Flawfinder version 2.0.10, (C) 2001-2019 David A. Wheeler.
Number of rules (primarily dangerous function names) in C/C++ ruleset: 223
Examining data/kiwix-2.0.5/src/about.cpp
Examining data/kiwix-2.0.5/src/about.h
Examining data/kiwix-2.0.5/src/blobbuffer.cpp
Examining data/kiwix-2.0.5/src/blobbuffer.h
Examining data/kiwix-2.0.5/src/contentmanager.cpp
Examining data/kiwix-2.0.5/src/contentmanager.h
Examining data/kiwix-2.0.5/src/contentmanagerside.cpp
Examining data/kiwix-2.0.5/src/contentmanagerside.h
Examining data/kiwix-2.0.5/src/contentmanagerview.cpp
Examining data/kiwix-2.0.5/src/contentmanagerview.h
Examining data/kiwix-2.0.5/src/contenttypefilter.cpp
Examining data/kiwix-2.0.5/src/contenttypefilter.h
Examining data/kiwix-2.0.5/src/findinpagebar.cpp
Examining data/kiwix-2.0.5/src/findinpagebar.h
Examining data/kiwix-2.0.5/src/fullscreennotification.cpp
Examining data/kiwix-2.0.5/src/fullscreennotification.h
Examining data/kiwix-2.0.5/src/fullscreenwindow.cpp
Examining data/kiwix-2.0.5/src/fullscreenwindow.h
Examining data/kiwix-2.0.5/src/kconstants.h
Examining data/kiwix-2.0.5/src/kiwixapp.cpp
Examining data/kiwix-2.0.5/src/kiwixapp.h
Examining data/kiwix-2.0.5/src/klistwidgetitem.cpp
Examining data/kiwix-2.0.5/src/klistwidgetitem.h
Examining data/kiwix-2.0.5/src/kprofile.cpp
Examining data/kiwix-2.0.5/src/kprofile.h
Examining data/kiwix-2.0.5/src/library.cpp
Examining data/kiwix-2.0.5/src/library.h
Examining data/kiwix-2.0.5/src/localkiwixserver.cpp
Examining data/kiwix-2.0.5/src/localkiwixserver.h
Examining data/kiwix-2.0.5/src/main.cpp
Examining data/kiwix-2.0.5/src/mainmenu.cpp
Examining data/kiwix-2.0.5/src/mainmenu.h
Examining data/kiwix-2.0.5/src/mainwindow.cpp
Examining data/kiwix-2.0.5/src/mainwindow.h
Examining data/kiwix-2.0.5/src/menuproxystyle.h
Examining data/kiwix-2.0.5/src/opdsrequestmanager.cpp
Examining data/kiwix-2.0.5/src/opdsrequestmanager.h
Examining data/kiwix-2.0.5/src/readinglistbar.cpp
Examining data/kiwix-2.0.5/src/readinglistbar.h
Examining data/kiwix-2.0.5/src/searchbar.cpp
Examining data/kiwix-2.0.5/src/searchbar.h
Examining data/kiwix-2.0.5/src/settingsmanager.cpp
Examining data/kiwix-2.0.5/src/settingsmanager.h
Examining data/kiwix-2.0.5/src/settingsmanagerview.cpp
Examining data/kiwix-2.0.5/src/settingsmanagerview.h
Examining data/kiwix-2.0.5/src/static_content.cpp
Examining data/kiwix-2.0.5/src/static_content.h
Examining data/kiwix-2.0.5/src/suggestionlistworker.cpp
Examining data/kiwix-2.0.5/src/suggestionlistworker.h
Examining data/kiwix-2.0.5/src/tabbar.cpp
Examining data/kiwix-2.0.5/src/tabbar.h
Examining data/kiwix-2.0.5/src/topwidget.cpp
Examining data/kiwix-2.0.5/src/topwidget.h
Examining data/kiwix-2.0.5/src/translation.cpp
Examining data/kiwix-2.0.5/src/translation.h
Examining data/kiwix-2.0.5/src/urlschemehandler.cpp
Examining data/kiwix-2.0.5/src/urlschemehandler.h
Examining data/kiwix-2.0.5/src/webpage.cpp
Examining data/kiwix-2.0.5/src/webpage.h
Examining data/kiwix-2.0.5/src/webview.cpp
Examining data/kiwix-2.0.5/src/webview.h
Examining data/kiwix-2.0.5/src/zimview.cpp
Examining data/kiwix-2.0.5/src/zimview.h
Examining data/kiwix-2.0.5/subprojects/QtSingleApplication/src/qtlocalpeer.cpp
Examining data/kiwix-2.0.5/subprojects/QtSingleApplication/src/qtlocalpeer.h
Examining data/kiwix-2.0.5/subprojects/QtSingleApplication/src/qtlockedfile.cpp
Examining data/kiwix-2.0.5/subprojects/QtSingleApplication/src/qtlockedfile.h
Examining data/kiwix-2.0.5/subprojects/QtSingleApplication/src/qtlockedfile_unix.cpp
Examining data/kiwix-2.0.5/subprojects/QtSingleApplication/src/qtlockedfile_win.cpp
Examining data/kiwix-2.0.5/subprojects/QtSingleApplication/src/qtsingleapplication.cpp
Examining data/kiwix-2.0.5/subprojects/QtSingleApplication/src/qtsingleapplication.h
Examining data/kiwix-2.0.5/subprojects/QtSingleApplication/src/qtsinglecoreapplication.cpp
Examining data/kiwix-2.0.5/subprojects/QtSingleApplication/src/qtsinglecoreapplication.h
FINAL RESULTS:
data/kiwix-2.0.5/src/contentmanagerview.cpp:25:17: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
contentFile.open(QIODevice::ReadOnly);
data/kiwix-2.0.5/src/kiwixapp.cpp:72:15: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
styleFile.open(QIODevice::ReadOnly);
data/kiwix-2.0.5/src/localkiwixserver.cpp:15:15: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
styleFile.open(QIODevice::ReadOnly);
data/kiwix-2.0.5/src/searchbar.cpp:74:15: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
styleFile.open(QIODevice::ReadOnly);
data/kiwix-2.0.5/src/settingsmanagerview.cpp:19:17: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
contentFile.open(QIODevice::ReadOnly);
data/kiwix-2.0.5/src/translation.cpp:34:15: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
if (!file.open(QIODevice::ReadOnly)) {
data/kiwix-2.0.5/subprojects/QtSingleApplication/src/qtlocalpeer.cpp:108:14: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
lockFile.open(QIODevice::ReadWrite);
data/kiwix-2.0.5/subprojects/QtSingleApplication/src/qtlockedfile.cpp:123:20: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
bool QtLockedFile::open(OpenMode mode)
data/kiwix-2.0.5/subprojects/QtSingleApplication/src/qtlockedfile.cpp:129:19: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
return QFile::open(mode);
data/kiwix-2.0.5/subprojects/QtSingleApplication/src/qtlockedfile.h:76:10: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
bool open(OpenMode mode);
data/kiwix-2.0.5/subprojects/QtSingleApplication/src/qtlocalpeer.cpp:167:28: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
res &= (socket.read(qstrlen(ack)) == ack);
ANALYSIS SUMMARY:
Hits = 11
Lines analyzed = 5880 in approximately 0.65 seconds (9039 lines/second)
Physical Source Lines of Code (SLOC) = 4363
Hits@level = [0] 0 [1] 1 [2] 10 [3] 0 [4] 0 [5] 0
Hits@level+ = [0+] 11 [1+] 11 [2+] 10 [3+] 0 [4+] 0 [5+] 0
Hits/KSLOC@level+ = [0+] 2.5212 [1+] 2.5212 [2+] 2.292 [3+] 0 [4+] 0 [5+] 0
Dot directories skipped = 2 (--followdotdir overrides)
Minimum risk level = 1
Not every hit is necessarily a security vulnerability.
There may be other security vulnerabilities; review your code!
See 'Secure Programming HOWTO'
(https://dwheeler.com/secure-programs) for more information.