Flawfinder version 2.0.10, (C) 2001-2019 David A. Wheeler. Number of rules (primarily dangerous function names) in C/C++ ruleset: 223 Examining data/barrier-2.3.3+dfsg/src/cmd/barrierc/MSWindowsClientTaskBarReceiver.cpp Examining data/barrier-2.3.3+dfsg/src/cmd/barrierc/MSWindowsClientTaskBarReceiver.h Examining data/barrier-2.3.3+dfsg/src/cmd/barrierc/OSXClientTaskBarReceiver.cpp Examining data/barrier-2.3.3+dfsg/src/cmd/barrierc/OSXClientTaskBarReceiver.h Examining data/barrier-2.3.3+dfsg/src/cmd/barrierc/XWindowsClientTaskBarReceiver.cpp Examining data/barrier-2.3.3+dfsg/src/cmd/barrierc/XWindowsClientTaskBarReceiver.h Examining data/barrier-2.3.3+dfsg/src/cmd/barrierc/barrierc.cpp Examining data/barrier-2.3.3+dfsg/src/cmd/barrierc/resource.h Examining data/barrier-2.3.3+dfsg/src/cmd/barrierd/barrierd.cpp Examining data/barrier-2.3.3+dfsg/src/cmd/barriers/MSWindowsServerTaskBarReceiver.cpp Examining data/barrier-2.3.3+dfsg/src/cmd/barriers/MSWindowsServerTaskBarReceiver.h Examining data/barrier-2.3.3+dfsg/src/cmd/barriers/OSXServerTaskBarReceiver.cpp Examining data/barrier-2.3.3+dfsg/src/cmd/barriers/OSXServerTaskBarReceiver.h Examining data/barrier-2.3.3+dfsg/src/cmd/barriers/XWindowsServerTaskBarReceiver.cpp Examining data/barrier-2.3.3+dfsg/src/cmd/barriers/XWindowsServerTaskBarReceiver.h Examining data/barrier-2.3.3+dfsg/src/cmd/barriers/barriers.cpp Examining data/barrier-2.3.3+dfsg/src/cmd/barriers/resource.h Examining data/barrier-2.3.3+dfsg/src/gui/src/AboutDialog.cpp Examining data/barrier-2.3.3+dfsg/src/gui/src/AboutDialog.h Examining data/barrier-2.3.3+dfsg/src/gui/src/Action.cpp Examining data/barrier-2.3.3+dfsg/src/gui/src/Action.h Examining data/barrier-2.3.3+dfsg/src/gui/src/ActionDialog.cpp Examining data/barrier-2.3.3+dfsg/src/gui/src/ActionDialog.h Examining data/barrier-2.3.3+dfsg/src/gui/src/AddClientDialog.cpp Examining data/barrier-2.3.3+dfsg/src/gui/src/AddClientDialog.h Examining data/barrier-2.3.3+dfsg/src/gui/src/AppConfig.cpp Examining data/barrier-2.3.3+dfsg/src/gui/src/AppConfig.h Examining data/barrier-2.3.3+dfsg/src/gui/src/BarrierLocale.cpp Examining data/barrier-2.3.3+dfsg/src/gui/src/BarrierLocale.h Examining data/barrier-2.3.3+dfsg/src/gui/src/BaseConfig.cpp Examining data/barrier-2.3.3+dfsg/src/gui/src/BaseConfig.h Examining data/barrier-2.3.3+dfsg/src/gui/src/CommandProcess.cpp Examining data/barrier-2.3.3+dfsg/src/gui/src/CommandProcess.h Examining data/barrier-2.3.3+dfsg/src/gui/src/DataDownloader.cpp Examining data/barrier-2.3.3+dfsg/src/gui/src/DataDownloader.h Examining data/barrier-2.3.3+dfsg/src/gui/src/DisplayIsValid.cpp Examining data/barrier-2.3.3+dfsg/src/gui/src/DisplayIsValid.h Examining data/barrier-2.3.3+dfsg/src/gui/src/ElevateMode.h Examining data/barrier-2.3.3+dfsg/src/gui/src/Fingerprint.cpp Examining data/barrier-2.3.3+dfsg/src/gui/src/Fingerprint.h Examining data/barrier-2.3.3+dfsg/src/gui/src/Hotkey.cpp Examining data/barrier-2.3.3+dfsg/src/gui/src/Hotkey.h Examining data/barrier-2.3.3+dfsg/src/gui/src/HotkeyDialog.cpp Examining data/barrier-2.3.3+dfsg/src/gui/src/HotkeyDialog.h Examining data/barrier-2.3.3+dfsg/src/gui/src/Ipc.cpp Examining data/barrier-2.3.3+dfsg/src/gui/src/Ipc.h Examining data/barrier-2.3.3+dfsg/src/gui/src/IpcClient.cpp Examining data/barrier-2.3.3+dfsg/src/gui/src/IpcClient.h Examining data/barrier-2.3.3+dfsg/src/gui/src/IpcReader.cpp Examining data/barrier-2.3.3+dfsg/src/gui/src/IpcReader.h Examining data/barrier-2.3.3+dfsg/src/gui/src/KeySequence.cpp Examining data/barrier-2.3.3+dfsg/src/gui/src/KeySequence.h Examining data/barrier-2.3.3+dfsg/src/gui/src/KeySequenceWidget.cpp Examining data/barrier-2.3.3+dfsg/src/gui/src/KeySequenceWidget.h Examining data/barrier-2.3.3+dfsg/src/gui/src/LogWindow.cpp Examining data/barrier-2.3.3+dfsg/src/gui/src/LogWindow.h Examining data/barrier-2.3.3+dfsg/src/gui/src/MainWindow.cpp Examining data/barrier-2.3.3+dfsg/src/gui/src/MainWindow.h Examining data/barrier-2.3.3+dfsg/src/gui/src/NewScreenWidget.cpp Examining data/barrier-2.3.3+dfsg/src/gui/src/NewScreenWidget.h Examining data/barrier-2.3.3+dfsg/src/gui/src/ProcessorArch.h Examining data/barrier-2.3.3+dfsg/src/gui/src/QBarrierApplication.cpp Examining data/barrier-2.3.3+dfsg/src/gui/src/QBarrierApplication.h Examining data/barrier-2.3.3+dfsg/src/gui/src/QUtility.cpp Examining data/barrier-2.3.3+dfsg/src/gui/src/QUtility.h Examining data/barrier-2.3.3+dfsg/src/gui/src/Screen.cpp Examining data/barrier-2.3.3+dfsg/src/gui/src/Screen.h Examining data/barrier-2.3.3+dfsg/src/gui/src/ScreenSettingsDialog.cpp Examining data/barrier-2.3.3+dfsg/src/gui/src/ScreenSettingsDialog.h Examining data/barrier-2.3.3+dfsg/src/gui/src/ScreenSetupModel.cpp Examining data/barrier-2.3.3+dfsg/src/gui/src/ScreenSetupModel.h Examining data/barrier-2.3.3+dfsg/src/gui/src/ScreenSetupView.cpp Examining data/barrier-2.3.3+dfsg/src/gui/src/ScreenSetupView.h Examining data/barrier-2.3.3+dfsg/src/gui/src/ServerConfig.cpp Examining data/barrier-2.3.3+dfsg/src/gui/src/ServerConfig.h Examining data/barrier-2.3.3+dfsg/src/gui/src/ServerConfigDialog.cpp Examining data/barrier-2.3.3+dfsg/src/gui/src/ServerConfigDialog.h Examining data/barrier-2.3.3+dfsg/src/gui/src/SettingsDialog.cpp Examining data/barrier-2.3.3+dfsg/src/gui/src/SettingsDialog.h Examining data/barrier-2.3.3+dfsg/src/gui/src/SetupWizard.cpp Examining data/barrier-2.3.3+dfsg/src/gui/src/SetupWizard.h Examining data/barrier-2.3.3+dfsg/src/gui/src/ShutdownCh.h Examining data/barrier-2.3.3+dfsg/src/gui/src/SslCertificate.cpp Examining data/barrier-2.3.3+dfsg/src/gui/src/SslCertificate.h Examining data/barrier-2.3.3+dfsg/src/gui/src/TrashScreenWidget.cpp Examining data/barrier-2.3.3+dfsg/src/gui/src/TrashScreenWidget.h Examining data/barrier-2.3.3+dfsg/src/gui/src/VersionChecker.cpp Examining data/barrier-2.3.3+dfsg/src/gui/src/VersionChecker.h Examining data/barrier-2.3.3+dfsg/src/gui/src/ZeroconfBrowser.cpp Examining data/barrier-2.3.3+dfsg/src/gui/src/ZeroconfBrowser.h Examining data/barrier-2.3.3+dfsg/src/gui/src/ZeroconfRecord.h Examining data/barrier-2.3.3+dfsg/src/gui/src/ZeroconfRegister.cpp Examining data/barrier-2.3.3+dfsg/src/gui/src/ZeroconfRegister.h Examining data/barrier-2.3.3+dfsg/src/gui/src/ZeroconfServer.cpp Examining data/barrier-2.3.3+dfsg/src/gui/src/ZeroconfServer.h Examining data/barrier-2.3.3+dfsg/src/gui/src/ZeroconfService.cpp Examining data/barrier-2.3.3+dfsg/src/gui/src/ZeroconfService.h Examining data/barrier-2.3.3+dfsg/src/gui/src/ZeroconfThread.cpp Examining data/barrier-2.3.3+dfsg/src/gui/src/ZeroconfThread.h Examining data/barrier-2.3.3+dfsg/src/gui/src/main.cpp Examining data/barrier-2.3.3+dfsg/src/lib/arch/Arch.cpp Examining data/barrier-2.3.3+dfsg/src/lib/arch/Arch.h Examining data/barrier-2.3.3+dfsg/src/lib/arch/ArchConsoleStd.cpp Examining data/barrier-2.3.3+dfsg/src/lib/arch/ArchConsoleStd.h Examining data/barrier-2.3.3+dfsg/src/lib/arch/ArchDaemonNone.cpp Examining data/barrier-2.3.3+dfsg/src/lib/arch/ArchDaemonNone.h Examining data/barrier-2.3.3+dfsg/src/lib/arch/IArchConsole.h Examining data/barrier-2.3.3+dfsg/src/lib/arch/IArchDaemon.h Examining data/barrier-2.3.3+dfsg/src/lib/arch/IArchLog.h Examining data/barrier-2.3.3+dfsg/src/lib/arch/IArchMultithread.h Examining data/barrier-2.3.3+dfsg/src/lib/arch/IArchNetwork.h Examining data/barrier-2.3.3+dfsg/src/lib/arch/IArchSleep.h Examining data/barrier-2.3.3+dfsg/src/lib/arch/IArchString.cpp Examining data/barrier-2.3.3+dfsg/src/lib/arch/IArchString.h Examining data/barrier-2.3.3+dfsg/src/lib/arch/IArchSystem.h Examining data/barrier-2.3.3+dfsg/src/lib/arch/IArchTaskBar.h Examining data/barrier-2.3.3+dfsg/src/lib/arch/IArchTaskBarReceiver.h Examining data/barrier-2.3.3+dfsg/src/lib/arch/IArchTime.h Examining data/barrier-2.3.3+dfsg/src/lib/arch/XArch.h Examining data/barrier-2.3.3+dfsg/src/lib/arch/multibyte.h Examining data/barrier-2.3.3+dfsg/src/lib/arch/unix/ArchConsoleUnix.cpp Examining data/barrier-2.3.3+dfsg/src/lib/arch/unix/ArchConsoleUnix.h Examining data/barrier-2.3.3+dfsg/src/lib/arch/unix/ArchDaemonUnix.cpp Examining data/barrier-2.3.3+dfsg/src/lib/arch/unix/ArchDaemonUnix.h Examining data/barrier-2.3.3+dfsg/src/lib/arch/unix/ArchInternetUnix.cpp Examining data/barrier-2.3.3+dfsg/src/lib/arch/unix/ArchInternetUnix.h Examining data/barrier-2.3.3+dfsg/src/lib/arch/unix/ArchLogUnix.cpp Examining data/barrier-2.3.3+dfsg/src/lib/arch/unix/ArchLogUnix.h Examining data/barrier-2.3.3+dfsg/src/lib/arch/unix/ArchMultithreadPosix.cpp Examining data/barrier-2.3.3+dfsg/src/lib/arch/unix/ArchMultithreadPosix.h Examining data/barrier-2.3.3+dfsg/src/lib/arch/unix/ArchNetworkBSD.cpp Examining data/barrier-2.3.3+dfsg/src/lib/arch/unix/ArchNetworkBSD.h Examining data/barrier-2.3.3+dfsg/src/lib/arch/unix/ArchSleepUnix.cpp Examining data/barrier-2.3.3+dfsg/src/lib/arch/unix/ArchSleepUnix.h Examining data/barrier-2.3.3+dfsg/src/lib/arch/unix/ArchStringUnix.cpp Examining data/barrier-2.3.3+dfsg/src/lib/arch/unix/ArchStringUnix.h Examining data/barrier-2.3.3+dfsg/src/lib/arch/unix/ArchSystemUnix.cpp Examining data/barrier-2.3.3+dfsg/src/lib/arch/unix/ArchSystemUnix.h Examining data/barrier-2.3.3+dfsg/src/lib/arch/unix/ArchTaskBarXWindows.cpp Examining data/barrier-2.3.3+dfsg/src/lib/arch/unix/ArchTaskBarXWindows.h Examining data/barrier-2.3.3+dfsg/src/lib/arch/unix/ArchTimeUnix.cpp Examining data/barrier-2.3.3+dfsg/src/lib/arch/unix/ArchTimeUnix.h Examining data/barrier-2.3.3+dfsg/src/lib/arch/unix/XArchUnix.cpp Examining data/barrier-2.3.3+dfsg/src/lib/arch/unix/XArchUnix.h Examining data/barrier-2.3.3+dfsg/src/lib/arch/vsnprintf.h Examining data/barrier-2.3.3+dfsg/src/lib/arch/win32/ArchConsoleWindows.cpp Examining data/barrier-2.3.3+dfsg/src/lib/arch/win32/ArchConsoleWindows.h Examining data/barrier-2.3.3+dfsg/src/lib/arch/win32/ArchDaemonWindows.cpp Examining data/barrier-2.3.3+dfsg/src/lib/arch/win32/ArchDaemonWindows.h Examining data/barrier-2.3.3+dfsg/src/lib/arch/win32/ArchInternetWindows.cpp Examining data/barrier-2.3.3+dfsg/src/lib/arch/win32/ArchInternetWindows.h Examining data/barrier-2.3.3+dfsg/src/lib/arch/win32/ArchLogWindows.cpp Examining data/barrier-2.3.3+dfsg/src/lib/arch/win32/ArchLogWindows.h Examining data/barrier-2.3.3+dfsg/src/lib/arch/win32/ArchMiscWindows.cpp Examining data/barrier-2.3.3+dfsg/src/lib/arch/win32/ArchMiscWindows.h Examining data/barrier-2.3.3+dfsg/src/lib/arch/win32/ArchMultithreadWindows.cpp Examining data/barrier-2.3.3+dfsg/src/lib/arch/win32/ArchMultithreadWindows.h Examining data/barrier-2.3.3+dfsg/src/lib/arch/win32/ArchNetworkWinsock.cpp Examining data/barrier-2.3.3+dfsg/src/lib/arch/win32/ArchNetworkWinsock.h Examining data/barrier-2.3.3+dfsg/src/lib/arch/win32/ArchSleepWindows.cpp Examining data/barrier-2.3.3+dfsg/src/lib/arch/win32/ArchSleepWindows.h Examining data/barrier-2.3.3+dfsg/src/lib/arch/win32/ArchStringWindows.cpp Examining data/barrier-2.3.3+dfsg/src/lib/arch/win32/ArchStringWindows.h Examining data/barrier-2.3.3+dfsg/src/lib/arch/win32/ArchSystemWindows.cpp Examining data/barrier-2.3.3+dfsg/src/lib/arch/win32/ArchSystemWindows.h Examining data/barrier-2.3.3+dfsg/src/lib/arch/win32/ArchTaskBarWindows.cpp Examining data/barrier-2.3.3+dfsg/src/lib/arch/win32/ArchTaskBarWindows.h Examining data/barrier-2.3.3+dfsg/src/lib/arch/win32/ArchTimeWindows.cpp Examining data/barrier-2.3.3+dfsg/src/lib/arch/win32/ArchTimeWindows.h Examining data/barrier-2.3.3+dfsg/src/lib/arch/win32/XArchWindows.cpp Examining data/barrier-2.3.3+dfsg/src/lib/arch/win32/XArchWindows.h Examining data/barrier-2.3.3+dfsg/src/lib/barrier/App.cpp Examining data/barrier-2.3.3+dfsg/src/lib/barrier/App.h Examining data/barrier-2.3.3+dfsg/src/lib/barrier/AppUtil.cpp Examining data/barrier-2.3.3+dfsg/src/lib/barrier/AppUtil.h Examining data/barrier-2.3.3+dfsg/src/lib/barrier/ArgParser.cpp Examining data/barrier-2.3.3+dfsg/src/lib/barrier/ArgParser.h Examining data/barrier-2.3.3+dfsg/src/lib/barrier/ArgsBase.cpp Examining data/barrier-2.3.3+dfsg/src/lib/barrier/ArgsBase.h Examining data/barrier-2.3.3+dfsg/src/lib/barrier/Chunk.cpp Examining data/barrier-2.3.3+dfsg/src/lib/barrier/Chunk.h Examining data/barrier-2.3.3+dfsg/src/lib/barrier/ClientApp.cpp Examining data/barrier-2.3.3+dfsg/src/lib/barrier/ClientApp.h Examining data/barrier-2.3.3+dfsg/src/lib/barrier/ClientArgs.cpp Examining data/barrier-2.3.3+dfsg/src/lib/barrier/ClientArgs.h Examining data/barrier-2.3.3+dfsg/src/lib/barrier/ClientTaskBarReceiver.cpp Examining data/barrier-2.3.3+dfsg/src/lib/barrier/ClientTaskBarReceiver.h Examining data/barrier-2.3.3+dfsg/src/lib/barrier/Clipboard.cpp Examining data/barrier-2.3.3+dfsg/src/lib/barrier/Clipboard.h Examining data/barrier-2.3.3+dfsg/src/lib/barrier/ClipboardChunk.cpp Examining data/barrier-2.3.3+dfsg/src/lib/barrier/ClipboardChunk.h Examining data/barrier-2.3.3+dfsg/src/lib/barrier/DragInformation.cpp Examining data/barrier-2.3.3+dfsg/src/lib/barrier/DragInformation.h Examining data/barrier-2.3.3+dfsg/src/lib/barrier/DropHelper.cpp Examining data/barrier-2.3.3+dfsg/src/lib/barrier/DropHelper.h Examining data/barrier-2.3.3+dfsg/src/lib/barrier/FileChunk.cpp Examining data/barrier-2.3.3+dfsg/src/lib/barrier/FileChunk.h Examining data/barrier-2.3.3+dfsg/src/lib/barrier/IApp.h Examining data/barrier-2.3.3+dfsg/src/lib/barrier/IAppUtil.h Examining data/barrier-2.3.3+dfsg/src/lib/barrier/IClient.h Examining data/barrier-2.3.3+dfsg/src/lib/barrier/IClipboard.cpp Examining data/barrier-2.3.3+dfsg/src/lib/barrier/IClipboard.h Examining data/barrier-2.3.3+dfsg/src/lib/barrier/IKeyState.cpp Examining data/barrier-2.3.3+dfsg/src/lib/barrier/IKeyState.h Examining data/barrier-2.3.3+dfsg/src/lib/barrier/INode.h Examining data/barrier-2.3.3+dfsg/src/lib/barrier/IPlatformScreen.cpp Examining data/barrier-2.3.3+dfsg/src/lib/barrier/IPlatformScreen.h Examining data/barrier-2.3.3+dfsg/src/lib/barrier/IPrimaryScreen.cpp Examining data/barrier-2.3.3+dfsg/src/lib/barrier/IPrimaryScreen.h Examining data/barrier-2.3.3+dfsg/src/lib/barrier/IScreen.h Examining data/barrier-2.3.3+dfsg/src/lib/barrier/IScreenSaver.h Examining data/barrier-2.3.3+dfsg/src/lib/barrier/ISecondaryScreen.h Examining data/barrier-2.3.3+dfsg/src/lib/barrier/KeyMap.cpp Examining data/barrier-2.3.3+dfsg/src/lib/barrier/KeyMap.h Examining data/barrier-2.3.3+dfsg/src/lib/barrier/KeyState.cpp Examining data/barrier-2.3.3+dfsg/src/lib/barrier/KeyState.h Examining data/barrier-2.3.3+dfsg/src/lib/barrier/PacketStreamFilter.cpp Examining data/barrier-2.3.3+dfsg/src/lib/barrier/PacketStreamFilter.h Examining data/barrier-2.3.3+dfsg/src/lib/barrier/PlatformScreen.cpp Examining data/barrier-2.3.3+dfsg/src/lib/barrier/PlatformScreen.h Examining data/barrier-2.3.3+dfsg/src/lib/barrier/PortableTaskBarReceiver.cpp Examining data/barrier-2.3.3+dfsg/src/lib/barrier/PortableTaskBarReceiver.h Examining data/barrier-2.3.3+dfsg/src/lib/barrier/Screen.cpp Examining data/barrier-2.3.3+dfsg/src/lib/barrier/Screen.h Examining data/barrier-2.3.3+dfsg/src/lib/barrier/ServerApp.cpp Examining data/barrier-2.3.3+dfsg/src/lib/barrier/ServerApp.h Examining data/barrier-2.3.3+dfsg/src/lib/barrier/ServerArgs.cpp Examining data/barrier-2.3.3+dfsg/src/lib/barrier/ServerArgs.h Examining data/barrier-2.3.3+dfsg/src/lib/barrier/ServerTaskBarReceiver.cpp Examining data/barrier-2.3.3+dfsg/src/lib/barrier/ServerTaskBarReceiver.h Examining data/barrier-2.3.3+dfsg/src/lib/barrier/StreamChunker.cpp Examining data/barrier-2.3.3+dfsg/src/lib/barrier/StreamChunker.h Examining data/barrier-2.3.3+dfsg/src/lib/barrier/XBarrier.cpp Examining data/barrier-2.3.3+dfsg/src/lib/barrier/XBarrier.h Examining data/barrier-2.3.3+dfsg/src/lib/barrier/XScreen.cpp Examining data/barrier-2.3.3+dfsg/src/lib/barrier/XScreen.h Examining data/barrier-2.3.3+dfsg/src/lib/barrier/clipboard_types.h Examining data/barrier-2.3.3+dfsg/src/lib/barrier/key_types.cpp Examining data/barrier-2.3.3+dfsg/src/lib/barrier/key_types.h Examining data/barrier-2.3.3+dfsg/src/lib/barrier/mouse_types.h Examining data/barrier-2.3.3+dfsg/src/lib/barrier/option_types.h Examining data/barrier-2.3.3+dfsg/src/lib/barrier/protocol_types.cpp Examining data/barrier-2.3.3+dfsg/src/lib/barrier/protocol_types.h Examining data/barrier-2.3.3+dfsg/src/lib/barrier/unix/AppUtilUnix.cpp Examining data/barrier-2.3.3+dfsg/src/lib/barrier/unix/AppUtilUnix.h Examining data/barrier-2.3.3+dfsg/src/lib/barrier/win32/AppUtilWindows.cpp Examining data/barrier-2.3.3+dfsg/src/lib/barrier/win32/AppUtilWindows.h Examining data/barrier-2.3.3+dfsg/src/lib/barrier/win32/DaemonApp.cpp Examining data/barrier-2.3.3+dfsg/src/lib/barrier/win32/DaemonApp.h Examining data/barrier-2.3.3+dfsg/src/lib/barrier/ProtocolUtil.cpp Examining data/barrier-2.3.3+dfsg/src/lib/barrier/ProtocolUtil.h Examining data/barrier-2.3.3+dfsg/src/lib/base/ELevel.h Examining data/barrier-2.3.3+dfsg/src/lib/base/Event.cpp Examining data/barrier-2.3.3+dfsg/src/lib/base/Event.h Examining data/barrier-2.3.3+dfsg/src/lib/base/EventQueue.cpp Examining data/barrier-2.3.3+dfsg/src/lib/base/EventQueue.h Examining data/barrier-2.3.3+dfsg/src/lib/base/EventTypes.cpp Examining data/barrier-2.3.3+dfsg/src/lib/base/EventTypes.h Examining data/barrier-2.3.3+dfsg/src/lib/base/FunctionEventJob.cpp Examining data/barrier-2.3.3+dfsg/src/lib/base/FunctionEventJob.h Examining data/barrier-2.3.3+dfsg/src/lib/base/FunctionJob.cpp Examining data/barrier-2.3.3+dfsg/src/lib/base/FunctionJob.h Examining data/barrier-2.3.3+dfsg/src/lib/base/IEventJob.h Examining data/barrier-2.3.3+dfsg/src/lib/base/IEventQueue.h Examining data/barrier-2.3.3+dfsg/src/lib/base/IEventQueueBuffer.h Examining data/barrier-2.3.3+dfsg/src/lib/base/IJob.h Examining data/barrier-2.3.3+dfsg/src/lib/base/ILogOutputter.h Examining data/barrier-2.3.3+dfsg/src/lib/base/Log.cpp Examining data/barrier-2.3.3+dfsg/src/lib/base/Log.h Examining data/barrier-2.3.3+dfsg/src/lib/base/NonBlockingStream.cpp Examining data/barrier-2.3.3+dfsg/src/lib/base/NonBlockingStream.h Examining data/barrier-2.3.3+dfsg/src/lib/base/PriorityQueue.h Examining data/barrier-2.3.3+dfsg/src/lib/base/SimpleEventQueueBuffer.cpp Examining data/barrier-2.3.3+dfsg/src/lib/base/SimpleEventQueueBuffer.h Examining data/barrier-2.3.3+dfsg/src/lib/base/Stopwatch.cpp Examining data/barrier-2.3.3+dfsg/src/lib/base/Stopwatch.h Examining data/barrier-2.3.3+dfsg/src/lib/base/String.cpp Examining data/barrier-2.3.3+dfsg/src/lib/base/String.h Examining data/barrier-2.3.3+dfsg/src/lib/base/TMethodEventJob.h Examining data/barrier-2.3.3+dfsg/src/lib/base/TMethodJob.h Examining data/barrier-2.3.3+dfsg/src/lib/base/Unicode.cpp Examining data/barrier-2.3.3+dfsg/src/lib/base/Unicode.h Examining data/barrier-2.3.3+dfsg/src/lib/base/XBase.cpp Examining data/barrier-2.3.3+dfsg/src/lib/base/XBase.h Examining data/barrier-2.3.3+dfsg/src/lib/base/log_outputters.cpp Examining data/barrier-2.3.3+dfsg/src/lib/base/log_outputters.h Examining data/barrier-2.3.3+dfsg/src/lib/client/Client.cpp Examining data/barrier-2.3.3+dfsg/src/lib/client/Client.h Examining data/barrier-2.3.3+dfsg/src/lib/client/ServerProxy.cpp Examining data/barrier-2.3.3+dfsg/src/lib/client/ServerProxy.h Examining data/barrier-2.3.3+dfsg/src/lib/common/DataDirectories.h Examining data/barrier-2.3.3+dfsg/src/lib/common/DataDirectories_static.cpp Examining data/barrier-2.3.3+dfsg/src/lib/common/IInterface.h Examining data/barrier-2.3.3+dfsg/src/lib/common/MacOSXPrecomp.h Examining data/barrier-2.3.3+dfsg/src/lib/common/PathUtilities.cpp Examining data/barrier-2.3.3+dfsg/src/lib/common/PathUtilities.h Examining data/barrier-2.3.3+dfsg/src/lib/common/Version.cpp Examining data/barrier-2.3.3+dfsg/src/lib/common/Version.h Examining data/barrier-2.3.3+dfsg/src/lib/common/basic_types.h Examining data/barrier-2.3.3+dfsg/src/lib/common/common.h Examining data/barrier-2.3.3+dfsg/src/lib/common/stdbitset.h Examining data/barrier-2.3.3+dfsg/src/lib/common/stddeque.h Examining data/barrier-2.3.3+dfsg/src/lib/common/stdfstream.h Examining data/barrier-2.3.3+dfsg/src/lib/common/stdistream.h Examining data/barrier-2.3.3+dfsg/src/lib/common/stdlist.h Examining data/barrier-2.3.3+dfsg/src/lib/common/stdmap.h Examining data/barrier-2.3.3+dfsg/src/lib/common/stdostream.h Examining data/barrier-2.3.3+dfsg/src/lib/common/stdpost.h Examining data/barrier-2.3.3+dfsg/src/lib/common/stdpre.h Examining data/barrier-2.3.3+dfsg/src/lib/common/stdset.h Examining data/barrier-2.3.3+dfsg/src/lib/common/stdsstream.h Examining data/barrier-2.3.3+dfsg/src/lib/common/stdstring.h Examining data/barrier-2.3.3+dfsg/src/lib/common/stdvector.h Examining data/barrier-2.3.3+dfsg/src/lib/common/unix/DataDirectories.cpp Examining data/barrier-2.3.3+dfsg/src/lib/common/win32/DataDirectories.cpp Examining data/barrier-2.3.3+dfsg/src/lib/io/IStream.h Examining data/barrier-2.3.3+dfsg/src/lib/io/StreamBuffer.cpp Examining data/barrier-2.3.3+dfsg/src/lib/io/StreamBuffer.h Examining data/barrier-2.3.3+dfsg/src/lib/io/StreamFilter.cpp Examining data/barrier-2.3.3+dfsg/src/lib/io/StreamFilter.h Examining data/barrier-2.3.3+dfsg/src/lib/io/XIO.cpp Examining data/barrier-2.3.3+dfsg/src/lib/io/XIO.h Examining data/barrier-2.3.3+dfsg/src/lib/ipc/Ipc.cpp Examining data/barrier-2.3.3+dfsg/src/lib/ipc/Ipc.h Examining data/barrier-2.3.3+dfsg/src/lib/ipc/IpcClient.cpp Examining data/barrier-2.3.3+dfsg/src/lib/ipc/IpcClient.h Examining data/barrier-2.3.3+dfsg/src/lib/ipc/IpcClientProxy.cpp Examining data/barrier-2.3.3+dfsg/src/lib/ipc/IpcClientProxy.h Examining data/barrier-2.3.3+dfsg/src/lib/ipc/IpcLogOutputter.cpp Examining data/barrier-2.3.3+dfsg/src/lib/ipc/IpcLogOutputter.h Examining data/barrier-2.3.3+dfsg/src/lib/ipc/IpcMessage.cpp Examining data/barrier-2.3.3+dfsg/src/lib/ipc/IpcMessage.h Examining data/barrier-2.3.3+dfsg/src/lib/ipc/IpcServer.cpp Examining data/barrier-2.3.3+dfsg/src/lib/ipc/IpcServer.h Examining data/barrier-2.3.3+dfsg/src/lib/ipc/IpcServerProxy.cpp Examining data/barrier-2.3.3+dfsg/src/lib/ipc/IpcServerProxy.h Examining data/barrier-2.3.3+dfsg/src/lib/mt/CondVar.cpp Examining data/barrier-2.3.3+dfsg/src/lib/mt/CondVar.h Examining data/barrier-2.3.3+dfsg/src/lib/mt/Lock.cpp Examining data/barrier-2.3.3+dfsg/src/lib/mt/Lock.h Examining data/barrier-2.3.3+dfsg/src/lib/mt/Mutex.cpp Examining data/barrier-2.3.3+dfsg/src/lib/mt/Mutex.h Examining data/barrier-2.3.3+dfsg/src/lib/mt/Thread.cpp Examining data/barrier-2.3.3+dfsg/src/lib/mt/Thread.h Examining data/barrier-2.3.3+dfsg/src/lib/mt/XMT.cpp Examining data/barrier-2.3.3+dfsg/src/lib/mt/XMT.h Examining data/barrier-2.3.3+dfsg/src/lib/mt/XThread.h Examining data/barrier-2.3.3+dfsg/src/lib/net/IDataSocket.cpp Examining data/barrier-2.3.3+dfsg/src/lib/net/IDataSocket.h Examining data/barrier-2.3.3+dfsg/src/lib/net/IListenSocket.h Examining data/barrier-2.3.3+dfsg/src/lib/net/ISocket.h Examining data/barrier-2.3.3+dfsg/src/lib/net/ISocketFactory.h Examining data/barrier-2.3.3+dfsg/src/lib/net/ISocketMultiplexerJob.h Examining data/barrier-2.3.3+dfsg/src/lib/net/NetworkAddress.cpp Examining data/barrier-2.3.3+dfsg/src/lib/net/NetworkAddress.h Examining data/barrier-2.3.3+dfsg/src/lib/net/SecureListenSocket.cpp Examining data/barrier-2.3.3+dfsg/src/lib/net/SecureListenSocket.h Examining data/barrier-2.3.3+dfsg/src/lib/net/SecureSocket.cpp Examining data/barrier-2.3.3+dfsg/src/lib/net/SecureSocket.h Examining data/barrier-2.3.3+dfsg/src/lib/net/SocketMultiplexer.cpp Examining data/barrier-2.3.3+dfsg/src/lib/net/SocketMultiplexer.h Examining data/barrier-2.3.3+dfsg/src/lib/net/TCPListenSocket.cpp Examining data/barrier-2.3.3+dfsg/src/lib/net/TCPListenSocket.h Examining data/barrier-2.3.3+dfsg/src/lib/net/TCPSocket.cpp Examining data/barrier-2.3.3+dfsg/src/lib/net/TCPSocket.h Examining data/barrier-2.3.3+dfsg/src/lib/net/TCPSocketFactory.cpp Examining data/barrier-2.3.3+dfsg/src/lib/net/TCPSocketFactory.h Examining data/barrier-2.3.3+dfsg/src/lib/net/TSocketMultiplexerMethodJob.h Examining data/barrier-2.3.3+dfsg/src/lib/net/XSocket.cpp Examining data/barrier-2.3.3+dfsg/src/lib/net/XSocket.h Examining data/barrier-2.3.3+dfsg/src/lib/platform/IMSWindowsClipboardFacade.h Examining data/barrier-2.3.3+dfsg/src/lib/platform/IOSXKeyResource.cpp Examining data/barrier-2.3.3+dfsg/src/lib/platform/IOSXKeyResource.h Examining data/barrier-2.3.3+dfsg/src/lib/platform/IXWindowsImpl.h Examining data/barrier-2.3.3+dfsg/src/lib/platform/ImmuneKeysReader.cpp Examining data/barrier-2.3.3+dfsg/src/lib/platform/ImmuneKeysReader.h Examining data/barrier-2.3.3+dfsg/src/lib/platform/MSWindowsClipboard.cpp Examining data/barrier-2.3.3+dfsg/src/lib/platform/MSWindowsClipboard.h Examining data/barrier-2.3.3+dfsg/src/lib/platform/MSWindowsClipboardAnyTextConverter.cpp Examining data/barrier-2.3.3+dfsg/src/lib/platform/MSWindowsClipboardAnyTextConverter.h Examining data/barrier-2.3.3+dfsg/src/lib/platform/MSWindowsClipboardBitmapConverter.cpp Examining data/barrier-2.3.3+dfsg/src/lib/platform/MSWindowsClipboardBitmapConverter.h Examining data/barrier-2.3.3+dfsg/src/lib/platform/MSWindowsClipboardFacade.cpp Examining data/barrier-2.3.3+dfsg/src/lib/platform/MSWindowsClipboardFacade.h Examining data/barrier-2.3.3+dfsg/src/lib/platform/MSWindowsClipboardHTMLConverter.cpp Examining data/barrier-2.3.3+dfsg/src/lib/platform/MSWindowsClipboardHTMLConverter.h Examining data/barrier-2.3.3+dfsg/src/lib/platform/MSWindowsClipboardTextConverter.cpp Examining data/barrier-2.3.3+dfsg/src/lib/platform/MSWindowsClipboardTextConverter.h Examining data/barrier-2.3.3+dfsg/src/lib/platform/MSWindowsClipboardUTF16Converter.cpp Examining data/barrier-2.3.3+dfsg/src/lib/platform/MSWindowsClipboardUTF16Converter.h Examining data/barrier-2.3.3+dfsg/src/lib/platform/MSWindowsDebugOutputter.cpp Examining data/barrier-2.3.3+dfsg/src/lib/platform/MSWindowsDebugOutputter.h Examining data/barrier-2.3.3+dfsg/src/lib/platform/MSWindowsDesks.cpp Examining data/barrier-2.3.3+dfsg/src/lib/platform/MSWindowsDesks.h Examining data/barrier-2.3.3+dfsg/src/lib/platform/MSWindowsDropTarget.cpp Examining data/barrier-2.3.3+dfsg/src/lib/platform/MSWindowsDropTarget.h Examining data/barrier-2.3.3+dfsg/src/lib/platform/MSWindowsEventQueueBuffer.cpp Examining data/barrier-2.3.3+dfsg/src/lib/platform/MSWindowsEventQueueBuffer.h Examining data/barrier-2.3.3+dfsg/src/lib/platform/MSWindowsHook.cpp Examining data/barrier-2.3.3+dfsg/src/lib/platform/MSWindowsHook.h Examining data/barrier-2.3.3+dfsg/src/lib/platform/MSWindowsHookResource.cpp Examining data/barrier-2.3.3+dfsg/src/lib/platform/MSWindowsHookResource.h Examining data/barrier-2.3.3+dfsg/src/lib/platform/MSWindowsKeyState.cpp Examining data/barrier-2.3.3+dfsg/src/lib/platform/MSWindowsKeyState.h Examining data/barrier-2.3.3+dfsg/src/lib/platform/MSWindowsScreen.cpp Examining data/barrier-2.3.3+dfsg/src/lib/platform/MSWindowsScreen.h Examining data/barrier-2.3.3+dfsg/src/lib/platform/MSWindowsScreenSaver.cpp Examining data/barrier-2.3.3+dfsg/src/lib/platform/MSWindowsScreenSaver.h Examining data/barrier-2.3.3+dfsg/src/lib/platform/MSWindowsSession.cpp Examining data/barrier-2.3.3+dfsg/src/lib/platform/MSWindowsSession.h Examining data/barrier-2.3.3+dfsg/src/lib/platform/MSWindowsUtil.cpp Examining data/barrier-2.3.3+dfsg/src/lib/platform/MSWindowsUtil.h Examining data/barrier-2.3.3+dfsg/src/lib/platform/MSWindowsWatchdog.cpp Examining data/barrier-2.3.3+dfsg/src/lib/platform/MSWindowsWatchdog.h Examining data/barrier-2.3.3+dfsg/src/lib/platform/OSXClipboard.cpp Examining data/barrier-2.3.3+dfsg/src/lib/platform/OSXClipboard.h Examining data/barrier-2.3.3+dfsg/src/lib/platform/OSXClipboardAnyBitmapConverter.cpp Examining data/barrier-2.3.3+dfsg/src/lib/platform/OSXClipboardAnyBitmapConverter.h Examining data/barrier-2.3.3+dfsg/src/lib/platform/OSXClipboardAnyTextConverter.cpp Examining data/barrier-2.3.3+dfsg/src/lib/platform/OSXClipboardAnyTextConverter.h Examining data/barrier-2.3.3+dfsg/src/lib/platform/OSXClipboardBMPConverter.cpp Examining data/barrier-2.3.3+dfsg/src/lib/platform/OSXClipboardBMPConverter.h Examining data/barrier-2.3.3+dfsg/src/lib/platform/OSXClipboardHTMLConverter.cpp Examining data/barrier-2.3.3+dfsg/src/lib/platform/OSXClipboardHTMLConverter.h Examining data/barrier-2.3.3+dfsg/src/lib/platform/OSXClipboardTextConverter.cpp Examining data/barrier-2.3.3+dfsg/src/lib/platform/OSXClipboardTextConverter.h Examining data/barrier-2.3.3+dfsg/src/lib/platform/OSXClipboardUTF16Converter.cpp Examining data/barrier-2.3.3+dfsg/src/lib/platform/OSXClipboardUTF16Converter.h Examining data/barrier-2.3.3+dfsg/src/lib/platform/OSXDragSimulator.h Examining data/barrier-2.3.3+dfsg/src/lib/platform/OSXDragView.h Examining data/barrier-2.3.3+dfsg/src/lib/platform/OSXEventQueueBuffer.cpp Examining data/barrier-2.3.3+dfsg/src/lib/platform/OSXEventQueueBuffer.h Examining data/barrier-2.3.3+dfsg/src/lib/platform/OSXKeyState.cpp Examining data/barrier-2.3.3+dfsg/src/lib/platform/OSXKeyState.h Examining data/barrier-2.3.3+dfsg/src/lib/platform/OSXMediaKeySimulator.h Examining data/barrier-2.3.3+dfsg/src/lib/platform/OSXMediaKeySupport.h Examining data/barrier-2.3.3+dfsg/src/lib/platform/OSXPasteboardPeeker.h Examining data/barrier-2.3.3+dfsg/src/lib/platform/OSXScreen.h Examining data/barrier-2.3.3+dfsg/src/lib/platform/OSXScreenSaver.cpp Examining data/barrier-2.3.3+dfsg/src/lib/platform/OSXScreenSaver.h Examining data/barrier-2.3.3+dfsg/src/lib/platform/OSXScreenSaverControl.h Examining data/barrier-2.3.3+dfsg/src/lib/platform/OSXScreenSaverUtil.h Examining data/barrier-2.3.3+dfsg/src/lib/platform/OSXUchrKeyResource.cpp Examining data/barrier-2.3.3+dfsg/src/lib/platform/OSXUchrKeyResource.h Examining data/barrier-2.3.3+dfsg/src/lib/platform/XWindowsClipboard.cpp Examining data/barrier-2.3.3+dfsg/src/lib/platform/XWindowsClipboard.h Examining data/barrier-2.3.3+dfsg/src/lib/platform/XWindowsClipboardAnyBitmapConverter.cpp Examining data/barrier-2.3.3+dfsg/src/lib/platform/XWindowsClipboardAnyBitmapConverter.h Examining data/barrier-2.3.3+dfsg/src/lib/platform/XWindowsClipboardBMPConverter.cpp Examining data/barrier-2.3.3+dfsg/src/lib/platform/XWindowsClipboardBMPConverter.h Examining data/barrier-2.3.3+dfsg/src/lib/platform/XWindowsClipboardHTMLConverter.cpp Examining data/barrier-2.3.3+dfsg/src/lib/platform/XWindowsClipboardHTMLConverter.h Examining data/barrier-2.3.3+dfsg/src/lib/platform/XWindowsClipboardTextConverter.cpp Examining data/barrier-2.3.3+dfsg/src/lib/platform/XWindowsClipboardTextConverter.h Examining data/barrier-2.3.3+dfsg/src/lib/platform/XWindowsClipboardUCS2Converter.cpp Examining data/barrier-2.3.3+dfsg/src/lib/platform/XWindowsClipboardUCS2Converter.h Examining data/barrier-2.3.3+dfsg/src/lib/platform/XWindowsClipboardUTF8Converter.cpp Examining data/barrier-2.3.3+dfsg/src/lib/platform/XWindowsClipboardUTF8Converter.h Examining data/barrier-2.3.3+dfsg/src/lib/platform/XWindowsEventQueueBuffer.cpp Examining data/barrier-2.3.3+dfsg/src/lib/platform/XWindowsEventQueueBuffer.h Examining data/barrier-2.3.3+dfsg/src/lib/platform/XWindowsImpl.cpp Examining data/barrier-2.3.3+dfsg/src/lib/platform/XWindowsImpl.h Examining data/barrier-2.3.3+dfsg/src/lib/platform/XWindowsKeyState.cpp Examining data/barrier-2.3.3+dfsg/src/lib/platform/XWindowsKeyState.h Examining data/barrier-2.3.3+dfsg/src/lib/platform/XWindowsScreen.cpp Examining data/barrier-2.3.3+dfsg/src/lib/platform/XWindowsScreen.h Examining data/barrier-2.3.3+dfsg/src/lib/platform/XWindowsScreenSaver.cpp Examining data/barrier-2.3.3+dfsg/src/lib/platform/XWindowsScreenSaver.h Examining data/barrier-2.3.3+dfsg/src/lib/platform/XWindowsUtil.cpp Examining data/barrier-2.3.3+dfsg/src/lib/platform/XWindowsUtil.h Examining data/barrier-2.3.3+dfsg/src/lib/platform/synwinhk.h Examining data/barrier-2.3.3+dfsg/src/lib/server/BaseClientProxy.cpp Examining data/barrier-2.3.3+dfsg/src/lib/server/BaseClientProxy.h Examining data/barrier-2.3.3+dfsg/src/lib/server/ClientListener.cpp Examining data/barrier-2.3.3+dfsg/src/lib/server/ClientListener.h Examining data/barrier-2.3.3+dfsg/src/lib/server/ClientProxy.cpp Examining data/barrier-2.3.3+dfsg/src/lib/server/ClientProxy.h Examining data/barrier-2.3.3+dfsg/src/lib/server/ClientProxy1_0.cpp Examining data/barrier-2.3.3+dfsg/src/lib/server/ClientProxy1_0.h Examining data/barrier-2.3.3+dfsg/src/lib/server/ClientProxy1_1.cpp Examining data/barrier-2.3.3+dfsg/src/lib/server/ClientProxy1_1.h Examining data/barrier-2.3.3+dfsg/src/lib/server/ClientProxy1_2.cpp Examining data/barrier-2.3.3+dfsg/src/lib/server/ClientProxy1_2.h Examining data/barrier-2.3.3+dfsg/src/lib/server/ClientProxy1_3.cpp Examining data/barrier-2.3.3+dfsg/src/lib/server/ClientProxy1_3.h Examining data/barrier-2.3.3+dfsg/src/lib/server/ClientProxy1_4.cpp Examining data/barrier-2.3.3+dfsg/src/lib/server/ClientProxy1_4.h Examining data/barrier-2.3.3+dfsg/src/lib/server/ClientProxy1_5.cpp Examining data/barrier-2.3.3+dfsg/src/lib/server/ClientProxy1_5.h Examining data/barrier-2.3.3+dfsg/src/lib/server/ClientProxy1_6.cpp Examining data/barrier-2.3.3+dfsg/src/lib/server/ClientProxy1_6.h Examining data/barrier-2.3.3+dfsg/src/lib/server/ClientProxyUnknown.cpp Examining data/barrier-2.3.3+dfsg/src/lib/server/ClientProxyUnknown.h Examining data/barrier-2.3.3+dfsg/src/lib/server/Config.cpp Examining data/barrier-2.3.3+dfsg/src/lib/server/Config.h Examining data/barrier-2.3.3+dfsg/src/lib/server/InputFilter.cpp Examining data/barrier-2.3.3+dfsg/src/lib/server/InputFilter.h Examining data/barrier-2.3.3+dfsg/src/lib/server/PrimaryClient.cpp Examining data/barrier-2.3.3+dfsg/src/lib/server/PrimaryClient.h Examining data/barrier-2.3.3+dfsg/src/lib/server/Server.cpp Examining data/barrier-2.3.3+dfsg/src/lib/server/Server.h Examining data/barrier-2.3.3+dfsg/src/test/global/TestEventQueue.cpp Examining data/barrier-2.3.3+dfsg/src/test/global/TestEventQueue.h Examining data/barrier-2.3.3+dfsg/src/test/global/gmock.h Examining data/barrier-2.3.3+dfsg/src/test/global/gtest.h Examining data/barrier-2.3.3+dfsg/src/test/guitests/src/VersionCheckerTests.cpp Examining data/barrier-2.3.3+dfsg/src/test/guitests/src/VersionCheckerTests.h Examining data/barrier-2.3.3+dfsg/src/test/guitests/src/main.cpp Examining data/barrier-2.3.3+dfsg/src/test/integtests/Main.cpp Examining data/barrier-2.3.3+dfsg/src/test/integtests/arch/ArchInternetTests.cpp Examining data/barrier-2.3.3+dfsg/src/test/integtests/ipc/IpcTests.cpp Examining data/barrier-2.3.3+dfsg/src/test/integtests/net/NetworkTests.cpp Examining data/barrier-2.3.3+dfsg/src/test/integtests/platform/MSWindowsClipboardTests.cpp Examining data/barrier-2.3.3+dfsg/src/test/integtests/platform/MSWindowsKeyStateTests.cpp Examining data/barrier-2.3.3+dfsg/src/test/integtests/platform/OSXClipboardTests.cpp Examining data/barrier-2.3.3+dfsg/src/test/integtests/platform/OSXKeyStateTests.cpp Examining data/barrier-2.3.3+dfsg/src/test/integtests/platform/OSXScreenTests.cpp Examining data/barrier-2.3.3+dfsg/src/test/integtests/platform/XWindowsClipboardTests.cpp Examining data/barrier-2.3.3+dfsg/src/test/integtests/platform/XWindowsKeyStateTests.cpp Examining data/barrier-2.3.3+dfsg/src/test/integtests/platform/XWindowsScreenSaverTests.cpp Examining data/barrier-2.3.3+dfsg/src/test/integtests/platform/XWindowsScreenTests.cpp Examining data/barrier-2.3.3+dfsg/src/test/mock/barrier/MockApp.h Examining data/barrier-2.3.3+dfsg/src/test/mock/barrier/MockArgParser.h Examining data/barrier-2.3.3+dfsg/src/test/mock/barrier/MockEventQueue.h Examining data/barrier-2.3.3+dfsg/src/test/mock/barrier/MockKeyMap.h Examining data/barrier-2.3.3+dfsg/src/test/mock/barrier/MockKeyState.h Examining data/barrier-2.3.3+dfsg/src/test/mock/barrier/MockScreen.h Examining data/barrier-2.3.3+dfsg/src/test/mock/io/MockStream.h Examining data/barrier-2.3.3+dfsg/src/test/mock/ipc/MockIpcServer.h Examining data/barrier-2.3.3+dfsg/src/test/mock/server/MockConfig.h Examining data/barrier-2.3.3+dfsg/src/test/mock/server/MockInputFilter.h Examining data/barrier-2.3.3+dfsg/src/test/mock/server/MockPrimaryClient.h Examining data/barrier-2.3.3+dfsg/src/test/mock/server/MockServer.h Examining data/barrier-2.3.3+dfsg/src/test/unittests/Main.cpp Examining data/barrier-2.3.3+dfsg/src/test/unittests/barrier/ArgParserTests.cpp Examining data/barrier-2.3.3+dfsg/src/test/unittests/barrier/ClientArgsParsingTests.cpp Examining data/barrier-2.3.3+dfsg/src/test/unittests/barrier/ClipboardChunkTests.cpp Examining data/barrier-2.3.3+dfsg/src/test/unittests/barrier/ClipboardTests.cpp Examining data/barrier-2.3.3+dfsg/src/test/unittests/barrier/DeprecatedArgsParsingTests.cpp Examining data/barrier-2.3.3+dfsg/src/test/unittests/barrier/GenericArgsParsingTests.cpp Examining data/barrier-2.3.3+dfsg/src/test/unittests/barrier/KeyMapTests.cpp Examining data/barrier-2.3.3+dfsg/src/test/unittests/barrier/KeyStateTests.cpp Examining data/barrier-2.3.3+dfsg/src/test/unittests/barrier/ServerArgsParsingTests.cpp Examining data/barrier-2.3.3+dfsg/src/test/unittests/base/StringTests.cpp Examining data/barrier-2.3.3+dfsg/src/test/unittests/ipc/IpcLogOutputterTests.cpp Examining data/barrier-2.3.3+dfsg/src/test/unittests/platform/OSXKeyStateTests.cpp FINAL RESULTS: data/barrier-2.3.3+dfsg/src/gui/src/AppConfig.cpp:149:56: [4] (shell) system: This causes a new program to execute and is difficult to use safely (CWE-78). try using a library call that implements the same functionality if available. m_Language = settings().value("language", QLocale::system().name()).toString(); data/barrier-2.3.3+dfsg/src/lib/arch/IArchString.h:56:28: [4] (format) vsnprintf: If format strings can be influenced by an attacker, they can be exploited, and note that sprintf variations do not always \0-terminate (CWE-134). Use a constant for the format specification. virtual int vsnprintf(char* str, data/barrier-2.3.3+dfsg/src/lib/arch/unix/ArchDaemonUnix.cpp:59:5: [4] (shell) execvp: This causes a new program to execute and is difficult to use safely (CWE-78). try using a library call that implements the same functionality if available. execvp(selfArgv[0], selfArgv); data/barrier-2.3.3+dfsg/src/lib/arch/vsnprintf.h:24:28: [4] (format) vsnprintf: If format strings can be influenced by an attacker, they can be exploited, and note that sprintf variations do not always \0-terminate (CWE-134). Use a constant for the format specification. # define ARCH_VSNPRINTF vsnprintf data/barrier-2.3.3+dfsg/src/lib/arch/vsnprintf.h:28:14: [4] (format) vsnprintf: If format strings can be influenced by an attacker, they can be exploited, and note that sprintf variations do not always \0-terminate (CWE-134). Use a constant for the format specification. IArchString::vsnprintf(char* str, int size, const char* fmt, va_list ap) data/barrier-2.3.3+dfsg/src/lib/arch/vsnprintf.h:42:14: [4] (format) vsnprintf: If format strings can be influenced by an attacker, they can be exploited, and note that sprintf variations do not always \0-terminate (CWE-134). Use a constant for the format specification. IArchString::vsnprintf(char* str, int size, const char* fmt, va_list ap) data/barrier-2.3.3+dfsg/src/lib/arch/vsnprintf.h:54:17: [4] (format) vfprintf: If format strings can be influenced by an attacker, they can be exploited (CWE-134). Use a constant for the format specification. int n = vfprintf(bitbucket, fmt, ap); data/barrier-2.3.3+dfsg/src/lib/arch/vsnprintf.h:57:13: [4] (format) vsprintf: Potential format string problem (CWE-134). Make format string constant. vsprintf(str, fmt, ap); data/barrier-2.3.3+dfsg/src/lib/arch/vsnprintf.h:65:8: [4] (format) vsnprintf: If format strings can be influenced by an attacker, they can be exploited, and note that sprintf variations do not always \0-terminate (CWE-134). Use a constant for the format specification. #error vsnprintf not implemented data/barrier-2.3.3+dfsg/src/lib/arch/win32/XArchWindows.cpp:41:33: [4] (format) sprintf: Potential format string problem (CWE-134). Make format string constant. return barrier::string::sprintf("Unknown error, code %d", m_error); data/barrier-2.3.3+dfsg/src/lib/barrier/ClientTaskBarReceiver.cpp:120:33: [4] (format) sprintf: Potential format string problem (CWE-134). Make format string constant. return barrier::string::sprintf("%s: Not running", kAppVersion); data/barrier-2.3.3+dfsg/src/lib/barrier/ClientTaskBarReceiver.cpp:123:33: [4] (format) sprintf: Potential format string problem (CWE-134). Make format string constant. return barrier::string::sprintf("%s: %s", data/barrier-2.3.3+dfsg/src/lib/barrier/ClientTaskBarReceiver.cpp:127:33: [4] (format) sprintf: Potential format string problem (CWE-134). Make format string constant. return barrier::string::sprintf("%s: Not connected: %s", data/barrier-2.3.3+dfsg/src/lib/barrier/ClientTaskBarReceiver.cpp:131:33: [4] (format) sprintf: Potential format string problem (CWE-134). Make format string constant. return barrier::string::sprintf("%s: Connecting to %s...", data/barrier-2.3.3+dfsg/src/lib/barrier/ClientTaskBarReceiver.cpp:135:33: [4] (format) sprintf: Potential format string problem (CWE-134). Make format string constant. return barrier::string::sprintf("%s: Connected to %s", data/barrier-2.3.3+dfsg/src/lib/barrier/IKeyState.cpp:65:5: [4] (buffer) strcpy: Does not check for buffer overflows when copying to destination [MS-banned] (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy easily misused). strcpy(info->m_screensBuffer, screens.c_str()); data/barrier-2.3.3+dfsg/src/lib/barrier/IKeyState.cpp:79:5: [4] (buffer) strcpy: Does not check for buffer overflows when copying to destination [MS-banned] (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy easily misused). strcpy(info->m_screensBuffer, x.m_screensBuffer); data/barrier-2.3.3+dfsg/src/lib/barrier/KeyMap.cpp:1177:35: [4] (format) sprintf: Potential format string problem (CWE-134). Make format string constant. x += barrier::string::sprintf("\\u%04x", key); data/barrier-2.3.3+dfsg/src/lib/barrier/PortableTaskBarReceiver.cpp:109:33: [4] (format) sprintf: Potential format string problem (CWE-134). Make format string constant. return barrier::string::sprintf("%s: Not running", kAppVersion); data/barrier-2.3.3+dfsg/src/lib/barrier/PortableTaskBarReceiver.cpp:112:33: [4] (format) sprintf: Potential format string problem (CWE-134). Make format string constant. return barrier::string::sprintf("%s: %s", data/barrier-2.3.3+dfsg/src/lib/barrier/PortableTaskBarReceiver.cpp:116:33: [4] (format) sprintf: Potential format string problem (CWE-134). Make format string constant. return barrier::string::sprintf("%s: Unknown", kAppVersion); data/barrier-2.3.3+dfsg/src/lib/barrier/ServerApp.cpp:698:18: [4] (race) access: This usually indicates a security flaw. If an attacker can change anything along the path between the call to access() and the file's actual use (e.g., by moving files), the attacker can exploit the race condition (CWE-362/CWE-367!). Set up the correct permissions (e.g., using setuid()) and try to open the file directly. if (!access(args().m_screenChangeScript.c_str(), X_OK)) { data/barrier-2.3.3+dfsg/src/lib/barrier/ServerApp.cpp:701:21: [4] (shell) execl: This causes a new program to execute and is difficult to use safely (CWE-78). try using a library call that implements the same functionality if available. execl(args().m_screenChangeScript.c_str(),args().m_screenChangeScript.c_str(),info->m_screen,NULL); data/barrier-2.3.3+dfsg/src/lib/barrier/ServerTaskBarReceiver.cpp:123:33: [4] (format) sprintf: Potential format string problem (CWE-134). Make format string constant. return barrier::string::sprintf("%s: Not running", kAppVersion); data/barrier-2.3.3+dfsg/src/lib/barrier/ServerTaskBarReceiver.cpp:126:33: [4] (format) sprintf: Potential format string problem (CWE-134). Make format string constant. return barrier::string::sprintf("%s: %s", data/barrier-2.3.3+dfsg/src/lib/barrier/ServerTaskBarReceiver.cpp:130:33: [4] (format) sprintf: Potential format string problem (CWE-134). Make format string constant. return barrier::string::sprintf("%s: Waiting for clients", kAppVersion); data/barrier-2.3.3+dfsg/src/lib/barrier/ServerTaskBarReceiver.cpp:133:33: [4] (format) sprintf: Potential format string problem (CWE-134). Make format string constant. return barrier::string::sprintf("%s: Connected", kAppVersion); data/barrier-2.3.3+dfsg/src/lib/barrier/XBarrier.cpp:56:50: [4] (format) sprintf: Potential format string problem (CWE-134). Make format string constant. barrier::string::sprintf("%d", m_major).c_str(), data/barrier-2.3.3+dfsg/src/lib/barrier/XBarrier.cpp:57:50: [4] (format) sprintf: Potential format string problem (CWE-134). Make format string constant. barrier::string::sprintf("%d", m_minor).c_str()); data/barrier-2.3.3+dfsg/src/lib/barrier/XBarrier.cpp:122:26: [4] (format) sprintf: Potential format string problem (CWE-134). Make format string constant. barrier::string::sprintf("%d", m_code).c_str()); data/barrier-2.3.3+dfsg/src/lib/base/Log.cpp:148:23: [4] (format) vsnprintf: If format strings can be influenced by an attacker, they can be exploited, and note that sprintf variations do not always \0-terminate (CWE-134). Use a constant for the format specification. int n = ARCH->vsnprintf(buffer, len - sPad, fmt, args); data/barrier-2.3.3+dfsg/src/lib/base/Log.cpp:190:9: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. sprintf(message, "[%s] %s: %s\n\t%s,%d", timestamp, g_priority[priority], buffer, file, line); data/barrier-2.3.3+dfsg/src/lib/base/Log.cpp:192:9: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. sprintf(message, "[%s] %s: %s", timestamp, g_priority[priority], buffer); data/barrier-2.3.3+dfsg/src/lib/base/String.cpp:128:1: [4] (format) sprintf: Potential format string problem (CWE-134). Make format string constant. sprintf(const char* fmt, ...) data/barrier-2.3.3+dfsg/src/lib/base/String.cpp:138:23: [4] (format) vsnprintf: If format strings can be influenced by an attacker, they can be exploited, and note that sprintf variations do not always \0-terminate (CWE-134). Use a constant for the format specification. int n = ARCH->vsnprintf(buffer, len, fmt, args); data/barrier-2.3.3+dfsg/src/lib/base/String.h:60:13: [4] (format) sprintf: Potential format string problem (CWE-134). Make format string constant. std::string sprintf(const char* fmt, ...); data/barrier-2.3.3+dfsg/src/lib/base/log_outputters.cpp:276:55: [4] (format) sprintf: Potential format string problem (CWE-134). Make format string constant. std::string oldLogFilename = barrier::string::sprintf("%s.1", m_fileName.c_str()); data/barrier-2.3.3+dfsg/src/lib/net/SecureListenSocket.cpp:58:60: [4] (format) sprintf: Potential format string problem (CWE-134). Make format string constant. std::string certificateFilename = barrier::string::sprintf("%s/%s/%s", data/barrier-2.3.3+dfsg/src/lib/net/SecureSocket.cpp:702:47: [4] (format) sprintf: Potential format string problem (CWE-134). Make format string constant. trustedServersFilename = barrier::string::sprintf( data/barrier-2.3.3+dfsg/src/lib/net/XSocket.cpp:67:50: [4] (format) sprintf: Potential format string problem (CWE-134). Make format string constant. barrier::string::sprintf("%d", m_port).c_str()); data/barrier-2.3.3+dfsg/src/lib/platform/MSWindowsClipboardHTMLConverter.cpp:65:46: [4] (format) sprintf: Potential format string problem (CWE-134). Make format string constant. barrier::string::sprintf("%010u", StartFragment)); data/barrier-2.3.3+dfsg/src/lib/platform/MSWindowsClipboardHTMLConverter.cpp:67:46: [4] (format) sprintf: Potential format string problem (CWE-134). Make format string constant. barrier::string::sprintf("%010u", EndFragment)); data/barrier-2.3.3+dfsg/src/lib/platform/MSWindowsClipboardHTMLConverter.cpp:69:46: [4] (format) sprintf: Potential format string problem (CWE-134). Make format string constant. barrier::string::sprintf("%010u", EndHTML)); data/barrier-2.3.3+dfsg/src/lib/platform/MSWindowsUtil.cpp:52:52: [4] (format) sprintf: Potential format string problem (CWE-134). Make format string constant. std::string errorString = barrier::string::sprintf("%d", error); data/barrier-2.3.3+dfsg/src/lib/platform/XWindowsUtil.cpp:1621:33: [4] (format) sprintf: Potential format string problem (CWE-134). Make format string constant. return barrier::string::sprintf("<UNKNOWN> (%d)", (int)atom); data/barrier-2.3.3+dfsg/src/lib/platform/XWindowsUtil.cpp:1624:44: [4] (format) sprintf: Potential format string problem (CWE-134). Make format string constant. std::string msg = barrier::string::sprintf("%s (%d)", name, (int)atom); data/barrier-2.3.3+dfsg/src/lib/platform/XWindowsUtil.cpp:1639:37: [4] (format) sprintf: Potential format string problem (CWE-134). Make format string constant. msg += barrier::string::sprintf("<UNKNOWN> (%d), ", (int)atom[i]); data/barrier-2.3.3+dfsg/src/lib/platform/XWindowsUtil.cpp:1644:37: [4] (format) sprintf: Potential format string problem (CWE-134). Make format string constant. msg += barrier::string::sprintf("%s (%d), ", names[i], (int)atom[i]); data/barrier-2.3.3+dfsg/src/lib/server/Config.cpp:627:26: [4] (format) sprintf: Potential format string problem (CWE-134). Make format string constant. return barrier::string::sprintf("(%d,%d)", (int)(x.first * 100.0f + 0.5f), data/barrier-2.3.3+dfsg/src/lib/server/Config.cpp:1415:27: [4] (format) sprintf: Potential format string problem (CWE-134). Make format string constant. return barrier::string::sprintf("%d", value); data/barrier-2.3.3+dfsg/src/lib/server/Config.cpp:1885:26: [4] (format) sprintf: Potential format string problem (CWE-134). Make format string constant. barrier::string::sprintf("%#2x", line[i])); data/barrier-2.3.3+dfsg/src/lib/server/Config.cpp:2264:27: [4] (format) sprintf: Potential format string problem (CWE-134). Make format string constant. m_error(barrier::string::sprintf("line %d: %s", data/barrier-2.3.3+dfsg/src/lib/server/Config.cpp:2272:27: [4] (format) sprintf: Potential format string problem (CWE-134). Make format string constant. m_error(barrier::string::sprintf("line %d: ", context.getLineNumber()) + data/barrier-2.3.3+dfsg/src/lib/server/InputFilter.cpp:100:29: [4] (format) sprintf: Potential format string problem (CWE-134). Make format string constant. return barrier::string::sprintf("keystroke(%s)", data/barrier-2.3.3+dfsg/src/lib/server/InputFilter.cpp:191:29: [4] (format) sprintf: Potential format string problem (CWE-134). Make format string constant. return barrier::string::sprintf("mousebutton(%s%d)", key.c_str(), m_button); data/barrier-2.3.3+dfsg/src/lib/server/InputFilter.cpp:248:29: [4] (format) sprintf: Potential format string problem (CWE-134). Make format string constant. return barrier::string::sprintf("connect(%s)", m_screen.c_str()); data/barrier-2.3.3+dfsg/src/lib/server/InputFilter.cpp:302:29: [4] (format) sprintf: Potential format string problem (CWE-134). Make format string constant. return barrier::string::sprintf("lockCursorToScreen(%s)", s_mode[m_mode]); data/barrier-2.3.3+dfsg/src/lib/server/InputFilter.cpp:343:29: [4] (format) sprintf: Potential format string problem (CWE-134). Make format string constant. return barrier::string::sprintf("switchToScreen(%s)", m_screen.c_str()); data/barrier-2.3.3+dfsg/src/lib/server/InputFilter.cpp:381:29: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. return barrier::string::sprintf("toggleScreen"); data/barrier-2.3.3+dfsg/src/lib/server/InputFilter.cpp:422:29: [4] (format) sprintf: Potential format string problem (CWE-134). Make format string constant. return barrier::string::sprintf("switchInDirection(%s)", s_names[m_direction]); data/barrier-2.3.3+dfsg/src/lib/server/InputFilter.cpp:477:33: [4] (format) sprintf: Potential format string problem (CWE-134). Make format string constant. return barrier::string::sprintf("%s(%s)", s_name, s_mode[m_mode]); data/barrier-2.3.3+dfsg/src/lib/server/InputFilter.cpp:480:33: [4] (format) sprintf: Potential format string problem (CWE-134). Make format string constant. return barrier::string::sprintf("%s(%s,%.*s)", s_name, s_mode[m_mode], data/barrier-2.3.3+dfsg/src/lib/server/InputFilter.cpp:548:33: [4] (format) sprintf: Potential format string problem (CWE-134). Make format string constant. return barrier::string::sprintf("%s(%s)", type, data/barrier-2.3.3+dfsg/src/lib/server/InputFilter.cpp:553:33: [4] (format) sprintf: Potential format string problem (CWE-134). Make format string constant. return barrier::string::sprintf("%s(%s,*)", type, data/barrier-2.3.3+dfsg/src/lib/server/InputFilter.cpp:558:33: [4] (format) sprintf: Potential format string problem (CWE-134). Make format string constant. return barrier::string::sprintf("%s(%s,%.*s)", type, data/barrier-2.3.3+dfsg/src/lib/server/InputFilter.cpp:629:29: [4] (format) sprintf: Potential format string problem (CWE-134). Make format string constant. return barrier::string::sprintf("%s(%s%s%d)", type, data/barrier-2.3.3+dfsg/src/lib/server/Server.cpp:2341:2: [4] (buffer) strcpy: Does not check for buffer overflows when copying to destination [MS-banned] (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy easily misused). strcpy(info->m_screen, screen.c_str()); data/barrier-2.3.3+dfsg/src/lib/server/Server.cpp:2380:2: [4] (buffer) strcpy: Does not check for buffer overflows when copying to destination [MS-banned] (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy easily misused). strcpy(info->m_screens, screens.c_str()); data/barrier-2.3.3+dfsg/src/test/unittests/base/StringTests.cpp:52:29: [4] (format) sprintf: Potential format string problem (CWE-134). Make format string constant. String result = string::sprintf(format, arg1, arg2); data/barrier-2.3.3+dfsg/src/lib/arch/unix/ArchDaemonUnix.cpp:64:12: [3] (buffer) getenv: Environment variables are untrustable input if they can be set by an attacker. They can have any content and length, and the same variable can be set more than once (CWE-807, CWE-20). Check environment variables carefully before using them. return getenv("_BARRIER_DAEMONIZED") != NULL; data/barrier-2.3.3+dfsg/src/lib/arch/win32/ArchMiscWindows.cpp:375:28: [3] (misc) LoadLibrary: Ensure that the full path to the library is specified, or current directory may be used (CWE-829, CWE-20). Use registry entry or GetWindowsDirectory to find library path, if you aren't already. HINSTANCE kernel = LoadLibrary("kernel32.dll"); data/barrier-2.3.3+dfsg/src/lib/arch/win32/ArchMiscWindows.cpp:415:28: [3] (misc) LoadLibrary: Ensure that the full path to the library is specified, or current directory may be used (CWE-829, CWE-20). Use registry entry or GetWindowsDirectory to find library path, if you aren't already. HINSTANCE kernel = LoadLibrary("kernel32.dll"); data/barrier-2.3.3+dfsg/src/lib/arch/win32/ArchMultithreadWindows.cpp:272:5: [3] (misc) InitializeCriticalSection: Exceptions can be thrown in low-memory situations. Use InitializeCriticalSectionAndSpinCount instead. InitializeCriticalSection(&mutex->m_mutex); data/barrier-2.3.3+dfsg/src/lib/arch/win32/ArchMultithreadWindows.cpp:286:5: [3] (misc) EnterCriticalSection: On some versions of Windows, exceptions can be thrown in low-memory situations. Use InitializeCriticalSectionAndSpinCount instead. EnterCriticalSection(&mutex->m_mutex); data/barrier-2.3.3+dfsg/src/lib/arch/win32/ArchNetworkWinsock.cpp:135:35: [3] (misc) LoadLibrary: Ensure that the full path to the library is specified, or current directory may be used (CWE-829, CWE-20). Use registry entry or GetWindowsDirectory to find library path, if you aren't already. initModule((HMODULE)::LoadLibrary(s_library[i])); data/barrier-2.3.3+dfsg/src/lib/arch/win32/ArchTimeWindows.cpp:57:24: [3] (misc) LoadLibrary: Ensure that the full path to the library is specified, or current directory may be used (CWE-829, CWE-20). Use registry entry or GetWindowsDirectory to find library path, if you aren't already. s_mmInstance = LoadLibrary("winmm"); data/barrier-2.3.3+dfsg/src/lib/common/unix/DataDirectories.cpp:66:23: [3] (buffer) getenv: Environment variables are untrustable input if they can be set by an attacker. They can have any content and length, and the same variable can be set more than once (CWE-807, CWE-20). Check environment variables carefully before using them. const char* dir = getenv("XDG_DATA_HOME"); data/barrier-2.3.3+dfsg/src/lib/platform/MSWindowsWatchdog.cpp:166:24: [3] (misc) LoadLibrary: Ensure that the full path to the library is specified, or current directory may be used (CWE-829, CWE-20). Use registry entry or GetWindowsDirectory to find library path, if you aren't already. HINSTANCE sasLib = LoadLibrary("sas.dll"); data/barrier-2.3.3+dfsg/src/lib/platform/MSWindowsWatchdog.cpp:346:12: [3] (shell) CreateProcess: This causes a new process to execute and is difficult to use safely (CWE-78). Specify the application path in the first argument, NOT as part of the second, or embedded spaces could allow an attacker to force a different program to run. return CreateProcess(NULL, LPSTR(command.c_str()), NULL, NULL, FALSE, creationFlags, NULL, NULL, &si, &m_processInfo); data/barrier-2.3.3+dfsg/src/lib/platform/MSWindowsWatchdog.cpp:346:12: [3] (shell) CreateProcess: This causes a new process to execute and is difficult to use safely (CWE-78). Specify the application path in the first argument, NOT as part of the second, or embedded spaces could allow an attacker to force a different program to run. return CreateProcess(NULL, LPSTR(command.c_str()), NULL, NULL, FALSE, creationFlags, NULL, NULL, &si, &m_processInfo); data/barrier-2.3.3+dfsg/src/lib/platform/MSWindowsWatchdog.cpp:377:22: [3] (shell) CreateProcessAsUser: This causes a new process to execute and is difficult to use safely (CWE-78). Especially watch out for embedded spaces. BOOL createRet = CreateProcessAsUser( data/barrier-2.3.3+dfsg/src/lib/platform/XWindowsScreen.cpp:880:17: [3] (buffer) getenv: Environment variables are untrustable input if they can be set by an attacker. They can have any content and length, and the same variable can be set more than once (CWE-807, CWE-20). Check environment variables carefully before using them. displayName = getenv("DISPLAY"); data/barrier-2.3.3+dfsg/src/cmd/barrierc/MSWindowsClientTaskBarReceiver.cpp:242:23: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). clipboard.open(0); data/barrier-2.3.3+dfsg/src/cmd/barriers/MSWindowsServerTaskBarReceiver.cpp:273:23: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). clipboard.open(0); data/barrier-2.3.3+dfsg/src/gui/src/Fingerprint.cpp:48:14: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (file.open(openMode)) data/barrier-2.3.3+dfsg/src/gui/src/Fingerprint.cpp:90:14: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (file.open(QIODevice::ReadOnly)) data/barrier-2.3.3+dfsg/src/gui/src/IpcClient.cpp:96:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char typeBuf[1]; data/barrier-2.3.3+dfsg/src/gui/src/IpcClient.cpp:111:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char lenBuf[4]; data/barrier-2.3.3+dfsg/src/gui/src/IpcClient.cpp:116:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char elevateBuf[1]; data/barrier-2.3.3+dfsg/src/gui/src/IpcReader.cpp:62:9: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char codeBuf[5]; data/barrier-2.3.3+dfsg/src/gui/src/IpcReader.cpp:70:13: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char lenBuf[4]; data/barrier-2.3.3+dfsg/src/gui/src/MainWindow.cpp:177:18: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). void MainWindow::open() data/barrier-2.3.3+dfsg/src/gui/src/MainWindow.cpp:620:33: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!m_pTempConfigFile->open()) data/barrier-2.3.3+dfsg/src/gui/src/MainWindow.cpp:1163:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!file.open(QIODevice::WriteOnly)) { data/barrier-2.3.3+dfsg/src/gui/src/MainWindow.h:107:14: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). void open(); data/barrier-2.3.3+dfsg/src/gui/src/ServerConfig.cpp:70:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!file.open(QIODevice::WriteOnly | QIODevice::Text)) data/barrier-2.3.3+dfsg/src/gui/src/SetupWizard.cpp:128:22: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). m_MainWindow.open(); data/barrier-2.3.3+dfsg/src/gui/src/SetupWizard.cpp:138:22: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). m_MainWindow.open(); data/barrier-2.3.3+dfsg/src/gui/src/main.cpp:121:14: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). mainWindow.open(); data/barrier-2.3.3+dfsg/src/lib/arch/IArchString.cpp:53:9: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char dummy[MB_LEN_MAX]; data/barrier-2.3.3+dfsg/src/lib/arch/unix/ArchDaemonUnix.cpp:116:5: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). open("/dev/null", O_RDONLY); data/barrier-2.3.3+dfsg/src/lib/arch/unix/ArchDaemonUnix.cpp:117:5: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). open("/dev/null", O_RDWR); data/barrier-2.3.3+dfsg/src/lib/arch/unix/ArchNetworkBSD.cpp:335:9: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char dummy[100]; data/barrier-2.3.3+dfsg/src/lib/arch/unix/ArchNetworkBSD.cpp:467:9: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char dummy[100]; data/barrier-2.3.3+dfsg/src/lib/arch/unix/ArchNetworkBSD.cpp:635:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char name[256]; data/barrier-2.3.3+dfsg/src/lib/arch/unix/ArchNetworkBSD.cpp:666:9: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(&ipAddr->sin6_addr, &in6addr_any, sizeof(in6addr_any)); data/barrier-2.3.3+dfsg/src/lib/arch/unix/ArchNetworkBSD.cpp:713:5: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(&addr->m_addr, p->ai_addr, addr->m_len); data/barrier-2.3.3+dfsg/src/lib/arch/unix/ArchNetworkBSD.cpp:735:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char host[1024]; data/barrier-2.3.3+dfsg/src/lib/arch/unix/ArchNetworkBSD.cpp:736:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char service[20]; data/barrier-2.3.3+dfsg/src/lib/arch/unix/ArchNetworkBSD.cpp:768:9: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char strAddr[INET6_ADDRSTRLEN]; data/barrier-2.3.3+dfsg/src/lib/arch/vsnprintf.h:44:30: [2] (misc) fopen: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). static FILE* bitbucket = fopen("/dev/null", "w"); data/barrier-2.3.3+dfsg/src/lib/arch/win32/ArchDaemonWindows.cpp:682:9: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char path[MAX_PATH]; data/barrier-2.3.3+dfsg/src/lib/arch/win32/ArchInternetWindows.cpp:66:5: [2] (buffer) TCHAR: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. TCHAR buffer[1024]; data/barrier-2.3.3+dfsg/src/lib/arch/win32/ArchNetworkWinsock.cpp:670:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char name[256]; data/barrier-2.3.3+dfsg/src/lib/arch/win32/ArchNetworkWinsock.cpp:699:9: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(&ipAddr->sin6_addr, &in6addr_any, sizeof(in6addr_any)); data/barrier-2.3.3+dfsg/src/lib/arch/win32/ArchNetworkWinsock.cpp:715:5: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(TYPED_ADDR(void, copy), TYPED_ADDR(void, addr), addr->m_len); data/barrier-2.3.3+dfsg/src/lib/arch/win32/ArchNetworkWinsock.cpp:745:5: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(&addr->m_addr, p->ai_addr, addr->m_len); data/barrier-2.3.3+dfsg/src/lib/arch/win32/ArchNetworkWinsock.cpp:764:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char host[1024]; data/barrier-2.3.3+dfsg/src/lib/arch/win32/ArchNetworkWinsock.cpp:765:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char service[20]; data/barrier-2.3.3+dfsg/src/lib/arch/win32/ArchNetworkWinsock.cpp:789:9: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char strAddr[INET6_ADDRSTRLEN]; data/barrier-2.3.3+dfsg/src/lib/arch/win32/ArchSystemWindows.cpp:140:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char hex[16]; data/barrier-2.3.3+dfsg/src/lib/arch/win32/ArchSystemWindows.cpp:154:13: [2] (buffer) TCHAR: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. TCHAR szModName[MAX_PATH]; data/barrier-2.3.3+dfsg/src/lib/arch/win32/ArchSystemWindows.cpp:156:17: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(hex, "(0x%08llX)", reinterpret_cast<long long>(hMods[i])); data/barrier-2.3.3+dfsg/src/lib/barrier/ArgParser.cpp:106:30: [2] (integer) atoi: Unless checked, the resulting number can exceed the expected range (CWE-190). If source untrusted, check both minimum and maximum, even if the input had no minus sign (large numbers can roll over into negative number; consider saving to an unsigned value if that is intended). args.m_yscroll = atoi(argv[++i]); data/barrier-2.3.3+dfsg/src/lib/barrier/Clipboard.cpp:29:5: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). open(0); data/barrier-2.3.3+dfsg/src/lib/barrier/Clipboard.cpp:70:12: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). Clipboard::open(Time time) const data/barrier-2.3.3+dfsg/src/lib/barrier/Clipboard.h:58:25: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). virtual bool open(Time) const; data/barrier-2.3.3+dfsg/src/lib/barrier/ClipboardChunk.cpp:45:10: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. std::memcpy (&chunk[1], &sequence, 4); data/barrier-2.3.3+dfsg/src/lib/barrier/ClipboardChunk.cpp:47:5: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(&chunk[6], size.c_str(), sizeLength); data/barrier-2.3.3+dfsg/src/lib/barrier/ClipboardChunk.cpp:64:10: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. std::memcpy (&chunkData[1], &sequence, 4); data/barrier-2.3.3+dfsg/src/lib/barrier/ClipboardChunk.cpp:66:5: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(&chunkData[6], data.c_str(), dataSize); data/barrier-2.3.3+dfsg/src/lib/barrier/ClipboardChunk.cpp:79:10: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. std::memcpy (&chunk[1], &sequence, 4); data/barrier-2.3.3+dfsg/src/lib/barrier/ClipboardChunk.cpp:135:10: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. std::memcpy (&sequence, &chunk[1], 4); data/barrier-2.3.3+dfsg/src/lib/barrier/DropHelper.cpp:38:14: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). file.open(dropTarget.c_str(), std::ios::out | std::ios::binary); data/barrier-2.3.3+dfsg/src/lib/barrier/FileChunk.cpp:41:5: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(&chunk[1], size.c_str(), sizeLength); data/barrier-2.3.3+dfsg/src/lib/barrier/FileChunk.cpp:53:5: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(&chunkData[1], data, dataSize); data/barrier-2.3.3+dfsg/src/lib/barrier/IClipboard.cpp:33:20: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (clipboard->open(time)) { data/barrier-2.3.3+dfsg/src/lib/barrier/IClipboard.cpp:83:20: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (clipboard->open(0)) { data/barrier-2.3.3+dfsg/src/lib/barrier/IClipboard.cpp:131:14: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (src->open(time)) { data/barrier-2.3.3+dfsg/src/lib/barrier/IClipboard.cpp:132:18: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (dst->open(time)) { data/barrier-2.3.3+dfsg/src/lib/barrier/IClipboard.h:97:25: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). virtual bool open(Time time) const = 0; data/barrier-2.3.3+dfsg/src/lib/barrier/IKeyState.h:62:9: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char m_screensBuffer[1]; data/barrier-2.3.3+dfsg/src/lib/barrier/PacketStreamFilter.cpp:75:9: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(buffer, m_buffer.peek(n), n); data/barrier-2.3.3+dfsg/src/lib/barrier/PacketStreamFilter.cpp:159:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char buffer[4096]; data/barrier-2.3.3+dfsg/src/lib/barrier/ProtocolUtil.cpp:260:13: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char buffer[1]; data/barrier-2.3.3+dfsg/src/lib/barrier/ProtocolUtil.cpp:450:21: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(dst, src->data(), len); data/barrier-2.3.3+dfsg/src/lib/barrier/ProtocolUtil.cpp:464:17: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(dst, src, len); data/barrier-2.3.3+dfsg/src/lib/base/ILogOutputter.h:41:25: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). virtual void open(const char* title) = 0; data/barrier-2.3.3+dfsg/src/lib/base/Log.cpp:135:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char stack[1024]; data/barrier-2.3.3+dfsg/src/lib/base/Log.cpp:171:9: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char timestamp[50]; data/barrier-2.3.3+dfsg/src/lib/base/Log.cpp:175:9: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(timestamp, "%04i-%02i-%02iT%02i:%02i:%02i", tm->tm_year + 1900, tm->tm_mon+1, tm->tm_mday, tm->tm_hour, tm->tm_min, tm->tm_sec); data/barrier-2.3.3+dfsg/src/lib/base/Log.cpp:220:16: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). outputter->open(kAppVersion); data/barrier-2.3.3+dfsg/src/lib/base/String.cpp:130:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char tmp[1024]; data/barrier-2.3.3+dfsg/src/lib/base/Unicode.cpp:351:7: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. ::memcpy(dst, tmp.data(), sizeof(wchar_t) * size); data/barrier-2.3.3+dfsg/src/lib/base/log_outputters.cpp:45:19: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). StopLogOutputter::open(const char*) data/barrier-2.3.3+dfsg/src/lib/base/log_outputters.cpp:82:22: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). ConsoleLogOutputter::open(const char* title) data/barrier-2.3.3+dfsg/src/lib/base/log_outputters.cpp:128:21: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). SystemLogOutputter::open(const char* title) data/barrier-2.3.3+dfsg/src/lib/base/log_outputters.cpp:165:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). m_syslog->open(title); data/barrier-2.3.3+dfsg/src/lib/base/log_outputters.cpp:208:23: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). BufferedLogOutputter::open(const char*) data/barrier-2.3.3+dfsg/src/lib/base/log_outputters.cpp:263:14: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). m_handle.open(m_fileName.c_str(), std::fstream::app); data/barrier-2.3.3+dfsg/src/lib/base/log_outputters.cpp:285:19: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). FileLogOutputter::open(const char *title) {} data/barrier-2.3.3+dfsg/src/lib/base/log_outputters.cpp:308:26: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). MesssageBoxLogOutputter::open(const char* title) data/barrier-2.3.3+dfsg/src/lib/base/log_outputters.h:42:25: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). virtual void open(const char* title); data/barrier-2.3.3+dfsg/src/lib/base/log_outputters.h:59:25: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). virtual void open(const char* title); data/barrier-2.3.3+dfsg/src/lib/base/log_outputters.h:78:25: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). virtual void open(const char* title); data/barrier-2.3.3+dfsg/src/lib/base/log_outputters.h:99:25: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). virtual void open(const char* title); data/barrier-2.3.3+dfsg/src/lib/base/log_outputters.h:149:25: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). virtual void open(const char* title); data/barrier-2.3.3+dfsg/src/lib/base/log_outputters.h:168:25: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). virtual void open(const char* title); data/barrier-2.3.3+dfsg/src/lib/client/Client.cpp:392:19: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (clipboard.open(m_timeClipboard[id])) { data/barrier-2.3.3+dfsg/src/lib/common/stdsstream.h:137:11: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(new_stream, stream, old_stream_len); data/barrier-2.3.3+dfsg/src/lib/common/stdsstream.h:159:7: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(stream, s, n); data/barrier-2.3.3+dfsg/src/lib/ipc/IpcLogOutputter.cpp:77:18: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). IpcLogOutputter::open(const char* title) data/barrier-2.3.3+dfsg/src/lib/ipc/IpcLogOutputter.h:49:25: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). virtual void open(const char* title); data/barrier-2.3.3+dfsg/src/lib/net/SecureSocket.cpp:236:13: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(s_staticBuffer.get(), m_outputBuffer.peek(bufferSize), bufferSize); data/barrier-2.3.3+dfsg/src/lib/net/SecureSocket.cpp:644:9: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char error[MAX_ERROR_SIZE]; data/barrier-2.3.3+dfsg/src/lib/net/SecureSocket.cpp:686:14: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. unsigned char tempFingerprint[EVP_MAX_MD_SIZE]; data/barrier-2.3.3+dfsg/src/lib/net/SecureSocket.cpp:714:10: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). file.open(trustedServersFilename.c_str()); data/barrier-2.3.3+dfsg/src/lib/net/SecureSocket.cpp:805:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char msg[kMsgSize]; data/barrier-2.3.3+dfsg/src/lib/net/SecureSocket.cpp:870:9: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char msg[kMsgSize]; data/barrier-2.3.3+dfsg/src/lib/net/TCPSocket.cpp:147:9: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(buffer, m_inputBuffer.peek(n), n); data/barrier-2.3.3+dfsg/src/lib/platform/IOSXKeyResource.cpp:113:9: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char str[2]; data/barrier-2.3.3+dfsg/src/lib/platform/IXWindowsImpl.h:212:48: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. virtual int XQueryKeymap(Display* display, char keys_return[32]) = 0; data/barrier-2.3.3+dfsg/src/lib/platform/ImmuneKeysReader.cpp:42:9: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char buffer[AllocatedLineSize]; data/barrier-2.3.3+dfsg/src/lib/platform/MSWindowsClipboard.cpp:122:21: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). MSWindowsClipboard::open(Time time) const data/barrier-2.3.3+dfsg/src/lib/platform/MSWindowsClipboard.h:59:25: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). virtual bool open(Time) const; data/barrier-2.3.3+dfsg/src/lib/platform/MSWindowsClipboardAnyTextConverter.cpp:53:13: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(dst, text.data(), size); data/barrier-2.3.3+dfsg/src/lib/platform/MSWindowsClipboardBitmapConverter.cpp:57:13: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(dst, data.data(), data.size()); data/barrier-2.3.3+dfsg/src/lib/platform/MSWindowsClipboardHTMLConverter.cpp:87:28: [2] (integer) atoi: Unless checked, the resulting number can exceed the expected range (CWE-190). If source untrusted, check both minimum and maximum, even if the input had no minus sign (large numbers can roll over into negative number; consider saving to an unsigned value if that is intended). SInt32 start = (SInt32)atoi(startArg.c_str()); data/barrier-2.3.3+dfsg/src/lib/platform/MSWindowsClipboardHTMLConverter.cpp:88:28: [2] (integer) atoi: Unless checked, the resulting number can exceed the expected range (CWE-190). If source untrusted, check both minimum and maximum, even if the input had no minus sign (large numbers can roll over into negative number; consider saving to an unsigned value if that is intended). SInt32 end = (SInt32)atoi(endArg.c_str()); data/barrier-2.3.3+dfsg/src/lib/platform/MSWindowsDebugOutputter.cpp:34:26: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). MSWindowsDebugOutputter::open(const char* title) data/barrier-2.3.3+dfsg/src/lib/platform/MSWindowsDebugOutputter.h:34:25: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). virtual void open(const char* title); data/barrier-2.3.3+dfsg/src/lib/platform/MSWindowsKeyState.cpp:711:8: [2] (buffer) MultiByteToWideChar: Requires maximum length in CHARACTERS, not bytes (CWE-120). if (MultiByteToWideChar(CP_THREAD_ACP, MB_PRECOMPOSED, data/barrier-2.3.3+dfsg/src/lib/platform/MSWindowsScreen.cpp:150:9: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char desktopPath[MAX_PATH]; data/barrier-2.3.3+dfsg/src/lib/platform/MSWindowsScreen.cpp:406:18: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!dst.open(0)) { data/barrier-2.3.3+dfsg/src/lib/platform/MSWindowsWatchdog.cpp:53:9: [2] (buffer) TCHAR: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. TCHAR buffer[BufferLength]; data/barrier-2.3.3+dfsg/src/lib/platform/OSXClipboard.cpp:137:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). OSXClipboard::open(Time time) const data/barrier-2.3.3+dfsg/src/lib/platform/OSXClipboard.h:41:25: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). virtual bool open(Time) const; data/barrier-2.3.3+dfsg/src/lib/platform/XWindowsClipboard.cpp:320:20: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). XWindowsClipboard::open(Time time) const data/barrier-2.3.3+dfsg/src/lib/platform/XWindowsClipboard.cpp:716:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char name[18 + 20]; data/barrier-2.3.3+dfsg/src/lib/platform/XWindowsClipboard.cpp:717:5: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(name, "_MOTIF_CLIP_ITEM_%d", header.m_item); data/barrier-2.3.3+dfsg/src/lib/platform/XWindowsClipboard.cpp:746:9: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(name, "_MOTIF_CLIP_ITEM_%d", formats[i]); data/barrier-2.3.3+dfsg/src/lib/platform/XWindowsClipboard.cpp:828:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char name[18 + 20]; data/barrier-2.3.3+dfsg/src/lib/platform/XWindowsClipboard.cpp:829:5: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(name, "_MOTIF_CLIP_ITEM_%d", format->m_data); data/barrier-2.3.3+dfsg/src/lib/platform/XWindowsClipboard.h:94:25: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). virtual bool open(Time) const; data/barrier-2.3.3+dfsg/src/lib/platform/XWindowsEventQueueBuffer.cpp:105:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char buf[16]; data/barrier-2.3.3+dfsg/src/lib/platform/XWindowsImpl.cpp:575:50: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. int XWindowsImpl::XQueryKeymap(Display* display, char keys_return[32]) data/barrier-2.3.3+dfsg/src/lib/platform/XWindowsImpl.h:174:48: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. virtual int XQueryKeymap(Display* display, char keys_return[32]); data/barrier-2.3.3+dfsg/src/lib/platform/XWindowsKeyState.cpp:213:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char keys[32]; data/barrier-2.3.3+dfsg/src/lib/platform/XWindowsScreen.cpp:372:25: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!m_clipboard[id]->open(timestamp)) { data/barrier-2.3.3+dfsg/src/lib/platform/XWindowsScreen.cpp:1816:3: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char scratch[32]; data/barrier-2.3.3+dfsg/src/lib/platform/XWindowsScreen.cpp:1844:3: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char dummy[1]; data/barrier-2.3.3+dfsg/src/lib/platform/XWindowsUtil.cpp:1780:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char errtxt[1024]; data/barrier-2.3.3+dfsg/src/lib/server/Server.cpp:110:29: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (clipboard.m_clipboard.open(0)) { data/barrier-2.3.3+dfsg/src/lib/server/Server.cpp:1251:28: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (clipboard.m_clipboard.open(0)) { data/barrier-2.3.3+dfsg/src/lib/server/Server.cpp:1886:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(info, infoString.c_str(), size); data/barrier-2.3.3+dfsg/src/lib/server/Server.h:69:9: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char m_screen[1]; data/barrier-2.3.3+dfsg/src/lib/server/Server.h:101:9: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char m_screens[1]; data/barrier-2.3.3+dfsg/src/test/integtests/net/NetworkTests.cpp:474:5: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(data, head, headSize); data/barrier-2.3.3+dfsg/src/test/integtests/net/NetworkTests.cpp:479:9: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(data, barrierRocks, barrierRocksSize); data/barrier-2.3.3+dfsg/src/test/integtests/net/NetworkTests.cpp:489:5: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(data, tail, tailSize); data/barrier-2.3.3+dfsg/src/test/integtests/net/NetworkTests.cpp:498:10: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). file.open(filename, ios::out | ios::binary); data/barrier-2.3.3+dfsg/src/test/integtests/platform/MSWindowsClipboardTests.cpp:42:19: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). clipboard.open(0); data/barrier-2.3.3+dfsg/src/test/integtests/platform/MSWindowsClipboardTests.cpp:56:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). clipboard.open(0); data/barrier-2.3.3+dfsg/src/test/integtests/platform/MSWindowsClipboardTests.cpp:66:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). clipboard.open(0); data/barrier-2.3.3+dfsg/src/test/integtests/platform/MSWindowsClipboardTests.cpp:76:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). clipboard.open(0); data/barrier-2.3.3+dfsg/src/test/integtests/platform/MSWindowsClipboardTests.cpp:88:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). clipboard.open(0); data/barrier-2.3.3+dfsg/src/test/integtests/platform/MSWindowsClipboardTests.cpp:103:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). clipboard.open(0); data/barrier-2.3.3+dfsg/src/test/integtests/platform/MSWindowsClipboardTests.cpp:111:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). clipboard.open(0); data/barrier-2.3.3+dfsg/src/test/integtests/platform/MSWindowsClipboardTests.cpp:124:29: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). bool actual = clipboard.open(0); data/barrier-2.3.3+dfsg/src/test/integtests/platform/MSWindowsClipboardTests.cpp:133:29: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). bool actual = clipboard.open(1); data/barrier-2.3.3+dfsg/src/test/integtests/platform/MSWindowsClipboardTests.cpp:141:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). clipboard.open(0); data/barrier-2.3.3+dfsg/src/test/integtests/platform/MSWindowsClipboardTests.cpp:178:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). clipboard.open(0); data/barrier-2.3.3+dfsg/src/test/integtests/platform/MSWindowsClipboardTests.cpp:190:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). clipboard.open(0); data/barrier-2.3.3+dfsg/src/test/integtests/platform/MSWindowsClipboardTests.cpp:201:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). clipboard.open(0); data/barrier-2.3.3+dfsg/src/test/integtests/platform/MSWindowsClipboardTests.cpp:212:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). clipboard.open(0); data/barrier-2.3.3+dfsg/src/test/integtests/platform/MSWindowsClipboardTests.cpp:224:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). clipboard.open(0); data/barrier-2.3.3+dfsg/src/test/integtests/platform/OSXClipboardTests.cpp:27:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). clipboard.open(0); data/barrier-2.3.3+dfsg/src/test/integtests/platform/OSXClipboardTests.cpp:37:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). clipboard.open(0); data/barrier-2.3.3+dfsg/src/test/integtests/platform/OSXClipboardTests.cpp:49:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). clipboard.open(0); data/barrier-2.3.3+dfsg/src/test/integtests/platform/OSXClipboardTests.cpp:60:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). clipboard.open(0); data/barrier-2.3.3+dfsg/src/test/integtests/platform/OSXClipboardTests.cpp:73:29: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). bool actual = clipboard.open(0); data/barrier-2.3.3+dfsg/src/test/integtests/platform/OSXClipboardTests.cpp:82:29: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). bool actual = clipboard.open(1); data/barrier-2.3.3+dfsg/src/test/integtests/platform/OSXClipboardTests.cpp:90:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). clipboard.open(0); data/barrier-2.3.3+dfsg/src/test/integtests/platform/OSXClipboardTests.cpp:100:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). clipboard.open(1); data/barrier-2.3.3+dfsg/src/test/integtests/platform/OSXClipboardTests.cpp:112:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). clipboard.open(1); data/barrier-2.3.3+dfsg/src/test/integtests/platform/OSXClipboardTests.cpp:123:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). clipboard.open(0); data/barrier-2.3.3+dfsg/src/test/integtests/platform/OSXClipboardTests.cpp:135:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). clipboard.open(0); data/barrier-2.3.3+dfsg/src/test/integtests/platform/OSXClipboardTests.cpp:146:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). clipboard.open(0); data/barrier-2.3.3+dfsg/src/test/integtests/platform/OSXClipboardTests.cpp:157:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). clipboard.open(0); data/barrier-2.3.3+dfsg/src/test/integtests/platform/XWindowsClipboardTests.cpp:59:20: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). clipboard->open(0); // needed to empty the clipboard data/barrier-2.3.3+dfsg/src/test/unittests/barrier/ClipboardTests.cpp:26:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). clipboard.open(0); data/barrier-2.3.3+dfsg/src/test/unittests/barrier/ClipboardTests.cpp:36:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). clipboard.open(0); data/barrier-2.3.3+dfsg/src/test/unittests/barrier/ClipboardTests.cpp:48:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). clipboard.open(0); data/barrier-2.3.3+dfsg/src/test/unittests/barrier/ClipboardTests.cpp:59:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). clipboard.open(0); data/barrier-2.3.3+dfsg/src/test/unittests/barrier/ClipboardTests.cpp:72:29: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). bool actual = clipboard.open(0); data/barrier-2.3.3+dfsg/src/test/unittests/barrier/ClipboardTests.cpp:81:29: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). bool actual = clipboard.open(1); data/barrier-2.3.3+dfsg/src/test/unittests/barrier/ClipboardTests.cpp:89:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). clipboard.open(0); data/barrier-2.3.3+dfsg/src/test/unittests/barrier/ClipboardTests.cpp:99:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). clipboard.open(1); data/barrier-2.3.3+dfsg/src/test/unittests/barrier/ClipboardTests.cpp:109:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). clipboard.open(1); data/barrier-2.3.3+dfsg/src/test/unittests/barrier/ClipboardTests.cpp:120:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). clipboard.open(0); data/barrier-2.3.3+dfsg/src/test/unittests/barrier/ClipboardTests.cpp:131:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). clipboard.open(0); data/barrier-2.3.3+dfsg/src/test/unittests/barrier/ClipboardTests.cpp:141:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). clipboard.open(0); data/barrier-2.3.3+dfsg/src/test/unittests/barrier/ClipboardTests.cpp:151:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). clipboard.open(0); data/barrier-2.3.3+dfsg/src/test/unittests/barrier/ClipboardTests.cpp:173:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). clipboard.open(0); data/barrier-2.3.3+dfsg/src/test/unittests/barrier/ClipboardTests.cpp:186:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). clipboard.open(0); data/barrier-2.3.3+dfsg/src/test/unittests/barrier/ClipboardTests.cpp:209:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). clipboard.open(0); data/barrier-2.3.3+dfsg/src/test/unittests/barrier/ClipboardTests.cpp:231:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). clipboard.open(0); data/barrier-2.3.3+dfsg/src/test/unittests/barrier/ClipboardTests.cpp:244:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). clipboard.open(0); data/barrier-2.3.3+dfsg/src/test/unittests/barrier/ClipboardTests.cpp:262:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). clipboard.open(0); data/barrier-2.3.3+dfsg/src/test/unittests/barrier/ClipboardTests.cpp:284:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). clipboard.open(0); data/barrier-2.3.3+dfsg/src/test/unittests/barrier/ClipboardTests.cpp:318:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). clipboard.open(0); data/barrier-2.3.3+dfsg/src/test/unittests/barrier/ClipboardTests.cpp:352:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). clipboard.open(0); data/barrier-2.3.3+dfsg/src/test/unittests/barrier/ClipboardTests.cpp:386:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). clipboard.open(0); data/barrier-2.3.3+dfsg/src/test/unittests/barrier/ClipboardTests.cpp:394:16: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). clipboard1.open(0); data/barrier-2.3.3+dfsg/src/test/unittests/barrier/ClipboardTests.cpp:401:16: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). clipboard2.open(0); data/barrier-2.3.3+dfsg/src/cmd/barrierc/barrierc.cpp:53:9: [1] (buffer) getchar: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). getchar(); data/barrier-2.3.3+dfsg/src/cmd/barriers/barriers.cpp:60:9: [1] (buffer) getchar: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). getchar(); data/barrier-2.3.3+dfsg/src/gui/src/IpcClient.cpp:109:23: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). int length = (int)strlen(charCommand); data/barrier-2.3.3+dfsg/src/gui/src/IpcReader.cpp:46:55: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). connect(m_Socket, SIGNAL(readyRead()), this, SLOT(read())); data/barrier-2.3.3+dfsg/src/gui/src/IpcReader.cpp:51:58: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). disconnect(m_Socket, SIGNAL(readyRead()), this, SLOT(read())); data/barrier-2.3.3+dfsg/src/gui/src/IpcReader.cpp:54:17: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). void IpcReader::read() data/barrier-2.3.3+dfsg/src/gui/src/IpcReader.cpp:95:12: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). while (read < length) { data/barrier-2.3.3+dfsg/src/gui/src/IpcReader.cpp:96:28: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). int ask = length - read; data/barrier-2.3.3+dfsg/src/gui/src/IpcReader.cpp:102:29: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). int got = m_Socket->read(buffer, ask); data/barrier-2.3.3+dfsg/src/gui/src/IpcReader.cpp:106:28: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). << " read=" << read << std::endl); data/barrier-2.3.3+dfsg/src/gui/src/IpcReader.cpp:112:27: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). else if (length - read > 0) { data/barrier-2.3.3+dfsg/src/gui/src/IpcReader.h:44:10: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). void read(); data/barrier-2.3.3+dfsg/src/lib/arch/unix/ArchDaemonUnix.cpp:107:5: [1] (access) umask: Ensure that umask is given most restrictive possible setting (e.g., 066 or 077) (CWE-732). umask(077); data/barrier-2.3.3+dfsg/src/lib/arch/unix/ArchNetworkBSD.cpp:339:22: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). ignore = read(unblockPipe[0], dummy, sizeof(dummy)); data/barrier-2.3.3+dfsg/src/lib/arch/unix/ArchNetworkBSD.cpp:469:13: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). read(unblockPipe[0], dummy, sizeof(dummy)); data/barrier-2.3.3+dfsg/src/lib/arch/unix/ArchNetworkBSD.cpp:522:17: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). ssize_t n = read(s->m_fd, buf, len); data/barrier-2.3.3+dfsg/src/lib/arch/win32/ArchInternetWindows.cpp:134:69: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). while (InternetReadFile(m_request, buffer, sizeof(buffer) - 1, &read) && (read != 0)) { data/barrier-2.3.3+dfsg/src/lib/arch/win32/ArchInternetWindows.cpp:134:79: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). while (InternetReadFile(m_request, buffer, sizeof(buffer) - 1, &read) && (read != 0)) { data/barrier-2.3.3+dfsg/src/lib/arch/win32/ArchInternetWindows.cpp:135:16: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). buffer[read] = 0; data/barrier-2.3.3+dfsg/src/lib/arch/win32/ArchLogWindows.cpp:91:40: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). (DWORD)strlen(msg) + 1, // raw data size data/barrier-2.3.3+dfsg/src/lib/arch/win32/ArchTaskBarWindows.cpp:273:9: [1] (buffer) strncpy: Easily used incorrectly; doesn't always \0-terminate or check for invalid pointers [MS-banned] (CWE-120). strncpy(data.szTip, toolTip.c_str(), sizeof(data.szTip)); data/barrier-2.3.3+dfsg/src/lib/barrier/IKeyState.cpp:73:41: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). strlen(x.m_screensBuffer)); data/barrier-2.3.3+dfsg/src/lib/barrier/IKeyState.cpp:110:21: [1] (buffer) equal: Function does not check the second iterator for over-read conditions (CWE-126). This function is often discouraged by most C++ coding standards in favor of its safer alternatives provided since C++14. Consider using a form of this function that checks the second iterator before potentially overflowing it. IKeyState::KeyInfo::equal(const KeyInfo* a, const KeyInfo* b) data/barrier-2.3.3+dfsg/src/lib/barrier/IKeyState.h:52:21: [1] (buffer) equal: Function does not check the second iterator for over-read conditions (CWE-126). This function is often discouraged by most C++ coding standards in favor of its safer alternatives provided since C++14. Consider using a form of this function that checks the second iterator before potentially overflowing it. static bool equal(const KeyInfo*, const KeyInfo*); data/barrier-2.3.3+dfsg/src/lib/barrier/IPrimaryScreen.cpp:47:29: [1] (buffer) equal: Function does not check the second iterator for over-read conditions (CWE-126). This function is often discouraged by most C++ coding standards in favor of its safer alternatives provided since C++14. Consider using a form of this function that checks the second iterator before potentially overflowing it. IPrimaryScreen::ButtonInfo::equal(const ButtonInfo* a, const ButtonInfo* b) data/barrier-2.3.3+dfsg/src/lib/barrier/IPrimaryScreen.h:40:32: [1] (buffer) equal: Function does not check the second iterator for over-read conditions (CWE-126). This function is often discouraged by most C++ coding standards in favor of its safer alternatives provided since C++14. Consider using a form of this function that checks the second iterator before potentially overflowing it. static bool equal(const ButtonInfo*, const ButtonInfo*); data/barrier-2.3.3+dfsg/src/lib/barrier/PacketStreamFilter.cpp:55:21: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). PacketStreamFilter::read(void* buffer, UInt32 n) data/barrier-2.3.3+dfsg/src/lib/barrier/PacketStreamFilter.cpp:160:29: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). UInt32 n = getStream()->read(buffer, sizeof(buffer)); data/barrier-2.3.3+dfsg/src/lib/barrier/PacketStreamFilter.cpp:163:26: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). n = getStream()->read(buffer, sizeof(buffer)); data/barrier-2.3.3+dfsg/src/lib/barrier/PacketStreamFilter.h:38:27: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). virtual UInt32 read(void* buffer, UInt32 n); data/barrier-2.3.3+dfsg/src/lib/barrier/ProtocolUtil.cpp:117:17: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). read(stream, buffer, len); data/barrier-2.3.3+dfsg/src/lib/barrier/ProtocolUtil.cpp:156:17: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). read(stream, buffer, 4); data/barrier-2.3.3+dfsg/src/lib/barrier/ProtocolUtil.cpp:168:25: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). read(stream, buffer, 1); data/barrier-2.3.3+dfsg/src/lib/barrier/ProtocolUtil.cpp:178:25: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). read(stream, buffer, 2); data/barrier-2.3.3+dfsg/src/lib/barrier/ProtocolUtil.cpp:190:25: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). read(stream, buffer, 4); data/barrier-2.3.3+dfsg/src/lib/barrier/ProtocolUtil.cpp:208:17: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). read(stream, buffer, 4); data/barrier-2.3.3+dfsg/src/lib/barrier/ProtocolUtil.cpp:225:21: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). read(stream, sBuffer, len); data/barrier-2.3.3+dfsg/src/lib/barrier/ProtocolUtil.cpp:261:13: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). read(stream, buffer, 1); data/barrier-2.3.3+dfsg/src/lib/barrier/ProtocolUtil.cpp:514:15: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). ProtocolUtil::read(barrier::IStream* stream, void* vbuffer, UInt32 count) data/barrier-2.3.3+dfsg/src/lib/barrier/ProtocolUtil.cpp:522:28: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). UInt32 n = stream->read(buffer, count); data/barrier-2.3.3+dfsg/src/lib/barrier/ProtocolUtil.h:84:28: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). static void read(barrier::IStream*, void*, UInt32); data/barrier-2.3.3+dfsg/src/lib/barrier/StreamChunker.cpp:88:14: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). file.read(chunkData, chunkSize); data/barrier-2.3.3+dfsg/src/lib/base/Log.cpp:118:10: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). if ((strlen(fmt) > 2) && (fmt[0] == '%' && fmt[1] == 'z')) { data/barrier-2.3.3+dfsg/src/lib/base/Log.cpp:179:17: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). size += strlen(timestamp); data/barrier-2.3.3+dfsg/src/lib/base/Log.cpp:180:17: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). size += strlen(g_priority[priority]); data/barrier-2.3.3+dfsg/src/lib/base/Log.cpp:181:17: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). size += strlen(buffer); data/barrier-2.3.3+dfsg/src/lib/base/Log.cpp:183:17: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). size += strlen(file); data/barrier-2.3.3+dfsg/src/lib/base/NonBlockingStream.cpp:53:18: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). int result = read(_fd, &ch, 1); data/barrier-2.3.3+dfsg/src/lib/base/String.cpp:100:22: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). size_t len = strlen(arg); data/barrier-2.3.3+dfsg/src/lib/base/String.cpp:106:27: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). size_t resultLength = strlen(fmt); data/barrier-2.3.3+dfsg/src/lib/base/String.cpp:279:14: [1] (buffer) equal: Function does not check the second iterator for over-read conditions (CWE-126). This function is often discouraged by most C++ coding standards in favor of its safer alternatives provided since C++14. Consider using a form of this function that checks the second iterator before potentially overflowing it. CaselessCmp::equal(const std::string& a, const std::string& b) data/barrier-2.3.3+dfsg/src/lib/base/String.h:123:17: [1] (buffer) equal: Function does not check the second iterator for over-read conditions (CWE-126). This function is often discouraged by most C++ coding standards in favor of its safer alternatives provided since C++14. Consider using a form of this function that checks the second iterator before potentially overflowing it. static bool equal(const std::string& a, const std::string& b); data/barrier-2.3.3+dfsg/src/lib/base/XBase.cpp:50:9: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). if (strlen(what) == 0) { data/barrier-2.3.3+dfsg/src/lib/client/ServerProxy.cpp:116:26: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). UInt32 n = m_stream->read(code, 4); data/barrier-2.3.3+dfsg/src/lib/client/ServerProxy.cpp:141:23: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). n = m_stream->read(code, 4); data/barrier-2.3.3+dfsg/src/lib/io/IStream.h:57:27: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). virtual UInt32 read(void* buffer, UInt32 n) = 0; data/barrier-2.3.3+dfsg/src/lib/io/StreamFilter.cpp:54:15: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). StreamFilter::read(void* buffer, UInt32 n) data/barrier-2.3.3+dfsg/src/lib/io/StreamFilter.cpp:56:25: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). return getStream()->read(buffer, n); data/barrier-2.3.3+dfsg/src/lib/io/StreamFilter.h:43:27: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). virtual UInt32 read(void* buffer, UInt32 n); data/barrier-2.3.3+dfsg/src/lib/ipc/IpcClientProxy.cpp:102:25: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). UInt32 n = m_stream.read(code, 4); data/barrier-2.3.3+dfsg/src/lib/ipc/IpcClientProxy.cpp:125:22: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). n = m_stream.read(code, 4); data/barrier-2.3.3+dfsg/src/lib/ipc/IpcServerProxy.cpp:54:25: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). UInt32 n = m_stream.read(code, 4); data/barrier-2.3.3+dfsg/src/lib/ipc/IpcServerProxy.cpp:77:22: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). n = m_stream.read(code, 4); data/barrier-2.3.3+dfsg/src/lib/net/IDataSocket.h:65:27: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). virtual UInt32 read(void* buffer, UInt32 n) = 0; data/barrier-2.3.3+dfsg/src/lib/net/SecureSocket.cpp:264:55: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). SecureSocket::secureRead(void* buffer, int size, int& read) data/barrier-2.3.3+dfsg/src/lib/net/SecureSocket.cpp:273:21: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). checkResult(read, retry); data/barrier-2.3.3+dfsg/src/lib/net/SecureSocket.cpp:286:12: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). return read; data/barrier-2.3.3+dfsg/src/lib/net/SecureSocket.cpp:741:56: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). bool read, bool write, bool error) data/barrier-2.3.3+dfsg/src/lib/net/SecureSocket.cpp:743:12: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). (void) read; data/barrier-2.3.3+dfsg/src/lib/net/SecureSocket.cpp:775:55: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). bool read, bool write, bool error) data/barrier-2.3.3+dfsg/src/lib/net/SecureSocket.cpp:777:12: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). (void) read; data/barrier-2.3.3+dfsg/src/lib/net/SecureSocket.cpp:813:24: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). int pos = (int)strlen(msg) - 1; data/barrier-2.3.3+dfsg/src/lib/net/SecureSocket.h:53:68: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). int secureRead(void* buffer, int size, int& read); data/barrier-2.3.3+dfsg/src/lib/net/SocketMultiplexer.cpp:219:69: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). MultiplexerJobStatus status = (*jobCursor)->run(read, write, error); data/barrier-2.3.3+dfsg/src/lib/net/TCPListenSocket.cpp:145:61: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). bool read, bool, bool error) data/barrier-2.3.3+dfsg/src/lib/net/TCPListenSocket.cpp:151:9: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). if (read) { data/barrier-2.3.3+dfsg/src/lib/net/TCPSocket.cpp:138:12: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). TCPSocket::read(void* buffer, UInt32 n) data/barrier-2.3.3+dfsg/src/lib/net/TCPSocket.cpp:545:55: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). bool read, bool write, bool error) data/barrier-2.3.3+dfsg/src/lib/net/TCPSocket.cpp:588:9: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). if (read && m_readable) { data/barrier-2.3.3+dfsg/src/lib/net/TCPSocket.h:50:27: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). virtual UInt32 read(void* buffer, UInt32 n); data/barrier-2.3.3+dfsg/src/lib/net/TSocketMultiplexerMethodJob.h:75:70: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). inline MultiplexerJobStatus TSocketMultiplexerMethodJob<T>::run(bool read, bool write, bool error) data/barrier-2.3.3+dfsg/src/lib/net/TSocketMultiplexerMethodJob.h:78:44: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). return (m_object->*m_method)(this, read, write, error); data/barrier-2.3.3+dfsg/src/lib/platform/MSWindowsDropTarget.cpp:130:39: [1] (buffer) wcslen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). char* filename = new char[wcslen(wcData) + 1]; data/barrier-2.3.3+dfsg/src/lib/platform/MSWindowsDropTarget.cpp:131:22: [1] (buffer) wcslen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). filename[wcslen(wcData)] = '\0'; data/barrier-2.3.3+dfsg/src/lib/platform/MSWindowsDropTarget.cpp:132:40: [1] (buffer) wcslen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). wcstombs(filename, wcData, wcslen(wcData)); data/barrier-2.3.3+dfsg/src/lib/platform/XWindowsEventQueueBuffer.cpp:106:29: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). ssize_t read_response = read(m_pipefd[0], buf, 15); data/barrier-2.3.3+dfsg/src/lib/platform/XWindowsEventQueueBuffer.cpp:183:34: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). ssize_t read_response = read(m_pipefd[0], buf, 15); data/barrier-2.3.3+dfsg/src/lib/platform/XWindowsEventQueueBuffer.cpp:199:9: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). read(m_pipefd[0], buf, 15); data/barrier-2.3.3+dfsg/src/lib/server/ClientProxy1_0.cpp:141:29: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). UInt32 n = getStream()->read(code, 4); data/barrier-2.3.3+dfsg/src/lib/server/ClientProxy1_0.cpp:159:26: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). n = getStream()->read(code, 4); data/barrier-2.3.3+dfsg/src/lib/server/Config.cpp:78:20: [1] (buffer) equal: Function does not check the second iterator for over-read conditions (CWE-126). This function is often discouraged by most C++ coding standards in favor of its safer alternatives provided since C++14. Consider using a form of this function that checks the second iterator before potentially overflowing it. if (!CaselessCmp::equal(oldName, newName) && data/barrier-2.3.3+dfsg/src/lib/server/Config.cpp:99:19: [1] (buffer) equal: Function does not check the second iterator for over-read conditions (CWE-126). This function is often discouraged by most C++ coding standards in favor of its safer alternatives provided since C++14. Consider using a form of this function that checks the second iterator before potentially overflowing it. if (CaselessCmp::equal(oldName, oldCanonical)) { data/barrier-2.3.3+dfsg/src/lib/server/Config.cpp:102:21: [1] (buffer) equal: Function does not check the second iterator for over-read conditions (CWE-126). This function is often discouraged by most C++ coding standards in favor of its safer alternatives provided since C++14. Consider using a form of this function that checks the second iterator before potentially overflowing it. if (CaselessCmp::equal( data/barrier-2.3.3+dfsg/src/lib/server/Config.cpp:434:17: [1] (buffer) equal: Function does not check the second iterator for over-read conditions (CWE-126). This function is often discouraged by most C++ coding standards in favor of its safer alternatives provided since C++14. Consider using a form of this function that checks the second iterator before potentially overflowing it. CaselessCmp::equal(getCanonicalName(name), name)); data/barrier-2.3.3+dfsg/src/lib/server/Config.cpp:562:21: [1] (buffer) equal: Function does not check the second iterator for over-read conditions (CWE-126). This function is often discouraged by most C++ coding standards in favor of its safer alternatives provided since C++14. Consider using a form of this function that checks the second iterator before potentially overflowing it. if (!CaselessCmp::equal(index1->first, index2->first)) { data/barrier-2.3.3+dfsg/src/lib/server/Config.cpp:576:21: [1] (buffer) equal: Function does not check the second iterator for over-read conditions (CWE-126). This function is often discouraged by most C++ coding standards in favor of its safer alternatives provided since C++14. Consider using a form of this function that checks the second iterator before potentially overflowing it. if (!CaselessCmp::equal(index1->first, index2->first) || data/barrier-2.3.3+dfsg/src/lib/server/Config.cpp:577:18: [1] (buffer) equal: Function does not check the second iterator for over-read conditions (CWE-126). This function is often discouraged by most C++ coding standards in favor of its safer alternatives provided since C++14. Consider using a form of this function that checks the second iterator before potentially overflowing it. !CaselessCmp::equal(index1->second, index2->second)) { data/barrier-2.3.3+dfsg/src/lib/server/Config.cpp:597:9: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). Config::read(ConfigReadContext& context) data/barrier-2.3.3+dfsg/src/lib/server/Config.cpp:1452:22: [1] (buffer) equal: Function does not check the second iterator for over-read conditions (CWE-126). This function is often discouraged by most C++ coding standards in favor of its safer alternatives provided since C++14. Consider using a form of this function that checks the second iterator before potentially overflowing it. return CaselessCmp::equal(canonical, m_name); data/barrier-2.3.3+dfsg/src/lib/server/Config.cpp:1708:21: [1] (buffer) equal: Function does not check the second iterator for over-read conditions (CWE-126). This function is often discouraged by most C++ coding standards in favor of its safer alternatives provided since C++14. Consider using a form of this function that checks the second iterator before potentially overflowing it. if (!CaselessCmp::equal(index1->second.getName(), data/barrier-2.3.3+dfsg/src/lib/server/Config.cpp:1743:9: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). config.read(context); data/barrier-2.3.3+dfsg/src/lib/server/Config.cpp:1912:19: [1] (buffer) equal: Function does not check the second iterator for over-read conditions (CWE-126). This function is often discouraged by most C++ coding standards in favor of its safer alternatives provided since C++14. Consider using a form of this function that checks the second iterator before potentially overflowing it. if (CaselessCmp::equal(arg, "true")) { data/barrier-2.3.3+dfsg/src/lib/server/Config.cpp:1915:19: [1] (buffer) equal: Function does not check the second iterator for over-read conditions (CWE-126). This function is often discouraged by most C++ coding standards in favor of its safer alternatives provided since C++14. Consider using a form of this function that checks the second iterator before potentially overflowing it. if (CaselessCmp::equal(arg, "false")) { data/barrier-2.3.3+dfsg/src/lib/server/Config.cpp:1940:19: [1] (buffer) equal: Function does not check the second iterator for over-read conditions (CWE-126). This function is often discouraged by most C++ coding standards in favor of its safer alternatives provided since C++14. Consider using a form of this function that checks the second iterator before potentially overflowing it. if (CaselessCmp::equal(arg, "shift")) { data/barrier-2.3.3+dfsg/src/lib/server/Config.cpp:1943:19: [1] (buffer) equal: Function does not check the second iterator for over-read conditions (CWE-126). This function is often discouraged by most C++ coding standards in favor of its safer alternatives provided since C++14. Consider using a form of this function that checks the second iterator before potentially overflowing it. if (CaselessCmp::equal(arg, "ctrl")) { data/barrier-2.3.3+dfsg/src/lib/server/Config.cpp:1946:19: [1] (buffer) equal: Function does not check the second iterator for over-read conditions (CWE-126). This function is often discouraged by most C++ coding standards in favor of its safer alternatives provided since C++14. Consider using a form of this function that checks the second iterator before potentially overflowing it. if (CaselessCmp::equal(arg, "alt")) { data/barrier-2.3.3+dfsg/src/lib/server/Config.cpp:1949:19: [1] (buffer) equal: Function does not check the second iterator for over-read conditions (CWE-126). This function is often discouraged by most C++ coding standards in favor of its safer alternatives provided since C++14. Consider using a form of this function that checks the second iterator before potentially overflowing it. if (CaselessCmp::equal(arg, "altgr")) { data/barrier-2.3.3+dfsg/src/lib/server/Config.cpp:1952:19: [1] (buffer) equal: Function does not check the second iterator for over-read conditions (CWE-126). This function is often discouraged by most C++ coding standards in favor of its safer alternatives provided since C++14. Consider using a form of this function that checks the second iterator before potentially overflowing it. if (CaselessCmp::equal(arg, "meta")) { data/barrier-2.3.3+dfsg/src/lib/server/Config.cpp:1955:19: [1] (buffer) equal: Function does not check the second iterator for over-read conditions (CWE-126). This function is often discouraged by most C++ coding standards in favor of its safer alternatives provided since C++14. Consider using a form of this function that checks the second iterator before potentially overflowing it. if (CaselessCmp::equal(arg, "super")) { data/barrier-2.3.3+dfsg/src/lib/server/Config.cpp:1958:19: [1] (buffer) equal: Function does not check the second iterator for over-read conditions (CWE-126). This function is often discouraged by most C++ coding standards in favor of its safer alternatives provided since C++14. Consider using a form of this function that checks the second iterator before potentially overflowing it. if (CaselessCmp::equal(arg, "none")) { data/barrier-2.3.3+dfsg/src/lib/server/Config.cpp:1966:19: [1] (buffer) equal: Function does not check the second iterator for over-read conditions (CWE-126). This function is often discouraged by most C++ coding standards in favor of its safer alternatives provided since C++14. Consider using a form of this function that checks the second iterator before potentially overflowing it. if (CaselessCmp::equal(arg, "left")) { data/barrier-2.3.3+dfsg/src/lib/server/Config.cpp:1969:24: [1] (buffer) equal: Function does not check the second iterator for over-read conditions (CWE-126). This function is often discouraged by most C++ coding standards in favor of its safer alternatives provided since C++14. Consider using a form of this function that checks the second iterator before potentially overflowing it. else if (CaselessCmp::equal(arg, "right")) { data/barrier-2.3.3+dfsg/src/lib/server/Config.cpp:1972:24: [1] (buffer) equal: Function does not check the second iterator for over-read conditions (CWE-126). This function is often discouraged by most C++ coding standards in favor of its safer alternatives provided since C++14. Consider using a form of this function that checks the second iterator before potentially overflowing it. else if (CaselessCmp::equal(arg, "top")) { data/barrier-2.3.3+dfsg/src/lib/server/Config.cpp:1975:24: [1] (buffer) equal: Function does not check the second iterator for over-read conditions (CWE-126). This function is often discouraged by most C++ coding standards in favor of its safer alternatives provided since C++14. Consider using a form of this function that checks the second iterator before potentially overflowing it. else if (CaselessCmp::equal(arg, "bottom")) { data/barrier-2.3.3+dfsg/src/lib/server/Config.cpp:1978:24: [1] (buffer) equal: Function does not check the second iterator for over-read conditions (CWE-126). This function is often discouraged by most C++ coding standards in favor of its safer alternatives provided since C++14. Consider using a form of this function that checks the second iterator before potentially overflowing it. else if (CaselessCmp::equal(arg, "top-left")) { data/barrier-2.3.3+dfsg/src/lib/server/Config.cpp:1981:24: [1] (buffer) equal: Function does not check the second iterator for over-read conditions (CWE-126). This function is often discouraged by most C++ coding standards in favor of its safer alternatives provided since C++14. Consider using a form of this function that checks the second iterator before potentially overflowing it. else if (CaselessCmp::equal(arg, "top-right")) { data/barrier-2.3.3+dfsg/src/lib/server/Config.cpp:1984:24: [1] (buffer) equal: Function does not check the second iterator for over-read conditions (CWE-126). This function is often discouraged by most C++ coding standards in favor of its safer alternatives provided since C++14. Consider using a form of this function that checks the second iterator before potentially overflowing it. else if (CaselessCmp::equal(arg, "bottom-left")) { data/barrier-2.3.3+dfsg/src/lib/server/Config.cpp:1987:24: [1] (buffer) equal: Function does not check the second iterator for over-read conditions (CWE-126). This function is often discouraged by most C++ coding standards in favor of its safer alternatives provided since C++14. Consider using a form of this function that checks the second iterator before potentially overflowing it. else if (CaselessCmp::equal(arg, "bottom-right")) { data/barrier-2.3.3+dfsg/src/lib/server/Config.cpp:1990:24: [1] (buffer) equal: Function does not check the second iterator for over-read conditions (CWE-126). This function is often discouraged by most C++ coding standards in favor of its safer alternatives provided since C++14. Consider using a form of this function that checks the second iterator before potentially overflowing it. else if (CaselessCmp::equal(arg, "none")) { data/barrier-2.3.3+dfsg/src/lib/server/Config.cpp:1993:24: [1] (buffer) equal: Function does not check the second iterator for over-read conditions (CWE-126). This function is often discouraged by most C++ coding standards in favor of its safer alternatives provided since C++14. Consider using a form of this function that checks the second iterator before potentially overflowing it. else if (CaselessCmp::equal(arg, "all")) { data/barrier-2.3.3+dfsg/src/lib/server/Config.h:411:25: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). void read(ConfigReadContext& context); data/barrier-2.3.3+dfsg/src/lib/server/InputFilter.cpp:561:29: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). strlen(m_keyInfo->m_screens + 1) - 1, data/barrier-2.3.3+dfsg/src/test/mock/io/MockStream.h:32:18: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). MOCK_METHOD2(read, UInt32(void*, UInt32)); ANALYSIS SUMMARY: Hits = 398 Lines analyzed = 89283 in approximately 1.98 seconds (45064 lines/second) Physical Source Lines of Code (SLOC) = 56279 Hits@level = [0] 8 [1] 123 [2] 193 [3] 13 [4] 69 [5] 0 Hits@level+ = [0+] 406 [1+] 398 [2+] 275 [3+] 82 [4+] 69 [5+] 0 Hits/KSLOC@level+ = [0+] 7.21406 [1+] 7.07191 [2+] 4.88637 [3+] 1.45703 [4+] 1.22603 [5+] 0 Dot directories skipped = 2 (--followdotdir overrides) Minimum risk level = 1 Not every hit is necessarily a security vulnerability. There may be other security vulnerabilities; review your code! See 'Secure Programming HOWTO' (https://dwheeler.com/secure-programs) for more information.