Flawfinder version 2.0.10, (C) 2001-2019 David A. Wheeler.
Number of rules (primarily dangerous function names) in C/C++ ruleset: 223
Examining data/pulseaudio-qt-1.2/autotests/mapstest.cpp
Examining data/pulseaudio-qt-1.2/autotests/mapstest.h
Examining data/pulseaudio-qt-1.2/tests/painspector/main.cpp
Examining data/pulseaudio-qt-1.2/src/card.h
Examining data/pulseaudio-qt-1.2/src/pulseobject.cpp
Examining data/pulseaudio-qt-1.2/src/card.cpp
Examining data/pulseaudio-qt-1.2/src/models.cpp
Examining data/pulseaudio-qt-1.2/src/streamrestore.cpp
Examining data/pulseaudio-qt-1.2/src/sinkinput_p.h
Examining data/pulseaudio-qt-1.2/src/source.h
Examining data/pulseaudio-qt-1.2/src/sink_p.h
Examining data/pulseaudio-qt-1.2/src/volumeobject.cpp
Examining data/pulseaudio-qt-1.2/src/sinkinput.h
Examining data/pulseaudio-qt-1.2/src/models_p.h
Examining data/pulseaudio-qt-1.2/src/context_p.h
Examining data/pulseaudio-qt-1.2/src/stream.h
Examining data/pulseaudio-qt-1.2/src/stream.cpp
Examining data/pulseaudio-qt-1.2/src/port.cpp
Examining data/pulseaudio-qt-1.2/src/stream_p.h
Examining data/pulseaudio-qt-1.2/src/context.h
Examining data/pulseaudio-qt-1.2/src/device_p.h
Examining data/pulseaudio-qt-1.2/src/module.cpp
Examining data/pulseaudio-qt-1.2/src/device.cpp
Examining data/pulseaudio-qt-1.2/src/port.h
Examining data/pulseaudio-qt-1.2/src/sourceoutput.h
Examining data/pulseaudio-qt-1.2/src/profile.cpp
Examining data/pulseaudio-qt-1.2/src/sinkinput.cpp
Examining data/pulseaudio-qt-1.2/src/server.h
Examining data/pulseaudio-qt-1.2/src/models.h
Examining data/pulseaudio-qt-1.2/src/maps.cpp
Examining data/pulseaudio-qt-1.2/src/server_p.h
Examining data/pulseaudio-qt-1.2/src/module_p.h
Examining data/pulseaudio-qt-1.2/src/client_p.h
Examining data/pulseaudio-qt-1.2/src/operation.cpp
Examining data/pulseaudio-qt-1.2/src/context.cpp
Examining data/pulseaudio-qt-1.2/src/client.h
Examining data/pulseaudio-qt-1.2/src/operation.h
Examining data/pulseaudio-qt-1.2/src/server.cpp
Examining data/pulseaudio-qt-1.2/src/streamrestore_p.h
Examining data/pulseaudio-qt-1.2/src/device.h
Examining data/pulseaudio-qt-1.2/src/source_p.h
Examining data/pulseaudio-qt-1.2/src/profile.h
Examining data/pulseaudio-qt-1.2/src/pulseobject_p.h
Examining data/pulseaudio-qt-1.2/src/sourceoutput_p.h
Examining data/pulseaudio-qt-1.2/src/source.cpp
Examining data/pulseaudio-qt-1.2/src/streamrestore.h
Examining data/pulseaudio-qt-1.2/src/cardport.h
Examining data/pulseaudio-qt-1.2/src/sink.h
Examining data/pulseaudio-qt-1.2/src/card_p.h
Examining data/pulseaudio-qt-1.2/src/maps.h
Examining data/pulseaudio-qt-1.2/src/cardport.cpp
Examining data/pulseaudio-qt-1.2/src/client.cpp
Examining data/pulseaudio-qt-1.2/src/pulseobject.h
Examining data/pulseaudio-qt-1.2/src/sourceoutput.cpp
Examining data/pulseaudio-qt-1.2/src/sink.cpp
Examining data/pulseaudio-qt-1.2/src/module.h
Examining data/pulseaudio-qt-1.2/src/volumeobject.h
Examining data/pulseaudio-qt-1.2/src/port_p.h
Examining data/pulseaudio-qt-1.2/src/volumeobject_p.h
Examining data/pulseaudio-qt-1.2/src/profile_p.h

FINAL RESULTS:

data/pulseaudio-qt-1.2/src/models.cpp:112:51:  [1] (buffer) read:
  Check buffer boundaries if used in a loop including recursive loops
  (CWE-120, CWE-20).
    return data->metaObject()->property(property).read(data);

ANALYSIS SUMMARY:

Hits = 1
Lines analyzed = 5594 in approximately 0.20 seconds (28485 lines/second)
Physical Source Lines of Code (SLOC) = 3443
Hits@level = [0]   0 [1]   1 [2]   0 [3]   0 [4]   0 [5]   0
Hits@level+ = [0+]   1 [1+]   1 [2+]   0 [3+]   0 [4+]   0 [5+]   0
Hits/KSLOC@level+ = [0+] 0.290444 [1+] 0.290444 [2+]   0 [3+]   0 [4+]   0 [5+]   0
Dot directories skipped = 1 (--followdotdir overrides)
Minimum risk level = 1
Not every hit is necessarily a security vulnerability.
There may be other security vulnerabilities; review your code!
See 'Secure Programming HOWTO'
(https://dwheeler.com/secure-programs) for more information.