Flawfinder version 2.0.10, (C) 2001-2019 David A. Wheeler. Number of rules (primarily dangerous function names) in C/C++ ruleset: 223 Examining data/libkf5mailimporter-20.08.2/src/mailimporterakonadi/filterimporterakonadi.h Examining data/libkf5mailimporter-20.08.2/src/mailimporterakonadi/autotests/filtermailmangziptest.h Examining data/libkf5mailimporter-20.08.2/src/mailimporterakonadi/autotests/filterthunderbirdtest.h Examining data/libkf5mailimporter-20.08.2/src/mailimporterakonadi/autotests/filterclawsmailtest.h Examining data/libkf5mailimporter-20.08.2/src/mailimporterakonadi/autotests/filterimportertest.cpp Examining data/libkf5mailimporter-20.08.2/src/mailimporterakonadi/autotests/filterplaintest.cpp Examining data/libkf5mailimporter-20.08.2/src/mailimporterakonadi/autotests/filterbalsamailtest.cpp Examining data/libkf5mailimporter-20.08.2/src/mailimporterakonadi/autotests/filtermailapptest.h Examining data/libkf5mailimporter-20.08.2/src/mailimporterakonadi/autotests/filtersylpheedtest.cpp Examining data/libkf5mailimporter-20.08.2/src/mailimporterakonadi/autotests/filtermailapptest.cpp Examining data/libkf5mailimporter-20.08.2/src/mailimporterakonadi/autotests/filterimporterakonaditest.cpp Examining data/libkf5mailimporter-20.08.2/src/mailimporterakonadi/autotests/filterimportertestutil.h Examining data/libkf5mailimporter-20.08.2/src/mailimporterakonadi/autotests/filterplaintest.h Examining data/libkf5mailimporter-20.08.2/src/mailimporterakonadi/autotests/filtersylpheedtest.h Examining data/libkf5mailimporter-20.08.2/src/mailimporterakonadi/autotests/filtermailmangziptest.cpp Examining data/libkf5mailimporter-20.08.2/src/mailimporterakonadi/autotests/filtermboxtest.cpp Examining data/libkf5mailimporter-20.08.2/src/mailimporterakonadi/autotests/filterlnotestest.cpp Examining data/libkf5mailimporter-20.08.2/src/mailimporterakonadi/autotests/filterimportertest.h Examining data/libkf5mailimporter-20.08.2/src/mailimporterakonadi/autotests/filterthebattest.cpp Examining data/libkf5mailimporter-20.08.2/src/mailimporterakonadi/autotests/filterimportertestutil.cpp Examining data/libkf5mailimporter-20.08.2/src/mailimporterakonadi/autotests/filtericedovetest.cpp Examining data/libkf5mailimporter-20.08.2/src/mailimporterakonadi/autotests/filterlnotestest.h Examining data/libkf5mailimporter-20.08.2/src/mailimporterakonadi/autotests/filterclawsmailtest.cpp Examining data/libkf5mailimporter-20.08.2/src/mailimporterakonadi/autotests/filterimporterakonaditest.h Examining data/libkf5mailimporter-20.08.2/src/mailimporterakonadi/autotests/filtericedovetest.h Examining data/libkf5mailimporter-20.08.2/src/mailimporterakonadi/autotests/filterbalsamailtest.h Examining data/libkf5mailimporter-20.08.2/src/mailimporterakonadi/autotests/filterthebattest.h Examining data/libkf5mailimporter-20.08.2/src/mailimporterakonadi/autotests/filterthunderbirdtest.cpp Examining data/libkf5mailimporter-20.08.2/src/mailimporterakonadi/autotests/filtermboxtest.h Examining data/libkf5mailimporter-20.08.2/src/mailimporterakonadi/filterimportertestutil.h Examining data/libkf5mailimporter-20.08.2/src/mailimporterakonadi/filterimporterakonadi.cpp Examining data/libkf5mailimporter-20.08.2/src/mailimporterakonadi/filterimportertestutil.cpp Examining data/libkf5mailimporter-20.08.2/src/mailimporter/selectthunderbirdprofilewidget.h Examining data/libkf5mailimporter-20.08.2/src/mailimporter/autotests/filtermailmangziptest.h Examining data/libkf5mailimporter-20.08.2/src/mailimporter/autotests/filterthunderbirdtest.h Examining data/libkf5mailimporter-20.08.2/src/mailimporter/autotests/filterclawsmailtest.h Examining data/libkf5mailimporter-20.08.2/src/mailimporter/autotests/filterimportertest.cpp Examining data/libkf5mailimporter-20.08.2/src/mailimporter/autotests/filterplaintest.cpp Examining data/libkf5mailimporter-20.08.2/src/mailimporter/autotests/filterbalsamailtest.cpp Examining data/libkf5mailimporter-20.08.2/src/mailimporter/autotests/filtermailapptest.h Examining data/libkf5mailimporter-20.08.2/src/mailimporter/autotests/filtersylpheedtest.cpp Examining data/libkf5mailimporter-20.08.2/src/mailimporter/autotests/filtermailapptest.cpp Examining data/libkf5mailimporter-20.08.2/src/mailimporter/autotests/messagestatustest.cpp Examining data/libkf5mailimporter-20.08.2/src/mailimporter/autotests/filterimportertestutil.h Examining data/libkf5mailimporter-20.08.2/src/mailimporter/autotests/filterplaintest.h Examining data/libkf5mailimporter-20.08.2/src/mailimporter/autotests/filtersylpheedtest.h Examining data/libkf5mailimporter-20.08.2/src/mailimporter/autotests/filtermailmangziptest.cpp Examining data/libkf5mailimporter-20.08.2/src/mailimporter/autotests/filtermboxtest.cpp Examining data/libkf5mailimporter-20.08.2/src/mailimporter/autotests/filterlnotestest.cpp Examining data/libkf5mailimporter-20.08.2/src/mailimporter/autotests/filterimportertest.h Examining data/libkf5mailimporter-20.08.2/src/mailimporter/autotests/selectthunderbirdprofiledialogtest.cpp Examining data/libkf5mailimporter-20.08.2/src/mailimporter/autotests/selectthunderbirdprofiledialogtest.h Examining data/libkf5mailimporter-20.08.2/src/mailimporter/autotests/filterthebattest.cpp Examining data/libkf5mailimporter-20.08.2/src/mailimporter/autotests/filterimportertestutil.cpp Examining data/libkf5mailimporter-20.08.2/src/mailimporter/autotests/filtericedovetest.cpp Examining data/libkf5mailimporter-20.08.2/src/mailimporter/autotests/filterlnotestest.h Examining data/libkf5mailimporter-20.08.2/src/mailimporter/autotests/filterclawsmailtest.cpp Examining data/libkf5mailimporter-20.08.2/src/mailimporter/autotests/filtericedovetest.h Examining data/libkf5mailimporter-20.08.2/src/mailimporter/autotests/filterbalsamailtest.h Examining data/libkf5mailimporter-20.08.2/src/mailimporter/autotests/filterthebattest.h Examining data/libkf5mailimporter-20.08.2/src/mailimporter/autotests/filterthunderbirdtest.cpp Examining data/libkf5mailimporter-20.08.2/src/mailimporter/autotests/filtermboxtest.h Examining data/libkf5mailimporter-20.08.2/src/mailimporter/autotests/messagestatustest.h Examining data/libkf5mailimporter-20.08.2/src/mailimporter/filters.cpp Examining data/libkf5mailimporter-20.08.2/src/mailimporter/filters/filterbalsa.h Examining data/libkf5mailimporter-20.08.2/src/mailimporter/filters/filtermailmangzip.h Examining data/libkf5mailimporter-20.08.2/src/mailimporter/filters/filtericedove.cpp Examining data/libkf5mailimporter-20.08.2/src/mailimporter/filters/filterthunderbird.h Examining data/libkf5mailimporter-20.08.2/src/mailimporter/filters/filterseamonkey.cpp Examining data/libkf5mailimporter-20.08.2/src/mailimporter/filters/filterbalsa.cpp Examining data/libkf5mailimporter-20.08.2/src/mailimporter/filters/filteroe.cpp Examining data/libkf5mailimporter-20.08.2/src/mailimporter/filters/filterkmailarchive.h Examining data/libkf5mailimporter-20.08.2/src/mailimporter/filters/filterclawsmail.h Examining data/libkf5mailimporter-20.08.2/src/mailimporter/filters/filterevolution_v2.h Examining data/libkf5mailimporter-20.08.2/src/mailimporter/filters/filtericedove.h Examining data/libkf5mailimporter-20.08.2/src/mailimporter/filters/filtersylpheed.h Examining data/libkf5mailimporter-20.08.2/src/mailimporter/filters/filtermbox.h Examining data/libkf5mailimporter-20.08.2/src/mailimporter/filters/filtermailapp.h Examining data/libkf5mailimporter-20.08.2/src/mailimporter/filters/filterkmail_maildir.h Examining data/libkf5mailimporter-20.08.2/src/mailimporter/filters/filtermailapp.cpp Examining data/libkf5mailimporter-20.08.2/src/mailimporter/filters/filterpmail.h Examining data/libkf5mailimporter-20.08.2/src/mailimporter/filters/filterplain.h Examining data/libkf5mailimporter-20.08.2/src/mailimporter/filters/filterthebat.cpp Examining data/libkf5mailimporter-20.08.2/src/mailimporter/filters/filtersylpheed.cpp Examining data/libkf5mailimporter-20.08.2/src/mailimporter/filters/filterkmailarchive.cpp Examining data/libkf5mailimporter-20.08.2/src/mailimporter/filters/filterthebat.h Examining data/libkf5mailimporter-20.08.2/src/mailimporter/filters/filterevolution.h Examining data/libkf5mailimporter-20.08.2/src/mailimporter/filters/filteroe.h Examining data/libkf5mailimporter-20.08.2/src/mailimporter/filters/filterthunderbird.cpp Examining data/libkf5mailimporter-20.08.2/src/mailimporter/filters/filtermbox.cpp Examining data/libkf5mailimporter-20.08.2/src/mailimporter/filters/filterevolution_v2.cpp Examining data/libkf5mailimporter-20.08.2/src/mailimporter/filters/filteropera.h Examining data/libkf5mailimporter-20.08.2/src/mailimporter/filters/filterevolution_v3.h Examining data/libkf5mailimporter-20.08.2/src/mailimporter/filters/filterlnotes.h Examining data/libkf5mailimporter-20.08.2/src/mailimporter/filters/filterclawsmail.cpp Examining data/libkf5mailimporter-20.08.2/src/mailimporter/filters/filtermailmangzip.cpp Examining data/libkf5mailimporter-20.08.2/src/mailimporter/filters/filterplain.cpp Examining data/libkf5mailimporter-20.08.2/src/mailimporter/filters/filterevolution_v3.cpp Examining data/libkf5mailimporter-20.08.2/src/mailimporter/filters/filterpmail.cpp Examining data/libkf5mailimporter-20.08.2/src/mailimporter/filters/filterkmail_maildir.cpp Examining data/libkf5mailimporter-20.08.2/src/mailimporter/filters/filterseamonkey.h Examining data/libkf5mailimporter-20.08.2/src/mailimporter/filters/filteropera.cpp Examining data/libkf5mailimporter-20.08.2/src/mailimporter/filters/filterlnotes.cpp Examining data/libkf5mailimporter-20.08.2/src/mailimporter/filters/filterevolution.cpp Examining data/libkf5mailimporter-20.08.2/src/mailimporter/mailimporter_private_export.h Examining data/libkf5mailimporter-20.08.2/src/mailimporter/filterinfogui.h Examining data/libkf5mailimporter-20.08.2/src/mailimporter/filterimporterbase.cpp Examining data/libkf5mailimporter-20.08.2/src/mailimporter/filterinfogui.cpp Examining data/libkf5mailimporter-20.08.2/src/mailimporter/importmailswidget.cpp Examining data/libkf5mailimporter-20.08.2/src/mailimporter/filterinfo.cpp Examining data/libkf5mailimporter-20.08.2/src/mailimporter/filterinfo.h Examining data/libkf5mailimporter-20.08.2/src/mailimporter/filters.h Examining data/libkf5mailimporter-20.08.2/src/mailimporter/importmailswidget.h Examining data/libkf5mailimporter-20.08.2/src/mailimporter/messagestatus.h Examining data/libkf5mailimporter-20.08.2/src/mailimporter/mailimporter_utils.h Examining data/libkf5mailimporter-20.08.2/src/mailimporter/messagestatus.cpp Examining data/libkf5mailimporter-20.08.2/src/mailimporter/othermailerutil.cpp Examining data/libkf5mailimporter-20.08.2/src/mailimporter/selectthunderbirdprofilewidget.cpp Examining data/libkf5mailimporter-20.08.2/src/mailimporter/othermailerutil.h Examining data/libkf5mailimporter-20.08.2/src/mailimporter/filterimporterbase.h FINAL RESULTS: data/libkf5mailimporter-20.08.2/src/mailimporter/filters/filterevolution.cpp:143:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!mbox.open(QIODevice::ReadOnly)) { data/libkf5mailimporter-20.08.2/src/mailimporter/filters/filterevolution.cpp:176:17: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). tmp.open(); data/libkf5mailimporter-20.08.2/src/mailimporter/filters/filterevolution_v2.cpp:199:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!mbox.open(QIODevice::ReadOnly)) { data/libkf5mailimporter-20.08.2/src/mailimporter/filters/filterevolution_v2.cpp:230:17: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). tmp.open(); data/libkf5mailimporter-20.08.2/src/mailimporter/filters/filterkmailarchive.cpp:206:19: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!archive->open(QIODevice::ReadOnly)) { data/libkf5mailimporter-20.08.2/src/mailimporter/filters/filterlnotes.cpp:106:12: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!f.open(QIODevice::ReadOnly)) { data/libkf5mailimporter-20.08.2/src/mailimporter/filters/filterlnotes.cpp:133:27: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). tempfile->open(); data/libkf5mailimporter-20.08.2/src/mailimporter/filters/filtermailapp.cpp:84:19: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!mbox.open(QIODevice::ReadOnly)) { data/libkf5mailimporter-20.08.2/src/mailimporter/filters/filtermailapp.cpp:106:21: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). tmp.open(); data/libkf5mailimporter-20.08.2/src/mailimporter/filters/filtermailmangzip.cpp:71:17: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). device->open(QIODevice::ReadOnly); data/libkf5mailimporter-20.08.2/src/mailimporter/filters/filtermailmangzip.cpp:86:17: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). tmp.open(); data/libkf5mailimporter-20.08.2/src/mailimporter/filters/filtermbox.cpp:66:19: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!mbox.open(QIODevice::ReadOnly)) { data/libkf5mailimporter-20.08.2/src/mailimporter/filters/filtermbox.cpp:83:21: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). tmp.open(); data/libkf5mailimporter-20.08.2/src/mailimporter/filters/filteroe.cpp:133:19: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!mailfile.open(QIODevice::ReadOnly)) { data/libkf5mailimporter-20.08.2/src/mailimporter/filters/filteroe.cpp:198:13: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). tmp.open(); data/libkf5mailimporter-20.08.2/src/mailimporter/filters/filteroe.cpp:355:9: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). tmp.open(); data/libkf5mailimporter-20.08.2/src/mailimporter/filters/filteropera.cpp:86:26: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!operaArchiv.open(QIODevice::ReadOnly)) { data/libkf5mailimporter-20.08.2/src/mailimporter/filters/filteropera.cpp:107:21: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). tmp.open(); data/libkf5mailimporter-20.08.2/src/mailimporter/filters/filterpmail.cpp:154:9: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char folder[86]; data/libkf5mailimporter-20.08.2/src/mailimporter/filters/filterpmail.cpp:155:9: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char id[42]; data/libkf5mailimporter-20.08.2/src/mailimporter/filters/filterpmail.cpp:159:12: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!f.open(QIODevice::ReadOnly)) { data/libkf5mailimporter-20.08.2/src/mailimporter/filters/filterpmail.cpp:178:22: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). tempfile.open(); data/libkf5mailimporter-20.08.2/src/mailimporter/filters/filterpmail.cpp:212:9: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char folder[58]; data/libkf5mailimporter-20.08.2/src/mailimporter/filters/filterpmail.cpp:213:9: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char id[31]; data/libkf5mailimporter-20.08.2/src/mailimporter/filters/filterpmail.cpp:225:12: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!f.open(QIODevice::ReadOnly)) { data/libkf5mailimporter-20.08.2/src/mailimporter/filters/filterpmail.cpp:244:12: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!f.open(QIODevice::ReadOnly)) { data/libkf5mailimporter-20.08.2/src/mailimporter/filters/filterpmail.cpp:251:22: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). tempfile.open(); data/libkf5mailimporter-20.08.2/src/mailimporter/filters/filterpmail.cpp:282:19: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!hierarch.open(QIODevice::ReadOnly)) { data/libkf5mailimporter-20.08.2/src/mailimporter/filters/filtersylpheed.cpp:282:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!file.open(QIODevice::ReadOnly)) { data/libkf5mailimporter-20.08.2/src/mailimporter/filters/filterthebat.cpp:176:14: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!tbb.open(QIODevice::ReadOnly)) { data/libkf5mailimporter-20.08.2/src/mailimporter/filters/filterthebat.cpp:240:21: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). tmp.open(); data/libkf5mailimporter-20.08.2/src/mailimporter/filters/filterthunderbird.cpp:287:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!mbox.open(QIODevice::ReadOnly)) { data/libkf5mailimporter-20.08.2/src/mailimporter/filters/filterthunderbird.cpp:317:17: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). tmp.open(); data/libkf5mailimporter-20.08.2/src/mailimporterakonadi/filterimporterakonadi.cpp:98:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (f.open(QIODevice::ReadOnly)) { data/libkf5mailimporter-20.08.2/src/mailimporter/filters/filterpmail.cpp:163:20: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). long l = f.read((char *)&pmm_head, sizeof(pmm_head)); data/libkf5mailimporter-20.08.2/src/mailimporter/filters/filterpmail.cpp:229:11: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). f.read((char *)&pmg_head, sizeof(pmg_head)); data/libkf5mailimporter-20.08.2/src/mailimporter/filters/filterthebat.cpp:188:25: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). while ((l = tbb.read(input.data(), 50))) { data/libkf5mailimporter-20.08.2/src/mailimporter/filters/filterthebat.cpp:237:21: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). tbb.read(input.data(), endPos - lastPos); ANALYSIS SUMMARY: Hits = 38 Lines analyzed = 10153 in approximately 0.32 seconds (31778 lines/second) Physical Source Lines of Code (SLOC) = 6354 Hits@level = [0] 0 [1] 4 [2] 34 [3] 0 [4] 0 [5] 0 Hits@level+ = [0+] 38 [1+] 38 [2+] 34 [3+] 0 [4+] 0 [5+] 0 Hits/KSLOC@level+ = [0+] 5.98048 [1+] 5.98048 [2+] 5.35096 [3+] 0 [4+] 0 [5+] 0 Dot directories skipped = 1 (--followdotdir overrides) Minimum risk level = 1 Not every hit is necessarily a security vulnerability. There may be other security vulnerabilities; review your code! See 'Secure Programming HOWTO' (https://dwheeler.com/secure-programs) for more information.