Flawfinder version 2.0.10, (C) 2001-2019 David A. Wheeler.
Number of rules (primarily dangerous function names) in C/C++ ruleset: 223
Examining data/flexc++-2.08.01/block/open.cc
Examining data/flexc++-2.08.01/block/clear.cc
Examining data/flexc++-2.08.01/block/close.cc
Examining data/flexc++-2.08.01/block/block.h
Examining data/flexc++-2.08.01/block/operatorplusis.cc
Examining data/flexc++-2.08.01/charclass/negate1.cc
Examining data/flexc++-2.08.01/charclass/handleminusandescape.cc
Examining data/flexc++-2.08.01/charclass/charclass3.cc
Examining data/flexc++-2.08.01/charclass/unite.cc
Examining data/flexc++-2.08.01/charclass/negate2.cc
Examining data/flexc++-2.08.01/charclass/ispredefined.cc
Examining data/flexc++-2.08.01/charclass/addrange.cc
Examining data/flexc++-2.08.01/charclass/rangestring.cc
Examining data/flexc++-2.08.01/charclass/append.cc
Examining data/flexc++-2.08.01/charclass/chars.cc
Examining data/flexc++-2.08.01/charclass/predefined.cc
Examining data/flexc++-2.08.01/charclass/charclass1.cc
Examining data/flexc++-2.08.01/charclass/set.cc
Examining data/flexc++-2.08.01/charclass/rangeafterrange.cc
Examining data/flexc++-2.08.01/charclass/charclass.h
Examining data/flexc++-2.08.01/charclass/tagminuses.cc
Examining data/flexc++-2.08.01/charclass/addchars.cc
Examining data/flexc++-2.08.01/charclass/validrange.cc
Examining data/flexc++-2.08.01/charclass/replace.cc
Examining data/flexc++-2.08.01/charclass/predefinedbefore.cc
Examining data/flexc++-2.08.01/charclass/inversedrange.cc
Examining data/flexc++-2.08.01/charclass/operatorinsert.cc
Examining data/flexc++-2.08.01/charclass/str.cc
Examining data/flexc++-2.08.01/charclass/predefinedafter.cc
Examining data/flexc++-2.08.01/charclass/difference.cc
Examining data/flexc++-2.08.01/charclass/driver/driver.cc
Examining data/flexc++-2.08.01/charclass/inspect.cc
Examining data/flexc++-2.08.01/charrange/data.cc
Examining data/flexc++-2.08.01/charrange/negate.cc
Examining data/flexc++-2.08.01/charrange/charrange.h
Examining data/flexc++-2.08.01/charrange/predefined.cc
Examining data/flexc++-2.08.01/dfa/setverbose.cc
Examining data/flexc++-2.08.01/dfa/dfa.h
Examining data/flexc++-2.08.01/dfa/data.cc
Examining data/flexc++-2.08.01/dfa/dfa1.cc
Examining data/flexc++-2.08.01/dfa/keepuniquerows.cc
Examining data/flexc++-2.08.01/dfa/inspectrows.cc
Examining data/flexc++-2.08.01/dfa/operatorinsert.cc
Examining data/flexc++-2.08.01/dfa/shrinkdfa.cc
Examining data/flexc++-2.08.01/dfa/build.cc
Examining data/flexc++-2.08.01/dfarow/transitions.cc
Examining data/flexc++-2.08.01/dfarow/setfinal.cc
Examining data/flexc++-2.08.01/dfarow/tabulatefinals.cc
Examining data/flexc++-2.08.01/dfarow/sametransits.cc
Examining data/flexc++-2.08.01/dfarow/dfarow1.cc
Examining data/flexc++-2.08.01/dfarow/operatorinsert.cc
Examining data/flexc++-2.08.01/dfarow/dfarow.h
Examining data/flexc++-2.08.01/dfarow/tabulatetransitions.cc
Examining data/flexc++-2.08.01/dfarow/operatorequal.cc
Examining data/flexc++-2.08.01/dfarow/transit.cc
Examining data/flexc++-2.08.01/dfarow/tabulate.cc
Examining data/flexc++-2.08.01/dfarow/uniquemap.cc
Examining data/flexc++-2.08.01/dfas/find.cc
Examining data/flexc++-2.08.01/dfas/warnnonviable.cc
Examining data/flexc++-2.08.01/dfas/operatorinsert.cc
Examining data/flexc++-2.08.01/dfas/destructor.cc
Examining data/flexc++-2.08.01/dfas/dfas1.cc
Examining data/flexc++-2.08.01/dfas/removerules.cc
Examining data/flexc++-2.08.01/dfas/dfas.h
Examining data/flexc++-2.08.01/dfas/build.cc
Examining data/flexc++-2.08.01/documentation/manual/input/scanner/main.cc
Examining data/flexc++-2.08.01/documentation/manual/input/scanner/minimain.cc
Examining data/flexc++-2.08.01/documentation/manual/intro/demos/mainforsimplelexer.cc
Examining data/flexc++-2.08.01/documentation/manual/intro/demos/mainforoutputtinglexer.cc
Examining data/flexc++-2.08.01/flextypes/flextypes.h
Examining data/flexc++-2.08.01/generator/interactivedecl.cc
Examining data/flexc++-2.08.01/generator/namespaceuse.cc
Examining data/flexc++-2.08.01/generator/inputimplementation.cc
Examining data/flexc++-2.08.01/generator/insert.cc
Examining data/flexc++-2.08.01/generator/construction.cc
Examining data/flexc++-2.08.01/generator/data.cc
Examining data/flexc++-2.08.01/generator/generator.h
Examining data/flexc++-2.08.01/generator/startcondimpl.cc
Examining data/flexc++-2.08.01/generator/scannerconstructors.cc
Examining data/flexc++-2.08.01/generator/baseclassh.cc
Examining data/flexc++-2.08.01/generator/namespaceclose.cc
Examining data/flexc++-2.08.01/generator/startcondenum.cc
Examining data/flexc++-2.08.01/generator/ruleaction.cc
Examining data/flexc++-2.08.01/generator/casecheck.cc
Examining data/flexc++-2.08.01/generator/baseincludes.cc
Examining data/flexc++-2.08.01/generator/baseclassheader.cc
Examining data/flexc++-2.08.01/generator/debugfunctions.cc
Examining data/flexc++-2.08.01/generator/startconddecl.cc
Examining data/flexc++-2.08.01/generator/actions.cc
Examining data/flexc++-2.08.01/generator/debug.cc
Examining data/flexc++-2.08.01/generator/ranges.cc
Examining data/flexc++-2.08.01/generator/interactiveinit.cc
Examining data/flexc++-2.08.01/generator/classhead.cc
Examining data/flexc++-2.08.01/generator/classih.cc
Examining data/flexc++-2.08.01/generator/generator1.cc
Examining data/flexc++-2.08.01/generator/implementationheader.cc
Examining data/flexc++-2.08.01/generator/inlinelexfunction.cc
Examining data/flexc++-2.08.01/generator/filename.cc
Examining data/flexc++-2.08.01/generator/insertsstream.cc
Examining data/flexc++-2.08.01/generator/dfabases.cc
Examining data/flexc++-2.08.01/generator/dfatransitions.cc
Examining data/flexc++-2.08.01/generator/classh.cc
Examining data/flexc++-2.08.01/generator/key.cc
Examining data/flexc++-2.08.01/generator/grep.cc
Examining data/flexc++-2.08.01/generator/namespaceopen.cc
Examining data/flexc++-2.08.01/generator/errexisting.cc
Examining data/flexc++-2.08.01/generator/filter.cc
Examining data/flexc++-2.08.01/generator/lopf.cc
Examining data/flexc++-2.08.01/generator/lop1.cc
Examining data/flexc++-2.08.01/generator/lop3.cc
Examining data/flexc++-2.08.01/generator/conflicts.cc
Examining data/flexc++-2.08.01/generator/outdfabase.cc
Examining data/flexc++-2.08.01/generator/dfa.cc
Examining data/flexc++-2.08.01/generator/lexsource.cc
Examining data/flexc++-2.08.01/generator/inputinterface.cc
Examining data/flexc++-2.08.01/generator/print.cc
Examining data/flexc++-2.08.01/generator/dfarow.cc
Examining data/flexc++-2.08.01/generator/lop4.cc
Examining data/flexc++-2.08.01/generator/startcondinfo.cc
Examining data/flexc++-2.08.01/generator/lexfunctiondecl.cc
Examining data/flexc++-2.08.01/generator/interactivelex.cc
Examining data/flexc++-2.08.01/generator/debugdecl.cc
Examining data/flexc++-2.08.01/generator/getlop.cc
Examining data/flexc++-2.08.01/generator/lop2.cc
Examining data/flexc++-2.08.01/generator/declarations.cc
Examining data/flexc++-2.08.01/generator/lopimplementation.cc
Examining data/flexc++-2.08.01/generator/debugtest.cc
Examining data/flexc++-2.08.01/generator/classheader.cc
Examining data/flexc++-2.08.01/generator/dfarules.cc
Examining data/flexc++-2.08.01/generator/dfas.cc
Examining data/flexc++-2.08.01/interval/range.cc
Examining data/flexc++-2.08.01/interval/interval.h
Examining data/flexc++-2.08.01/interval/exact.cc
Examining data/flexc++-2.08.01/interval/lowerbound.cc
Examining data/flexc++-2.08.01/main.cc
Examining data/flexc++-2.08.01/options/instance.cc
Examining data/flexc++-2.08.01/options/operatorfun1.cc
Examining data/flexc++-2.08.01/options/data.cc
Examining data/flexc++-2.08.01/options/accept.cc
Examining data/flexc++-2.08.01/options/options1.cc
Examining data/flexc++-2.08.01/options/setfilenames.cc
Examining data/flexc++-2.08.01/options/setparserinfo.cc
Examining data/flexc++-2.08.01/options/setnamespaceidentifier.cc
Examining data/flexc++-2.08.01/options/baseclassheadername.cc
Examining data/flexc++-2.08.01/options/setoptionpath.cc
Examining data/flexc++-2.08.01/options/setpathstrings.cc
Examining data/flexc++-2.08.01/options/showfilenames.cc
Examining data/flexc++-2.08.01/options/implementationheadername.cc
Examining data/flexc++-2.08.01/options/setclassname.cc
Examining data/flexc++-2.08.01/options/setaccessorvariables.cc
Examining data/flexc++-2.08.01/options/options.h
Examining data/flexc++-2.08.01/options/operatorfun2.cc
Examining data/flexc++-2.08.01/options/assign.cc
Examining data/flexc++-2.08.01/options/classheadername.cc
Examining data/flexc++-2.08.01/options/setlexfunctionname.cc
Examining data/flexc++-2.08.01/options/textof.cc
Examining data/flexc++-2.08.01/options/setstartconditionname.cc
Examining data/flexc++-2.08.01/parser/parser.h
Examining data/flexc++-2.08.01/parser/parser1.cc
Examining data/flexc++-2.08.01/parser/lex.cc
Examining data/flexc++-2.08.01/parser/rawstring.cc
Examining data/flexc++-2.08.01/parser/error.cc
Examining data/flexc++-2.08.01/parser/data.cc
Examining data/flexc++-2.08.01/parser/assignblock.cc
Examining data/flexc++-2.08.01/parser/parse.cc
Examining data/flexc++-2.08.01/parser/interval.cc
Examining data/flexc++-2.08.01/parser/reset.cc
Examining data/flexc++-2.08.01/parser/eolndollar.cc
Examining data/flexc++-2.08.01/parser/lookahead.cc
Examining data/flexc++-2.08.01/parser/dollar.cc
Examining data/flexc++-2.08.01/parser/boln.cc
Examining data/flexc++-2.08.01/parser/quotes.cc
Examining data/flexc++-2.08.01/parser/addlopstartconditions.cc
Examining data/flexc++-2.08.01/parser/block.cc
Examining data/flexc++-2.08.01/parser/print.cc
Examining data/flexc++-2.08.01/parser/cleanup.cc
Examining data/flexc++-2.08.01/parser/preinclude.h
Examining data/flexc++-2.08.01/parser/addrule.cc
Examining data/flexc++-2.08.01/parser/parserbase.h
Examining data/flexc++-2.08.01/pattern/plus.cc
Examining data/flexc++-2.08.01/pattern/escape.cc
Examining data/flexc++-2.08.01/pattern/duppattern.cc
Examining data/flexc++-2.08.01/pattern/interval.cc
Examining data/flexc++-2.08.01/pattern/copypattern1.cc
Examining data/flexc++-2.08.01/pattern/pattern2.cc
Examining data/flexc++-2.08.01/pattern/alternatives.cc
Examining data/flexc++-2.08.01/pattern/dot.cc
Examining data/flexc++-2.08.01/pattern/pattern3.cc
Examining data/flexc++-2.08.01/pattern/canbeempty.cc
Examining data/flexc++-2.08.01/pattern/join.cc
Examining data/flexc++-2.08.01/pattern/rawtext.cc
Examining data/flexc++-2.08.01/pattern/optrepeatlastpattern.cc
Examining data/flexc++-2.08.01/pattern/characterclass.cc
Examining data/flexc++-2.08.01/pattern/concatenate.cc
Examining data/flexc++-2.08.01/pattern/operatorassign.cc
Examining data/flexc++-2.08.01/pattern/duplicate.cc
Examining data/flexc++-2.08.01/pattern/empty.cc
Examining data/flexc++-2.08.01/pattern/eof.cc
Examining data/flexc++-2.08.01/pattern/quantifier.cc
Examining data/flexc++-2.08.01/pattern/copypattern2.cc
Examining data/flexc++-2.08.01/pattern/questionmark.cc
Examining data/flexc++-2.08.01/pattern/pattern.h
Examining data/flexc++-2.08.01/pattern/optionalpatterns.cc
Examining data/flexc++-2.08.01/pattern/star.cc
Examining data/flexc++-2.08.01/pattern/pattern1.cc
Examining data/flexc++-2.08.01/pattern/jumptoend.cc
Examining data/flexc++-2.08.01/pattern/copy.cc
Examining data/flexc++-2.08.01/ranges/charsettoranges.cc
Examining data/flexc++-2.08.01/ranges/outchar.cc
Examining data/flexc++-2.08.01/ranges/update.cc
Examining data/flexc++-2.08.01/ranges/add3.cc
Examining data/flexc++-2.08.01/ranges/operatorassign2.cc
Examining data/flexc++-2.08.01/ranges/countranges.cc
Examining data/flexc++-2.08.01/ranges/collision.cc
Examining data/flexc++-2.08.01/ranges/reassign.cc
Examining data/flexc++-2.08.01/ranges/ranges2.cc
Examining data/flexc++-2.08.01/ranges/ranges1.cc
Examining data/flexc++-2.08.01/ranges/ranges.h
Examining data/flexc++-2.08.01/ranges/inspectstate.cc
Examining data/flexc++-2.08.01/ranges/finalizestate.cc
Examining data/flexc++-2.08.01/ranges/chcollision.cc
Examining data/flexc++-2.08.01/ranges/subsetcount.cc
Examining data/flexc++-2.08.01/ranges/operatorinsert.cc
Examining data/flexc++-2.08.01/ranges/destructor.cc
Examining data/flexc++-2.08.01/ranges/operatorassign.cc
Examining data/flexc++-2.08.01/ranges/determinesubsets.cc
Examining data/flexc++-2.08.01/ranges/finalizestates.cc
Examining data/flexc++-2.08.01/ranges/ranges3.cc
Examining data/flexc++-2.08.01/ranges/add.cc
Examining data/flexc++-2.08.01/ranges/driver/main.cc
Examining data/flexc++-2.08.01/rule/noaction.cc
Examining data/flexc++-2.08.01/rule/rule1.cc
Examining data/flexc++-2.08.01/rule/setstates.cc
Examining data/flexc++-2.08.01/rule/operatorinsert.cc
Examining data/flexc++-2.08.01/rule/rule.h
Examining data/flexc++-2.08.01/rules/rulefromfinalstate.cc
Examining data/flexc++-2.08.01/rules/setlopblocks.cc
Examining data/flexc++-2.08.01/rules/handleloprule.cc
Examining data/flexc++-2.08.01/rules/addcatchall.cc
Examining data/flexc++-2.08.01/rules/rules1.cc
Examining data/flexc++-2.08.01/rules/handleloprules.cc
Examining data/flexc++-2.08.01/rules/setrule.cc
Examining data/flexc++-2.08.01/rules/handlefixedtailloprule.cc
Examining data/flexc++-2.08.01/rules/operatorinsert.cc
Examining data/flexc++-2.08.01/rules/rules.h
Examining data/flexc++-2.08.01/rules/processcatchallrule.cc
Examining data/flexc++-2.08.01/rules/add.cc
Examining data/flexc++-2.08.01/rules/noactions.cc
Examining data/flexc++-2.08.01/scanner/handleeolncomment.cc
Examining data/flexc++-2.08.01/scanner/lex.cc
Examining data/flexc++-2.08.01/scanner/popsc.cc
Examining data/flexc++-2.08.01/scanner/handlemulti.cc
Examining data/flexc++-2.08.01/scanner/handlecharafterblanks.cc
Examining data/flexc++-2.08.01/scanner/popstream.cc
Examining data/flexc++-2.08.01/scanner/endofrawstring.cc
Examining data/flexc++-2.08.01/scanner/plex.cc
Examining data/flexc++-2.08.01/scanner/insertedcatchall.cc
Examining data/flexc++-2.08.01/scanner/handleopenbracket.cc
Examining data/flexc++-2.08.01/scanner/handlerawstring.cc
Examining data/flexc++-2.08.01/scanner/setlinetags.cc
Examining data/flexc++-2.08.01/scanner/handledquote.cc
Examining data/flexc++-2.08.01/scanner/rawstringcontents.cc
Examining data/flexc++-2.08.01/scanner/switchtoinitial.cc
Examining data/flexc++-2.08.01/scanner/scanner.h
Examining data/flexc++-2.08.01/scanner/pushnameexpansion.cc
Examining data/flexc++-2.08.01/scanner/setcasesensitive.cc
Examining data/flexc++-2.08.01/scanner/tokens.h
Examining data/flexc++-2.08.01/scanner/scanner1.cc
Examining data/flexc++-2.08.01/scanner/handlestdcomment.cc
Examining data/flexc++-2.08.01/scanner/maybeswitchstream.cc
Examining data/flexc++-2.08.01/scanner/adddefinition.cc
Examining data/flexc++-2.08.01/scanner/secondsectiondelimiter.cc
Examining data/flexc++-2.08.01/scanner/scannerbase.h
Examining data/flexc++-2.08.01/scanner/allownullmatches.cc
Examining data/flexc++-2.08.01/scanner/moreinput.cc
Examining data/flexc++-2.08.01/scanner/newdefinition.cc
Examining data/flexc++-2.08.01/scanner/push.cc
Examining data/flexc++-2.08.01/skeletons/flexc++base.h
Examining data/flexc++-2.08.01/skeletons/flexc++.cc
Examining data/flexc++-2.08.01/skeletons/flexc++.h
Examining data/flexc++-2.08.01/startconditions/activate.cc
Examining data/flexc++-2.08.01/startconditions/startconditions1.cc
Examining data/flexc++-2.08.01/startconditions/useall.cc
Examining data/flexc++-2.08.01/startconditions/startconditions.h
Examining data/flexc++-2.08.01/startconditions/define.cc
Examining data/flexc++-2.08.01/startconditions/addsc.cc
Examining data/flexc++-2.08.01/startconditions/add2.cc
Examining data/flexc++-2.08.01/startconditions/operatorinsert.cc
Examining data/flexc++-2.08.01/startconditions/remove.cc
Examining data/flexc++-2.08.01/state/state.h
Examining data/flexc++-2.08.01/state/state4.cc
Examining data/flexc++-2.08.01/state/next2.cc
Examining data/flexc++-2.08.01/state/next1.cc
Examining data/flexc++-2.08.01/state/state1.cc
Examining data/flexc++-2.08.01/state/state3.cc
Examining data/flexc++-2.08.01/state/dup.cc
Examining data/flexc++-2.08.01/state/state2.cc
Examining data/flexc++-2.08.01/state/state7.cc
Examining data/flexc++-2.08.01/state/operatorinsert.cc
Examining data/flexc++-2.08.01/state/contains.cc
Examining data/flexc++-2.08.01/state/state5.cc
Examining data/flexc++-2.08.01/state/state6.cc
Examining data/flexc++-2.08.01/state/state8.cc
Examining data/flexc++-2.08.01/statedata/statedata.h
Examining data/flexc++-2.08.01/statedata/vclone.cc
Examining data/flexc++-2.08.01/statedata/statedata1.cc
Examining data/flexc++-2.08.01/statedata/destructor.cc
Examining data/flexc++-2.08.01/states/next3.cc
Examining data/flexc++-2.08.01/states/collect.cc
Examining data/flexc++-2.08.01/states/states.h
Examining data/flexc++-2.08.01/states/next2.cc
Examining data/flexc++-2.08.01/states/states1.cc
Examining data/flexc++-2.08.01/states/next.cc
Examining data/flexc++-2.08.01/states/operatorinsert.cc
Examining data/flexc++-2.08.01/states/eclosure.cc
Examining data/flexc++-2.08.01/statestring/statestring.h
Examining data/flexc++-2.08.01/statestring/vclone.cc
Examining data/flexc++-2.08.01/statestring/statestring1.cc
Examining data/flexc++-2.08.01/templates/templates.h
Examining data/flexc++-2.08.01/usage.cc
Examining data/flexc++-2.08.01/version.cc
Examining data/flexc++-2.08.01/VERSION.h
FINAL RESULTS:
data/flexc++-2.08.01/block/block.h:30:14: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
void open(size_t lineno, std::string const &filename);
data/flexc++-2.08.01/block/open.cc:3:13: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
void Block::open(size_t lineno, string const &filename)
data/flexc++-2.08.01/generator/baseclassheader.cc:17:16: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
Exception::open(in, d_options.baseclassSkeleton());
data/flexc++-2.08.01/generator/baseclassheader.cc:18:16: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
Exception::open(out, d_options.baseclassHeaderPath());
data/flexc++-2.08.01/generator/classheader.cc:30:16: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
Exception::open(in, d_options.classSkeleton());
data/flexc++-2.08.01/generator/classheader.cc:31:16: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
Exception::open(out, classHeaderPath);
data/flexc++-2.08.01/generator/construction.cc:10:16: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
Exception::open(out, d_options.constructionPath());
data/flexc++-2.08.01/generator/implementationheader.cc:18:16: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
Exception::open(in, d_options.implementationSkeleton());
data/flexc++-2.08.01/generator/implementationheader.cc:19:16: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
Exception::open(out, implementationHeader);
data/flexc++-2.08.01/generator/lexsource.cc:8:16: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
Exception::open(in, d_options.lexSkeleton());
data/flexc++-2.08.01/generator/lexsource.cc:9:16: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
Exception::open(out, d_options.lexSourcePath());
data/flexc++-2.08.01/parser/block.cc:7:13: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
d_block.open(d_scanner.lineNr(), d_scanner.filename());
data/flexc++-2.08.01/parser/block.cc:29:25: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
d_block.open(d_scanner.lineNr(), d_scanner.filename());
data/flexc++-2.08.01/skeletons/flexc++.cc:11:19: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
$insert namespace-open
data/flexc++-2.08.01/skeletons/flexc++.h:6:19: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
$insert namespace-open
data/flexc++-2.08.01/skeletons/flexc++base.h:13:19: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
$insert namespace-open
ANALYSIS SUMMARY:
Hits = 16
Lines analyzed = 16501 in approximately 1.06 seconds (15501 lines/second)
Physical Source Lines of Code (SLOC) = 12609
Hits@level = [0] 0 [1] 0 [2] 16 [3] 0 [4] 0 [5] 0
Hits@level+ = [0+] 16 [1+] 16 [2+] 16 [3+] 0 [4+] 0 [5+] 0
Hits/KSLOC@level+ = [0+] 1.26893 [1+] 1.26893 [2+] 1.26893 [3+] 0 [4+] 0 [5+] 0
Dot directories skipped = 1 (--followdotdir overrides)
Minimum risk level = 1
Not every hit is necessarily a security vulnerability.
There may be other security vulnerabilities; review your code!
See 'Secure Programming HOWTO'
(https://dwheeler.com/secure-programs) for more information.