flaws statement : This array access uses an index value that does not reference a valid position in the array. The array has 2073 elements, with valid indexes ranging from 0 to 2072, and the code references an array index that is tainted (i.e. controlled by the user).Use bounds checking to ensure the validity of any user-controlled value used as an array index.References: CWE (https://cwe.mitre.org/data/definitions/129.html)

// the following un-needed checks are intended to fix SAST scan flags

    if(k < SPDU_BUFFER_SIZE) sess_buff[ k++ ] = 0x21; /* Session Level Control Header */

    if(k < SPDU_BUFFER_SIZE) sess_buff[ k++ ] = 0x00; /* type = session request */

    if(k < SPDU_BUFFER_SIZE) sess_buff[ k++ ] = 0xC1; /* Parameters - USCI Called. */

    if(k < SPDU_BUFFER_SIZE) sess_buff[ k++ ] = strlen( usci_called_addr );

    if((k+strlen(usci_called_addr+1)) < SPDU_BUFFER_SIZE) strcpy( (char *) &sess_buff[k],  usci_called_addr );

    k += strlen(  usci_called_addr );

    if(k < SPDU_BUFFER_SIZE) sess_buff[ k++ ] = 0xC2; /* Parameters - USCI Calling */

    if(k < SPDU_BUFFER_SIZE) sess_buff[ k++ ] = strlen( (char *) usci_calling_addr );

    if((k+strlen(usci_calling_addr)+1) < SPDU_BUFFER_SIZE) strcpy( (char *) &sess_buff[k], (char *) usci_calling_addr );

    k += strlen( (char *) usci_calling_addr );