Flawfinder version 2.0.10, (C) 2001-2019 David A. Wheeler. Number of rules (primarily dangerous function names) in C/C++ ruleset: 223 Examining data/libkf5eventviews-20.08.2/tests/createcolorgui_test.h Examining data/libkf5eventviews-20.08.2/tests/createcolorgui_test.cpp Examining data/libkf5eventviews-20.08.2/src/journal/journalview.cpp Examining data/libkf5eventviews-20.08.2/src/journal/journalview.h Examining data/libkf5eventviews-20.08.2/src/journal/journalframe.cpp Examining data/libkf5eventviews-20.08.2/src/journal/journalframe.h Examining data/libkf5eventviews-20.08.2/src/timeline/timelineview_p.h Examining data/libkf5eventviews-20.08.2/src/timeline/timelineitem.h Examining data/libkf5eventviews-20.08.2/src/timeline/timelineitem.cpp Examining data/libkf5eventviews-20.08.2/src/timeline/timelineview.cpp Examining data/libkf5eventviews-20.08.2/src/timeline/timelineview_p.cpp Examining data/libkf5eventviews-20.08.2/src/timeline/timelineview.h Examining data/libkf5eventviews-20.08.2/src/eventview_p.cpp Examining data/libkf5eventviews-20.08.2/src/whatsnext/whatsnextview.cpp Examining data/libkf5eventviews-20.08.2/src/whatsnext/whatsnextview.h Examining data/libkf5eventviews-20.08.2/src/eventview_p.h Examining data/libkf5eventviews-20.08.2/src/list/listview.h Examining data/libkf5eventviews-20.08.2/src/list/listview.cpp Examining data/libkf5eventviews-20.08.2/src/viewerapp/mainwindow.h Examining data/libkf5eventviews-20.08.2/src/viewerapp/mainwindow.cpp Examining data/libkf5eventviews-20.08.2/src/viewerapp/main.cpp Examining data/libkf5eventviews-20.08.2/src/helper.cpp Examining data/libkf5eventviews-20.08.2/src/eventview.h Examining data/libkf5eventviews-20.08.2/src/helper.h Examining data/libkf5eventviews-20.08.2/src/multiagenda/multiagendaview.cpp Examining data/libkf5eventviews-20.08.2/src/multiagenda/multiagendaview.h Examining data/libkf5eventviews-20.08.2/src/multiagenda/configdialoginterface.h Examining data/libkf5eventviews-20.08.2/src/agenda/agenda.cpp Examining data/libkf5eventviews-20.08.2/src/agenda/timescaleconfigdialog.h Examining data/libkf5eventviews-20.08.2/src/agenda/decorationlabel.h Examining data/libkf5eventviews-20.08.2/src/agenda/viewcalendar.h Examining data/libkf5eventviews-20.08.2/src/agenda/agendaitem.h Examining data/libkf5eventviews-20.08.2/src/agenda/alternatelabel.cpp Examining data/libkf5eventviews-20.08.2/src/agenda/agendaview.cpp Examining data/libkf5eventviews-20.08.2/src/agenda/agenda.h Examining data/libkf5eventviews-20.08.2/src/agenda/agendaitem.cpp Examining data/libkf5eventviews-20.08.2/src/agenda/timescaleconfigdialog.cpp Examining data/libkf5eventviews-20.08.2/src/agenda/timelabelszone.cpp Examining data/libkf5eventviews-20.08.2/src/agenda/alternatelabel.h Examining data/libkf5eventviews-20.08.2/src/agenda/calendardecoration.cpp Examining data/libkf5eventviews-20.08.2/src/agenda/viewcalendar.cpp Examining data/libkf5eventviews-20.08.2/src/agenda/timelabels.cpp Examining data/libkf5eventviews-20.08.2/src/agenda/agendaview.h Examining data/libkf5eventviews-20.08.2/src/agenda/timelabelszone.h Examining data/libkf5eventviews-20.08.2/src/agenda/calendardecoration.h Examining data/libkf5eventviews-20.08.2/src/agenda/timelabels.h Examining data/libkf5eventviews-20.08.2/src/agenda/decorationlabel.cpp Examining data/libkf5eventviews-20.08.2/src/todo/tododelegates.cpp Examining data/libkf5eventviews-20.08.2/src/todo/todoviewview.cpp Examining data/libkf5eventviews-20.08.2/src/todo/tododelegates.h Examining data/libkf5eventviews-20.08.2/src/todo/todoviewquicksearch.cpp Examining data/libkf5eventviews-20.08.2/src/todo/incidencetreemodel.cpp Examining data/libkf5eventviews-20.08.2/src/todo/todoviewsortfilterproxymodel.cpp Examining data/libkf5eventviews-20.08.2/src/todo/incidencetreemodel.h Examining data/libkf5eventviews-20.08.2/src/todo/todomodel.cpp Examining data/libkf5eventviews-20.08.2/src/todo/todomodel.h Examining data/libkf5eventviews-20.08.2/src/todo/todoview.h Examining data/libkf5eventviews-20.08.2/src/todo/todoviewview.h Examining data/libkf5eventviews-20.08.2/src/todo/todomodel_p.h Examining data/libkf5eventviews-20.08.2/src/todo/todoviewquickaddline.cpp Examining data/libkf5eventviews-20.08.2/src/todo/incidencetreemodel_p.h Examining data/libkf5eventviews-20.08.2/src/todo/todoviewsortfilterproxymodel.h Examining data/libkf5eventviews-20.08.2/src/todo/todoview.cpp Examining data/libkf5eventviews-20.08.2/src/todo/todoviewquickaddline.h Examining data/libkf5eventviews-20.08.2/src/todo/todoviewquicksearch.h Examining data/libkf5eventviews-20.08.2/src/eventview.cpp Examining data/libkf5eventviews-20.08.2/src/month/monthscene.cpp Examining data/libkf5eventviews-20.08.2/src/month/monthitem.h Examining data/libkf5eventviews-20.08.2/src/month/monthview.cpp Examining data/libkf5eventviews-20.08.2/src/month/monthscene.h Examining data/libkf5eventviews-20.08.2/src/month/monthgraphicsitems.h Examining data/libkf5eventviews-20.08.2/src/month/monthitem.cpp Examining data/libkf5eventviews-20.08.2/src/month/monthview.h Examining data/libkf5eventviews-20.08.2/src/month/monthgraphicsitems.cpp Examining data/libkf5eventviews-20.08.2/src/prefs.cpp Examining data/libkf5eventviews-20.08.2/src/prefs.h FINAL RESULTS: data/libkf5eventviews-20.08.2/src/agenda/agenda.cpp:179:35: [4] (shell) system: This causes a new program to execute and is difficult to use safely (CWE-78). try using a library call that implements the same functionality if available. d->mTimeBox->setText(QLocale::system().toString(time, data/libkf5eventviews-20.08.2/src/agenda/agendaview.cpp:1238:40: [4] (shell) system: This causes a new program to execute and is difficult to use safely (CWE-78). try using a library call that implements the same functionality if available. QString veryLongStr = QLocale::system().toString(date, QLocale::LongFormat); data/libkf5eventviews-20.08.2/src/agenda/agendaview.cpp:1240:42: [4] (shell) system: This causes a new program to execute and is difficult to use safely (CWE-78). try using a library call that implements the same functionality if available. QLocale::system().dayName(dW, QLocale::ShortFormat), data/libkf5eventviews-20.08.2/src/agenda/agendaview.cpp:1241:42: [4] (shell) system: This causes a new program to execute and is difficult to use safely (CWE-78). try using a library call that implements the same functionality if available. QLocale::system().monthName(date.month(), QLocale::ShortFormat), data/libkf5eventviews-20.08.2/src/month/monthscene.cpp:225:30: [4] (shell) system: This causes a new program to execute and is difficult to use safely (CWE-78). try using a library call that implements the same functionality if available. QLocale::system().dayName(d.dayOfWeek(), QLocale::LongFormat)); data/libkf5eventviews-20.08.2/src/month/monthscene.cpp:366:38: [4] (shell) system: This causes a new program to execute and is difficult to use safely (CWE-78). try using a library call that implements the same functionality if available. QLocale::system().monthName(d.month(), QLocale::ShortFormat), data/libkf5eventviews-20.08.2/src/whatsnext/whatsnextview.cpp:101:27: [4] (shell) system: This causes a new program to execute and is difficult to use safely (CWE-78). try using a library call that implements the same functionality if available. mText += QLocale::system().toString(mStartDate); data/libkf5eventviews-20.08.2/src/whatsnext/whatsnextview.cpp:105:22: [4] (shell) system: This causes a new program to execute and is difficult to use safely (CWE-78). try using a library call that implements the same functionality if available. QLocale::system().toString(mStartDate), data/libkf5eventviews-20.08.2/src/whatsnext/whatsnextview.cpp:106:22: [4] (shell) system: This causes a new program to execute and is difficult to use safely (CWE-78). try using a library call that implements the same functionality if available. QLocale::system().toString(mEndDate)); data/libkf5eventviews-20.08.2/src/todo/todoviewquicksearch.cpp:146:71: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). CalendarSupport::CategoryHierarchyReaderQComboBox(mPriorityCombo).read(priorityValues); ANALYSIS SUMMARY: Hits = 10 Lines analyzed = 25722 in approximately 0.64 seconds (40152 lines/second) Physical Source Lines of Code (SLOC) = 17961 Hits@level = [0] 0 [1] 1 [2] 0 [3] 0 [4] 9 [5] 0 Hits@level+ = [0+] 10 [1+] 10 [2+] 9 [3+] 9 [4+] 9 [5+] 0 Hits/KSLOC@level+ = [0+] 0.556762 [1+] 0.556762 [2+] 0.501086 [3+] 0.501086 [4+] 0.501086 [5+] 0 Dot directories skipped = 1 (--followdotdir overrides) Minimum risk level = 1 Not every hit is necessarily a security vulnerability. There may be other security vulnerabilities; review your code! See 'Secure Programming HOWTO' (https://dwheeler.com/secure-programs) for more information.