Flawfinder version 2.0.10, (C) 2001-2019 David A. Wheeler. Number of rules (primarily dangerous function names) in C/C++ ruleset: 223 Examining data/feathernotes-0.5.1/feathernotes/domitem.cpp Examining data/feathernotes-0.5.1/feathernotes/domitem.h Examining data/feathernotes-0.5.1/feathernotes/dommodel.cpp Examining data/feathernotes-0.5.1/feathernotes/dommodel.h Examining data/feathernotes-0.5.1/feathernotes/filedialog.h Examining data/feathernotes-0.5.1/feathernotes/find.cpp Examining data/feathernotes-0.5.1/feathernotes/fn.cpp Examining data/feathernotes-0.5.1/feathernotes/fn.h Examining data/feathernotes-0.5.1/feathernotes/help.h Examining data/feathernotes-0.5.1/feathernotes/lineedit.cpp Examining data/feathernotes-0.5.1/feathernotes/lineedit.h Examining data/feathernotes-0.5.1/feathernotes/main.cpp Examining data/feathernotes-0.5.1/feathernotes/messagebox.h Examining data/feathernotes-0.5.1/feathernotes/pref.cpp Examining data/feathernotes-0.5.1/feathernotes/pref.h Examining data/feathernotes-0.5.1/feathernotes/settings.h Examining data/feathernotes-0.5.1/feathernotes/simplecrypt.cpp Examining data/feathernotes-0.5.1/feathernotes/simplecrypt.h Examining data/feathernotes-0.5.1/feathernotes/spinbox.h Examining data/feathernotes-0.5.1/feathernotes/svgicons.cpp Examining data/feathernotes-0.5.1/feathernotes/svgicons.h Examining data/feathernotes-0.5.1/feathernotes/textedit.cpp Examining data/feathernotes-0.5.1/feathernotes/textedit.h Examining data/feathernotes-0.5.1/feathernotes/treeview.h Examining data/feathernotes-0.5.1/feathernotes/vscrollbar.cpp Examining data/feathernotes-0.5.1/feathernotes/vscrollbar.h Examining data/feathernotes-0.5.1/feathernotes/x11.cpp Examining data/feathernotes-0.5.1/feathernotes/x11.h FINAL RESULTS: data/feathernotes-0.5.1/feathernotes/main.cpp:71:33: [4] (shell) system: This causes a new program to execute and is difficult to use safely (CWE-78). try using a library call that implements the same functionality if available. QStringList langs (QLocale::system().uiLanguages()); data/feathernotes-0.5.1/feathernotes/fn.cpp:988:18: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (file.open (QIODevice::ReadOnly)) data/feathernotes-0.5.1/feathernotes/fn.cpp:1377:24: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (outputFile.open (QIODevice::WriteOnly)) data/feathernotes-0.5.1/feathernotes/fn.cpp:1403:24: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (outputFile.open (QFile::WriteOnly)) data/feathernotes-0.5.1/feathernotes/fn.cpp:2399:18: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (file.open (QIODevice::ReadOnly)) data/feathernotes-0.5.1/feathernotes/fn.cpp:3561:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!file.open (QIODevice::ReadOnly)) data/feathernotes-0.5.1/feathernotes/svgicons.cpp:69:23: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (f.open (QIODevice::ReadOnly)) data/feathernotes-0.5.1/feathernotes/textedit.cpp:703:20: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). buffer.open (QIODevice::WriteOnly); ANALYSIS SUMMARY: Hits = 8 Lines analyzed = 10530 in approximately 0.27 seconds (38616 lines/second) Physical Source Lines of Code (SLOC) = 8381 Hits@level = [0] 0 [1] 0 [2] 7 [3] 0 [4] 1 [5] 0 Hits@level+ = [0+] 8 [1+] 8 [2+] 8 [3+] 1 [4+] 1 [5+] 0 Hits/KSLOC@level+ = [0+] 0.95454 [1+] 0.95454 [2+] 0.95454 [3+] 0.119318 [4+] 0.119318 [5+] 0 Dot directories skipped = 1 (--followdotdir overrides) Minimum risk level = 1 Not every hit is necessarily a security vulnerability. There may be other security vulnerabilities; review your code! See 'Secure Programming HOWTO' (https://dwheeler.com/secure-programs) for more information.