Flawfinder version 2.0.10, (C) 2001-2019 David A. Wheeler.
Number of rules (primarily dangerous function names) in C/C++ ruleset: 223
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm.h
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/languagemanager.h
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/buffer.cc
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/completionitem.cc
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/completioncontext.h
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/language.cc
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/completionitem.h
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/style.cc
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/completioninfo.h
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/printcompositor.h
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/undomanager.cc
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/wrap_init.cc
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/completionactivation.cc
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/gutter.h
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/languagemanager.cc
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/completioncontext.cc
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/completion.h
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/stylescheme.h
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/init.cc
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/style.h
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/markattributes.h
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/stylescheme.cc
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/completionprovider.h
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/styleschememanager.cc
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/completionproposal.cc
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/view.h
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/view.cc
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/completionprovider.cc
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/language.h
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/gutterrenderer.cc
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/completionactivation.h
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/gutterrendererpixbuf.cc
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/wrap_init.h
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/completionproposal.h
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/styleschememanager.h
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/completion.cc
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/gutterrendererpixbuf.h
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/markattributes.cc
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/buffer.h
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/completionwords.cc
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/private/view_p.h
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/private/completionproposal_p.h
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/private/gutterrenderertext_p.h
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/private/gutterrenderer_p.h
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/private/languagemanager_p.h
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/private/completion_p.h
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/private/completioninfo_p.h
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/private/completioncontext_p.h
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/private/styleschememanager_p.h
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/private/language_p.h
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/private/gutter_p.h
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/private/undomanager_p.h
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/private/stylescheme_p.h
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/private/printcompositor_p.h
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/private/completionwords_p.h
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/private/gutterrendererpixbuf_p.h
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/private/buffer_p.h
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/private/completionitem_p.h
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/private/style_p.h
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/private/mark_p.h
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/private/completionactivation_p.h
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/private/markattributes_p.h
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/private/completionprovider_p.h
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/completionwords.h
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/init.h
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/printcompositor.cc
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/completioninfo.cc
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/gutterrenderer.h
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/gutterrenderertext.h
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/markup.cc
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/markup.h
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/undomanager.h
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/mark.cc
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/gutterrenderertext.cc
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/mark.h
Examining data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/gutter.cc
Examining data/libgtksourceviewmm-3.18.0/tests/search/main.cc
Examining data/libgtksourceviewmm-3.18.0/tests/completion/main.cc
Examining data/libgtksourceviewmm-3.18.0/tests/basic/main.cc
Examining data/libgtksourceviewmm-3.18.0/tests/get_buffer/main.cc
Examining data/libgtksourceviewmm-3.18.0/tests/langs/main.cc
Examining data/libgtksourceviewmm-3.18.0/tests/mime_types/main.cc
Examining data/libgtksourceviewmm-3.18.0/codegen/extradefs/generate_extra_defs_gtksourceview.cc
FINAL RESULTS:
data/libgtksourceviewmm-3.18.0/tests/search/main.cc:346:16: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
static char buffer[BUFFER_SIZE + 1] ;
data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/completionproposal.cc:383:20: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
if(base && base->equal)
data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/completionproposal.cc:385:31: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
gboolean retval = (*base->equal)(self, other);
data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/completionproposal.cc:531:26: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
bool CompletionProposal::equal(const Glib::RefPtr<const CompletionProposal>& other) const
data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/completionproposal.cc:657:20: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
if(base && base->equal)
data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/completionproposal.cc:659:25: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
bool retval((*base->equal)(const_cast<GtkSourceCompletionProposal*>(gobj()),const_cast<GtkSourceCompletionProposal*>(Glib::unwrap(other))));
data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/completionproposal.h:229:8: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
bool equal(const Glib::RefPtr<const CompletionProposal>& other) const;
data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/markup.cc:60:14: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
bool Markup::equal(const Markup& rhs) const
data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/markup.h:116:8: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
bool equal(const Markup& other) const;
data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/markup.h:150:16: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
{ return lhs.equal(rhs); }
data/libgtksourceviewmm-3.18.0/gtksourceview/gtksourceviewmm/markup.h:164:17: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
{ return !lhs.equal(rhs); }
data/libgtksourceviewmm-3.18.0/tests/search/main.cc:350:18: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
file.read (buffer, BUFFER_SIZE) ;
ANALYSIS SUMMARY:
Hits = 12
Lines analyzed = 20854 in approximately 0.83 seconds (25138 lines/second)
Physical Source Lines of Code (SLOC) = 9997
Hits@level = [0] 0 [1] 11 [2] 1 [3] 0 [4] 0 [5] 0
Hits@level+ = [0+] 12 [1+] 12 [2+] 1 [3+] 0 [4+] 0 [5+] 0
Hits/KSLOC@level+ = [0+] 1.20036 [1+] 1.20036 [2+] 0.10003 [3+] 0 [4+] 0 [5+] 0
Dot directories skipped = 1 (--followdotdir overrides)
Minimum risk level = 1
Not every hit is necessarily a security vulnerability.
There may be other security vulnerabilities; review your code!
See 'Secure Programming HOWTO'
(https://dwheeler.com/secure-programs) for more information.