Flawfinder version 2.0.10, (C) 2001-2019 David A. Wheeler.
Number of rules (primarily dangerous function names) in C/C++ ruleset: 223
Examining data/feathernotes-0.5.1/feathernotes/domitem.cpp
Examining data/feathernotes-0.5.1/feathernotes/domitem.h
Examining data/feathernotes-0.5.1/feathernotes/dommodel.cpp
Examining data/feathernotes-0.5.1/feathernotes/dommodel.h
Examining data/feathernotes-0.5.1/feathernotes/filedialog.h
Examining data/feathernotes-0.5.1/feathernotes/find.cpp
Examining data/feathernotes-0.5.1/feathernotes/fn.cpp
Examining data/feathernotes-0.5.1/feathernotes/fn.h
Examining data/feathernotes-0.5.1/feathernotes/help.h
Examining data/feathernotes-0.5.1/feathernotes/lineedit.cpp
Examining data/feathernotes-0.5.1/feathernotes/lineedit.h
Examining data/feathernotes-0.5.1/feathernotes/main.cpp
Examining data/feathernotes-0.5.1/feathernotes/messagebox.h
Examining data/feathernotes-0.5.1/feathernotes/pref.cpp
Examining data/feathernotes-0.5.1/feathernotes/pref.h
Examining data/feathernotes-0.5.1/feathernotes/settings.h
Examining data/feathernotes-0.5.1/feathernotes/simplecrypt.cpp
Examining data/feathernotes-0.5.1/feathernotes/simplecrypt.h
Examining data/feathernotes-0.5.1/feathernotes/spinbox.h
Examining data/feathernotes-0.5.1/feathernotes/svgicons.cpp
Examining data/feathernotes-0.5.1/feathernotes/svgicons.h
Examining data/feathernotes-0.5.1/feathernotes/textedit.cpp
Examining data/feathernotes-0.5.1/feathernotes/textedit.h
Examining data/feathernotes-0.5.1/feathernotes/treeview.h
Examining data/feathernotes-0.5.1/feathernotes/vscrollbar.cpp
Examining data/feathernotes-0.5.1/feathernotes/vscrollbar.h
Examining data/feathernotes-0.5.1/feathernotes/x11.cpp
Examining data/feathernotes-0.5.1/feathernotes/x11.h

FINAL RESULTS:

data/feathernotes-0.5.1/feathernotes/main.cpp:71:33:  [4] (shell) system:
  This causes a new program to execute and is difficult to use safely
  (CWE-78). try using a library call that implements the same functionality
  if available.
    QStringList langs (QLocale::system().uiLanguages());
data/feathernotes-0.5.1/feathernotes/fn.cpp:988:18:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
        if (file.open (QIODevice::ReadOnly))
data/feathernotes-0.5.1/feathernotes/fn.cpp:1377:24:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
        if (outputFile.open (QIODevice::WriteOnly))
data/feathernotes-0.5.1/feathernotes/fn.cpp:1403:24:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
        if (outputFile.open (QFile::WriteOnly))
data/feathernotes-0.5.1/feathernotes/fn.cpp:2399:18:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
        if (file.open (QIODevice::ReadOnly))
data/feathernotes-0.5.1/feathernotes/fn.cpp:3561:15:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
    if (!file.open (QIODevice::ReadOnly))
data/feathernotes-0.5.1/feathernotes/svgicons.cpp:69:23:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
                if (f.open (QIODevice::ReadOnly))
data/feathernotes-0.5.1/feathernotes/textedit.cpp:703:20:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
            buffer.open (QIODevice::WriteOnly);

ANALYSIS SUMMARY:

Hits = 8
Lines analyzed = 10530 in approximately 0.27 seconds (38616 lines/second)
Physical Source Lines of Code (SLOC) = 8381
Hits@level = [0]   0 [1]   0 [2]   7 [3]   0 [4]   1 [5]   0
Hits@level+ = [0+]   8 [1+]   8 [2+]   8 [3+]   1 [4+]   1 [5+]   0
Hits/KSLOC@level+ = [0+] 0.95454 [1+] 0.95454 [2+] 0.95454 [3+] 0.119318 [4+] 0.119318 [5+]   0
Dot directories skipped = 1 (--followdotdir overrides)
Minimum risk level = 1
Not every hit is necessarily a security vulnerability.
There may be other security vulnerabilities; review your code!
See 'Secure Programming HOWTO'
(https://dwheeler.com/secure-programs) for more information.