Flawfinder version 2.0.10, (C) 2001-2019 David A. Wheeler.
Number of rules (primarily dangerous function names) in C/C++ ruleset: 223
Examining data/kreport-3.2.0/autotests/ElementsTest.cpp
Examining data/kreport-3.2.0/autotests/ElementsTest.h
Examining data/kreport-3.2.0/autotests/KReportTestUtils.cpp
Examining data/kreport-3.2.0/autotests/KReportTestUtils.h
Examining data/kreport-3.2.0/autotests/PluginsTest.cpp
Examining data/kreport-3.2.0/autotests/PluginsTest.h
Examining data/kreport-3.2.0/autotests/format/FormatTest.cpp
Examining data/kreport-3.2.0/autotests/format/FormatTest.h
Examining data/kreport-3.2.0/examples/DesignerWidget.cpp
Examining data/kreport-3.2.0/examples/DesignerWidget.h
Examining data/kreport-3.2.0/examples/KReportExampleDataSource.cpp
Examining data/kreport-3.2.0/examples/KReportExampleDataSource.h
Examining data/kreport-3.2.0/examples/main.cpp
Examining data/kreport-3.2.0/examples/window.cpp
Examining data/kreport-3.2.0/examples/window.h
Examining data/kreport-3.2.0/src/common/KReportAsyncItemBase.cpp
Examining data/kreport-3.2.0/src/common/KReportAsyncItemBase.h
Examining data/kreport-3.2.0/src/common/KReportDataSource.cpp
Examining data/kreport-3.2.0/src/common/KReportDataSource.h
Examining data/kreport-3.2.0/src/common/KReportDesign.cpp
Examining data/kreport-3.2.0/src/common/KReportDesign.h
Examining data/kreport-3.2.0/src/common/KReportDesign_p.cpp
Examining data/kreport-3.2.0/src/common/KReportDesign_p.h
Examining data/kreport-3.2.0/src/common/KReportDetailSectionData.cpp
Examining data/kreport-3.2.0/src/common/KReportDetailSectionData.h
Examining data/kreport-3.2.0/src/common/KReportDocument.cpp
Examining data/kreport-3.2.0/src/common/KReportDocument.h
Examining data/kreport-3.2.0/src/common/KReportElement.cpp
Examining data/kreport-3.2.0/src/common/KReportElement.shared.h
Examining data/kreport-3.2.0/src/common/KReportItemBase.cpp
Examining data/kreport-3.2.0/src/common/KReportItemBase.h
Examining data/kreport-3.2.0/src/common/KReportItemLine.cpp
Examining data/kreport-3.2.0/src/common/KReportItemLine.h
Examining data/kreport-3.2.0/src/common/KReportJsonTrader_p.cpp
Examining data/kreport-3.2.0/src/common/KReportJsonTrader_p.h
Examining data/kreport-3.2.0/src/common/KReportLabelSizeInfo.cpp
Examining data/kreport-3.2.0/src/common/KReportLabelSizeInfo.h
Examining data/kreport-3.2.0/src/common/KReportLineStyle.cpp
Examining data/kreport-3.2.0/src/common/KReportLineStyle.shared.h
Examining data/kreport-3.2.0/src/common/KReportPageSize.cpp
Examining data/kreport-3.2.0/src/common/KReportPageSize.h
Examining data/kreport-3.2.0/src/common/KReportPluginInterface.cpp
Examining data/kreport-3.2.0/src/common/KReportPluginInterface.h
Examining data/kreport-3.2.0/src/common/KReportPluginManager.cpp
Examining data/kreport-3.2.0/src/common/KReportPluginManager.h
Examining data/kreport-3.2.0/src/common/KReportPluginManagerPrivate.h
Examining data/kreport-3.2.0/src/common/KReportPluginMetaData.cpp
Examining data/kreport-3.2.0/src/common/KReportPluginMetaData.h
Examining data/kreport-3.2.0/src/common/KReportRenderObjects.cpp
Examining data/kreport-3.2.0/src/common/KReportRenderObjects.h
Examining data/kreport-3.2.0/src/common/KReportSection.cpp
Examining data/kreport-3.2.0/src/common/KReportSection.shared.h
Examining data/kreport-3.2.0/src/common/KReportSectionData.cpp
Examining data/kreport-3.2.0/src/common/KReportSectionData.h
Examining data/kreport-3.2.0/src/common/KReportStaticPluginInterface.h
Examining data/kreport-3.2.0/src/common/KReportUnit.cpp
Examining data/kreport-3.2.0/src/common/KReportUnit.h
Examining data/kreport-3.2.0/src/common/KReportUtils.cpp
Examining data/kreport-3.2.0/src/common/KReportUtils.h
Examining data/kreport-3.2.0/src/common/KReportUtils_p.cpp
Examining data/kreport-3.2.0/src/common/KReportUtils_p.h
Examining data/kreport-3.2.0/src/common/kreport_debug.cpp
Examining data/kreport-3.2.0/src/common/kreport_debug.h
Examining data/kreport-3.2.0/src/common/kreportplugin_debug.cpp
Examining data/kreport-3.2.0/src/common/kreportplugin_debug.h
Examining data/kreport-3.2.0/src/items/check/KReportCheckBoxPlugin.cpp
Examining data/kreport-3.2.0/src/items/check/KReportCheckBoxPlugin.h
Examining data/kreport-3.2.0/src/items/check/KReportDesignerItemCheckBox.cpp
Examining data/kreport-3.2.0/src/items/check/KReportDesignerItemCheckBox.h
Examining data/kreport-3.2.0/src/items/check/KReportItemCheck.cpp
Examining data/kreport-3.2.0/src/items/check/KReportItemCheck.h
Examining data/kreport-3.2.0/src/items/check/KReportScriptCheck.cpp
Examining data/kreport-3.2.0/src/items/check/KReportScriptCheck.h
Examining data/kreport-3.2.0/src/items/field/KReportDesignerItemField.cpp
Examining data/kreport-3.2.0/src/items/field/KReportDesignerItemField.h
Examining data/kreport-3.2.0/src/items/field/KReportFieldPlugin.cpp
Examining data/kreport-3.2.0/src/items/field/KReportFieldPlugin.h
Examining data/kreport-3.2.0/src/items/field/KReportItemField.cpp
Examining data/kreport-3.2.0/src/items/field/KReportItemField.h
Examining data/kreport-3.2.0/src/items/field/KReportScriptField.cpp
Examining data/kreport-3.2.0/src/items/field/KReportScriptField.h
Examining data/kreport-3.2.0/src/items/image/KReportDesignerItemImage.cpp
Examining data/kreport-3.2.0/src/items/image/KReportDesignerItemImage.h
Examining data/kreport-3.2.0/src/items/image/KReportImagePlugin.cpp
Examining data/kreport-3.2.0/src/items/image/KReportImagePlugin.h
Examining data/kreport-3.2.0/src/items/image/KReportItemImage.cpp
Examining data/kreport-3.2.0/src/items/image/KReportItemImage.h
Examining data/kreport-3.2.0/src/items/image/KReportScriptImage.cpp
Examining data/kreport-3.2.0/src/items/image/KReportScriptImage.h
Examining data/kreport-3.2.0/src/items/label/KReportBoundedTextItem.cpp
Examining data/kreport-3.2.0/src/items/label/KReportBoundedTextItem.h
Examining data/kreport-3.2.0/src/items/label/KReportDesignerItemLabel.cpp
Examining data/kreport-3.2.0/src/items/label/KReportDesignerItemLabel.h
Examining data/kreport-3.2.0/src/items/label/KReportItemLabel.cpp
Examining data/kreport-3.2.0/src/items/label/KReportItemLabel.h
Examining data/kreport-3.2.0/src/items/label/KReportLabelElement.cpp
Examining data/kreport-3.2.0/src/items/label/KReportLabelElement.shared.h
Examining data/kreport-3.2.0/src/items/label/KReportLabelPlugin.cpp
Examining data/kreport-3.2.0/src/items/label/KReportLabelPlugin.h
Examining data/kreport-3.2.0/src/items/label/KReportScriptLabel.cpp
Examining data/kreport-3.2.0/src/items/label/KReportScriptLabel.h
Examining data/kreport-3.2.0/src/items/text/KReportDesignerItemText.cpp
Examining data/kreport-3.2.0/src/items/text/KReportDesignerItemText.h
Examining data/kreport-3.2.0/src/items/text/KReportItemText.cpp
Examining data/kreport-3.2.0/src/items/text/KReportItemText.h
Examining data/kreport-3.2.0/src/items/text/KReportScriptText.cpp
Examining data/kreport-3.2.0/src/items/text/KReportScriptText.h
Examining data/kreport-3.2.0/src/items/text/KReportTextPlugin.cpp
Examining data/kreport-3.2.0/src/items/text/KReportTextPlugin.h
Examining data/kreport-3.2.0/src/plugins/barcode/3of9.cpp
Examining data/kreport-3.2.0/src/plugins/barcode/3of9paint.cpp
Examining data/kreport-3.2.0/src/plugins/barcode/KReportBarcodePlugin.cpp
Examining data/kreport-3.2.0/src/plugins/barcode/KReportBarcodePlugin.h
Examining data/kreport-3.2.0/src/plugins/barcode/KReportDesignerItemBarcode.cpp
Examining data/kreport-3.2.0/src/plugins/barcode/KReportDesignerItemBarcode.h
Examining data/kreport-3.2.0/src/plugins/barcode/KReportItemBarcode.cpp
Examining data/kreport-3.2.0/src/plugins/barcode/KReportItemBarcode.h
Examining data/kreport-3.2.0/src/plugins/barcode/KReportScriptBarcode.cpp
Examining data/kreport-3.2.0/src/plugins/barcode/KReportScriptBarcode.h
Examining data/kreport-3.2.0/src/plugins/barcode/barcodepaint.h
Examining data/kreport-3.2.0/src/plugins/barcode/barcodes.h
Examining data/kreport-3.2.0/src/plugins/barcode/code128.cpp
Examining data/kreport-3.2.0/src/plugins/barcode/code128paint.cpp
Examining data/kreport-3.2.0/src/plugins/barcode/codeean.cpp
Examining data/kreport-3.2.0/src/plugins/barcode/codeeanpaint.cpp
Examining data/kreport-3.2.0/src/plugins/barcode/ext3of9.cpp
Examining data/kreport-3.2.0/src/plugins/barcode/ext3of9paint.cpp
Examining data/kreport-3.2.0/src/plugins/barcode/i2of5.cpp
Examining data/kreport-3.2.0/src/plugins/barcode/i2of5paint.cpp
Examining data/kreport-3.2.0/src/plugins/chart/KReportChartPlugin.cpp
Examining data/kreport-3.2.0/src/plugins/chart/KReportChartPlugin.h
Examining data/kreport-3.2.0/src/plugins/chart/KReportDesignerItemChart.cpp
Examining data/kreport-3.2.0/src/plugins/chart/KReportDesignerItemChart.h
Examining data/kreport-3.2.0/src/plugins/chart/KReportItemChart.cpp
Examining data/kreport-3.2.0/src/plugins/chart/KReportItemChart.h
Examining data/kreport-3.2.0/src/plugins/chart/KReportScriptChart.cpp
Examining data/kreport-3.2.0/src/plugins/chart/KReportScriptChart.h
Examining data/kreport-3.2.0/src/plugins/maps/KReportDesignerItemMaps.cpp
Examining data/kreport-3.2.0/src/plugins/maps/KReportDesignerItemMaps.h
Examining data/kreport-3.2.0/src/plugins/maps/KReportItemMaps.cpp
Examining data/kreport-3.2.0/src/plugins/maps/KReportItemMaps.h
Examining data/kreport-3.2.0/src/plugins/maps/KReportMapRenderer.cpp
Examining data/kreport-3.2.0/src/plugins/maps/KReportMapRenderer.h
Examining data/kreport-3.2.0/src/plugins/maps/KReportMapsPlugin.cpp
Examining data/kreport-3.2.0/src/plugins/maps/KReportMapsPlugin.h
Examining data/kreport-3.2.0/src/plugins/maps/KReportScriptMaps.cpp
Examining data/kreport-3.2.0/src/plugins/maps/KReportScriptMaps.h
Examining data/kreport-3.2.0/src/plugins/web/KReportDesignerItemWeb.cpp
Examining data/kreport-3.2.0/src/plugins/web/KReportDesignerItemWeb.h
Examining data/kreport-3.2.0/src/plugins/web/KReportItemWeb.cpp
Examining data/kreport-3.2.0/src/plugins/web/KReportItemWeb.h
Examining data/kreport-3.2.0/src/plugins/web/KReportWebPlugin.cpp
Examining data/kreport-3.2.0/src/plugins/web/KReportWebPlugin.h
Examining data/kreport-3.2.0/src/renderer/KReportAsyncItemManager_p.cpp
Examining data/kreport-3.2.0/src/renderer/KReportAsyncItemManager_p.h
Examining data/kreport-3.2.0/src/renderer/KReportHTMLCSSRenderer_p.cpp
Examining data/kreport-3.2.0/src/renderer/KReportHTMLCSSRenderer_p.h
Examining data/kreport-3.2.0/src/renderer/KReportHTMLTableRenderer_p.cpp
Examining data/kreport-3.2.0/src/renderer/KReportHTMLTableRenderer_p.h
Examining data/kreport-3.2.0/src/renderer/KReportKSpreadRenderer.cpp
Examining data/kreport-3.2.0/src/renderer/KReportKSpreadRenderer.h
Examining data/kreport-3.2.0/src/renderer/KReportOdtFrameReportRenderer_p.cpp
Examining data/kreport-3.2.0/src/renderer/KReportOdtFrameReportRenderer_p.h
Examining data/kreport-3.2.0/src/renderer/KReportOdtRenderer_p.cpp
Examining data/kreport-3.2.0/src/renderer/KReportOdtRenderer_p.h
Examining data/kreport-3.2.0/src/renderer/KReportOneRecordDataSource_p.cpp
Examining data/kreport-3.2.0/src/renderer/KReportOneRecordDataSource_p.h
Examining data/kreport-3.2.0/src/renderer/KReportPage.cpp
Examining data/kreport-3.2.0/src/renderer/KReportPage.h
Examining data/kreport-3.2.0/src/renderer/KReportPreRenderer.cpp
Examining data/kreport-3.2.0/src/renderer/KReportPreRenderer.h
Examining data/kreport-3.2.0/src/renderer/KReportPreRenderer_p.h
Examining data/kreport-3.2.0/src/renderer/KReportPrintRenderer_p.cpp
Examining data/kreport-3.2.0/src/renderer/KReportPrintRenderer_p.h
Examining data/kreport-3.2.0/src/renderer/KReportRendererBase.cpp
Examining data/kreport-3.2.0/src/renderer/KReportRendererBase.h
Examining data/kreport-3.2.0/src/renderer/KReportScreenRenderer_p.cpp
Examining data/kreport-3.2.0/src/renderer/KReportScreenRenderer_p.h
Examining data/kreport-3.2.0/src/renderer/KReportView.cpp
Examining data/kreport-3.2.0/src/renderer/KReportView.h
Examining data/kreport-3.2.0/src/renderer/ods/KoSimpleOdsCell.cpp
Examining data/kreport-3.2.0/src/renderer/ods/KoSimpleOdsCell.h
Examining data/kreport-3.2.0/src/renderer/ods/KoSimpleOdsDocument.cpp
Examining data/kreport-3.2.0/src/renderer/ods/KoSimpleOdsDocument.h
Examining data/kreport-3.2.0/src/renderer/ods/KoSimpleOdsSheet.cpp
Examining data/kreport-3.2.0/src/renderer/ods/KoSimpleOdsSheet.h
Examining data/kreport-3.2.0/src/renderer/ods/tests/simpleodstest.cpp
Examining data/kreport-3.2.0/src/renderer/odtframe/KoOdtFrameReportCheckBox.cpp
Examining data/kreport-3.2.0/src/renderer/odtframe/KoOdtFrameReportCheckBox.h
Examining data/kreport-3.2.0/src/renderer/odtframe/KoOdtFrameReportDocument.cpp
Examining data/kreport-3.2.0/src/renderer/odtframe/KoOdtFrameReportDocument.h
Examining data/kreport-3.2.0/src/renderer/odtframe/KoOdtFrameReportImage.cpp
Examining data/kreport-3.2.0/src/renderer/odtframe/KoOdtFrameReportImage.h
Examining data/kreport-3.2.0/src/renderer/odtframe/KoOdtFrameReportLine.cpp
Examining data/kreport-3.2.0/src/renderer/odtframe/KoOdtFrameReportLine.h
Examining data/kreport-3.2.0/src/renderer/odtframe/KoOdtFrameReportPicture.cpp
Examining data/kreport-3.2.0/src/renderer/odtframe/KoOdtFrameReportPicture.h
Examining data/kreport-3.2.0/src/renderer/odtframe/KoOdtFrameReportPrimitive.cpp
Examining data/kreport-3.2.0/src/renderer/odtframe/KoOdtFrameReportPrimitive.h
Examining data/kreport-3.2.0/src/renderer/odtframe/KoOdtFrameReportTextBox.cpp
Examining data/kreport-3.2.0/src/renderer/odtframe/KoOdtFrameReportTextBox.h
Examining data/kreport-3.2.0/src/renderer/scripting/KReportScriptConstants.cpp
Examining data/kreport-3.2.0/src/renderer/scripting/KReportScriptConstants.h
Examining data/kreport-3.2.0/src/renderer/scripting/KReportScriptDebug.cpp
Examining data/kreport-3.2.0/src/renderer/scripting/KReportScriptDebug.h
Examining data/kreport-3.2.0/src/renderer/scripting/KReportScriptDraw.cpp
Examining data/kreport-3.2.0/src/renderer/scripting/KReportScriptDraw.h
Examining data/kreport-3.2.0/src/renderer/scripting/KReportScriptHandler.cpp
Examining data/kreport-3.2.0/src/renderer/scripting/KReportScriptHandler.h
Examining data/kreport-3.2.0/src/renderer/scripting/KReportScriptLine.cpp
Examining data/kreport-3.2.0/src/renderer/scripting/KReportScriptLine.h
Examining data/kreport-3.2.0/src/renderer/scripting/KReportScriptReport.cpp
Examining data/kreport-3.2.0/src/renderer/scripting/KReportScriptReport.h
Examining data/kreport-3.2.0/src/renderer/scripting/KReportScriptSection.cpp
Examining data/kreport-3.2.0/src/renderer/scripting/KReportScriptSection.h
Examining data/kreport-3.2.0/src/renderer/scripting/KReportScriptSource.h
Examining data/kreport-3.2.0/src/renderer/scripting/KReportGroupTracker.cpp
Examining data/kreport-3.2.0/src/renderer/scripting/KReportGroupTracker.h
Examining data/kreport-3.2.0/src/wrtembed/KReportDesigner.cpp
Examining data/kreport-3.2.0/src/wrtembed/KReportDesigner.h
Examining data/kreport-3.2.0/src/wrtembed/KReportDesignerItemBase.cpp
Examining data/kreport-3.2.0/src/wrtembed/KReportDesignerItemBase.h
Examining data/kreport-3.2.0/src/wrtembed/KReportDesignerItemLine.cpp
Examining data/kreport-3.2.0/src/wrtembed/KReportDesignerItemLine.h
Examining data/kreport-3.2.0/src/wrtembed/KReportDesignerItemRectBase.cpp
Examining data/kreport-3.2.0/src/wrtembed/KReportDesignerItemRectBase.h
Examining data/kreport-3.2.0/src/wrtembed/KReportDesignerSection.cpp
Examining data/kreport-3.2.0/src/wrtembed/KReportDesignerSection.h
Examining data/kreport-3.2.0/src/wrtembed/KReportDesignerSectionDetail.cpp
Examining data/kreport-3.2.0/src/wrtembed/KReportDesignerSectionDetail.h
Examining data/kreport-3.2.0/src/wrtembed/KReportDesignerSectionDetailGroup.cpp
Examining data/kreport-3.2.0/src/wrtembed/KReportDesignerSectionDetailGroup.h
Examining data/kreport-3.2.0/src/wrtembed/KReportDesignerSectionScene.cpp
Examining data/kreport-3.2.0/src/wrtembed/KReportDesignerSectionScene.h
Examining data/kreport-3.2.0/src/wrtembed/KReportDesignerSectionView.cpp
Examining data/kreport-3.2.0/src/wrtembed/KReportDesignerSectionView.h
Examining data/kreport-3.2.0/src/wrtembed/KReportDetailGroupSectionDialog.cpp
Examining data/kreport-3.2.0/src/wrtembed/KReportDetailGroupSectionDialog.h
Examining data/kreport-3.2.0/src/wrtembed/KReportPropertiesButton.cpp
Examining data/kreport-3.2.0/src/wrtembed/KReportPropertiesButton.h
Examining data/kreport-3.2.0/src/wrtembed/KReportRuler_p.cpp
Examining data/kreport-3.2.0/src/wrtembed/KReportRuler_p.h
Examining data/kreport-3.2.0/src/wrtembed/KReportSectionEditor.cpp
Examining data/kreport-3.2.0/src/wrtembed/KReportSectionEditor.h
Examining data/kreport-3.2.0/src/wrtembed/KReportZoomHandler_p.cpp
Examining data/kreport-3.2.0/src/wrtembed/KReportZoomHandler_p.h
Examining data/kreport-3.2.0/src/wrtembed/KReportZoomMode_p.cpp
Examining data/kreport-3.2.0/src/wrtembed/KReportZoomMode_p.h

FINAL RESULTS:

data/kreport-3.2.0/src/common/KReportUnit.cpp:225:21:  [4] (shell) system:
  This causes a new program to execute and is difficult to use safely
  (CWE-78). try using a library call that implements the same functionality
  if available.
    return QLocale::system().toString(toUserValue(ptValue));
data/kreport-3.2.0/src/common/KReportUnit.cpp:288:36:  [4] (shell) system:
  This causes a new program to execute and is difficult to use safely
  (CWE-78). try using a library call that implements the same functionality
  if available.
    return convertToPoint(QLocale::system().toDouble(value, ok));
data/kreport-3.2.0/src/plugins/barcode/codeean.cpp:252:33:  [4] (format) sprintf:
  Potential format string problem (CWE-134). Make format string constant.
    QString leftstr = QString().sprintf("%d%d%d%d%d%d",
data/kreport-3.2.0/src/plugins/barcode/codeean.cpp:254:34:  [4] (format) sprintf:
  Potential format string problem (CWE-134). Make format string constant.
    QString rightstr = QString().sprintf("%d%d%d%d%d%d",
data/kreport-3.2.0/src/plugins/barcode/codeean.cpp:448:33:  [4] (format) sprintf:
  Potential format string problem (CWE-134). Make format string constant.
    QString leftstr = QString().sprintf("%d%d%d%d%d",
data/kreport-3.2.0/src/plugins/barcode/codeean.cpp:450:34:  [4] (format) sprintf:
  Potential format string problem (CWE-134). Make format string constant.
    QString rightstr = QString().sprintf("%d%d%d%d%d",
data/kreport-3.2.0/src/plugins/barcode/codeean.cpp:656:33:  [4] (format) sprintf:
  Potential format string problem (CWE-134). Make format string constant.
    QString leftstr = QString().sprintf("%d%d%d%d",
data/kreport-3.2.0/src/plugins/barcode/codeean.cpp:658:34:  [4] (format) sprintf:
  Potential format string problem (CWE-134). Make format string constant.
    QString rightstr = QString().sprintf("%d%d%d%d",
data/kreport-3.2.0/src/plugins/barcode/codeean.cpp:816:33:  [4] (format) sprintf:
  Potential format string problem (CWE-134). Make format string constant.
    QString leftstr = QString().sprintf("%d%d%d%d%d%d",
data/kreport-3.2.0/src/plugins/barcode/codeeanpaint.cpp:210:37:  [4] (format) sprintf:
  Potential format string problem (CWE-134). Make format string constant.
        QString leftstr = QString().sprintf("%d%d%d%d%d%d",
data/kreport-3.2.0/src/plugins/barcode/codeeanpaint.cpp:212:38:  [4] (format) sprintf:
  Potential format string problem (CWE-134). Make format string constant.
        QString rightstr = QString().sprintf("%d%d%d%d%d%d",
data/kreport-3.2.0/src/plugins/barcode/codeeanpaint.cpp:361:37:  [4] (format) sprintf:
  Potential format string problem (CWE-134). Make format string constant.
        QString leftstr = QString().sprintf("%d%d%d%d%d",
data/kreport-3.2.0/src/plugins/barcode/codeeanpaint.cpp:363:38:  [4] (format) sprintf:
  Potential format string problem (CWE-134). Make format string constant.
        QString rightstr = QString().sprintf("%d%d%d%d%d",
data/kreport-3.2.0/src/plugins/barcode/codeeanpaint.cpp:512:37:  [4] (format) sprintf:
  Potential format string problem (CWE-134). Make format string constant.
        QString leftstr = QString().sprintf("%d%d%d%d",
data/kreport-3.2.0/src/plugins/barcode/codeeanpaint.cpp:514:38:  [4] (format) sprintf:
  Potential format string problem (CWE-134). Make format string constant.
        QString rightstr = QString().sprintf("%d%d%d%d",
data/kreport-3.2.0/src/plugins/barcode/codeeanpaint.cpp:638:37:  [4] (format) sprintf:
  Potential format string problem (CWE-134). Make format string constant.
        QString leftstr = QString().sprintf("%d%d%d%d%d%d",
data/kreport-3.2.0/autotests/format/FormatTest.cpp:51:20:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
    bool ok = file.open(QFile::ReadOnly | QFile::Text);
data/kreport-3.2.0/examples/KReportExampleDataSource.cpp:147:32:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
bool KReportExampleDataSource::open()
data/kreport-3.2.0/examples/KReportExampleDataSource.h:48:10:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
    bool open() override;
data/kreport-3.2.0/examples/window.cpp:100:15:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
    if (!file.open(QIODevice::ReadOnly)) {
data/kreport-3.2.0/src/common/KReportDataSource.h:63:18:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
    virtual bool open() = 0;
data/kreport-3.2.0/src/items/image/KReportItemImage.cpp:75:12:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
    buffer.open(QIODevice::ReadWrite);
data/kreport-3.2.0/src/items/text/KReportScriptText.cpp:194:15:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
    if (!file.open(QIODevice::ReadOnly | QIODevice::Text)) {
data/kreport-3.2.0/src/plugins/chart/KReportItemChart.cpp:236:31:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
            if (curs && curs->open()) {
data/kreport-3.2.0/src/renderer/KReportHTMLCSSRenderer_p.cpp:44:23:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
    if (!tempHtmlFile.open()) {
data/kreport-3.2.0/src/renderer/KReportHTMLTableRenderer_p.cpp:44:23:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
    if (!tempHtmlFile.open()) {
data/kreport-3.2.0/src/renderer/KReportOneRecordDataSource_p.cpp:93:27:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
bool OneRecordDataSource::open()
data/kreport-3.2.0/src/renderer/KReportOneRecordDataSource_p.h:53:10:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
    bool open() override;
data/kreport-3.2.0/src/renderer/KReportPreRenderer.cpp:476:24:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
    if (!m_dataSource->open()) {
data/kreport-3.2.0/src/renderer/odtframe/KoOdtFrameReportCheckBox.cpp:107:17:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
    if (!store->open(name)) {
data/kreport-3.2.0/src/renderer/odtframe/KoOdtFrameReportImage.cpp:74:17:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
    if (!store->open(name)) {
data/kreport-3.2.0/src/renderer/odtframe/KoOdtFrameReportPicture.cpp:75:17:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
    if (!store->open(name)) {

ANALYSIS SUMMARY:

Hits = 32
Lines analyzed = 36280 in approximately 0.96 seconds (37620 lines/second)
Physical Source Lines of Code (SLOC) = 23245
Hits@level = [0]   0 [1]   0 [2]  16 [3]   0 [4]  16 [5]   0
Hits@level+ = [0+]  32 [1+]  32 [2+]  32 [3+]  16 [4+]  16 [5+]   0
Hits/KSLOC@level+ = [0+] 1.37664 [1+] 1.37664 [2+] 1.37664 [3+] 0.68832 [4+] 0.68832 [5+]   0
Dot directories skipped = 1 (--followdotdir overrides)
Minimum risk level = 1
Not every hit is necessarily a security vulnerability.
There may be other security vulnerabilities; review your code!
See 'Secure Programming HOWTO'
(https://dwheeler.com/secure-programs) for more information.