Flawfinder version 2.0.10, (C) 2001-2019 David A. Wheeler.
Number of rules (primarily dangerous function names) in C/C++ ruleset: 223
Examining data/r-cran-later-1.1.0.1+dfsg/src/timestamp_unix.cpp
Examining data/r-cran-later-1.1.0.1+dfsg/src/later_win32.cpp
Examining data/r-cran-later-1.1.0.1+dfsg/src/callback_registry_table.h
Examining data/r-cran-later-1.1.0.1+dfsg/src/timeconv.h
Examining data/r-cran-later-1.1.0.1+dfsg/src/callback_registry.h
Examining data/r-cran-later-1.1.0.1+dfsg/src/threadutils.h
Examining data/r-cran-later-1.1.0.1+dfsg/src/init.c
Examining data/r-cran-later-1.1.0.1+dfsg/src/tinycthread.c
Examining data/r-cran-later-1.1.0.1+dfsg/src/utils.h
Examining data/r-cran-later-1.1.0.1+dfsg/src/debug.cpp
Examining data/r-cran-later-1.1.0.1+dfsg/src/callback_registry.cpp
Examining data/r-cran-later-1.1.0.1+dfsg/src/optional.h
Examining data/r-cran-later-1.1.0.1+dfsg/src/debug.h
Examining data/r-cran-later-1.1.0.1+dfsg/src/timestamp_win32.cpp
Examining data/r-cran-later-1.1.0.1+dfsg/src/later.cpp
Examining data/r-cran-later-1.1.0.1+dfsg/src/interrupt.h
Examining data/r-cran-later-1.1.0.1+dfsg/src/later_posix.cpp
Examining data/r-cran-later-1.1.0.1+dfsg/src/timer_posix.cpp
Examining data/r-cran-later-1.1.0.1+dfsg/src/badthreads.h
Examining data/r-cran-later-1.1.0.1+dfsg/src/timer_posix.h
Examining data/r-cran-later-1.1.0.1+dfsg/src/later.h
Examining data/r-cran-later-1.1.0.1+dfsg/src/tinycthread.h
Examining data/r-cran-later-1.1.0.1+dfsg/src/RcppExports.cpp
Examining data/r-cran-later-1.1.0.1+dfsg/src/timestamp.h
Examining data/r-cran-later-1.1.0.1+dfsg/inst/include/later_api.h
Examining data/r-cran-later-1.1.0.1+dfsg/inst/include/later.h
Examining data/r-cran-later-1.1.0.1+dfsg/inst/bgtest.cpp
FINAL RESULTS:
data/r-cran-later-1.1.0.1+dfsg/src/debug.cpp:25:11: [4] (format) vsnprintf:
If format strings can be influenced by an attacker, they can be exploited,
and note that sprintf variations do not always \0-terminate (CWE-134). Use
a constant for the format specification.
int n = vsnprintf(buf, max_size, fmt, args);
data/r-cran-later-1.1.0.1+dfsg/src/tinycthread.c:65:5: [3] (misc) InitializeCriticalSection:
Exceptions can be thrown in low-memory situations. Use
InitializeCriticalSectionAndSpinCount instead.
InitializeCriticalSection(&(mtx->mHandle.cs));
data/r-cran-later-1.1.0.1+dfsg/src/tinycthread.c:111:5: [3] (misc) EnterCriticalSection:
On some versions of Windows, exceptions can be thrown in low-memory
situations. Use InitializeCriticalSectionAndSpinCount instead.
EnterCriticalSection(&(mtx->mHandle.cs));
data/r-cran-later-1.1.0.1+dfsg/src/tinycthread.c:295:3: [3] (misc) InitializeCriticalSection:
Exceptions can be thrown in low-memory situations. Use
InitializeCriticalSectionAndSpinCount instead.
InitializeCriticalSection(&cond->mWaitersCountLock);
data/r-cran-later-1.1.0.1+dfsg/src/tinycthread.c:341:3: [3] (misc) EnterCriticalSection:
On some versions of Windows, exceptions can be thrown in low-memory
situations. Use InitializeCriticalSectionAndSpinCount instead.
EnterCriticalSection(&cond->mWaitersCountLock);
data/r-cran-later-1.1.0.1+dfsg/src/tinycthread.c:366:3: [3] (misc) EnterCriticalSection:
On some versions of Windows, exceptions can be thrown in low-memory
situations. Use InitializeCriticalSectionAndSpinCount instead.
EnterCriticalSection(&cond->mWaitersCountLock);
data/r-cran-later-1.1.0.1+dfsg/src/tinycthread.c:392:3: [3] (misc) EnterCriticalSection:
On some versions of Windows, exceptions can be thrown in low-memory
situations. Use InitializeCriticalSectionAndSpinCount instead.
EnterCriticalSection(&cond->mWaitersCountLock);
data/r-cran-later-1.1.0.1+dfsg/src/tinycthread.c:417:3: [3] (misc) EnterCriticalSection:
On some versions of Windows, exceptions can be thrown in low-memory
situations. Use InitializeCriticalSectionAndSpinCount instead.
EnterCriticalSection(&cond->mWaitersCountLock);
data/r-cran-later-1.1.0.1+dfsg/src/tinycthread.c:910:11: [3] (misc) InitializeCriticalSection:
Exceptions can be thrown in low-memory situations. Use
InitializeCriticalSectionAndSpinCount instead.
InitializeCriticalSection(&(flag->lock));
data/r-cran-later-1.1.0.1+dfsg/src/tinycthread.c:911:11: [3] (misc) EnterCriticalSection:
On some versions of Windows, exceptions can be thrown in low-memory
situations. Use InitializeCriticalSectionAndSpinCount instead.
EnterCriticalSection(&(flag->lock));
data/r-cran-later-1.1.0.1+dfsg/src/tinycthread.c:922:9: [3] (misc) EnterCriticalSection:
On some versions of Windows, exceptions can be thrown in low-memory
situations. Use InitializeCriticalSectionAndSpinCount instead.
EnterCriticalSection(&(flag->lock));
data/r-cran-later-1.1.0.1+dfsg/src/debug.cpp:21:3: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char buf[max_size];
data/r-cran-later-1.1.0.1+dfsg/src/later_posix.cpp:55:11: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
if (read(pipe_out, buf, BUF_SIZE) < 0) {
ANALYSIS SUMMARY:
Hits = 13
Lines analyzed = 4154 in approximately 0.10 seconds (39637 lines/second)
Physical Source Lines of Code (SLOC) = 2721
Hits@level = [0] 0 [1] 1 [2] 1 [3] 10 [4] 1 [5] 0
Hits@level+ = [0+] 13 [1+] 13 [2+] 12 [3+] 11 [4+] 1 [5+] 0
Hits/KSLOC@level+ = [0+] 4.77766 [1+] 4.77766 [2+] 4.41014 [3+] 4.04263 [4+] 0.367512 [5+] 0
Dot directories skipped = 1 (--followdotdir overrides)
Minimum risk level = 1
Not every hit is necessarily a security vulnerability.
There may be other security vulnerabilities; review your code!
See 'Secure Programming HOWTO'
(https://dwheeler.com/secure-programs) for more information.