Flawfinder version 2.0.10, (C) 2001-2019 David A. Wheeler. Number of rules (primarily dangerous function names) in C/C++ ruleset: 223 Examining data/calligraplan-3.2.2/devtools/rng2cpp/rng2cpp.cpp Examining data/calligraplan-3.2.2/tests/test_xi18np.cpp Examining data/calligraplan-3.2.2/tests/test_xi18nc.cpp Examining data/calligraplan-3.2.2/tests/test_xi18ncp.cpp Examining data/calligraplan-3.2.2/tests/test_kundo2_i18nc.cpp Examining data/calligraplan-3.2.2/tests/test_i18n_noop.cpp Examining data/calligraplan-3.2.2/tests/test_kundo2_i18n.cpp Examining data/calligraplan-3.2.2/tests/test_i18n.cpp Examining data/calligraplan-3.2.2/tests/test_i18nc_long.cpp Examining data/calligraplan-3.2.2/tests/test_kundo2_i18nc_long.cpp Examining data/calligraplan-3.2.2/tests/test_i18np.cpp Examining data/calligraplan-3.2.2/tests/test_i18n_noop2.cpp Examining data/calligraplan-3.2.2/tests/test_xi18n.cpp Examining data/calligraplan-3.2.2/tests/test_xi18nc_long.cpp Examining data/calligraplan-3.2.2/tests/test_i18nc.cpp Examining data/calligraplan-3.2.2/src/kptconfigskeleton.cpp Examining data/calligraplan-3.2.2/src/welcome/WelcomeView.cpp Examining data/calligraplan-3.2.2/src/welcome/WelcomeView.h Examining data/calligraplan-3.2.2/src/kptmaindocument.h Examining data/calligraplan-3.2.2/src/KPlatoXmlLoader.h Examining data/calligraplan-3.2.2/src/kptprintingcontrolprivate.h Examining data/calligraplan-3.2.2/src/kptconfigskeleton.h Examining data/calligraplan-3.2.2/src/kptfactoryinit.cpp Examining data/calligraplan-3.2.2/src/interfaces/KoGenericRegistry.h Examining data/calligraplan-3.2.2/src/plugins/schedulers/rcps/KPlatoRCPSPlugin.h Examining data/calligraplan-3.2.2/src/plugins/schedulers/rcps/3rdparty/LibRCPS/config.h Examining data/calligraplan-3.2.2/src/plugins/schedulers/rcps/3rdparty/LibRCPS/src/lib.h Examining data/calligraplan-3.2.2/src/plugins/schedulers/rcps/3rdparty/LibRCPS/src/repair.c Examining data/calligraplan-3.2.2/src/plugins/schedulers/rcps/3rdparty/LibRCPS/src/decode.c Examining data/calligraplan-3.2.2/src/plugins/schedulers/rcps/3rdparty/LibRCPS/src/ops.c Examining data/calligraplan-3.2.2/src/plugins/schedulers/rcps/3rdparty/LibRCPS/src/repair.h Examining data/calligraplan-3.2.2/src/plugins/schedulers/rcps/3rdparty/LibRCPS/src/slist.c Examining data/calligraplan-3.2.2/src/plugins/schedulers/rcps/3rdparty/LibRCPS/src/fitness.c Examining data/calligraplan-3.2.2/src/plugins/schedulers/rcps/3rdparty/LibRCPS/src/fitness.h Examining data/calligraplan-3.2.2/src/plugins/schedulers/rcps/3rdparty/LibRCPS/src/initial.c Examining data/calligraplan-3.2.2/src/plugins/schedulers/rcps/3rdparty/LibRCPS/src/slist.h Examining data/calligraplan-3.2.2/src/plugins/schedulers/rcps/3rdparty/LibRCPS/src/structs.h Examining data/calligraplan-3.2.2/src/plugins/schedulers/rcps/3rdparty/LibRCPS/src/ops.h Examining data/calligraplan-3.2.2/src/plugins/schedulers/rcps/3rdparty/LibRCPS/src/initial.h Examining data/calligraplan-3.2.2/src/plugins/schedulers/rcps/3rdparty/LibRCPS/src/librcps.h Examining data/calligraplan-3.2.2/src/plugins/schedulers/rcps/3rdparty/LibRCPS/src/decode.h Examining data/calligraplan-3.2.2/src/plugins/schedulers/rcps/3rdparty/LibRCPS/src/librcps.c Examining data/calligraplan-3.2.2/src/plugins/schedulers/rcps/tests/ProjectTester.cpp Examining data/calligraplan-3.2.2/src/plugins/schedulers/rcps/tests/ProjectTester.h Examining data/calligraplan-3.2.2/src/plugins/schedulers/rcps/KPlatoRCPSScheduler.h Examining data/calligraplan-3.2.2/src/plugins/schedulers/rcps/KPlatoRCPSPlugin.cpp Examining data/calligraplan-3.2.2/src/plugins/schedulers/rcps/KPlatoRCPSScheduler.cpp Examining data/calligraplan-3.2.2/src/plugins/schedulers/tj/PlanTJPlugin.h Examining data/calligraplan-3.2.2/src/plugins/schedulers/tj/PlanTJScheduler.cpp Examining data/calligraplan-3.2.2/src/plugins/schedulers/tj/PlanTJPlugin.cpp Examining data/calligraplan-3.2.2/src/plugins/schedulers/tj/PlanTJScheduler.h Examining data/calligraplan-3.2.2/src/plugins/schedulers/tj/tests/TaskJuggler.h Examining data/calligraplan-3.2.2/src/plugins/schedulers/tj/tests/SchedulerTester.cpp Examining data/calligraplan-3.2.2/src/plugins/schedulers/tj/tests/SchedulerTester.h Examining data/calligraplan-3.2.2/src/plugins/schedulers/tj/tests/TaskJuggler.cpp Examining data/calligraplan-3.2.2/src/plugins/schedulers/tj/taskjuggler/TaskScenario.h Examining data/calligraplan-3.2.2/src/plugins/schedulers/tj/taskjuggler/TjMessageHandler.cpp Examining data/calligraplan-3.2.2/src/plugins/schedulers/tj/taskjuggler/Project.cpp Examining data/calligraplan-3.2.2/src/plugins/schedulers/tj/taskjuggler/CoreAttributesList.cpp Examining data/calligraplan-3.2.2/src/plugins/schedulers/tj/taskjuggler/CoreAttributes.cpp Examining data/calligraplan-3.2.2/src/plugins/schedulers/tj/taskjuggler/TjMessageHandler.h Examining data/calligraplan-3.2.2/src/plugins/schedulers/tj/taskjuggler/Task.cpp Examining data/calligraplan-3.2.2/src/plugins/schedulers/tj/taskjuggler/ScenarioList.cpp Examining data/calligraplan-3.2.2/src/plugins/schedulers/tj/taskjuggler/BookingList.h Examining data/calligraplan-3.2.2/src/plugins/schedulers/tj/taskjuggler/Shift.h Examining data/calligraplan-3.2.2/src/plugins/schedulers/tj/taskjuggler/Resource.cpp Examining data/calligraplan-3.2.2/src/plugins/schedulers/tj/taskjuggler/CustomAttributeDefinition.h Examining data/calligraplan-3.2.2/src/plugins/schedulers/tj/taskjuggler/ShiftList.h Examining data/calligraplan-3.2.2/src/plugins/schedulers/tj/taskjuggler/Allocation.cpp Examining data/calligraplan-3.2.2/src/plugins/schedulers/tj/taskjuggler/Interval.h Examining data/calligraplan-3.2.2/src/plugins/schedulers/tj/taskjuggler/UsageLimits.h Examining data/calligraplan-3.2.2/src/plugins/schedulers/tj/taskjuggler/Task.h Examining data/calligraplan-3.2.2/src/plugins/schedulers/tj/taskjuggler/Interval.cpp Examining data/calligraplan-3.2.2/src/plugins/schedulers/tj/taskjuggler/Scenario.h Examining data/calligraplan-3.2.2/src/plugins/schedulers/tj/taskjuggler/Allocation.h Examining data/calligraplan-3.2.2/src/plugins/schedulers/tj/taskjuggler/Utility.cpp Examining data/calligraplan-3.2.2/src/plugins/schedulers/tj/taskjuggler/Resource.h Examining data/calligraplan-3.2.2/src/plugins/schedulers/tj/taskjuggler/CoreAttributesTreeIterator.h Examining data/calligraplan-3.2.2/src/plugins/schedulers/tj/taskjuggler/ResourceList.h Examining data/calligraplan-3.2.2/src/plugins/schedulers/tj/taskjuggler/TaskList.cpp Examining data/calligraplan-3.2.2/src/plugins/schedulers/tj/taskjuggler/debug.h Examining data/calligraplan-3.2.2/src/plugins/schedulers/tj/taskjuggler/TaskDependency.h Examining data/calligraplan-3.2.2/src/plugins/schedulers/tj/taskjuggler/CoreAttributesList.h Examining data/calligraplan-3.2.2/src/plugins/schedulers/tj/taskjuggler/ShiftSelection.cpp Examining data/calligraplan-3.2.2/src/plugins/schedulers/tj/taskjuggler/VacationInterval.h Examining data/calligraplan-3.2.2/src/plugins/schedulers/tj/taskjuggler/CustomAttribute.h Examining data/calligraplan-3.2.2/src/plugins/schedulers/tj/taskjuggler/ResourceScenario.h Examining data/calligraplan-3.2.2/src/plugins/schedulers/tj/taskjuggler/ResourceList.cpp Examining data/calligraplan-3.2.2/src/plugins/schedulers/tj/taskjuggler/TaskTreeIterator.h Examining data/calligraplan-3.2.2/src/plugins/schedulers/tj/taskjuggler/BookingList.cpp Examining data/calligraplan-3.2.2/src/plugins/schedulers/tj/taskjuggler/LoopDetectorInfo.h Examining data/calligraplan-3.2.2/src/plugins/schedulers/tj/taskjuggler/tjlib-internal.h Examining data/calligraplan-3.2.2/src/plugins/schedulers/tj/taskjuggler/TaskList.h Examining data/calligraplan-3.2.2/src/plugins/schedulers/tj/taskjuggler/VacationList.h Examining data/calligraplan-3.2.2/src/plugins/schedulers/tj/taskjuggler/Project.h Examining data/calligraplan-3.2.2/src/plugins/schedulers/tj/taskjuggler/CoreAttributes.h Examining data/calligraplan-3.2.2/src/plugins/schedulers/tj/taskjuggler/ResourceTreeIterator.h Examining data/calligraplan-3.2.2/src/plugins/schedulers/tj/taskjuggler/VacationList.cpp Examining data/calligraplan-3.2.2/src/plugins/schedulers/tj/taskjuggler/ScenarioList.h Examining data/calligraplan-3.2.2/src/plugins/schedulers/tj/taskjuggler/ShiftSelection.h Examining data/calligraplan-3.2.2/src/plugins/schedulers/tj/taskjuggler/Scenario.cpp Examining data/calligraplan-3.2.2/src/plugins/schedulers/tj/taskjuggler/SbBooking.h Examining data/calligraplan-3.2.2/src/plugins/schedulers/tj/taskjuggler/taskjuggler.h Examining data/calligraplan-3.2.2/src/plugins/schedulers/tj/taskjuggler/Booking.h Examining data/calligraplan-3.2.2/src/plugins/schedulers/tj/taskjuggler/FlagList.h Examining data/calligraplan-3.2.2/src/plugins/schedulers/tj/taskjuggler/ShiftSelectionList.h Examining data/calligraplan-3.2.2/src/plugins/schedulers/tj/taskjuggler/ShiftSelectionList.cpp Examining data/calligraplan-3.2.2/src/plugins/schedulers/tj/taskjuggler/ShiftList.cpp Examining data/calligraplan-3.2.2/src/plugins/schedulers/tj/taskjuggler/TaskScenario.cpp Examining data/calligraplan-3.2.2/src/plugins/schedulers/tj/taskjuggler/Shift.cpp Examining data/calligraplan-3.2.2/src/plugins/schedulers/tj/taskjuggler/TaskDependency.cpp Examining data/calligraplan-3.2.2/src/plugins/schedulers/tj/taskjuggler/Utility.h Examining data/calligraplan-3.2.2/src/plugins/scripting/Account.cpp Examining data/calligraplan-3.2.2/src/plugins/scripting/Project.cpp Examining data/calligraplan-3.2.2/src/plugins/scripting/Module.h Examining data/calligraplan-3.2.2/src/plugins/scripting/Resource.cpp Examining data/calligraplan-3.2.2/src/plugins/scripting/Schedule.cpp Examining data/calligraplan-3.2.2/src/plugins/scripting/ScriptingDebug.cpp Examining data/calligraplan-3.2.2/src/plugins/scripting/ScriptingDebug.h Examining data/calligraplan-3.2.2/src/plugins/scripting/Resource.h Examining data/calligraplan-3.2.2/src/plugins/scripting/ScriptingWidgets.h Examining data/calligraplan-3.2.2/src/plugins/scripting/Module.cpp Examining data/calligraplan-3.2.2/src/plugins/scripting/ScriptingPart.h Examining data/calligraplan-3.2.2/src/plugins/scripting/Calendar.cpp Examining data/calligraplan-3.2.2/src/plugins/scripting/ScriptingWidgets.cpp Examining data/calligraplan-3.2.2/src/plugins/scripting/Calendar.h Examining data/calligraplan-3.2.2/src/plugins/scripting/Schedule.h Examining data/calligraplan-3.2.2/src/plugins/scripting/Node.h Examining data/calligraplan-3.2.2/src/plugins/scripting/ResourceGroup.h Examining data/calligraplan-3.2.2/src/plugins/scripting/Project.h Examining data/calligraplan-3.2.2/src/plugins/scripting/tests/TestResult.cpp Examining data/calligraplan-3.2.2/src/plugins/scripting/tests/TestResult.h Examining data/calligraplan-3.2.2/src/plugins/scripting/tests/ScriptingTester.cpp Examining data/calligraplan-3.2.2/src/plugins/scripting/tests/ScriptingTester.h Examining data/calligraplan-3.2.2/src/plugins/scripting/ScriptingPart.cpp Examining data/calligraplan-3.2.2/src/plugins/scripting/Account.h Examining data/calligraplan-3.2.2/src/plugins/scripting/kplatoscripting_export.h Examining data/calligraplan-3.2.2/src/plugins/scripting/Node.cpp Examining data/calligraplan-3.2.2/src/plugins/scripting/ResourceGroup.cpp Examining data/calligraplan-3.2.2/src/plugins/filters/kplato/import/kplatoimport.cpp Examining data/calligraplan-3.2.2/src/plugins/filters/kplato/import/kplatoimport.h Examining data/calligraplan-3.2.2/src/plugins/filters/planner/import/plannerimport.cpp Examining data/calligraplan-3.2.2/src/plugins/filters/planner/import/plannerimport.h Examining data/calligraplan-3.2.2/src/plugins/filters/icalendar/export/icalendarexport.cpp Examining data/calligraplan-3.2.2/src/plugins/filters/icalendar/export/ICalExportDialog.cpp Examining data/calligraplan-3.2.2/src/plugins/filters/icalendar/export/icalendarexport.h Examining data/calligraplan-3.2.2/src/plugins/filters/icalendar/export/ICalExportDialog.h Examining data/calligraplan-3.2.2/src/kptinsertfiledlg.cpp Examining data/calligraplan-3.2.2/src/kptfactoryinit.h Examining data/calligraplan-3.2.2/src/kptfactory.cpp Examining data/calligraplan-3.2.2/src/kptconfig.h Examining data/calligraplan-3.2.2/src/kptviewlist.h Examining data/calligraplan-3.2.2/src/KPlatoXmlLoader.cpp Examining data/calligraplan-3.2.2/src/libs/main/KoDockRegistry.cpp Examining data/calligraplan-3.2.2/src/libs/main/KoApplication.h Examining data/calligraplan-3.2.2/src/libs/main/KoViewAdaptor.cpp Examining data/calligraplan-3.2.2/src/libs/main/KoFilterChainLinkList.h Examining data/calligraplan-3.2.2/src/libs/main/KoFilterChainLinkList.cpp Examining data/calligraplan-3.2.2/src/libs/main/Calligra2Migration.cpp Examining data/calligraplan-3.2.2/src/libs/main/KoFilterChainLink.h Examining data/calligraplan-3.2.2/src/libs/main/KoDocument.h Examining data/calligraplan-3.2.2/src/libs/main/KoFilterGraph.h Examining data/calligraplan-3.2.2/src/libs/main/KoFilterEntry.h Examining data/calligraplan-3.2.2/src/libs/main/KoUndoStackAction.h Examining data/calligraplan-3.2.2/src/libs/main/KoViewAdaptor.h Examining data/calligraplan-3.2.2/src/libs/main/KoPartAdaptor.cpp Examining data/calligraplan-3.2.2/src/libs/main/KoView.h Examining data/calligraplan-3.2.2/src/libs/main/KoStartupDialog.h Examining data/calligraplan-3.2.2/src/libs/main/KoDockerManager_p.h Examining data/calligraplan-3.2.2/src/libs/main/KoComponentData.h Examining data/calligraplan-3.2.2/src/libs/main/KoFilterEntry.cpp Examining data/calligraplan-3.2.2/src/libs/main/KoFilter.h Examining data/calligraplan-3.2.2/src/libs/main/KoFilterManager.cpp Examining data/calligraplan-3.2.2/src/libs/main/KoDockFactoryBase.cpp Examining data/calligraplan-3.2.2/src/libs/main/KoPartAdaptor.h Examining data/calligraplan-3.2.2/src/libs/main/KoPrintingDialog.h Examining data/calligraplan-3.2.2/src/libs/main/KoUndoStackAction.cpp Examining data/calligraplan-3.2.2/src/libs/main/KoFilterChainLink.cpp Examining data/calligraplan-3.2.2/src/libs/main/KoFilter.cpp Examining data/calligraplan-3.2.2/src/libs/main/KoFilterManager.h Examining data/calligraplan-3.2.2/src/libs/main/KoPart.cpp Examining data/calligraplan-3.2.2/src/libs/main/KoDocument.cpp Examining data/calligraplan-3.2.2/src/libs/main/KoAutoSaveRecoveryDialog.cpp Examining data/calligraplan-3.2.2/src/libs/main/KoFilterGraph.cpp Examining data/calligraplan-3.2.2/src/libs/main/komain_export.h Examining data/calligraplan-3.2.2/src/libs/main/KoFilterManager_p.h Examining data/calligraplan-3.2.2/src/libs/main/KoPart.h Examining data/calligraplan-3.2.2/src/libs/main/KoFilterEdge.h Examining data/calligraplan-3.2.2/src/libs/main/PriorityQueue_p.h Examining data/calligraplan-3.2.2/src/libs/main/KoPrintingDialog_p.h Examining data/calligraplan-3.2.2/src/libs/main/MainDebug.cpp Examining data/calligraplan-3.2.2/src/libs/main/KoView_p.h Examining data/calligraplan-3.2.2/src/libs/main/KoApplicationAdaptor.cpp Examining data/calligraplan-3.2.2/src/libs/main/KoFilterManager_p.cpp Examining data/calligraplan-3.2.2/src/libs/main/KoView.cpp Examining data/calligraplan-3.2.2/src/libs/main/KoAutoSaveRecoveryDialog.h Examining data/calligraplan-3.2.2/src/libs/main/KoFilterChain.h Examining data/calligraplan-3.2.2/src/libs/main/KoComponentData.cpp Examining data/calligraplan-3.2.2/src/libs/main/KoDocumentEntry.cpp Examining data/calligraplan-3.2.2/src/libs/main/tests/filter_graph.cpp Examining data/calligraplan-3.2.2/src/libs/main/tests/filterchain_test.cpp Examining data/calligraplan-3.2.2/src/libs/main/tests/priorityqueue_test.cpp Examining data/calligraplan-3.2.2/src/libs/main/tests/priorityqueue_test.h Examining data/calligraplan-3.2.2/src/libs/main/MainDebug.h Examining data/calligraplan-3.2.2/src/libs/main/KoMainWindow.cpp Examining data/calligraplan-3.2.2/src/libs/main/KoApplicationAdaptor.h Examining data/calligraplan-3.2.2/src/libs/main/Calligra2Migration.h Examining data/calligraplan-3.2.2/src/libs/main/KoFilterVertex.h Examining data/calligraplan-3.2.2/src/libs/main/KoPrintingDialog.cpp Examining data/calligraplan-3.2.2/src/libs/main/KoComponentData_p.h Examining data/calligraplan-3.2.2/src/libs/main/KoDocumentSectionModel.h Examining data/calligraplan-3.2.2/src/libs/main/KoApplication.cpp Examining data/calligraplan-3.2.2/src/libs/main/KoMainWindow.h Examining data/calligraplan-3.2.2/src/libs/main/KoFilterVertex.cpp Examining data/calligraplan-3.2.2/src/libs/main/KoDocumentEntry.h Examining data/calligraplan-3.2.2/src/libs/main/KoFilterEdge.cpp Examining data/calligraplan-3.2.2/src/libs/main/KoPrintJob.h Examining data/calligraplan-3.2.2/src/libs/main/KoDockRegistry.h Examining data/calligraplan-3.2.2/src/libs/main/KoFilterChain.cpp Examining data/calligraplan-3.2.2/src/libs/main/KoDockFactoryBase.h Examining data/calligraplan-3.2.2/src/libs/main/KoPrintJob.cpp Examining data/calligraplan-3.2.2/src/libs/kernel/kptappointment.h Examining data/calligraplan-3.2.2/src/libs/kernel/kptschedulerplugin_macros.h Examining data/calligraplan-3.2.2/src/libs/kernel/kptschedule.cpp Examining data/calligraplan-3.2.2/src/libs/kernel/kptdatetime.cpp Examining data/calligraplan-3.2.2/src/libs/kernel/kptproject.h Examining data/calligraplan-3.2.2/src/libs/kernel/kptschedule.h Examining data/calligraplan-3.2.2/src/libs/kernel/kptmap.h Examining data/calligraplan-3.2.2/src/libs/kernel/kptconfigbase.cpp Examining data/calligraplan-3.2.2/src/libs/kernel/kptcalendar.h Examining data/calligraplan-3.2.2/src/libs/kernel/kptduration.h Examining data/calligraplan-3.2.2/src/libs/kernel/kpteffortcostmap.h Examining data/calligraplan-3.2.2/src/libs/kernel/kptconfigbase.h Examining data/calligraplan-3.2.2/src/libs/kernel/kpttask.h Examining data/calligraplan-3.2.2/src/libs/kernel/kptresource.h Examining data/calligraplan-3.2.2/src/libs/kernel/kptdebug.h Examining data/calligraplan-3.2.2/src/libs/kernel/kptdocuments.h Examining data/calligraplan-3.2.2/src/libs/kernel/kptrelation.cpp Examining data/calligraplan-3.2.2/src/libs/kernel/kptproject.cpp Examining data/calligraplan-3.2.2/src/libs/kernel/kptxmlloaderobject.h Examining data/calligraplan-3.2.2/src/libs/kernel/kptpackage.h Examining data/calligraplan-3.2.2/src/libs/kernel/kptcommand.cpp Examining data/calligraplan-3.2.2/src/libs/kernel/kptresource.cpp Examining data/calligraplan-3.2.2/src/libs/kernel/kptcommand.h Examining data/calligraplan-3.2.2/src/libs/kernel/kptrelation.h Examining data/calligraplan-3.2.2/src/libs/kernel/kptschedulerplugin.h Examining data/calligraplan-3.2.2/src/libs/kernel/kptwbsdefinition.cpp Examining data/calligraplan-3.2.2/src/libs/kernel/kptduration.cpp Examining data/calligraplan-3.2.2/src/libs/kernel/kptpackage.cpp Examining data/calligraplan-3.2.2/src/libs/kernel/kptaccount.cpp Examining data/calligraplan-3.2.2/src/libs/kernel/kptwbsdefinition.h Examining data/calligraplan-3.2.2/src/libs/kernel/kptdatetime.h Examining data/calligraplan-3.2.2/src/libs/kernel/XmlSaveContext.h Examining data/calligraplan-3.2.2/src/libs/kernel/kptappointment.cpp Examining data/calligraplan-3.2.2/src/libs/kernel/commands/SetTaskModulesCommand.cpp Examining data/calligraplan-3.2.2/src/libs/kernel/commands/SetTaskModulesCommand.h Examining data/calligraplan-3.2.2/src/libs/kernel/kptdocuments.cpp Examining data/calligraplan-3.2.2/src/libs/kernel/kptdebug.cpp Examining data/calligraplan-3.2.2/src/libs/kernel/kptschedulerplugin.cpp Examining data/calligraplan-3.2.2/src/libs/kernel/tests/DateTimeTester.h Examining data/calligraplan-3.2.2/src/libs/kernel/tests/AccountsTester.cpp Examining data/calligraplan-3.2.2/src/libs/kernel/tests/CalendarTester.h Examining data/calligraplan-3.2.2/src/libs/kernel/tests/ScheduleTester.cpp Examining data/calligraplan-3.2.2/src/libs/kernel/tests/CommandsTester.h Examining data/calligraplan-3.2.2/src/libs/kernel/tests/PerformanceTester.cpp Examining data/calligraplan-3.2.2/src/libs/kernel/tests/PerformanceTester.h Examining data/calligraplan-3.2.2/src/libs/kernel/tests/CommandsTester.cpp Examining data/calligraplan-3.2.2/src/libs/kernel/tests/AppointmentIntervalTester.cpp Examining data/calligraplan-3.2.2/src/libs/kernel/tests/AccountsTester.h Examining data/calligraplan-3.2.2/src/libs/kernel/tests/ResourceTester.h Examining data/calligraplan-3.2.2/src/libs/kernel/tests/debug.cpp Examining data/calligraplan-3.2.2/src/libs/kernel/tests/DateTimeTester.cpp Examining data/calligraplan-3.2.2/src/libs/kernel/tests/ProjectTester.cpp Examining data/calligraplan-3.2.2/src/libs/kernel/tests/DurationTester.h Examining data/calligraplan-3.2.2/src/libs/kernel/tests/EstimateTester.h Examining data/calligraplan-3.2.2/src/libs/kernel/tests/AccountsCommandTester.h Examining data/calligraplan-3.2.2/src/libs/kernel/tests/CalendarTester.cpp Examining data/calligraplan-3.2.2/src/libs/kernel/tests/AccountsCommandTester.cpp Examining data/calligraplan-3.2.2/src/libs/kernel/tests/EstimateTester.cpp Examining data/calligraplan-3.2.2/src/libs/kernel/tests/ProjectTester.h Examining data/calligraplan-3.2.2/src/libs/kernel/tests/WorkInfoCacheTester.cpp Examining data/calligraplan-3.2.2/src/libs/kernel/tests/ScheduleTester.h Examining data/calligraplan-3.2.2/src/libs/kernel/tests/ResourceTester.cpp Examining data/calligraplan-3.2.2/src/libs/kernel/tests/AppointmentIntervalTester.h Examining data/calligraplan-3.2.2/src/libs/kernel/tests/WorkInfoCacheTester.h Examining data/calligraplan-3.2.2/src/libs/kernel/tests/DurationTester.cpp Examining data/calligraplan-3.2.2/src/libs/kernel/kptglobal.cpp Examining data/calligraplan-3.2.2/src/libs/kernel/kptaccount.h Examining data/calligraplan-3.2.2/src/libs/kernel/kpttask.cpp Examining data/calligraplan-3.2.2/src/libs/kernel/KPlatoXmlLoaderBase.cpp Examining data/calligraplan-3.2.2/src/libs/kernel/kptlocale.h Examining data/calligraplan-3.2.2/src/libs/kernel/kptlocale.cpp Examining data/calligraplan-3.2.2/src/libs/kernel/KPlatoXmlLoaderBase.h Examining data/calligraplan-3.2.2/src/libs/kernel/kptcalendar.cpp Examining data/calligraplan-3.2.2/src/libs/kernel/kptglobal.h Examining data/calligraplan-3.2.2/src/libs/kernel/kptnode.cpp Examining data/calligraplan-3.2.2/src/libs/kernel/kptnode.h Examining data/calligraplan-3.2.2/src/libs/kernel/kpteffortcostmap.cpp Examining data/calligraplan-3.2.2/src/libs/ui/reports/report.h Examining data/calligraplan-3.2.2/src/libs/ui/reports/reportdata.cpp Examining data/calligraplan-3.2.2/src/libs/ui/reports/reportview.h Examining data/calligraplan-3.2.2/src/libs/ui/reports/reportview.cpp Examining data/calligraplan-3.2.2/src/libs/ui/reports/reportscripts.cpp Examining data/calligraplan-3.2.2/src/libs/ui/reports/reportdata.h Examining data/calligraplan-3.2.2/src/libs/ui/reports/reportsourceeditor.cpp Examining data/calligraplan-3.2.2/src/libs/ui/reports/reportsourceeditor.h Examining data/calligraplan-3.2.2/src/libs/ui/reports/reportscripts.h Examining data/calligraplan-3.2.2/src/libs/ui/reports/items/text/PlanReportItemText.cpp Examining data/calligraplan-3.2.2/src/libs/ui/reports/items/text/PlanReportDesignerItemText.cpp Examining data/calligraplan-3.2.2/src/libs/ui/reports/items/text/PlanReportItemText.h Examining data/calligraplan-3.2.2/src/libs/ui/reports/items/text/PlanReportScriptText.h Examining data/calligraplan-3.2.2/src/libs/ui/reports/items/text/PlanReportTextPlugin.cpp Examining data/calligraplan-3.2.2/src/libs/ui/reports/items/text/PlanReportDesignerItemText.h Examining data/calligraplan-3.2.2/src/libs/ui/reports/items/text/PlanReportScriptText.cpp Examining data/calligraplan-3.2.2/src/libs/ui/reports/items/text/PlanReportTextPlugin.h Examining data/calligraplan-3.2.2/src/libs/ui/reports/reportview_p.h Examining data/calligraplan-3.2.2/src/libs/ui/kptrequestresourcespanel.h Examining data/calligraplan-3.2.2/src/libs/ui/ResourceAllocationView.h Examining data/calligraplan-3.2.2/src/libs/ui/kptresourceappointmentsview.h Examining data/calligraplan-3.2.2/src/libs/ui/kptusedefforteditor.h Examining data/calligraplan-3.2.2/src/libs/ui/kpttaskdialog.cpp Examining data/calligraplan-3.2.2/src/libs/ui/RelationEditorDialog.cpp Examining data/calligraplan-3.2.2/src/libs/ui/kptaccountsviewconfigdialog.h Examining data/calligraplan-3.2.2/src/libs/ui/kpttaskresourcespanelbase.ui.h Examining data/calligraplan-3.2.2/src/libs/ui/kptstandardworktimedialog.h Examining data/calligraplan-3.2.2/src/libs/ui/kptresourceassignmentview.cpp Examining data/calligraplan-3.2.2/src/libs/ui/kptpertresult.cpp Examining data/calligraplan-3.2.2/src/libs/ui/RichTextWidget.h Examining data/calligraplan-3.2.2/src/libs/ui/kptresourcedialog.h Examining data/calligraplan-3.2.2/src/libs/ui/kptsplitterview.cpp Examining data/calligraplan-3.2.2/src/libs/ui/kptdocumentspanel.cpp Examining data/calligraplan-3.2.2/src/libs/ui/kptresourcedialog.cpp Examining data/calligraplan-3.2.2/src/libs/ui/RichTextWidget.cpp Examining data/calligraplan-3.2.2/src/libs/ui/TasksEditDialog.h Examining data/calligraplan-3.2.2/src/libs/ui/kptpertresult.h Examining data/calligraplan-3.2.2/src/libs/ui/kpttaskstatusview.h Examining data/calligraplan-3.2.2/src/libs/ui/kptmilestoneprogressdialog.cpp Examining data/calligraplan-3.2.2/src/libs/ui/kptwbsdefinitionpanel.h Examining data/calligraplan-3.2.2/src/libs/ui/kpttaskeditor.h Examining data/calligraplan-3.2.2/src/libs/ui/kpttaskstatusview.cpp Examining data/calligraplan-3.2.2/src/libs/ui/kptdocumentseditor.h Examining data/calligraplan-3.2.2/src/libs/ui/kptaccountsview.h Examining data/calligraplan-3.2.2/src/libs/ui/kpttaskcostpanel.cpp Examining data/calligraplan-3.2.2/src/libs/ui/kptmilestoneprogressdialog.h Examining data/calligraplan-3.2.2/src/libs/ui/kptwbsdefinitionpanel.cpp Examining data/calligraplan-3.2.2/src/libs/ui/kptaccountseditor.cpp Examining data/calligraplan-3.2.2/src/libs/ui/intervalitem.h Examining data/calligraplan-3.2.2/src/libs/ui/kpttaskprogresspanel.cpp Examining data/calligraplan-3.2.2/src/libs/ui/kptresourceassignmentview.h Examining data/calligraplan-3.2.2/src/libs/ui/kptresourceeditor.cpp Examining data/calligraplan-3.2.2/src/libs/ui/kptwbsdefinitiondialog.cpp Examining data/calligraplan-3.2.2/src/libs/ui/kptrelationeditor.cpp Examining data/calligraplan-3.2.2/src/libs/ui/kptscheduleeditor.cpp Examining data/calligraplan-3.2.2/src/libs/ui/kpttaskprogresspanel.h Examining data/calligraplan-3.2.2/src/libs/ui/kptcalendareditor.cpp Examining data/calligraplan-3.2.2/src/libs/ui/kptintervaledit.cpp Examining data/calligraplan-3.2.2/src/libs/ui/kptworkpackagesenddialog.cpp Examining data/calligraplan-3.2.2/src/libs/ui/kptviewbase.h Examining data/calligraplan-3.2.2/src/libs/ui/gantt/DateTimeGrid.cpp Examining data/calligraplan-3.2.2/src/libs/ui/gantt/DateTimeTimeLine.cpp Examining data/calligraplan-3.2.2/src/libs/ui/gantt/DateTimeTimeLine.h Examining data/calligraplan-3.2.2/src/libs/ui/gantt/DateTimeGrid.h Examining data/calligraplan-3.2.2/src/libs/ui/kptsummarytaskdialog.cpp Examining data/calligraplan-3.2.2/src/libs/ui/kptganttitemdelegate.h Examining data/calligraplan-3.2.2/src/libs/ui/kpthtmlview.cpp Examining data/calligraplan-3.2.2/src/libs/ui/kptusedefforteditor.cpp Examining data/calligraplan-3.2.2/src/libs/ui/kpttaskgeneralpanel.h Examining data/calligraplan-3.2.2/src/libs/ui/kptrequestresourcespanel.cpp Examining data/calligraplan-3.2.2/src/libs/ui/reportsgenerator/ReportsGeneratorView.cpp Examining data/calligraplan-3.2.2/src/libs/ui/reportsgenerator/ReportsGeneratorView.h Examining data/calligraplan-3.2.2/src/libs/ui/RelationEditorDialog.h Examining data/calligraplan-3.2.2/src/libs/ui/TasksEditController.cpp Examining data/calligraplan-3.2.2/src/libs/ui/kptlocaleconfigmoneydialog.cpp Examining data/calligraplan-3.2.2/src/libs/ui/kpttaskgeneralpanel.cpp Examining data/calligraplan-3.2.2/src/libs/ui/kptrelationdialog.cpp Examining data/calligraplan-3.2.2/src/libs/ui/kptscheduleeditor.h Examining data/calligraplan-3.2.2/src/libs/ui/kptaccountsviewconfigdialog.cpp Examining data/calligraplan-3.2.2/src/libs/ui/kptresourceeditor.h Examining data/calligraplan-3.2.2/src/libs/ui/kptworkpackagesenddialog.h Examining data/calligraplan-3.2.2/src/libs/ui/kptaccountseditor.h Examining data/calligraplan-3.2.2/src/libs/ui/kptitemviewsettup.h Examining data/calligraplan-3.2.2/src/libs/ui/TasksGeneralPanel.h Examining data/calligraplan-3.2.2/src/libs/ui/projectview/ProjectView.cpp Examining data/calligraplan-3.2.2/src/libs/ui/projectview/ProjectView.h Examining data/calligraplan-3.2.2/src/libs/ui/kpttaskdescriptiondialog.cpp Examining data/calligraplan-3.2.2/src/libs/ui/projectsettings/ProjectSettingsView.h Examining data/calligraplan-3.2.2/src/libs/ui/projectsettings/ProjectSettingsView.cpp Examining data/calligraplan-3.2.2/src/libs/ui/kptviewbase.cpp Examining data/calligraplan-3.2.2/src/libs/ui/kptworkpackagesendpanel.cpp Examining data/calligraplan-3.2.2/src/libs/ui/kptworkpackagemergedialog.cpp Examining data/calligraplan-3.2.2/src/libs/ui/TasksEditDialog.cpp Examining data/calligraplan-3.2.2/src/libs/ui/kptmainprojectdialog.cpp Examining data/calligraplan-3.2.2/src/libs/ui/kptmainprojectpanel.h Examining data/calligraplan-3.2.2/src/libs/ui/kptitemviewsettup.cpp Examining data/calligraplan-3.2.2/src/libs/ui/kptresourceallocationeditor.h Examining data/calligraplan-3.2.2/src/libs/ui/kpttaskdialog.h Examining data/calligraplan-3.2.2/src/libs/ui/kpttaskprogressdialog.h Examining data/calligraplan-3.2.2/src/libs/ui/kptganttview.h Examining data/calligraplan-3.2.2/src/libs/ui/kptdocumentspanel.h Examining data/calligraplan-3.2.2/src/libs/ui/kmessagebox_copy.cpp Examining data/calligraplan-3.2.2/src/libs/ui/kptperteditor.cpp Examining data/calligraplan-3.2.2/src/libs/ui/kptworkpackagesendpanel.h Examining data/calligraplan-3.2.2/src/libs/ui/kptlocaleconfigmoneydialog.h Examining data/calligraplan-3.2.2/src/libs/ui/kpttaskdescriptiondialog.h Examining data/calligraplan-3.2.2/src/libs/ui/locale/localemon.cpp Examining data/calligraplan-3.2.2/src/libs/ui/locale/localemon.h Examining data/calligraplan-3.2.2/src/libs/ui/kpthtmlview.h Examining data/calligraplan-3.2.2/src/libs/ui/kptsummarytaskdialog.h Examining data/calligraplan-3.2.2/src/libs/ui/kptrelationdialog.h Examining data/calligraplan-3.2.2/src/libs/ui/kpttaskcostpanel.h Examining data/calligraplan-3.2.2/src/libs/ui/kptrecalculatedialog.h Examining data/calligraplan-3.2.2/src/libs/ui/kptintervaledit.h Examining data/calligraplan-3.2.2/src/libs/ui/kptperteditor.h Examining data/calligraplan-3.2.2/src/libs/ui/kptsummarytaskgeneralpanel.h Examining data/calligraplan-3.2.2/src/libs/ui/TasksGeneralPanel.cpp Examining data/calligraplan-3.2.2/src/libs/ui/kptdocumentseditor.cpp Examining data/calligraplan-3.2.2/src/libs/ui/kptdependencyeditor.h Examining data/calligraplan-3.2.2/src/libs/ui/kptrecalculatedialog.cpp Examining data/calligraplan-3.2.2/src/libs/ui/kptwbsdefinitiondialog.h Examining data/calligraplan-3.2.2/src/libs/ui/kptresourceallocationeditor.cpp Examining data/calligraplan-3.2.2/src/libs/ui/performance/ProjectStatusView.cpp Examining data/calligraplan-3.2.2/src/libs/ui/performance/KPlatoChart.h Examining data/calligraplan-3.2.2/src/libs/ui/performance/PerformanceTableView.h Examining data/calligraplan-3.2.2/src/libs/ui/performance/PerformanceTableView.cpp Examining data/calligraplan-3.2.2/src/libs/ui/performance/PerformanceStatusView.cpp Examining data/calligraplan-3.2.2/src/libs/ui/performance/KPlatoChart.cpp Examining data/calligraplan-3.2.2/src/libs/ui/performance/ProjectStatusView.h Examining data/calligraplan-3.2.2/src/libs/ui/performance/PerformanceStatusBase.h Examining data/calligraplan-3.2.2/src/libs/ui/performance/PerformanceStatusView.h Examining data/calligraplan-3.2.2/src/libs/ui/performance/PerformanceStatusBase.cpp Examining data/calligraplan-3.2.2/src/libs/ui/ResourceAllocationView.cpp Examining data/calligraplan-3.2.2/src/libs/ui/kptsummarytaskgeneralpanel.cpp Examining data/calligraplan-3.2.2/src/libs/ui/kptmainprojectpanel.cpp Examining data/calligraplan-3.2.2/src/libs/ui/kptstandardworktimedialog.cpp Examining data/calligraplan-3.2.2/src/libs/ui/kptsplitterview.h Examining data/calligraplan-3.2.2/src/libs/ui/kptmilestoneprogresspanel.cpp Examining data/calligraplan-3.2.2/src/libs/ui/TasksEditController.h Examining data/calligraplan-3.2.2/src/libs/ui/kptmainprojectdialog.h Examining data/calligraplan-3.2.2/src/libs/ui/kptganttview.cpp Examining data/calligraplan-3.2.2/src/libs/ui/kptresourceappointmentsview.cpp Examining data/calligraplan-3.2.2/src/libs/ui/kptrelationeditor.h Examining data/calligraplan-3.2.2/src/libs/ui/kptmilestoneprogresspanel.h Examining data/calligraplan-3.2.2/src/libs/ui/kptdocumentsdialog.cpp Examining data/calligraplan-3.2.2/src/libs/ui/kpttaskprogressdialog.cpp Examining data/calligraplan-3.2.2/src/libs/ui/kptaccountsview.cpp Examining data/calligraplan-3.2.2/src/libs/ui/kpttaskeditor.cpp Examining data/calligraplan-3.2.2/src/libs/ui/kptdocumentsdialog.h Examining data/calligraplan-3.2.2/src/libs/ui/kptdependencyeditor.cpp Examining data/calligraplan-3.2.2/src/libs/ui/kptworkpackagemergedialog.h Examining data/calligraplan-3.2.2/src/libs/ui/kptcalendareditor.h Examining data/calligraplan-3.2.2/src/libs/ui/kptganttitemdelegate.cpp Examining data/calligraplan-3.2.2/src/libs/models/kptdurationspinbox.cpp Examining data/calligraplan-3.2.2/src/libs/models/kptresourceappointmentsmodel.cpp Examining data/calligraplan-3.2.2/src/libs/models/kptnodeitemmodel.h Examining data/calligraplan-3.2.2/src/libs/models/kptresourcemodel.cpp Examining data/calligraplan-3.2.2/src/libs/models/kptflatproxymodel.cpp Examining data/calligraplan-3.2.2/src/libs/models/kptnodeitemmodel.cpp Examining data/calligraplan-3.2.2/src/libs/models/kpttaskstatusmodel.cpp Examining data/calligraplan-3.2.2/src/libs/models/kptworkpackagemodel.cpp Examining data/calligraplan-3.2.2/src/libs/models/kptitemmodelbase.h Examining data/calligraplan-3.2.2/src/libs/models/kptcommonstrings.h Examining data/calligraplan-3.2.2/src/libs/models/kptpertcpmmodel.cpp Examining data/calligraplan-3.2.2/src/libs/models/kpttreecombobox.h Examining data/calligraplan-3.2.2/src/libs/models/kptschedulemodel.cpp Examining data/calligraplan-3.2.2/src/libs/models/kpttaskstatusmodel.h Examining data/calligraplan-3.2.2/src/libs/models/kptresourceallocationmodel.cpp Examining data/calligraplan-3.2.2/src/libs/models/kcalendar/kdatepicker.h Examining data/calligraplan-3.2.2/src/libs/models/kcalendar/kdatetable.h Examining data/calligraplan-3.2.2/src/libs/models/kcalendar/kdatetable.cpp Examining data/calligraplan-3.2.2/src/libs/models/kcalendar/kdatepicker_p.h Examining data/calligraplan-3.2.2/src/libs/models/kcalendar/kdatepicker.cpp Examining data/calligraplan-3.2.2/src/libs/models/kptdocumentmodel.cpp Examining data/calligraplan-3.2.2/src/libs/models/kptrelationmodel.cpp Examining data/calligraplan-3.2.2/src/libs/models/kptworkpackagemodel.h Examining data/calligraplan-3.2.2/src/libs/models/kptcommonstrings.cpp Examining data/calligraplan-3.2.2/src/libs/models/kptaccountsmodel.h Examining data/calligraplan-3.2.2/src/libs/models/kptrelationmodel.h Examining data/calligraplan-3.2.2/src/libs/models/kpttaskcompletedelegate.cpp Examining data/calligraplan-3.2.2/src/libs/models/kptresourceappointmentsmodel.h Examining data/calligraplan-3.2.2/src/libs/models/kptschedulemodel.h Examining data/calligraplan-3.2.2/src/libs/models/kptdurationspinbox.h Examining data/calligraplan-3.2.2/src/libs/models/kptnodechartmodel.cpp Examining data/calligraplan-3.2.2/src/libs/models/kptdocumentmodel.h Examining data/calligraplan-3.2.2/src/libs/models/kpttaskcompletedelegate.h Examining data/calligraplan-3.2.2/src/libs/models/reportgenerator/ReportGeneratorOdt.h Examining data/calligraplan-3.2.2/src/libs/models/reportgenerator/ReportGeneratorOdt.cpp Examining data/calligraplan-3.2.2/src/libs/models/reportgenerator/ReportGenerator.h Examining data/calligraplan-3.2.2/src/libs/models/reportgenerator/ReportGenerator.cpp Examining data/calligraplan-3.2.2/src/libs/models/kptnodechartmodel.h Examining data/calligraplan-3.2.2/src/libs/models/commands/InsertTaskModuleCommand.h Examining data/calligraplan-3.2.2/src/libs/models/commands/InsertProjectXmlCommand.h Examining data/calligraplan-3.2.2/src/libs/models/commands/InsertTaskModuleCommand.cpp Examining data/calligraplan-3.2.2/src/libs/models/commands/InsertProjectXmlCommand.cpp Examining data/calligraplan-3.2.2/src/libs/models/kptresourcemodel.h Examining data/calligraplan-3.2.2/src/libs/models/kpttreecombobox.cpp Examining data/calligraplan-3.2.2/src/libs/models/tests/WorkPackageProxyModelTester.h Examining data/calligraplan-3.2.2/src/libs/models/tests/FlatProxyModelTester.cpp Examining data/calligraplan-3.2.2/src/libs/models/tests/InsertProjectXmlCommandTester.h Examining data/calligraplan-3.2.2/src/libs/models/tests/FlatProxyModelTester.h Examining data/calligraplan-3.2.2/src/libs/models/tests/InsertProjectXmlCommandTester.cpp Examining data/calligraplan-3.2.2/src/libs/models/tests/ResourceModelTester.cpp Examining data/calligraplan-3.2.2/src/libs/models/tests/ResourceModelTester.h Examining data/calligraplan-3.2.2/src/libs/models/tests/WorkPackageProxyModelTester.cpp Examining data/calligraplan-3.2.2/src/libs/models/kptcalendarmodel.h Examining data/calligraplan-3.2.2/src/libs/models/kptitemmodelbase.cpp Examining data/calligraplan-3.2.2/src/libs/models/kptaccountsmodel.cpp Examining data/calligraplan-3.2.2/src/libs/models/kptpertcpmmodel.h Examining data/calligraplan-3.2.2/src/libs/models/kptresourceallocationmodel.h Examining data/calligraplan-3.2.2/src/libs/models/kptflatproxymodel.h Examining data/calligraplan-3.2.2/src/libs/models/kptcalendarmodel.cpp Examining data/calligraplan-3.2.2/src/libs/plugin/KoPluginLoader.cpp Examining data/calligraplan-3.2.2/src/libs/plugin/KoPluginLoader.h Examining data/calligraplan-3.2.2/src/libs/store/KoLZF.cpp Examining data/calligraplan-3.2.2/src/libs/store/KoStore.h Examining data/calligraplan-3.2.2/src/libs/store/KoStoreDevice.h Examining data/calligraplan-3.2.2/src/libs/store/KoXmlNS.h Examining data/calligraplan-3.2.2/src/libs/store/KoXmlReaderForward.h Examining data/calligraplan-3.2.2/src/libs/store/KoTarStore.h Examining data/calligraplan-3.2.2/src/libs/store/KoZipStore.h Examining data/calligraplan-3.2.2/src/libs/store/KoTarStore.cpp Examining data/calligraplan-3.2.2/src/libs/store/KoXmlWriter.cpp Examining data/calligraplan-3.2.2/src/libs/store/KoXmlWriter.h Examining data/calligraplan-3.2.2/src/libs/store/KoXmlNS.cpp Examining data/calligraplan-3.2.2/src/libs/store/KoNetAccess.h Examining data/calligraplan-3.2.2/src/libs/store/KoEncryptedStore.cpp Examining data/calligraplan-3.2.2/src/libs/store/KoLZF.h Examining data/calligraplan-3.2.2/src/libs/store/StoreDebug.cpp Examining data/calligraplan-3.2.2/src/libs/store/KoStoreDevice.cpp Examining data/calligraplan-3.2.2/src/libs/store/KoDirectoryStore.h Examining data/calligraplan-3.2.2/src/libs/store/KoStore.cpp Examining data/calligraplan-3.2.2/src/libs/store/KoXmlVector.h Examining data/calligraplan-3.2.2/src/libs/store/KoXmlReader.cpp Examining data/calligraplan-3.2.2/src/libs/store/tests/TestKoLZF.h Examining data/calligraplan-3.2.2/src/libs/store/tests/storedroptest.cpp Examining data/calligraplan-3.2.2/src/libs/store/tests/TestKoXmlVector.cpp Examining data/calligraplan-3.2.2/src/libs/store/tests/TestKoXmlVector.h Examining data/calligraplan-3.2.2/src/libs/store/tests/TestKoLZF.cpp Examining data/calligraplan-3.2.2/src/libs/store/KoStore_p.h Examining data/calligraplan-3.2.2/src/libs/store/KoEncryptionChecker.cpp Examining data/calligraplan-3.2.2/src/libs/store/KoDirectoryStore.cpp Examining data/calligraplan-3.2.2/src/libs/store/KoNetAccess.cpp Examining data/calligraplan-3.2.2/src/libs/store/KoZipStore.cpp Examining data/calligraplan-3.2.2/src/libs/store/StoreDebug.h Examining data/calligraplan-3.2.2/src/libs/store/KoEncryptedStore.h Examining data/calligraplan-3.2.2/src/libs/store/KoXmlReader.h Examining data/calligraplan-3.2.2/src/libs/store/KoEncryptionChecker.h Examining data/calligraplan-3.2.2/src/libs/widgets/KoGlobal.cpp Examining data/calligraplan-3.2.2/src/libs/widgets/KoResourcePaths.h Examining data/calligraplan-3.2.2/src/libs/widgets/ParameterSubstitutionDialog.h Examining data/calligraplan-3.2.2/src/libs/widgets/KoDialog.cpp Examining data/calligraplan-3.2.2/src/libs/widgets/KoDocumentInfoDlg.h Examining data/calligraplan-3.2.2/src/libs/widgets/KoUnitDoubleSpinBox.cpp Examining data/calligraplan-3.2.2/src/libs/widgets/KoDpi.h Examining data/calligraplan-3.2.2/src/libs/widgets/KoDpi.cpp Examining data/calligraplan-3.2.2/src/libs/widgets/KoDockWidgetTitleBar.cpp Examining data/calligraplan-3.2.2/src/libs/widgets/WidgetsDebug.cpp Examining data/calligraplan-3.2.2/src/libs/widgets/KoPageLayoutDialog.cpp Examining data/calligraplan-3.2.2/src/libs/widgets/KoDialog.h Examining data/calligraplan-3.2.2/src/libs/widgets/KoDockWidgetTitleBar.h Examining data/calligraplan-3.2.2/src/libs/widgets/KoPageLayoutDialog.h Examining data/calligraplan-3.2.2/src/libs/widgets/KoPageLayoutWidget.h Examining data/calligraplan-3.2.2/src/libs/widgets/KoPagePreviewWidget.cpp Examining data/calligraplan-3.2.2/src/libs/widgets/KoDocumentInfoDlg.cpp Examining data/calligraplan-3.2.2/src/libs/widgets/KoDockWidgetTitleBarButton.h Examining data/calligraplan-3.2.2/src/libs/widgets/KoPagePreviewWidget.h Examining data/calligraplan-3.2.2/src/libs/widgets/KoUnitDoubleSpinBox.h Examining data/calligraplan-3.2.2/src/libs/widgets/tests/zoomhandler_test.h Examining data/calligraplan-3.2.2/src/libs/widgets/tests/KoResourceTaggingTest.h Examining data/calligraplan-3.2.2/src/libs/widgets/tests/zoomcontroller_test.h Examining data/calligraplan-3.2.2/src/libs/widgets/tests/zoomhandler_test.cpp Examining data/calligraplan-3.2.2/src/libs/widgets/tests/zoomcontroller_test.cpp Examining data/calligraplan-3.2.2/src/libs/widgets/tests/KoProgressUpdater_test.cpp Examining data/calligraplan-3.2.2/src/libs/widgets/tests/KoProgressUpdater_test.h Examining data/calligraplan-3.2.2/src/libs/widgets/KoDialog_p.h Examining data/calligraplan-3.2.2/src/libs/widgets/KoPageLayoutWidget.cpp Examining data/calligraplan-3.2.2/src/libs/widgets/KoResourcePaths.cpp Examining data/calligraplan-3.2.2/src/libs/widgets/KoGlobal.h Examining data/calligraplan-3.2.2/src/libs/widgets/ParameterSubstitutionDialog.cpp Examining data/calligraplan-3.2.2/src/libs/widgets/KoPageWidgetItem.h Examining data/calligraplan-3.2.2/src/libs/widgets/KoDockWidgetTitleBar_p.h Examining data/calligraplan-3.2.2/src/libs/widgets/KoVBox.h Examining data/calligraplan-3.2.2/src/libs/widgets/KoVBox.cpp Examining data/calligraplan-3.2.2/src/libs/widgets/KoDockWidgetTitleBarButton.cpp Examining data/calligraplan-3.2.2/src/libs/widgets/WidgetsDebug.h Examining data/calligraplan-3.2.2/src/libs/widgetutils/KoProgressUpdater.h Examining data/calligraplan-3.2.2/src/libs/widgetutils/KoProgressBar.cpp Examining data/calligraplan-3.2.2/src/libs/widgetutils/KoUpdaterPrivate_p.h Examining data/calligraplan-3.2.2/src/libs/widgetutils/KoFileDialog.h Examining data/calligraplan-3.2.2/src/libs/widgetutils/KoUpdaterPrivate_p.cpp Examining data/calligraplan-3.2.2/src/libs/widgetutils/KoUpdater.cpp Examining data/calligraplan-3.2.2/src/libs/widgetutils/KoFileDialog.cpp Examining data/calligraplan-3.2.2/src/libs/widgetutils/KoUpdater.h Examining data/calligraplan-3.2.2/src/libs/widgetutils/KoProgressUpdater.cpp Examining data/calligraplan-3.2.2/src/libs/widgetutils/KoProgressProxy.h Examining data/calligraplan-3.2.2/src/libs/widgetutils/tests/KoPropertiesTest.cpp Examining data/calligraplan-3.2.2/src/libs/widgetutils/tests/KoPropertiesTest.h Examining data/calligraplan-3.2.2/src/libs/widgetutils/tests/KoFileDialogTester.cpp Examining data/calligraplan-3.2.2/src/libs/widgetutils/tests/KoFileDialogTester.h Examining data/calligraplan-3.2.2/src/libs/widgetutils/Help.h Examining data/calligraplan-3.2.2/src/libs/widgetutils/KoProgressBar.h Examining data/calligraplan-3.2.2/src/libs/widgetutils/Help.cpp Examining data/calligraplan-3.2.2/src/libs/odf/KoShadowStyle.h Examining data/calligraplan-3.2.2/src/libs/odf/KoColumns.cpp Examining data/calligraplan-3.2.2/src/libs/odf/KoBorder.cpp Examining data/calligraplan-3.2.2/src/libs/odf/KoOdfNumberDefinition.h Examining data/calligraplan-3.2.2/src/libs/odf/KoOdfStylesReader.h Examining data/calligraplan-3.2.2/src/libs/odf/KoUnit.h Examining data/calligraplan-3.2.2/src/libs/odf/KoOasisSettings.cpp Examining data/calligraplan-3.2.2/src/libs/odf/KoUnit.cpp Examining data/calligraplan-3.2.2/src/libs/odf/KoOdfManifestEntry.h Examining data/calligraplan-3.2.2/src/libs/odf/OdfDebug.cpp Examining data/calligraplan-3.2.2/src/libs/odf/KoOdf.h Examining data/calligraplan-3.2.2/src/libs/odf/KoGenChanges.h Examining data/calligraplan-3.2.2/src/libs/odf/KoGenStyle.cpp Examining data/calligraplan-3.2.2/src/libs/odf/KoGenStyles.h Examining data/calligraplan-3.2.2/src/libs/odf/KoGenChange.h Examining data/calligraplan-3.2.2/src/libs/odf/KoDocumentInfo.h Examining data/calligraplan-3.2.2/src/libs/odf/KoStyleStack.h Examining data/calligraplan-3.2.2/src/libs/odf/KoOdfLineNumberingConfiguration.h Examining data/calligraplan-3.2.2/src/libs/odf/KoBorder.h Examining data/calligraplan-3.2.2/src/libs/odf/KoDocumentBase.cpp Examining data/calligraplan-3.2.2/src/libs/odf/Ko3dScene.cpp Examining data/calligraplan-3.2.2/src/libs/odf/KoElementReference.h Examining data/calligraplan-3.2.2/src/libs/odf/Ko3dScene.h Examining data/calligraplan-3.2.2/src/libs/odf/KoColumns.h Examining data/calligraplan-3.2.2/src/libs/odf/KoOdfStylesReader.cpp Examining data/calligraplan-3.2.2/src/libs/odf/KoOdf.cpp Examining data/calligraplan-3.2.2/src/libs/odf/KoOdfReadStore.h Examining data/calligraplan-3.2.2/src/libs/odf/writeodf/odfwriter.h Examining data/calligraplan-3.2.2/src/libs/odf/writeodf/helpers.cpp Examining data/calligraplan-3.2.2/src/libs/odf/writeodf/helpers.h Examining data/calligraplan-3.2.2/src/libs/odf/KoPageFormat.h Examining data/calligraplan-3.2.2/src/libs/odf/KoOdfLoadingContext.h Examining data/calligraplan-3.2.2/src/libs/odf/KoOdfNumberStyles.h Examining data/calligraplan-3.2.2/src/libs/odf/KoFontFace.cpp Examining data/calligraplan-3.2.2/src/libs/odf/KoTableTemplate.h Examining data/calligraplan-3.2.2/src/libs/odf/KoOdfGraphicStyles.h Examining data/calligraplan-3.2.2/src/libs/odf/KoDocumentInfo.cpp Examining data/calligraplan-3.2.2/src/libs/odf/KoOdfBibliographyConfiguration.cpp Examining data/calligraplan-3.2.2/src/libs/odf/KoOdfBibliographyConfiguration.h Examining data/calligraplan-3.2.2/src/libs/odf/KoOdfNumberStyles.cpp Examining data/calligraplan-3.2.2/src/libs/odf/KoOdfWriteStore.cpp Examining data/calligraplan-3.2.2/src/libs/odf/KoPageFormat.cpp Examining data/calligraplan-3.2.2/src/libs/odf/KoPageLayout.cpp Examining data/calligraplan-3.2.2/src/libs/odf/KoOasisSettings.h Examining data/calligraplan-3.2.2/src/libs/odf/KoGenStyle.h Examining data/calligraplan-3.2.2/src/libs/odf/KoEmbeddedDocumentSaver.h Examining data/calligraplan-3.2.2/src/libs/odf/KoOdfNotesConfiguration.h Examining data/calligraplan-3.2.2/src/libs/odf/KoEmbeddedDocumentSaver.cpp Examining data/calligraplan-3.2.2/src/libs/odf/KoOdfPaste.h Examining data/calligraplan-3.2.2/src/libs/odf/KoOdfLineNumberingConfiguration.cpp Examining data/calligraplan-3.2.2/src/libs/odf/tests/TestNumberStyle.h Examining data/calligraplan-3.2.2/src/libs/odf/tests/TestKoGenStyles.cpp Examining data/calligraplan-3.2.2/src/libs/odf/tests/TestKoElementReference.cpp Examining data/calligraplan-3.2.2/src/libs/odf/tests/TestKoUnit.cpp Examining data/calligraplan-3.2.2/src/libs/odf/tests/kodomtest.cpp Examining data/calligraplan-3.2.2/src/libs/odf/tests/TestKoOdfLoadingContext.cpp Examining data/calligraplan-3.2.2/src/libs/odf/tests/TestXmlReader.cpp Examining data/calligraplan-3.2.2/src/libs/odf/tests/TestXmlWriter.cpp Examining data/calligraplan-3.2.2/src/libs/odf/tests/TestXmlReaderWithoutSpaces.cpp Examining data/calligraplan-3.2.2/src/libs/odf/tests/TestStorage.cpp Examining data/calligraplan-3.2.2/src/libs/odf/tests/TestKoElementReference.h Examining data/calligraplan-3.2.2/src/libs/odf/tests/TestNumberStyle.cpp Examining data/calligraplan-3.2.2/src/libs/odf/tests/TestKoGenStyles.h Examining data/calligraplan-3.2.2/src/libs/odf/tests/TestOdfSettings.cpp Examining data/calligraplan-3.2.2/src/libs/odf/tests/TestKoOdfLoadingContext.h Examining data/calligraplan-3.2.2/src/libs/odf/tests/TestKoUnit.h Examining data/calligraplan-3.2.2/src/libs/odf/tests/TestWriteStyleXml.cpp Examining data/calligraplan-3.2.2/src/libs/odf/tests/kodomtest.h Examining data/calligraplan-3.2.2/src/libs/odf/KoDocumentBase.h Examining data/calligraplan-3.2.2/src/libs/odf/KoStyleStack.cpp Examining data/calligraplan-3.2.2/src/libs/odf/KoOdfManifestEntry.cpp Examining data/calligraplan-3.2.2/src/libs/odf/KoGenChanges.cpp Examining data/calligraplan-3.2.2/src/libs/odf/KoGenChange.cpp Examining data/calligraplan-3.2.2/src/libs/odf/KoShadowStyle.cpp Examining data/calligraplan-3.2.2/src/libs/odf/KoFontFace.h Examining data/calligraplan-3.2.2/src/libs/odf/KoTableProperties.h Examining data/calligraplan-3.2.2/src/libs/odf/KoElementReference.cpp Examining data/calligraplan-3.2.2/src/libs/odf/KoOdfNumberDefinition.cpp Examining data/calligraplan-3.2.2/src/libs/odf/KoOdfPaste.cpp Examining data/calligraplan-3.2.2/src/libs/odf/OdfDebug.h Examining data/calligraplan-3.2.2/src/libs/odf/KoPageLayout.h Examining data/calligraplan-3.2.2/src/libs/odf/KoOdfNotesConfiguration.cpp Examining data/calligraplan-3.2.2/src/libs/odf/KoGenStyles.cpp Examining data/calligraplan-3.2.2/src/libs/odf/KoOdfGraphicStyles.cpp Examining data/calligraplan-3.2.2/src/libs/odf/KoOdfWriteStore.h Examining data/calligraplan-3.2.2/src/libs/odf/KoOdfReadStore.cpp Examining data/calligraplan-3.2.2/src/libs/odf/KoOdfLoadingContext.cpp Examining data/calligraplan-3.2.2/src/libs/kundo2/kundo2command.h Examining data/calligraplan-3.2.2/src/libs/kundo2/kundo2group.cpp Examining data/calligraplan-3.2.2/src/libs/kundo2/kundo2view.h Examining data/calligraplan-3.2.2/src/libs/kundo2/kundo2model.h Examining data/calligraplan-3.2.2/src/libs/kundo2/kundo2view.cpp Examining data/calligraplan-3.2.2/src/libs/kundo2/kundo2qstack.h Examining data/calligraplan-3.2.2/src/libs/kundo2/kundo2magicstring.cpp Examining data/calligraplan-3.2.2/src/libs/kundo2/kundo2commandextradata.cpp Examining data/calligraplan-3.2.2/src/libs/kundo2/kundo2group.h Examining data/calligraplan-3.2.2/src/libs/kundo2/kundo2commandextradata.h Examining data/calligraplan-3.2.2/src/libs/kundo2/kundo2stack.cpp Examining data/calligraplan-3.2.2/src/libs/kundo2/kundo2stack.h Examining data/calligraplan-3.2.2/src/libs/kundo2/kundo2model.cpp Examining data/calligraplan-3.2.2/src/libs/kundo2/kundo2magicstring.h Examining data/calligraplan-3.2.2/src/libs/kundo2/kundo2stack_p.h Examining data/calligraplan-3.2.2/src/kptmaindocument.cpp Examining data/calligraplan-3.2.2/src/main.cpp Examining data/calligraplan-3.2.2/src/kptaboutdata.h Examining data/calligraplan-3.2.2/src/kptinsertfiledlg.h Examining data/calligraplan-3.2.2/src/kptcontext.cpp Examining data/calligraplan-3.2.2/src/kptviewlistdialog.cpp Examining data/calligraplan-3.2.2/src/kptcontext.h Examining data/calligraplan-3.2.2/src/KoIcon.h Examining data/calligraplan-3.2.2/src/kptloadsharedprojectsdialog.cpp Examining data/calligraplan-3.2.2/src/kptconfig.cpp Examining data/calligraplan-3.2.2/src/kptview.cpp Examining data/calligraplan-3.2.2/src/kptschedulesdocker.h Examining data/calligraplan-3.2.2/src/config/ConfigTaskModulesPanel.h Examining data/calligraplan-3.2.2/src/config/ConfigDocumentationPanel.h Examining data/calligraplan-3.2.2/src/config/kptcolorsconfigpanel.cpp Examining data/calligraplan-3.2.2/src/config/kptworkpackageconfigpanel.h Examining data/calligraplan-3.2.2/src/config/ConfigWorkVacationPanel.cpp Examining data/calligraplan-3.2.2/src/config/ConfigProjectTemplatesPanel.h Examining data/calligraplan-3.2.2/src/config/ConfigWorkVacationPanel.h Examining data/calligraplan-3.2.2/src/config/kpttaskdefaultpanel.h Examining data/calligraplan-3.2.2/src/config/ConfigProjectTemplatesPanel.cpp Examining data/calligraplan-3.2.2/src/config/ConfigProjectPanel.cpp Examining data/calligraplan-3.2.2/src/config/kpttaskdefaultpanel.cpp Examining data/calligraplan-3.2.2/src/config/ConfigProjectPanel.h Examining data/calligraplan-3.2.2/src/config/ConfigDocumentationPanel.cpp Examining data/calligraplan-3.2.2/src/config/kptworkpackageconfigpanel.cpp Examining data/calligraplan-3.2.2/src/config/ConfigDialog.h Examining data/calligraplan-3.2.2/src/config/ConfigDialog.cpp Examining data/calligraplan-3.2.2/src/config/kptcolorsconfigpanel.h Examining data/calligraplan-3.2.2/src/config/ConfigTaskModulesPanel.cpp Examining data/calligraplan-3.2.2/src/kptschedulerpluginloader.cpp Examining data/calligraplan-3.2.2/src/KPtViewAdaptor.cpp Examining data/calligraplan-3.2.2/src/kptschedulerpluginloader.h Examining data/calligraplan-3.2.2/src/kptviewlist.cpp Examining data/calligraplan-3.2.2/src/kptfactory.h Examining data/calligraplan-3.2.2/src/PlanMacros.h Examining data/calligraplan-3.2.2/src/about/aboutpage.cpp Examining data/calligraplan-3.2.2/src/about/aboutpage.h Examining data/calligraplan-3.2.2/src/kptpart.h Examining data/calligraplan-3.2.2/src/kptpart.cpp Examining data/calligraplan-3.2.2/src/kptschedulesdocker.cpp Examining data/calligraplan-3.2.2/src/tests/InsertFileTester.cpp Examining data/calligraplan-3.2.2/src/tests/InsertProjectTester.cpp Examining data/calligraplan-3.2.2/src/tests/InsertFileTester.h Examining data/calligraplan-3.2.2/src/tests/InsertProjectTester.h Examining data/calligraplan-3.2.2/src/KPtViewAdaptor.h Examining data/calligraplan-3.2.2/src/kptviewlistdocker.h Examining data/calligraplan-3.2.2/src/kptview.h Examining data/calligraplan-3.2.2/src/workpackage/factoryinit.h Examining data/calligraplan-3.2.2/src/workpackage/part.h Examining data/calligraplan-3.2.2/src/workpackage/taskworkpackagemodel.h Examining data/calligraplan-3.2.2/src/workpackage/taskcompletiondialog.cpp Examining data/calligraplan-3.2.2/src/workpackage/debugarea.cpp Examining data/calligraplan-3.2.2/src/workpackage/workpackage.h Examining data/calligraplan-3.2.2/src/workpackage/commandlineparser.h Examining data/calligraplan-3.2.2/src/workpackage/debugarea.h Examining data/calligraplan-3.2.2/src/workpackage/main.cpp Examining data/calligraplan-3.2.2/src/workpackage/part.cpp Examining data/calligraplan-3.2.2/src/workpackage/factory.cpp Examining data/calligraplan-3.2.2/src/workpackage/factory.h Examining data/calligraplan-3.2.2/src/workpackage/commandlineparser.cpp Examining data/calligraplan-3.2.2/src/workpackage/taskworkpackageview.cpp Examining data/calligraplan-3.2.2/src/workpackage/taskworkpackageview.h Examining data/calligraplan-3.2.2/src/workpackage/workpackage.cpp Examining data/calligraplan-3.2.2/src/workpackage/taskcompletiondialog.h Examining data/calligraplan-3.2.2/src/workpackage/factoryinit.cpp Examining data/calligraplan-3.2.2/src/workpackage/mainwindow.cpp Examining data/calligraplan-3.2.2/src/workpackage/view.cpp Examining data/calligraplan-3.2.2/src/workpackage/mainwindow.h Examining data/calligraplan-3.2.2/src/workpackage/aboutdata.h Examining data/calligraplan-3.2.2/src/workpackage/view.h Examining data/calligraplan-3.2.2/src/workpackage/taskworkpackagemodel.cpp Examining data/calligraplan-3.2.2/src/kptbuiltinschedulerplugin.h Examining data/calligraplan-3.2.2/src/kptloadsharedprojectsdialog.h Examining data/calligraplan-3.2.2/src/kptprintingcontrolprivate.cpp Examining data/calligraplan-3.2.2/src/kptviewlistdialog.h Examining data/calligraplan-3.2.2/src/kptviewlistdocker.cpp Examining data/calligraplan-3.2.2/src/kptmycombobox_p.h Examining data/calligraplan-3.2.2/src/kptbuiltinschedulerplugin.cpp FINAL RESULTS: data/calligraplan-3.2.2/src/libs/kernel/kptduration.cpp:177:20: [4] (format) sprintf: Potential format string problem (CWE-134). Make format string constant. result.sprintf("%u %02u:%02u:%02u.%u", (unsigned)days, hours, minutes, seconds, (unsigned)ms); data/calligraplan-3.2.2/src/libs/odf/tests/TestStorage.cpp:92:9: [4] (shell) system: This causes a new program to execute and is difficult to use safely (CWE-78). try using a library call that implements the same functionality if available. system(ba.constData()); // QDir::rmdir isn't recursive! data/calligraplan-3.2.2/src/libs/odf/tests/TestStorage.cpp:226:9: [4] (shell) system: This causes a new program to execute and is difficult to use safely (CWE-78). try using a library call that implements the same functionality if available. system(ba.constData()); // QDir::rmdir isn't recursive! data/calligraplan-3.2.2/src/plugins/schedulers/rcps/3rdparty/LibRCPS/src/librcps.c:91:2: [4] (buffer) strcpy: Does not check for buffer overflows when copying to destination [MS-banned] (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy easily misused). strcpy(r->name, name); data/calligraplan-3.2.2/src/plugins/schedulers/rcps/3rdparty/LibRCPS/src/librcps.c:173:2: [4] (buffer) strcpy: Does not check for buffer overflows when copying to destination [MS-banned] (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy easily misused). strcpy(j->name, name); data/calligraplan-3.2.2/src/plugins/schedulers/tj/taskjuggler/Utility.cpp:816:9: [4] (buffer) sscanf: The scanf() family's %s operation, without a limit specification, permits buffer overflows (CWE-120, CWE-20). Specify a limit to %s, or use a different input function. if (sscanf(date.toLocal8Bit(), "%d-%d-%d-%d:%d:%d-%s", data/calligraplan-3.2.2/src/plugins/schedulers/tj/taskjuggler/Utility.cpp:819:9: [4] (buffer) sscanf: The scanf() family's %s operation, without a limit specification, permits buffer overflows (CWE-120, CWE-20). Specify a limit to %s, or use a different input function. sscanf(date.toLocal8Bit(), "%d-%d-%d-%d:%d-%s", data/calligraplan-3.2.2/src/plugins/schedulers/tj/taskjuggler/Utility.cpp:952:4: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. sprintf (buffer, "%s=%s", var, val); data/calligraplan-3.2.2/src/libs/main/KoDocument.cpp:1589:18: [3] (buffer) getenv: Environment variables are untrustable input if they can be set by an attacker. They can have any content and length, and the same variable can be set more than once (CWE-807, CWE-20). Check environment variables carefully before using them. if (!getenv("CALLIGRA_DEBUG_FILTERS")) data/calligraplan-3.2.2/src/libs/main/tests/priorityqueue_test.cpp:65:5: [3] (random) srand: This function is not sufficiently random for security-related functions such as key and nonce creation (CWE-327). Use a more secure technique for acquiring random values. srand(time(0)); data/calligraplan-3.2.2/src/libs/store/KoEncryptedStore.cpp:766:21: [3] (random) random: This function is not sufficiently random for security-related functions such as key and nonce creation (CWE-327). Use a more secure technique for acquiring random values. QCA::Random random; data/calligraplan-3.2.2/src/libs/store/KoEncryptedStore.cpp:768:30: [3] (random) random: This function is not sufficiently random for security-related functions such as key and nonce creation (CWE-327). Use a more secure technique for acquiring random values. encData.initVector = random.randomArray(8); data/calligraplan-3.2.2/src/libs/store/KoEncryptedStore.cpp:769:24: [3] (random) random: This function is not sufficiently random for security-related functions such as key and nonce creation (CWE-327). Use a more secure technique for acquiring random values. encData.salt = random.randomArray(16); data/calligraplan-3.2.2/src/plugins/schedulers/rcps/3rdparty/LibRCPS/src/librcps.c:886:2: [3] (random) srand: This function is not sufficiently random for security-related functions such as key and nonce creation (CWE-327). Use a more secure technique for acquiring random values. srand(time(NULL)); data/calligraplan-3.2.2/src/plugins/schedulers/tj/taskjuggler/Allocation.cpp:113:25: [3] (random) random: This function is not sufficiently random for security-related functions such as key and nonce creation (CWE-327). Use a more secure technique for acquiring random values. selectionMode = random; data/calligraplan-3.2.2/src/plugins/schedulers/tj/taskjuggler/Allocation.h:77:64: [3] (random) random: This function is not sufficiently random for security-related functions such as key and nonce creation (CWE-327). Use a more secure technique for acquiring random values. order, minAllocationProbability, minLoaded, maxLoaded, random data/calligraplan-3.2.2/src/plugins/schedulers/tj/taskjuggler/Project.cpp:510:5: [3] (random) srand: This function is not sufficiently random for security-related functions such as key and nonce creation (CWE-327). Use a more secure technique for acquiring random values. srand((int) start); data/calligraplan-3.2.2/src/plugins/schedulers/tj/taskjuggler/Task.cpp:1133:26: [3] (random) random: This function is not sufficiently random for security-related functions such as key and nonce creation (CWE-327). Use a more secure technique for acquiring random values. case Allocation::random: data/calligraplan-3.2.2/src/plugins/schedulers/tj/taskjuggler/Utility.cpp:823:19: [3] (buffer) getenv: Environment variables are untrustable input if they can be set by an attacker. They can have any content and length, and the same variable can be set more than once (CWE-807, CWE-20). Check environment variables carefully before using them. if ((tz = getenv("TZ")) != 0) data/calligraplan-3.2.2/devtools/rng2cpp/rng2cpp.cpp:591:7: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). f.open(QIODevice::ReadOnly); data/calligraplan-3.2.2/devtools/rng2cpp/rng2cpp.cpp:1323:16: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!file->open(QIODevice::Truncate | QIODevice::WriteOnly | QIODevice::Text)) { data/calligraplan-3.2.2/src/about/aboutpage.cpp:309:12: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!f.open(QIODevice::ReadOnly)) data/calligraplan-3.2.2/src/kptmaindocument.cpp:475:10: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). dev->open(QIODevice::WriteOnly); data/calligraplan-3.2.2/src/kptmaindocument.cpp:510:18: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (! store->open("root")) { data/calligraplan-3.2.2/src/kptmaindocument.cpp:561:18: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (! store->open("root")) { // "old" file format (maindoc.xml) data/calligraplan-3.2.2/src/kptmaindocument.cpp:748:20: [2] (tmpfile) tmpfile: Function tmpfile() has a security flaw on some systems (e.g., older System V systems) (CWE-377). QTemporaryFile tmpfile; data/calligraplan-3.2.2/src/kptmaindocument.cpp:749:11: [2] (tmpfile) tmpfile: Function tmpfile() has a security flaw on some systems (e.g., older System V systems) (CWE-377). if (! tmpfile.open()) { data/calligraplan-3.2.2/src/kptmaindocument.cpp:749:19: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (! tmpfile.open()) { data/calligraplan-3.2.2/src/kptmaindocument.cpp:753:53: [2] (tmpfile) tmpfile: Function tmpfile() has a security flaw on some systems (e.g., older System V systems) (CWE-377). if (! store->extractFile(doc->url().fileName(), tmpfile.fileName())) { data/calligraplan-3.2.2/src/kptmaindocument.cpp:754:77: [2] (tmpfile) tmpfile: Function tmpfile() has a security flaw on some systems (e.g., older System V systems) (CWE-377). errorPlan<<"Failed to extract file:"<<doc->url().fileName()<<"to:"<<tmpfile.fileName(); data/calligraplan-3.2.2/src/kptmaindocument.cpp:757:31: [2] (tmpfile) tmpfile: Function tmpfile() has a security flaw on some systems (e.g., older System V systems) (CWE-377). package->documents.insert(tmpfile.fileName(), doc->url()); data/calligraplan-3.2.2/src/kptmaindocument.cpp:758:5: [2] (tmpfile) tmpfile: Function tmpfile() has a security flaw on some systems (e.g., older System V systems) (CWE-377). tmpfile.setAutoRemove(false); data/calligraplan-3.2.2/src/kptmaindocument.cpp:759:59: [2] (tmpfile) tmpfile: Function tmpfile() has a security flaw on some systems (e.g., older System V systems) (CWE-377). debugPlan<<"extracted:"<<doc->url().fileName()<<"->"<<tmpfile.fileName(); data/calligraplan-3.2.2/src/kptmaindocument.cpp:951:20: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (store->open("context.xml")) { data/calligraplan-3.2.2/src/kptmaindocument.cpp:965:24: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (store->open("context.xml")) { data/calligraplan-3.2.2/src/kptmaindocument.cpp:987:17: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!store->open(filename)) data/calligraplan-3.2.2/src/kptpart.cpp:252:13: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). dialog->open(); data/calligraplan-3.2.2/src/kptview.cpp:424:9: [2] (tmpfile) tmpfile: Function tmpfile() has a security flaw on some systems (e.g., older System V systems) (CWE-377). tmpfile.replace(".plant", ".plan"); data/calligraplan-3.2.2/src/kptview.cpp:430:79: [2] (tmpfile) tmpfile: Function tmpfile() has a security flaw on some systems (e.g., older System V systems) (CWE-377). bool ok = koDocument()->exportDocument(QUrl::fromUserInput("file:/" + tmpfile)); data/calligraplan-3.2.2/src/kptview.cpp:431:37: [2] (tmpfile) tmpfile: Function tmpfile() has a security flaw on some systems (e.g., older System V systems) (CWE-377). ok &= doc->loadNativeFormat(tmpfile); data/calligraplan-3.2.2/src/kptview.cpp:1519:10: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). dlg->open(); data/calligraplan-3.2.2/src/kptview.cpp:1538:10: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). dlg->open(); data/calligraplan-3.2.2/src/kptview.cpp:1562:10: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). dia->open(); data/calligraplan-3.2.2/src/kptview.cpp:1816:10: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). dia->open(); data/calligraplan-3.2.2/src/kptview.cpp:1837:10: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). dia->open(); data/calligraplan-3.2.2/src/kptview.cpp:1860:10: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). dia->open(); data/calligraplan-3.2.2/src/kptview.cpp:1884:10: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). dia->open(); data/calligraplan-3.2.2/src/kptview.cpp:1907:10: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). dia->open(); data/calligraplan-3.2.2/src/kptview.cpp:2007:22: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). dia->open(); data/calligraplan-3.2.2/src/kptview.cpp:2017:22: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). dia->open(); data/calligraplan-3.2.2/src/kptview.cpp:2028:22: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). dia->open(); data/calligraplan-3.2.2/src/kptview.cpp:2036:22: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). dia->open(); data/calligraplan-3.2.2/src/kptview.cpp:2134:22: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). dia->open(); data/calligraplan-3.2.2/src/kptview.cpp:2142:22: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). dia->open(); data/calligraplan-3.2.2/src/kptview.cpp:2189:10: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). dia->open(); data/calligraplan-3.2.2/src/kptview.cpp:2214:22: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). dia->open(); data/calligraplan-3.2.2/src/kptview.cpp:2254:18: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). dia->open(); data/calligraplan-3.2.2/src/kptview.cpp:2421:10: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). dia->open(); data/calligraplan-3.2.2/src/kptview.cpp:2457:10: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). dia->open(); data/calligraplan-3.2.2/src/kptview.cpp:2524:10: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). dia->open(); data/calligraplan-3.2.2/src/kptview.cpp:2757:10: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). dlg->open(); data/calligraplan-3.2.2/src/kptview.cpp:2773:16: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (! file.open(QIODevice::ReadOnly | QIODevice::Text)) { data/calligraplan-3.2.2/src/kptview.cpp:2798:10: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). dlg->open(); data/calligraplan-3.2.2/src/kptview.cpp:3013:10: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). dlg->open(); data/calligraplan-3.2.2/src/kptview.cpp:3035:20: [2] (tmpfile) tmpfile: Function tmpfile() has a security flaw on some systems (e.g., older System V systems) (CWE-377). QTemporaryFile tmpfile(QDir::tempPath() + QLatin1String("/calligraplanwork_XXXXXX") + QLatin1String(".planwork")); data/calligraplan-3.2.2/src/kptview.cpp:3036:5: [2] (tmpfile) tmpfile: Function tmpfile() has a security flaw on some systems (e.g., older System V systems) (CWE-377). tmpfile.setAutoRemove(false); data/calligraplan-3.2.2/src/kptview.cpp:3037:11: [2] (tmpfile) tmpfile: Function tmpfile() has a security flaw on some systems (e.g., older System V systems) (CWE-377). if (! tmpfile.open()) { data/calligraplan-3.2.2/src/kptview.cpp:3037:19: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (! tmpfile.open()) { data/calligraplan-3.2.2/src/kptview.cpp:3042:36: [2] (tmpfile) tmpfile: Function tmpfile() has a security flaw on some systems (e.g., older System V systems) (CWE-377). QUrl url = QUrl::fromLocalFile(tmpfile.fileName()); data/calligraplan-3.2.2/src/kptview.cpp:3080:24: [2] (tmpfile) tmpfile: Function tmpfile() has a security flaw on some systems (e.g., older System V systems) (CWE-377). QTemporaryFile tmpfile(path + QLatin1String("/calligraplanwork_XXXXXX") + QLatin1String(".planwork")); data/calligraplan-3.2.2/src/kptview.cpp:3081:9: [2] (tmpfile) tmpfile: Function tmpfile() has a security flaw on some systems (e.g., older System V systems) (CWE-377). tmpfile.setAutoRemove(false); data/calligraplan-3.2.2/src/kptview.cpp:3082:15: [2] (tmpfile) tmpfile: Function tmpfile() has a security flaw on some systems (e.g., older System V systems) (CWE-377). if (! tmpfile.open()) { data/calligraplan-3.2.2/src/kptview.cpp:3082:23: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (! tmpfile.open()) { data/calligraplan-3.2.2/src/kptview.cpp:3087:40: [2] (tmpfile) tmpfile: Function tmpfile() has a security flaw on some systems (e.g., older System V systems) (CWE-377). QUrl url = QUrl::fromLocalFile(tmpfile.fileName()); data/calligraplan-3.2.2/src/kptview.cpp:3113:10: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). dlg->open(); data/calligraplan-3.2.2/src/kptviewlist.cpp:658:14: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). dlg->open(); data/calligraplan-3.2.2/src/libs/kernel/kptcalendar.cpp:69:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!tzif.open(QIODevice::ReadOnly)) data/calligraplan-3.2.2/src/libs/main/KoApplication.cpp:427:55: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!profileFileName.isEmpty() && profileFile.open(QFile::WriteOnly | QFile::Truncate)) { data/calligraplan-3.2.2/src/libs/main/KoAutoSaveRecoveryDialog.cpp:206:30: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (store && (store->open(QString("Thumbnails/thumbnail.png")) data/calligraplan-3.2.2/src/libs/main/KoAutoSaveRecoveryDialog.cpp:207:37: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). || store->open(QString("preview.png")))) { data/calligraplan-3.2.2/src/libs/main/KoDocument.cpp:316:18: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). tempFile.open(); data/calligraplan-3.2.2/src/libs/main/KoDocument.cpp:353:26: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). tempFile.open(); data/calligraplan-3.2.2/src/libs/main/KoDocument.cpp:806:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (f.open(QIODevice::WriteOnly | QIODevice::Text)) { data/calligraplan-3.2.2/src/libs/main/KoDocument.cpp:864:16: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (store->open("meta.xml")) { data/calligraplan-3.2.2/src/libs/main/KoDocument.cpp:885:16: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (store->open("Thumbnails/thumbnail.png")) { data/calligraplan-3.2.2/src/libs/main/KoDocument.cpp:901:20: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (store->open("VersionList.xml")) { data/calligraplan-3.2.2/src/libs/main/KoDocument.cpp:951:16: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (store->open("root")) { data/calligraplan-3.2.2/src/libs/main/KoDocument.cpp:963:16: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (store->open("documentinfo.xml")) { data/calligraplan-3.2.2/src/libs/main/KoDocument.cpp:975:16: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (store->open("preview.png")) { data/calligraplan-3.2.2/src/libs/main/KoDocument.cpp:1000:10: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). dev->open(QIODevice::WriteOnly); data/calligraplan-3.2.2/src/libs/main/KoDocument.cpp:1029:7: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). f.open(QIODevice::ReadOnly); data/calligraplan-3.2.2/src/libs/main/KoDocument.cpp:1050:17: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (_store->open("root")) { data/calligraplan-3.2.2/src/libs/main/KoDocument.cpp:1084:13: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!io.open(QIODevice::WriteOnly)) data/calligraplan-3.2.2/src/libs/main/KoDocument.cpp:1098:13: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!io.open(QIODevice::WriteOnly)) data/calligraplan-3.2.2/src/libs/main/KoDocument.cpp:1658:17: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!store->open(filename)) { data/calligraplan-3.2.2/src/libs/main/KoDocument.cpp:1706:17: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!in.open(QIODevice::ReadOnly)) { data/calligraplan-3.2.2/src/libs/main/KoDocument.cpp:1712:9: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char buf[6]; data/calligraplan-3.2.2/src/libs/main/KoDocument.cpp:1911:17: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (_store->open(url)) { data/calligraplan-3.2.2/src/libs/main/KoDocument.cpp:2634:19: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). tempFile->open(); data/calligraplan-3.2.2/src/libs/main/KoFilterChain.cpp:351:25: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). return (*tempFile)->open(); data/calligraplan-3.2.2/src/libs/main/KoFilterChain.cpp:430:22: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!(*storage)->open(name)) data/calligraplan-3.2.2/src/libs/main/KoFilterChain.cpp:482:22: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!(*storage)->open(streamName)) data/calligraplan-3.2.2/src/libs/main/KoMainWindow.cpp:1736:18: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). tmpfile->open(); data/calligraplan-3.2.2/src/libs/main/KoMainWindow.cpp:1739:16: [2] (tmpfile) tmpfile: Function tmpfile() has a security flaw on some systems (e.g., older System V systems) (CWE-377). delete tmpfile; data/calligraplan-3.2.2/src/libs/main/tests/filter_graph.cpp:116:11: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (f.open(QIODevice::WriteOnly)) data/calligraplan-3.2.2/src/libs/models/kptnodeitemmodel.cpp:4118:18: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (! store->open("root")) { // maindoc.xml data/calligraplan-3.2.2/src/libs/models/kptnodeitemmodel.cpp:5276:18: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (! store->open("root")) { // maindoc.xml data/calligraplan-3.2.2/src/libs/models/reportgenerator/ReportGenerator.cpp:70:23: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). bool ReportGenerator::open() data/calligraplan-3.2.2/src/libs/models/reportgenerator/ReportGenerator.cpp:79:35: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). return m_reportGenerator->open(); data/calligraplan-3.2.2/src/libs/models/reportgenerator/ReportGenerator.h:59:18: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). virtual bool open(); data/calligraplan-3.2.2/src/libs/models/reportgenerator/ReportGeneratorOdt.cpp:139:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!file.open(QIODevice::ReadOnly)) { data/calligraplan-3.2.2/src/libs/models/reportgenerator/ReportGeneratorOdt.cpp:144:13: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!to.open(destName)) { data/calligraplan-3.2.2/src/libs/models/reportgenerator/ReportGeneratorOdt.cpp:317:26: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). bool ReportGeneratorOdt::open() data/calligraplan-3.2.2/src/libs/models/reportgenerator/ReportGeneratorOdt.cpp:916:26: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!reader.store()->open(fileName)) { data/calligraplan-3.2.2/src/libs/models/reportgenerator/ReportGeneratorOdt.cpp:922:35: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). reader.store()->device()->open(QIODevice::ReadOnly); data/calligraplan-3.2.2/src/libs/models/reportgenerator/ReportGeneratorOdt.h:61:10: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). bool open() override; data/calligraplan-3.2.2/src/libs/odf/KoColumns.cpp:247:16: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). buffer.open(QIODevice::WriteOnly); data/calligraplan-3.2.2/src/libs/odf/KoEmbeddedDocumentSaver.cpp:249:21: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!store->open(fileName)) { data/calligraplan-3.2.2/src/libs/odf/KoGenStyles.cpp:453:17: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!store->open("styles.xml")) data/calligraplan-3.2.2/src/libs/odf/KoOdfGraphicStyles.cpp:251:12: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). buffer.open(QIODevice::WriteOnly); data/calligraplan-3.2.2/src/libs/odf/KoOdfLoadingContext.cpp:277:27: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (d->store->open(path)) { data/calligraplan-3.2.2/src/libs/odf/KoOdfNumberStyles.cpp:789:12: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). buffer.open(QIODevice::WriteOnly); data/calligraplan-3.2.2/src/libs/odf/KoOdfNumberStyles.cpp:903:12: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). buffer.open(QIODevice::WriteOnly); data/calligraplan-3.2.2/src/libs/odf/KoOdfNumberStyles.cpp:1028:12: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). buffer.open(QIODevice::WriteOnly); data/calligraplan-3.2.2/src/libs/odf/KoOdfNumberStyles.cpp:1088:12: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). buffer.open(QIODevice::WriteOnly); data/calligraplan-3.2.2/src/libs/odf/KoOdfNumberStyles.cpp:1134:12: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). buffer.open(QIODevice::WriteOnly); data/calligraplan-3.2.2/src/libs/odf/KoOdfNumberStyles.cpp:1160:12: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). buffer.open(QIODevice::WriteOnly); data/calligraplan-3.2.2/src/libs/odf/KoOdfNumberStyles.cpp:1212:12: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). buffer.open(QIODevice::WriteOnly); data/calligraplan-3.2.2/src/libs/odf/KoOdfNumberStyles.cpp:1289:12: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). buffer.open(QIODevice::WriteOnly); data/calligraplan-3.2.2/src/libs/odf/KoOdfNumberStyles.cpp:1344:12: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). buffer.open(QIODevice::WriteOnly); data/calligraplan-3.2.2/src/libs/odf/KoOdfReadStore.cpp:110:24: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!d->store->open(fileName)) { data/calligraplan-3.2.2/src/libs/odf/KoOdfReadStore.cpp:129:21: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). fileDevice->open(QIODevice::ReadOnly); data/calligraplan-3.2.2/src/libs/odf/KoOdfWriteStore.cpp:136:24: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!d->store->open("content.xml")) { data/calligraplan-3.2.2/src/libs/odf/KoOdfWriteStore.cpp:150:33: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!d->contentTmpFile->open()) { data/calligraplan-3.2.2/src/libs/odf/KoOdfWriteStore.cpp:195:25: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). manifestBuffer->open(QIODevice::WriteOnly); data/calligraplan-3.2.2/src/libs/odf/KoOdfWriteStore.cpp:220:23: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (d->store->open("META-INF/manifest.xml")) { data/calligraplan-3.2.2/src/libs/odf/tests/TestKoGenStyles.cpp:38:16: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). buffer.open(QIODevice::WriteOnly); \ data/calligraplan-3.2.2/src/libs/odf/tests/TestKoGenStyles.cpp:68:12: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). buffer.open(QIODevice::WriteOnly); data/calligraplan-3.2.2/src/libs/odf/tests/TestKoGenStyles.cpp:76:13: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). buffer2.open(QIODevice::WriteOnly); data/calligraplan-3.2.2/src/libs/odf/tests/TestKoGenStyles.cpp:222:12: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). buffer.open(QIODevice::WriteOnly); data/calligraplan-3.2.2/src/libs/odf/tests/TestKoOdfLoadingContext.cpp:76:20: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). QVERIFY(store->open("styles.xml") == true); data/calligraplan-3.2.2/src/libs/odf/tests/TestStorage.cpp:105:20: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). QVERIFY(store->open("test1/with/a/relative/dir.txt")); data/calligraplan-3.2.2/src/libs/odf/tests/TestStorage.cpp:113:20: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). QVERIFY(store->open("test2/with/a/relative/dir.txt")); data/calligraplan-3.2.2/src/libs/odf/tests/TestStorage.cpp:118:20: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). QVERIFY(store->open("root")); data/calligraplan-3.2.2/src/libs/odf/tests/TestStorage.cpp:125:20: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). QVERIFY(store->open("root")); data/calligraplan-3.2.2/src/libs/odf/tests/TestStorage.cpp:139:21: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). QVERIFY (store->open("test1/with/a/relative/dir.txt")); data/calligraplan-3.2.2/src/libs/odf/tests/TestStorage.cpp:154:21: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). QVERIFY (store->open("test2/with/a/relative/dir.txt")); data/calligraplan-3.2.2/src/libs/odf/tests/TestStorage.cpp:177:21: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). QVERIFY (store->open("root")); data/calligraplan-3.2.2/src/libs/odf/tests/TestStorage.cpp:189:21: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). QVERIFY (store->open("root")); data/calligraplan-3.2.2/src/libs/odf/tests/TestStorage.cpp:190:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char buf[29]; data/calligraplan-3.2.2/src/libs/odf/tests/TestStorage.cpp:236:21: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). QVERIFY (store->open("layer")); data/calligraplan-3.2.2/src/libs/odf/tests/TestStorage.cpp:237:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char str[DATALEN]; data/calligraplan-3.2.2/src/libs/odf/tests/TestStorage.cpp:239:5: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(str, "1,2,3,4\n"); data/calligraplan-3.2.2/src/libs/odf/tests/TestStorage.cpp:250:21: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). QVERIFY (store->open("layer")); data/calligraplan-3.2.2/src/libs/odf/tests/TestStorage.cpp:251:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char str2[DATALEN]; data/calligraplan-3.2.2/src/libs/odf/tests/TestWriteStyleXml.cpp:43:12: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). buffer.open(QIODevice::WriteOnly); data/calligraplan-3.2.2/src/libs/odf/tests/TestXmlReader.cpp:49:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). xmldevice.open(QIODevice::WriteOnly); data/calligraplan-3.2.2/src/libs/odf/tests/TestXmlReader.cpp:208:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). xmldevice.open(QIODevice::WriteOnly); data/calligraplan-3.2.2/src/libs/odf/tests/TestXmlReader.cpp:369:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). xmldevice.open(QIODevice::WriteOnly); data/calligraplan-3.2.2/src/libs/odf/tests/TestXmlReader.cpp:432:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). xmldevice.open(QIODevice::WriteOnly); data/calligraplan-3.2.2/src/libs/odf/tests/TestXmlReader.cpp:528:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). xmldevice.open(QIODevice::WriteOnly); data/calligraplan-3.2.2/src/libs/odf/tests/TestXmlReader.cpp:607:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). xmldevice.open(QIODevice::WriteOnly); data/calligraplan-3.2.2/src/libs/odf/tests/TestXmlReader.cpp:689:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). xmldevice.open(QIODevice::WriteOnly); data/calligraplan-3.2.2/src/libs/odf/tests/TestXmlReader.cpp:764:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). xmldevice.open(QIODevice::WriteOnly); data/calligraplan-3.2.2/src/libs/odf/tests/TestXmlReader.cpp:1072:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). xmldevice.open(QIODevice::WriteOnly); data/calligraplan-3.2.2/src/libs/odf/tests/TestXmlReader.cpp:1144:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). xmldevice.open(QIODevice::WriteOnly); data/calligraplan-3.2.2/src/libs/odf/tests/TestXmlReader.cpp:1250:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). xmldevice.open(QIODevice::WriteOnly); data/calligraplan-3.2.2/src/libs/odf/tests/TestXmlReader.cpp:1270:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). xmldevice.open(QIODevice::WriteOnly); data/calligraplan-3.2.2/src/libs/odf/tests/TestXmlReader.cpp:1290:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). xmldevice.open(QIODevice::WriteOnly); data/calligraplan-3.2.2/src/libs/odf/tests/TestXmlReader.cpp:1364:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). xmldevice.open(QIODevice::WriteOnly); data/calligraplan-3.2.2/src/libs/odf/tests/TestXmlReader.cpp:1441:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). xmldevice.open(QIODevice::WriteOnly); data/calligraplan-3.2.2/src/libs/odf/tests/TestXmlReader.cpp:1606:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). xmldevice.open(QIODevice::WriteOnly); data/calligraplan-3.2.2/src/libs/odf/tests/TestXmlReader.cpp:1660:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). xmldevice.open(QIODevice::WriteOnly); data/calligraplan-3.2.2/src/libs/odf/tests/TestXmlReader.cpp:1868:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). xmldevice.open(QIODevice::WriteOnly); data/calligraplan-3.2.2/src/libs/odf/tests/TestXmlReader.cpp:2224:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). xmldevice.open(QIODevice::WriteOnly); data/calligraplan-3.2.2/src/libs/odf/tests/TestXmlReader.cpp:2436:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). xmldevice.open(QIODevice::WriteOnly); data/calligraplan-3.2.2/src/libs/odf/tests/TestXmlReader.cpp:2611:18: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!xmlfile.open(QFile::ReadOnly)) { data/calligraplan-3.2.2/src/libs/odf/tests/TestXmlReaderWithoutSpaces.cpp:49:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). xmldevice.open(QIODevice::WriteOnly); data/calligraplan-3.2.2/src/libs/odf/tests/TestXmlReaderWithoutSpaces.cpp:208:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). xmldevice.open(QIODevice::WriteOnly); data/calligraplan-3.2.2/src/libs/odf/tests/TestXmlReaderWithoutSpaces.cpp:369:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). xmldevice.open(QIODevice::WriteOnly); data/calligraplan-3.2.2/src/libs/odf/tests/TestXmlReaderWithoutSpaces.cpp:432:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). xmldevice.open(QIODevice::WriteOnly); data/calligraplan-3.2.2/src/libs/odf/tests/TestXmlReaderWithoutSpaces.cpp:528:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). xmldevice.open(QIODevice::WriteOnly); data/calligraplan-3.2.2/src/libs/odf/tests/TestXmlReaderWithoutSpaces.cpp:607:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). xmldevice.open(QIODevice::WriteOnly); data/calligraplan-3.2.2/src/libs/odf/tests/TestXmlReaderWithoutSpaces.cpp:689:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). xmldevice.open(QIODevice::WriteOnly); data/calligraplan-3.2.2/src/libs/odf/tests/TestXmlReaderWithoutSpaces.cpp:764:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). xmldevice.open(QIODevice::WriteOnly); data/calligraplan-3.2.2/src/libs/odf/tests/TestXmlReaderWithoutSpaces.cpp:1060:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). xmldevice.open(QIODevice::WriteOnly); data/calligraplan-3.2.2/src/libs/odf/tests/TestXmlReaderWithoutSpaces.cpp:1132:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). xmldevice.open(QIODevice::WriteOnly); data/calligraplan-3.2.2/src/libs/odf/tests/TestXmlReaderWithoutSpaces.cpp:1236:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). xmldevice.open(QIODevice::WriteOnly); data/calligraplan-3.2.2/src/libs/odf/tests/TestXmlReaderWithoutSpaces.cpp:1256:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). xmldevice.open(QIODevice::WriteOnly); data/calligraplan-3.2.2/src/libs/odf/tests/TestXmlReaderWithoutSpaces.cpp:1300:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). xmldevice.open(QIODevice::WriteOnly); data/calligraplan-3.2.2/src/libs/odf/tests/TestXmlReaderWithoutSpaces.cpp:1377:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). xmldevice.open(QIODevice::WriteOnly); data/calligraplan-3.2.2/src/libs/odf/tests/TestXmlReaderWithoutSpaces.cpp:1455:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). xmldevice.open(QIODevice::WriteOnly); data/calligraplan-3.2.2/src/libs/odf/tests/TestXmlReaderWithoutSpaces.cpp:1609:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). xmldevice.open(QIODevice::WriteOnly); data/calligraplan-3.2.2/src/libs/odf/tests/TestXmlReaderWithoutSpaces.cpp:1659:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). xmldevice.open(QIODevice::WriteOnly); data/calligraplan-3.2.2/src/libs/odf/tests/TestXmlReaderWithoutSpaces.cpp:1867:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). xmldevice.open(QIODevice::WriteOnly); data/calligraplan-3.2.2/src/libs/odf/tests/TestXmlReaderWithoutSpaces.cpp:2182:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). xmldevice.open(QIODevice::WriteOnly); data/calligraplan-3.2.2/src/libs/odf/tests/TestXmlReaderWithoutSpaces.cpp:2360:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). xmldevice.open(QIODevice::WriteOnly); data/calligraplan-3.2.2/src/libs/odf/tests/TestXmlReaderWithoutSpaces.cpp:2535:18: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!xmlfile.open(QFile::ReadOnly)) { data/calligraplan-3.2.2/src/libs/odf/tests/TestXmlWriter.cpp:57:13: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). buffer->open(QIODevice::WriteOnly); data/calligraplan-3.2.2/src/libs/odf/tests/TestXmlWriter.cpp:234:13: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (out.open(QIODevice::WriteOnly)) { data/calligraplan-3.2.2/src/libs/store/KoDirectoryStore.cpp:81:21: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!d->stream->open(iomode)) { data/calligraplan-3.2.2/src/libs/store/KoEncryptedStore.cpp:129:26: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!m_tempFile->open()) { data/calligraplan-3.2.2/src/libs/store/KoEncryptedStore.cpp:149:26: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!m_pZip->open(QIODevice::WriteOnly)) { data/calligraplan-3.2.2/src/libs/store/KoEncryptedStore.cpp:165:27: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). d->good = m_pZip->open(QIODevice::ReadOnly); data/calligraplan-3.2.2/src/libs/store/KoEncryptedStore.cpp:528:24: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). d->stream->open(QIODevice::ReadOnly); data/calligraplan-3.2.2/src/libs/store/KoEncryptedStore.cpp:567:32: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). d->stream->open(QIODevice::ReadOnly); data/calligraplan-3.2.2/src/libs/store/KoEncryptedStore.cpp:622:20: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). d->stream->open(QIODevice::ReadOnly); data/calligraplan-3.2.2/src/libs/store/KoEncryptedStore.cpp:716:43: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). (static_cast< QBuffer* >(d->stream))->open(QIODevice::WriteOnly); data/calligraplan-3.2.2/src/libs/store/KoEncryptedStore.cpp:787:30: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!compressDevice->open(QIODevice::WriteOnly)) { data/calligraplan-3.2.2/src/libs/store/KoLZF.cpp:360:9: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(output.data(), in_data, in_len); data/calligraplan-3.2.2/src/libs/store/KoNetAccess.cpp:113:17: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). tmpFile.open(); data/calligraplan-3.2.2/src/libs/store/KoNetAccess.cpp:404:13: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). tmpFile.open(); data/calligraplan-3.2.2/src/libs/store/KoNetAccess.cpp:430:28: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (resultFile.open(QIODevice::ReadOnly)) { data/calligraplan-3.2.2/src/libs/store/KoNetAccess.cpp:530:10: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. std::memcpy(d->m_data.data() + offset, data.data(), data.size()); data/calligraplan-3.2.2/src/libs/store/KoStore.cpp:48:14: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. unsigned char buf[5]; data/calligraplan-3.2.2/src/libs/store/KoStore.cpp:71:26: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (file.open(QIODevice::ReadOnly)) data/calligraplan-3.2.2/src/libs/store/KoStore.cpp:109:25: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (device->open(QIODevice::ReadOnly)) { data/calligraplan-3.2.2/src/libs/store/KoStore.cpp:158:22: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (file.open(QIODevice::ReadOnly)) { data/calligraplan-3.2.2/src/libs/store/KoStore.cpp:215:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). bool KoStore::open(const QString & _name) data/calligraplan-3.2.2/src/libs/store/KoStore.cpp:420:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!file.open(QIODevice::ReadOnly)) { data/calligraplan-3.2.2/src/libs/store/KoStore.cpp:424:10: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!open(destName)) { data/calligraplan-3.2.2/src/libs/store/KoStore.cpp:453:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!file.open(QIODevice::ReadOnly)) { data/calligraplan-3.2.2/src/libs/store/KoStore.cpp:457:10: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!open(destName)) { data/calligraplan-3.2.2/src/libs/store/KoStore.cpp:495:13: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!q->open(srcName)) data/calligraplan-3.2.2/src/libs/store/KoStore.cpp:498:17: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!buffer.open(QIODevice::WriteOnly)) { data/calligraplan-3.2.2/src/libs/store/KoStore.h:122:10: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). bool open(const QString &name); data/calligraplan-3.2.2/src/libs/store/KoStoreDevice.h:45:10: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). bool open(OpenMode m) override { data/calligraplan-3.2.2/src/libs/store/KoTarStore.cpp:130:23: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). d->good = m_pTar->open(d->mode == Write ? QIODevice::WriteOnly : QIODevice::ReadOnly); data/calligraplan-3.2.2/src/libs/store/KoTarStore.cpp:157:16: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). d->stream->open(QIODevice::WriteOnly); data/calligraplan-3.2.2/src/libs/store/KoXmlReader.cpp:2185:36: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!device->isOpen()) device->open(QIODevice::ReadOnly); data/calligraplan-3.2.2/src/libs/store/KoXmlVector.h:93:16: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). buffer.open(QIODevice::ReadOnly); data/calligraplan-3.2.2/src/libs/store/KoXmlVector.h:104:16: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). buffer.open(QIODevice::WriteOnly); data/calligraplan-3.2.2/src/libs/store/KoXmlWriter.cpp:65:17: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). d->dev->open(QIODevice::WriteOnly); data/calligraplan-3.2.2/src/libs/store/KoXmlWriter.cpp:154:32: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). const bool openOk = indev->open(QIODevice::ReadOnly); data/calligraplan-3.2.2/src/libs/store/KoXmlWriter.cpp:316:13: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(buffer, d->escapeBuffer, amountOfCharsAlreadyCopied); data/calligraplan-3.2.2/src/libs/store/KoXmlWriter.cpp:322:13: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(destination, "<", 4); data/calligraplan-3.2.2/src/libs/store/KoXmlWriter.cpp:326:13: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(destination, ">", 4); data/calligraplan-3.2.2/src/libs/store/KoXmlWriter.cpp:330:13: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(destination, """, 6); data/calligraplan-3.2.2/src/libs/store/KoXmlWriter.cpp:335:13: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(destination, "'", 6); data/calligraplan-3.2.2/src/libs/store/KoXmlWriter.cpp:340:13: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(destination, "&", 5); data/calligraplan-3.2.2/src/libs/store/KoXmlWriter.cpp:561:37: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). const bool openOk = d->dev->open(QIODevice::ReadOnly); data/calligraplan-3.2.2/src/libs/store/KoZipStore.cpp:106:23: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). d->good = m_pZip->open(d->mode == Write ? QIODevice::WriteOnly : QIODevice::ReadOnly); data/calligraplan-3.2.2/src/libs/store/tests/TestKoLZF.cpp:40:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char outputdata[1]; data/calligraplan-3.2.2/src/libs/store/tests/TestKoLZF.cpp:51:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char outputdata[4]; data/calligraplan-3.2.2/src/libs/store/tests/TestKoLZF.cpp:79:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char outputdata[1]; data/calligraplan-3.2.2/src/libs/store/tests/TestKoLZF.cpp:90:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char outputdata[4]; data/calligraplan-3.2.2/src/libs/store/tests/TestKoLZF.cpp:117:18: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. static const char * const fillMethodName[fillMethodCount] = {"uni", "series"}; data/calligraplan-3.2.2/src/libs/store/tests/TestKoLZF.cpp:199:11: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. const char emptyCompressedRaw[5] = { 0x00, 0x00, 0x00, 0x00, 0x00 }; data/calligraplan-3.2.2/src/libs/store/tests/TestKoLZF.cpp:216:18: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. static const char * const fillMethodName[fillMethodCount] = {"uni", "series"}; data/calligraplan-3.2.2/src/libs/store/tests/storedroptest.cpp:163:17: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!store->open(fileName)) data/calligraplan-3.2.2/src/libs/ui/TasksEditController.cpp:59:12: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). m_dlg->open(); data/calligraplan-3.2.2/src/libs/ui/kptaccountseditor.cpp:314:10: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). dlg->open(); data/calligraplan-3.2.2/src/libs/ui/kptaccountsview.cpp:242:10: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). dlg->open(); data/calligraplan-3.2.2/src/libs/ui/kptcalendareditor.cpp:244:10: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). dlg->open(); data/calligraplan-3.2.2/src/libs/ui/kptcalendareditor.cpp:675:10: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). dlg->open(); data/calligraplan-3.2.2/src/libs/ui/kptcalendareditor.cpp:788:10: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). dlg->open(); data/calligraplan-3.2.2/src/libs/ui/kptdependencyeditor.cpp:2375:10: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). dlg->open(); data/calligraplan-3.2.2/src/libs/ui/kptganttview.cpp:1108:10: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). dlg->open(); data/calligraplan-3.2.2/src/libs/ui/kptganttview.cpp:1717:10: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). dlg->open(); data/calligraplan-3.2.2/src/libs/ui/kptganttview.cpp:2058:10: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). dlg->open(); data/calligraplan-3.2.2/src/libs/ui/kptpertresult.cpp:229:10: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). dlg->open(); data/calligraplan-3.2.2/src/libs/ui/kptpertresult.cpp:429:10: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). dlg->open(); data/calligraplan-3.2.2/src/libs/ui/kptrelationeditor.cpp:182:10: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). dlg->open(); data/calligraplan-3.2.2/src/libs/ui/kptresourceallocationeditor.cpp:193:10: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). dlg->open(); data/calligraplan-3.2.2/src/libs/ui/kptresourceappointmentsview.cpp:357:10: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). dlg->open(); data/calligraplan-3.2.2/src/libs/ui/kptresourceeditor.cpp:330:10: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). dlg->open(); data/calligraplan-3.2.2/src/libs/ui/kptscheduleeditor.cpp:355:10: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). dlg->open(); data/calligraplan-3.2.2/src/libs/ui/kpttaskeditor.cpp:949:10: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). dlg->open(); data/calligraplan-3.2.2/src/libs/ui/kpttaskeditor.cpp:1470:10: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). dlg->open(); data/calligraplan-3.2.2/src/libs/ui/kpttaskeditor.cpp:1831:10: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). dlg->open(); data/calligraplan-3.2.2/src/libs/ui/kpttaskstatusview.cpp:354:10: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). dlg->open(); data/calligraplan-3.2.2/src/libs/ui/performance/PerformanceStatusView.cpp:337:10: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). dlg->open(); data/calligraplan-3.2.2/src/libs/ui/performance/ProjectStatusView.cpp:110:10: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). dlg->open(); data/calligraplan-3.2.2/src/libs/ui/projectview/ProjectView.cpp:65:13: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!db.open()) { data/calligraplan-3.2.2/src/libs/ui/reports/items/text/PlanReportScriptText.cpp:192:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!file.open(QIODevice::ReadOnly | QIODevice::Text)) { data/calligraplan-3.2.2/src/libs/ui/reports/reportdata.cpp:131:18: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). bool ReportData::open() data/calligraplan-3.2.2/src/libs/ui/reports/reportdata.cpp:598:23: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). bool ChartReportData::open() data/calligraplan-3.2.2/src/libs/ui/reports/reportdata.cpp:600:24: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). return ReportData::open(); data/calligraplan-3.2.2/src/libs/ui/reports/reportdata.cpp:801:33: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). bool CostPerformanceReportData::open() data/calligraplan-3.2.2/src/libs/ui/reports/reportdata.cpp:803:28: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (! ChartReportData::open()) { data/calligraplan-3.2.2/src/libs/ui/reports/reportdata.cpp:855:35: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). bool EffortPerformanceReportData::open() data/calligraplan-3.2.2/src/libs/ui/reports/reportdata.cpp:857:28: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (! ChartReportData::open()) { data/calligraplan-3.2.2/src/libs/ui/reports/reportdata.cpp:908:31: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). bool CostBreakdownReportData::open() data/calligraplan-3.2.2/src/libs/ui/reports/reportdata.cpp:910:28: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (! ChartReportData::open()) { data/calligraplan-3.2.2/src/libs/ui/reports/reportdata.h:69:18: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). virtual bool open(); data/calligraplan-3.2.2/src/libs/ui/reports/reportdata.h:241:18: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). virtual bool open(); data/calligraplan-3.2.2/src/libs/ui/reports/reportdata.h:293:18: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). virtual bool open(); data/calligraplan-3.2.2/src/libs/ui/reports/reportdata.h:311:18: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). virtual bool open(); data/calligraplan-3.2.2/src/libs/ui/reports/reportdata.h:329:10: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). bool open(); data/calligraplan-3.2.2/src/libs/ui/reports/reportview.cpp:708:16: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (! file.open(QIODevice::WriteOnly)) { data/calligraplan-3.2.2/src/libs/ui/reportsgenerator/ReportsGeneratorView.cpp:463:13: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!rg.open()) { data/calligraplan-3.2.2/src/plugins/filters/icalendar/export/icalendarexport.cpp:104:16: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (! file.open(QIODevice::WriteOnly)) { data/calligraplan-3.2.2/src/plugins/filters/planner/import/plannerimport.cpp:83:13: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!in.open(QIODevice::ReadOnly)) { data/calligraplan-3.2.2/src/plugins/schedulers/tj/taskjuggler/Utility.cpp:242:5: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(htep->tms, localtime(&tt), sizeof(struct tm)); data/calligraplan-3.2.2/src/plugins/schedulers/tj/taskjuggler/Utility.cpp:257:12: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. static char s[32]; data/calligraplan-3.2.2/src/plugins/schedulers/tj/taskjuggler/Utility.cpp:269:12: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. static char s[32]; data/calligraplan-3.2.2/src/plugins/schedulers/tj/taskjuggler/Utility.cpp:504:12: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. static char buf[64]; data/calligraplan-3.2.2/src/plugins/schedulers/tj/taskjuggler/Utility.cpp:550:5: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(&tmc, tms, sizeof(struct tm)); data/calligraplan-3.2.2/src/plugins/schedulers/tj/taskjuggler/Utility.cpp:561:5: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(&tmc, tms, sizeof(struct tm)); data/calligraplan-3.2.2/src/plugins/schedulers/tj/taskjuggler/Utility.cpp:577:5: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(&tmc, tms, sizeof(struct tm)); data/calligraplan-3.2.2/src/plugins/schedulers/tj/taskjuggler/Utility.cpp:588:5: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(&tmc, tms, sizeof(struct tm)); data/calligraplan-3.2.2/src/plugins/schedulers/tj/taskjuggler/Utility.cpp:600:5: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(&tmc, tms, sizeof(struct tm)); data/calligraplan-3.2.2/src/plugins/schedulers/tj/taskjuggler/Utility.cpp:613:5: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(&tmc, tms, sizeof(struct tm)); data/calligraplan-3.2.2/src/plugins/schedulers/tj/taskjuggler/Utility.cpp:633:5: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(&tmc, tms, sizeof(struct tm)); data/calligraplan-3.2.2/src/plugins/schedulers/tj/taskjuggler/Utility.cpp:646:5: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(&tmc, tms, sizeof(struct tm)); data/calligraplan-3.2.2/src/plugins/schedulers/tj/taskjuggler/Utility.cpp:683:5: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(&tmc, tms, sizeof(struct tm)); data/calligraplan-3.2.2/src/plugins/schedulers/tj/taskjuggler/Utility.cpp:694:5: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(&tmc, tms, sizeof(struct tm)); data/calligraplan-3.2.2/src/plugins/schedulers/tj/taskjuggler/Utility.cpp:705:5: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(&tmc, tms, sizeof(struct tm)); data/calligraplan-3.2.2/src/plugins/schedulers/tj/taskjuggler/Utility.cpp:716:5: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(&tmc, tms, sizeof(struct tm)); data/calligraplan-3.2.2/src/plugins/schedulers/tj/taskjuggler/Utility.cpp:726:12: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. static char buf[128]; data/calligraplan-3.2.2/src/plugins/schedulers/tj/taskjuggler/Utility.cpp:736:12: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. static char buf[128]; data/calligraplan-3.2.2/src/plugins/schedulers/tj/taskjuggler/Utility.cpp:754:12: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. static char buf[128]; data/calligraplan-3.2.2/src/plugins/schedulers/tj/taskjuggler/Utility.cpp:764:12: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. static char buf[128]; data/calligraplan-3.2.2/src/plugins/schedulers/tj/taskjuggler/Utility.cpp:774:12: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. static char buf[128]; data/calligraplan-3.2.2/src/plugins/schedulers/tj/taskjuggler/Utility.cpp:784:12: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. static char buf[128]; data/calligraplan-3.2.2/src/plugins/schedulers/tj/taskjuggler/Utility.cpp:797:5: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(&tmc, tms, sizeof(struct tm)); data/calligraplan-3.2.2/src/plugins/schedulers/tj/taskjuggler/Utility.cpp:813:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char tZone[64] = ""; data/calligraplan-3.2.2/src/plugins/schedulers/tj/tests/SchedulerTester.cpp:56:23: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). QVERIFY2(file.open(QIODevice::ReadOnly), fname.toLatin1()); data/calligraplan-3.2.2/src/welcome/WelcomeView.cpp:285:26: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). m_projectdialog->open(); data/calligraplan-3.2.2/src/workpackage/mainwindow.cpp:67:22: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). KStandardAction::open(this, SLOT(slotFileOpen()), actionCollection()); data/calligraplan-3.2.2/src/workpackage/part.cpp:538:17: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!store->open(filename)) { data/calligraplan-3.2.2/src/workpackage/view.cpp:374:20: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (! temp.open()) { data/calligraplan-3.2.2/src/workpackage/view.cpp:382:20: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (! temp.open()) { data/calligraplan-3.2.2/src/workpackage/workpackage.cpp:301:10: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). dev->open(QIODevice::WriteOnly); data/calligraplan-3.2.2/src/workpackage/workpackage.cpp:321:16: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (store->open("root")) { data/calligraplan-3.2.2/src/libs/kernel/tests/DurationTester.cpp:47:22: [1] (buffer) equal: Function does not check the second iterator for over-read conditions (CWE-126). This function is often discouraged by most C++ coding standards in favor of its safer alternatives provided since C++14. Consider using a form of this function that checks the second iterator before potentially overflowing it. void DurationTester::equal() { data/calligraplan-3.2.2/src/libs/kernel/tests/DurationTester.h:35:10: [1] (buffer) equal: Function does not check the second iterator for over-read conditions (CWE-126). This function is often discouraged by most C++ coding standards in favor of its safer alternatives provided since C++14. Consider using a form of this function that checks the second iterator before potentially overflowing it. void equal(); data/calligraplan-3.2.2/src/libs/main/KoAutoSaveRecoveryDialog.cpp:209:39: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). QByteArray bytes = store->read(store->size()); data/calligraplan-3.2.2/src/libs/main/KoDocument.cpp:1030:23: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). QByteArray ba = f.read(qMin(f.size(), (qint64)512)); // should be enough for images data/calligraplan-3.2.2/src/libs/main/KoDocument.cpp:1716:20: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). if (in.read(buf + pos , 1) < 1) { data/calligraplan-3.2.2/src/libs/models/reportgenerator/ReportGeneratorOdt.cpp:153:39: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). for (int block = 0; (block = file.read(data.data(), data.size())) > 0; total += block) { data/calligraplan-3.2.2/src/libs/odf/KoOdfLoadingContext.cpp:279:42: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). QByteArray data = device.read(16384); data/calligraplan-3.2.2/src/libs/odf/tests/TestStorage.cpp:107:29: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). store->write(test1, strlen(test1)); data/calligraplan-3.2.2/src/libs/odf/tests/TestStorage.cpp:115:29: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). store->write(test2, strlen(test2)); data/calligraplan-3.2.2/src/libs/odf/tests/TestStorage.cpp:119:25: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). store->write(test3, strlen(test3)); data/calligraplan-3.2.2/src/libs/odf/tests/TestStorage.cpp:126:25: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). store->write(test4, strlen(test4)); data/calligraplan-3.2.2/src/libs/odf/tests/TestStorage.cpp:141:23: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). int i = 0, lim = strlen(test1), count = 0; data/calligraplan-3.2.2/src/libs/odf/tests/TestStorage.cpp:157:11: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). lim = strlen(test2); data/calligraplan-3.2.2/src/libs/odf/tests/TestStorage.cpp:180:36: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). QByteArray dataReadBack = dev->read(strlen(test3)); data/calligraplan-3.2.2/src/libs/odf/tests/TestStorage.cpp:180:41: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). QByteArray dataReadBack = dev->read(strlen(test3)); data/calligraplan-3.2.2/src/libs/odf/tests/TestStorage.cpp:191:12: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). store->read(buf, 28); data/calligraplan-3.2.2/src/libs/odf/tests/TestStorage.cpp:240:23: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). store->write(str, strlen(str)); data/calligraplan-3.2.2/src/libs/odf/tests/TestStorage.cpp:255:25: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). qint64 len = store->read(str2, DATALEN); data/calligraplan-3.2.2/src/libs/store/KoStore.cpp:49:14: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). if (dev->read((char *)buf, 4) < 4) data/calligraplan-3.2.2/src/libs/store/KoStore.cpp:288:21: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). QByteArray KoStore::read(qint64 max) data/calligraplan-3.2.2/src/libs/store/KoStore.cpp:302:23: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). return d->stream->read(max); data/calligraplan-3.2.2/src/libs/store/KoStore.cpp:310:17: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). qint64 KoStore::read(char *_buffer, qint64 _len) data/calligraplan-3.2.2/src/libs/store/KoStore.cpp:322:23: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). return d->stream->read(_buffer, _len); data/calligraplan-3.2.2/src/libs/store/KoStore.cpp:432:39: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). for (int block = 0; (block = file.read(data.data(), data.size())) > 0; total += block) { data/calligraplan-3.2.2/src/libs/store/KoStore.cpp:465:39: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). for (int block = 0; (block = file.read(data.data(), data.size())) > 0; total += block) { data/calligraplan-3.2.2/src/libs/store/KoStore.cpp:507:37: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). for (int block = 0; (block = q->read(data.data(), data.size())) > 0; total += block) { data/calligraplan-3.2.2/src/libs/store/KoStore.h:148:16: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). QByteArray read(qint64 max); data/calligraplan-3.2.2/src/libs/store/KoStore.h:161:12: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). qint64 read(char *buffer, qint64 length); data/calligraplan-3.2.2/src/libs/store/KoStoreDevice.h:77:25: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). return m_store->read(data, maxlen); data/calligraplan-3.2.2/src/libs/store/KoXmlWriter.cpp:165:29: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). qint64 len = indev->read(buffer.data(), buffer.size()); data/calligraplan-3.2.2/src/plugins/schedulers/rcps/3rdparty/LibRCPS/src/librcps.c:90:27: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). r->name = (char*)malloc((strlen(name)+1)*sizeof(char)); data/calligraplan-3.2.2/src/plugins/schedulers/rcps/3rdparty/LibRCPS/src/librcps.c:172:27: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). j->name = (char*)malloc((strlen(name)+1)*sizeof(char)); data/calligraplan-3.2.2/src/plugins/schedulers/tj/taskjuggler/Utility.cpp:945:17: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). int varLen = strlen(var); data/calligraplan-3.2.2/src/plugins/schedulers/tj/taskjuggler/Utility.cpp:946:17: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). int valLen = strlen(val); ANALYSIS SUMMARY: Hits = 359 Lines analyzed = 224572 in approximately 5.32 seconds (42243 lines/second) Physical Source Lines of Code (SLOC) = 161301 Hits@level = [0] 53 [1] 34 [2] 306 [3] 11 [4] 8 [5] 0 Hits@level+ = [0+] 412 [1+] 359 [2+] 325 [3+] 19 [4+] 8 [5+] 0 Hits/KSLOC@level+ = [0+] 2.55423 [1+] 2.22565 [2+] 2.01487 [3+] 0.117792 [4+] 0.0495967 [5+] 0 Dot directories skipped = 1 (--followdotdir overrides) Minimum risk level = 1 Not every hit is necessarily a security vulnerability. There may be other security vulnerabilities; review your code! See 'Secure Programming HOWTO' (https://dwheeler.com/secure-programs) for more information.