Flawfinder version 2.0.10, (C) 2001-2019 David A. Wheeler.
Number of rules (primarily dangerous function names) in C/C++ ruleset: 223
Examining data/mosquitto-1.6.12/examples/mysql_log/mysql_log.c
Examining data/mosquitto-1.6.12/examples/subscribe_simple/single.c
Examining data/mosquitto-1.6.12/examples/subscribe_simple/callback.c
Examining data/mosquitto-1.6.12/examples/subscribe_simple/multiple.c
Examining data/mosquitto-1.6.12/examples/temperature_conversion/main.cpp
Examining data/mosquitto-1.6.12/examples/temperature_conversion/temperature_conversion.cpp
Examining data/mosquitto-1.6.12/examples/temperature_conversion/temperature_conversion.h
Examining data/mosquitto-1.6.12/src/mosquitto_broker_internal.h
Examining data/mosquitto-1.6.12/src/security_default.c
Examining data/mosquitto-1.6.12/src/handle_subscribe.c
Examining data/mosquitto-1.6.12/src/handle_connack.c
Examining data/mosquitto-1.6.12/src/plugin_defer.c
Examining data/mosquitto-1.6.12/src/handle_disconnect.c
Examining data/mosquitto-1.6.12/src/session_expiry.c
Examining data/mosquitto-1.6.12/src/context.c
Examining data/mosquitto-1.6.12/src/handle_connect.c
Examining data/mosquitto-1.6.12/src/security.c
Examining data/mosquitto-1.6.12/src/database.c
Examining data/mosquitto-1.6.12/src/send_auth.c
Examining data/mosquitto-1.6.12/src/persist_write.c
Examining data/mosquitto-1.6.12/src/lib_load.h
Examining data/mosquitto-1.6.12/src/persist_read_v234.c
Examining data/mosquitto-1.6.12/src/plugin_debug.c
Examining data/mosquitto-1.6.12/src/send_connack.c
Examining data/mosquitto-1.6.12/src/conf.c
Examining data/mosquitto-1.6.12/src/send_unsuback.c
Examining data/mosquitto-1.6.12/src/websockets.c
Examining data/mosquitto-1.6.12/src/property_broker.c
Examining data/mosquitto-1.6.12/src/plugin.c
Examining data/mosquitto-1.6.12/src/persist_read_v5.c
Examining data/mosquitto-1.6.12/src/persist_write_v5.c
Examining data/mosquitto-1.6.12/src/sys_tree.h
Examining data/mosquitto-1.6.12/src/handle_auth.c
Examining data/mosquitto-1.6.12/src/handle_unsubscribe.c
Examining data/mosquitto-1.6.12/src/will_delay.c
Examining data/mosquitto-1.6.12/src/conf_includedir.c
Examining data/mosquitto-1.6.12/src/deps/uthash.h
Examining data/mosquitto-1.6.12/src/deps/utlist.h
Examining data/mosquitto-1.6.12/src/signals.c
Examining data/mosquitto-1.6.12/src/mosquitto_broker.h
Examining data/mosquitto-1.6.12/src/subs.c
Examining data/mosquitto-1.6.12/src/persist_read.c
Examining data/mosquitto-1.6.12/src/bridge.c
Examining data/mosquitto-1.6.12/src/send_suback.c
Examining data/mosquitto-1.6.12/src/read_handle.c
Examining data/mosquitto-1.6.12/src/service.c
Examining data/mosquitto-1.6.12/src/db_dump/stubs.c
Examining data/mosquitto-1.6.12/src/db_dump/db_dump.c
Examining data/mosquitto-1.6.12/src/db_dump/db_dump.h
Examining data/mosquitto-1.6.12/src/db_dump/print.c
Examining data/mosquitto-1.6.12/src/loop.c
Examining data/mosquitto-1.6.12/src/mosquitto_plugin.h
Examining data/mosquitto-1.6.12/src/mosquitto.c
Examining data/mosquitto-1.6.12/src/sys_tree.c
Examining data/mosquitto-1.6.12/src/logging.c
Examining data/mosquitto-1.6.12/src/handle_publish.c
Examining data/mosquitto-1.6.12/src/persist.h
Examining data/mosquitto-1.6.12/src/net.c
Examining data/mosquitto-1.6.12/src/uhpa.h
Examining data/mosquitto-1.6.12/src/mosquitto_passwd.c
Examining data/mosquitto-1.6.12/lib/socks_mosq.h
Examining data/mosquitto-1.6.12/lib/actions.c
Examining data/mosquitto-1.6.12/lib/handle_connack.c
Examining data/mosquitto-1.6.12/lib/handle_disconnect.c
Examining data/mosquitto-1.6.12/lib/handle_pubackcomp.c
Examining data/mosquitto-1.6.12/lib/socks_mosq.c
Examining data/mosquitto-1.6.12/lib/tls_mosq.c
Examining data/mosquitto-1.6.12/lib/will_mosq.h
Examining data/mosquitto-1.6.12/lib/handle_suback.c
Examining data/mosquitto-1.6.12/lib/util_mosq.h
Examining data/mosquitto-1.6.12/lib/misc_mosq.h
Examining data/mosquitto-1.6.12/lib/misc_mosq.c
Examining data/mosquitto-1.6.12/lib/will_mosq.c
Examining data/mosquitto-1.6.12/lib/logging_mosq.c
Examining data/mosquitto-1.6.12/lib/dummypthread.h
Examining data/mosquitto-1.6.12/lib/handle_ping.c
Examining data/mosquitto-1.6.12/lib/util_mosq.c
Examining data/mosquitto-1.6.12/lib/send_connect.c
Examining data/mosquitto-1.6.12/lib/handle_pubrel.c
Examining data/mosquitto-1.6.12/lib/time_mosq.h
Examining data/mosquitto-1.6.12/lib/send_mosq.c
Examining data/mosquitto-1.6.12/lib/memory_mosq.c
Examining data/mosquitto-1.6.12/lib/send_publish.c
Examining data/mosquitto-1.6.12/lib/logging_mosq.h
Examining data/mosquitto-1.6.12/lib/handle_auth.c
Examining data/mosquitto-1.6.12/lib/packet_mosq.h
Examining data/mosquitto-1.6.12/lib/net_mosq_ocsp.c
Examining data/mosquitto-1.6.12/lib/mosquitto.h
Examining data/mosquitto-1.6.12/lib/send_subscribe.c
Examining data/mosquitto-1.6.12/lib/net_mosq.c
Examining data/mosquitto-1.6.12/lib/messages_mosq.h
Examining data/mosquitto-1.6.12/lib/send_unsubscribe.c
Examining data/mosquitto-1.6.12/lib/alias_mosq.c
Examining data/mosquitto-1.6.12/lib/property_mosq.c
Examining data/mosquitto-1.6.12/lib/utf8_mosq.c
Examining data/mosquitto-1.6.12/lib/srv_mosq.c
Examining data/mosquitto-1.6.12/lib/util_topic.c
Examining data/mosquitto-1.6.12/lib/mosquitto_internal.h
Examining data/mosquitto-1.6.12/lib/time_mosq.c
Examining data/mosquitto-1.6.12/lib/thread_mosq.c
Examining data/mosquitto-1.6.12/lib/options.c
Examining data/mosquitto-1.6.12/lib/handle_pubrec.c
Examining data/mosquitto-1.6.12/lib/handle_unsuback.c
Examining data/mosquitto-1.6.12/lib/connect.c
Examining data/mosquitto-1.6.12/lib/read_handle.h
Examining data/mosquitto-1.6.12/lib/helpers.c
Examining data/mosquitto-1.6.12/lib/cpp/mosquittopp.cpp
Examining data/mosquitto-1.6.12/lib/cpp/mosquittopp.h
Examining data/mosquitto-1.6.12/lib/net_mosq.h
Examining data/mosquitto-1.6.12/lib/tls_mosq.h
Examining data/mosquitto-1.6.12/lib/property_mosq.h
Examining data/mosquitto-1.6.12/lib/read_handle.c
Examining data/mosquitto-1.6.12/lib/callbacks.c
Examining data/mosquitto-1.6.12/lib/send_disconnect.c
Examining data/mosquitto-1.6.12/lib/loop.c
Examining data/mosquitto-1.6.12/lib/alias_mosq.h
Examining data/mosquitto-1.6.12/lib/mosquitto.c
Examining data/mosquitto-1.6.12/lib/packet_mosq.c
Examining data/mosquitto-1.6.12/lib/send_mosq.h
Examining data/mosquitto-1.6.12/lib/handle_publish.c
Examining data/mosquitto-1.6.12/lib/packet_datatypes.c
Examining data/mosquitto-1.6.12/lib/memory_mosq.h
Examining data/mosquitto-1.6.12/lib/messages_mosq.c
Examining data/mosquitto-1.6.12/lib/mqtt_protocol.h
Examining data/mosquitto-1.6.12/client/sub_client.c
Examining data/mosquitto-1.6.12/client/client_shared.c
Examining data/mosquitto-1.6.12/client/client_shared.h
Examining data/mosquitto-1.6.12/client/client_props.c
Examining data/mosquitto-1.6.12/client/rr_client.c
Examining data/mosquitto-1.6.12/client/pub_client.c
Examining data/mosquitto-1.6.12/client/sub_client_output.c
Examining data/mosquitto-1.6.12/client/pub_shared.c
Examining data/mosquitto-1.6.12/client/pub_shared.h
Examining data/mosquitto-1.6.12/test/random/auth_plugin.c
Examining data/mosquitto-1.6.12/test/old/msgsps_sub.c
Examining data/mosquitto-1.6.12/test/old/msgsps_common.h
Examining data/mosquitto-1.6.12/test/old/msgsps_pub.c
Examining data/mosquitto-1.6.12/test/lib/c/02-unsubscribe-v5.c
Examining data/mosquitto-1.6.12/test/lib/c/03-publish-b2c-qos1-unexpected-puback.c
Examining data/mosquitto-1.6.12/test/lib/c/03-publish-c2b-qos2-len.c
Examining data/mosquitto-1.6.12/test/lib/c/03-publish-b2c-qos2.c
Examining data/mosquitto-1.6.12/test/lib/c/03-publish-c2b-qos2.c
Examining data/mosquitto-1.6.12/test/lib/c/01-keepalive-pingreq.c
Examining data/mosquitto-1.6.12/test/lib/c/03-publish-c2b-qos2-pubrec-error.c
Examining data/mosquitto-1.6.12/test/lib/c/03-publish-c2b-qos1-disconnect.c
Examining data/mosquitto-1.6.12/test/lib/c/02-subscribe-qos1-async2.c
Examining data/mosquitto-1.6.12/test/lib/c/02-unsubscribe.c
Examining data/mosquitto-1.6.12/test/lib/c/01-unpwd-set.c
Examining data/mosquitto-1.6.12/test/lib/c/03-publish-b2c-qos2-len.c
Examining data/mosquitto-1.6.12/test/lib/c/01-no-clean-session.c
Examining data/mosquitto-1.6.12/test/lib/c/03-publish-c2b-qos2-maximum-qos-1.c
Examining data/mosquitto-1.6.12/test/lib/c/03-publish-b2c-qos2-unexpected-pubcomp.c
Examining data/mosquitto-1.6.12/test/lib/c/11-prop-recv-qos0.c
Examining data/mosquitto-1.6.12/test/lib/c/01-con-discon-success.c
Examining data/mosquitto-1.6.12/test/lib/c/11-prop-recv-qos1.c
Examining data/mosquitto-1.6.12/test/lib/c/03-publish-c2b-qos1-len.c
Examining data/mosquitto-1.6.12/test/lib/c/02-subscribe-qos0.c
Examining data/mosquitto-1.6.12/test/lib/c/08-ssl-bad-cacert.c
Examining data/mosquitto-1.6.12/test/lib/c/11-prop-send-content-type.c
Examining data/mosquitto-1.6.12/test/lib/c/08-ssl-fake-cacert.c
Examining data/mosquitto-1.6.12/test/lib/c/03-publish-c2b-qos1-receive-maximum.c
Examining data/mosquitto-1.6.12/test/lib/c/08-ssl-connect-no-auth.c
Examining data/mosquitto-1.6.12/test/lib/c/11-prop-oversize-packet.c
Examining data/mosquitto-1.6.12/test/lib/c/03-publish-c2b-qos2-receive-maximum-1.c
Examining data/mosquitto-1.6.12/test/lib/c/03-request-response-2.c
Examining data/mosquitto-1.6.12/test/lib/c/08-ssl-connect-cert-auth.c
Examining data/mosquitto-1.6.12/test/lib/c/11-prop-recv-qos2.c
Examining data/mosquitto-1.6.12/test/lib/c/03-publish-c2b-qos2-receive-maximum-2.c
Examining data/mosquitto-1.6.12/test/lib/c/04-retain-qos0.c
Examining data/mosquitto-1.6.12/test/lib/c/02-subscribe-qos1-async1.c
Examining data/mosquitto-1.6.12/test/lib/c/03-publish-c2b-qos2-disconnect.c
Examining data/mosquitto-1.6.12/test/lib/c/02-unsubscribe-multiple-v5.c
Examining data/mosquitto-1.6.12/test/lib/c/03-publish-qos0-no-payload.c
Examining data/mosquitto-1.6.12/test/lib/c/03-request-response-1.c
Examining data/mosquitto-1.6.12/test/lib/c/01-will-unpwd-set.c
Examining data/mosquitto-1.6.12/test/lib/c/01-server-keepalive-pingreq.c
Examining data/mosquitto-1.6.12/test/lib/c/02-subscribe-qos1.c
Examining data/mosquitto-1.6.12/test/lib/c/01-will-set.c
Examining data/mosquitto-1.6.12/test/lib/c/03-publish-b2c-qos2-unexpected-pubrel.c
Examining data/mosquitto-1.6.12/test/lib/c/03-publish-b2c-qos1.c
Examining data/mosquitto-1.6.12/test/lib/c/03-publish-c2b-qos2-maximum-qos-0.c
Examining data/mosquitto-1.6.12/test/lib/c/03-publish-qos0.c
Examining data/mosquitto-1.6.12/test/lib/c/09-util-topic-tokenise.c
Examining data/mosquitto-1.6.12/test/lib/c/03-request-response-correlation-1.c
Examining data/mosquitto-1.6.12/test/lib/c/11-prop-send-payload-format.c
Examining data/mosquitto-1.6.12/test/lib/c/02-subscribe-qos2.c
Examining data/mosquitto-1.6.12/test/lib/c/08-ssl-connect-cert-auth-enc.c
Examining data/mosquitto-1.6.12/test/lib/cpp/03-publish-b2c-qos2.cpp
Examining data/mosquitto-1.6.12/test/lib/cpp/02-unsubscribe.cpp
Examining data/mosquitto-1.6.12/test/lib/cpp/08-ssl-bad-cacert.cpp
Examining data/mosquitto-1.6.12/test/lib/cpp/08-ssl-fake-cacert.cpp
Examining data/mosquitto-1.6.12/test/lib/cpp/03-publish-qos0-no-payload.cpp
Examining data/mosquitto-1.6.12/test/lib/cpp/03-publish-c2b-qos1-disconnect.cpp
Examining data/mosquitto-1.6.12/test/lib/cpp/09-util-topic-tokenise.cpp
Examining data/mosquitto-1.6.12/test/lib/cpp/08-ssl-connect-cert-auth.cpp
Examining data/mosquitto-1.6.12/test/lib/cpp/08-ssl-connect-cert-auth-enc.cpp
Examining data/mosquitto-1.6.12/test/lib/cpp/02-subscribe-qos2.cpp
Examining data/mosquitto-1.6.12/test/lib/cpp/03-publish-c2b-qos2.cpp
Examining data/mosquitto-1.6.12/test/lib/cpp/01-will-set.cpp
Examining data/mosquitto-1.6.12/test/lib/cpp/03-publish-b2c-qos1.cpp
Examining data/mosquitto-1.6.12/test/lib/cpp/01-con-discon-success.cpp
Examining data/mosquitto-1.6.12/test/lib/cpp/08-ssl-connect-no-auth.cpp
Examining data/mosquitto-1.6.12/test/lib/cpp/03-publish-c2b-qos2-disconnect.cpp
Examining data/mosquitto-1.6.12/test/lib/cpp/01-will-unpwd-set.cpp
Examining data/mosquitto-1.6.12/test/lib/cpp/01-keepalive-pingreq.cpp
Examining data/mosquitto-1.6.12/test/lib/cpp/03-publish-qos0.cpp
Examining data/mosquitto-1.6.12/test/lib/cpp/02-subscribe-qos0.cpp
Examining data/mosquitto-1.6.12/test/lib/cpp/04-retain-qos0.cpp
Examining data/mosquitto-1.6.12/test/lib/cpp/01-no-clean-session.cpp
Examining data/mosquitto-1.6.12/test/lib/cpp/02-subscribe-qos1.cpp
Examining data/mosquitto-1.6.12/test/lib/cpp/01-unpwd-set.cpp
Examining data/mosquitto-1.6.12/test/broker/c/auth_plugin_acl_sub_denied.c
Examining data/mosquitto-1.6.12/test/broker/c/auth_plugin_msg_params.c
Examining data/mosquitto-1.6.12/test/broker/c/auth_plugin_v2.c
Examining data/mosquitto-1.6.12/test/broker/c/mosquitto_plugin_v2.h
Examining data/mosquitto-1.6.12/test/broker/c/auth_plugin.c
Examining data/mosquitto-1.6.12/test/broker/c/auth_plugin_extended_single2.c
Examining data/mosquitto-1.6.12/test/broker/c/auth_plugin_acl.c
Examining data/mosquitto-1.6.12/test/broker/c/08-tls-psk-bridge.c
Examining data/mosquitto-1.6.12/test/broker/c/auth_plugin_extended_single.c
Examining data/mosquitto-1.6.12/test/broker/c/08-tls-psk-pub.c
Examining data/mosquitto-1.6.12/test/broker/c/auth_plugin_pwd.c
Examining data/mosquitto-1.6.12/test/broker/c/auth_plugin_context_params.c
Examining data/mosquitto-1.6.12/test/broker/c/auth_plugin_extended_multiple.c
Examining data/mosquitto-1.6.12/test/unit/persist_write_stubs.c
Examining data/mosquitto-1.6.12/test/unit/utf8.c