CWE-125: Out-of-bounds Read

int getValueFromArray(int *array, int len, int index) {                                                     int value;                                                        // check that the array index is less than the maximum                                                                                    // length of the array                            if (index < len) {                                                                                                   // get the value at the specified index of the array                                  value = array[index];                            }                            // if array index is invalid then output error message                                                                                    // and return value indicating error                            else {printf("Value is: %d\n", array[index]);value = -1;}                            return value;                      }

...                                            // check that the array index is within the correct                                                                  // range of values for the array                      if (index >= 0 && index < len) {                      ...

int processMessageFromSocket(int socket) {                         int success;                            char buffer[BUFFER_SIZE];char message[MESSAGE_SIZE];                                                        // get message from socket and store into buffer                                                                                    //Ignoring possibliity that buffer > BUFFER_SIZE                            if (getMessage(socket, buffer, BUFFER_SIZE) > 0) {                                                                                                   // place contents of the buffer into message structure                                  ExMessage *msg = recastBuffer(buffer);                                                                    // copy message body into string for processing                                  int index;for (index = 0; index < msg->msgLength; index++) {message[index] = msg->msgBody[index];}message[index] = '\0';                                                                    // process message                                  success = processMessage(message);                            }return success;                      }