Flawfinder version 2.0.10, (C) 2001-2019 David A. Wheeler.
Number of rules (primarily dangerous function names) in C/C++ ruleset: 223
Examining data/plasma-framework-5.74.0/autotests/plasmoidpackagetest.cpp
Examining data/plasma-framework-5.74.0/autotests/coronatest.cpp
Examining data/plasma-framework-5.74.0/autotests/pluginloadertest.cpp
Examining data/plasma-framework-5.74.0/autotests/coronatest.h
Examining data/plasma-framework-5.74.0/autotests/dialognativetest.h
Examining data/plasma-framework-5.74.0/autotests/iconitemtest.cpp
Examining data/plasma-framework-5.74.0/autotests/pluginloadertest.h
Examining data/plasma-framework-5.74.0/autotests/sortfiltermodeltest.h
Examining data/plasma-framework-5.74.0/autotests/utils.h
Examining data/plasma-framework-5.74.0/autotests/dialogqmltest.cpp
Examining data/plasma-framework-5.74.0/autotests/configmodeltest.h
Examining data/plasma-framework-5.74.0/autotests/dialogqmltest.h
Examining data/plasma-framework-5.74.0/autotests/framesvgtest.cpp
Examining data/plasma-framework-5.74.0/autotests/iconitemtest.h
Examining data/plasma-framework-5.74.0/autotests/themetest.h
Examining data/plasma-framework-5.74.0/autotests/dialogstatetest.cpp
Examining data/plasma-framework-5.74.0/autotests/configmodeltest.cpp
Examining data/plasma-framework-5.74.0/autotests/dialognativetest.cpp
Examining data/plasma-framework-5.74.0/autotests/themetest.cpp
Examining data/plasma-framework-5.74.0/autotests/framesvgtest.h
Examining data/plasma-framework-5.74.0/autotests/plasmoidpackagetest.h
Examining data/plasma-framework-5.74.0/autotests/dynamictreemodel.cpp
Examining data/plasma-framework-5.74.0/autotests/dialogstatetest.h
Examining data/plasma-framework-5.74.0/autotests/dynamictreemodel.h
Examining data/plasma-framework-5.74.0/autotests/sortfiltermodeltest.cpp
Examining data/plasma-framework-5.74.0/tests/kplugins/plugintest.h
Examining data/plasma-framework-5.74.0/tests/kplugins/main.cpp
Examining data/plasma-framework-5.74.0/tests/kplugins/plugintest.cpp
Examining data/plasma-framework-5.74.0/tests/testengine/testengine.h
Examining data/plasma-framework-5.74.0/tests/testengine/testengine.cpp
Examining data/plasma-framework-5.74.0/tests/dpi/dpitest.h
Examining data/plasma-framework-5.74.0/tests/dpi/main.cpp
Examining data/plasma-framework-5.74.0/tests/dpi/dpitest.cpp
Examining data/plasma-framework-5.74.0/examples/shell/customcorona.h
Examining data/plasma-framework-5.74.0/examples/shell/customcorona.cpp
Examining data/plasma-framework-5.74.0/examples/shell/main.cpp
Examining data/plasma-framework-5.74.0/examples/dataengines/dataEngineTracker/dataenginetracker.cpp
Examining data/plasma-framework-5.74.0/examples/dataengines/dataEngineTracker/dataenginetracker.h
Examining data/plasma-framework-5.74.0/examples/dataengines/sourcesOnRequest/sourcesOnRequest.cpp
Examining data/plasma-framework-5.74.0/examples/dataengines/sourcesOnRequest/sourcesOnRequest.h
Examining data/plasma-framework-5.74.0/examples/dataengines/simpleEngine/simpleEngine.cpp
Examining data/plasma-framework-5.74.0/examples/dataengines/simpleEngine/simpleEngine.h
Examining data/plasma-framework-5.74.0/examples/dataengines/customDataContainers/httpContainer.cpp
Examining data/plasma-framework-5.74.0/examples/dataengines/customDataContainers/customDataContainersEngine.cpp
Examining data/plasma-framework-5.74.0/examples/dataengines/customDataContainers/httpContainer.h
Examining data/plasma-framework-5.74.0/examples/dataengines/customDataContainers/customDataContainersEngine.h
Examining data/plasma-framework-5.74.0/examples/testcontainmentactionsplugin/test.h
Examining data/plasma-framework-5.74.0/examples/testcontainmentactionsplugin/test.cpp
Examining data/plasma-framework-5.74.0/templates/qml-plasmoid-with-qml-extension/plugin/%{APPNAMELC}plugin.cpp
Examining data/plasma-framework-5.74.0/templates/qml-plasmoid-with-qml-extension/plugin/%{APPNAMELC}plugin.h
Examining data/plasma-framework-5.74.0/templates/cpp-plasmoid/src/%{APPNAMELC}.cpp
Examining data/plasma-framework-5.74.0/templates/cpp-plasmoid/src/%{APPNAMELC}.h
Examining data/plasma-framework-5.74.0/templates/plasma-wallpaper-with-qml-extension/plugin/%{APPNAMELC}plugin.cpp
Examining data/plasma-framework-5.74.0/templates/plasma-wallpaper-with-qml-extension/plugin/%{APPNAMELC}plugin.h
Examining data/plasma-framework-5.74.0/src/declarativeimports/calendar/daysmodel.cpp
Examining data/plasma-framework-5.74.0/src/declarativeimports/calendar/calendarplugin.cpp
Examining data/plasma-framework-5.74.0/src/declarativeimports/calendar/daydata.h
Examining data/plasma-framework-5.74.0/src/declarativeimports/calendar/calendar.cpp
Examining data/plasma-framework-5.74.0/src/declarativeimports/calendar/calendardata.cpp
Examining data/plasma-framework-5.74.0/src/declarativeimports/calendar/eventpluginsmanager.h
Examining data/plasma-framework-5.74.0/src/declarativeimports/calendar/calendar.h
Examining data/plasma-framework-5.74.0/src/declarativeimports/calendar/calendardata.h
Examining data/plasma-framework-5.74.0/src/declarativeimports/calendar/calendarplugin.h
Examining data/plasma-framework-5.74.0/src/declarativeimports/calendar/daysmodel.h
Examining data/plasma-framework-5.74.0/src/declarativeimports/calendar/eventdatadecorator.cpp
Examining data/plasma-framework-5.74.0/src/declarativeimports/calendar/eventdatadecorator.h
Examining data/plasma-framework-5.74.0/src/declarativeimports/calendar/eventpluginsmanager.cpp
Examining data/plasma-framework-5.74.0/src/declarativeimports/plasmacomponents/qrangemodel.h
Examining data/plasma-framework-5.74.0/src/declarativeimports/plasmacomponents/qrangemodel_p.h
Examining data/plasma-framework-5.74.0/src/declarativeimports/plasmacomponents/plasmacomponentsplugin.cpp
Examining data/plasma-framework-5.74.0/src/declarativeimports/plasmacomponents/qmenuitem.cpp
Examining data/plasma-framework-5.74.0/src/declarativeimports/plasmacomponents/qmenu.h
Examining data/plasma-framework-5.74.0/src/declarativeimports/plasmacomponents/qrangemodel.cpp
Examining data/plasma-framework-5.74.0/src/declarativeimports/plasmacomponents/plasmacomponentsplugin.h
Examining data/plasma-framework-5.74.0/src/declarativeimports/plasmacomponents/enums.h
Examining data/plasma-framework-5.74.0/src/declarativeimports/plasmacomponents/enums.cpp
Examining data/plasma-framework-5.74.0/src/declarativeimports/plasmacomponents/qmenu.cpp
Examining data/plasma-framework-5.74.0/src/declarativeimports/plasmacomponents/qmenuitem.h
Examining data/plasma-framework-5.74.0/src/declarativeimports/core/datasource.h
Examining data/plasma-framework-5.74.0/src/declarativeimports/core/units.h
Examining data/plasma-framework-5.74.0/src/declarativeimports/core/svgitem.h
Examining data/plasma-framework-5.74.0/src/declarativeimports/core/quicktheme.cpp
Examining data/plasma-framework-5.74.0/src/declarativeimports/core/iconitem.cpp
Examining data/plasma-framework-5.74.0/src/declarativeimports/core/tooltipdialog.cpp
Examining data/plasma-framework-5.74.0/src/declarativeimports/core/fadingnode.cpp
Examining data/plasma-framework-5.74.0/src/declarativeimports/core/serviceoperationstatus.cpp
Examining data/plasma-framework-5.74.0/src/declarativeimports/core/tooltip.cpp
Examining data/plasma-framework-5.74.0/src/declarativeimports/core/tooltipdialog.h
Examining data/plasma-framework-5.74.0/src/declarativeimports/core/corebindingsplugin.h
Examining data/plasma-framework-5.74.0/src/declarativeimports/core/corebindingsplugin.cpp
Examining data/plasma-framework-5.74.0/src/declarativeimports/core/quicktheme.h
Examining data/plasma-framework-5.74.0/src/declarativeimports/core/tooltip.h
Examining data/plasma-framework-5.74.0/src/declarativeimports/core/fadingnode_p.h
Examining data/plasma-framework-5.74.0/src/declarativeimports/core/datamodel.cpp
Examining data/plasma-framework-5.74.0/src/declarativeimports/core/svgitem.cpp
Examining data/plasma-framework-5.74.0/src/declarativeimports/core/units.cpp
Examining data/plasma-framework-5.74.0/src/declarativeimports/core/datasource.cpp
Examining data/plasma-framework-5.74.0/src/declarativeimports/core/framesvgitem.cpp
Examining data/plasma-framework-5.74.0/src/declarativeimports/core/windowthumbnail.h
Examining data/plasma-framework-5.74.0/src/declarativeimports/core/colorscope.h
Examining data/plasma-framework-5.74.0/src/declarativeimports/core/framesvgitem.h
Examining data/plasma-framework-5.74.0/src/declarativeimports/core/windowthumbnail.cpp
Examining data/plasma-framework-5.74.0/src/declarativeimports/core/iconitem.h
Examining data/plasma-framework-5.74.0/src/declarativeimports/core/datamodel.h
Examining data/plasma-framework-5.74.0/src/declarativeimports/core/serviceoperationstatus.h
Examining data/plasma-framework-5.74.0/src/declarativeimports/core/colorscope.cpp
Examining data/plasma-framework-5.74.0/src/declarativeimports/platformcomponents/platformextensionplugin.cpp
Examining data/plasma-framework-5.74.0/src/declarativeimports/platformcomponents/icondialog.h
Examining data/plasma-framework-5.74.0/src/declarativeimports/platformcomponents/icondialog.cpp
Examining data/plasma-framework-5.74.0/src/declarativeimports/platformcomponents/application.cpp
Examining data/plasma-framework-5.74.0/src/declarativeimports/platformcomponents/utils/d_ptr_implementation.h
Examining data/plasma-framework-5.74.0/src/declarativeimports/platformcomponents/utils/d_ptr.h
Examining data/plasma-framework-5.74.0/src/declarativeimports/platformcomponents/utils/sharedsingleton.h
Examining data/plasma-framework-5.74.0/src/declarativeimports/platformcomponents/application_p.h
Examining data/plasma-framework-5.74.0/src/declarativeimports/platformcomponents/application.h
Examining data/plasma-framework-5.74.0/src/declarativeimports/plasmaextracomponents/fallbackcomponent.cpp
Examining data/plasma-framework-5.74.0/src/declarativeimports/plasmaextracomponents/plasmaextracomponentsplugin.h
Examining data/plasma-framework-5.74.0/src/declarativeimports/plasmaextracomponents/appbackgroundprovider.cpp
Examining data/plasma-framework-5.74.0/src/declarativeimports/plasmaextracomponents/fallbackcomponent.h
Examining data/plasma-framework-5.74.0/src/declarativeimports/plasmaextracomponents/appbackgroundprovider_p.h
Examining data/plasma-framework-5.74.0/src/declarativeimports/plasmaextracomponents/plasmaextracomponentsplugin.cpp
Examining data/plasma-framework-5.74.0/src/plasma/service.cpp
Examining data/plasma-framework-5.74.0/src/plasma/package.h
Examining data/plasma-framework-5.74.0/src/plasma/framesvg.h
Examining data/plasma-framework-5.74.0/src/plasma/containment.h
Examining data/plasma-framework-5.74.0/src/plasma/service.h
Examining data/plasma-framework-5.74.0/src/plasma/dataengineconsumer.h
Examining data/plasma-framework-5.74.0/src/plasma/dataengine.h
Examining data/plasma-framework-5.74.0/src/plasma/datacontainer.cpp
Examining data/plasma-framework-5.74.0/src/plasma/applet.h
Examining data/plasma-framework-5.74.0/src/plasma/dataengine.cpp
Examining data/plasma-framework-5.74.0/src/plasma/version.cpp
Examining data/plasma-framework-5.74.0/src/plasma/plasma.cpp
Examining data/plasma-framework-5.74.0/src/plasma/framesvg.cpp
Examining data/plasma-framework-5.74.0/src/plasma/scripting/scriptengine.cpp
Examining data/plasma-framework-5.74.0/src/plasma/scripting/appletscript.cpp
Examining data/plasma-framework-5.74.0/src/plasma/scripting/dataenginescript.h
Examining data/plasma-framework-5.74.0/src/plasma/scripting/dataenginescript.cpp
Examining data/plasma-framework-5.74.0/src/plasma/scripting/scriptengine.h
Examining data/plasma-framework-5.74.0/src/plasma/scripting/appletscript.h
Examining data/plasma-framework-5.74.0/src/plasma/containmentactions.h
Examining data/plasma-framework-5.74.0/src/plasma/corona.cpp
Examining data/plasma-framework-5.74.0/src/plasma/svg.cpp
Examining data/plasma-framework-5.74.0/src/plasma/package.cpp
Examining data/plasma-framework-5.74.0/src/plasma/theme.h
Examining data/plasma-framework-5.74.0/src/plasma/packagestructure.h
Examining data/plasma-framework-5.74.0/src/plasma/containmentactions.cpp
Examining data/plasma-framework-5.74.0/src/plasma/plasma.h
Examining data/plasma-framework-5.74.0/src/plasma/dataengineconsumer.cpp
Examining data/plasma-framework-5.74.0/src/plasma/version.h
Examining data/plasma-framework-5.74.0/src/plasma/packagestructure.cpp
Examining data/plasma-framework-5.74.0/src/plasma/datacontainer.h
Examining data/plasma-framework-5.74.0/src/plasma/pluginloader.h
Examining data/plasma-framework-5.74.0/src/plasma/pluginloader.cpp
Examining data/plasma-framework-5.74.0/src/plasma/packagestructure/plasmoidpackage.cpp
Examining data/plasma-framework-5.74.0/src/plasma/packagestructure/packages.cpp
Examining data/plasma-framework-5.74.0/src/plasma/packagestructure/plasmagenericpackage.cpp
Examining data/plasma-framework-5.74.0/src/plasma/packagestructure/containmentactionspackage.cpp
Examining data/plasma-framework-5.74.0/src/plasma/packagestructure/plasmathemepackage.cpp
Examining data/plasma-framework-5.74.0/src/plasma/packagestructure/packages_p.h
Examining data/plasma-framework-5.74.0/src/plasma/packagestructure/dataenginepackage.cpp
Examining data/plasma-framework-5.74.0/src/plasma/containment.cpp
Examining data/plasma-framework-5.74.0/src/plasma/applet.cpp
Examining data/plasma-framework-5.74.0/src/plasma/private/timetracker.h
Examining data/plasma-framework-5.74.0/src/plasma/private/storage_p.h
Examining data/plasma-framework-5.74.0/src/plasma/private/packagestructure_p.h
Examining data/plasma-framework-5.74.0/src/plasma/private/service_p.h
Examining data/plasma-framework-5.74.0/src/plasma/private/package_p.h
Examining data/plasma-framework-5.74.0/src/plasma/private/framesvg_p.h
Examining data/plasma-framework-5.74.0/src/plasma/private/applet_p.cpp
Examining data/plasma-framework-5.74.0/src/plasma/private/corona_p.h
Examining data/plasma-framework-5.74.0/src/plasma/private/svg_p.h
Examining data/plasma-framework-5.74.0/src/plasma/private/dataengine_p.h
Examining data/plasma-framework-5.74.0/src/plasma/private/effectwatcher_p.h
Examining data/plasma-framework-5.74.0/src/plasma/private/dataengineconsumer_p.h
Examining data/plasma-framework-5.74.0/src/plasma/private/timetracker.cpp
Examining data/plasma-framework-5.74.0/src/plasma/private/containment_p.h
Examining data/plasma-framework-5.74.0/src/plasma/private/actionwidgetinterface_p.h
Examining data/plasma-framework-5.74.0/src/plasma/private/theme_p.cpp
Examining data/plasma-framework-5.74.0/src/plasma/private/containment_p.cpp
Examining data/plasma-framework-5.74.0/src/plasma/private/applet_p.h
Examining data/plasma-framework-5.74.0/src/plasma/private/associatedapplicationmanager.cpp
Examining data/plasma-framework-5.74.0/src/plasma/private/storagethread.cpp
Examining data/plasma-framework-5.74.0/src/plasma/private/storage.cpp
Examining data/plasma-framework-5.74.0/src/plasma/private/authorizationmanager_p.h
Examining data/plasma-framework-5.74.0/src/plasma/private/datacontainer_p.cpp
Examining data/plasma-framework-5.74.0/src/plasma/private/framesvg_helpers.h
Examining data/plasma-framework-5.74.0/src/plasma/private/associatedapplicationmanager_p.h
Examining data/plasma-framework-5.74.0/src/plasma/private/dataenginemanager.cpp
Examining data/plasma-framework-5.74.0/src/plasma/private/datacontainer_p.h
Examining data/plasma-framework-5.74.0/src/plasma/private/sharedtimer_p.h
Examining data/plasma-framework-5.74.0/src/plasma/private/servicejob_p.h
Examining data/plasma-framework-5.74.0/src/plasma/private/dataenginemanager_p.h
Examining data/plasma-framework-5.74.0/src/plasma/private/storagethread_p.h
Examining data/plasma-framework-5.74.0/src/plasma/private/containmentactions_p.h
Examining data/plasma-framework-5.74.0/src/plasma/private/theme_p.h
Examining data/plasma-framework-5.74.0/src/plasma/private/effectwatcher.cpp
Examining data/plasma-framework-5.74.0/src/plasma/corona.h
Examining data/plasma-framework-5.74.0/src/plasma/theme.cpp
Examining data/plasma-framework-5.74.0/src/plasma/svg.h
Examining data/plasma-framework-5.74.0/src/plasma/servicejob.h
Examining data/plasma-framework-5.74.0/src/plasma/servicejob.cpp
Examining data/plasma-framework-5.74.0/src/scriptengines/qml/plasmoid/containmentinterface.h
Examining data/plasma-framework-5.74.0/src/scriptengines/qml/plasmoid/containmentinterface.cpp
Examining data/plasma-framework-5.74.0/src/scriptengines/qml/plasmoid/dropmenu.h
Examining data/plasma-framework-5.74.0/src/scriptengines/qml/plasmoid/wallpaperinterface.cpp
Examining data/plasma-framework-5.74.0/src/scriptengines/qml/plasmoid/declarativeappletscript.cpp
Examining data/plasma-framework-5.74.0/src/scriptengines/qml/plasmoid/appletinterface.h
Examining data/plasma-framework-5.74.0/src/scriptengines/qml/plasmoid/appletinterface.cpp
Examining data/plasma-framework-5.74.0/src/scriptengines/qml/plasmoid/dropmenu.cpp
Examining data/plasma-framework-5.74.0/src/scriptengines/qml/plasmoid/declarativeappletscript.h
Examining data/plasma-framework-5.74.0/src/scriptengines/qml/plasmoid/wallpaperinterface.h
Examining data/plasma-framework-5.74.0/src/plasmaquick/dialog.cpp
Examining data/plasma-framework-5.74.0/src/plasmaquick/view.h
Examining data/plasma-framework-5.74.0/src/plasmaquick/shellpluginloader.h
Examining data/plasma-framework-5.74.0/src/plasmaquick/dialogshadows.cpp
Examining data/plasma-framework-5.74.0/src/plasmaquick/containmentview.cpp
Examining data/plasma-framework-5.74.0/src/plasmaquick/view.cpp
Examining data/plasma-framework-5.74.0/src/plasmaquick/waylandintegration.cpp
Examining data/plasma-framework-5.74.0/src/plasmaquick/shellpluginloader.cpp
Examining data/plasma-framework-5.74.0/src/plasmaquick/packageurlinterceptor.cpp
Examining data/plasma-framework-5.74.0/src/plasmaquick/configmodel.cpp
Examining data/plasma-framework-5.74.0/src/plasmaquick/dialog.h
Examining data/plasma-framework-5.74.0/src/plasmaquick/configview.cpp
Examining data/plasma-framework-5.74.0/src/plasmaquick/configmodel.h
Examining data/plasma-framework-5.74.0/src/plasmaquick/appletquickitem.h
Examining data/plasma-framework-5.74.0/src/plasmaquick/configview.h
Examining data/plasma-framework-5.74.0/src/plasmaquick/dialogshadows_p.h
Examining data/plasma-framework-5.74.0/src/plasmaquick/waylandintegration_p.h
Examining data/plasma-framework-5.74.0/src/plasmaquick/private/configcategory_p.h
Examining data/plasma-framework-5.74.0/src/plasmaquick/private/packages.cpp
Examining data/plasma-framework-5.74.0/src/plasmaquick/private/appletquickitem_p.h
Examining data/plasma-framework-5.74.0/src/plasmaquick/private/configcategory_p.cpp
Examining data/plasma-framework-5.74.0/src/plasmaquick/private/packages.h
Examining data/plasma-framework-5.74.0/src/plasmaquick/appletquickitem.cpp
Examining data/plasma-framework-5.74.0/src/plasmaquick/containmentview.h
Examining data/plasma-framework-5.74.0/src/plasmaquick/packageurlinterceptor.h
Examining data/plasma-framework-5.74.0/src/plasmapkg/main.cpp

FINAL RESULTS:

data/plasma-framework-5.74.0/src/declarativeimports/calendar/calendar.cpp:19:33:  [4] (shell) system:
  This causes a new program to execute and is difficult to use safely
  (CWE-78). try using a library call that implements the same functionality
  if available.
    , m_firstDayOfWeek(QLocale::system().firstDayOfWeek())
data/plasma-framework-5.74.0/src/declarativeimports/calendar/calendar.cpp:184:21:  [4] (shell) system:
  This causes a new program to execute and is difficult to use safely
  (CWE-78). try using a library call that implements the same functionality
  if available.
    return QLocale::system().dayName(weekday, QLocale::ShortFormat);
data/plasma-framework-5.74.0/src/plasma/svg.cpp:939:35:  [4] (shell) system:
  This causes a new program to execute and is difficult to use safely
  (CWE-78). try using a library call that implements the same functionality
  if available.
void Svg::setUseSystemColors(bool system)
data/plasma-framework-5.74.0/src/plasma/svg.cpp:941:31:  [4] (shell) system:
  This causes a new program to execute and is difficult to use safely
  (CWE-78). try using a library call that implements the same functionality
  if available.
    if (d->useSystemColors == system) {
data/plasma-framework-5.74.0/src/plasma/svg.cpp:945:26:  [4] (shell) system:
  This causes a new program to execute and is difficult to use safely
  (CWE-78). try using a library call that implements the same functionality
  if available.
    d->useSystemColors = system;
data/plasma-framework-5.74.0/src/plasma/svg.h:397:34:  [4] (shell) system:
  This causes a new program to execute and is difficult to use safely
  (CWE-78). try using a library call that implements the same functionality
  if available.
    void setUseSystemColors(bool system);
data/plasma-framework-5.74.0/autotests/plasmoidpackagetest.cpp:58:18:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
    QVERIFY(file.open(QIODevice::WriteOnly | QIODevice::Text));
data/plasma-framework-5.74.0/autotests/plasmoidpackagetest.cpp:74:18:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
    QVERIFY(file.open(QIODevice::WriteOnly | QIODevice::Text));
data/plasma-framework-5.74.0/autotests/plasmoidpackagetest.cpp:88:18:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
    QVERIFY(file.open(QIODevice::WriteOnly | QIODevice::Text));
data/plasma-framework-5.74.0/autotests/plasmoidpackagetest.cpp:96:18:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
    QVERIFY(file.open(QIODevice::WriteOnly | QIODevice::Text));
data/plasma-framework-5.74.0/autotests/plasmoidpackagetest.cpp:129:18:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
    QVERIFY(file.open(QIODevice::WriteOnly | QIODevice::Text));
data/plasma-framework-5.74.0/autotests/plasmoidpackagetest.cpp:149:18:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
    QVERIFY(file.open(QIODevice::WriteOnly | QIODevice::Text));
data/plasma-framework-5.74.0/autotests/plasmoidpackagetest.cpp:179:18:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
    QVERIFY(file.open(QIODevice::WriteOnly | QIODevice::Text));
data/plasma-framework-5.74.0/autotests/plasmoidpackagetest.cpp:239:21:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
    QVERIFY(creator.open(QIODevice::WriteOnly));
data/plasma-framework-5.74.0/autotests/plasmoidpackagetest.cpp:247:21:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
    QVERIFY(package.open(QIODevice::ReadOnly));
data/plasma-framework-5.74.0/src/declarativeimports/plasmacomponents/qmenu.cpp:304:18:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
void QMenuProxy::open(int x, int y)
data/plasma-framework-5.74.0/src/declarativeimports/plasmacomponents/qmenu.cpp:417:13:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
            open();
data/plasma-framework-5.74.0/src/declarativeimports/plasmacomponents/qmenu.h:119:22:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
    Q_INVOKABLE void open(int x = 0, int y = 0);
data/plasma-framework-5.74.0/src/plasma/private/dataenginemanager.cpp:150:12:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
    if (!f.open(QIODevice::WriteOnly | QIODevice::Append | QIODevice::Text)) {
data/plasma-framework-5.74.0/src/plasma/private/storagethread.cpp:67:15:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
    if (!m_db.open()) {
data/plasma-framework-5.74.0/src/plasma/private/storagethread.cpp:74:15:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
    if (!m_db.open()) {
data/plasma-framework-5.74.0/src/plasma/private/timetracker.cpp:43:20:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
        bool b = f.open(QFile::WriteOnly);
data/plasma-framework-5.74.0/src/plasma/svg.cpp:54:15:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
    if (!file.open(QIODevice::ReadOnly)) {
data/plasma-framework-5.74.0/src/plasma/svg.cpp:82:16:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
        buffer.open(QIODevice::WriteOnly);
data/plasma-framework-5.74.0/src/plasma/private/timetracker.cpp:95:66:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
        m_history.initial[QString::fromUtf8(prop.name())] = prop.read(o);
data/plasma-framework-5.74.0/src/plasma/private/timetracker.cpp:123:23:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
            d << prop.read(parent());

ANALYSIS SUMMARY:

Hits = 26
Lines analyzed = 44536 in approximately 1.14 seconds (38950 lines/second)
Physical Source Lines of Code (SLOC) = 28203
Hits@level = [0]   0 [1]   2 [2]  18 [3]   0 [4]   6 [5]   0
Hits@level+ = [0+]  26 [1+]  26 [2+]  24 [3+]   6 [4+]   6 [5+]   0
Hits/KSLOC@level+ = [0+] 0.921888 [1+] 0.921888 [2+] 0.850973 [3+] 0.212743 [4+] 0.212743 [5+]   0
Dot directories skipped = 1 (--followdotdir overrides)
Minimum risk level = 1
Not every hit is necessarily a security vulnerability.
There may be other security vulnerabilities; review your code!
See 'Secure Programming HOWTO'
(https://dwheeler.com/secure-programs) for more information.