need to fix/resolve flawfinder issues

[rgetz]

Codacy reports:

We should work on this, and get it to a reasonable number before the next release.

Most of these are potential issues, not real issues (things like don't use strlen, because its bad), but there are lots of times it's OK in this code base, since we know all the strings are null terminated. However - if someone wanted to inject something into the library - it possible, and then the library would crash, so it still worth looking at...

[rgetz]

Today was the first day we got to a rating of "A":

I'm mainly focusing on the C issues (C# issues should get resolved as part of #364) tagged as error or warning.

[rgetz]

All the major issues were resolved.

We still have some C warnings, but no errors, (one which needs to be dismissed as a false positive).

We still have alot of work to do on the C# bindings, but I think I will close this for now.