Flawfinder version 2.0.10, (C) 2001-2019 David A. Wheeler. Number of rules (primarily dangerous function names) in C/C++ ruleset: 223 Examining data/extra-cmake-modules-5.74.0/tests/ECMGenerateHeadersTest/CamelCaseHeadTest2.h Examining data/extra-cmake-modules-5.74.0/tests/ECMGenerateHeadersTest/headtest1.h Examining data/extra-cmake-modules-5.74.0/tests/ECMGenerateHeadersTest/headtest2.hpp Examining data/extra-cmake-modules-5.74.0/tests/ECMGenerateHeadersTest/headtest4.h Examining data/extra-cmake-modules-5.74.0/tests/ECMGenerateHeadersTest/headtest1.hpp Examining data/extra-cmake-modules-5.74.0/tests/ECMGenerateHeadersTest/CamelCaseHeadTest1.h Examining data/extra-cmake-modules-5.74.0/tests/ECMGenerateHeadersTest/headtest2.h Examining data/extra-cmake-modules-5.74.0/tests/ECMGenerateHeadersTest/headsubdir/headtest3.h Examining data/extra-cmake-modules-5.74.0/tests/ECMGenerateHeadersTest/headsubdir/headtest2.h Examining data/extra-cmake-modules-5.74.0/tests/ExecuteCoreModules/main.c Examining data/extra-cmake-modules-5.74.0/tests/ECMSetupVersionTest/new_project_simple/main.c Examining data/extra-cmake-modules-5.74.0/tests/ECMSetupVersionTest/new_explicit_header/main.c Examining data/extra-cmake-modules-5.74.0/tests/ECMSetupVersionTest/old_header/main.c Examining data/extra-cmake-modules-5.74.0/tests/ECMSetupVersionTest/new_project_header_prefix/main.c Examining data/extra-cmake-modules-5.74.0/tests/ECMSetupVersionTest/new_project_version_file/main.c Examining data/extra-cmake-modules-5.74.0/tests/ECMSetupVersionTest/old_header_abspath/main.c Examining data/extra-cmake-modules-5.74.0/tests/ECMSetupVersionTest/old_version_file_abspath/main.c Examining data/extra-cmake-modules-5.74.0/tests/ECMSetupVersionTest/old_version_file/main.c Examining data/extra-cmake-modules-5.74.0/tests/ECMSetupVersionTest/new_project_header/main.c Examining data/extra-cmake-modules-5.74.0/tests/ECMSetupVersionTest/new_project_simple_prefix/main.c Examining data/extra-cmake-modules-5.74.0/tests/ECMSetupVersionTest/old_version_file_anynewer/main.c Examining data/extra-cmake-modules-5.74.0/tests/ECMSetupVersionTest/new_explicit_soversion/main.c Examining data/extra-cmake-modules-5.74.0/tests/ECMSetupVersionTest/new_explicit_version_file_abspath/main.c Examining data/extra-cmake-modules-5.74.0/tests/ECMSetupVersionTest/old_simple/main.c Examining data/extra-cmake-modules-5.74.0/tests/ECMSetupVersionTest/old_version_file_exact/main.c Examining data/extra-cmake-modules-5.74.0/tests/ECMSetupVersionTest/new_project_soversion_prefix/main.c Examining data/extra-cmake-modules-5.74.0/tests/ECMSetupVersionTest/old_version_file_samemajor/main.c Examining data/extra-cmake-modules-5.74.0/tests/ECMSetupVersionTest/new_explicit_header_abspath/main.c Examining data/extra-cmake-modules-5.74.0/tests/ECMSetupVersionTest/new_project_header_abspath/main.c Examining data/extra-cmake-modules-5.74.0/tests/ECMSetupVersionTest/new_explicit_version_file/main.c Examining data/extra-cmake-modules-5.74.0/tests/ECMSetupVersionTest/new_explicit_simple/main.c Examining data/extra-cmake-modules-5.74.0/tests/ECMSetupVersionTest/new_project_soversion/main.c Examining data/extra-cmake-modules-5.74.0/tests/ECMSetupVersionTest/new_project_version_file_abspath/main.c Examining data/extra-cmake-modules-5.74.0/tests/ECMSetupVersionTest/old_soversion/main.c Examining data/extra-cmake-modules-5.74.0/tests/ExecuteKDEModules/main.c Examining data/extra-cmake-modules-5.74.0/tests/GenerateSipBindings/external_lib.h Examining data/extra-cmake-modules-5.74.0/tests/GenerateSipBindings/subdir/subdirfile.cpp Examining data/extra-cmake-modules-5.74.0/tests/GenerateSipBindings/subdir/subdirfile.h Examining data/extra-cmake-modules-5.74.0/tests/GenerateSipBindings/external_lib.cpp Examining data/extra-cmake-modules-5.74.0/tests/GenerateSipBindings/cpplib.h Examining data/extra-cmake-modules-5.74.0/tests/GenerateSipBindings/cpplib.cpp Examining data/extra-cmake-modules-5.74.0/tests/ECMAddTests/testhelper.cpp Examining data/extra-cmake-modules-5.74.0/tests/ECMAddTests/multi_tests/test8.cpp Examining data/extra-cmake-modules-5.74.0/tests/ECMAddTests/multi_tests/test7.cpp Examining data/extra-cmake-modules-5.74.0/tests/ECMAddTests/multi_tests/test3.cpp Examining data/extra-cmake-modules-5.74.0/tests/ECMAddTests/multi_tests/test1.cpp Examining data/extra-cmake-modules-5.74.0/tests/ECMAddTests/multi_tests/test9.cpp Examining data/extra-cmake-modules-5.74.0/tests/ECMAddTests/multi_tests/test2.cpp Examining data/extra-cmake-modules-5.74.0/tests/ECMAddTests/multi_tests/test5.cpp Examining data/extra-cmake-modules-5.74.0/tests/ECMAddTests/multi_tests/test4.cpp Examining data/extra-cmake-modules-5.74.0/tests/ECMAddTests/multi_tests/test6.cpp Examining data/extra-cmake-modules-5.74.0/tests/ECMAddTests/testhelper.h Examining data/extra-cmake-modules-5.74.0/tests/ECMAddTests/single_tests/test3.cpp Examining data/extra-cmake-modules-5.74.0/tests/ECMAddTests/single_tests/test1.cpp Examining data/extra-cmake-modules-5.74.0/tests/ECMAddTests/single_tests/test6body.cpp Examining data/extra-cmake-modules-5.74.0/tests/ECMAddTests/single_tests/test2.cpp Examining data/extra-cmake-modules-5.74.0/tests/ECMAddTests/single_tests/test5.cpp Examining data/extra-cmake-modules-5.74.0/tests/ECMAddTests/single_tests/test4.cpp Examining data/extra-cmake-modules-5.74.0/tests/ECMAddTests/single_tests/test6.cpp Examining data/extra-cmake-modules-5.74.0/tests/ECMGenerateExportHeaderTest/library/library.hpp Examining data/extra-cmake-modules-5.74.0/tests/ECMGenerateExportHeaderTest/library/library.cpp Examining data/extra-cmake-modules-5.74.0/tests/ECMGenerateExportHeaderTest/library/main.cpp Examining data/extra-cmake-modules-5.74.0/tests/ECMGenerateExportHeaderTest/format_version/main.cpp Examining data/extra-cmake-modules-5.74.0/tests/ECMGenerateExportHeaderTest/consumer/main.cpp Examining data/extra-cmake-modules-5.74.0/tests/KDEInstallDirsTest/relative_or_absolute/main.c Examining data/extra-cmake-modules-5.74.0/tests/KDEInstallDirsTest/vars_in_sync/main.c Examining data/extra-cmake-modules-5.74.0/tests/KDEInstallDirsTest/not_cache_variable/main.c Examining data/extra-cmake-modules-5.74.0/tests/UseFindModules/main.c Examining data/extra-cmake-modules-5.74.0/tests/ECMPoQmToolsTest/tr_thread_test_module.cpp Examining data/extra-cmake-modules-5.74.0/tests/ECMPoQmToolsTest/tr_thread_test.cpp Examining data/extra-cmake-modules-5.74.0/tests/ECMPoQmToolsTest/tr_test.cpp Examining data/extra-cmake-modules-5.74.0/tests/ECMQtDeclareLoggingCategoryTest/testmain.cpp Examining data/extra-cmake-modules-5.74.0/tests/FindModules/main.c Examining data/extra-cmake-modules-5.74.0/tests/ECMQMLModules/main.c FINAL RESULTS: data/extra-cmake-modules-5.74.0/tests/ECMSetupVersionTest/new_explicit_header/main.c:7:9: [4] (format) printf: If format strings can be influenced by an attacker, they can be exploited (CWE-134). Use a constant for the format specification. printf(#macro " was %d instead of %d", macro, val); \ data/extra-cmake-modules-5.74.0/tests/ECMSetupVersionTest/new_explicit_header/main.c:12:9: [4] (format) printf: If format strings can be influenced by an attacker, they can be exploited (CWE-134). Use a constant for the format specification. printf(#macro " was %s instead of %s", macro, val); \ data/extra-cmake-modules-5.74.0/tests/ECMSetupVersionTest/new_explicit_header_abspath/main.c:7:9: [4] (format) printf: If format strings can be influenced by an attacker, they can be exploited (CWE-134). Use a constant for the format specification. printf(#macro " was %d instead of %d", macro, val); \ data/extra-cmake-modules-5.74.0/tests/ECMSetupVersionTest/new_explicit_header_abspath/main.c:12:9: [4] (format) printf: If format strings can be influenced by an attacker, they can be exploited (CWE-134). Use a constant for the format specification. printf(#macro " was %s instead of %s", macro, val); \ data/extra-cmake-modules-5.74.0/tests/ECMSetupVersionTest/new_project_header/main.c:7:9: [4] (format) printf: If format strings can be influenced by an attacker, they can be exploited (CWE-134). Use a constant for the format specification. printf(#macro " was %d instead of %d", macro, val); \ data/extra-cmake-modules-5.74.0/tests/ECMSetupVersionTest/new_project_header/main.c:12:9: [4] (format) printf: If format strings can be influenced by an attacker, they can be exploited (CWE-134). Use a constant for the format specification. printf(#macro " was %s instead of %s", macro, val); \ data/extra-cmake-modules-5.74.0/tests/ECMSetupVersionTest/new_project_header_abspath/main.c:7:9: [4] (format) printf: If format strings can be influenced by an attacker, they can be exploited (CWE-134). Use a constant for the format specification. printf(#macro " was %d instead of %d", macro, val); \ data/extra-cmake-modules-5.74.0/tests/ECMSetupVersionTest/new_project_header_abspath/main.c:12:9: [4] (format) printf: If format strings can be influenced by an attacker, they can be exploited (CWE-134). Use a constant for the format specification. printf(#macro " was %s instead of %s", macro, val); \ data/extra-cmake-modules-5.74.0/tests/ECMSetupVersionTest/new_project_header_prefix/main.c:7:9: [4] (format) printf: If format strings can be influenced by an attacker, they can be exploited (CWE-134). Use a constant for the format specification. printf(#macro " was %d instead of %d", macro, val); \ data/extra-cmake-modules-5.74.0/tests/ECMSetupVersionTest/new_project_header_prefix/main.c:12:9: [4] (format) printf: If format strings can be influenced by an attacker, they can be exploited (CWE-134). Use a constant for the format specification. printf(#macro " was %s instead of %s", macro, val); \ data/extra-cmake-modules-5.74.0/tests/ECMSetupVersionTest/old_header/main.c:7:9: [4] (format) printf: If format strings can be influenced by an attacker, they can be exploited (CWE-134). Use a constant for the format specification. printf(#macro " was %d instead of %d", macro, val); \ data/extra-cmake-modules-5.74.0/tests/ECMSetupVersionTest/old_header/main.c:12:9: [4] (format) printf: If format strings can be influenced by an attacker, they can be exploited (CWE-134). Use a constant for the format specification. printf(#macro " was %s instead of %s", macro, val); \ data/extra-cmake-modules-5.74.0/tests/ECMSetupVersionTest/old_header_abspath/main.c:7:9: [4] (format) printf: If format strings can be influenced by an attacker, they can be exploited (CWE-134). Use a constant for the format specification. printf(#macro " was %d instead of %d", macro, val); \ data/extra-cmake-modules-5.74.0/tests/ECMSetupVersionTest/old_header_abspath/main.c:12:9: [4] (format) printf: If format strings can be influenced by an attacker, they can be exploited (CWE-134). Use a constant for the format specification. printf(#macro " was %s instead of %s", macro, val); \ ANALYSIS SUMMARY: Hits = 14 Lines analyzed = 1195 in approximately 0.16 seconds (7550 lines/second) Physical Source Lines of Code (SLOC) = 937 Hits@level = [0] 0 [1] 0 [2] 0 [3] 0 [4] 14 [5] 0 Hits@level+ = [0+] 14 [1+] 14 [2+] 14 [3+] 14 [4+] 14 [5+] 0 Hits/KSLOC@level+ = [0+] 14.9413 [1+] 14.9413 [2+] 14.9413 [3+] 14.9413 [4+] 14.9413 [5+] 0 Dot directories skipped = 1 (--followdotdir overrides) Minimum risk level = 1 Not every hit is necessarily a security vulnerability. There may be other security vulnerabilities; review your code! See 'Secure Programming HOWTO' (https://dwheeler.com/secure-programs) for more information.