Flawfinder version 2.0.10, (C) 2001-2019 David A. Wheeler. Number of rules (primarily dangerous function names) in C/C++ ruleset: 223 Examining data/glpeces-5.2/scr/creaconcurs.cpp Examining data/glpeces-5.2/scr/comprovafigures.cpp Examining data/glpeces-5.2/scr/rellotge.cpp Examining data/glpeces-5.2/scr/peca.cpp Examining data/glpeces-5.2/scr/conjuntpeces.cpp Examining data/glpeces-5.2/scr/funcions.h Examining data/glpeces-5.2/scr/rellotge.h Examining data/glpeces-5.2/scr/desafigura.cpp Examining data/glpeces-5.2/scr/peca.h Examining data/glpeces-5.2/scr/frmPrincipal.h Examining data/glpeces-5.2/scr/main.cpp Examining data/glpeces-5.2/scr/configuracio.h Examining data/glpeces-5.2/scr/constants.h Examining data/glpeces-5.2/scr/comprovafigures.h Examining data/glpeces-5.2/scr/creaconcurs.h Examining data/glpeces-5.2/scr/funcions.cpp Examining data/glpeces-5.2/scr/configuracio.cpp Examining data/glpeces-5.2/scr/desafigura.h Examining data/glpeces-5.2/scr/conjuntpeces.h Examining data/glpeces-5.2/scr/ui_frmDesaFigura.h Examining data/glpeces-5.2/scr/frmPrincipal.cpp FINAL RESULTS: data/glpeces-5.2/scr/configuracio.cpp:105:53: [4] (shell) system: This causes a new program to execute and is difficult to use safely (CWE-78). try using a library call that implements the same functionality if available. return configArxiu->value("joc/idioma",QLocale::system().name().mid(0,2)).toString(); data/glpeces-5.2/scr/frmPrincipal.cpp:1003:79: [4] (shell) system: This causes a new program to execute and is difficult to use safely (CWE-78). try using a library call that implements the same functionality if available. QString locale =configuracioJoc->configArxiu->value("joc/idioma",QLocale::system().name().mid(0,2)).toString(); data/glpeces-5.2/scr/comprovafigures.cpp:255:16: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). arxiuFigures.open(QIODevice::ReadOnly | QIODevice::Text); data/glpeces-5.2/scr/comprovafigures.cpp:960:22: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!arxiu.open(QIODevice::WriteOnly)){ data/glpeces-5.2/scr/comprovafigures.cpp:1342:24: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!arxiu.open(QIODevice::WriteOnly)){ data/glpeces-5.2/scr/comprovafigures.cpp:1459:13: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (arxiu.open(QIODevice::ReadOnly)){ data/glpeces-5.2/scr/comprovafigures.cpp:1486:14: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). arxiuFinal.open(QIODevice::Append); data/glpeces-5.2/scr/comprovafigures.cpp:1490:13: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (arxiu.open(QIODevice::ReadOnly)){ data/glpeces-5.2/scr/creaconcurs.cpp:162:16: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). arxiuFigures.open(QIODevice::ReadOnly | QIODevice::Text); data/glpeces-5.2/scr/creaconcurs.cpp:400:18: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!arxiu.open(QIODevice::WriteOnly)){ data/glpeces-5.2/scr/desafigura.cpp:64:16: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!arxiu.open(QIODevice::Append)){ data/glpeces-5.2/scr/frmPrincipal.cpp:879:23: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!arxiuFigures.open(QIODevice::ReadOnly | QIODevice::Text)){ data/glpeces-5.2/scr/frmPrincipal.cpp:1325:16: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (arxiu.open(QFile::ReadOnly | QFile::Text)){ data/glpeces-5.2/scr/frmPrincipal.cpp:1348:16: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (arxiu.open(QFile::WriteOnly | QFile::Text)){ data/glpeces-5.2/scr/frmPrincipal.cpp:2097:19: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (arxiuData.open(QIODevice::ReadOnly | QIODevice::Text)){ data/glpeces-5.2/scr/frmPrincipal.cpp:3025:13: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (arxiu.open(QIODevice::ReadOnly)){ data/glpeces-5.2/scr/frmPrincipal.cpp:3369:16: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!arxiu.open(QIODevice::Append)){ data/glpeces-5.2/scr/frmPrincipal.cpp:3431:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (arxiu.open(QIODevice::Append)){ data/glpeces-5.2/scr/frmPrincipal.cpp:3504:16: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!arxiu.open(QIODevice::ReadOnly)){ data/glpeces-5.2/scr/frmPrincipal.cpp:3990:16: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!arxiu.open(QIODevice::WriteOnly)){return;} data/glpeces-5.2/scr/frmPrincipal.cpp:4050:17: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!arxiuIndex.open(QIODevice::WriteOnly)){ data/glpeces-5.2/scr/frmPrincipal.cpp:4141:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (arxiu.open(QIODevice::WriteOnly)){ data/glpeces-5.2/scr/funcions.cpp:180:19: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (arxiuData.open(QIODevice::ReadOnly | QIODevice::Text)){ data/glpeces-5.2/scr/funcions.cpp:198:19: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (arxiuData.open(QIODevice::ReadOnly | QIODevice::Text)){ ANALYSIS SUMMARY: Hits = 24 Lines analyzed = 12374 in approximately 1.92 seconds (6442 lines/second) Physical Source Lines of Code (SLOC) = 6824 Hits@level = [0] 0 [1] 0 [2] 22 [3] 0 [4] 2 [5] 0 Hits@level+ = [0+] 24 [1+] 24 [2+] 24 [3+] 2 [4+] 2 [5+] 0 Hits/KSLOC@level+ = [0+] 3.517 [1+] 3.517 [2+] 3.517 [3+] 0.293083 [4+] 0.293083 [5+] 0 Dot directories skipped = 1 (--followdotdir overrides) Minimum risk level = 1 Not every hit is necessarily a security vulnerability. There may be other security vulnerabilities; review your code! See 'Secure Programming HOWTO' (https://dwheeler.com/secure-programs) for more information.