Flawfinder version 2.0.10, (C) 2001-2019 David A. Wheeler.
Number of rules (primarily dangerous function names) in C/C++ ruleset: 223
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm.h
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/languagemanager.h
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/buffer.cc
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/completionitem.cc
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/completioncontext.h
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/language.cc
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/completionitem.h
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/style.cc
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/completioninfo.h
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/printcompositor.h
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/undomanager.cc
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/wrap_init.cc
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/completionactivation.cc
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/gutter.h
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/languagemanager.cc
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/completioncontext.cc
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/completion.h
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/stylescheme.h
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/init.cc
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/style.h
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/markattributes.h
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/stylescheme.cc
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/completionprovider.h
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/styleschememanager.cc
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/completionproposal.cc
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/view.h
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/view.cc
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/completionprovider.cc
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/language.h
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/gutterrenderer.cc
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/completionactivation.h
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/gutterrendererpixbuf.cc
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/wrap_init.h
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/completionproposal.h
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/styleschememanager.h
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/completion.cc
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/gutterrendererpixbuf.h
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/markattributes.cc
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/buffer.h
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/completionwords.cc
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/private/view_p.h
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/private/completionproposal_p.h
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/private/gutterrenderertext_p.h
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/private/gutterrenderer_p.h
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/private/languagemanager_p.h
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/private/completion_p.h
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/private/completioninfo_p.h
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/private/completioncontext_p.h
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/private/styleschememanager_p.h
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/private/language_p.h
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/private/gutter_p.h
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/private/undomanager_p.h
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/private/stylescheme_p.h
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/private/printcompositor_p.h
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/private/completionwords_p.h
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/private/gutterrendererpixbuf_p.h
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/private/buffer_p.h
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/private/completionitem_p.h
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/private/style_p.h
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/private/mark_p.h
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/private/completionactivation_p.h
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/private/markattributes_p.h
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/private/completionprovider_p.h
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/completionwords.h
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/init.h
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/printcompositor.cc
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/completioninfo.cc
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/gutterrenderer.h
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/gutterrenderertext.h
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/markup.cc
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/markup.h
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/undomanager.h
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/mark.cc
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/gutterrenderertext.cc
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/mark.h
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/gutter.cc
Examining data/libgtksourceviewmm-3.18.0/tests/search/main.cc
Examining data/libgtksourceviewmm-3.18.0/tests/completion/main.cc
Examining data/libgtksourceviewmm-3.18.0/tests/basic/main.cc
Examining data/libgtksourceviewmm-3.18.0/tests/get_buffer/main.cc
Examining data/libgtksourceviewmm-3.18.0/tests/langs/main.cc
Examining data/libgtksourceviewmm-3.18.0/tests/mime_types/main.cc
Examining data/libgtksourceviewmm-3.18.0/codegen/extradefs/generate_extra_defs_gtksourceview.cc

FINAL RESULTS:

data/libgtksourceviewmm-3.18.0/tests/search/main.cc:346:16:  [2] (buffer) char:
  Statically-sized arrays can be improperly restricted, leading to potential
  overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
  functions that limit length, or ensure that the size is larger than the
  maximum possible length.
        static char buffer[BUFFER_SIZE + 1] ;
data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/completionproposal.cc:383:20:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
  if(base && base->equal)
data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/completionproposal.cc:385:31:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
    gboolean retval = (*base->equal)(self, other);
data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/completionproposal.cc:531:26:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
bool CompletionProposal::equal(const Glib::RefPtr<const CompletionProposal>& other) const
data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/completionproposal.cc:657:20:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
  if(base && base->equal)
data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/completionproposal.cc:659:25:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
    bool retval((*base->equal)(const_cast<GtkSourceCompletionProposal*>(gobj()),const_cast<GtkSourceCompletionProposal*>(Glib::unwrap(other))));
data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/completionproposal.h:229:8:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
  bool equal(const Glib::RefPtr<const CompletionProposal>& other) const;
data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/markup.cc:60:14:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
bool Markup::equal(const Markup& rhs) const
data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/markup.h:116:8:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
  bool equal(const Markup& other) const;
data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/markup.h:150:16:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
  { return lhs.equal(rhs); }
data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/markup.h:164:17:  [1] (buffer) equal:
  Function does not check the second iterator for over-read conditions
  (CWE-126). This function is often discouraged by most C++ coding standards
  in favor of its safer alternatives provided since C++14. Consider using a
  form of this function that checks the second iterator before potentially
  overflowing it.
  { return !lhs.equal(rhs); }
data/libgtksourceviewmm-3.18.0/tests/search/main.cc:350:18:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
            file.read (buffer, BUFFER_SIZE) ;

ANALYSIS SUMMARY:

Hits = 12
Lines analyzed = 20854 in approximately 0.83 seconds (25138 lines/second)
Physical Source Lines of Code (SLOC) = 9997
Hits@level = [0]   0 [1]  11 [2]   1 [3]   0 [4]   0 [5]   0
Hits@level+ = [0+]  12 [1+]  12 [2+]   1 [3+]   0 [4+]   0 [5+]   0
Hits/KSLOC@level+ = [0+] 1.20036 [1+] 1.20036 [2+] 0.10003 [3+]   0 [4+]   0 [5+]   0
Dot directories skipped = 1 (--followdotdir overrides)
Minimum risk level = 1
Not every hit is necessarily a security vulnerability.
There may be other security vulnerabilities; review your code!
See 'Secure Programming HOWTO'
(https://dwheeler.com/secure-programs) for more information.