Entries in perl database: 33 Entries in python database: 62 Entries in c database: 334 Entries in php database: 55 Analyzing cmdproc.c Analyzing command.c Analyzing directconn.c Analyzing error.c Analyzing group.c Analyzing history.c Analyzing httpmethod.c Analyzing msg.c Analyzing msn.c Analyzing nexus.c Analyzing notification.c Analyzing object.c Analyzing page.c Analyzing servconn.c Analyzing session.c Analyzing slp.c Analyzing slpcall.c Analyzing slplink.c Analyzing slpmsg.c Analyzing slpsession.c Analyzing state.c Analyzing switchboard.c Analyzing sync.c Analyzing table.c Analyzing transaction.c Analyzing user.c Analyzing userlist.c Analyzing utils.c directconn.c:88: High: fixed size local buffer error.c:30: High: fixed size local buffer error.c:234: High: fixed size local buffer msn.c:82: High: fixed size local buffer msn.c:408: High: fixed size local buffer msn.c:1225: High: fixed size local buffer msn.c:1566: High: fixed size local buffer nexus.c:37: High: fixed size local buffer notification.c:152: High: fixed size local buffer notification.c:184: High: fixed size local buffer notification.c:270: High: fixed size local buffer notification.c:723: High: fixed size local buffer notification.c:724: High: fixed size local buffer notification.c:725: High: fixed size local buffer notification.c:1063: High: fixed size local buffer servconn.c:300: High: fixed size local buffer servconn.c:456: High: fixed size local buffer slp.c:641: High: fixed size local buffer slplink.c:255: High: fixed size local buffer user.c:139: High: fixed size local buffer utils.c:80: High: fixed size local buffer utils.c:136: High: fixed size local buffer utils.c:173: High: fixed size local buffer utils.c:174: High: fixed size local buffer Extra care should be taken to ensure that character arrays that are allocated on the stack are used safely. They are prime targets for buffer overflow attacks. notification.c:748: High: strcat Check to be sure that argument 2 passed to this function call will not copy more data than can be handled, resulting in a buffer overflow. directconn.c:282: Medium: read directconn.c:321: Medium: read servconn.c:307: Medium: read Check buffer boundaries if calling this function in a loop and make sure you are not in danger of writing past the allocated space. slpmsg.c:100: Medium: stat A potential TOCTOU (Time Of Check, Time Of Use) vulnerability exists. This is the first line where a check has occured. The following line(s) contain uses that may match up with this check: 98 (fopen) user.c:129: Medium: stat A potential TOCTOU (Time Of Check, Time Of Use) vulnerability exists. This is the first line where a check has occured. The following line(s) contain uses that may match up with this check: 133 (fopen) Total lines analyzed: 12027 Total time 0.030056 seconds 400153 lines per second