Flawfinder version 2.0.10, (C) 2001-2019 David A. Wheeler. Number of rules (primarily dangerous function names) in C/C++ ruleset: 223 Examining data/glade-3.38.1/gladeui/glade-accumulators.c Examining data/glade-3.38.1/gladeui/glade-accumulators.h Examining data/glade-3.38.1/gladeui/glade-adaptor-chooser-widget.c Examining data/glade-3.38.1/gladeui/glade-adaptor-chooser-widget.h Examining data/glade-3.38.1/gladeui/glade-adaptor-chooser.c Examining data/glade-3.38.1/gladeui/glade-adaptor-chooser.h Examining data/glade-3.38.1/gladeui/glade-app.c Examining data/glade-3.38.1/gladeui/glade-app.h Examining data/glade-3.38.1/gladeui/glade-base-editor.c Examining data/glade-3.38.1/gladeui/glade-base-editor.h Examining data/glade-3.38.1/gladeui/glade-builtins.c Examining data/glade-3.38.1/gladeui/glade-builtins.h Examining data/glade-3.38.1/gladeui/glade-catalog.c Examining data/glade-3.38.1/gladeui/glade-catalog.h Examining data/glade-3.38.1/gladeui/glade-cell-renderer-icon.c Examining data/glade-3.38.1/gladeui/glade-cell-renderer-icon.h Examining data/glade-3.38.1/gladeui/glade-clipboard.c Examining data/glade-3.38.1/gladeui/glade-clipboard.h Examining data/glade-3.38.1/gladeui/glade-command.c Examining data/glade-3.38.1/gladeui/glade-command.h Examining data/glade-3.38.1/gladeui/glade-cursor.c Examining data/glade-3.38.1/gladeui/glade-cursor.h Examining data/glade-3.38.1/gladeui/glade-debug.c Examining data/glade-3.38.1/gladeui/glade-debug.h Examining data/glade-3.38.1/gladeui/glade-design-layout.c Examining data/glade-3.38.1/gladeui/glade-design-layout.h Examining data/glade-3.38.1/gladeui/glade-design-private.h Examining data/glade-3.38.1/gladeui/glade-design-view.c Examining data/glade-3.38.1/gladeui/glade-design-view.h Examining data/glade-3.38.1/gladeui/glade-displayable-values.c Examining data/glade-3.38.1/gladeui/glade-displayable-values.h Examining data/glade-3.38.1/gladeui/glade-dnd.c Examining data/glade-3.38.1/gladeui/glade-dnd.h Examining data/glade-3.38.1/gladeui/glade-drag.c Examining data/glade-3.38.1/gladeui/glade-drag.h Examining data/glade-3.38.1/gladeui/glade-editable.c Examining data/glade-3.38.1/gladeui/glade-editable.h Examining data/glade-3.38.1/gladeui/glade-editor-property.c Examining data/glade-3.38.1/gladeui/glade-editor-property.h Examining data/glade-3.38.1/gladeui/glade-editor-skeleton.c Examining data/glade-3.38.1/gladeui/glade-editor-skeleton.h Examining data/glade-3.38.1/gladeui/glade-editor-table.c Examining data/glade-3.38.1/gladeui/glade-editor-table.h Examining data/glade-3.38.1/gladeui/glade-editor.c Examining data/glade-3.38.1/gladeui/glade-editor.h Examining data/glade-3.38.1/gladeui/glade-id-allocator.c Examining data/glade-3.38.1/gladeui/glade-id-allocator.h Examining data/glade-3.38.1/gladeui/glade-inspector.c Examining data/glade-3.38.1/gladeui/glade-inspector.h Examining data/glade-3.38.1/gladeui/glade-name-context.c Examining data/glade-3.38.1/gladeui/glade-name-context.h Examining data/glade-3.38.1/gladeui/glade-named-icon-chooser-dialog.c Examining data/glade-3.38.1/gladeui/glade-named-icon-chooser-dialog.h Examining data/glade-3.38.1/gladeui/glade-object-stub.c Examining data/glade-3.38.1/gladeui/glade-object-stub.h Examining data/glade-3.38.1/gladeui/glade-palette.c Examining data/glade-3.38.1/gladeui/glade-palette.h Examining data/glade-3.38.1/gladeui/glade-path.h Examining data/glade-3.38.1/gladeui/glade-placeholder.c Examining data/glade-3.38.1/gladeui/glade-placeholder.h Examining data/glade-3.38.1/gladeui/glade-popup.c Examining data/glade-3.38.1/gladeui/glade-popup.h Examining data/glade-3.38.1/gladeui/glade-preview-template.c Examining data/glade-3.38.1/gladeui/glade-preview-template.h Examining data/glade-3.38.1/gladeui/glade-preview-tokens.h Examining data/glade-3.38.1/gladeui/glade-preview.c Examining data/glade-3.38.1/gladeui/glade-preview.h Examining data/glade-3.38.1/gladeui/glade-previewer-main.c Examining data/glade-3.38.1/gladeui/glade-previewer.c Examining data/glade-3.38.1/gladeui/glade-previewer.h Examining data/glade-3.38.1/gladeui/glade-private.h Examining data/glade-3.38.1/gladeui/glade-project-properties.c Examining data/glade-3.38.1/gladeui/glade-project-properties.h Examining data/glade-3.38.1/gladeui/glade-project.c Examining data/glade-3.38.1/gladeui/glade-project.h Examining data/glade-3.38.1/gladeui/glade-property-def.c Examining data/glade-3.38.1/gladeui/glade-property-def.h Examining data/glade-3.38.1/gladeui/glade-property-label.c Examining data/glade-3.38.1/gladeui/glade-property-label.h Examining data/glade-3.38.1/gladeui/glade-property-shell.c Examining data/glade-3.38.1/gladeui/glade-property-shell.h Examining data/glade-3.38.1/gladeui/glade-property.c Examining data/glade-3.38.1/gladeui/glade-property.h Examining data/glade-3.38.1/gladeui/glade-signal-def.c Examining data/glade-3.38.1/gladeui/glade-signal-def.h Examining data/glade-3.38.1/gladeui/glade-signal-editor.c Examining data/glade-3.38.1/gladeui/glade-signal-editor.h Examining data/glade-3.38.1/gladeui/glade-signal-model.c Examining data/glade-3.38.1/gladeui/glade-signal-model.h Examining data/glade-3.38.1/gladeui/glade-signal.c Examining data/glade-3.38.1/gladeui/glade-signal.h Examining data/glade-3.38.1/gladeui/glade-template.c Examining data/glade-3.38.1/gladeui/glade-tsort.c Examining data/glade-3.38.1/gladeui/glade-tsort.h Examining data/glade-3.38.1/gladeui/glade-utils.c Examining data/glade-3.38.1/gladeui/glade-utils.h Examining data/glade-3.38.1/gladeui/glade-widget-action.c Examining data/glade-3.38.1/gladeui/glade-widget-action.h Examining data/glade-3.38.1/gladeui/glade-widget-adaptor.c Examining data/glade-3.38.1/gladeui/glade-widget-adaptor.h Examining data/glade-3.38.1/gladeui/glade-widget.c Examining data/glade-3.38.1/gladeui/glade-widget.h Examining data/glade-3.38.1/gladeui/glade-xml-utils.c Examining data/glade-3.38.1/gladeui/glade-xml-utils.h Examining data/glade-3.38.1/gladeui/glade.h Examining data/glade-3.38.1/gladeui/icon-naming-spec.c Examining data/glade-3.38.1/plugins/gjs/glade-gjs.c Examining data/glade-3.38.1/plugins/gladeui/glade-glade-editor-skeleton.c Examining data/glade-3.38.1/plugins/gladeui/glade-glade-property-shell.c Examining data/glade-3.38.1/plugins/gtk+/glade-about-dialog-editor.c Examining data/glade-3.38.1/plugins/gtk+/glade-about-dialog-editor.h Examining data/glade-3.38.1/plugins/gtk+/glade-accels.c Examining data/glade-3.38.1/plugins/gtk+/glade-accels.h Examining data/glade-3.38.1/plugins/gtk+/glade-action-bar-editor.c Examining data/glade-3.38.1/plugins/gtk+/glade-action-bar-editor.h Examining data/glade-3.38.1/plugins/gtk+/glade-action-editor.c Examining data/glade-3.38.1/plugins/gtk+/glade-action-editor.h Examining data/glade-3.38.1/plugins/gtk+/glade-activatable-editor.c Examining data/glade-3.38.1/plugins/gtk+/glade-activatable-editor.h Examining data/glade-3.38.1/plugins/gtk+/glade-app-chooser-button-editor.c Examining data/glade-3.38.1/plugins/gtk+/glade-app-chooser-button-editor.h Examining data/glade-3.38.1/plugins/gtk+/glade-app-chooser-widget-editor.c Examining data/glade-3.38.1/plugins/gtk+/glade-app-chooser-widget-editor.h Examining data/glade-3.38.1/plugins/gtk+/glade-arrow-editor.c Examining data/glade-3.38.1/plugins/gtk+/glade-arrow-editor.h Examining data/glade-3.38.1/plugins/gtk+/glade-attributes.c Examining data/glade-3.38.1/plugins/gtk+/glade-attributes.h Examining data/glade-3.38.1/plugins/gtk+/glade-box-editor.c Examining data/glade-3.38.1/plugins/gtk+/glade-box-editor.h Examining data/glade-3.38.1/plugins/gtk+/glade-button-editor.c Examining data/glade-3.38.1/plugins/gtk+/glade-button-editor.h Examining data/glade-3.38.1/plugins/gtk+/glade-cell-renderer-editor.c Examining data/glade-3.38.1/plugins/gtk+/glade-cell-renderer-editor.h Examining data/glade-3.38.1/plugins/gtk+/glade-column-types.c Examining data/glade-3.38.1/plugins/gtk+/glade-column-types.h Examining data/glade-3.38.1/plugins/gtk+/glade-combo-box-editor.c Examining data/glade-3.38.1/plugins/gtk+/glade-combo-box-editor.h Examining data/glade-3.38.1/plugins/gtk+/glade-combo-box-text-editor.c Examining data/glade-3.38.1/plugins/gtk+/glade-combo-box-text-editor.h Examining data/glade-3.38.1/plugins/gtk+/glade-entry-editor.c Examining data/glade-3.38.1/plugins/gtk+/glade-entry-editor.h Examining data/glade-3.38.1/plugins/gtk+/glade-eprop-enum-int.c Examining data/glade-3.38.1/plugins/gtk+/glade-eprop-enum-int.h Examining data/glade-3.38.1/plugins/gtk+/glade-file-chooser-button-editor.c Examining data/glade-3.38.1/plugins/gtk+/glade-file-chooser-button-editor.h Examining data/glade-3.38.1/plugins/gtk+/glade-file-chooser-dialog-editor.c Examining data/glade-3.38.1/plugins/gtk+/glade-file-chooser-dialog-editor.h Examining data/glade-3.38.1/plugins/gtk+/glade-file-chooser-editor.c Examining data/glade-3.38.1/plugins/gtk+/glade-file-chooser-editor.h Examining data/glade-3.38.1/plugins/gtk+/glade-file-chooser-widget-editor.c Examining data/glade-3.38.1/plugins/gtk+/glade-file-chooser-widget-editor.h Examining data/glade-3.38.1/plugins/gtk+/glade-fixed.c Examining data/glade-3.38.1/plugins/gtk+/glade-fixed.h Examining data/glade-3.38.1/plugins/gtk+/glade-font-button-editor.c Examining data/glade-3.38.1/plugins/gtk+/glade-font-button-editor.h Examining data/glade-3.38.1/plugins/gtk+/glade-font-chooser-dialog-editor.c Examining data/glade-3.38.1/plugins/gtk+/glade-font-chooser-dialog-editor.h Examining data/glade-3.38.1/plugins/gtk+/glade-font-chooser-editor.c Examining data/glade-3.38.1/plugins/gtk+/glade-font-chooser-editor.h Examining data/glade-3.38.1/plugins/gtk+/glade-font-chooser-widget-editor.c Examining data/glade-3.38.1/plugins/gtk+/glade-font-chooser-widget-editor.h Examining data/glade-3.38.1/plugins/gtk+/glade-grid-editor.c Examining data/glade-3.38.1/plugins/gtk+/glade-grid-editor.h Examining data/glade-3.38.1/plugins/gtk+/glade-gtk-about-dialog.c Examining data/glade-3.38.1/plugins/gtk+/glade-gtk-action-bar.c Examining data/glade-3.38.1/plugins/gtk+/glade-gtk-action-group.c Examining data/glade-3.38.1/plugins/gtk+/glade-gtk-action-widgets.c Examining data/glade-3.38.1/plugins/gtk+/glade-gtk-action-widgets.h Examining data/glade-3.38.1/plugins/gtk+/glade-gtk-action.c Examining data/glade-3.38.1/plugins/gtk+/glade-gtk-adjustment.c Examining data/glade-3.38.1/plugins/gtk+/glade-gtk-app-chooser-button.c Examining data/glade-3.38.1/plugins/gtk+/glade-gtk-app-chooser-widget.c Examining data/glade-3.38.1/plugins/gtk+/glade-gtk-arrow.c Examining data/glade-3.38.1/plugins/gtk+/glade-gtk-assistant.c Examining data/glade-3.38.1/plugins/gtk+/glade-gtk-bin.c Examining data/glade-3.38.1/plugins/gtk+/glade-gtk-box.c Examining data/glade-3.38.1/plugins/gtk+/glade-gtk-button.c Examining data/glade-3.38.1/plugins/gtk+/glade-gtk-button.h Examining data/glade-3.38.1/plugins/gtk+/glade-gtk-cell-layout.c Examining data/glade-3.38.1/plugins/gtk+/glade-gtk-cell-layout.h Examining data/glade-3.38.1/plugins/gtk+/glade-gtk-cell-renderer.c Examining data/glade-3.38.1/plugins/gtk+/glade-gtk-cell-renderer.h Examining data/glade-3.38.1/plugins/gtk+/glade-gtk-combo-box-text.c Examining data/glade-3.38.1/plugins/gtk+/glade-gtk-combo-box.c Examining data/glade-3.38.1/plugins/gtk+/glade-gtk-container.c Examining data/glade-3.38.1/plugins/gtk+/glade-gtk-dialog.c Examining data/glade-3.38.1/plugins/gtk+/glade-gtk-dialog.h Examining data/glade-3.38.1/plugins/gtk+/glade-gtk-entry-buffer.c Examining data/glade-3.38.1/plugins/gtk+/glade-gtk-entry.c Examining data/glade-3.38.1/plugins/gtk+/glade-gtk-expander.c Examining data/glade-3.38.1/plugins/gtk+/glade-gtk-file-chooser-widget.c Examining data/glade-3.38.1/plugins/gtk+/glade-gtk-fixed-layout.c Examining data/glade-3.38.1/plugins/gtk+/glade-gtk-flow-box.c Examining data/glade-3.38.1/plugins/gtk+/glade-gtk-font-chooser-widget.c Examining data/glade-3.38.1/plugins/gtk+/glade-gtk-frame.c Examining data/glade-3.38.1/plugins/gtk+/glade-gtk-frame.h Examining data/glade-3.38.1/plugins/gtk+/glade-gtk-grid.c Examining data/glade-3.38.1/plugins/gtk+/glade-gtk-header-bar.c Examining data/glade-3.38.1/plugins/gtk+/glade-gtk-icon-factory.c Examining data/glade-3.38.1/plugins/gtk+/glade-gtk-icon-view.c Examining data/glade-3.38.1/plugins/gtk+/glade-gtk-image-menu-item.c Examining data/glade-3.38.1/plugins/gtk+/glade-gtk-image.c Examining data/glade-3.38.1/plugins/gtk+/glade-gtk-image.h Examining data/glade-3.38.1/plugins/gtk+/glade-gtk-info-bar.c Examining data/glade-3.38.1/plugins/gtk+/glade-gtk-label.c Examining data/glade-3.38.1/plugins/gtk+/glade-gtk-level-bar.c Examining data/glade-3.38.1/plugins/gtk+/glade-gtk-list-box.c Examining data/glade-3.38.1/plugins/gtk+/glade-gtk-list-store.c Examining data/glade-3.38.1/plugins/gtk+/glade-gtk-menu-bar.c Examining data/glade-3.38.1/plugins/gtk+/glade-gtk-menu-item.c Examining data/glade-3.38.1/plugins/gtk+/glade-gtk-menu-shell.c Examining data/glade-3.38.1/plugins/gtk+/glade-gtk-menu-shell.h Examining data/glade-3.38.1/plugins/gtk+/glade-gtk-menu-tool-button.c Examining data/glade-3.38.1/plugins/gtk+/glade-gtk-menu.c Examining data/glade-3.38.1/plugins/gtk+/glade-gtk-message-dialog.c Examining data/glade-3.38.1/plugins/gtk+/glade-gtk-model-button.c Examining data/glade-3.38.1/plugins/gtk+/glade-gtk-notebook.c Examining data/glade-3.38.1/plugins/gtk+/glade-gtk-notebook.h Examining data/glade-3.38.1/plugins/gtk+/glade-gtk-overlay.c Examining data/glade-3.38.1/plugins/gtk+/glade-gtk-paned.c Examining data/glade-3.38.1/plugins/gtk+/glade-gtk-popover-menu.c Examining data/glade-3.38.1/plugins/gtk+/glade-gtk-popover.c Examining data/glade-3.38.1/plugins/gtk+/glade-gtk-progress-bar.c Examining data/glade-3.38.1/plugins/gtk+/glade-gtk-radio-button.c Examining data/glade-3.38.1/plugins/gtk+/glade-gtk-radio-menu-item.c Examining data/glade-3.38.1/plugins/gtk+/glade-gtk-recent-chooser-menu.c Examining data/glade-3.38.1/plugins/gtk+/glade-gtk-recent-chooser-widget.c Examining data/glade-3.38.1/plugins/gtk+/glade-gtk-recent-file-filter.c Examining data/glade-3.38.1/plugins/gtk+/glade-gtk-revealer.c Examining data/glade-3.38.1/plugins/gtk+/glade-gtk-scale.c Examining data/glade-3.38.1/plugins/gtk+/glade-gtk-scrollbar.c Examining data/glade-3.38.1/plugins/gtk+/glade-gtk-scrolled-window.c Examining data/glade-3.38.1/plugins/gtk+/glade-gtk-searchbar.c Examining data/glade-3.38.1/plugins/gtk+/glade-gtk-size-group.c Examining data/glade-3.38.1/plugins/gtk+/glade-gtk-spin-button.c Examining data/glade-3.38.1/plugins/gtk+/glade-gtk-stack-switcher.c Examining data/glade-3.38.1/plugins/gtk+/glade-gtk-stack.c Examining data/glade-3.38.1/plugins/gtk+/glade-gtk-switch.c Examining data/glade-3.38.1/plugins/gtk+/glade-gtk-table.c Examining data/glade-3.38.1/plugins/gtk+/glade-gtk-text-buffer.c Examining data/glade-3.38.1/plugins/gtk+/glade-gtk-text-tag-table.c Examining data/glade-3.38.1/plugins/gtk+/glade-gtk-text-view.c Examining data/glade-3.38.1/plugins/gtk+/glade-gtk-tool-button.c Examining data/glade-3.38.1/plugins/gtk+/glade-gtk-tool-item-group.c Examining data/glade-3.38.1/plugins/gtk+/glade-gtk-tool-item.c Examining data/glade-3.38.1/plugins/gtk+/glade-gtk-tool-palette.c Examining data/glade-3.38.1/plugins/gtk+/glade-gtk-toolbar.c Examining data/glade-3.38.1/plugins/gtk+/glade-gtk-tree-view.c Examining data/glade-3.38.1/plugins/gtk+/glade-gtk-tree-view.h Examining data/glade-3.38.1/plugins/gtk+/glade-gtk-viewport.c Examining data/glade-3.38.1/plugins/gtk+/glade-gtk-widget.c Examining data/glade-3.38.1/plugins/gtk+/glade-gtk-window.c Examining data/glade-3.38.1/plugins/gtk+/glade-gtk.c Examining data/glade-3.38.1/plugins/gtk+/glade-gtk.h Examining data/glade-3.38.1/plugins/gtk+/glade-header-bar-editor.c Examining data/glade-3.38.1/plugins/gtk+/glade-header-bar-editor.h Examining data/glade-3.38.1/plugins/gtk+/glade-icon-factory-editor.c Examining data/glade-3.38.1/plugins/gtk+/glade-icon-factory-editor.h Examining data/glade-3.38.1/plugins/gtk+/glade-icon-sources.c Examining data/glade-3.38.1/plugins/gtk+/glade-icon-sources.h Examining data/glade-3.38.1/plugins/gtk+/glade-icon-view-editor.c Examining data/glade-3.38.1/plugins/gtk+/glade-icon-view-editor.h Examining data/glade-3.38.1/plugins/gtk+/glade-image-editor.c Examining data/glade-3.38.1/plugins/gtk+/glade-image-editor.h Examining data/glade-3.38.1/plugins/gtk+/glade-image-item-editor.c Examining data/glade-3.38.1/plugins/gtk+/glade-image-item-editor.h Examining data/glade-3.38.1/plugins/gtk+/glade-label-editor.c Examining data/glade-3.38.1/plugins/gtk+/glade-label-editor.h Examining data/glade-3.38.1/plugins/gtk+/glade-layout-editor.c Examining data/glade-3.38.1/plugins/gtk+/glade-layout-editor.h Examining data/glade-3.38.1/plugins/gtk+/glade-level-bar-editor.c Examining data/glade-3.38.1/plugins/gtk+/glade-level-bar-editor.h Examining data/glade-3.38.1/plugins/gtk+/glade-message-dialog-editor.c Examining data/glade-3.38.1/plugins/gtk+/glade-message-dialog-editor.h Examining data/glade-3.38.1/plugins/gtk+/glade-misc-editor.c Examining data/glade-3.38.1/plugins/gtk+/glade-misc-editor.h Examining data/glade-3.38.1/plugins/gtk+/glade-model-button-editor.c Examining data/glade-3.38.1/plugins/gtk+/glade-model-button-editor.h Examining data/glade-3.38.1/plugins/gtk+/glade-model-data.c Examining data/glade-3.38.1/plugins/gtk+/glade-model-data.h Examining data/glade-3.38.1/plugins/gtk+/glade-notebook-editor.c Examining data/glade-3.38.1/plugins/gtk+/glade-notebook-editor.h Examining data/glade-3.38.1/plugins/gtk+/glade-popover-editor.c Examining data/glade-3.38.1/plugins/gtk+/glade-popover-editor.h Examining data/glade-3.38.1/plugins/gtk+/glade-popover-menu-editor.c Examining data/glade-3.38.1/plugins/gtk+/glade-popover-menu-editor.h Examining data/glade-3.38.1/plugins/gtk+/glade-progress-bar-editor.c Examining data/glade-3.38.1/plugins/gtk+/glade-progress-bar-editor.h Examining data/glade-3.38.1/plugins/gtk+/glade-real-tree-view-editor.c Examining data/glade-3.38.1/plugins/gtk+/glade-real-tree-view-editor.h Examining data/glade-3.38.1/plugins/gtk+/glade-recent-action-editor.c Examining data/glade-3.38.1/plugins/gtk+/glade-recent-action-editor.h Examining data/glade-3.38.1/plugins/gtk+/glade-recent-chooser-dialog-editor.c Examining data/glade-3.38.1/plugins/gtk+/glade-recent-chooser-dialog-editor.h Examining data/glade-3.38.1/plugins/gtk+/glade-recent-chooser-editor.c Examining data/glade-3.38.1/plugins/gtk+/glade-recent-chooser-editor.h Examining data/glade-3.38.1/plugins/gtk+/glade-recent-chooser-menu-editor.c Examining data/glade-3.38.1/plugins/gtk+/glade-recent-chooser-menu-editor.h Examining data/glade-3.38.1/plugins/gtk+/glade-recent-chooser-widget-editor.c Examining data/glade-3.38.1/plugins/gtk+/glade-recent-chooser-widget-editor.h Examining data/glade-3.38.1/plugins/gtk+/glade-scale-button-editor.c Examining data/glade-3.38.1/plugins/gtk+/glade-scale-button-editor.h Examining data/glade-3.38.1/plugins/gtk+/glade-scale-editor.c Examining data/glade-3.38.1/plugins/gtk+/glade-scale-editor.h Examining data/glade-3.38.1/plugins/gtk+/glade-scrollable-editor.c Examining data/glade-3.38.1/plugins/gtk+/glade-scrollable-editor.h Examining data/glade-3.38.1/plugins/gtk+/glade-scrollbar-editor.c Examining data/glade-3.38.1/plugins/gtk+/glade-scrollbar-editor.h Examining data/glade-3.38.1/plugins/gtk+/glade-scrolled-window-editor.c Examining data/glade-3.38.1/plugins/gtk+/glade-scrolled-window-editor.h Examining data/glade-3.38.1/plugins/gtk+/glade-spin-button-editor.c Examining data/glade-3.38.1/plugins/gtk+/glade-spin-button-editor.h Examining data/glade-3.38.1/plugins/gtk+/glade-stack-editor.c Examining data/glade-3.38.1/plugins/gtk+/glade-stack-editor.h Examining data/glade-3.38.1/plugins/gtk+/glade-stack-switcher-editor.c Examining data/glade-3.38.1/plugins/gtk+/glade-stack-switcher-editor.h Examining data/glade-3.38.1/plugins/gtk+/glade-store-editor.c Examining data/glade-3.38.1/plugins/gtk+/glade-store-editor.h Examining data/glade-3.38.1/plugins/gtk+/glade-string-list.c Examining data/glade-3.38.1/plugins/gtk+/glade-string-list.h Examining data/glade-3.38.1/plugins/gtk+/glade-text-view-editor.c Examining data/glade-3.38.1/plugins/gtk+/glade-text-view-editor.h Examining data/glade-3.38.1/plugins/gtk+/glade-tool-button-editor.c Examining data/glade-3.38.1/plugins/gtk+/glade-tool-button-editor.h Examining data/glade-3.38.1/plugins/gtk+/glade-tool-item-group-editor.c Examining data/glade-3.38.1/plugins/gtk+/glade-tool-item-group-editor.h Examining data/glade-3.38.1/plugins/gtk+/glade-tool-palette-editor.c Examining data/glade-3.38.1/plugins/gtk+/glade-tool-palette-editor.h Examining data/glade-3.38.1/plugins/gtk+/glade-treeview-editor.c Examining data/glade-3.38.1/plugins/gtk+/glade-treeview-editor.h Examining data/glade-3.38.1/plugins/gtk+/glade-viewport-editor.c Examining data/glade-3.38.1/plugins/gtk+/glade-viewport-editor.h Examining data/glade-3.38.1/plugins/gtk+/glade-widget-editor.c Examining data/glade-3.38.1/plugins/gtk+/glade-widget-editor.h Examining data/glade-3.38.1/plugins/gtk+/glade-window-editor.c Examining data/glade-3.38.1/plugins/gtk+/glade-window-editor.h Examining data/glade-3.38.1/plugins/python/glade-python.c Examining data/glade-3.38.1/plugins/webkit2gtk/glade-webkit2gtk.c Examining data/glade-3.38.1/src/glade-http.c Examining data/glade-3.38.1/src/glade-http.h Examining data/glade-3.38.1/src/glade-intro.c Examining data/glade-3.38.1/src/glade-intro.h Examining data/glade-3.38.1/src/glade-logo.h Examining data/glade-3.38.1/src/glade-preferences.c Examining data/glade-3.38.1/src/glade-preferences.h Examining data/glade-3.38.1/src/glade-registration.c Examining data/glade-3.38.1/src/glade-registration.h Examining data/glade-3.38.1/src/glade-settings.c Examining data/glade-3.38.1/src/glade-settings.h Examining data/glade-3.38.1/src/glade-window.c Examining data/glade-3.38.1/src/glade-window.h Examining data/glade-3.38.1/src/main.c Examining data/glade-3.38.1/src/workaround.h Examining data/glade-3.38.1/tests/add-child.c Examining data/glade-3.38.1/tests/create-widgets.c Examining data/glade-3.38.1/tests/modules.c Examining data/glade-3.38.1/tests/refcount.c Examining data/glade-3.38.1/tests/toplevel-order.c FINAL RESULTS: data/glade-3.38.1/gladeui/glade-utils.c:1310:3: [4] (buffer) sscanf: The scanf() family's %s operation, without a limit specification, permits buffer overflows (CWE-120, CWE-20). Specify a limit to %s, or use a different input function. sscanf (value, "glade-generated-%s", filename); data/glade-3.38.1/plugins/gtk+/glade-gtk-list-store.c:492:13: [4] (buffer) strcpy: Does not check for buffer overflows when copying to destination [MS-banned] (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy easily misused). strcpy (column_name, buffer); data/glade-3.38.1/gladeui/glade-project-properties.c:1173:27: [3] (buffer) g_get_home_dir: This function is synonymous with 'getenv("HOME")';it returns untrustable input if the environment can beset by an attacker. It can have any content and length, and the same variable can be set more than once (CWE-807, CWE-20). Check environment variables carefully before using them. const gchar *home = g_get_home_dir (); data/glade-3.38.1/gladeui/glade-utils.c:1831:19: [3] (buffer) g_get_home_dir: This function is synonymous with 'getenv("HOME")';it returns untrustable input if the environment can beset by an attacker. It can have any content and length, and the same variable can be set more than once (CWE-807, CWE-20). Check environment variables carefully before using them. tmp = (gchar *) g_get_home_dir (); data/glade-3.38.1/src/glade-window.c:161:35: [3] (buffer) g_get_home_dir: This function is synonymous with 'getenv("HOME")';it returns untrustable input if the environment can beset by an attacker. It can have any content and length, and the same variable can be set more than once (CWE-807, CWE-20). Check environment variables carefully before using them. const gchar *home = g_get_home_dir (); data/glade-3.38.1/gladeui/glade-id-allocator.c:75:16: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. static const char table[16] = { data/glade-3.38.1/gladeui/glade-property-def.c:267:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy (clone, property_def, sizeof (GladePropertyDef)); data/glade-3.38.1/gladeui/glade-signal-def.c:110:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy (clone, signal_def, sizeof (GladeSignalDef)); data/glade-3.38.1/gladeui/glade-utils.c:614:11: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy (tmp_underscored, last_tmp, tmp - last_tmp + 1); data/glade-3.38.1/gladeui/glade-utils.c:621:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy (tmp_underscored, last_tmp, tmp - last_tmp + 1); data/glade-3.38.1/plugins/gtk+/glade-gtk-adjustment.c:56:3: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char str[G_ASCII_DTOSTR_BUF_SIZE]; data/glade-3.38.1/plugins/gtk+/glade-gtk-grid.c:952:11: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy (&grid_cur_attach, &configure, sizeof (GladeGridChild)); data/glade-3.38.1/plugins/gtk+/glade-gtk-grid.c:970:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy (&grid_cur_attach, &grid_edit, sizeof (GladeGridChild)); data/glade-3.38.1/src/glade-http.c:219:36: [2] (integer) atoi: Unless checked, the resulting number can exceed the expected range (CWE-190). If source untrusted, check both minimum and maximum, even if the input had no minus sign (large numbers can roll over into negative number; consider saving to an unsigned value if that is intended). priv->content_length = atoi (priv->content_length_value); data/glade-3.38.1/src/main.c:113:1: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). open (GApplication *application, data/glade-3.38.1/src/main.c:194:46: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). g_signal_connect (app, "open", G_CALLBACK (open), NULL); data/glade-3.38.1/gladeui/glade-adaptor-chooser-widget.c:186:66: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). COLUMN_NORMALIZED_NAME_LEN, strlen (normalized_name), data/glade-3.38.1/gladeui/glade-builtins.c:121:9: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). len = strlen (clean_name); data/glade-3.38.1/gladeui/glade-builtins.c:263:9: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). len = strlen (str); data/glade-3.38.1/gladeui/glade-command.c:794:26: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). if (!value_name || strlen (value_name) > MAX_UNDO_MENU_ITEM_VALUE_LEN data/glade-3.38.1/gladeui/glade-inspector.c:270:18: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). gint str1len = strlen (str1); data/glade-3.38.1/gladeui/glade-inspector.c:305:39: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). match = (strncmp (data->text, name, strlen (data->text)) == 0); data/glade-3.38.1/gladeui/glade-inspector.c:377:16: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). length = strlen (str); data/glade-3.38.1/gladeui/glade-inspector.c:501:37: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). priv->completion_text[strlen (priv->completion_text) -1] = '\0'; data/glade-3.38.1/gladeui/glade-name-context.c:87:24: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). number = base_name + strlen (base_name); data/glade-3.38.1/gladeui/glade-named-icon-chooser-dialog.c:192:7: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). if (strlen (gtk_entry_get_text (GTK_ENTRY (priv->entry))) == 0) data/glade-3.38.1/gladeui/glade-named-icon-chooser-dialog.c:907:11: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). if (strlen (gtk_entry_get_text (GTK_ENTRY (priv->entry))) == 0) data/glade-3.38.1/gladeui/glade-preview-template.c:266:11: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). len = strlen (template_data); data/glade-3.38.1/gladeui/glade-preview-tokens.h:5:27: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). #define UPDATE_TOKEN_SIZE strlen (UPDATE_TOKEN) data/glade-3.38.1/gladeui/glade-preview-tokens.h:8:25: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). #define QUIT_TOKEN_SIZE strlen (QUIT_TOKEN) data/glade-3.38.1/gladeui/glade-preview.c:92:44: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). g_io_channel_write_chars (channel, quit, strlen (quit), &size, &error); data/glade-3.38.1/gladeui/glade-preview.c:94:15: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). if (size != strlen (quit) && error != NULL) data/glade-3.38.1/gladeui/glade-preview.c:262:45: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). g_io_channel_write_chars (output, buffer, strlen (buffer), &bytes_written, data/glade-3.38.1/gladeui/glade-preview.c:265:24: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). if (bytes_written != strlen (buffer) && error != NULL) data/glade-3.38.1/gladeui/glade-preview.c:315:46: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). g_io_channel_write_chars (channel, update, strlen (update), &size, &error); data/glade-3.38.1/gladeui/glade-preview.c:317:15: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). if (size != strlen (update) && error != NULL) data/glade-3.38.1/gladeui/glade-preview.c:331:46: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). g_io_channel_write_chars (channel, buffer, strlen (buffer), &bytes_written, data/glade-3.38.1/gladeui/glade-preview.c:334:24: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). if (bytes_written != strlen (buffer) && error != NULL) data/glade-3.38.1/gladeui/glade-project.c:1425:30: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). gchar *start = value + strlen (property); data/glade-3.38.1/gladeui/glade-project.c:1430:30: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). memmove (value, start, strlen (start) + 1); data/glade-3.38.1/gladeui/glade-project.c:1470:11: [1] (buffer) sscanf: It's unclear if the %s limit in the format string is small enough (CWE-120). Check that the limit is sufficiently small, or use a different input function. if (sscanf (requires, "%128s %d.%d", buffer, &maj, &min) == 3) data/glade-3.38.1/gladeui/glade-signal-editor.c:187:15: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). if (strlen (handler)) data/glade-3.38.1/gladeui/glade-signal-editor.c:221:16: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). else if (strlen (handler)) data/glade-3.38.1/gladeui/glade-signal-editor.c:400:17: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). if (detail && strlen (detail) && g_strcmp0 (old_detail, detail)) data/glade-3.38.1/gladeui/glade-signal-editor.c:1168:28: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). visible = warning && strlen (warning); data/glade-3.38.1/gladeui/glade-signal-model.c:598:27: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). if (userdata && strlen (userdata)) data/glade-3.38.1/gladeui/glade-signal-model.c:974:48: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). user_data && strlen (user_data) ? user_data : "(none)", data/glade-3.38.1/gladeui/glade-signal-model.c:981:31: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). strlen (dnd_text)); data/glade-3.38.1/gladeui/glade-utils.c:607:39: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). gchar *underscored_name = g_malloc (strlen (name) * 2 + 1); data/glade-3.38.1/gladeui/glade-utils.c:902:41: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). gchar *tmp = g_strndup (path, strlen(path) - 3); data/glade-3.38.1/gladeui/glade-utils.c:1035:26: [1] (buffer) sscanf: It's unclear if the %s limit in the format string is small enough (CWE-120). Check that the limit is sufficiently small, or use a different input function. if ((cnt = sscanf (ptr, "%15s %d.%d\n", data/glade-3.38.1/gladeui/glade-utils.c:1048:38: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). if (ptr != NULL || strlen (ptr) > 0) data/glade-3.38.1/gladeui/glade-utils.c:1855:45: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). res = g_strdup_printf ("~/%s", path + strlen (home)); data/glade-3.38.1/gladeui/glade-widget-adaptor.c:2657:42: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). if (strncmp (icon_name, "deprecated-", strlen ("deprecated-")) == 0) data/glade-3.38.1/gladeui/glade-widget.c:4098:55: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). else if (strncmp (id, GLADE_UNNAMED_PREFIX, strlen (GLADE_UNNAMED_PREFIX)) == 0) data/glade-3.38.1/plugins/gtk+/glade-gtk-cell-layout.c:272:16: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). attr_len = strlen ("attr-"); data/glade-3.38.1/plugins/gtk+/glade-gtk-cell-renderer.c:74:63: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). if (strncmp (glade_property_def_id (pdef), "use-attr-", strlen ("use-attr-")) == 0) data/glade-3.38.1/plugins/gtk+/glade-gtk-cell-renderer.c:91:54: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). if (strncmp (glade_property_def_id (def), "attr-", strlen ("attr-")) == 0) data/glade-3.38.1/plugins/gtk+/glade-gtk-cell-renderer.c:193:22: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). use_attr_len = strlen ("use-attr-"); data/glade-3.38.1/plugins/gtk+/glade-gtk-cell-renderer.c:194:18: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). attr_len = strlen ("attr-"); data/glade-3.38.1/plugins/gtk+/glade-gtk-cell-renderer.c:221:16: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). attr_len = strlen ("attr-"); data/glade-3.38.1/plugins/gtk+/glade-gtk-cell-renderer.c:286:18: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). attr_len = strlen ("attr-"); data/glade-3.38.1/plugins/gtk+/glade-gtk-cell-renderer.c:287:22: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). use_attr_len = strlen ("use-attr-"); data/glade-3.38.1/plugins/gtk+/glade-gtk-cell-renderer.c:361:16: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). attr_len = strlen ("attr-"); data/glade-3.38.1/plugins/gtk+/glade-gtk-list-store.c:491:15: [1] (buffer) sscanf: It's unclear if the %s limit in the format string is small enough (CWE-120). Check that the limit is sufficiently small, or use a different input function. if (sscanf (comment_str, " column-name %255s", buffer) == 1) data/glade-3.38.1/plugins/gtk+/glade-gtk-menu-shell.c:201:27: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). if (name == NULL || strlen (name) == 0) data/glade-3.38.1/plugins/gtk+/glade-gtk-tool-button.c:100:16: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). if (label && strlen (label) == 0) data/glade-3.38.1/plugins/gtk+/glade-gtk-tool-button.c:115:19: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). if (stock_id && strlen (stock_id) == 0) data/glade-3.38.1/plugins/gtk+/glade-gtk-tool-button.c:132:15: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). if (name && strlen (name) == 0) data/glade-3.38.1/plugins/gtk+/glade-model-data.c:731:11: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). if (strlen (new_text) > 1) ANALYSIS SUMMARY: Hits = 70 Lines analyzed = 112018 in approximately 2.30 seconds (48695 lines/second) Physical Source Lines of Code (SLOC) = 76854 Hits@level = [0] 6 [1] 54 [2] 11 [3] 3 [4] 2 [5] 0 Hits@level+ = [0+] 76 [1+] 70 [2+] 16 [3+] 5 [4+] 2 [5+] 0 Hits/KSLOC@level+ = [0+] 0.988888 [1+] 0.910818 [2+] 0.208187 [3+] 0.0650584 [4+] 0.0260234 [5+] 0 Dot directories skipped = 1 (--followdotdir overrides) Minimum risk level = 1 Not every hit is necessarily a security vulnerability. There may be other security vulnerabilities; review your code! See 'Secure Programming HOWTO' (https://dwheeler.com/secure-programs) for more information.