Flawfinder version 2.0.10, (C) 2001-2019 David A. Wheeler. Number of rules (primarily dangerous function names) in C/C++ ruleset: 223 Examining data/keepassxc-2.6.2+dfsg.1/src/autotype/AutoType.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/autotype/AutoType.h Examining data/keepassxc-2.6.2+dfsg.1/src/autotype/AutoTypeAction.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/autotype/AutoTypeAction.h Examining data/keepassxc-2.6.2+dfsg.1/src/autotype/AutoTypeFilterLineEdit.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/autotype/AutoTypeFilterLineEdit.h Examining data/keepassxc-2.6.2+dfsg.1/src/autotype/AutoTypePlatformPlugin.h Examining data/keepassxc-2.6.2+dfsg.1/src/autotype/AutoTypeSelectDialog.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/autotype/AutoTypeSelectDialog.h Examining data/keepassxc-2.6.2+dfsg.1/src/autotype/AutoTypeSelectView.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/autotype/AutoTypeSelectView.h Examining data/keepassxc-2.6.2+dfsg.1/src/autotype/ShortcutWidget.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/autotype/ShortcutWidget.h Examining data/keepassxc-2.6.2+dfsg.1/src/autotype/WildcardMatcher.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/autotype/WildcardMatcher.h Examining data/keepassxc-2.6.2+dfsg.1/src/autotype/WindowSelectComboBox.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/autotype/WindowSelectComboBox.h Examining data/keepassxc-2.6.2+dfsg.1/src/autotype/mac/AutoTypeMac.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/autotype/mac/AutoTypeMac.h Examining data/keepassxc-2.6.2+dfsg.1/src/autotype/test/AutoTypeTest.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/autotype/test/AutoTypeTest.h Examining data/keepassxc-2.6.2+dfsg.1/src/autotype/test/AutoTypeTestInterface.h Examining data/keepassxc-2.6.2+dfsg.1/src/autotype/windows/AutoTypeWindows.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/autotype/windows/AutoTypeWindows.h Examining data/keepassxc-2.6.2+dfsg.1/src/autotype/xcb/AutoTypeXCB.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/autotype/xcb/AutoTypeXCB.h Examining data/keepassxc-2.6.2+dfsg.1/src/autotype/xcb/KeySymMap.h Examining data/keepassxc-2.6.2+dfsg.1/src/browser/BrowserAccessControlDialog.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/browser/BrowserAccessControlDialog.h Examining data/keepassxc-2.6.2+dfsg.1/src/browser/BrowserAction.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/browser/BrowserAction.h Examining data/keepassxc-2.6.2+dfsg.1/src/browser/BrowserEntryConfig.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/browser/BrowserEntryConfig.h Examining data/keepassxc-2.6.2+dfsg.1/src/browser/BrowserEntrySaveDialog.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/browser/BrowserEntrySaveDialog.h Examining data/keepassxc-2.6.2+dfsg.1/src/browser/BrowserHost.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/browser/BrowserHost.h Examining data/keepassxc-2.6.2+dfsg.1/src/browser/BrowserService.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/browser/BrowserService.h Examining data/keepassxc-2.6.2+dfsg.1/src/browser/BrowserSettings.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/browser/BrowserSettings.h Examining data/keepassxc-2.6.2+dfsg.1/src/browser/BrowserSettingsPage.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/browser/BrowserSettingsPage.h Examining data/keepassxc-2.6.2+dfsg.1/src/browser/BrowserSettingsWidget.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/browser/BrowserSettingsWidget.h Examining data/keepassxc-2.6.2+dfsg.1/src/browser/BrowserShared.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/browser/BrowserShared.h Examining data/keepassxc-2.6.2+dfsg.1/src/browser/NativeMessageInstaller.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/browser/NativeMessageInstaller.h Examining data/keepassxc-2.6.2+dfsg.1/src/browser/Variant.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/browser/Variant.h Examining data/keepassxc-2.6.2+dfsg.1/src/cli/Add.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/cli/Add.h Examining data/keepassxc-2.6.2+dfsg.1/src/cli/AddGroup.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/cli/AddGroup.h Examining data/keepassxc-2.6.2+dfsg.1/src/cli/Analyze.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/cli/Analyze.h Examining data/keepassxc-2.6.2+dfsg.1/src/cli/Clip.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/cli/Clip.h Examining data/keepassxc-2.6.2+dfsg.1/src/cli/Close.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/cli/Close.h Examining data/keepassxc-2.6.2+dfsg.1/src/cli/Command.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/cli/Command.h Examining data/keepassxc-2.6.2+dfsg.1/src/cli/Create.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/cli/Create.h Examining data/keepassxc-2.6.2+dfsg.1/src/cli/DatabaseCommand.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/cli/DatabaseCommand.h Examining data/keepassxc-2.6.2+dfsg.1/src/cli/Diceware.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/cli/Diceware.h Examining data/keepassxc-2.6.2+dfsg.1/src/cli/Edit.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/cli/Edit.h Examining data/keepassxc-2.6.2+dfsg.1/src/cli/Estimate.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/cli/Estimate.h Examining data/keepassxc-2.6.2+dfsg.1/src/cli/Exit.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/cli/Exit.h Examining data/keepassxc-2.6.2+dfsg.1/src/cli/Export.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/cli/Export.h Examining data/keepassxc-2.6.2+dfsg.1/src/cli/Generate.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/cli/Generate.h Examining data/keepassxc-2.6.2+dfsg.1/src/cli/Help.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/cli/Help.h Examining data/keepassxc-2.6.2+dfsg.1/src/cli/Import.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/cli/Import.h Examining data/keepassxc-2.6.2+dfsg.1/src/cli/Info.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/cli/Info.h Examining data/keepassxc-2.6.2+dfsg.1/src/cli/List.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/cli/List.h Examining data/keepassxc-2.6.2+dfsg.1/src/cli/Locate.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/cli/Locate.h Examining data/keepassxc-2.6.2+dfsg.1/src/cli/Merge.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/cli/Merge.h Examining data/keepassxc-2.6.2+dfsg.1/src/cli/Move.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/cli/Move.h Examining data/keepassxc-2.6.2+dfsg.1/src/cli/Open.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/cli/Open.h Examining data/keepassxc-2.6.2+dfsg.1/src/cli/Remove.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/cli/Remove.h Examining data/keepassxc-2.6.2+dfsg.1/src/cli/RemoveGroup.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/cli/RemoveGroup.h Examining data/keepassxc-2.6.2+dfsg.1/src/cli/Show.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/cli/Show.h Examining data/keepassxc-2.6.2+dfsg.1/src/cli/TextStream.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/cli/TextStream.h Examining data/keepassxc-2.6.2+dfsg.1/src/cli/Utils.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/cli/Utils.h Examining data/keepassxc-2.6.2+dfsg.1/src/cli/keepassxc-cli.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/core/Alloc.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/core/AsyncTask.h Examining data/keepassxc-2.6.2+dfsg.1/src/core/AutoTypeAssociations.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/core/AutoTypeAssociations.h Examining data/keepassxc-2.6.2+dfsg.1/src/core/AutoTypeMatch.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/core/AutoTypeMatch.h Examining data/keepassxc-2.6.2+dfsg.1/src/core/Base32.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/core/Base32.h Examining data/keepassxc-2.6.2+dfsg.1/src/core/Bootstrap.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/core/Bootstrap.h Examining data/keepassxc-2.6.2+dfsg.1/src/core/Clock.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/core/Clock.h Examining data/keepassxc-2.6.2+dfsg.1/src/core/Compare.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/core/Compare.h Examining data/keepassxc-2.6.2+dfsg.1/src/core/Config.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/core/Config.h Examining data/keepassxc-2.6.2+dfsg.1/src/core/CsvParser.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/core/CsvParser.h Examining data/keepassxc-2.6.2+dfsg.1/src/core/CustomData.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/core/CustomData.h Examining data/keepassxc-2.6.2+dfsg.1/src/core/Database.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/core/Database.h Examining data/keepassxc-2.6.2+dfsg.1/src/core/DatabaseIcons.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/core/DatabaseIcons.h Examining data/keepassxc-2.6.2+dfsg.1/src/core/Endian.h Examining data/keepassxc-2.6.2+dfsg.1/src/core/Entry.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/core/Entry.h Examining data/keepassxc-2.6.2+dfsg.1/src/core/EntryAttachments.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/core/EntryAttachments.h Examining data/keepassxc-2.6.2+dfsg.1/src/core/EntryAttributes.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/core/EntryAttributes.h Examining data/keepassxc-2.6.2+dfsg.1/src/core/EntrySearcher.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/core/EntrySearcher.h Examining data/keepassxc-2.6.2+dfsg.1/src/core/Exporter.h Examining data/keepassxc-2.6.2+dfsg.1/src/core/FileWatcher.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/core/FileWatcher.h Examining data/keepassxc-2.6.2+dfsg.1/src/core/Global.h Examining data/keepassxc-2.6.2+dfsg.1/src/core/Group.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/core/Group.h Examining data/keepassxc-2.6.2+dfsg.1/src/core/HibpDownloader.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/core/HibpDownloader.h Examining data/keepassxc-2.6.2+dfsg.1/src/core/HibpOffline.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/core/HibpOffline.h Examining data/keepassxc-2.6.2+dfsg.1/src/core/IconDownloader.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/core/IconDownloader.h Examining data/keepassxc-2.6.2+dfsg.1/src/core/InactivityTimer.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/core/InactivityTimer.h Examining data/keepassxc-2.6.2+dfsg.1/src/core/ListDeleter.h Examining data/keepassxc-2.6.2+dfsg.1/src/core/MacPasteboard.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/core/MacPasteboard.h Examining data/keepassxc-2.6.2+dfsg.1/src/core/Merger.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/core/Merger.h Examining data/keepassxc-2.6.2+dfsg.1/src/core/Metadata.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/core/Metadata.h Examining data/keepassxc-2.6.2+dfsg.1/src/core/NetworkManager.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/core/NetworkManager.h Examining data/keepassxc-2.6.2+dfsg.1/src/core/OSEventFilter.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/core/OSEventFilter.h Examining data/keepassxc-2.6.2+dfsg.1/src/core/PassphraseGenerator.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/core/PassphraseGenerator.h Examining data/keepassxc-2.6.2+dfsg.1/src/core/PasswordGenerator.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/core/PasswordGenerator.h Examining data/keepassxc-2.6.2+dfsg.1/src/core/PasswordHealth.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/core/PasswordHealth.h Examining data/keepassxc-2.6.2+dfsg.1/src/core/Resources.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/core/Resources.h Examining data/keepassxc-2.6.2+dfsg.1/src/core/ScreenLockListener.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/core/ScreenLockListener.h Examining data/keepassxc-2.6.2+dfsg.1/src/core/ScreenLockListenerDBus.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/core/ScreenLockListenerDBus.h Examining data/keepassxc-2.6.2+dfsg.1/src/core/ScreenLockListenerMac.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/core/ScreenLockListenerMac.h Examining data/keepassxc-2.6.2+dfsg.1/src/core/ScreenLockListenerPrivate.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/core/ScreenLockListenerPrivate.h Examining data/keepassxc-2.6.2+dfsg.1/src/core/ScreenLockListenerWin.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/core/ScreenLockListenerWin.h Examining data/keepassxc-2.6.2+dfsg.1/src/core/SignalMultiplexer.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/core/SignalMultiplexer.h Examining data/keepassxc-2.6.2+dfsg.1/src/core/TimeDelta.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/core/TimeDelta.h Examining data/keepassxc-2.6.2+dfsg.1/src/core/TimeInfo.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/core/TimeInfo.h Examining data/keepassxc-2.6.2+dfsg.1/src/core/Tools.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/core/Tools.h Examining data/keepassxc-2.6.2+dfsg.1/src/core/Translator.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/core/Translator.h Examining data/keepassxc-2.6.2+dfsg.1/src/crypto/Crypto.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/crypto/Crypto.h Examining data/keepassxc-2.6.2+dfsg.1/src/crypto/CryptoHash.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/crypto/CryptoHash.h Examining data/keepassxc-2.6.2+dfsg.1/src/crypto/Random.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/crypto/Random.h Examining data/keepassxc-2.6.2+dfsg.1/src/crypto/SymmetricCipher.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/crypto/SymmetricCipher.h Examining data/keepassxc-2.6.2+dfsg.1/src/crypto/SymmetricCipherBackend.h Examining data/keepassxc-2.6.2+dfsg.1/src/crypto/SymmetricCipherGcrypt.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/crypto/SymmetricCipherGcrypt.h Examining data/keepassxc-2.6.2+dfsg.1/src/crypto/argon2/argon2.h Examining data/keepassxc-2.6.2+dfsg.1/src/crypto/kdf/AesKdf.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/crypto/kdf/AesKdf.h Examining data/keepassxc-2.6.2+dfsg.1/src/crypto/kdf/Argon2Kdf.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/crypto/kdf/Argon2Kdf.h Examining data/keepassxc-2.6.2+dfsg.1/src/crypto/kdf/Kdf.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/crypto/kdf/Kdf.h Examining data/keepassxc-2.6.2+dfsg.1/src/crypto/kdf/Kdf_p.h Examining data/keepassxc-2.6.2+dfsg.1/src/crypto/ssh/ASN1Key.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/crypto/ssh/ASN1Key.h Examining data/keepassxc-2.6.2+dfsg.1/src/crypto/ssh/BinaryStream.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/crypto/ssh/BinaryStream.h Examining data/keepassxc-2.6.2+dfsg.1/src/crypto/ssh/OpenSSHKey.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/crypto/ssh/OpenSSHKey.h Examining data/keepassxc-2.6.2+dfsg.1/src/crypto/ssh/bcrypt_pbkdf.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/crypto/ssh/blf.h Examining data/keepassxc-2.6.2+dfsg.1/src/crypto/ssh/blowfish.c Examining data/keepassxc-2.6.2+dfsg.1/src/crypto/ssh/includes.h Examining data/keepassxc-2.6.2+dfsg.1/src/fdosecrets/DatabaseSettingsPageFdoSecrets.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/fdosecrets/DatabaseSettingsPageFdoSecrets.h Examining data/keepassxc-2.6.2+dfsg.1/src/fdosecrets/FdoSecretsPlugin.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/fdosecrets/FdoSecretsPlugin.h Examining data/keepassxc-2.6.2+dfsg.1/src/fdosecrets/FdoSecretsSettings.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/fdosecrets/FdoSecretsSettings.h Examining data/keepassxc-2.6.2+dfsg.1/src/fdosecrets/GcryptMPI.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/fdosecrets/GcryptMPI.h Examining data/keepassxc-2.6.2+dfsg.1/src/fdosecrets/objects/Collection.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/fdosecrets/objects/Collection.h Examining data/keepassxc-2.6.2+dfsg.1/src/fdosecrets/objects/DBusObject.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/fdosecrets/objects/DBusObject.h Examining data/keepassxc-2.6.2+dfsg.1/src/fdosecrets/objects/DBusReturn.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/fdosecrets/objects/DBusReturn.h Examining data/keepassxc-2.6.2+dfsg.1/src/fdosecrets/objects/DBusTypes.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/fdosecrets/objects/DBusTypes.h Examining data/keepassxc-2.6.2+dfsg.1/src/fdosecrets/objects/Item.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/fdosecrets/objects/Item.h Examining data/keepassxc-2.6.2+dfsg.1/src/fdosecrets/objects/Prompt.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/fdosecrets/objects/Prompt.h Examining data/keepassxc-2.6.2+dfsg.1/src/fdosecrets/objects/Service.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/fdosecrets/objects/Service.h Examining data/keepassxc-2.6.2+dfsg.1/src/fdosecrets/objects/Session.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/fdosecrets/objects/Session.h Examining data/keepassxc-2.6.2+dfsg.1/src/fdosecrets/objects/SessionCipher.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/fdosecrets/objects/SessionCipher.h Examining data/keepassxc-2.6.2+dfsg.1/src/fdosecrets/objects/adaptors/CollectionAdaptor.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/fdosecrets/objects/adaptors/CollectionAdaptor.h Examining data/keepassxc-2.6.2+dfsg.1/src/fdosecrets/objects/adaptors/DBusAdaptor.h Examining data/keepassxc-2.6.2+dfsg.1/src/fdosecrets/objects/adaptors/ItemAdaptor.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/fdosecrets/objects/adaptors/ItemAdaptor.h Examining data/keepassxc-2.6.2+dfsg.1/src/fdosecrets/objects/adaptors/PromptAdaptor.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/fdosecrets/objects/adaptors/PromptAdaptor.h Examining data/keepassxc-2.6.2+dfsg.1/src/fdosecrets/objects/adaptors/ServiceAdaptor.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/fdosecrets/objects/adaptors/ServiceAdaptor.h Examining data/keepassxc-2.6.2+dfsg.1/src/fdosecrets/objects/adaptors/SessionAdaptor.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/fdosecrets/objects/adaptors/SessionAdaptor.h Examining data/keepassxc-2.6.2+dfsg.1/src/fdosecrets/widgets/DatabaseSettingsWidgetFdoSecrets.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/fdosecrets/widgets/DatabaseSettingsWidgetFdoSecrets.h Examining data/keepassxc-2.6.2+dfsg.1/src/fdosecrets/widgets/SettingsModels.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/fdosecrets/widgets/SettingsModels.h Examining data/keepassxc-2.6.2+dfsg.1/src/fdosecrets/widgets/SettingsWidgetFdoSecrets.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/fdosecrets/widgets/SettingsWidgetFdoSecrets.h Examining data/keepassxc-2.6.2+dfsg.1/src/format/CsvExporter.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/format/CsvExporter.h Examining data/keepassxc-2.6.2+dfsg.1/src/format/HtmlExporter.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/format/HtmlExporter.h Examining data/keepassxc-2.6.2+dfsg.1/src/format/Kdbx3Reader.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/format/Kdbx3Reader.h Examining data/keepassxc-2.6.2+dfsg.1/src/format/Kdbx3Writer.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/format/Kdbx3Writer.h Examining data/keepassxc-2.6.2+dfsg.1/src/format/Kdbx4Reader.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/format/Kdbx4Reader.h Examining data/keepassxc-2.6.2+dfsg.1/src/format/Kdbx4Writer.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/format/Kdbx4Writer.h Examining data/keepassxc-2.6.2+dfsg.1/src/format/KdbxReader.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/format/KdbxReader.h Examining data/keepassxc-2.6.2+dfsg.1/src/format/KdbxWriter.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/format/KdbxWriter.h Examining data/keepassxc-2.6.2+dfsg.1/src/format/KdbxXmlReader.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/format/KdbxXmlReader.h Examining data/keepassxc-2.6.2+dfsg.1/src/format/KdbxXmlWriter.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/format/KdbxXmlWriter.h Examining data/keepassxc-2.6.2+dfsg.1/src/format/KeePass1.h Examining data/keepassxc-2.6.2+dfsg.1/src/format/KeePass1Reader.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/format/KeePass1Reader.h Examining data/keepassxc-2.6.2+dfsg.1/src/format/KeePass2.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/format/KeePass2.h Examining data/keepassxc-2.6.2+dfsg.1/src/format/KeePass2RandomStream.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/format/KeePass2RandomStream.h Examining data/keepassxc-2.6.2+dfsg.1/src/format/KeePass2Reader.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/format/KeePass2Reader.h Examining data/keepassxc-2.6.2+dfsg.1/src/format/KeePass2Writer.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/format/KeePass2Writer.h Examining data/keepassxc-2.6.2+dfsg.1/src/format/OpData01.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/format/OpData01.h Examining data/keepassxc-2.6.2+dfsg.1/src/format/OpVaultReader.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/format/OpVaultReader.h Examining data/keepassxc-2.6.2+dfsg.1/src/format/OpVaultReaderAttachments.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/format/OpVaultReaderBandEntry.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/format/OpVaultReaderSections.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/gui/AboutDialog.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/gui/AboutDialog.h Examining data/keepassxc-2.6.2+dfsg.1/src/gui/Application.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/gui/Application.h Examining data/keepassxc-2.6.2+dfsg.1/src/gui/ApplicationSettingsWidget.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/gui/ApplicationSettingsWidget.h Examining data/keepassxc-2.6.2+dfsg.1/src/gui/CategoryListWidget.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/gui/CategoryListWidget.h Examining data/keepassxc-2.6.2+dfsg.1/src/gui/Clipboard.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/gui/Clipboard.h Examining data/keepassxc-2.6.2+dfsg.1/src/gui/CloneDialog.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/gui/CloneDialog.h Examining data/keepassxc-2.6.2+dfsg.1/src/gui/DatabaseOpenDialog.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/gui/DatabaseOpenDialog.h Examining data/keepassxc-2.6.2+dfsg.1/src/gui/DatabaseOpenWidget.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/gui/DatabaseOpenWidget.h Examining data/keepassxc-2.6.2+dfsg.1/src/gui/DatabaseTabWidget.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/gui/DatabaseTabWidget.h Examining data/keepassxc-2.6.2+dfsg.1/src/gui/DatabaseWidget.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/gui/DatabaseWidget.h Examining data/keepassxc-2.6.2+dfsg.1/src/gui/DatabaseWidgetStateSync.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/gui/DatabaseWidgetStateSync.h Examining data/keepassxc-2.6.2+dfsg.1/src/gui/DialogyWidget.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/gui/DialogyWidget.h Examining data/keepassxc-2.6.2+dfsg.1/src/gui/DragTabBar.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/gui/DragTabBar.h Examining data/keepassxc-2.6.2+dfsg.1/src/gui/EditWidget.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/gui/EditWidget.h Examining data/keepassxc-2.6.2+dfsg.1/src/gui/EditWidgetIcons.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/gui/EditWidgetIcons.h Examining data/keepassxc-2.6.2+dfsg.1/src/gui/EditWidgetProperties.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/gui/EditWidgetProperties.h Examining data/keepassxc-2.6.2+dfsg.1/src/gui/EntryPreviewWidget.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/gui/EntryPreviewWidget.h Examining data/keepassxc-2.6.2+dfsg.1/src/gui/FileDialog.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/gui/FileDialog.h Examining data/keepassxc-2.6.2+dfsg.1/src/gui/Font.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/gui/Font.h Examining data/keepassxc-2.6.2+dfsg.1/src/gui/IconDownloaderDialog.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/gui/IconDownloaderDialog.h Examining data/keepassxc-2.6.2+dfsg.1/src/gui/IconModels.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/gui/IconModels.h Examining data/keepassxc-2.6.2+dfsg.1/src/gui/KMessageWidget.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/gui/KMessageWidget.h Examining data/keepassxc-2.6.2+dfsg.1/src/gui/KeePass1OpenWidget.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/gui/KeePass1OpenWidget.h Examining data/keepassxc-2.6.2+dfsg.1/src/gui/MainWindow.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/gui/MainWindow.h Examining data/keepassxc-2.6.2+dfsg.1/src/gui/MainWindowAdaptor.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/gui/MainWindowAdaptor.h Examining data/keepassxc-2.6.2+dfsg.1/src/gui/MessageBox.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/gui/MessageBox.h Examining data/keepassxc-2.6.2+dfsg.1/src/gui/MessageWidget.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/gui/MessageWidget.h Examining data/keepassxc-2.6.2+dfsg.1/src/gui/OpVaultOpenWidget.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/gui/OpVaultOpenWidget.h Examining data/keepassxc-2.6.2+dfsg.1/src/gui/PasswordEdit.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/gui/PasswordEdit.h Examining data/keepassxc-2.6.2+dfsg.1/src/gui/PasswordGeneratorWidget.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/gui/PasswordGeneratorWidget.h Examining data/keepassxc-2.6.2+dfsg.1/src/gui/SearchWidget.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/gui/SearchWidget.h Examining data/keepassxc-2.6.2+dfsg.1/src/gui/SortFilterHideProxyModel.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/gui/SortFilterHideProxyModel.h Examining data/keepassxc-2.6.2+dfsg.1/src/gui/SquareSvgWidget.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/gui/SquareSvgWidget.h Examining data/keepassxc-2.6.2+dfsg.1/src/gui/TotpDialog.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/gui/TotpDialog.h Examining data/keepassxc-2.6.2+dfsg.1/src/gui/TotpExportSettingsDialog.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/gui/TotpExportSettingsDialog.h Examining data/keepassxc-2.6.2+dfsg.1/src/gui/TotpSetupDialog.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/gui/TotpSetupDialog.h Examining data/keepassxc-2.6.2+dfsg.1/src/gui/URLEdit.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/gui/URLEdit.h Examining data/keepassxc-2.6.2+dfsg.1/src/gui/UpdateCheckDialog.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/gui/UpdateCheckDialog.h Examining data/keepassxc-2.6.2+dfsg.1/src/gui/WelcomeWidget.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/gui/WelcomeWidget.h Examining data/keepassxc-2.6.2+dfsg.1/src/gui/csvImport/CsvImportWidget.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/gui/csvImport/CsvImportWidget.h Examining data/keepassxc-2.6.2+dfsg.1/src/gui/csvImport/CsvImportWizard.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/gui/csvImport/CsvImportWizard.h Examining data/keepassxc-2.6.2+dfsg.1/src/gui/csvImport/CsvParserModel.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/gui/csvImport/CsvParserModel.h Examining data/keepassxc-2.6.2+dfsg.1/src/gui/databasekey/KeyComponentWidget.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/gui/databasekey/KeyComponentWidget.h Examining data/keepassxc-2.6.2+dfsg.1/src/gui/databasekey/KeyFileEditWidget.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/gui/databasekey/KeyFileEditWidget.h Examining data/keepassxc-2.6.2+dfsg.1/src/gui/databasekey/PasswordEditWidget.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/gui/databasekey/PasswordEditWidget.h Examining data/keepassxc-2.6.2+dfsg.1/src/gui/databasekey/YubiKeyEditWidget.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/gui/databasekey/YubiKeyEditWidget.h Examining data/keepassxc-2.6.2+dfsg.1/src/gui/dbsettings/DatabaseSettingsDialog.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/gui/dbsettings/DatabaseSettingsDialog.h Examining data/keepassxc-2.6.2+dfsg.1/src/gui/dbsettings/DatabaseSettingsWidget.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/gui/dbsettings/DatabaseSettingsWidget.h Examining data/keepassxc-2.6.2+dfsg.1/src/gui/dbsettings/DatabaseSettingsWidgetBrowser.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/gui/dbsettings/DatabaseSettingsWidgetBrowser.h Examining data/keepassxc-2.6.2+dfsg.1/src/gui/dbsettings/DatabaseSettingsWidgetDatabaseKey.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/gui/dbsettings/DatabaseSettingsWidgetDatabaseKey.h Examining data/keepassxc-2.6.2+dfsg.1/src/gui/dbsettings/DatabaseSettingsWidgetEncryption.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/gui/dbsettings/DatabaseSettingsWidgetEncryption.h Examining data/keepassxc-2.6.2+dfsg.1/src/gui/dbsettings/DatabaseSettingsWidgetGeneral.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/gui/dbsettings/DatabaseSettingsWidgetGeneral.h Examining data/keepassxc-2.6.2+dfsg.1/src/gui/dbsettings/DatabaseSettingsWidgetMetaDataSimple.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/gui/dbsettings/DatabaseSettingsWidgetMetaDataSimple.h Examining data/keepassxc-2.6.2+dfsg.1/src/gui/entry/AutoTypeAssociationsModel.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/gui/entry/AutoTypeAssociationsModel.h Examining data/keepassxc-2.6.2+dfsg.1/src/gui/entry/AutoTypeMatchModel.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/gui/entry/AutoTypeMatchModel.h Examining data/keepassxc-2.6.2+dfsg.1/src/gui/entry/AutoTypeMatchView.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/gui/entry/AutoTypeMatchView.h Examining data/keepassxc-2.6.2+dfsg.1/src/gui/entry/EditEntryWidget.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/gui/entry/EditEntryWidget.h Examining data/keepassxc-2.6.2+dfsg.1/src/gui/entry/EditEntryWidget_p.h Examining data/keepassxc-2.6.2+dfsg.1/src/gui/entry/EntryAttachmentsModel.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/gui/entry/EntryAttachmentsModel.h Examining data/keepassxc-2.6.2+dfsg.1/src/gui/entry/EntryAttachmentsWidget.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/gui/entry/EntryAttachmentsWidget.h Examining data/keepassxc-2.6.2+dfsg.1/src/gui/entry/EntryAttributesModel.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/gui/entry/EntryAttributesModel.h Examining data/keepassxc-2.6.2+dfsg.1/src/gui/entry/EntryHistoryModel.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/gui/entry/EntryHistoryModel.h Examining data/keepassxc-2.6.2+dfsg.1/src/gui/entry/EntryModel.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/gui/entry/EntryModel.h Examining data/keepassxc-2.6.2+dfsg.1/src/gui/entry/EntryURLModel.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/gui/entry/EntryURLModel.h Examining data/keepassxc-2.6.2+dfsg.1/src/gui/entry/EntryView.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/gui/entry/EntryView.h Examining data/keepassxc-2.6.2+dfsg.1/src/gui/group/EditGroupWidget.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/gui/group/EditGroupWidget.h Examining data/keepassxc-2.6.2+dfsg.1/src/gui/group/GroupModel.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/gui/group/GroupModel.h Examining data/keepassxc-2.6.2+dfsg.1/src/gui/group/GroupView.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/gui/group/GroupView.h Examining data/keepassxc-2.6.2+dfsg.1/src/gui/osutils/OSUtils.h Examining data/keepassxc-2.6.2+dfsg.1/src/gui/osutils/OSUtilsBase.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/gui/osutils/OSUtilsBase.h Examining data/keepassxc-2.6.2+dfsg.1/src/gui/osutils/macutils/AppKit.h Examining data/keepassxc-2.6.2+dfsg.1/src/gui/osutils/macutils/AppKitImpl.h Examining data/keepassxc-2.6.2+dfsg.1/src/gui/osutils/macutils/MacUtils.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/gui/osutils/macutils/MacUtils.h Examining data/keepassxc-2.6.2+dfsg.1/src/gui/osutils/nixutils/NixUtils.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/gui/osutils/nixutils/NixUtils.h Examining data/keepassxc-2.6.2+dfsg.1/src/gui/osutils/winutils/WinUtils.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/gui/osutils/winutils/WinUtils.h Examining data/keepassxc-2.6.2+dfsg.1/src/gui/reports/ReportsDialog.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/gui/reports/ReportsDialog.h Examining data/keepassxc-2.6.2+dfsg.1/src/gui/reports/ReportsPageHealthcheck.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/gui/reports/ReportsPageHealthcheck.h Examining data/keepassxc-2.6.2+dfsg.1/src/gui/reports/ReportsPageHibp.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/gui/reports/ReportsPageHibp.h Examining data/keepassxc-2.6.2+dfsg.1/src/gui/reports/ReportsPageStatistics.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/gui/reports/ReportsPageStatistics.h Examining data/keepassxc-2.6.2+dfsg.1/src/gui/reports/ReportsWidget.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/gui/reports/ReportsWidget.h Examining data/keepassxc-2.6.2+dfsg.1/src/gui/reports/ReportsWidgetHealthcheck.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/gui/reports/ReportsWidgetHealthcheck.h Examining data/keepassxc-2.6.2+dfsg.1/src/gui/reports/ReportsWidgetHibp.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/gui/reports/ReportsWidgetHibp.h Examining data/keepassxc-2.6.2+dfsg.1/src/gui/reports/ReportsWidgetStatistics.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/gui/reports/ReportsWidgetStatistics.h Examining data/keepassxc-2.6.2+dfsg.1/src/gui/settings/SettingsWidget.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/gui/settings/SettingsWidget.h Examining data/keepassxc-2.6.2+dfsg.1/src/gui/styles/StateColorPalette.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/gui/styles/StateColorPalette.h Examining data/keepassxc-2.6.2+dfsg.1/src/gui/styles/base/BaseStyle.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/gui/styles/base/BaseStyle.h Examining data/keepassxc-2.6.2+dfsg.1/src/gui/styles/base/phantomcolor.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/gui/styles/base/phantomcolor.h Examining data/keepassxc-2.6.2+dfsg.1/src/gui/styles/dark/DarkStyle.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/gui/styles/dark/DarkStyle.h Examining data/keepassxc-2.6.2+dfsg.1/src/gui/styles/light/LightStyle.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/gui/styles/light/LightStyle.h Examining data/keepassxc-2.6.2+dfsg.1/src/gui/widgets/ElidedLabel.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/gui/widgets/ElidedLabel.h Examining data/keepassxc-2.6.2+dfsg.1/src/gui/widgets/PopupHelpWidget.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/gui/widgets/PopupHelpWidget.h Examining data/keepassxc-2.6.2+dfsg.1/src/gui/wizard/NewDatabaseWizard.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/gui/wizard/NewDatabaseWizard.h Examining data/keepassxc-2.6.2+dfsg.1/src/gui/wizard/NewDatabaseWizardPage.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/gui/wizard/NewDatabaseWizardPage.h Examining data/keepassxc-2.6.2+dfsg.1/src/gui/wizard/NewDatabaseWizardPageDatabaseKey.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/gui/wizard/NewDatabaseWizardPageDatabaseKey.h Examining data/keepassxc-2.6.2+dfsg.1/src/gui/wizard/NewDatabaseWizardPageEncryption.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/gui/wizard/NewDatabaseWizardPageEncryption.h Examining data/keepassxc-2.6.2+dfsg.1/src/gui/wizard/NewDatabaseWizardPageMetaData.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/gui/wizard/NewDatabaseWizardPageMetaData.h Examining data/keepassxc-2.6.2+dfsg.1/src/keeshare/DatabaseSettingsPageKeeShare.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/keeshare/DatabaseSettingsPageKeeShare.h Examining data/keepassxc-2.6.2+dfsg.1/src/keeshare/DatabaseSettingsWidgetKeeShare.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/keeshare/DatabaseSettingsWidgetKeeShare.h Examining data/keepassxc-2.6.2+dfsg.1/src/keeshare/KeeShare.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/keeshare/KeeShare.h Examining data/keepassxc-2.6.2+dfsg.1/src/keeshare/KeeShareSettings.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/keeshare/KeeShareSettings.h Examining data/keepassxc-2.6.2+dfsg.1/src/keeshare/SettingsPageKeeShare.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/keeshare/SettingsPageKeeShare.h Examining data/keepassxc-2.6.2+dfsg.1/src/keeshare/SettingsWidgetKeeShare.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/keeshare/SettingsWidgetKeeShare.h Examining data/keepassxc-2.6.2+dfsg.1/src/keeshare/ShareExport.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/keeshare/ShareExport.h Examining data/keepassxc-2.6.2+dfsg.1/src/keeshare/ShareImport.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/keeshare/ShareImport.h Examining data/keepassxc-2.6.2+dfsg.1/src/keeshare/ShareObserver.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/keeshare/ShareObserver.h Examining data/keepassxc-2.6.2+dfsg.1/src/keeshare/Signature.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/keeshare/Signature.h Examining data/keepassxc-2.6.2+dfsg.1/src/keeshare/group/EditGroupPageKeeShare.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/keeshare/group/EditGroupPageKeeShare.h Examining data/keepassxc-2.6.2+dfsg.1/src/keeshare/group/EditGroupWidgetKeeShare.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/keeshare/group/EditGroupWidgetKeeShare.h Examining data/keepassxc-2.6.2+dfsg.1/src/keys/ChallengeResponseKey.h Examining data/keepassxc-2.6.2+dfsg.1/src/keys/CompositeKey.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/keys/CompositeKey.h Examining data/keepassxc-2.6.2+dfsg.1/src/keys/FileKey.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/keys/FileKey.h Examining data/keepassxc-2.6.2+dfsg.1/src/keys/Key.h Examining data/keepassxc-2.6.2+dfsg.1/src/keys/PasswordKey.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/keys/PasswordKey.h Examining data/keepassxc-2.6.2+dfsg.1/src/keys/YkChallengeResponseKey.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/keys/YkChallengeResponseKey.h Examining data/keepassxc-2.6.2+dfsg.1/src/keys/YkChallengeResponseKeyCLI.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/keys/YkChallengeResponseKeyCLI.h Examining data/keepassxc-2.6.2+dfsg.1/src/keys/drivers/YubiKey.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/keys/drivers/YubiKey.h Examining data/keepassxc-2.6.2+dfsg.1/src/keys/drivers/YubiKeyStub.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/main.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/proxy/NativeMessagingProxy.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/proxy/NativeMessagingProxy.h Examining data/keepassxc-2.6.2+dfsg.1/src/proxy/keepassxc-proxy.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/qrcode/QrCode.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/qrcode/QrCode.h Examining data/keepassxc-2.6.2+dfsg.1/src/qrcode/QrCode_p.h Examining data/keepassxc-2.6.2+dfsg.1/src/sshagent/AgentSettingsPage.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/sshagent/AgentSettingsPage.h Examining data/keepassxc-2.6.2+dfsg.1/src/sshagent/AgentSettingsWidget.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/sshagent/AgentSettingsWidget.h Examining data/keepassxc-2.6.2+dfsg.1/src/sshagent/KeeAgentSettings.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/sshagent/KeeAgentSettings.h Examining data/keepassxc-2.6.2+dfsg.1/src/sshagent/SSHAgent.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/sshagent/SSHAgent.h Examining data/keepassxc-2.6.2+dfsg.1/src/streams/HashedBlockStream.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/streams/HashedBlockStream.h Examining data/keepassxc-2.6.2+dfsg.1/src/streams/HmacBlockStream.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/streams/HmacBlockStream.h Examining data/keepassxc-2.6.2+dfsg.1/src/streams/LayeredStream.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/streams/LayeredStream.h Examining data/keepassxc-2.6.2+dfsg.1/src/streams/StoreDataStream.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/streams/StoreDataStream.h Examining data/keepassxc-2.6.2+dfsg.1/src/streams/SymmetricCipherStream.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/streams/SymmetricCipherStream.h Examining data/keepassxc-2.6.2+dfsg.1/src/streams/qtiocompressor.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/streams/qtiocompressor.h Examining data/keepassxc-2.6.2+dfsg.1/src/totp/totp.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/totp/totp.h Examining data/keepassxc-2.6.2+dfsg.1/src/touchid/TouchID.h Examining data/keepassxc-2.6.2+dfsg.1/src/updatecheck/UpdateChecker.cpp Examining data/keepassxc-2.6.2+dfsg.1/src/updatecheck/UpdateChecker.h Examining data/keepassxc-2.6.2+dfsg.1/tests/FailDevice.cpp Examining data/keepassxc-2.6.2+dfsg.1/tests/FailDevice.h Examining data/keepassxc-2.6.2+dfsg.1/tests/TestAutoType.cpp Examining data/keepassxc-2.6.2+dfsg.1/tests/TestAutoType.h Examining data/keepassxc-2.6.2+dfsg.1/tests/TestBase32.cpp Examining data/keepassxc-2.6.2+dfsg.1/tests/TestBase32.h Examining data/keepassxc-2.6.2+dfsg.1/tests/TestBrowser.cpp Examining data/keepassxc-2.6.2+dfsg.1/tests/TestBrowser.h Examining data/keepassxc-2.6.2+dfsg.1/tests/TestCli.h Examining data/keepassxc-2.6.2+dfsg.1/tests/TestConfig.cpp Examining data/keepassxc-2.6.2+dfsg.1/tests/TestConfig.h Examining data/keepassxc-2.6.2+dfsg.1/tests/TestCryptoHash.cpp Examining data/keepassxc-2.6.2+dfsg.1/tests/TestCryptoHash.h Examining data/keepassxc-2.6.2+dfsg.1/tests/TestCsvExporter.cpp Examining data/keepassxc-2.6.2+dfsg.1/tests/TestCsvExporter.h Examining data/keepassxc-2.6.2+dfsg.1/tests/TestCsvParser.cpp Examining data/keepassxc-2.6.2+dfsg.1/tests/TestCsvParser.h Examining data/keepassxc-2.6.2+dfsg.1/tests/TestDatabase.cpp Examining data/keepassxc-2.6.2+dfsg.1/tests/TestDatabase.h Examining data/keepassxc-2.6.2+dfsg.1/tests/TestDeletedObjects.cpp Examining data/keepassxc-2.6.2+dfsg.1/tests/TestDeletedObjects.h Examining data/keepassxc-2.6.2+dfsg.1/tests/TestEntry.cpp Examining data/keepassxc-2.6.2+dfsg.1/tests/TestEntry.h Examining data/keepassxc-2.6.2+dfsg.1/tests/TestEntryModel.cpp Examining data/keepassxc-2.6.2+dfsg.1/tests/TestEntryModel.h Examining data/keepassxc-2.6.2+dfsg.1/tests/TestEntrySearcher.cpp Examining data/keepassxc-2.6.2+dfsg.1/tests/TestEntrySearcher.h Examining data/keepassxc-2.6.2+dfsg.1/tests/TestFdoSecrets.cpp Examining data/keepassxc-2.6.2+dfsg.1/tests/TestFdoSecrets.h Examining data/keepassxc-2.6.2+dfsg.1/tests/TestGlobal.h Examining data/keepassxc-2.6.2+dfsg.1/tests/TestGroup.cpp Examining data/keepassxc-2.6.2+dfsg.1/tests/TestGroup.h Examining data/keepassxc-2.6.2+dfsg.1/tests/TestGroupModel.cpp Examining data/keepassxc-2.6.2+dfsg.1/tests/TestGroupModel.h Examining data/keepassxc-2.6.2+dfsg.1/tests/TestHashedBlockStream.cpp Examining data/keepassxc-2.6.2+dfsg.1/tests/TestHashedBlockStream.h Examining data/keepassxc-2.6.2+dfsg.1/tests/TestHibp.cpp Examining data/keepassxc-2.6.2+dfsg.1/tests/TestHibp.h Examining data/keepassxc-2.6.2+dfsg.1/tests/TestKdbx2.cpp Examining data/keepassxc-2.6.2+dfsg.1/tests/TestKdbx2.h Examining data/keepassxc-2.6.2+dfsg.1/tests/TestKdbx3.cpp Examining data/keepassxc-2.6.2+dfsg.1/tests/TestKdbx3.h Examining data/keepassxc-2.6.2+dfsg.1/tests/TestKdbx4.cpp Examining data/keepassxc-2.6.2+dfsg.1/tests/TestKdbx4.h Examining data/keepassxc-2.6.2+dfsg.1/tests/TestKeePass1Reader.cpp Examining data/keepassxc-2.6.2+dfsg.1/tests/TestKeePass1Reader.h Examining data/keepassxc-2.6.2+dfsg.1/tests/TestKeePass2Format.cpp Examining data/keepassxc-2.6.2+dfsg.1/tests/TestKeePass2Format.h Examining data/keepassxc-2.6.2+dfsg.1/tests/TestKeePass2RandomStream.cpp Examining data/keepassxc-2.6.2+dfsg.1/tests/TestKeePass2RandomStream.h Examining data/keepassxc-2.6.2+dfsg.1/tests/TestKeys.cpp Examining data/keepassxc-2.6.2+dfsg.1/tests/TestKeys.h Examining data/keepassxc-2.6.2+dfsg.1/tests/TestMerge.cpp Examining data/keepassxc-2.6.2+dfsg.1/tests/TestMerge.h Examining data/keepassxc-2.6.2+dfsg.1/tests/TestModified.cpp Examining data/keepassxc-2.6.2+dfsg.1/tests/TestModified.h Examining data/keepassxc-2.6.2+dfsg.1/tests/TestOpVaultReader.cpp Examining data/keepassxc-2.6.2+dfsg.1/tests/TestOpVaultReader.h Examining data/keepassxc-2.6.2+dfsg.1/tests/TestOpenSSHKey.cpp Examining data/keepassxc-2.6.2+dfsg.1/tests/TestOpenSSHKey.h Examining data/keepassxc-2.6.2+dfsg.1/tests/TestPassphraseGenerator.cpp Examining data/keepassxc-2.6.2+dfsg.1/tests/TestPassphraseGenerator.h Examining data/keepassxc-2.6.2+dfsg.1/tests/TestPasswordGenerator.cpp Examining data/keepassxc-2.6.2+dfsg.1/tests/TestPasswordGenerator.h Examining data/keepassxc-2.6.2+dfsg.1/tests/TestPasswordHealth.cpp Examining data/keepassxc-2.6.2+dfsg.1/tests/TestPasswordHealth.h Examining data/keepassxc-2.6.2+dfsg.1/tests/TestRandomGenerator.cpp Examining data/keepassxc-2.6.2+dfsg.1/tests/TestRandomGenerator.h Examining data/keepassxc-2.6.2+dfsg.1/tests/TestSSHAgent.cpp Examining data/keepassxc-2.6.2+dfsg.1/tests/TestSSHAgent.h Examining data/keepassxc-2.6.2+dfsg.1/tests/TestSharing.cpp Examining data/keepassxc-2.6.2+dfsg.1/tests/TestSharing.h Examining data/keepassxc-2.6.2+dfsg.1/tests/TestSignature.cpp Examining data/keepassxc-2.6.2+dfsg.1/tests/TestSignature.h Examining data/keepassxc-2.6.2+dfsg.1/tests/TestSymmetricCipher.cpp Examining data/keepassxc-2.6.2+dfsg.1/tests/TestSymmetricCipher.h Examining data/keepassxc-2.6.2+dfsg.1/tests/TestTools.cpp Examining data/keepassxc-2.6.2+dfsg.1/tests/TestTools.h Examining data/keepassxc-2.6.2+dfsg.1/tests/TestTotp.cpp Examining data/keepassxc-2.6.2+dfsg.1/tests/TestTotp.h Examining data/keepassxc-2.6.2+dfsg.1/tests/TestUpdateCheck.cpp Examining data/keepassxc-2.6.2+dfsg.1/tests/TestUpdateCheck.h Examining data/keepassxc-2.6.2+dfsg.1/tests/TestWildcardMatcher.cpp Examining data/keepassxc-2.6.2+dfsg.1/tests/TestWildcardMatcher.h Examining data/keepassxc-2.6.2+dfsg.1/tests/TestYkChallengeResponseKey.cpp Examining data/keepassxc-2.6.2+dfsg.1/tests/TestYkChallengeResponseKey.h Examining data/keepassxc-2.6.2+dfsg.1/tests/gui/TestGui.h Examining data/keepassxc-2.6.2+dfsg.1/tests/gui/TestGuiBrowser.cpp Examining data/keepassxc-2.6.2+dfsg.1/tests/gui/TestGuiBrowser.h Examining data/keepassxc-2.6.2+dfsg.1/tests/gui/TestGuiFdoSecrets.cpp Examining data/keepassxc-2.6.2+dfsg.1/tests/gui/TestGuiFdoSecrets.h Examining data/keepassxc-2.6.2+dfsg.1/tests/gui/TestGuiPixmaps.cpp Examining data/keepassxc-2.6.2+dfsg.1/tests/gui/TestGuiPixmaps.h Examining data/keepassxc-2.6.2+dfsg.1/tests/gui/TestGui.cpp Examining data/keepassxc-2.6.2+dfsg.1/tests/mock/MockChallengeResponseKey.cpp Examining data/keepassxc-2.6.2+dfsg.1/tests/mock/MockChallengeResponseKey.h Examining data/keepassxc-2.6.2+dfsg.1/tests/mock/MockClock.cpp Examining data/keepassxc-2.6.2+dfsg.1/tests/mock/MockClock.h Examining data/keepassxc-2.6.2+dfsg.1/tests/modeltest.cpp Examining data/keepassxc-2.6.2+dfsg.1/tests/modeltest.h Examining data/keepassxc-2.6.2+dfsg.1/tests/stub/TestRandom.cpp Examining data/keepassxc-2.6.2+dfsg.1/tests/stub/TestRandom.h Examining data/keepassxc-2.6.2+dfsg.1/tests/util/TemporaryFile.cpp Examining data/keepassxc-2.6.2+dfsg.1/tests/util/TemporaryFile.h Examining data/keepassxc-2.6.2+dfsg.1/tests/TestCli.cpp FINAL RESULTS: data/keepassxc-2.6.2+dfsg.1/src/core/Bootstrap.cpp:234:14: [3] (misc) AddAccessAllowedAce: This doesn't set the inheritance bits in the access control entry (ACE) header (CWE-732). Make sure that you set inheritance by hand if you wish it to inherit. if (!AddAccessAllowedAce( data/keepassxc-2.6.2+dfsg.1/src/core/Bootstrap.cpp:245:14: [3] (misc) AddAccessAllowedAce: This doesn't set the inheritance bits in the access control entry (ACE) header (CWE-732). Make sure that you set inheritance by hand if you wish it to inherit. if (!AddAccessAllowedAce(pACL, data/keepassxc-2.6.2+dfsg.1/src/autotype/mac/AutoTypeMac.cpp:463:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char buffer[MAX_WINDOW_TITLE_LENGTH]; data/keepassxc-2.6.2+dfsg.1/src/autotype/windows/AutoTypeWindows.cpp:500:5: [2] (buffer) wchar_t: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. wchar_t title[MAX_WINDOW_TITLE_LENGTH]; data/keepassxc-2.6.2+dfsg.1/src/autotype/xcb/AutoTypeXCB.cpp:784:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char msg[200]; data/keepassxc-2.6.2+dfsg.1/src/browser/BrowserAction.cpp:128:14: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. unsigned char pk[crypto_box_PUBLICKEYBYTES]; data/keepassxc-2.6.2+dfsg.1/src/browser/BrowserAction.cpp:129:14: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. unsigned char sk[crypto_box_SECRETKEYBYTES]; data/keepassxc-2.6.2+dfsg.1/src/browser/NativeMessageInstaller.cpp:316:21: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!scriptFile.open(QIODevice::WriteOnly)) { data/keepassxc-2.6.2+dfsg.1/src/cli/Analyze.cpp:51:19: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!hibpFile.open(QFile::ReadOnly)) { data/keepassxc-2.6.2+dfsg.1/src/cli/Merge.cpp:85:19: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!db2->open(fromDatabasePath, database->key(), &errorMessage, false)) { data/keepassxc-2.6.2+dfsg.1/src/cli/Utils.cpp:45:13: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). fd->open(stdout, QIODevice::WriteOnly); data/keepassxc-2.6.2+dfsg.1/src/cli/Utils.cpp:49:13: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). fd->open(stderr, QIODevice::WriteOnly); data/keepassxc-2.6.2+dfsg.1/src/cli/Utils.cpp:53:13: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). fd->open(stdin, QIODevice::ReadOnly); data/keepassxc-2.6.2+dfsg.1/src/cli/Utils.cpp:58:13: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). fd->open(fopen("nul", "w"), QIODevice::WriteOnly); data/keepassxc-2.6.2+dfsg.1/src/cli/Utils.cpp:58:18: [2] (misc) fopen: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). fd->open(fopen("nul", "w"), QIODevice::WriteOnly); data/keepassxc-2.6.2+dfsg.1/src/cli/Utils.cpp:60:13: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). fd->open(fopen("/dev/null", "w"), QIODevice::WriteOnly); data/keepassxc-2.6.2+dfsg.1/src/cli/Utils.cpp:60:18: [2] (misc) fopen: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). fd->open(fopen("/dev/null", "w"), QIODevice::WriteOnly); data/keepassxc-2.6.2+dfsg.1/src/cli/Utils.cpp:178:17: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (db->open(databaseFilename, compositeKey, &error, false)) { data/keepassxc-2.6.2+dfsg.1/src/core/Config.cpp:527:32: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). bool openResult = tmpFile->open(); data/keepassxc-2.6.2+dfsg.1/src/core/CsvParser.cpp:43:11: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). m_csv.open(QIODevice::ReadOnly); data/keepassxc-2.6.2+dfsg.1/src/core/CsvParser.cpp:82:13: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). device->open(QIODevice::ReadOnly); data/keepassxc-2.6.2+dfsg.1/src/core/Database.cpp:93:16: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). bool Database::open(QSharedPointer<const CompositeKey> key, QString* error, bool readOnly) data/keepassxc-2.6.2+dfsg.1/src/core/Database.cpp:99:12: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). return open(m_data.filePath, std::move(key), error, readOnly); data/keepassxc-2.6.2+dfsg.1/src/core/Database.cpp:113:16: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). bool Database::open(const QString& filePath, QSharedPointer<const CompositeKey> key, QString* error, bool readOnly) data/keepassxc-2.6.2+dfsg.1/src/core/Database.cpp:130:17: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!dbFile.open(QIODevice::ReadOnly)) { data/keepassxc-2.6.2+dfsg.1/src/core/Database.cpp:277:22: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (saveFile.open(QIODevice::WriteOnly)) { data/keepassxc-2.6.2+dfsg.1/src/core/Database.cpp:298:22: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (tempFile.open()) { data/keepassxc-2.6.2+dfsg.1/src/core/Database.cpp:400:10: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). file.open(QIODevice::ReadOnly); data/keepassxc-2.6.2+dfsg.1/src/core/Database.h:71:10: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). bool open(QSharedPointer<const CompositeKey> key, QString* error = nullptr, bool readOnly = false); data/keepassxc-2.6.2+dfsg.1/src/core/Database.h:72:10: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). bool open(const QString& filePath, data/keepassxc-2.6.2+dfsg.1/src/core/FileWatcher.cpp:136:14: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (file.open(QFile::ReadOnly)) { data/keepassxc-2.6.2+dfsg.1/src/core/IconDownloader.cpp:223:10: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). buff.open(QIODevice::ReadOnly); data/keepassxc-2.6.2+dfsg.1/src/core/PassphraseGenerator.cpp:65:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!file.open(QIODevice::ReadOnly | QIODevice::Text)) { data/keepassxc-2.6.2+dfsg.1/src/crypto/ssh/BinaryStream.cpp:34:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). m_buffer->open(QIODevice::ReadWrite); data/keepassxc-2.6.2+dfsg.1/src/crypto/ssh/OpenSSHKey.cpp:46:16: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). buffer.open(QBuffer::ReadOnly); data/keepassxc-2.6.2+dfsg.1/src/fdosecrets/FdoSecretsPlugin.cpp:122:18: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (proc.open(QFile::ReadOnly)) { data/keepassxc-2.6.2+dfsg.1/src/fdosecrets/GcryptMPI.cpp:30:9: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(secureBuf.get(), bytes.data(), bufLen); data/keepassxc-2.6.2+dfsg.1/src/fdosecrets/objects/DBusObject.cpp:51:19: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!proc.open(QFile::ReadOnly)) { data/keepassxc-2.6.2+dfsg.1/src/format/CsvExporter.cpp:29:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!file.open(QIODevice::WriteOnly | QIODevice::Truncate)) { data/keepassxc-2.6.2+dfsg.1/src/format/HtmlExporter.cpp:47:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!file.open(QIODevice::WriteOnly | QIODevice::Truncate)) { data/keepassxc-2.6.2+dfsg.1/src/format/Kdbx3Reader.cpp:75:23: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!cipherStream.open(QIODevice::ReadOnly)) { data/keepassxc-2.6.2+dfsg.1/src/format/Kdbx3Reader.cpp:89:23: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!hashedStream.open(QIODevice::ReadOnly)) { data/keepassxc-2.6.2+dfsg.1/src/format/Kdbx3Reader.cpp:102:28: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!ioCompressor->open(QIODevice::ReadOnly)) { data/keepassxc-2.6.2+dfsg.1/src/format/Kdbx3Writer.cpp:64:12: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). header.open(QIODevice::WriteOnly); data/keepassxc-2.6.2+dfsg.1/src/format/Kdbx3Writer.cpp:101:23: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!cipherStream.open(QIODevice::WriteOnly)) { data/keepassxc-2.6.2+dfsg.1/src/format/Kdbx3Writer.cpp:108:23: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!hashedStream.open(QIODevice::WriteOnly)) { data/keepassxc-2.6.2+dfsg.1/src/format/Kdbx3Writer.cpp:121:28: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!ioCompressor->open(QIODevice::WriteOnly)) { data/keepassxc-2.6.2+dfsg.1/src/format/Kdbx4Reader.cpp:81:21: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!hmacStream.open(QIODevice::ReadOnly)) { data/keepassxc-2.6.2+dfsg.1/src/format/Kdbx4Reader.cpp:96:23: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!cipherStream.open(QIODevice::ReadOnly)) { data/keepassxc-2.6.2+dfsg.1/src/format/Kdbx4Reader.cpp:110:28: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!ioCompressor->open(QIODevice::ReadOnly)) { data/keepassxc-2.6.2+dfsg.1/src/format/Kdbx4Reader.cpp:190:26: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!bufIoDevice.open(QIODevice::ReadOnly)) { data/keepassxc-2.6.2+dfsg.1/src/format/Kdbx4Reader.cpp:207:23: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). variantBuffer.open(QBuffer::ReadOnly); data/keepassxc-2.6.2+dfsg.1/src/format/Kdbx4Writer.cpp:71:16: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). header.open(QIODevice::WriteOnly); data/keepassxc-2.6.2+dfsg.1/src/format/Kdbx4Writer.cpp:122:27: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!hmacBlockStream->open(QIODevice::WriteOnly)) { data/keepassxc-2.6.2+dfsg.1/src/format/Kdbx4Writer.cpp:134:24: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!cipherStream->open(QIODevice::WriteOnly)) { data/keepassxc-2.6.2+dfsg.1/src/format/Kdbx4Writer.cpp:147:28: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!ioCompressor->open(QIODevice::WriteOnly)) { data/keepassxc-2.6.2+dfsg.1/src/format/Kdbx4Writer.cpp:250:9: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). buf.open(QIODevice::WriteOnly); data/keepassxc-2.6.2+dfsg.1/src/format/KdbxReader.cpp:75:18: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). headerStream.open(QIODevice::ReadOnly); data/keepassxc-2.6.2+dfsg.1/src/format/KdbxWriter.cpp:73:12: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). buffer.open(QIODevice::WriteOnly); data/keepassxc-2.6.2+dfsg.1/src/format/KdbxXmlReader.cpp:62:10: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). file.open(QIODevice::ReadOnly); data/keepassxc-2.6.2+dfsg.1/src/format/KdbxXmlReader.cpp:1134:12: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). buffer.open(QIODevice::ReadOnly); data/keepassxc-2.6.2+dfsg.1/src/format/KdbxXmlReader.cpp:1138:16: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). compressor.open(QIODevice::ReadOnly); data/keepassxc-2.6.2+dfsg.1/src/format/KdbxXmlWriter.cpp:70:10: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). file.open(QIODevice::WriteOnly | QIODevice::Truncate); data/keepassxc-2.6.2+dfsg.1/src/format/KdbxXmlWriter.cpp:173:12: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). buffer.open(QIODevice::WriteOnly); data/keepassxc-2.6.2+dfsg.1/src/format/KdbxXmlWriter.cpp:197:20: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). buffer.open(QIODevice::ReadWrite); data/keepassxc-2.6.2+dfsg.1/src/format/KdbxXmlWriter.cpp:201:24: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). compressor.open(QIODevice::WriteOnly); data/keepassxc-2.6.2+dfsg.1/src/format/KeePass1Reader.cpp:258:23: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!keyFile->open(QFile::ReadOnly)) { data/keepassxc-2.6.2+dfsg.1/src/format/KeePass1Reader.cpp:271:17: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!dbFile.open(QFile::ReadOnly)) { data/keepassxc-2.6.2+dfsg.1/src/format/KeePass1Reader.cpp:347:28: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!cipherStream->open(QIODevice::ReadOnly)) { data/keepassxc-2.6.2+dfsg.1/src/format/KeePass1Reader.cpp:365:23: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). cipherStream->open(QIODevice::ReadOnly); data/keepassxc-2.6.2+dfsg.1/src/format/KeePass2Reader.cpp:36:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!file.open(QFile::ReadOnly)) { data/keepassxc-2.6.2+dfsg.1/src/format/KeePass2Writer.cpp:39:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!file.open(QIODevice::WriteOnly | QIODevice::Truncate)) { data/keepassxc-2.6.2+dfsg.1/src/format/OpVaultReader.cpp:312:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!file.open(QIODevice::ReadOnly | QIODevice::Text)) { data/keepassxc-2.6.2+dfsg.1/src/format/OpVaultReader.cpp:383:14: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. unsigned char digest[digestSize]; data/keepassxc-2.6.2+dfsg.1/src/format/OpVaultReaderAttachments.cpp:42:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!file.open(QIODevice::ReadOnly)) { data/keepassxc-2.6.2+dfsg.1/src/gui/Application.cpp:173:28: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (stylesheetFile.open(QIODevice::ReadOnly | QIODevice::Text)) { data/keepassxc-2.6.2+dfsg.1/src/gui/DatabaseOpenWidget.cpp:208:21: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). bool ok = m_db->open(m_filename, databaseKey, &error, false); data/keepassxc-2.6.2+dfsg.1/src/gui/DatabaseWidget.cpp:440:17: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). totpDialog->open(); data/keepassxc-2.6.2+dfsg.1/src/gui/DatabaseWidget.cpp:463:22: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). setupTotpDialog->open(); data/keepassxc-2.6.2+dfsg.1/src/gui/DatabaseWidget.cpp:704:28: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). totpDisplayDialog->open(); data/keepassxc-2.6.2+dfsg.1/src/gui/DatabaseWidget.cpp:1631:13: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (db->open(database()->key(), &error)) { data/keepassxc-2.6.2+dfsg.1/src/gui/IconDownloaderDialog.cpp:84:9: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). open(); data/keepassxc-2.6.2+dfsg.1/src/gui/KeePass1OpenWidget.cpp:47:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!file.open(QIODevice::ReadOnly)) { data/keepassxc-2.6.2+dfsg.1/src/gui/MainWindow.cpp:919:18: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). aboutDialog->open(); data/keepassxc-2.6.2+dfsg.1/src/gui/csvImport/CsvImportWidget.cpp:225:12: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). buffer.open(QBuffer::ReadWrite); data/keepassxc-2.6.2+dfsg.1/src/gui/entry/EntryAttachmentsWidget.cpp:241:34: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). const bool saveOk = file.open(QIODevice::WriteOnly) && file.write(attachmentData) == attachmentData.size(); data/keepassxc-2.6.2+dfsg.1/src/gui/entry/EntryAttachmentsWidget.cpp:315:34: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). const bool readOk = file.open(QIODevice::ReadOnly) && Tools::readAllFromDevice(&file, data); data/keepassxc-2.6.2+dfsg.1/src/gui/entry/EntryAttachmentsWidget.cpp:345:34: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). const bool saveOk = tmpFile->open() && tmpFile->write(attachmentData) == attachmentData.size() && tmpFile->flush(); data/keepassxc-2.6.2+dfsg.1/src/gui/osutils/nixutils/NixUtils.cpp:91:26: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!desktopFile.open(QIODevice::WriteOnly)) { data/keepassxc-2.6.2+dfsg.1/src/gui/styles/base/BaseStyle.cpp:4237:28: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (baseStylesheetFile.open(QIODevice::ReadOnly | QIODevice::Text)) { data/keepassxc-2.6.2+dfsg.1/src/gui/styles/dark/DarkStyle.cpp:103:27: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (extStylesheetFile.open(QIODevice::ReadOnly | QIODevice::Text)) { data/keepassxc-2.6.2+dfsg.1/src/gui/styles/light/LightStyle.cpp:104:27: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (extStylesheetFile.open(QIODevice::ReadOnly | QIODevice::Text)) { data/keepassxc-2.6.2+dfsg.1/src/keeshare/SettingsWidgetKeeShare.cpp:156:10: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). file.open(QIODevice::ReadOnly); data/keepassxc-2.6.2+dfsg.1/src/keeshare/SettingsWidgetKeeShare.cpp:195:10: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). file.open(QIODevice::Truncate | QIODevice::WriteOnly); data/keepassxc-2.6.2+dfsg.1/src/keeshare/ShareExport.cpp:120:20: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). buffer.open(QIODevice::WriteOnly); data/keepassxc-2.6.2+dfsg.1/src/keeshare/ShareExport.cpp:131:36: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). const bool zipOpened = zip.open(QuaZip::mdCreate); data/keepassxc-2.6.2+dfsg.1/src/keeshare/ShareExport.cpp:140:47: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). const auto signatureOpened = file.open(QIODevice::WriteOnly, QuaZipNewInfo(KeeShare::signatureFileName())); data/keepassxc-2.6.2+dfsg.1/src/keeshare/ShareExport.cpp:167:40: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). const auto dbOpened = file.open(QIODevice::WriteOnly, QuaZipNewInfo(KeeShare::containerFileName())); data/keepassxc-2.6.2+dfsg.1/src/keeshare/ShareExport.cpp:200:38: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). const bool fileOpened = file.open(QIODevice::WriteOnly); data/keepassxc-2.6.2+dfsg.1/src/keeshare/ShareImport.cpp:137:18: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!zip.open(QuaZip::mdUnzip)) { data/keepassxc-2.6.2+dfsg.1/src/keeshare/ShareImport.cpp:154:23: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). signatureFile.open(QuaZipFile::ReadOnly); data/keepassxc-2.6.2+dfsg.1/src/keeshare/ShareImport.cpp:162:22: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). databaseFile.open(QuaZipFile::ReadOnly); data/keepassxc-2.6.2+dfsg.1/src/keeshare/ShareImport.cpp:166:16: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). buffer.open(QIODevice::ReadOnly); data/keepassxc-2.6.2+dfsg.1/src/keeshare/ShareImport.cpp:253:19: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!file.open(QIODevice::ReadOnly)) { data/keepassxc-2.6.2+dfsg.1/src/keeshare/ShareImport.cpp:260:16: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). buffer.open(QIODevice::ReadOnly); data/keepassxc-2.6.2+dfsg.1/src/keys/FileKey.cpp:142:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!file.open(QFile::ReadOnly)) { data/keepassxc-2.6.2+dfsg.1/src/keys/FileKey.cpp:195:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!file.open(QFile::WriteOnly)) { data/keepassxc-2.6.2+dfsg.1/src/keys/FileKey.cpp:248:14: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. std::memcpy(m_key, data.data(), std::min(SHA256_SIZE, data.size())); data/keepassxc-2.6.2+dfsg.1/src/keys/FileKey.cpp:319:14: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. std::memcpy(m_key, data.data(), std::min(SHA256_SIZE, data.size())); data/keepassxc-2.6.2+dfsg.1/src/keys/FileKey.cpp:354:10: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. std::memcpy(m_key, key.data(), std::min(SHA256_SIZE, key.size())); data/keepassxc-2.6.2+dfsg.1/src/keys/FileKey.cpp:379:10: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. std::memcpy(m_key, result.data(), std::min(SHA256_SIZE, result.size())); data/keepassxc-2.6.2+dfsg.1/src/keys/PasswordKey.cpp:67:10: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. std::memcpy(m_key, hash.data(), std::min(SHA256_SIZE, hash.size())); data/keepassxc-2.6.2+dfsg.1/src/keys/YkChallengeResponseKey.cpp:73:14: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. std::memcpy(m_key, key.data(), m_keySize); data/keepassxc-2.6.2+dfsg.1/src/sshagent/KeeAgentSettings.cpp:440:24: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!localFile.open(QIODevice::ReadOnly)) { data/keepassxc-2.6.2+dfsg.1/src/sshagent/SSHAgent.cpp:189:5: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(requestData, in.data(), in.length()); data/keepassxc-2.6.2+dfsg.1/src/sshagent/SSHAgent.cpp:202:13: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(out.data(), requestData, responseLength); data/keepassxc-2.6.2+dfsg.1/src/streams/HashedBlockStream.cpp:117:9: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(data + offset, m_buffer.constData() + m_bufferPos, bytesToCopy); data/keepassxc-2.6.2+dfsg.1/src/streams/HmacBlockStream.cpp:116:9: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(data + offset, m_buffer.constData() + m_bufferPos, static_cast<size_t>(bytesToCopy)); data/keepassxc-2.6.2+dfsg.1/src/streams/LayeredStream.cpp:37:21: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). bool LayeredStream::open(QIODevice::OpenMode mode) data/keepassxc-2.6.2+dfsg.1/src/streams/LayeredStream.cpp:68:27: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). return QIODevice::open(mode); data/keepassxc-2.6.2+dfsg.1/src/streams/LayeredStream.h:32:10: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). bool open(QIODevice::OpenMode mode) override; data/keepassxc-2.6.2+dfsg.1/src/streams/StoreDataStream.cpp:25:23: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). bool StoreDataStream::open(QIODevice::OpenMode mode) data/keepassxc-2.6.2+dfsg.1/src/streams/StoreDataStream.cpp:27:34: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). bool result = LayeredStream::open(mode); data/keepassxc-2.6.2+dfsg.1/src/streams/StoreDataStream.h:29:10: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). bool open(QIODevice::OpenMode mode) override; data/keepassxc-2.6.2+dfsg.1/src/streams/SymmetricCipherStream.cpp:60:29: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). bool SymmetricCipherStream::open(QIODevice::OpenMode mode) data/keepassxc-2.6.2+dfsg.1/src/streams/SymmetricCipherStream.cpp:62:46: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). return m_isInitialized && LayeredStream::open(mode); data/keepassxc-2.6.2+dfsg.1/src/streams/SymmetricCipherStream.cpp:113:9: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(data + offset, m_buffer.constData() + m_bufferPos, bytesToCopy); data/keepassxc-2.6.2+dfsg.1/src/streams/SymmetricCipherStream.h:38:10: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). bool open(QIODevice::OpenMode mode) override; data/keepassxc-2.6.2+dfsg.1/src/streams/qtiocompressor.cpp:327:22: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). bool QtIOCompressor::open(OpenMode mode) data/keepassxc-2.6.2+dfsg.1/src/streams/qtiocompressor.cpp:360:24: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (d->device->open(mode) == false) { data/keepassxc-2.6.2+dfsg.1/src/streams/qtiocompressor.cpp:414:23: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). return QIODevice::open(mode); data/keepassxc-2.6.2+dfsg.1/src/streams/qtiocompressor.h:64:10: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). bool open(OpenMode mode); data/keepassxc-2.6.2+dfsg.1/tests/FailDevice.cpp:28:18: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). bool FailDevice::open(QIODevice::OpenMode openMode) data/keepassxc-2.6.2+dfsg.1/tests/FailDevice.cpp:30:21: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). return QBuffer::open(openMode | QIODevice::Unbuffered); data/keepassxc-2.6.2+dfsg.1/tests/FailDevice.h:29:10: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). bool open(QIODevice::OpenMode openMode) override; data/keepassxc-2.6.2+dfsg.1/tests/TestBrowser.cpp:92:14: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. unsigned char pk[crypto_box_PUBLICKEYBYTES]; data/keepassxc-2.6.2+dfsg.1/tests/TestCli.cpp:72:9: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). fd->open(fopen("nul", "w"), QIODevice::WriteOnly); data/keepassxc-2.6.2+dfsg.1/tests/TestCli.cpp:72:14: [2] (misc) fopen: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). fd->open(fopen("nul", "w"), QIODevice::WriteOnly); data/keepassxc-2.6.2+dfsg.1/tests/TestCli.cpp:74:9: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). fd->open(fopen("/dev/null", "w"), QIODevice::WriteOnly); data/keepassxc-2.6.2+dfsg.1/tests/TestCli.cpp:74:14: [2] (misc) fopen: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). fd->open(fopen("/dev/null", "w"), QIODevice::WriteOnly); data/keepassxc-2.6.2+dfsg.1/tests/TestCli.cpp:102:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). m_stdout->open(QIODevice::ReadWrite); data/keepassxc-2.6.2+dfsg.1/tests/TestCli.cpp:106:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). m_stderr->open(QIODevice::ReadWrite); data/keepassxc-2.6.2+dfsg.1/tests/TestCli.cpp:110:14: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). m_stdin->open(QIODevice::ReadWrite); data/keepassxc-2.6.2+dfsg.1/tests/TestCli.cpp:135:18: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!db->open(m_dbFile->fileName(), key)) { data/keepassxc-2.6.2+dfsg.1/tests/TestCli.cpp:147:18: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!db->open(filename, key)) { data/keepassxc-2.6.2+dfsg.1/tests/TestCli.cpp:683:14: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). wordFile.open(); data/keepassxc-2.6.2+dfsg.1/tests/TestCli.cpp:699:19: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). smallWordFile.open(); data/keepassxc-2.6.2+dfsg.1/tests/TestCli.cpp:904:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). xmlOutput.open(QIODevice::WriteOnly); data/keepassxc-2.6.2+dfsg.1/tests/TestCli.cpp:921:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). xmlOutput.open(QIODevice::WriteOnly); data/keepassxc-2.6.2+dfsg.1/tests/TestCli.cpp:1215:13: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). tmpFile.open(); data/keepassxc-2.6.2+dfsg.1/tests/TestCli.cpp:1239:17: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). targetFile1.open(); data/keepassxc-2.6.2+dfsg.1/tests/TestCli.cpp:1243:17: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). targetFile2.open(); data/keepassxc-2.6.2+dfsg.1/tests/TestCli.cpp:1247:17: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). targetFile3.open(); data/keepassxc-2.6.2+dfsg.1/tests/TestCli.cpp:1273:16: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). sourceFile.open(); data/keepassxc-2.6.2+dfsg.1/tests/TestCli.cpp:1288:23: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). QVERIFY(mergedDb->open(targetFile1.fileName(), oldKey)); data/keepassxc-2.6.2+dfsg.1/tests/TestCli.cpp:1304:23: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). QVERIFY(mergedDb->open(targetFile2.fileName(), oldKey)); data/keepassxc-2.6.2+dfsg.1/tests/TestCli.cpp:1315:23: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). QVERIFY(mergedDb->open(targetFile2.fileName(), oldKey)); data/keepassxc-2.6.2+dfsg.1/tests/TestCli.cpp:1327:23: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). QVERIFY(mergedDb->open(targetFile3.fileName(), key)); data/keepassxc-2.6.2+dfsg.1/tests/TestCli.cpp:1484:14: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). fileCopy.open(); data/keepassxc-2.6.2+dfsg.1/tests/TestCli.cpp:1705:22: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). QVERIFY(tempFile.open()); data/keepassxc-2.6.2+dfsg.1/tests/TestCsvExporter.cpp:62:20: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). QVERIFY(buffer.open(QIODevice::ReadWrite)); data/keepassxc-2.6.2+dfsg.1/tests/TestCsvExporter.cpp:76:20: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). QVERIFY(buffer.open(QIODevice::ReadWrite)); data/keepassxc-2.6.2+dfsg.1/tests/TestCsvExporter.cpp:96:20: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). QVERIFY(buffer.open(QIODevice::ReadWrite)); data/keepassxc-2.6.2+dfsg.1/tests/TestCsvParser.cpp:33:19: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (not file->open()) { data/keepassxc-2.6.2+dfsg.1/tests/TestDatabase.cpp:49:19: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). bool ok = db->open(dbFileName, key); data/keepassxc-2.6.2+dfsg.1/tests/TestDatabase.cpp:69:19: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). bool ok = db->open(tempFile.fileName(), key, &error); data/keepassxc-2.6.2+dfsg.1/tests/TestDatabase.cpp:109:19: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). bool ok = db->open(tempFile.fileName(), key, &error); data/keepassxc-2.6.2+dfsg.1/tests/TestDatabase.cpp:130:17: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). QVERIFY(db->open(tempFile.fileName(), key, &error)); data/keepassxc-2.6.2+dfsg.1/tests/TestDatabase.cpp:140:17: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). QVERIFY(db->open(filename, key, nullptr, false)); data/keepassxc-2.6.2+dfsg.1/tests/TestDatabase.cpp:159:17: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). QVERIFY(db->open(filename, key, nullptr, false)); data/keepassxc-2.6.2+dfsg.1/tests/TestDatabase.cpp:175:17: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). QVERIFY(db->open(filename, key, nullptr, false)); data/keepassxc-2.6.2+dfsg.1/tests/TestDatabase.cpp:191:17: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). QVERIFY(db->open(filename, key, nullptr, false)); data/keepassxc-2.6.2+dfsg.1/tests/TestDatabase.cpp:203:18: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). afterCleanup.open(); data/keepassxc-2.6.2+dfsg.1/tests/TestHashedBlockStream.cpp:39:20: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). QVERIFY(buffer.open(QIODevice::ReadWrite)); data/keepassxc-2.6.2+dfsg.1/tests/TestHashedBlockStream.cpp:42:20: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). QVERIFY(writer.open(QIODevice::WriteOnly)); data/keepassxc-2.6.2+dfsg.1/tests/TestHashedBlockStream.cpp:45:20: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). QVERIFY(reader.open(QIODevice::ReadOnly)); data/keepassxc-2.6.2+dfsg.1/tests/TestHashedBlockStream.cpp:78:20: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). QVERIFY(buffer.open(QIODevice::WriteOnly)); data/keepassxc-2.6.2+dfsg.1/tests/TestHashedBlockStream.cpp:81:20: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). QVERIFY(writer.open(QIODevice::WriteOnly)); data/keepassxc-2.6.2+dfsg.1/tests/TestHashedBlockStream.cpp:93:24: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). QVERIFY(failDevice.open(QIODevice::WriteOnly)); data/keepassxc-2.6.2+dfsg.1/tests/TestHashedBlockStream.cpp:98:20: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). QVERIFY(writer.open(QIODevice::WriteOnly)); data/keepassxc-2.6.2+dfsg.1/tests/TestHibp.cpp:55:24: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). QVERIFY(hibpBuffer.open(QIODevice::ReadOnly)); data/keepassxc-2.6.2+dfsg.1/tests/TestHibp.cpp:68:24: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). QVERIFY(hibpBuffer.open(QIODevice::ReadOnly)); data/keepassxc-2.6.2+dfsg.1/tests/TestHibp.cpp:93:24: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). QVERIFY(hibpBuffer.open(QIODevice::ReadOnly)); data/keepassxc-2.6.2+dfsg.1/tests/TestKdbx2.cpp:93:12: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). buffer.open(QBuffer::ReadWrite); data/keepassxc-2.6.2+dfsg.1/tests/TestKdbx3.cpp:130:17: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). QVERIFY(db->open(filename, key, nullptr, false)); data/keepassxc-2.6.2+dfsg.1/tests/TestKdbx3.cpp:144:17: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). QVERIFY(db->open(filename, key, nullptr, false)); data/keepassxc-2.6.2+dfsg.1/tests/TestKdbx3.cpp:158:17: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). QVERIFY(db->open(filename, key, nullptr, false)); data/keepassxc-2.6.2+dfsg.1/tests/TestKdbx3.cpp:185:18: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). QVERIFY(!db->open(filename, key, nullptr, false)); data/keepassxc-2.6.2+dfsg.1/tests/TestKdbx4.cpp:165:12: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). buffer.open(QBuffer::ReadWrite); data/keepassxc-2.6.2+dfsg.1/tests/TestKdbx4.cpp:249:19: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). fileKeyBuffer.open(QBuffer::ReadOnly); data/keepassxc-2.6.2+dfsg.1/tests/TestKdbx4.cpp:303:12: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). buffer.open(QBuffer::ReadWrite); data/keepassxc-2.6.2+dfsg.1/tests/TestKdbx4.cpp:413:12: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). buffer.open(QBuffer::ReadWrite); data/keepassxc-2.6.2+dfsg.1/tests/TestKeePass1Reader.cpp:262:12: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). buffer.open(QIODevice::ReadWrite); data/keepassxc-2.6.2+dfsg.1/tests/TestKeePass2Format.cpp:69:24: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). m_kdbxTargetBuffer.open(QBuffer::ReadWrite); data/keepassxc-2.6.2+dfsg.1/tests/TestKeePass2Format.cpp:445:12: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). buffer.open(QIODevice::ReadWrite); data/keepassxc-2.6.2+dfsg.1/tests/TestKeePass2Format.cpp:563:24: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). QVERIFY(failDevice.open(QIODevice::WriteOnly)); data/keepassxc-2.6.2+dfsg.1/tests/TestKeePass2Format.cpp:583:12: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). buffer.open(QBuffer::ReadWrite); data/keepassxc-2.6.2+dfsg.1/tests/TestKeePass2Format.cpp:632:20: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). fileKeyBuffer1.open(QBuffer::ReadOnly); data/keepassxc-2.6.2+dfsg.1/tests/TestKeePass2Format.cpp:638:20: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). fileKeyBuffer2.open(QBuffer::ReadOnly); data/keepassxc-2.6.2+dfsg.1/tests/TestKeePass2Format.cpp:772:12: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). buffer.open(QBuffer::ReadWrite); data/keepassxc-2.6.2+dfsg.1/tests/TestKeys.cpp:91:17: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). QVERIFY(db->open(dbFilename, compositeKey, nullptr, false)); data/keepassxc-2.6.2+dfsg.1/tests/TestKeys.cpp:112:16: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). keyBuffer1.open(QBuffer::ReadWrite); data/keepassxc-2.6.2+dfsg.1/tests/TestKeys.cpp:118:16: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). keyBuffer2.open(QBuffer::ReadWrite); data/keepassxc-2.6.2+dfsg.1/tests/TestKeys.cpp:128:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). keyBuffer.open(QBuffer::ReadWrite); data/keepassxc-2.6.2+dfsg.1/tests/TestKeys.cpp:143:14: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). dbBuffer.open(QBuffer::ReadWrite); data/keepassxc-2.6.2+dfsg.1/tests/TestKeys.cpp:167:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). keyBuffer.open(QBuffer::ReadWrite); data/keepassxc-2.6.2+dfsg.1/tests/TestKeys.cpp:245:12: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). buffer.open(QBuffer::ReadWrite); data/keepassxc-2.6.2+dfsg.1/tests/TestSSHAgent.cpp:32:31: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). QVERIFY(m_agentSocketFile.open()); data/keepassxc-2.6.2+dfsg.1/tests/TestSharing.cpp:90:16: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). device.open(QIODevice::ReadWrite); data/keepassxc-2.6.2+dfsg.1/tests/TestSharing.cpp:98:16: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). device.open(QIODevice::ReadWrite); data/keepassxc-2.6.2+dfsg.1/tests/TestSymmetricCipher.cpp:136:16: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). buffer.open(QIODevice::WriteOnly); data/keepassxc-2.6.2+dfsg.1/tests/TestSymmetricCipher.cpp:137:24: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). QVERIFY(stream.open(QIODevice::WriteOnly)); data/keepassxc-2.6.2+dfsg.1/tests/TestSymmetricCipher.cpp:197:12: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). buffer.open(QIODevice::ReadOnly); data/keepassxc-2.6.2+dfsg.1/tests/TestSymmetricCipher.cpp:198:20: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). QVERIFY(stream.open(QIODevice::ReadOnly)); data/keepassxc-2.6.2+dfsg.1/tests/TestSymmetricCipher.cpp:478:12: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). buffer.open(QIODevice::ReadWrite); data/keepassxc-2.6.2+dfsg.1/tests/TestSymmetricCipher.cpp:482:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). streamEnc.open(QIODevice::WriteOnly); data/keepassxc-2.6.2+dfsg.1/tests/TestSymmetricCipher.cpp:491:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). streamDec.open(QIODevice::ReadOnly); data/keepassxc-2.6.2+dfsg.1/tests/TestSymmetricCipher.cpp:502:20: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). QVERIFY(buffer.open(QIODevice::WriteOnly)); data/keepassxc-2.6.2+dfsg.1/tests/TestSymmetricCipher.cpp:505:20: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). QVERIFY(writer.open(QIODevice::WriteOnly)); data/keepassxc-2.6.2+dfsg.1/tests/gui/TestGui.cpp:285:25: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). QVERIFY(tmpFile.open()); data/keepassxc-2.6.2+dfsg.1/tests/gui/TestGui.cpp:1198:21: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). QVERIFY(tmpFile.open()); data/keepassxc-2.6.2+dfsg.1/tests/gui/TestGui.cpp:1224:21: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). QVERIFY(tmpFile.open()); data/keepassxc-2.6.2+dfsg.1/tests/gui/TestGui.cpp:1532:22: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). QVERIFY(dbSaved->open(dbFileName, key, nullptr, false)); data/keepassxc-2.6.2+dfsg.1/tests/gui/TestGuiFdoSecrets.cpp:153:18: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). VERIFY(f.open(QFile::ReadOnly | QFile::Text)); data/keepassxc-2.6.2+dfsg.1/tests/gui/TestGuiFdoSecrets.cpp:209:26: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). QVERIFY(sourceDbFile.open(QIODevice::ReadOnly)); data/keepassxc-2.6.2+dfsg.1/tests/gui/TestGuiFdoSecrets.cpp:256:23: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). QVERIFY(m_dbFile->open()); data/keepassxc-2.6.2+dfsg.1/tests/gui/TestGuiFdoSecrets.cpp:709:21: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). QVERIFY(tmpFile.open()); data/keepassxc-2.6.2+dfsg.1/tests/util/TemporaryFile.cpp:36:9: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). tmp.open(); data/keepassxc-2.6.2+dfsg.1/tests/util/TemporaryFile.cpp:45:9: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). tmp.open(); data/keepassxc-2.6.2+dfsg.1/tests/util/TemporaryFile.cpp:55:21: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). bool TemporaryFile::open() data/keepassxc-2.6.2+dfsg.1/tests/util/TemporaryFile.cpp:57:19: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). return QFile::open(QIODevice::ReadWrite); data/keepassxc-2.6.2+dfsg.1/tests/util/TemporaryFile.cpp:63:10: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!open(QFile::WriteOnly | QFile::Truncate)) { data/keepassxc-2.6.2+dfsg.1/tests/util/TemporaryFile.cpp:68:20: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!otherFile.open(QFile::ReadOnly)) { data/keepassxc-2.6.2+dfsg.1/tests/util/TemporaryFile.h:34:18: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). using QFile::open; data/keepassxc-2.6.2+dfsg.1/tests/util/TemporaryFile.h:35:10: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). bool open(); data/keepassxc-2.6.2+dfsg.1/src/autotype/mac/AutoTypeMac.cpp:537:5: [1] (obsolete) usleep: This C routine is considered obsolete (as opposed to the shell command by the same name). The interaction of this function with SIGALRM and other timer functions such as sleep(), alarm(), setitimer(), and nanosleep() is unspecified (CWE-676). Use nanosleep(2) or setitimer(2) instead. usleep(25 * 1000); data/keepassxc-2.6.2+dfsg.1/src/autotype/mac/AutoTypeMac.cpp:544:5: [1] (obsolete) usleep: This C routine is considered obsolete (as opposed to the shell command by the same name). The interaction of this function with SIGALRM and other timer functions such as sleep(), alarm(), setitimer(), and nanosleep() is unspecified (CWE-676). Use nanosleep(2) or setitimer(2) instead. usleep(25 * 1000); data/keepassxc-2.6.2+dfsg.1/src/autotype/mac/AutoTypeMac.cpp:548:5: [1] (obsolete) usleep: This C routine is considered obsolete (as opposed to the shell command by the same name). The interaction of this function with SIGALRM and other timer functions such as sleep(), alarm(), setitimer(), and nanosleep() is unspecified (CWE-676). Use nanosleep(2) or setitimer(2) instead. usleep(25 * 1000); data/keepassxc-2.6.2+dfsg.1/src/cli/Estimate.cpp:53:32: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). int len = static_cast<int>(strlen(pwd)); data/keepassxc-2.6.2+dfsg.1/src/core/Endian.h:42:33: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). QByteArray ba = device->read(sizeof(SizedQInt)); data/keepassxc-2.6.2+dfsg.1/src/core/FileWatcher.cpp:139:31: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). hash.addData(file.read(m_fileChecksumSizeBytes)); data/keepassxc-2.6.2+dfsg.1/src/core/HibpOffline.cpp:40:33: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). const qint64 rc = input.read(hexSha1.data(), hexSha1.size()); data/keepassxc-2.6.2+dfsg.1/src/core/IconDownloader.cpp:227:23: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). return reader.read(); data/keepassxc-2.6.2+dfsg.1/src/core/IconDownloader.cpp:233:26: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). img = reader.read(); data/keepassxc-2.6.2+dfsg.1/src/core/Tools.cpp:149:37: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). qint64 readResult = device->read(buffer.data(), size); data/keepassxc-2.6.2+dfsg.1/src/core/Tools.cpp:166:34: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). readResult = device->read(result.data() + readBytes, result.size() - readBytes); data/keepassxc-2.6.2+dfsg.1/src/crypto/ssh/ASN1Key.cpp:32:16: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). stream.read(tag); data/keepassxc-2.6.2+dfsg.1/src/crypto/ssh/ASN1Key.cpp:35:16: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). stream.read(lenByte); data/keepassxc-2.6.2+dfsg.1/src/crypto/ssh/ASN1Key.cpp:40:24: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). stream.read(lenByte); data/keepassxc-2.6.2+dfsg.1/src/crypto/ssh/ASN1Key.cpp:44:24: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). stream.read(lenShort); data/keepassxc-2.6.2+dfsg.1/src/crypto/ssh/ASN1Key.cpp:47:24: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). stream.read(len); data/keepassxc-2.6.2+dfsg.1/src/crypto/ssh/ASN1Key.cpp:86:16: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). stream.read(keyType); data/keepassxc-2.6.2+dfsg.1/src/crypto/ssh/ASN1Key.cpp:103:16: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). stream.read(target); data/keepassxc-2.6.2+dfsg.1/src/crypto/ssh/BinaryStream.cpp:58:20: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). bool BinaryStream::read(char* ptr, qint64 size) data/keepassxc-2.6.2+dfsg.1/src/crypto/ssh/BinaryStream.cpp:70:34: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). qint64 nread = m_device->read(ptr + pos, size - pos); data/keepassxc-2.6.2+dfsg.1/src/crypto/ssh/BinaryStream.cpp:83:20: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). bool BinaryStream::read(QByteArray& ba) data/keepassxc-2.6.2+dfsg.1/src/crypto/ssh/BinaryStream.cpp:85:12: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). return read(ba.data(), ba.length()); data/keepassxc-2.6.2+dfsg.1/src/crypto/ssh/BinaryStream.cpp:88:20: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). bool BinaryStream::read(quint32& i) data/keepassxc-2.6.2+dfsg.1/src/crypto/ssh/BinaryStream.cpp:90:9: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). if (read(reinterpret_cast<char*>(&i), sizeof(i))) { data/keepassxc-2.6.2+dfsg.1/src/crypto/ssh/BinaryStream.cpp:98:20: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). bool BinaryStream::read(quint16& i) data/keepassxc-2.6.2+dfsg.1/src/crypto/ssh/BinaryStream.cpp:100:9: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). if (read(reinterpret_cast<char*>(&i), sizeof(i))) { data/keepassxc-2.6.2+dfsg.1/src/crypto/ssh/BinaryStream.cpp:108:20: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). bool BinaryStream::read(quint8& i) data/keepassxc-2.6.2+dfsg.1/src/crypto/ssh/BinaryStream.cpp:110:12: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). return read(reinterpret_cast<char*>(&i), sizeof(i)); data/keepassxc-2.6.2+dfsg.1/src/crypto/ssh/BinaryStream.cpp:117:10: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). if (!read(length)) { data/keepassxc-2.6.2+dfsg.1/src/crypto/ssh/BinaryStream.cpp:123:10: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). if (!read(ba.data(), ba.length())) { data/keepassxc-2.6.2+dfsg.1/src/crypto/ssh/BinaryStream.h:39:10: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). bool read(QByteArray& ba); data/keepassxc-2.6.2+dfsg.1/src/crypto/ssh/BinaryStream.h:40:10: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). bool read(quint32& i); data/keepassxc-2.6.2+dfsg.1/src/crypto/ssh/BinaryStream.h:41:10: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). bool read(quint16& i); data/keepassxc-2.6.2+dfsg.1/src/crypto/ssh/BinaryStream.h:42:10: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). bool read(quint8& i); data/keepassxc-2.6.2+dfsg.1/src/crypto/ssh/BinaryStream.h:56:10: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). bool read(char* ptr, qint64 len); data/keepassxc-2.6.2+dfsg.1/src/crypto/ssh/OpenSSHKey.cpp:449:21: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). if (!stream.read(magic)) { data/keepassxc-2.6.2+dfsg.1/src/crypto/ssh/OpenSSHKey.cpp:464:16: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). stream.read(numberOfKeys); data/keepassxc-2.6.2+dfsg.1/src/crypto/ssh/OpenSSHKey.cpp:550:22: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). optionStream.read(rounds); data/keepassxc-2.6.2+dfsg.1/src/crypto/ssh/OpenSSHKey.cpp:639:19: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). keyStream.read(checkInt1); data/keepassxc-2.6.2+dfsg.1/src/crypto/ssh/OpenSSHKey.cpp:640:19: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). keyStream.read(checkInt2); data/keepassxc-2.6.2+dfsg.1/src/crypto/ssh/blowfish.c:685:33: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). blf_key(&c, (u_int8_t *) key2, strlen(key2)); data/keepassxc-2.6.2+dfsg.1/src/fdosecrets/GcryptMPI.cpp:49:71: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). return MpiFromBytes(QByteArray::fromRawData(hex, static_cast<int>(strlen(hex) + 1)), secure, GCRYMPI_FMT_HEX); data/keepassxc-2.6.2+dfsg.1/src/format/Kdbx3Reader.cpp:80:41: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). QByteArray realStart = cipherStream.read(32); data/keepassxc-2.6.2+dfsg.1/src/format/Kdbx3Reader.cpp:142:44: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). QByteArray fieldIDArray = headerStream.read(1); data/keepassxc-2.6.2+dfsg.1/src/format/Kdbx3Reader.cpp:158:34: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). fieldData = headerStream.read(fieldLen); data/keepassxc-2.6.2+dfsg.1/src/format/Kdbx4Reader.cpp:62:39: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). QByteArray headerSha256 = device->read(32); data/keepassxc-2.6.2+dfsg.1/src/format/Kdbx4Reader.cpp:63:37: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). QByteArray headerHmac = device->read(32); data/keepassxc-2.6.2+dfsg.1/src/format/Kdbx4Reader.cpp:145:38: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). QByteArray fieldIDArray = device.read(1); data/keepassxc-2.6.2+dfsg.1/src/format/Kdbx4Reader.cpp:161:28: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). fieldData = device.read(fieldLen); data/keepassxc-2.6.2+dfsg.1/src/format/Kdbx4Reader.cpp:237:39: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). QByteArray fieldIDArray = device->read(1); data/keepassxc-2.6.2+dfsg.1/src/format/Kdbx4Reader.cpp:253:29: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). fieldData = device->read(fieldLen); data/keepassxc-2.6.2+dfsg.1/src/format/Kdbx4Reader.cpp:307:39: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). while (((fieldTypeArray = device->read(1)).size() == 1) data/keepassxc-2.6.2+dfsg.1/src/format/Kdbx4Reader.cpp:318:33: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). nameBytes = device->read(nameLen); data/keepassxc-2.6.2+dfsg.1/src/format/Kdbx4Reader.cpp:335:34: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). valueBytes = device->read(valueLen); data/keepassxc-2.6.2+dfsg.1/src/format/KeePass1Reader.cpp:120:30: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). m_masterSeed = m_device->read(16); data/keepassxc-2.6.2+dfsg.1/src/format/KeePass1Reader.cpp:126:32: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). m_encryptionIV = m_device->read(16); data/keepassxc-2.6.2+dfsg.1/src/format/KeePass1Reader.cpp:144:37: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). m_contentHashHeader = m_device->read(32); data/keepassxc-2.6.2+dfsg.1/src/format/KeePass1Reader.cpp:150:33: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). m_transformSeed = m_device->read(32); data/keepassxc-2.6.2+dfsg.1/src/format/KeePass1Reader.cpp:449:46: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). QByteArray fieldData = cipherStream->read(fieldSize); data/keepassxc-2.6.2+dfsg.1/src/format/KeePass1Reader.cpp:581:46: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). QByteArray fieldData = cipherStream->read(fieldSize); data/keepassxc-2.6.2+dfsg.1/src/format/KeePass1Reader.cpp:956:35: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). QByteArray data = device->read(32); data/keepassxc-2.6.2+dfsg.1/src/format/KeePass1Reader.cpp:965:35: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). QByteArray data = device->read(64); data/keepassxc-2.6.2+dfsg.1/src/format/OpData01.cpp:67:9: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). if (read != 16) { data/keepassxc-2.6.2+dfsg.1/src/format/OpVaultReaderAttachments.cpp:48:34: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). QByteArray magicBytes = file.read(7); data/keepassxc-2.6.2+dfsg.1/src/format/OpVaultReaderAttachments.cpp:54:31: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). QByteArray version = file.read(1); data/keepassxc-2.6.2+dfsg.1/src/format/OpVaultReaderAttachments.cpp:59:47: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). const QByteArray& metadataLenBytes = file.read(2); data/keepassxc-2.6.2+dfsg.1/src/format/OpVaultReaderAttachments.cpp:70:30: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). int junkBytesRead = file.read(2).size(); data/keepassxc-2.6.2+dfsg.1/src/format/OpVaultReaderAttachments.cpp:76:43: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). const QByteArray& iconLenBytes = file.read(4); data/keepassxc-2.6.2+dfsg.1/src/format/OpVaultReaderAttachments.cpp:89:41: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). QByteArray metadataJsonBytes = file.read(metadataLen); data/keepassxc-2.6.2+dfsg.1/src/format/OpVaultReaderAttachments.cpp:95:33: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). QByteArray iconBytes = file.read(iconLen); data/keepassxc-2.6.2+dfsg.1/src/gui/Application.cpp:243:16: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). Q_UNUSED(::read(unixSignalSocket[1], &buf, sizeof(buf))); data/keepassxc-2.6.2+dfsg.1/src/proxy/NativeMessagingProxy.cpp:61:31: [1] (buffer) getchar: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). length |= getchar() << (i * 8); data/keepassxc-2.6.2+dfsg.1/src/proxy/NativeMessagingProxy.cpp:67:32: [1] (buffer) getchar: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). msg.append(getchar()); data/keepassxc-2.6.2+dfsg.1/src/sshagent/SSHAgent.cpp:333:19: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). if (!response.read(responseType) || responseType != SSH_AGENT_IDENTITIES_ANSWER) { data/keepassxc-2.6.2+dfsg.1/src/sshagent/SSHAgent.cpp:339:19: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). if (!response.read(nKeys)) { data/keepassxc-2.6.2+dfsg.1/src/streams/HashedBlockStream.cpp:138:37: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). QByteArray hash = m_baseDevice->read(32); data/keepassxc-2.6.2+dfsg.1/src/streams/HashedBlockStream.cpp:163:30: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). m_buffer = m_baseDevice->read(m_blockSize); data/keepassxc-2.6.2+dfsg.1/src/streams/HmacBlockStream.cpp:131:37: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). QByteArray hmac = m_baseDevice->read(32); data/keepassxc-2.6.2+dfsg.1/src/streams/HmacBlockStream.cpp:138:47: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). QByteArray blockSizeBytes = m_baseDevice->read(4); data/keepassxc-2.6.2+dfsg.1/src/streams/HmacBlockStream.cpp:151:30: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). m_buffer = m_baseDevice->read(blockSize); data/keepassxc-2.6.2+dfsg.1/src/streams/LayeredStream.cpp:74:26: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). return m_baseDevice->read(data, maxSize); data/keepassxc-2.6.2+dfsg.1/src/streams/SymmetricCipherStream.cpp:134:36: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). int readResult = m_baseDevice->read(newData.data(), newData.size()); data/keepassxc-2.6.2+dfsg.1/src/streams/qtiocompressor.cpp:338:24: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). const bool both = (read && write); data/keepassxc-2.6.2+dfsg.1/src/streams/qtiocompressor.cpp:339:28: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). const bool neither = !(read || write); data/keepassxc-2.6.2+dfsg.1/src/streams/qtiocompressor.cpp:349:13: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). if (read && !(deviceMode & ReadOnly)) { data/keepassxc-2.6.2+dfsg.1/src/streams/qtiocompressor.cpp:387:9: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). if (read) { data/keepassxc-2.6.2+dfsg.1/src/streams/qtiocompressor.cpp:525:48: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). qint64 bytesAvailable = d->device->read(reinterpret_cast<char *>(d->buffer), d->bufferSize); data/keepassxc-2.6.2+dfsg.1/src/streams/qtiocompressor.cpp:615:9: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). if (strlen(versionString) < 3) data/keepassxc-2.6.2+dfsg.1/tests/TestHashedBlockStream.cpp:50:21: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). QCOMPARE(reader.read(17), data.left(16)); data/keepassxc-2.6.2+dfsg.1/tests/TestHashedBlockStream.cpp:58:21: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). QCOMPARE(reader.read(5), data.left(5)); data/keepassxc-2.6.2+dfsg.1/tests/TestHashedBlockStream.cpp:59:21: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). QCOMPARE(reader.read(5), data.mid(5, 5)); data/keepassxc-2.6.2+dfsg.1/tests/TestHashedBlockStream.cpp:60:21: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). QCOMPARE(reader.read(1).size(), 0); data/keepassxc-2.6.2+dfsg.1/tests/TestHashedBlockStream.cpp:68:21: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). QCOMPARE(reader.read(20), data.left(20)); data/keepassxc-2.6.2+dfsg.1/tests/TestHashedBlockStream.cpp:69:21: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). QCOMPARE(reader.read(1).size(), 0); data/keepassxc-2.6.2+dfsg.1/tests/TestSymmetricCipher.cpp:200:21: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). QCOMPARE(stream.read(10), plainText.left(10)); data/keepassxc-2.6.2+dfsg.1/tests/TestSymmetricCipher.cpp:203:21: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). QCOMPARE(stream.read(20), plainText.left(20)); data/keepassxc-2.6.2+dfsg.1/tests/TestSymmetricCipher.cpp:206:21: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). QCOMPARE(stream.read(16), plainText.left(16)); data/keepassxc-2.6.2+dfsg.1/tests/TestSymmetricCipher.cpp:209:21: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). QCOMPARE(stream.read(100), plainText); data/keepassxc-2.6.2+dfsg.1/tests/util/TemporaryFile.cpp:74:31: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). while (!(data = otherFile.read(1024)).isEmpty()) { ANALYSIS SUMMARY: Hits = 334 Lines analyzed = 111544 in approximately 2.77 seconds (40208 lines/second) Physical Source Lines of Code (SLOC) = 78581 Hits@level = [0] 3 [1] 99 [2] 233 [3] 2 [4] 0 [5] 0 Hits@level+ = [0+] 337 [1+] 334 [2+] 235 [3+] 2 [4+] 0 [5+] 0 Hits/KSLOC@level+ = [0+] 4.28857 [1+] 4.25039 [2+] 2.99054 [3+] 0.0254514 [4+] 0 [5+] 0 Dot directories skipped = 1 (--followdotdir overrides) Minimum risk level = 1 Not every hit is necessarily a security vulnerability. There may be other security vulnerabilities; review your code! See 'Secure Programming HOWTO' (https://dwheeler.com/secure-programs) for more information.