatbuf);
- ./curl-83.40.2/curl/lib/openldap.c:203: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
snprintf(ptr, sizeof(hosturl)-(ptr-hosturl), "://%s:%d",
- ./curl-83.40.2/curl/lib/openldap.c:268: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
passwd.bv_len = strlen(passwd.bv_val);
- ./curl-83.40.2/curl/lib/parsedate.c:358: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
len = strlen(buf);
- ./curl-83.40.2/curl/lib/pingpong.c:188: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
write_len = strlen(s);
- ./curl-83.40.2/curl/lib/pipeline.c:273: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
strlen(bl_server_name))) {
- ./curl-83.40.2/curl/lib/pop3.c:293: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
for(len = strlen(message); len--;)
- ./curl-83.40.2/curl/lib/pop3.c:468: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
curlx_uztoui(strlen(pop3c->apoptimestamp)));
- ./curl-83.40.2/curl/lib/pop3.c:471: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
curlx_uztoui(strlen(conn->passwd)));
- ./curl-83.40.2/curl/lib/pop3.c:478: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
snprintf(&secret[2 * i], 3, "%02x", digest[i]);
- ./curl-83.40.2/curl/lib/pop3.c:647: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
size_t len = strlen(line);
- ./curl-83.40.2/curl/lib/pop3.c:698: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
size_t len = strlen(line);
- ./curl-83.40.2/curl/lib/progress.c:52: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
snprintf(r, 9, "%3" CURL_FORMAT_CURL_OFF_T
- ./curl-83.40.2/curl/lib/progress.c:55: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
snprintf(r, 9, "%7" CURL_FORMAT_CURL_OFF_T "d", d);
- ./curl-83.40.2/curl/lib/progress.c:74: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
snprintf(max5, 6, "%4" CURL_FORMAT_CURL_OFF_T "k", bytes/ONE_KILOBYTE);
- ./curl-83.40.2/curl/lib/progress.c:78: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
snprintf(max5, 6, "%2" CURL_FORMAT_CURL_OFF_T ".%0"
- ./curl-83.40.2/curl/lib/progress.c:86: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
snprintf(max5, 6, "%4" CURL_FORMAT_CURL_OFF_T "M", bytes/ONE_MEGABYTE);
- ./curl-83.40.2/curl/lib/progress.c:90: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
snprintf(max5, 6, "%2" CURL_FORMAT_CURL_OFF_T ".%0"
- ./curl-83.40.2/curl/lib/progress.c:96: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
snprintf(max5, 6, "%4" CURL_FORMAT_CURL_OFF_T "G", bytes/ONE_GIGABYTE);
- ./curl-83.40.2/curl/lib/progress.c:100: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
snprintf(max5, 6, "%4" CURL_FORMAT_CURL_OFF_T "T", bytes/ONE_TERABYTE);
- ./curl-83.40.2/curl/lib/progress.c:104: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
snprintf(max5, 6, "%4" CURL_FORMAT_CURL_OFF_T "P", bytes/ONE_PETABYTE);
- ./curl-83.40.2/curl/lib/progress.c:112: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
snprintf(max5, 6, "%4" CURL_FORMAT_CURL_OFF_T "M", bytes/ONE_MEGABYTE);
- ./curl-83.40.2/curl/lib/rawstr.h:42: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
#define checkprefix(a,b) Curl_raw_nequal(a,b,strlen(a))
- ./curl-83.40.2/curl/lib/rtsp.c:500: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
(data->set.postfields? (curl_off_t)strlen(data->set.postfields):0);
- ./curl-83.40.2/curl/lib/rtsp.c:773: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
strlen(data->set.str[STRING_RTSP_SESSION_ID])) != 0) {
- ./curl-83.40.2/curl/lib/security.c:239: [1] (buffer) read:
Check buffer boundaries if used in a loop.
return read(fd, buffer, len);
- ./curl-83.40.2/curl/lib/sendf.c:134: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
len = strlen(print_buffer);
- ./curl-83.40.2/curl/lib/sendf.c:152: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
snprintf(data->set.errorbuffer, CURL_ERROR_SIZE, "%s", data->state.buffer);
- ./curl-83.40.2/curl/lib/sendf.c:156: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
len = strlen(data->state.buffer);
- ./curl-83.40.2/curl/lib/sendf.c:185: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
write_len = strlen(s);
- ./curl-83.40.2/curl/lib/sendf.c:493: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
len = strlen(ptr);
- ./curl-83.40.2/curl/lib/sendf.c:701: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
snprintf(buffer, sizeof(buffer), "[%s %s %s]", w, t,
- ./curl-83.40.2/curl/lib/sendf.c:703: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
rc = showit(data, CURLINFO_TEXT, buffer, strlen(buffer));
- ./curl-83.40.2/curl/lib/smb.c:122: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
p += strlen(str);
- ./curl-83.40.2/curl/lib/smb.c:127: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
p += strlen(str) + 1;
- ./curl-83.40.2/curl/lib/smb.c:435: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
byte_count += strlen(smbc->user) + strlen(smbc->domain);
- ./curl-83.40.2/curl/lib/smb.c:435: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
byte_count += strlen(smbc->user) + strlen(smbc->domain);
- ./curl-83.40.2/curl/lib/smb.c:436: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
byte_count += strlen(OS) + strlen(CLIENTNAME) + 4; /* 4 null chars */
- ./curl-83.40.2/curl/lib/smb.c:436: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
byte_count += strlen(OS) + strlen(CLIENTNAME) + 4; /* 4 null chars */
- ./curl-83.40.2/curl/lib/smb.c:480: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
size_t byte_count = strlen(conn->host.name) + strlen(req->share);
- ./curl-83.40.2/curl/lib/smb.c:480: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
size_t byte_count = strlen(conn->host.name) + strlen(req->share);
- ./curl-83.40.2/curl/lib/smb.c:481: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
byte_count += strlen(SERVICENAME) + 5; /* 2 nulls and 3 backslashes */
- ./curl-83.40.2/curl/lib/smb.c:507: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
if((strlen(req->path) + 1) > sizeof(msg.bytes))
- ./curl-83.40.2/curl/lib/smb.c:513: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
byte_count = strlen(req->path);
- ./curl-83.40.2/curl/lib/smtp.c:289: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
for(len = strlen(message); len--;)
- ./curl-83.40.2/curl/lib/smtp.c:713: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
size_t len = strlen(line);
- ./curl-83.40.2/curl/lib/smtp.c:857: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
size_t len = strlen(line);
- ./curl-83.40.2/curl/lib/socks.c:204: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
size_t plen = strlen(proxy_name);
- ./curl-83.40.2/curl/lib/socks.c:221: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
(int)strlen((char*)socksreq + 8); /* size including NUL */
- ./curl-83.40.2/curl/lib/socks.c:230: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
hostnamelen = (ssize_t)strlen(hostname) + 1; /* length including NUL */
- ./curl-83.40.2/curl/lib/socks.c:247: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
hostnamelen = (ssize_t)strlen(hostname) + 1;
- ./curl-83.40.2/curl/lib/socks.c:380: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
const size_t hostname_len = strlen(hostname);
- ./curl-83.40.2/curl/lib/socks.c:486: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
proxy_name_len = strlen(proxy_name);
- ./curl-83.40.2/curl/lib/socks.c:487: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
proxy_password_len = strlen(proxy_password);
- ./curl-83.40.2/curl/lib/socks_gssapi.c:135: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
service.value = malloc(strlen(serviceptr));
- ./curl-83.40.2/curl/lib/socks_gssapi.c:138: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
service.length = strlen(serviceptr);
- ./curl-83.40.2/curl/lib/socks_gssapi.c:145: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
service.value = malloc(strlen(serviceptr) +strlen(conn->proxy.name)+2);
- ./curl-83.40.2/curl/lib/socks_gssapi.c:145: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
service.value = malloc(strlen(serviceptr) +strlen(conn->proxy.name)+2);
- ./curl-83.40.2/curl/lib/socks_gssapi.c:148: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
service.length = strlen(serviceptr) +strlen(conn->proxy.name)+1;
- ./curl-83.40.2/curl/lib/socks_gssapi.c:148: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
service.length = strlen(serviceptr) +strlen(conn->proxy.name)+1;
- ./curl-83.40.2/curl/lib/socks_gssapi.c:149: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
snprintf(service.value, service.length+1, "%s@%s",
- ./curl-83.40.2/curl/lib/socks_sspi.c:98: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
service_name = malloc(strlen(service));
- ./curl-83.40.2/curl/lib/socks_sspi.c:101: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
memcpy(service_name, service, strlen(service));
- ./curl-83.40.2/curl/lib/socks_sspi.c:104: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
service_name = malloc(strlen(service) + strlen(conn->proxy.name) + 2);
- ./curl-83.40.2/curl/lib/socks_sspi.c:104: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
service_name = malloc(strlen(service) + strlen(conn->proxy.name) + 2);
- ./curl-83.40.2/curl/lib/socks_sspi.c:107: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
snprintf(service_name, strlen(service) +strlen(conn->proxy.name)+2,
- ./curl-83.40.2/curl/lib/socks_sspi.c:107: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
snprintf(service_name, strlen(service) +strlen(conn->proxy.name)+2,
- ./curl-83.40.2/curl/lib/socks_sspi.c:107: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
snprintf(service_name, strlen(service) +strlen(conn->proxy.name)+2,
- ./curl-83.40.2/curl/lib/ssh.c:107: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
libssh2_sftp_symlink_ex((s), (p), curlx_uztoui(strlen(p)), \
- ./curl-83.40.2/curl/lib/ssh.c:228: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
responses[0].length = curlx_uztoui(strlen(conn->passwd));
- ./curl-83.40.2/curl/lib/ssh.c:432: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
size_t homelen = strlen(homedir);
- ./curl-83.40.2/curl/lib/ssh.c:662: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
snprintf(&md5buffer[i*2], 3, "%02x", (unsigned char) fingerprint[i]);
- ./curl-83.40.2/curl/lib/ssh.c:669: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
if(pubkey_md5 && strlen(pubkey_md5) == 32) {
- ./curl-83.40.2/curl/lib/ssh.c:767: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
curlx_uztoui(strlen(conn->user)));
- ./curl-83.40.2/curl/lib/ssh.c:888: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
strlen(conn->user)),
- ./curl-83.40.2/curl/lib/ssh.c:924: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
curlx_uztoui(strlen(conn->user)),
- ./curl-83.40.2/curl/lib/ssh.c:926: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
curlx_uztoui(strlen(conn->passwd)),
- ./curl-83.40.2/curl/lib/ssh.c:1060: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
strlen(conn->user)),
- ./curl-83.40.2/curl/lib/ssh.c:1228: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
Curl_debug(data, CURLINFO_HEADER_IN, tmp, strlen(tmp), conn);
- ./curl-83.40.2/curl/lib/ssh.c:1233: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
result = Curl_client_write(conn, CLIENTWRITE_HEADER, tmp, strlen(tmp));
- ./curl-83.40.2/curl/lib/ssh.c:1414: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
curlx_uztoui(strlen(sshc->quote_path2)),
- ./curl-83.40.2/curl/lib/ssh.c:1485: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
curlx_uztoui(strlen(sshc->quote_path2)),
- ./curl-83.40.2/curl/lib/ssh.c:1507: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
curlx_uztoui(strlen(sshc->quote_path1)),
- ./curl-83.40.2/curl/lib/ssh.c:1509: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
curlx_uztoui(strlen(sshc->quote_path2)),
- ./curl-83.40.2/curl/lib/ssh.c:1530: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
curlx_uztoui(strlen(sshc->quote_path1)),
- ./curl-83.40.2/curl/lib/ssh.c:1549: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
curlx_uztoui(strlen(sshc->quote_path1)),
- ./curl-83.40.2/curl/lib/ssh.c:1551: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
curlx_uztoui(strlen(sshc->quote_path2)),
- ./curl-83.40.2/curl/lib/ssh.c:1574: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
curlx_uztoui(strlen(sshc->quote_path1)));
- ./curl-83.40.2/curl/lib/ssh.c:1592: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
curlx_uztoui(strlen(sshc->quote_path1)));
- ./curl-83.40.2/curl/lib/ssh.c:1612: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
if(sftp_scp->path[strlen(sftp_scp->path)-1] == '/')
- ./curl-83.40.2/curl/lib/ssh.c:1633: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
curlx_uztoui(strlen(sftp_scp->path)),
- ./curl-83.40.2/curl/lib/ssh.c:1664: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
curlx_uztoui(strlen(sftp_scp->path)),
- ./curl-83.40.2/curl/lib/ssh.c:1693: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
(strlen(sftp_scp->path) > 1))) {
- ./curl-83.40.2/curl/lib/ssh.c:1798: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
if(strlen(sftp_scp->path) > 1) {
- ./curl-83.40.2/curl/lib/ssh.c:1824: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
curlx_uztoui(strlen(sftp_scp->path)),
- ./curl-83.40.2/curl/lib/ssh.c:1864: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
strlen(sftp_scp->path)),
- ./curl-83.40.2/curl/lib/ssh.c:1938: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
sshc->readdir_currLen = (int)strlen(sshc->readdir_longentry);
- ./curl-83.40.2/curl/lib/ssh.c:1963: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
snprintf(sshc->readdir_linkPath, PATH_MAX, "%s%s", sftp_scp->path,
- ./curl-83.40.2/curl/lib/ssh.c:1996: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
curlx_uztoui(strlen(sshc->readdir_linkPath)),
- ./curl-83.40.2/curl/lib/ssh.c:2018: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
sshc->readdir_currLen += snprintf(sshc->readdir_line +
- ./curl-83.40.2/curl/lib/ssh.c:2029: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
sshc->readdir_currLen += snprintf(sshc->readdir_line +
- ./curl-83.40.2/curl/lib/ssh.c:2075: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
curlx_uztoui(strlen(sftp_scp->path)),
- ./curl-83.40.2/curl/lib/ssh.c:2102: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
curlx_uztoui(strlen(sftp_scp->path)),
- ./curl-83.40.2/curl/lib/ssh.c:3220: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
*path = malloc(strlen(cp) + 1);
- ./curl-83.40.2/curl/lib/ssh.c:3229: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
for(i = j = 0; i <= strlen(cp); i++) {
- ./curl-83.40.2/curl/lib/strdup.c:38: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
len = strlen(str);
- ./curl-83.40.2/curl/lib/strerror.c:605: [1] (buffer) strncpy:
Easily used incorrectly; doesn't always \0-terminate or check for
invalid pointers.
strncpy (buf, p, len);
- ./curl-83.40.2/curl/lib/strerror.c:649: [1] (buffer) strncpy:
Easily used incorrectly; doesn't always \0-terminate or check for
invalid pointers.
strncpy(buf, strerror(err), max);
- ./curl-83.40.2/curl/lib/strerror.c:654: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
snprintf(buf, max, "Unknown error %d (%#x)", err, err);
- ./curl-83.40.2/curl/lib/strerror.c:668: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
snprintf(buf, max, "Unknown error %d", err);
- ./curl-83.40.2/curl/lib/strerror.c:680: [1] (buffer) strncpy:
Easily used incorrectly; doesn't always \0-terminate or check for
invalid pointers.
strncpy(buf, msg, max);
- ./curl-83.40.2/curl/lib/strerror.c:682: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
snprintf(buf, max, "Unknown error %d", err);
- ./curl-83.40.2/curl/lib/strerror.c:692: [1] (buffer) strncpy:
Easily used incorrectly; doesn't always \0-terminate or check for
invalid pointers.
strncpy(buf, buffer, max);
- ./curl-83.40.2/curl/lib/strerror.c:694: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
snprintf(buf, max, "Unknown error %d", err);
- ./curl-83.40.2/curl/lib/strerror.c:700: [1] (buffer) strncpy:
Easily used incorrectly; doesn't always \0-terminate or check for
invalid pointers.
strncpy(buf, msg, max);
- ./curl-83.40.2/curl/lib/strerror.c:702: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
snprintf(buf, max, "Unknown error %d", err);
- ./curl-83.40.2/curl/lib/strerror.c:781: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
snprintf(buf, max, "error %d", err);
- ./curl-83.40.2/curl/lib/strerror.c:792: [1] (buffer) strncpy:
Easily used incorrectly; doesn't always \0-terminate or check for
invalid pointers.
strncpy(buf, str, max);
- ./curl-83.40.2/curl/lib/strerror.c:1069: [1] (buffer) strncpy:
Easily used incorrectly; doesn't always \0-terminate or check for
invalid pointers.
strncpy(outbuf, txt, outmax);
- ./curl-83.40.2/curl/lib/strerror.c:1071: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
snprintf(outbuf, outmax,
- ./curl-83.40.2/curl/lib/strerror.c:1078: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
snprintf(txtbuf, sizeof(txtbuf), "%s (0x%04X%04X)",
- ./curl-83.40.2/curl/lib/strerror.c:1113: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
snprintf(outbuf, outmax, "%s - %s", str, msg);
- ./curl-83.40.2/curl/lib/strerror.c:1115: [1] (buffer) strncpy:
Easily used incorrectly; doesn't always \0-terminate or check for
invalid pointers.
strncpy(outbuf, str, outmax);
- ./curl-83.40.2/curl/lib/strerror.c:1128: [1] (buffer) strncpy:
Easily used incorrectly; doesn't always \0-terminate or check for
invalid pointers.
strncpy(outbuf, txt, outmax);
- ./curl-83.40.2/curl/lib/telnet.c:832: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
snprintf(option_arg, sizeof(option_arg), "USER,%s", conn->user);
- ./curl-83.40.2/curl/lib/telnet.c:844: [1] (buffer) sscanf:
it's unclear if the %s limit in the format string is small enough.
Check that the limit is sufficiently small, or use a different input
function.
if(sscanf(head->data, "%127[^= ]%*[ =]%255s",
- ./curl-83.40.2/curl/lib/telnet.c:849: [1] (buffer) strncpy:
Easily used incorrectly; doesn't always \0-terminate or check for
invalid pointers.
strncpy(tn->subopt_ttype, option_arg, 31);
- ./curl-83.40.2/curl/lib/telnet.c:857: [1] (buffer) strncpy:
Easily used incorrectly; doesn't always \0-terminate or check for
invalid pointers.
strncpy(tn->subopt_xdisploc, option_arg, 127);
- ./curl-83.40.2/curl/lib/telnet.c:940: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
len = strlen(tn->subopt_ttype) + 4 + 2;
- ./curl-83.40.2/curl/lib/telnet.c:941: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
snprintf((char *)temp, sizeof(temp),
- ./curl-83.40.2/curl/lib/telnet.c:952: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
len = strlen(tn->subopt_xdisploc) + 4 + 2;
- ./curl-83.40.2/curl/lib/telnet.c:953: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
snprintf((char *)temp, sizeof(temp),
- ./curl-83.40.2/curl/lib/telnet.c:964: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
snprintf((char *)temp, sizeof(temp),
- ./curl-83.40.2/curl/lib/telnet.c:970: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
tmplen = (strlen(v->data) + 1);
- ./curl-83.40.2/curl/lib/telnet.c:973: [1] (buffer) sscanf:
it's unclear if the %s limit in the format string is small enough.
Check that the limit is sufficiently small, or use a different input
function.
if(sscanf(v->data, "%127[^,],%127s", varname, varval)) {
- ./curl-83.40.2/curl/lib/telnet.c:974: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
snprintf((char *)&temp[len], sizeof(temp) - len,
- ./curl-83.40.2/curl/lib/telnet.c:981: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
snprintf((char *)&temp[len], sizeof(temp) - len,
- ./curl-83.40.2/curl/lib/telnet.c:1626: [1] (buffer) read:
Check buffer boundaries if used in a loop.
nread = read(pfd[1].fd, buf, BUFSIZE - 1);
- ./curl-83.40.2/curl/lib/tftp.c:327: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
*value = &buf[strlen(*option) + 1];
- ./curl-83.40.2/curl/lib/tftp.c:408: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
if(( strlen(option) + csize + 1 ) > (size_t)state->blksize)
- ./curl-83.40.2/curl/lib/tftp.c:411: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
return strlen(option) + 1;
- ./curl-83.40.2/curl/lib/tftp.c:492: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
snprintf((char *)state->spacket.data+2,
- ./curl-83.40.2/curl/lib/tftp.c:495: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
sbytes = 4 + strlen(filename) + strlen(mode);
- ./curl-83.40.2/curl/lib/tftp.c:495: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
sbytes = 4 + strlen(filename) + strlen(mode);
- ./curl-83.40.2/curl/lib/tftp.c:502: [1] (buffer) strcpy:
Does not check for buffer overflows when copying to destination.
Consider using strncpy or strlcpy (warning, strncpy is easily misused). Risk
is low because the source is a constant character.
strcpy(buf, "0"); /* the destination is large enough */
- ./curl-83.40.2/curl/lib/tftp.c:510: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
snprintf( buf, sizeof(buf), "%d", state->requested_blksize );
- ./curl-83.40.2/curl/lib/tftp.c:518: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
snprintf( buf, sizeof(buf), "%d", state->retry_time);
- ./curl-83.40.2/curl/lib/transfer.c:188: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
hexlen = snprintf(hexbuffer, sizeof(hexbuffer),
- ./curl-83.40.2/curl/lib/transfer.c:201: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
strlen(endofline_network));
- ./curl-83.40.2/curl/lib/transfer.c:212: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
length = strlen(hexbuffer);
- ./curl-83.40.2/curl/lib/transfer.c:224: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
nread+=(int)strlen(endofline_native); /* for the added end of line */
- ./curl-83.40.2/curl/lib/transfer.c:1586: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
urllen = strlen(url_clone);
- ./curl-83.40.2/curl/lib/url.c:327: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
result = parse_login_details(option, strlen(option),
- ./curl-83.40.2/curl/lib/url.c:2607: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
if(strnequal((char *)va_arg(param, char *), "SRP", strlen("SRP")))
- ./curl-83.40.2/curl/lib/url.c:3695: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
len = strlen(host->name);
- ./curl-83.40.2/curl/lib/url.c:3962: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
memmove(path, path + 2, strlen(path + 2)+1);
- ./curl-83.40.2/curl/lib/url.c:3995: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
memmove(path, ptr, strlen(ptr)+1);
- ./curl-83.40.2/curl/lib/url.c:4079: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
size_t hostlen = strlen(query);
- ./curl-83.40.2/curl/lib/url.c:4080: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
size_t pathlen = strlen(path);
- ./curl-83.40.2/curl/lib/url.c:4096: [1] (buffer) strcpy:
Does not check for buffer overflows when copying to destination.
Consider using strncpy or strlcpy (warning, strncpy is easily misused). Risk
is low because the source is a constant character.
strcpy(path, "/");
- ./curl-83.40.2/curl/lib/url.c:4108: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
memmove(&path[1], path, strlen(path)+1);
- ./curl-83.40.2/curl/lib/url.c:4138: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
size_t plen = strlen(path); /* new path, should be 1 byte longer than
- ./curl-83.40.2/curl/lib/url.c:4140: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
size_t urllen = strlen(data->change.url); /* original URL length */
- ./curl-83.40.2/curl/lib/url.c:4142: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
size_t prefixlen = strlen(conn->host.name);
- ./curl-83.40.2/curl/lib/url.c:4145: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
prefixlen += strlen(protop) + strlen("://");
- ./curl-83.40.2/curl/lib/url.c:4145: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
prefixlen += strlen(protop) + strlen("://");
- ./curl-83.40.2/curl/lib/url.c:4194: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
memmove(percent, endp, strlen(endp)+1);
- ./curl-83.40.2/curl/lib/url.c:4203: [1] (buffer) strncpy:
Easily used incorrectly; doesn't always \0-terminate or check for
invalid pointers.
strncpy(ifname, percent + identifier_offset, IFNAMSIZ + 2);
- ./curl-83.40.2/curl/lib/url.c:4217: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
char *p = percent + identifier_offset + strlen(ifname);
- ./curl-83.40.2/curl/lib/url.c:4220: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
memmove(percent, p, strlen(p) + 1);
- ./curl-83.40.2/curl/lib/url.c:4381: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
no_proxy_len = strlen(no_proxy);
- ./curl-83.40.2/curl/lib/url.c:4386: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
namelen = strlen(name);
- ./curl-83.40.2/curl/lib/url.c:4568: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
if(proxyuser && strlen(proxyuser) < MAX_CURL_USER_LENGTH)
- ./curl-83.40.2/curl/lib/url.c:4577: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
if(proxypasswd && strlen(proxypasswd) < MAX_CURL_PASSWORD_LENGTH)
- ./curl-83.40.2/curl/lib/url.c:4678: [1] (buffer) strncpy:
Easily used incorrectly; doesn't always \0-terminate or check for
invalid pointers.
strncpy(proxyuser, data->set.str[STRING_PROXYUSERNAME],
- ./curl-83.40.2/curl/lib/url.c:4683: [1] (buffer) strncpy:
Easily used incorrectly; doesn't always \0-terminate or check for
invalid pointers.
strncpy(proxypasswd, data->set.str[STRING_PROXYPASSWORD],
- ./curl-83.40.2/curl/lib/url.c:5004: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
snprintf(type, sizeof(type), ";type=%c",
- ./curl-83.40.2/curl/lib/url.c:5200: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
if(strlen(path) >= sizeof(((struct sockaddr_un *)0)->sun_path)) {
- ./curl-83.40.2/curl/lib/url.c:5399: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
urllen=strlen(data->change.url);
- ./curl-83.40.2/curl/lib/version.c:71: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
len = strlen(ptr);
- ./curl-83.40.2/curl/lib/version.c:86: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
len = snprintf(ptr, left, " zlib/%s", zlibVersion());
- ./curl-83.40.2/curl/lib/version.c:92: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
len = snprintf(ptr, left, " c-ares/%s", ares_version(NULL));
- ./curl-83.40.2/curl/lib/version.c:98: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
len = snprintf(ptr, left, " libidn/%s", stringprep_check_version(NULL));
- ./curl-83.40.2/curl/lib/version.c:104: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
len = snprintf(ptr, left, " WinIDN");
- ./curl-83.40.2/curl/lib/version.c:110: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
len = snprintf(ptr, left, " iconv/%d.%d",
- ./curl-83.40.2/curl/lib/version.c:114: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
len = snprintf(ptr, left, " iconv");
- ./curl-83.40.2/curl/lib/version.c:120: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
len = snprintf(ptr, left, " libssh2/%s", CURL_LIBSSH2_VERSION);
- ./curl-83.40.2/curl/lib/version.c:139: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
snprintf(ptr, left, " librtmp/%d.%d%s",
- ./curl-83.40.2/curl/lib/version.c:355: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
snprintf(ssh_buffer, sizeof(ssh_buffer), "libssh2/%s", LIBSSH2_VERSION);
- ./curl-83.40.2/curl/lib/vtls/axtls.c:496: [1] (obsolete) usleep:
This C routine is considered obsolete (as opposed to the shell command
by the same name). The interaction of this function with SIGALRM and
other timer functions such as sleep(), alarm(), setitimer(), and
nanosleep() is unspecified. Use nanosleep(2) or setitimer(2) instead.
usleep(10000);
- ./curl-83.40.2/curl/lib/vtls/axtls.c:670: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
return snprintf(buffer, size, "axTLS/%s", ssl_version());
- ./curl-83.40.2/curl/lib/vtls/cyassl.c:261: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
size_t hostname_len = strlen(conn->host.name);
- ./curl-83.40.2/curl/lib/vtls/cyassl.c:579: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
return snprintf(buffer, size, "wolfSSL/%s", WOLFSSL_VERSION);
- ./curl-83.40.2/curl/lib/vtls/cyassl.c:581: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
return snprintf(buffer, size, "CyaSSL/%s", CYASSL_VERSION);
- ./curl-83.40.2/curl/lib/vtls/cyassl.c:583: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
return snprintf(buffer, size, "CyaSSL/%s", "<1.8.8");
- ./curl-83.40.2/curl/lib/vtls/darwinssl.c:139: [1] (buffer) read:
Check buffer boundaries if used in a loop.
rrtn = read(sock, currData, bytesToGo);
- ./curl-83.40.2/curl/lib/vtls/darwinssl.c:860: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
attr.length = (UInt32)strlen(label);
- ./curl-83.40.2/curl/lib/vtls/darwinssl.c:940: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
(const UInt8 *)cPath, strlen(cPath), false);
- ./curl-83.40.2/curl/lib/vtls/darwinssl.c:1205: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
strlen(data->set.str[STRING_CERT_TYPE])) != 0)
- ./curl-83.40.2/curl/lib/vtls/darwinssl.c:1345: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
strlen(conn->host.name));
- ./curl-83.40.2/curl/lib/vtls/darwinssl.c:1490: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
ssl_sessionid_len = strlen(ssl_sessionid);
- ./curl-83.40.2/curl/lib/vtls/darwinssl.c:1592: [1] (buffer) read:
Check buffer boundaries if used in a loop.
n = read(fd, buf, sizeof(buf));
- ./curl-83.40.2/curl/lib/vtls/darwinssl.c:2271: [1] (buffer) read:
Check buffer boundaries if used in a loop.
nread = read(conn->sock[sockindex], buf, sizeof(buf));
- ./curl-83.40.2/curl/lib/vtls/darwinssl.c:2300: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
return snprintf(buffer, size, "SecureTransport");
- ./curl-83.40.2/curl/lib/vtls/gskit.c:319: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
l = strlen(cipherlist) + 1;
- ./curl-83.40.2/curl/lib/vtls/gskit.c:355: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
ciphers[i].ptr += strlen(ctp->gsktoken);
- ./curl-83.40.2/curl/lib/vtls/gskit.c:1024: [1] (buffer) read:
Check buffer boundaries if used in a loop.
nread = read(conn->sock[sockindex], buf, sizeof(buf));
- ./curl-83.40.2/curl/lib/vtls/gskit.c:1043: [1] (buffer) strncpy:
Easily used incorrectly; doesn't always \0-terminate or check for
invalid pointers. Risk is low because the source is a constant string.
strncpy(buffer, "GSKit", size);
- ./curl-83.40.2/curl/lib/vtls/gskit.c:1044: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
return strlen(buffer);
- ./curl-83.40.2/curl/lib/vtls/gtls.c:213: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
snprintf(data->state.buffer,
- ./curl-83.40.2/curl/lib/vtls/gtls.c:520: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
strlen(conn->host.name)) < 0))
- ./curl-83.40.2/curl/lib/vtls/gtls.c:1498: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
return snprintf(buffer, size, "GnuTLS/%s", gnutls_check_version(NULL));
- ./curl-83.40.2/curl/lib/vtls/nss.c:367: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
strlen(filename) + 1);
- ./curl-83.40.2/curl/lib/vtls/nss.c:2007: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
return snprintf(buffer, size, "NSS/%s", NSS_VERSION);
- ./curl-83.40.2/curl/lib/vtls/openssl.c:153: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
int klen = curlx_uztosi(strlen((char *)global_passwd));
- ./curl-83.40.2/curl/lib/vtls/openssl.c:1049: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
snprintf(buf, sizeofbuf,
- ./curl-83.40.2/curl/lib/vtls/openssl.c:1142: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
if((altlen == strlen(altptr)) &&
- ./curl-83.40.2/curl/lib/vtls/openssl.c:1218: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
if(peer_CN && (curlx_uztosi(strlen((char *)peer_CN)) != j)) {
- ./curl-83.40.2/curl/lib/vtls/openssl.c:1231: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
CURLcode rc = Curl_convert_from_utf8(data, peer_CN, strlen(peer_CN));
- ./curl-83.40.2/curl/lib/vtls/openssl.c:1524: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
snprintf(unknown, sizeof(unknown), "(%x)", ssl_ver);
- ./curl-83.40.2/curl/lib/vtls/openssl.c:1546: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
txt_len = snprintf(ssl_buf, sizeof(ssl_buf), "%s (%s), %s, %s (%d):\n",
- ./curl-83.40.2/curl/lib/vtls/openssl.c:2163: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
snprintf(error_buffer, sizeof(error_buffer),
- ./curl-83.40.2/curl/lib/vtls/openssl.c:2268: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
snprintf(namebuf, sizeof(namebuf), "%s(%s)", type, name);
- ./curl-83.40.2/curl/lib/vtls/openssl.c:2270: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
snprintf(ptr, left, "%02x:", raw[i]);
- ./curl-83.40.2/curl/lib/vtls/openssl.c:2339: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
ptr+=snprintf(ptr, sizeof(buf)-(ptr-buf), "%s%c", sep,
- ./curl-83.40.2/curl/lib/vtls/openssl.c:2362: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
ptr+=snprintf(ptr, sizeof(buf)-(ptr-buf), "%02x:", sig->data[i]);
- ./curl-83.40.2/curl/lib/vtls/openssl.c:2449: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
snprintf(bufp, CERTBUFFERSIZE, "%lx", value);
- ./curl-83.40.2/curl/lib/vtls/openssl.c:2463: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
snprintf(ptr, left, "%02x", num->data[j]);
- ./curl-83.40.2/curl/lib/vtls/openssl.c:2507: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
snprintf(bufp, CERTBUFFERSIZE, "%d", BN_num_bits(pubkey->pkey.rsa->n));
- ./curl-83.40.2/curl/lib/vtls/openssl.c:3081: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
return snprintf(buffer, size, "yassl/%s", YASSL_VERSION);
- ./curl-83.40.2/curl/lib/vtls/openssl.c:3084: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
return snprintf(buffer, size, "BoringSSL");
- ./curl-83.40.2/curl/lib/vtls/openssl.c:3114: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
return snprintf(buffer, size, "%s/%lx.%lx.%lx%s",
- ./curl-83.40.2/curl/lib/vtls/openssl.c:3129: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
return snprintf(buffer, size, "OpenSSL/%lx.%lx.%lx",
- ./curl-83.40.2/curl/lib/vtls/openssl.c:3144: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
return snprintf(buffer, size, "SSL/%x.%x.%x%s",
- ./curl-83.40.2/curl/lib/vtls/polarssl.c:596: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
return snprintf(buffer, size, "%s/%d.%d.%d",
- ./curl-83.40.2/curl/lib/vtls/schannel.c:1335: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
size = snprintf(buffer, size, "WinSSL");
- ./curl-83.40.2/curl/lib/vtls/schannel.c:1436: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
int hostname_len = strlen(conn->host.name);
- ./curl-83.40.2/curl/lib/vtls/vtls.c:194: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
size_t elen = strlen(force_entropy);
- ./curl-83.40.2/curl/lib/vtls/vtls.c:219: [1] (buffer) read:
Check buffer boundaries if used in a loop.
ssize_t nread = read(fd, &randseed, sizeof(randseed));
- ./curl-83.40.2/curl/lib/vtls/vtls.c:658: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
size_t labellen = strlen(label);
- ./curl-83.40.2/curl/lib/vtls/vtls.c:666: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
snprintf(output, outlen, "%s:", label);
- ./curl-83.40.2/curl/lib/vtls/vtls.c:694: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
size_t valuelen = strlen(value);
- ./curl-83.40.2/curl/lib/warnless.c:426: [1] (buffer) read:
Check buffer boundaries if used in a loop.
return (ssize_t)read(fd, buf, curlx_uztoui(count));
- ./curl-83.40.2/curl/lib/warnless.h:72: [1] (buffer) read:
Check buffer boundaries if used in a loop.
# undef read
- ./curl-83.40.2/curl/lib/warnless.h:73: [1] (buffer) read:
Check buffer boundaries if used in a loop.
# define read(fd, buf, count) curlx_read(fd, buf, count)
- ./curl-83.40.2/curl/lib/x509asn1.c:208: [1] (port) snprintf:
On some very old systems, snprintf is incorrectly implemented and
permits buffer overflows; there are also incompatible standard definitions
of it. Check it during installation, or use something else.
snprintf(buf + n, 4, "%02x:", *(const unsigned char *) beg++);
- ./curl-83.40.2/curl/lib/x509asn1.c:1117: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
if(strlen(dnsname) == (size_t) len)
- ./curl-83.40.2/curl/lib/x509asn1.c:1172: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
if(strlen(dnsname) != (size_t) len) /* Nul byte in string ? */
- ./curl-83.40.2/curl/packages/OS400/ccsidcurl.c:129: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
lslen = slen >= 0? slen: strlen(s) + 1;
- ./curl-83.40.2/curl/packages/OS400/ccsidcurl.c:174: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
dlen = (size_t) (slen < 0? strlen(s): slen) + 1;
- ./curl-83.40.2/curl/packages/OS400/ccsidcurl.c:246: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
i = strlen(aversion) + 1;
- ./curl-83.40.2/curl/packages/OS400/ccsidcurl.c:318: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
*outlength = strlen(s);
- ./curl-83.40.2/curl/packages/OS400/ccsidcurl.c:428: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
n += strlen(p->protocols[nproto++]);
- ./curl-83.40.2/curl/packages/OS400/ccsidcurl.c:434: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
n += strlen(p->version) + 1;
- ./curl-83.40.2/curl/packages/OS400/ccsidcurl.c:437: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
n += strlen(p->host) + 1;
- ./curl-83.40.2/curl/packages/OS400/ccsidcurl.c:440: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
n += strlen(p->ssl_version) + 1;
- ./curl-83.40.2/curl/packages/OS400/ccsidcurl.c:443: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
n += strlen(p->libz_version) + 1;
- ./curl-83.40.2/curl/packages/OS400/ccsidcurl.c:446: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
n += strlen(p->ares) + 1;
- ./curl-83.40.2/curl/packages/OS400/ccsidcurl.c:449: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
n += strlen(p->libidn) + 1;
- ./curl-83.40.2/curl/packages/OS400/ccsidcurl.c:452: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
n += strlen(p->libssh_version) + 1;
- ./curl-83.40.2/curl/packages/OS400/ccsidcurl.c:524: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
i = MAX_CONV_EXPANSION * (strlen(s) + 1);
- ./curl-83.40.2/curl/packages/OS400/ccsidcurl.c:549: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
i = MAX_CONV_EXPANSION * (strlen(s) + 1);
- ./curl-83.40.2/curl/packages/OS400/ccsidcurl.c:574: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
i = MAX_CONV_EXPANSION * (strlen(s) + 1);
- ./curl-83.40.2/curl/packages/OS400/ccsidcurl.c:747: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
l = strlen(forms[formx].value) + 1;
- ./curl-83.40.2/curl/packages/OS400/os400sys.c:249: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
i = strlen(s) + 1;
- ./curl-83.40.2/curl/packages/OS400/os400sys.c:292: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
nodenamelen - 1, strlen(enodename));
- ./curl-83.40.2/curl/packages/OS400/os400sys.c:298: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
servnamelen - 1, strlen(eservname));
- ./curl-83.40.2/curl/packages/OS400/os400sys.c:324: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
i = strlen(nodename);
- ./curl-83.40.2/curl/packages/OS400/os400sys.c:334: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
i = strlen(servname);
- ./curl-83.40.2/curl/packages/OS400/os400sys.c:522: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
bufSize = strlen(buffer);
- ./curl-83.40.2/curl/packages/OS400/os400sys.c:933: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
i = strlen(host);
- ./curl-83.40.2/curl/packages/OS400/os400sys.c:958: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
i = strlen(dn);
- ./curl-83.40.2/curl/packages/OS400/os400sys.c:968: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
i = strlen(passwd);
- ./curl-83.40.2/curl/packages/OS400/os400sys.c:1004: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
i = strlen(base);
- ./curl-83.40.2/curl/packages/OS400/os400sys.c:1015: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
i = strlen(filter);
- ./curl-83.40.2/curl/packages/OS400/os400sys.c:1033: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
i = strlen(attrs[j]);
- ./curl-83.40.2/curl/packages/OS400/os400sys.c:1074: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
int i = strlen(attr);
- ./curl-83.40.2/curl/packages/OS400/os400sys.c:1117: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
i = strlen(cp);
- ./curl-83.40.2/curl/packages/OS400/os400sys.c:1149: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
i = strlen(cp);
- ./curl-83.40.2/curl/packages/OS400/os400sys.c:1181: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).
i = strlen(cp);
- ./curl-83.40.2/curl/packages/vms/curl_crtl_init.c:103: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated (it could cause a
crash if unprotected).