Flawfinder version 2.0.10, (C) 2001-2019 David A. Wheeler. Number of rules (primarily dangerous function names) in C/C++ ruleset: 223 Examining data/console-cyrillic-0.9/keymap/cyr-ukrainian.cpp Examining data/console-cyrillic-0.9/keymap/cyr-russian.cpp Examining data/console-cyrillic-0.9/keymap/cyr-belarusian.cpp Examining data/console-cyrillic-0.9/keymap/cyr-bulgarian-bds.cpp Examining data/console-cyrillic-0.9/keymap/cyr-bulgarian-phon.cpp Examining data/console-cyrillic-0.9/keymap/cyr-russian-ms.cpp Examining data/console-cyrillic-0.9/keymap/cyr-serbian.cpp Examining data/console-cyrillic-0.9/keymap/cyr-ukrainian-ms.cpp Examining data/console-cyrillic-0.9/keymap/cyr-ukrainian1.cpp Examining data/console-cyrillic-0.9/keymap/cyr-urainian-ms-like1.cpp Examining data/console-cyrillic-0.9/keymap/cyr-urainian-ms-like2.cpp Examining data/console-cyrillic-0.9/debian/cyr-bulgarian-bds.cpp Examining data/console-cyrillic-0.9/debian/cyr-bulgarian-phon.cpp Examining data/console-cyrillic-0.9/debian/cyr-macedonian.cpp Examining data/console-cyrillic-0.9/debian/cyr-mongolian.cpp Examining data/console-cyrillic-0.9/debian/cyr-serbian.cpp Examining data/console-cyrillic-0.9/debian/cyr-ukrainian-ms.cpp Examining data/console-cyrillic-0.9/debian/cyr-ukrainian1.cpp FINAL RESULTS: data/console-cyrillic-0.9/debian/cyr-bulgarian-bds.cpp:57:33: [1] (buffer) equal: Function does not check the second iterator for over-read conditions (CWE-126). This function is often discouraged by most C++ coding standards in favor of its safer alternatives provided since C++14. Consider using a form of this function that checks the second iterator before potentially overflowing it. PPPPC(7, six, asciicircum, six, equal, Control_asciicircum) data/console-cyrillic-0.9/debian/cyr-bulgarian-bds.cpp:63:11: [1] (buffer) equal: Function does not check the second iterator for over-read conditions (CWE-126). This function is often discouraged by most C++ coding standards in favor of its safer alternatives provided since C++14. Consider using a form of this function that checks the second iterator before potentially overflowing it. PPPPC(13, equal, plus, period, V, VoidSymbol) data/console-cyrillic-0.9/debian/cyr-bulgarian-phon.cpp:62:11: [1] (buffer) equal: Function does not check the second iterator for over-read conditions (CWE-126). This function is often discouraged by most C++ coding standards in favor of its safer alternatives provided since C++14. Consider using a form of this function that checks the second iterator before potentially overflowing it. PPPPC(13, equal, plus, equal, plus, VoidSymbol) data/console-cyrillic-0.9/debian/cyr-bulgarian-phon.cpp:62:24: [1] (buffer) equal: Function does not check the second iterator for over-read conditions (CWE-126). This function is often discouraged by most C++ coding standards in favor of its safer alternatives provided since C++14. Consider using a form of this function that checks the second iterator before potentially overflowing it. PPPPC(13, equal, plus, equal, plus, VoidSymbol) data/console-cyrillic-0.9/debian/cyr-macedonian.cpp:50:11: [1] (buffer) equal: Function does not check the second iterator for over-read conditions (CWE-126). This function is often discouraged by most C++ coding standards in favor of its safer alternatives provided since C++14. Consider using a form of this function that checks the second iterator before potentially overflowing it. PPPPC(13, equal, plus, equal, plus, VoidSymbol) data/console-cyrillic-0.9/debian/cyr-macedonian.cpp:50:24: [1] (buffer) equal: Function does not check the second iterator for over-read conditions (CWE-126). This function is often discouraged by most C++ coding standards in favor of its safer alternatives provided since C++14. Consider using a form of this function that checks the second iterator before potentially overflowing it. PPPPC(13, equal, plus, equal, plus, VoidSymbol) data/console-cyrillic-0.9/debian/cyr-mongolian.cpp:43:11: [1] (buffer) equal: Function does not check the second iterator for over-read conditions (CWE-126). This function is often discouraged by most C++ coding standards in favor of its safer alternatives provided since C++14. Consider using a form of this function that checks the second iterator before potentially overflowing it. PPRRC(13, equal, plus, cyr_shcha, CYR_SHCHA, VoidSymbol) data/console-cyrillic-0.9/debian/cyr-mongolian.cpp:78:30: [1] (buffer) equal: Function does not check the second iterator for over-read conditions (CWE-126). This function is often discouraged by most C++ coding standards in favor of its safer alternatives provided since C++14. Consider using a form of this function that checks the second iterator before potentially overflowing it. PPPPC(41, grave, asciitilde, equal, plus, nul) data/console-cyrillic-0.9/debian/cyr-serbian.cpp:51:35: [1] (buffer) equal: Function does not check the second iterator for over-read conditions (CWE-126). This function is often discouraged by most C++ coding standards in favor of its safer alternatives provided since C++14. Consider using a form of this function that checks the second iterator before potentially overflowing it. PPPPC(11, zero, parenright, zero, equal, VoidSymbol) data/console-cyrillic-0.9/debian/cyr-serbian.cpp:53:11: [1] (buffer) equal: Function does not check the second iterator for over-read conditions (CWE-126). This function is often discouraged by most C++ coding standards in favor of its safer alternatives provided since C++14. Consider using a form of this function that checks the second iterator before potentially overflowing it. PPPPC(13, equal, plus, plus, asterisk, VoidSymbol) data/console-cyrillic-0.9/debian/cyr-ukrainian-ms.cpp:20:11: [1] (buffer) equal: Function does not check the second iterator for over-read conditions (CWE-126). This function is often discouraged by most C++ coding standards in favor of its safer alternatives provided since C++14. Consider using a form of this function that checks the second iterator before potentially overflowing it. PPPPC(13, equal, plus, equal, plus, VoidSymbol) data/console-cyrillic-0.9/debian/cyr-ukrainian-ms.cpp:20:24: [1] (buffer) equal: Function does not check the second iterator for over-read conditions (CWE-126). This function is often discouraged by most C++ coding standards in favor of its safer alternatives provided since C++14. Consider using a form of this function that checks the second iterator before potentially overflowing it. PPPPC(13, equal, plus, equal, plus, VoidSymbol) data/console-cyrillic-0.9/debian/cyr-ukrainian1.cpp:28:11: [1] (buffer) equal: Function does not check the second iterator for over-read conditions (CWE-126). This function is often discouraged by most C++ coding standards in favor of its safer alternatives provided since C++14. Consider using a form of this function that checks the second iterator before potentially overflowing it. PPPPC(13, equal, plus, equal, plus, VoidSymbol) data/console-cyrillic-0.9/debian/cyr-ukrainian1.cpp:28:24: [1] (buffer) equal: Function does not check the second iterator for over-read conditions (CWE-126). This function is often discouraged by most C++ coding standards in favor of its safer alternatives provided since C++14. Consider using a form of this function that checks the second iterator before potentially overflowing it. PPPPC(13, equal, plus, equal, plus, VoidSymbol) data/console-cyrillic-0.9/keymap/cyr-belarusian.cpp:19:11: [1] (buffer) equal: Function does not check the second iterator for over-read conditions (CWE-126). This function is often discouraged by most C++ coding standards in favor of its safer alternatives provided since C++14. Consider using a form of this function that checks the second iterator before potentially overflowing it. PPPPC(13, equal, plus, equal, plus, VoidSymbol) data/console-cyrillic-0.9/keymap/cyr-belarusian.cpp:19:24: [1] (buffer) equal: Function does not check the second iterator for over-read conditions (CWE-126). This function is often discouraged by most C++ coding standards in favor of its safer alternatives provided since C++14. Consider using a form of this function that checks the second iterator before potentially overflowing it. PPPPC(13, equal, plus, equal, plus, VoidSymbol) data/console-cyrillic-0.9/keymap/cyr-bulgarian-bds.cpp:14:33: [1] (buffer) equal: Function does not check the second iterator for over-read conditions (CWE-126). This function is often discouraged by most C++ coding standards in favor of its safer alternatives provided since C++14. Consider using a form of this function that checks the second iterator before potentially overflowing it. PPPPC(7, six, asciicircum, six, equal, Control_asciicircum) data/console-cyrillic-0.9/keymap/cyr-bulgarian-bds.cpp:20:11: [1] (buffer) equal: Function does not check the second iterator for over-read conditions (CWE-126). This function is often discouraged by most C++ coding standards in favor of its safer alternatives provided since C++14. Consider using a form of this function that checks the second iterator before potentially overflowing it. PPPPC(13, equal, plus, period, V, VoidSymbol) data/console-cyrillic-0.9/keymap/cyr-bulgarian-phon.cpp:18:11: [1] (buffer) equal: Function does not check the second iterator for over-read conditions (CWE-126). This function is often discouraged by most C++ coding standards in favor of its safer alternatives provided since C++14. Consider using a form of this function that checks the second iterator before potentially overflowing it. PPPPC(13, equal, plus, equal, plus, VoidSymbol) data/console-cyrillic-0.9/keymap/cyr-bulgarian-phon.cpp:18:24: [1] (buffer) equal: Function does not check the second iterator for over-read conditions (CWE-126). This function is often discouraged by most C++ coding standards in favor of its safer alternatives provided since C++14. Consider using a form of this function that checks the second iterator before potentially overflowing it. PPPPC(13, equal, plus, equal, plus, VoidSymbol) data/console-cyrillic-0.9/keymap/cyr-russian-ms.cpp:20:11: [1] (buffer) equal: Function does not check the second iterator for over-read conditions (CWE-126). This function is often discouraged by most C++ coding standards in favor of its safer alternatives provided since C++14. Consider using a form of this function that checks the second iterator before potentially overflowing it. PPPPC(13, equal, plus, equal, plus, VoidSymbol) data/console-cyrillic-0.9/keymap/cyr-russian-ms.cpp:20:24: [1] (buffer) equal: Function does not check the second iterator for over-read conditions (CWE-126). This function is often discouraged by most C++ coding standards in favor of its safer alternatives provided since C++14. Consider using a form of this function that checks the second iterator before potentially overflowing it. PPPPC(13, equal, plus, equal, plus, VoidSymbol) data/console-cyrillic-0.9/keymap/cyr-russian.cpp:32:11: [1] (buffer) equal: Function does not check the second iterator for over-read conditions (CWE-126). This function is often discouraged by most C++ coding standards in favor of its safer alternatives provided since C++14. Consider using a form of this function that checks the second iterator before potentially overflowing it. PPPPC(13, equal, plus, equal, plus, VoidSymbol) data/console-cyrillic-0.9/keymap/cyr-russian.cpp:32:24: [1] (buffer) equal: Function does not check the second iterator for over-read conditions (CWE-126). This function is often discouraged by most C++ coding standards in favor of its safer alternatives provided since C++14. Consider using a form of this function that checks the second iterator before potentially overflowing it. PPPPC(13, equal, plus, equal, plus, VoidSymbol) data/console-cyrillic-0.9/keymap/cyr-serbian.cpp:32:35: [1] (buffer) equal: Function does not check the second iterator for over-read conditions (CWE-126). This function is often discouraged by most C++ coding standards in favor of its safer alternatives provided since C++14. Consider using a form of this function that checks the second iterator before potentially overflowing it. PPPPC(11, zero, parenright, zero, equal, VoidSymbol) data/console-cyrillic-0.9/keymap/cyr-serbian.cpp:34:11: [1] (buffer) equal: Function does not check the second iterator for over-read conditions (CWE-126). This function is often discouraged by most C++ coding standards in favor of its safer alternatives provided since C++14. Consider using a form of this function that checks the second iterator before potentially overflowing it. PPPPC(13, equal, plus, plus, asterisk, VoidSymbol) data/console-cyrillic-0.9/keymap/cyr-ukrainian-ms.cpp:20:11: [1] (buffer) equal: Function does not check the second iterator for over-read conditions (CWE-126). This function is often discouraged by most C++ coding standards in favor of its safer alternatives provided since C++14. Consider using a form of this function that checks the second iterator before potentially overflowing it. PPPPC(13, equal, plus, equal, plus, VoidSymbol) data/console-cyrillic-0.9/keymap/cyr-ukrainian-ms.cpp:20:24: [1] (buffer) equal: Function does not check the second iterator for over-read conditions (CWE-126). This function is often discouraged by most C++ coding standards in favor of its safer alternatives provided since C++14. Consider using a form of this function that checks the second iterator before potentially overflowing it. PPPPC(13, equal, plus, equal, plus, VoidSymbol) data/console-cyrillic-0.9/keymap/cyr-ukrainian.cpp:32:11: [1] (buffer) equal: Function does not check the second iterator for over-read conditions (CWE-126). This function is often discouraged by most C++ coding standards in favor of its safer alternatives provided since C++14. Consider using a form of this function that checks the second iterator before potentially overflowing it. PPPPC(13, equal, plus, equal, plus, VoidSymbol) data/console-cyrillic-0.9/keymap/cyr-ukrainian.cpp:32:24: [1] (buffer) equal: Function does not check the second iterator for over-read conditions (CWE-126). This function is often discouraged by most C++ coding standards in favor of its safer alternatives provided since C++14. Consider using a form of this function that checks the second iterator before potentially overflowing it. PPPPC(13, equal, plus, equal, plus, VoidSymbol) data/console-cyrillic-0.9/keymap/cyr-ukrainian1.cpp:31:11: [1] (buffer) equal: Function does not check the second iterator for over-read conditions (CWE-126). This function is often discouraged by most C++ coding standards in favor of its safer alternatives provided since C++14. Consider using a form of this function that checks the second iterator before potentially overflowing it. PPPPC(13, equal, plus, equal, plus, VoidSymbol) data/console-cyrillic-0.9/keymap/cyr-ukrainian1.cpp:31:24: [1] (buffer) equal: Function does not check the second iterator for over-read conditions (CWE-126). This function is often discouraged by most C++ coding standards in favor of its safer alternatives provided since C++14. Consider using a form of this function that checks the second iterator before potentially overflowing it. PPPPC(13, equal, plus, equal, plus, VoidSymbol) data/console-cyrillic-0.9/keymap/cyr-urainian-ms-like1.cpp:20:11: [1] (buffer) equal: Function does not check the second iterator for over-read conditions (CWE-126). This function is often discouraged by most C++ coding standards in favor of its safer alternatives provided since C++14. Consider using a form of this function that checks the second iterator before potentially overflowing it. PPPPC(13, equal, plus, equal, plus, VoidSymbol) data/console-cyrillic-0.9/keymap/cyr-urainian-ms-like1.cpp:20:24: [1] (buffer) equal: Function does not check the second iterator for over-read conditions (CWE-126). This function is often discouraged by most C++ coding standards in favor of its safer alternatives provided since C++14. Consider using a form of this function that checks the second iterator before potentially overflowing it. PPPPC(13, equal, plus, equal, plus, VoidSymbol) data/console-cyrillic-0.9/keymap/cyr-urainian-ms-like2.cpp:20:11: [1] (buffer) equal: Function does not check the second iterator for over-read conditions (CWE-126). This function is often discouraged by most C++ coding standards in favor of its safer alternatives provided since C++14. Consider using a form of this function that checks the second iterator before potentially overflowing it. PPPPC(13, equal, plus, equal, plus, VoidSymbol) data/console-cyrillic-0.9/keymap/cyr-urainian-ms-like2.cpp:20:24: [1] (buffer) equal: Function does not check the second iterator for over-read conditions (CWE-126). This function is often discouraged by most C++ coding standards in favor of its safer alternatives provided since C++14. Consider using a form of this function that checks the second iterator before potentially overflowing it. PPPPC(13, equal, plus, equal, plus, VoidSymbol) ANALYSIS SUMMARY: Hits = 36 Lines analyzed = 4903 in approximately 0.16 seconds (30811 lines/second) Physical Source Lines of Code (SLOC) = 3917 Hits@level = [0] 0 [1] 36 [2] 0 [3] 0 [4] 0 [5] 0 Hits@level+ = [0+] 36 [1+] 36 [2+] 0 [3+] 0 [4+] 0 [5+] 0 Hits/KSLOC@level+ = [0+] 9.19071 [1+] 9.19071 [2+] 0 [3+] 0 [4+] 0 [5+] 0 Minimum risk level = 1 Not every hit is necessarily a security vulnerability. There may be other security vulnerabilities; review your code! See 'Secure Programming HOWTO' (https://dwheeler.com/secure-programs) for more information.