Flawfinder version 2.0.10, (C) 2001-2019 David A. Wheeler. Number of rules (primarily dangerous function names) in C/C++ ruleset: 223 Examining data/kget-20.08.2/plasma/engine/kgetengine.cpp Examining data/kget-20.08.2/plasma/engine/kgetengine.h Examining data/kget-20.08.2/plasma/applet/barapplet/kgetbarapplet.h Examining data/kget-20.08.2/plasma/applet/barapplet/kgetbarapplet_p.h Examining data/kget-20.08.2/plasma/applet/barapplet/kgetbarapplet.cpp Examining data/kget-20.08.2/plasma/applet/piechart/kgetpiechart.h Examining data/kget-20.08.2/plasma/applet/piechart/kgetpiechart_p.h Examining data/kget-20.08.2/plasma/applet/piechart/kgetpiechart.cpp Examining data/kget-20.08.2/plasma/applet/panelbar/kgetpanelbar_p.h Examining data/kget-20.08.2/plasma/applet/panelbar/kgetpanelbar.h Examining data/kget-20.08.2/plasma/applet/panelbar/kgetpanelbar.cpp Examining data/kget-20.08.2/plasma/applet/common/kgetappletutils.cpp Examining data/kget-20.08.2/plasma/applet/common/kgetapplet.cpp Examining data/kget-20.08.2/plasma/applet/common/kgetappletutils.h Examining data/kget-20.08.2/plasma/applet/common/kgetapplet.h Examining data/kget-20.08.2/plasma/runner/kgetrunner.cpp Examining data/kget-20.08.2/plasma/runner/kgetrunner.h Examining data/kget-20.08.2/ui/linkview/kget_linkview.h Examining data/kget-20.08.2/ui/linkview/kget_sortfilterproxymodel.cpp Examining data/kget-20.08.2/ui/linkview/kget_linkview.cpp Examining data/kget-20.08.2/ui/linkview/kget_sortfilterproxymodel.h Examining data/kget-20.08.2/ui/transferdetails.h Examining data/kget-20.08.2/ui/transfersettingsdialog.h Examining data/kget-20.08.2/ui/tray.h Examining data/kget-20.08.2/ui/viewscontainer.cpp Examining data/kget-20.08.2/ui/renamefile.cpp Examining data/kget-20.08.2/ui/groupsettingsdialog.h Examining data/kget-20.08.2/ui/transfersview.h Examining data/kget-20.08.2/ui/tray.cpp Examining data/kget-20.08.2/ui/metalinkcreator/urlwidget.cpp Examining data/kget-20.08.2/ui/metalinkcreator/filedlg.h Examining data/kget-20.08.2/ui/metalinkcreator/generalwidget.h Examining data/kget-20.08.2/ui/metalinkcreator/filehandler.cpp Examining data/kget-20.08.2/ui/metalinkcreator/metalinkcreator.cpp Examining data/kget-20.08.2/ui/metalinkcreator/metalinkcreator.h Examining data/kget-20.08.2/ui/metalinkcreator/filehandler.h Examining data/kget-20.08.2/ui/metalinkcreator/localemodels.cpp Examining data/kget-20.08.2/ui/metalinkcreator/dragdlg.h Examining data/kget-20.08.2/ui/metalinkcreator/filedlg.cpp Examining data/kget-20.08.2/ui/metalinkcreator/metalinker.h Examining data/kget-20.08.2/ui/metalinkcreator/metalinker.cpp Examining data/kget-20.08.2/ui/metalinkcreator/urlwidget.h Examining data/kget-20.08.2/ui/metalinkcreator/generalwidget.cpp Examining data/kget-20.08.2/ui/metalinkcreator/localemodels.h Examining data/kget-20.08.2/ui/metalinkcreator/dragdlg.cpp Examining data/kget-20.08.2/ui/transferdetails.cpp Examining data/kget-20.08.2/ui/contextmenu.cpp Examining data/kget-20.08.2/ui/transfersview.cpp Examining data/kget-20.08.2/ui/viewscontainer.h Examining data/kget-20.08.2/ui/renamefile.h Examining data/kget-20.08.2/ui/transfersviewdelegate.cpp Examining data/kget-20.08.2/ui/newtransferdialog.cpp Examining data/kget-20.08.2/ui/contextmenu.h Examining data/kget-20.08.2/ui/transfersettingsdialog.cpp Examining data/kget-20.08.2/ui/droptarget.h Examining data/kget-20.08.2/ui/signaturedlg.cpp Examining data/kget-20.08.2/ui/verificationdialog.cpp Examining data/kget-20.08.2/ui/newtransferdialog.h Examining data/kget-20.08.2/ui/verificationdialog.h Examining data/kget-20.08.2/ui/transfersviewdelegate.h Examining data/kget-20.08.2/ui/droptarget.cpp Examining data/kget-20.08.2/ui/mirror/mirrorsettings.h Examining data/kget-20.08.2/ui/mirror/mirrormodel.cpp Examining data/kget-20.08.2/ui/mirror/mirrorsettings.cpp Examining data/kget-20.08.2/ui/mirror/mirrormodel.h Examining data/kget-20.08.2/ui/history/transferhistorycategorizeddelegate.cpp Examining data/kget-20.08.2/ui/history/transferhistoryitemdelegate.h Examining data/kget-20.08.2/ui/history/transferhistorycategorizedview.cpp Examining data/kget-20.08.2/ui/history/transferhistorycategorizedview.h Examining data/kget-20.08.2/ui/history/transferhistoryitemdelegate.cpp Examining data/kget-20.08.2/ui/history/rangetreewidget.h Examining data/kget-20.08.2/ui/history/transferhistory.h Examining data/kget-20.08.2/ui/history/rangetreewidget.cpp Examining data/kget-20.08.2/ui/history/transferhistorycategorizeddelegate.h Examining data/kget-20.08.2/ui/history/transferhistory.cpp Examining data/kget-20.08.2/ui/groupsettingsdialog.cpp Examining data/kget-20.08.2/ui/signaturedlg.h Examining data/kget-20.08.2/mainwindow.h Examining data/kget-20.08.2/kget_macro.h Examining data/kget-20.08.2/conf/autopastemodel.h Examining data/kget-20.08.2/conf/verificationpreferences.cpp Examining data/kget-20.08.2/conf/dlgwebinterface.h Examining data/kget-20.08.2/conf/preferencesdialog.h Examining data/kget-20.08.2/conf/transfersgroupwidget.h Examining data/kget-20.08.2/conf/preferencesdialog.cpp Examining data/kget-20.08.2/conf/transfersgrouptree.h Examining data/kget-20.08.2/conf/pluginselector.cpp Examining data/kget-20.08.2/conf/autopastemodel.cpp Examining data/kget-20.08.2/conf/pluginselector.h Examining data/kget-20.08.2/conf/verificationpreferences.h Examining data/kget-20.08.2/conf/integrationpreferences.h Examining data/kget-20.08.2/conf/transfersgrouptree.cpp Examining data/kget-20.08.2/conf/integrationpreferences.cpp Examining data/kget-20.08.2/conf/dlgwebinterface.cpp Examining data/kget-20.08.2/conf/transfersgroupwidget.cpp Examining data/kget-20.08.2/tests/filedeletertest.cpp Examining data/kget-20.08.2/tests/schedulertest.h Examining data/kget-20.08.2/tests/metalinktest.cpp Examining data/kget-20.08.2/tests/testtransfers.h Examining data/kget-20.08.2/tests/filedeletertest.h Examining data/kget-20.08.2/tests/testtransfers.cpp Examining data/kget-20.08.2/tests/testkget.h Examining data/kget-20.08.2/tests/verifiertest.h Examining data/kget-20.08.2/tests/testkget.cpp Examining data/kget-20.08.2/tests/metalinktest.h Examining data/kget-20.08.2/tests/verifiertest.cpp Examining data/kget-20.08.2/tests/schedulertest.cpp Examining data/kget-20.08.2/transfer-plugins/metalink/metalink.h Examining data/kget-20.08.2/transfer-plugins/metalink/metalinkhttp.cpp Examining data/kget-20.08.2/transfer-plugins/metalink/metalinkxml.cpp Examining data/kget-20.08.2/transfer-plugins/metalink/dlgmetalink.cpp Examining data/kget-20.08.2/transfer-plugins/metalink/fileselectiondlg.cpp Examining data/kget-20.08.2/transfer-plugins/metalink/metalink.cpp Examining data/kget-20.08.2/transfer-plugins/metalink/dlgmetalink.h Examining data/kget-20.08.2/transfer-plugins/metalink/metalinkhttp.h Examining data/kget-20.08.2/transfer-plugins/metalink/metalinkxml.h Examining data/kget-20.08.2/transfer-plugins/metalink/metalinkfactory.h Examining data/kget-20.08.2/transfer-plugins/metalink/abstractmetalink.h Examining data/kget-20.08.2/transfer-plugins/metalink/abstractmetalink.cpp Examining data/kget-20.08.2/transfer-plugins/metalink/metalinkfactory.cpp Examining data/kget-20.08.2/transfer-plugins/metalink/fileselectiondlg.h Examining data/kget-20.08.2/transfer-plugins/contentfetch/scriptconfigadaptor.h Examining data/kget-20.08.2/transfer-plugins/contentfetch/contentfetchfactory.h Examining data/kget-20.08.2/transfer-plugins/contentfetch/dlgcontentfetchsettingwidget.cpp Examining data/kget-20.08.2/transfer-plugins/contentfetch/scriptconfigadaptor.cpp Examining data/kget-20.08.2/transfer-plugins/contentfetch/script.cpp Examining data/kget-20.08.2/transfer-plugins/contentfetch/dlgscriptediting.cpp Examining data/kget-20.08.2/transfer-plugins/contentfetch/contentfetchfactory.cpp Examining data/kget-20.08.2/transfer-plugins/contentfetch/dlgscriptediting.h Examining data/kget-20.08.2/transfer-plugins/contentfetch/scriptdownloadengine.h Examining data/kget-20.08.2/transfer-plugins/contentfetch/scriptdownloadengine.cpp Examining data/kget-20.08.2/transfer-plugins/contentfetch/contentfetch.cpp Examining data/kget-20.08.2/transfer-plugins/contentfetch/dlgcontentfetchsettingwidget.h Examining data/kget-20.08.2/transfer-plugins/contentfetch/contentfetch.h Examining data/kget-20.08.2/transfer-plugins/contentfetch/script.h Examining data/kget-20.08.2/transfer-plugins/bittorrent/btdatasource.cpp Examining data/kget-20.08.2/transfer-plugins/bittorrent/btsettingswidget.cpp Examining data/kget-20.08.2/transfer-plugins/bittorrent/bttransfer.h Examining data/kget-20.08.2/transfer-plugins/bittorrent/scandlg.cpp Examining data/kget-20.08.2/transfer-plugins/bittorrent/btdetailswidget.cpp Examining data/kget-20.08.2/transfer-plugins/bittorrent/bttransfer.cpp Examining data/kget-20.08.2/transfer-plugins/bittorrent/btchunkselector.h Examining data/kget-20.08.2/transfer-plugins/bittorrent/bttransferfactory.h Examining data/kget-20.08.2/transfer-plugins/bittorrent/scandlg.h Examining data/kget-20.08.2/transfer-plugins/bittorrent/btsettingswidget.h Examining data/kget-20.08.2/transfer-plugins/bittorrent/bttransferfactory.cpp Examining data/kget-20.08.2/transfer-plugins/bittorrent/btdetailswidget.h Examining data/kget-20.08.2/transfer-plugins/bittorrent/btdatasource.h Examining data/kget-20.08.2/transfer-plugins/bittorrent/btcache.h Examining data/kget-20.08.2/transfer-plugins/bittorrent/btchunkselector.cpp Examining data/kget-20.08.2/transfer-plugins/bittorrent/advanceddetails/btadvanceddetailswidget.h Examining data/kget-20.08.2/transfer-plugins/bittorrent/advanceddetails/monitor.cpp Examining data/kget-20.08.2/transfer-plugins/bittorrent/advanceddetails/trackermodel.cpp Examining data/kget-20.08.2/transfer-plugins/bittorrent/advanceddetails/fileview.h Examining data/kget-20.08.2/transfer-plugins/bittorrent/advanceddetails/peerview.cpp Examining data/kget-20.08.2/transfer-plugins/bittorrent/advanceddetails/torrentfiletreemodel.cpp Examining data/kget-20.08.2/transfer-plugins/bittorrent/advanceddetails/chunkdownloadview.h Examining data/kget-20.08.2/transfer-plugins/bittorrent/advanceddetails/iwfilelistmodel.h Examining data/kget-20.08.2/transfer-plugins/bittorrent/advanceddetails/chunkdownloadmodel.cpp Examining data/kget-20.08.2/transfer-plugins/bittorrent/advanceddetails/iwfiletreemodel.h Examining data/kget-20.08.2/transfer-plugins/bittorrent/advanceddetails/webseedstab.h Examining data/kget-20.08.2/transfer-plugins/bittorrent/advanceddetails/torrentfilelistmodel.cpp Examining data/kget-20.08.2/transfer-plugins/bittorrent/advanceddetails/torrentfilelistmodel.h Examining data/kget-20.08.2/transfer-plugins/bittorrent/advanceddetails/webseedsmodel.cpp Examining data/kget-20.08.2/transfer-plugins/bittorrent/advanceddetails/trackerview.h Examining data/kget-20.08.2/transfer-plugins/bittorrent/advanceddetails/monitor.h Examining data/kget-20.08.2/transfer-plugins/bittorrent/advanceddetails/trackerview.cpp Examining data/kget-20.08.2/transfer-plugins/bittorrent/advanceddetails/torrentfiletreemodel.h Examining data/kget-20.08.2/transfer-plugins/bittorrent/advanceddetails/torrentfilemodel.cpp Examining data/kget-20.08.2/transfer-plugins/bittorrent/advanceddetails/peerviewmodel.cpp Examining data/kget-20.08.2/transfer-plugins/bittorrent/advanceddetails/torrentfilemodel.h Examining data/kget-20.08.2/transfer-plugins/bittorrent/advanceddetails/webseedsmodel.h Examining data/kget-20.08.2/transfer-plugins/bittorrent/advanceddetails/peerviewmodel.h Examining data/kget-20.08.2/transfer-plugins/bittorrent/advanceddetails/btadvanceddetailswidget.cpp Examining data/kget-20.08.2/transfer-plugins/bittorrent/advanceddetails/peerview.h Examining data/kget-20.08.2/transfer-plugins/bittorrent/advanceddetails/webseedstab.cpp Examining data/kget-20.08.2/transfer-plugins/bittorrent/advanceddetails/chunkdownloadview.cpp Examining data/kget-20.08.2/transfer-plugins/bittorrent/advanceddetails/trackermodel.h Examining data/kget-20.08.2/transfer-plugins/bittorrent/advanceddetails/iwfiletreemodel.cpp Examining data/kget-20.08.2/transfer-plugins/bittorrent/advanceddetails/chunkdownloadmodel.h Examining data/kget-20.08.2/transfer-plugins/bittorrent/advanceddetails/fileview.cpp Examining data/kget-20.08.2/transfer-plugins/bittorrent/advanceddetails/iwfilelistmodel.cpp Examining data/kget-20.08.2/transfer-plugins/bittorrent/bttransferhandler.h Examining data/kget-20.08.2/transfer-plugins/bittorrent/bttransferhandler.cpp Examining data/kget-20.08.2/transfer-plugins/bittorrent/btcache.cpp Examining data/kget-20.08.2/transfer-plugins/multisegmentkio/transfermultisegkio.cpp Examining data/kget-20.08.2/transfer-plugins/multisegmentkio/transfermultisegkiofactory.cpp Examining data/kget-20.08.2/transfer-plugins/multisegmentkio/dlgmultisegkio.h Examining data/kget-20.08.2/transfer-plugins/multisegmentkio/dlgmultisegkio.cpp Examining data/kget-20.08.2/transfer-plugins/multisegmentkio/multisegkiodatasource.h Examining data/kget-20.08.2/transfer-plugins/multisegmentkio/transfermultisegkio.h Examining data/kget-20.08.2/transfer-plugins/multisegmentkio/multisegkiodatasource.cpp Examining data/kget-20.08.2/transfer-plugins/multisegmentkio/segment.h Examining data/kget-20.08.2/transfer-plugins/multisegmentkio/segment.cpp Examining data/kget-20.08.2/transfer-plugins/multisegmentkio/transfermultisegkiofactory.h Examining data/kget-20.08.2/transfer-plugins/kio/transferKioFactory.cpp Examining data/kget-20.08.2/transfer-plugins/kio/transferKioFactory.h Examining data/kget-20.08.2/transfer-plugins/kio/transferKio.cpp Examining data/kget-20.08.2/transfer-plugins/kio/transferKio.h Examining data/kget-20.08.2/transfer-plugins/mirrorsearch/dlgmirrorsearch.cpp Examining data/kget-20.08.2/transfer-plugins/mirrorsearch/mirrorsearchtransferdatasource.h Examining data/kget-20.08.2/transfer-plugins/mirrorsearch/mirrorsearchfactory.cpp Examining data/kget-20.08.2/transfer-plugins/mirrorsearch/mirrorsearchfactory.h Examining data/kget-20.08.2/transfer-plugins/mirrorsearch/mirrorsearchtransferdatasource.cpp Examining data/kget-20.08.2/transfer-plugins/mirrorsearch/dlgmirrorsearch.h Examining data/kget-20.08.2/transfer-plugins/mirrorsearch/mirrors.h Examining data/kget-20.08.2/transfer-plugins/mirrorsearch/mirrors.cpp Examining data/kget-20.08.2/transfer-plugins/mmsthreads/mmstransfer.cpp Examining data/kget-20.08.2/transfer-plugins/mmsthreads/mmsthread.h Examining data/kget-20.08.2/transfer-plugins/mmsthreads/mmstransfer.h Examining data/kget-20.08.2/transfer-plugins/mmsthreads/mmsdownload.cpp Examining data/kget-20.08.2/transfer-plugins/mmsthreads/mmsthread.cpp Examining data/kget-20.08.2/transfer-plugins/mmsthreads/mmsdownload.h Examining data/kget-20.08.2/transfer-plugins/mmsthreads/dlgmms.cpp Examining data/kget-20.08.2/transfer-plugins/mmsthreads/dlgmms.h Examining data/kget-20.08.2/transfer-plugins/mmsthreads/mmstransferfactory.h Examining data/kget-20.08.2/transfer-plugins/mmsthreads/mmstransferfactory.cpp Examining data/kget-20.08.2/transfer-plugins/checksumsearch/checksumsearchtransferdatasource.h Examining data/kget-20.08.2/transfer-plugins/checksumsearch/checksumsearchfactory.cpp Examining data/kget-20.08.2/transfer-plugins/checksumsearch/checksumsearchfactory.h Examining data/kget-20.08.2/transfer-plugins/checksumsearch/dlgchecksumsearch.h Examining data/kget-20.08.2/transfer-plugins/checksumsearch/dlgchecksumsearch.cpp Examining data/kget-20.08.2/transfer-plugins/checksumsearch/checksumsearchtransferdatasource.cpp Examining data/kget-20.08.2/transfer-plugins/checksumsearch/checksumsearch.h Examining data/kget-20.08.2/transfer-plugins/checksumsearch/checksumsearch.cpp Examining data/kget-20.08.2/mainwindow.cpp Examining data/kget-20.08.2/dbus/dbuskgetwrapper.cpp Examining data/kget-20.08.2/dbus/dbustransferwrapper.h Examining data/kget-20.08.2/dbus/dbusverifierwrapper.cpp Examining data/kget-20.08.2/dbus/dbustransferwrapper.cpp Examining data/kget-20.08.2/dbus/dbusverifierwrapper.h Examining data/kget-20.08.2/dbus/dbuskgetwrapper.h Examining data/kget-20.08.2/main.cpp Examining data/kget-20.08.2/core/kgetkjobadapter.cpp Examining data/kget-20.08.2/core/urlchecker.cpp Examining data/kget-20.08.2/core/transfergrouphandler.cpp Examining data/kget-20.08.2/core/signature.h Examining data/kget-20.08.2/core/transfergroup.h Examining data/kget-20.08.2/core/keydownloader.cpp Examining data/kget-20.08.2/core/transfertreeselectionmodel.h Examining data/kget-20.08.2/core/filedeleter.cpp Examining data/kget-20.08.2/core/transfergroup.cpp Examining data/kget-20.08.2/core/transfergrouphandler.h Examining data/kget-20.08.2/core/verificationthread.cpp Examining data/kget-20.08.2/core/scheduler.cpp Examining data/kget-20.08.2/core/transfergroupscheduler.h Examining data/kget-20.08.2/core/jobqueue.cpp Examining data/kget-20.08.2/core/transfer.cpp Examining data/kget-20.08.2/core/transferhistorystore.cpp Examining data/kget-20.08.2/core/filemodel.h Examining data/kget-20.08.2/core/verificationdelegate.cpp Examining data/kget-20.08.2/core/signaturethread.cpp Examining data/kget-20.08.2/core/handler.cpp Examining data/kget-20.08.2/core/transfercontainer.cpp Examining data/kget-20.08.2/core/linkimporter.h Examining data/kget-20.08.2/core/transferhandler.h Examining data/kget-20.08.2/core/kgetglobaljob.h Examining data/kget-20.08.2/core/signature.cpp Examining data/kget-20.08.2/core/download.cpp Examining data/kget-20.08.2/core/bitset.cpp Examining data/kget-20.08.2/core/jobqueue.h Examining data/kget-20.08.2/core/verificationmodel.h Examining data/kget-20.08.2/core/filedeleter_p.h Examining data/kget-20.08.2/core/transferhistorystore_sqlite_p.h Examining data/kget-20.08.2/core/verificationthread.h Examining data/kget-20.08.2/core/urlchecker.h Examining data/kget-20.08.2/core/verificationmodel.cpp Examining data/kget-20.08.2/core/transferhistorystore_xml_p.h Examining data/kget-20.08.2/core/handler.h Examining data/kget-20.08.2/core/job.cpp Examining data/kget-20.08.2/core/bitset.h Examining data/kget-20.08.2/core/scheduler.h Examining data/kget-20.08.2/core/mostlocalurl.h Examining data/kget-20.08.2/core/transferhistorystore_xml.cpp Examining data/kget-20.08.2/core/keydownloader.h Examining data/kget-20.08.2/core/transferhistorystore.h Examining data/kget-20.08.2/core/kgetglobaljob.cpp Examining data/kget-20.08.2/core/linkimporter.cpp Examining data/kget-20.08.2/core/plugin/transferfactory.h Examining data/kget-20.08.2/core/plugin/transferfactory.cpp Examining data/kget-20.08.2/core/plugin/plugin.cpp Examining data/kget-20.08.2/core/plugin/plugin.h Examining data/kget-20.08.2/core/transferhistorystore_sqlite.cpp Examining data/kget-20.08.2/core/transferdatasource.h Examining data/kget-20.08.2/core/signaturethread.h Examining data/kget-20.08.2/core/basedialog.cpp Examining data/kget-20.08.2/core/transfercontainer.h Examining data/kget-20.08.2/core/transferhandler.cpp Examining data/kget-20.08.2/core/kuiserverjobs.h Examining data/kget-20.08.2/core/kgetkjobadapter.h Examining data/kget-20.08.2/core/kget.h Examining data/kget-20.08.2/core/verifier_p.h Examining data/kget-20.08.2/core/datasourcefactory.h Examining data/kget-20.08.2/core/transfertreemodel.cpp Examining data/kget-20.08.2/core/verifier.cpp Examining data/kget-20.08.2/core/transferdatasource.cpp Examining data/kget-20.08.2/core/signature_p.h Examining data/kget-20.08.2/core/urlchecker_p.h Examining data/kget-20.08.2/core/verifier.h Examining data/kget-20.08.2/core/transfertreeselectionmodel.cpp Examining data/kget-20.08.2/core/kget.cpp Examining data/kget-20.08.2/core/download.h Examining data/kget-20.08.2/core/filedeleter.h Examining data/kget-20.08.2/core/transfertreemodel.h Examining data/kget-20.08.2/core/basedialog.h Examining data/kget-20.08.2/core/mostlocalurl.cpp Examining data/kget-20.08.2/core/datasourcefactory.cpp Examining data/kget-20.08.2/core/transfer.h Examining data/kget-20.08.2/core/kuiserverjobs.cpp Examining data/kget-20.08.2/core/filemodel.cpp Examining data/kget-20.08.2/core/job.h Examining data/kget-20.08.2/core/transfergroupscheduler.cpp Examining data/kget-20.08.2/core/verificationdelegate.h Examining data/kget-20.08.2/extensions/konqueror/kget_plug_in.h Examining data/kget-20.08.2/extensions/konqueror/kget_plug_in.cpp Examining data/kget-20.08.2/extensions/webinterface/httpserver.cpp Examining data/kget-20.08.2/extensions/webinterface/httpserver.h FINAL RESULTS: data/kget-20.08.2/core/bitset.cpp:38:2: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(data,d,num_bytes); data/kget-20.08.2/core/datasourcefactory.cpp:222:29: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). m_putJob = KIO::open(m_dest, QIODevice::WriteOnly | QIODevice::ReadOnly); data/kget-20.08.2/core/datasourcefactory.cpp:223:38: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). connect(m_putJob, SIGNAL(open(KIO::Job*)), this, SLOT(slotOpen(KIO::Job*))); data/kget-20.08.2/core/download.cpp:52:30: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!torrentFile.open(QIODevice::WriteOnly | QIODevice::Text)) {} data/kget-20.08.2/core/kget.cpp:515:43: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (job->data().isEmpty() || !tmpFile.open()) { data/kget-20.08.2/core/kget.cpp:595:16: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if ( !file.open( QIODevice::WriteOnly ) ) data/kget-20.08.2/core/linkimporter.cpp:92:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!file.open(QIODevice::ReadOnly | QIODevice::Text)) data/kget-20.08.2/core/signature.cpp:88:12: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). qFile->open(QIODevice::ReadOnly); data/kget-20.08.2/core/transferhistorystore_sqlite.cpp:40:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (sql().open()) { data/kget-20.08.2/core/transferhistorystore_sqlite.cpp:84:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (sql().open()) { data/kget-20.08.2/core/transferhistorystore_sqlite.cpp:117:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (sql().open()) { data/kget-20.08.2/core/transferhistorystore_xml.cpp:64:14: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (file.open(QFile::WriteOnly | QFile::Truncate)) { data/kget-20.08.2/core/transferhistorystore_xml.cpp:118:14: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (file.open(QFile::WriteOnly | QFile::Truncate)) { data/kget-20.08.2/core/verificationthread.cpp:150:19: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!file.open(QIODevice::ReadOnly)) data/kget-20.08.2/core/verifier.cpp:406:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!file.open(QIODevice::ReadOnly)) data/kget-20.08.2/core/verifier.cpp:424:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char buffer[1024]; data/kget-20.08.2/core/verifier.cpp:458:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!file.open(QIODevice::ReadOnly)) data/kget-20.08.2/extensions/webinterface/httpserver.cpp:195:37: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (path.isEmpty() || !file.open(QIODevice::ReadOnly)) { data/kget-20.08.2/tests/filedeletertest.cpp:41:19: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). QVERIFY(file1.open()); data/kget-20.08.2/tests/testtransfers.cpp:601:18: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). QVERIFY(file.open(QIODevice::ReadOnly)); data/kget-20.08.2/tests/verifiertest.cpp:28:16: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!file.open(QIODevice::WriteOnly | QIODevice::Truncate)) { data/kget-20.08.2/transfer-plugins/bittorrent/advanceddetails/fileview.cpp:66:112: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). open_action = context_menu->addAction(QIcon::fromTheme("document-open"),i18nc("Open file", "Open"),this,SLOT(open())); data/kget-20.08.2/transfer-plugins/bittorrent/advanceddetails/fileview.cpp:220:17: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). void FileView::open() data/kget-20.08.2/transfer-plugins/bittorrent/advanceddetails/fileview.h:75:8: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). void open(); data/kget-20.08.2/transfer-plugins/bittorrent/btcache.h:119:22: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). virtual void open() {} data/kget-20.08.2/transfer-plugins/bittorrent/bttransfer.cpp:422:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!file.open(QIODevice::ReadOnly)) { data/kget-20.08.2/transfer-plugins/checksumsearch/checksumsearchtransferdatasource.cpp:110:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!file.open(QIODevice::WriteOnly | QIODevice::Truncate)) { data/kget-20.08.2/transfer-plugins/checksumsearch/checksumsearchtransferdatasource.cpp:170:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!file.open(QIODevice::ReadOnly)) { data/kget-20.08.2/transfer-plugins/mmsthreads/mmsdownload.cpp:210:10: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). file.open(QIODevice::WriteOnly); data/kget-20.08.2/transfer-plugins/mmsthreads/mmsdownload.cpp:221:10: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). file.open(QIODevice::ReadOnly); data/kget-20.08.2/transfer-plugins/mmsthreads/mmsthread.cpp:38:10: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). file.open(QIODevice::ReadWrite); data/kget-20.08.2/transfer-plugins/mmsthreads/mmsthread.cpp:52:17: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char data[var]; data/kget-20.08.2/transfer-plugins/mmsthreads/mmsthread.cpp:62:17: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char data[1024]; data/kget-20.08.2/ui/metalinkcreator/metalinker.cpp:1164:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!file.open(QIODevice::ReadOnly)) data/kget-20.08.2/ui/metalinkcreator/metalinker.cpp:1228:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!file.open(QIODevice::WriteOnly)) { data/kget-20.08.2/ui/signaturedlg.cpp:112:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!file.open(QIODevice::ReadOnly)) { data/kget-20.08.2/core/job.h:108:14: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). void read(QDomNode * n); data/kget-20.08.2/core/verifier.cpp:102:33: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). QByteArray data = file->read(PARTSIZE); data/kget-20.08.2/core/verifier.cpp:122:33: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). QByteArray data = file->read(dataRest); data/kget-20.08.2/core/verifier.cpp:427:22: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). while ((len=file.read(reinterpret_cast<char*>(buffer), sizeof(buffer))) > 0) data/kget-20.08.2/transfer-plugins/contentfetch/scriptconfigadaptor.cpp:65:31: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). QVariant ScriptConfigAdaptor::read(const QString& group, data/kget-20.08.2/transfer-plugins/contentfetch/scriptconfigadaptor.h:33:18: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). QVariant read(const QString &group, const QString &key, ANALYSIS SUMMARY: Hits = 42 Lines analyzed = 53433 in approximately 1.52 seconds (35067 lines/second) Physical Source Lines of Code (SLOC) = 36297 Hits@level = [0] 0 [1] 6 [2] 36 [3] 0 [4] 0 [5] 0 Hits@level+ = [0+] 42 [1+] 42 [2+] 36 [3+] 0 [4+] 0 [5+] 0 Hits/KSLOC@level+ = [0+] 1.15712 [1+] 1.15712 [2+] 0.991818 [3+] 0 [4+] 0 [5+] 0 Dot directories skipped = 1 (--followdotdir overrides) Minimum risk level = 1 Not every hit is necessarily a security vulnerability. There may be other security vulnerabilities; review your code! See 'Secure Programming HOWTO' (https://dwheeler.com/secure-programs) for more information.