Flawfinder version 2.0.10, (C) 2001-2019 David A. Wheeler.
Number of rules (primarily dangerous function names) in C/C++ ruleset: 223
Examining data/korganizer-20.08.2/korgac/koalarmclient.h
Examining data/korganizer-20.08.2/korgac/alarmdockwindow.h
Examining data/korganizer-20.08.2/korgac/korgacmain.cpp
Examining data/korganizer-20.08.2/korgac/tests/testalarmdlg.cpp
Examining data/korganizer-20.08.2/korgac/koalarmclient.cpp
Examining data/korganizer-20.08.2/korgac/alarmdialog.cpp
Examining data/korganizer-20.08.2/korgac/mailclient.h
Examining data/korganizer-20.08.2/korgac/alarmdockwindow.cpp
Examining data/korganizer-20.08.2/korgac/alarmdialog.h
Examining data/korganizer-20.08.2/korgac/mailclient.cpp
Examining data/korganizer-20.08.2/src/korganizer_part.h
Examining data/korganizer-20.08.2/src/kowindowlist.h
Examining data/korganizer-20.08.2/src/actionmanager.cpp
Examining data/korganizer-20.08.2/src/widgets/navigatorbar.cpp
Examining data/korganizer-20.08.2/src/widgets/kitemiconcheckcombo.h
Examining data/korganizer-20.08.2/src/widgets/kitemiconcheckcombo.cpp
Examining data/korganizer-20.08.2/src/widgets/kdatenavigator.cpp
Examining data/korganizer-20.08.2/src/widgets/navigatorbar.h
Examining data/korganizer-20.08.2/src/widgets/kdatenavigator.h
Examining data/korganizer-20.08.2/src/kodialogmanager.h
Examining data/korganizer-20.08.2/src/kodialogmanager.cpp
Examining data/korganizer-20.08.2/src/kocore.h
Examining data/korganizer-20.08.2/src/autotests/koeventpopupmenutest.h
Examining data/korganizer-20.08.2/src/autotests/koeventpopupmenutest.cpp
Examining data/korganizer-20.08.2/src/autotests/testkodaymatrix_us.h
Examining data/korganizer-20.08.2/src/autotests/testkodaymatrix_us.cpp
Examining data/korganizer-20.08.2/src/autotests/testkodaymatrix.h
Examining data/korganizer-20.08.2/src/autotests/testkodaymatrix.cpp
Examining data/korganizer-20.08.2/src/korgmigrateapplication.h
Examining data/korganizer-20.08.2/src/helper/searchcollectionhelper.cpp
Examining data/korganizer-20.08.2/src/helper/searchcollectionhelper.h
Examining data/korganizer-20.08.2/src/koglobals.cpp
Examining data/korganizer-20.08.2/src/datenavigator.cpp
Examining data/korganizer-20.08.2/src/aboutdata.h
Examining data/korganizer-20.08.2/src/kohelper.cpp
Examining data/korganizer-20.08.2/src/tests/korgplugins.cpp
Examining data/korganizer-20.08.2/src/tests/testkcmdesignerfields.cpp
Examining data/korganizer-20.08.2/src/pimmessagebox.h
Examining data/korganizer-20.08.2/src/userfeedback/userfeedbackmanager.h
Examining data/korganizer-20.08.2/src/userfeedback/korganizeruserfeedbackprovider.h
Examining data/korganizer-20.08.2/src/userfeedback/korganizeruserfeedbackprovider.cpp
Examining data/korganizer-20.08.2/src/userfeedback/userfeedbackmanager.cpp
Examining data/korganizer-20.08.2/src/manageshowcollectionproperties.h
Examining data/korganizer-20.08.2/src/datechecker.h
Examining data/korganizer-20.08.2/src/dialog/koeventviewerdialog.cpp
Examining data/korganizer-20.08.2/src/dialog/searchdialog.cpp
Examining data/korganizer-20.08.2/src/dialog/koeventviewerdialog.h
Examining data/korganizer-20.08.2/src/dialog/filtereditdialog.h
Examining data/korganizer-20.08.2/src/dialog/searchdialog.h
Examining data/korganizer-20.08.2/src/dialog/filtereditdialog.cpp
Examining data/korganizer-20.08.2/src/koglobals.h
Examining data/korganizer-20.08.2/src/kowindowlist.cpp
Examining data/korganizer-20.08.2/src/collectiongeneralpage.cpp
Examining data/korganizer-20.08.2/src/kocorehelper.h
Examining data/korganizer-20.08.2/src/koapp.cpp
Examining data/korganizer-20.08.2/src/calendarview.cpp
Examining data/korganizer-20.08.2/src/prefs/koprefsdialog.h
Examining data/korganizer-20.08.2/src/prefs/koprefs.cpp
Examining data/korganizer-20.08.2/src/prefs/koprefsdialog.cpp
Examining data/korganizer-20.08.2/src/prefs/koprefs.h
Examining data/korganizer-20.08.2/src/kocheckableproxymodel.cpp
Examining data/korganizer-20.08.2/src/calendarview.h
Examining data/korganizer-20.08.2/src/kohelper.h
Examining data/korganizer-20.08.2/src/plugininterface/korganizerplugininterface.h
Examining data/korganizer-20.08.2/src/plugininterface/korganizerplugininterface.cpp
Examining data/korganizer-20.08.2/src/koeventpopupmenu.h
Examining data/korganizer-20.08.2/src/koviewmanager.h
Examining data/korganizer-20.08.2/src/datenavigatorcontainer.cpp
Examining data/korganizer-20.08.2/src/kocorehelper.cpp
Examining data/korganizer-20.08.2/src/datenavigatorcontainer.h
Examining data/korganizer-20.08.2/src/koeventview.h
Examining data/korganizer-20.08.2/src/kocheckableproxymodel.h
Examining data/korganizer-20.08.2/src/korgmigrateapplication.cpp
Examining data/korganizer-20.08.2/src/koviewmanager.cpp
Examining data/korganizer-20.08.2/src/korganizer_options.h
Examining data/korganizer-20.08.2/src/main.cpp
Examining data/korganizer-20.08.2/src/koeventpopupmenu.cpp
Examining data/korganizer-20.08.2/src/datenavigator.h
Examining data/korganizer-20.08.2/src/views/collectionview/reparentingmodel.h
Examining data/korganizer-20.08.2/src/views/collectionview/calendardelegate.cpp
Examining data/korganizer-20.08.2/src/views/collectionview/quickview.h
Examining data/korganizer-20.08.2/src/views/collectionview/autotests/modeltest.cpp
Examining data/korganizer-20.08.2/src/views/collectionview/autotests/reparentingmodeltest.cpp
Examining data/korganizer-20.08.2/src/views/collectionview/autotests/modeltest.h
Examining data/korganizer-20.08.2/src/views/collectionview/quickview.cpp
Examining data/korganizer-20.08.2/src/views/collectionview/calendardelegate.h
Examining data/korganizer-20.08.2/src/views/collectionview/reparentingmodel.cpp
Examining data/korganizer-20.08.2/src/views/monthview/monthview.cpp
Examining data/korganizer-20.08.2/src/views/monthview/monthview.h
Examining data/korganizer-20.08.2/src/views/multiagendaview/multiagendaview.cpp
Examining data/korganizer-20.08.2/src/views/multiagendaview/multiagendaview.h
Examining data/korganizer-20.08.2/src/views/timelineview/kotimelineview.h
Examining data/korganizer-20.08.2/src/views/timelineview/kotimelineview.cpp
Examining data/korganizer-20.08.2/src/views/agendaview/koagendaview.h
Examining data/korganizer-20.08.2/src/views/agendaview/koagendaview.cpp
Examining data/korganizer-20.08.2/src/views/whatsnextview/kowhatsnextview.h
Examining data/korganizer-20.08.2/src/views/whatsnextview/kowhatsnextview.cpp
Examining data/korganizer-20.08.2/src/views/todoview/kotodoview.cpp
Examining data/korganizer-20.08.2/src/views/todoview/kotodoview.h
Examining data/korganizer-20.08.2/src/views/journalview/kojournalview.cpp
Examining data/korganizer-20.08.2/src/views/journalview/kojournalview.h
Examining data/korganizer-20.08.2/src/views/listview/kolistview.cpp
Examining data/korganizer-20.08.2/src/views/listview/kolistview.h
Examining data/korganizer-20.08.2/src/actionmanager.h
Examining data/korganizer-20.08.2/src/akonadicollectionview.h
Examining data/korganizer-20.08.2/src/kcmdesignerfields.h
Examining data/korganizer-20.08.2/src/interfaces/korganizer/baseview.h
Examining data/korganizer-20.08.2/src/interfaces/korganizer/mainwindow.h
Examining data/korganizer-20.08.2/src/interfaces/korganizer/corehelper.h
Examining data/korganizer-20.08.2/src/interfaces/korganizer/calendarviewbase.h
Examining data/korganizer-20.08.2/src/interfaces/korganizer/mainwindow.cpp
Examining data/korganizer-20.08.2/src/interfaces/korganizer/baseview.cpp
Examining data/korganizer-20.08.2/src/interfaces/korganizer/part.h
Examining data/korganizer-20.08.2/src/datechecker.cpp
Examining data/korganizer-20.08.2/src/kodaymatrix.cpp
Examining data/korganizer-20.08.2/src/kodaymatrix.h
Examining data/korganizer-20.08.2/src/kontactplugin/korganizer/todosummarywidget.cpp
Examining data/korganizer-20.08.2/src/kontactplugin/korganizer/kcmtodosummary.h
Examining data/korganizer-20.08.2/src/kontactplugin/korganizer/apptsummarywidget.h
Examining data/korganizer-20.08.2/src/kontactplugin/korganizer/korganizerplugin.h
Examining data/korganizer-20.08.2/src/kontactplugin/korganizer/autotests/summaryeventtest.h
Examining data/korganizer-20.08.2/src/kontactplugin/korganizer/autotests/summaryeventtest.cpp
Examining data/korganizer-20.08.2/src/kontactplugin/korganizer/todoplugin.cpp
Examining data/korganizer-20.08.2/src/kontactplugin/korganizer/todoplugin.h
Examining data/korganizer-20.08.2/src/kontactplugin/korganizer/korg_uniqueapp.cpp
Examining data/korganizer-20.08.2/src/kontactplugin/korganizer/journalplugin.h
Examining data/korganizer-20.08.2/src/kontactplugin/korganizer/korganizerplugin.cpp
Examining data/korganizer-20.08.2/src/kontactplugin/korganizer/summaryeventinfo.h
Examining data/korganizer-20.08.2/src/kontactplugin/korganizer/kcmapptsummary.h
Examining data/korganizer-20.08.2/src/kontactplugin/korganizer/apptsummarywidget.cpp
Examining data/korganizer-20.08.2/src/kontactplugin/korganizer/kcmtodosummary.cpp
Examining data/korganizer-20.08.2/src/kontactplugin/korganizer/summaryeventinfo.cpp
Examining data/korganizer-20.08.2/src/kontactplugin/korganizer/korg_uniqueapp.h
Examining data/korganizer-20.08.2/src/kontactplugin/korganizer/kcmapptsummary.cpp
Examining data/korganizer-20.08.2/src/kontactplugin/korganizer/todosummarywidget.h
Examining data/korganizer-20.08.2/src/kontactplugin/korganizer/journalplugin.cpp
Examining data/korganizer-20.08.2/src/kontactplugin/specialdates/specialdates_plugin.cpp
Examining data/korganizer-20.08.2/src/kontactplugin/specialdates/kcmsdsummary.h
Examining data/korganizer-20.08.2/src/kontactplugin/specialdates/sdsummarywidget.h
Examining data/korganizer-20.08.2/src/kontactplugin/specialdates/kcmsdsummary.cpp
Examining data/korganizer-20.08.2/src/kontactplugin/specialdates/sdsummarywidget.cpp
Examining data/korganizer-20.08.2/src/kontactplugin/specialdates/specialdates_plugin.h
Examining data/korganizer-20.08.2/src/koapp.h
Examining data/korganizer-20.08.2/src/korganizer_part.cpp
Examining data/korganizer-20.08.2/src/kocore.cpp
Examining data/korganizer-20.08.2/src/koeventview.cpp
Examining data/korganizer-20.08.2/src/korganizer.cpp
Examining data/korganizer-20.08.2/src/collectiongeneralpage.h
Examining data/korganizer-20.08.2/src/manageshowcollectionproperties.cpp
Examining data/korganizer-20.08.2/src/impl/korganizerifaceimpl.h
Examining data/korganizer-20.08.2/src/impl/korganizerifaceimpl.cpp
Examining data/korganizer-20.08.2/src/pimmessagebox.cpp
Examining data/korganizer-20.08.2/src/akonadicollectionview.cpp
Examining data/korganizer-20.08.2/src/kcmdesignerfields.cpp
Examining data/korganizer-20.08.2/src/aboutdata.cpp
Examining data/korganizer-20.08.2/src/korganizer.h
FINAL RESULTS:
data/korganizer-20.08.2/src/calendarview.cpp:669:28: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
= QLocale::system().toString(QTime::currentTime(), QLocale::ShortFormat);
data/korganizer-20.08.2/src/calendarview.cpp:678:44: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
QString dateStr = QLocale::system().toString(
data/korganizer-20.08.2/src/calendarview.cpp:1611:27: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
QLocale::system().toString(date, QLocale::LongFormat)),
data/korganizer-20.08.2/src/calendarview.cpp:1624:27: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
QLocale::system().toString(date, QLocale::LongFormat)),
data/korganizer-20.08.2/src/calendarview.cpp:2385:45: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
QLocale::system().toString(itemDate, QLocale::LongFormat));
data/korganizer-20.08.2/src/calendarview.cpp:2393:45: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
QLocale::system().toString(itemDate, QLocale::LongFormat));
data/korganizer-20.08.2/src/kontactplugin/korganizer/autotests/summaryeventtest.cpp:58:31: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
QLocale::system().toString(QTime(0, 0), QLocale::ShortFormat),
data/korganizer-20.08.2/src/kontactplugin/korganizer/autotests/summaryeventtest.cpp:59:31: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
QLocale::system().toString(QTime(23, 59), QLocale::ShortFormat)));
data/korganizer-20.08.2/src/kontactplugin/korganizer/autotests/summaryeventtest.cpp:131:35: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
QLocale::system().toString(QTime(0, 0), QLocale::ShortFormat),
data/korganizer-20.08.2/src/kontactplugin/korganizer/autotests/summaryeventtest.cpp:132:35: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
QLocale::system().toString(QTime(23, 59), QLocale::ShortFormat)));
data/korganizer-20.08.2/src/kontactplugin/korganizer/autotests/summaryeventtest.cpp:159:39: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
QCOMPARE(ev1->startDate, QLocale::system().toString(today.addDays(multiDayFuture)));
data/korganizer-20.08.2/src/kontactplugin/korganizer/summaryeventinfo.cpp:170:42: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
const auto locale = QLocale::system();
data/korganizer-20.08.2/src/kontactplugin/korganizer/summaryeventinfo.cpp:273:34: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
QLocale::system().toString(sST, QLocale::ShortFormat),
data/korganizer-20.08.2/src/kontactplugin/korganizer/summaryeventinfo.cpp:274:34: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
QLocale::system().toString(sET, QLocale::ShortFormat));
data/korganizer-20.08.2/src/kontactplugin/korganizer/todosummarywidget.cpp:213:50: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
const auto locale = QLocale::system();
data/korganizer-20.08.2/src/kontactplugin/specialdates/sdsummarywidget.cpp:487:46: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
const auto locale = QLocale::system();
data/korganizer-20.08.2/src/kontactplugin/specialdates/sdsummarywidget.cpp:501:43: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
QString endstr = QLocale::system().toString(sD.addDays(
data/korganizer-20.08.2/src/actionmanager.cpp:263:26: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
KStandardAction::open(this, qOverload<>(&ActionManager::file_open), mACollection);
data/korganizer-20.08.2/src/actionmanager.cpp:1090:19: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
tempFile->open();
data/korganizer-20.08.2/src/actionmanager.cpp:1574:16: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
if (!f.open(QFile::ReadOnly)) {
data/korganizer-20.08.2/src/kcmdesignerfields.cpp:63:16: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
if (!f.open(QFile::ReadOnly)) {
data/korganizer-20.08.2/src/koeventpopupmenu.cpp:375:14: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
dlg->open();
data/korganizer-20.08.2/src/koeventpopupmenu.cpp:453:14: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
dlg->open();
ANALYSIS SUMMARY:
Hits = 23
Lines analyzed = 34140 in approximately 3.98 seconds (8579 lines/second)
Physical Source Lines of Code (SLOC) = 23017
Hits@level = [0] 0 [1] 0 [2] 6 [3] 0 [4] 17 [5] 0
Hits@level+ = [0+] 23 [1+] 23 [2+] 23 [3+] 17 [4+] 17 [5+] 0
Hits/KSLOC@level+ = [0+] 0.999261 [1+] 0.999261 [2+] 0.999261 [3+] 0.738585 [4+] 0.738585 [5+] 0
Dot directories skipped = 1 (--followdotdir overrides)
Minimum risk level = 1
Not every hit is necessarily a security vulnerability.
There may be other security vulnerabilities; review your code!
See 'Secure Programming HOWTO'
(https://dwheeler.com/secure-programs) for more information.