Flawfinder version 2.0.10, (C) 2001-2019 David A. Wheeler.
Number of rules (primarily dangerous function names) in C/C++ ruleset: 223
Examining data/libkgapi-20.08.2/autotests/fakeauthwidget.cpp
Examining data/libkgapi-20.08.2/autotests/fakeauthwidget.h
Examining data/libkgapi-20.08.2/autotests/fakenetworkreply.cpp
Examining data/libkgapi-20.08.2/autotests/calendar/eventdeletejobtest.cpp
Examining data/libkgapi-20.08.2/autotests/calendar/eventmodifyjobtest.cpp
Examining data/libkgapi-20.08.2/autotests/calendar/calendarcreatejobtest.cpp
Examining data/libkgapi-20.08.2/autotests/calendar/freebusyqueryjobtest.cpp
Examining data/libkgapi-20.08.2/autotests/calendar/calendarmodifyjobtest.cpp
Examining data/libkgapi-20.08.2/autotests/calendar/calendarfetchjobtest.cpp
Examining data/libkgapi-20.08.2/autotests/calendar/calendardeletejobtest.cpp
Examining data/libkgapi-20.08.2/autotests/calendar/eventfetchjobtest.cpp
Examining data/libkgapi-20.08.2/autotests/calendar/eventcreatejobtest.cpp
Examining data/libkgapi-20.08.2/autotests/calendar/calendartestutils.h
Examining data/libkgapi-20.08.2/autotests/calendar/calendartestutils.cpp
Examining data/libkgapi-20.08.2/autotests/fakeaccountstorage.cpp
Examining data/libkgapi-20.08.2/autotests/fakenetworkreply.h
Examining data/libkgapi-20.08.2/autotests/fakenetworkaccessmanager.h
Examining data/libkgapi-20.08.2/autotests/contacts/contactsgroupmodifyjobtest.cpp
Examining data/libkgapi-20.08.2/autotests/contacts/contactfetchphotojobtest.cpp
Examining data/libkgapi-20.08.2/autotests/contacts/contactsgroupfetchjobtest.cpp
Examining data/libkgapi-20.08.2/autotests/contacts/contactmodifyjobtest.cpp
Examining data/libkgapi-20.08.2/autotests/contacts/contactstestutils.cpp
Examining data/libkgapi-20.08.2/autotests/contacts/contactsgroupcreatejobtest.cpp
Examining data/libkgapi-20.08.2/autotests/contacts/contactfetchjobtest.cpp
Examining data/libkgapi-20.08.2/autotests/contacts/contactsgroupdeletejobtest.cpp
Examining data/libkgapi-20.08.2/autotests/contacts/contactcreatejobtest.cpp
Examining data/libkgapi-20.08.2/autotests/contacts/contactstestutils.h
Examining data/libkgapi-20.08.2/autotests/contacts/contactdeletejobtest.cpp
Examining data/libkgapi-20.08.2/autotests/drive/drivessearchquerytest.cpp
Examining data/libkgapi-20.08.2/autotests/drive/filecopyjobtest.cpp
Examining data/libkgapi-20.08.2/autotests/drive/filecreatejobtest.cpp
Examining data/libkgapi-20.08.2/autotests/drive/teamdrivecreatejobtest.cpp
Examining data/libkgapi-20.08.2/autotests/drive/teamdrivefetchjobtest.cpp
Examining data/libkgapi-20.08.2/autotests/drive/aboutfetchjobtest.cpp
Examining data/libkgapi-20.08.2/autotests/drive/drivesmodifyjobtest.cpp
Examining data/libkgapi-20.08.2/autotests/drive/drivesdeletejobtest.cpp
Examining data/libkgapi-20.08.2/autotests/drive/changefetchjobtest.cpp
Examining data/libkgapi-20.08.2/autotests/drive/teamdrivemodifyjobtest.cpp
Examining data/libkgapi-20.08.2/autotests/drive/drivetestutils.cpp
Examining data/libkgapi-20.08.2/autotests/drive/teamdrivedeletejobtest.cpp
Examining data/libkgapi-20.08.2/autotests/drive/filedeletejob.cpp
Examining data/libkgapi-20.08.2/autotests/drive/drivesfetchjobtest.cpp
Examining data/libkgapi-20.08.2/autotests/drive/teamdrivesearchquerytest.cpp
Examining data/libkgapi-20.08.2/autotests/drive/drivetestutils.h
Examining data/libkgapi-20.08.2/autotests/drive/filesearchquerytest.cpp
Examining data/libkgapi-20.08.2/autotests/drive/drivescreatejobtest.cpp
Examining data/libkgapi-20.08.2/autotests/drive/driveshidejobtest.cpp
Examining data/libkgapi-20.08.2/autotests/fakeaccountstorage.h
Examining data/libkgapi-20.08.2/autotests/tasks/taskstestutils.cpp
Examining data/libkgapi-20.08.2/autotests/tasks/tasklistcreatejobtest.cpp
Examining data/libkgapi-20.08.2/autotests/tasks/taskstestutils.h
Examining data/libkgapi-20.08.2/autotests/tasks/taskcreatejobtest.cpp
Examining data/libkgapi-20.08.2/autotests/tasks/taskfetchjobtest.cpp
Examining data/libkgapi-20.08.2/autotests/tasks/taskdeletejobtest.cpp
Examining data/libkgapi-20.08.2/autotests/tasks/tasklistmodifyjobtest.cpp
Examining data/libkgapi-20.08.2/autotests/tasks/taskmodifyjobtest.cpp
Examining data/libkgapi-20.08.2/autotests/tasks/taskmovejobtest.cpp
Examining data/libkgapi-20.08.2/autotests/tasks/tasklistfetchjobtest.cpp
Examining data/libkgapi-20.08.2/autotests/tasks/tasklistdeletejobtest.cpp
Examining data/libkgapi-20.08.2/autotests/core/accountmanagertest.cpp
Examining data/libkgapi-20.08.2/autotests/core/fetchjobtest.cpp
Examining data/libkgapi-20.08.2/autotests/core/accountinfofetchjobtest.cpp
Examining data/libkgapi-20.08.2/autotests/core/createjobtest.cpp
Examining data/libkgapi-20.08.2/autotests/testutils.cpp
Examining data/libkgapi-20.08.2/autotests/fakenetworkaccessmanagerfactory.h
Examining data/libkgapi-20.08.2/autotests/fakenetworkaccessmanagerfactory.cpp
Examining data/libkgapi-20.08.2/autotests/testutils.h
Examining data/libkgapi-20.08.2/autotests/fakenamtest.cpp
Examining data/libkgapi-20.08.2/autotests/fakenetworkaccessmanager.cpp
Examining data/libkgapi-20.08.2/examples/teamdrive/mainwindow.h
Examining data/libkgapi-20.08.2/examples/teamdrive/mainwindow.cpp
Examining data/libkgapi-20.08.2/examples/teamdrive/main.cpp
Examining data/libkgapi-20.08.2/examples/contacts/mainwindow.h
Examining data/libkgapi-20.08.2/examples/contacts/mainwindow.cpp
Examining data/libkgapi-20.08.2/examples/contacts/main.cpp
Examining data/libkgapi-20.08.2/examples/tasks/mainwindow.h
Examining data/libkgapi-20.08.2/examples/tasks/mainwindow.cpp
Examining data/libkgapi-20.08.2/examples/tasks/main.cpp
Examining data/libkgapi-20.08.2/examples/drives/mainwindow.h
Examining data/libkgapi-20.08.2/examples/drives/mainwindow.cpp
Examining data/libkgapi-20.08.2/examples/drives/main.cpp
Examining data/libkgapi-20.08.2/examples/staticmaps/mainwindow.h
Examining data/libkgapi-20.08.2/examples/staticmaps/mainwindow.cpp
Examining data/libkgapi-20.08.2/examples/staticmaps/main.cpp
Examining data/libkgapi-20.08.2/examples/permissions/mainwindow.h
Examining data/libkgapi-20.08.2/examples/permissions/mainwindow.cpp
Examining data/libkgapi-20.08.2/examples/permissions/main.cpp
Examining data/libkgapi-20.08.2/src/calendar/calendardeletejob.h
Examining data/libkgapi-20.08.2/src/calendar/calendarfetchjob.h
Examining data/libkgapi-20.08.2/src/calendar/eventdeletejob.cpp
Examining data/libkgapi-20.08.2/src/calendar/calendardeletejob.cpp
Examining data/libkgapi-20.08.2/src/calendar/calendarmodifyjob.cpp
Examining data/libkgapi-20.08.2/src/calendar/calendar.cpp
Examining data/libkgapi-20.08.2/src/calendar/freebusyqueryjob.h
Examining data/libkgapi-20.08.2/src/calendar/eventmodifyjob.cpp
Examining data/libkgapi-20.08.2/src/calendar/calendar.h
Examining data/libkgapi-20.08.2/src/calendar/calendarmodifyjob.h
Examining data/libkgapi-20.08.2/src/calendar/event.cpp
Examining data/libkgapi-20.08.2/src/calendar/eventcreatejob.h
Examining data/libkgapi-20.08.2/src/calendar/calendarcreatejob.h
Examining data/libkgapi-20.08.2/src/calendar/calendarfetchjob.cpp
Examining data/libkgapi-20.08.2/src/calendar/enums.h
Examining data/libkgapi-20.08.2/src/calendar/calendarcreatejob.cpp
Examining data/libkgapi-20.08.2/src/calendar/eventmovejob.h
Examining data/libkgapi-20.08.2/src/calendar/eventfetchjob.h
Examining data/libkgapi-20.08.2/src/calendar/eventmovejob.cpp
Examining data/libkgapi-20.08.2/src/calendar/reminder.cpp
Examining data/libkgapi-20.08.2/src/calendar/calendarservice.h
Examining data/libkgapi-20.08.2/src/calendar/eventdeletejob.h
Examining data/libkgapi-20.08.2/src/calendar/calendarservice.cpp
Examining data/libkgapi-20.08.2/src/calendar/event.h
Examining data/libkgapi-20.08.2/src/calendar/eventcreatejob.cpp
Examining data/libkgapi-20.08.2/src/calendar/eventfetchjob.cpp
Examining data/libkgapi-20.08.2/src/calendar/freebusyqueryjob.cpp
Examining data/libkgapi-20.08.2/src/calendar/reminder.h
Examining data/libkgapi-20.08.2/src/calendar/eventmodifyjob.h
Examining data/libkgapi-20.08.2/src/contacts/contactcreatejob.h
Examining data/libkgapi-20.08.2/src/contacts/contactsgroupmodifyjob.h
Examining data/libkgapi-20.08.2/src/contacts/contactfetchjob.cpp
Examining data/libkgapi-20.08.2/src/contacts/contactsservice.h
Examining data/libkgapi-20.08.2/src/contacts/contact.cpp
Examining data/libkgapi-20.08.2/src/contacts/contactsgroupdeletejob.cpp
Examining data/libkgapi-20.08.2/src/contacts/contactcreatejob.cpp
Examining data/libkgapi-20.08.2/src/contacts/contactsservice.cpp
Examining data/libkgapi-20.08.2/src/contacts/contactfetchphotojob.h
Examining data/libkgapi-20.08.2/src/contacts/contactsgroupfetchjob.h
Examining data/libkgapi-20.08.2/src/contacts/contactmodifyjob.cpp
Examining data/libkgapi-20.08.2/src/contacts/contactfetchjob.h
Examining data/libkgapi-20.08.2/src/contacts/contactdeletejob.cpp
Examining data/libkgapi-20.08.2/src/contacts/contactsgroupmodifyjob.cpp
Examining data/libkgapi-20.08.2/src/contacts/contactdeletejob.h
Examining data/libkgapi-20.08.2/src/contacts/contactsgroup.cpp
Examining data/libkgapi-20.08.2/src/contacts/contactmodifyjob.h
Examining data/libkgapi-20.08.2/src/contacts/contact.h
Examining data/libkgapi-20.08.2/src/contacts/contactfetchphotojob.cpp
Examining data/libkgapi-20.08.2/src/contacts/contactsgroupdeletejob.h
Examining data/libkgapi-20.08.2/src/contacts/contactsgroupcreatejob.h
Examining data/libkgapi-20.08.2/src/contacts/contactsgroupcreatejob.cpp
Examining data/libkgapi-20.08.2/src/contacts/contactsgroupfetchjob.cpp
Examining data/libkgapi-20.08.2/src/contacts/contactsgroup.h
Examining data/libkgapi-20.08.2/src/drive/permissionfetchjob.h
Examining data/libkgapi-20.08.2/src/drive/childreferencecreatejob.cpp
Examining data/libkgapi-20.08.2/src/drive/fileabstractdatajob.cpp
Examining data/libkgapi-20.08.2/src/drive/permissionmodifyjob.cpp
Examining data/libkgapi-20.08.2/src/drive/revisionfetchjob.cpp
Examining data/libkgapi-20.08.2/src/drive/childreference.cpp
Examining data/libkgapi-20.08.2/src/drive/revisiondeletejob.cpp
Examining data/libkgapi-20.08.2/src/drive/teamdrivecreatejob.h
Examining data/libkgapi-20.08.2/src/drive/searchquery.h
Examining data/libkgapi-20.08.2/src/drive/permission_p.h
Examining data/libkgapi-20.08.2/src/drive/parentreference.cpp
Examining data/libkgapi-20.08.2/src/drive/driveshidejob.h
Examining data/libkgapi-20.08.2/src/drive/parentreferencedeletejob.cpp
Examining data/libkgapi-20.08.2/src/drive/filefetchcontentjob.h
Examining data/libkgapi-20.08.2/src/drive/aboutfetchjob.h
Examining data/libkgapi-20.08.2/src/drive/parentreference_p.h
Examining data/libkgapi-20.08.2/src/drive/parentreferencecreatejob.h
Examining data/libkgapi-20.08.2/src/drive/teamdrivecreatejob.cpp
Examining data/libkgapi-20.08.2/src/drive/permission.h
Examining data/libkgapi-20.08.2/src/drive/parentreference.h
Examining data/libkgapi-20.08.2/src/drive/teamdrivedeletejob.cpp
Examining data/libkgapi-20.08.2/src/drive/about.cpp
Examining data/libkgapi-20.08.2/src/drive/revisionmodifyjob.cpp
Examining data/libkgapi-20.08.2/src/drive/filefetchjob.h
Examining data/libkgapi-20.08.2/src/drive/childreferencecreatejob.h
Examining data/libkgapi-20.08.2/src/drive/revision.h
Examining data/libkgapi-20.08.2/src/drive/fileabstractuploadjob.cpp
Examining data/libkgapi-20.08.2/src/drive/fileabstractdatajob.h
Examining data/libkgapi-20.08.2/src/drive/drivescreatejob.h
Examining data/libkgapi-20.08.2/src/drive/fileuntrashjob.h
Examining data/libkgapi-20.08.2/src/drive/drivesdeletejob.h
Examining data/libkgapi-20.08.2/src/drive/parentreferencefetchjob.h
Examining data/libkgapi-20.08.2/src/drive/appfetchjob.cpp
Examining data/libkgapi-20.08.2/src/drive/permissionmodifyjob.h
Examining data/libkgapi-20.08.2/src/drive/drivesdeletejob.cpp
Examining data/libkgapi-20.08.2/src/drive/filedeletejob.cpp
Examining data/libkgapi-20.08.2/src/drive/fileabstractuploadjob.h
Examining data/libkgapi-20.08.2/src/drive/filefetchjob.cpp
Examining data/libkgapi-20.08.2/src/drive/revisionmodifyjob.h
Examining data/libkgapi-20.08.2/src/drive/teamdrivemodifyjob.cpp
Examining data/libkgapi-20.08.2/src/drive/filecreatejob.h
Examining data/libkgapi-20.08.2/src/drive/changefetchjob.cpp
Examining data/libkgapi-20.08.2/src/drive/childreferencefetchjob.h
Examining data/libkgapi-20.08.2/src/drive/teamdrivedeletejob.h
Examining data/libkgapi-20.08.2/src/drive/fileabstractmodifyjob.h
Examining data/libkgapi-20.08.2/src/drive/revisiondeletejob.h
Examining data/libkgapi-20.08.2/src/drive/driveservice.h
Examining data/libkgapi-20.08.2/src/drive/permission.cpp
Examining data/libkgapi-20.08.2/src/drive/changefetchjob.h
Examining data/libkgapi-20.08.2/src/drive/filetouchjob.cpp
Examining data/libkgapi-20.08.2/src/drive/change.h
Examining data/libkgapi-20.08.2/src/drive/app.cpp
Examining data/libkgapi-20.08.2/src/drive/filemodifyjob.cpp
Examining data/libkgapi-20.08.2/src/drive/searchquery.cpp
Examining data/libkgapi-20.08.2/src/drive/drives.h
Examining data/libkgapi-20.08.2/src/drive/about.h
Examining data/libkgapi-20.08.2/src/drive/filemodifyjob.h
Examining data/libkgapi-20.08.2/src/drive/parentreferencecreatejob.cpp
Examining data/libkgapi-20.08.2/src/drive/drivescreatejob.cpp
Examining data/libkgapi-20.08.2/src/drive/filesearchquery.cpp
Examining data/libkgapi-20.08.2/src/drive/permissiondeletejob.cpp
Examining data/libkgapi-20.08.2/src/drive/filecopyjob.cpp
Examining data/libkgapi-20.08.2/src/drive/filedeletejob.h
Examining data/libkgapi-20.08.2/src/drive/permissionfetchjob.cpp
Examining data/libkgapi-20.08.2/src/drive/filetrashjob.h
Examining data/libkgapi-20.08.2/src/drive/app.h
Examining data/libkgapi-20.08.2/src/drive/file_p.h
Examining data/libkgapi-20.08.2/src/drive/teamdrivesearchquery.cpp
Examining data/libkgapi-20.08.2/src/drive/file.h
Examining data/libkgapi-20.08.2/src/drive/user.cpp
Examining data/libkgapi-20.08.2/src/drive/drivesfetchjob.cpp
Examining data/libkgapi-20.08.2/src/drive/childreference.h
Examining data/libkgapi-20.08.2/src/drive/childreferencedeletejob.h
Examining data/libkgapi-20.08.2/src/drive/teamdrivesearchquery.h
Examining data/libkgapi-20.08.2/src/drive/filetrashjob.cpp
Examining data/libkgapi-20.08.2/src/drive/revision.cpp
Examining data/libkgapi-20.08.2/src/drive/drivessearchquery.h
Examining data/libkgapi-20.08.2/src/drive/teamdrivefetchjob.cpp
Examining data/libkgapi-20.08.2/src/drive/parentreferencefetchjob.cpp
Examining data/libkgapi-20.08.2/src/drive/driveservice.cpp
Examining data/libkgapi-20.08.2/src/drive/teamdrive.cpp
Examining data/libkgapi-20.08.2/src/drive/fileabstractmodifyjob.cpp
Examining data/libkgapi-20.08.2/src/drive/appfetchjob.h
Examining data/libkgapi-20.08.2/src/drive/drivesmodifyjob.h
Examining data/libkgapi-20.08.2/src/drive/teamdrive.h
Examining data/libkgapi-20.08.2/src/drive/revisionfetchjob.h
Examining data/libkgapi-20.08.2/src/drive/teamdrivefetchjob.h
Examining data/libkgapi-20.08.2/src/drive/childreferencefetchjob.cpp
Examining data/libkgapi-20.08.2/src/drive/drivesfetchjob.h
Examining data/libkgapi-20.08.2/src/drive/drivessearchquery.cpp
Examining data/libkgapi-20.08.2/src/drive/file.cpp
Examining data/libkgapi-20.08.2/src/drive/permissiondeletejob.h
Examining data/libkgapi-20.08.2/src/drive/filecopyjob.h
Examining data/libkgapi-20.08.2/src/drive/permissioncreatejob.cpp
Examining data/libkgapi-20.08.2/src/drive/user.h
Examining data/libkgapi-20.08.2/src/drive/drives.cpp
Examining data/libkgapi-20.08.2/src/drive/fileuntrashjob.cpp
Examining data/libkgapi-20.08.2/src/drive/parentreferencedeletejob.h
Examining data/libkgapi-20.08.2/src/drive/drivesmodifyjob.cpp
Examining data/libkgapi-20.08.2/src/drive/permissioncreatejob.h
Examining data/libkgapi-20.08.2/src/drive/driveshidejob.cpp
Examining data/libkgapi-20.08.2/src/drive/filefetchcontentjob.cpp
Examining data/libkgapi-20.08.2/src/drive/aboutfetchjob.cpp
Examining data/libkgapi-20.08.2/src/drive/teamdrivemodifyjob.h
Examining data/libkgapi-20.08.2/src/drive/change.cpp
Examining data/libkgapi-20.08.2/src/drive/filesearchquery.h
Examining data/libkgapi-20.08.2/src/drive/childreferencedeletejob.cpp
Examining data/libkgapi-20.08.2/src/drive/filetouchjob.h
Examining data/libkgapi-20.08.2/src/drive/filecreatejob.cpp
Examining data/libkgapi-20.08.2/src/blogger/bloggerservice.h
Examining data/libkgapi-20.08.2/src/blogger/postfetchjob.h
Examining data/libkgapi-20.08.2/src/blogger/postcreatejob.h
Examining data/libkgapi-20.08.2/src/blogger/commentdeletecontentjob.cpp
Examining data/libkgapi-20.08.2/src/blogger/commentdeletecontentjob.h
Examining data/libkgapi-20.08.2/src/blogger/pagedeletejob.h
Examining data/libkgapi-20.08.2/src/blogger/postpublishjob.h
Examining data/libkgapi-20.08.2/src/blogger/commentapprovejob.h
Examining data/libkgapi-20.08.2/src/blogger/postfetchjob.cpp
Examining data/libkgapi-20.08.2/src/blogger/blogfetchjob.cpp
Examining data/libkgapi-20.08.2/src/blogger/commentdeletejob.cpp
Examining data/libkgapi-20.08.2/src/blogger/postpublishjob.cpp
Examining data/libkgapi-20.08.2/src/blogger/page.h
Examining data/libkgapi-20.08.2/src/blogger/pagemodifyjob.cpp
Examining data/libkgapi-20.08.2/src/blogger/postmodifyjob.h
Examining data/libkgapi-20.08.2/src/blogger/post.cpp
Examining data/libkgapi-20.08.2/src/blogger/pagecreatejob.cpp
Examining data/libkgapi-20.08.2/src/blogger/bloggerservice.cpp
Examining data/libkgapi-20.08.2/src/blogger/page.cpp
Examining data/libkgapi-20.08.2/src/blogger/commentfetchjob.cpp
Examining data/libkgapi-20.08.2/src/blogger/post.h
Examining data/libkgapi-20.08.2/src/blogger/blogfetchjob.h
Examining data/libkgapi-20.08.2/src/blogger/commentapprovejob.cpp
Examining data/libkgapi-20.08.2/src/blogger/commentdeletejob.h
Examining data/libkgapi-20.08.2/src/blogger/blog.h
Examining data/libkgapi-20.08.2/src/blogger/postdeletejob.cpp
Examining data/libkgapi-20.08.2/src/blogger/comment.cpp
Examining data/libkgapi-20.08.2/src/blogger/postdeletejob.h
Examining data/libkgapi-20.08.2/src/blogger/postcreatejob.cpp
Examining data/libkgapi-20.08.2/src/blogger/commentfetchjob.h
Examining data/libkgapi-20.08.2/src/blogger/postsearchjob.cpp
Examining data/libkgapi-20.08.2/src/blogger/pagedeletejob.cpp
Examining data/libkgapi-20.08.2/src/blogger/pagefetchjob.cpp
Examining data/libkgapi-20.08.2/src/blogger/postsearchjob.h
Examining data/libkgapi-20.08.2/src/blogger/postmodifyjob.cpp
Examining data/libkgapi-20.08.2/src/blogger/pagecreatejob.h
Examining data/libkgapi-20.08.2/src/blogger/pagemodifyjob.h
Examining data/libkgapi-20.08.2/src/blogger/comment.h
Examining data/libkgapi-20.08.2/src/blogger/pagefetchjob.h
Examining data/libkgapi-20.08.2/src/blogger/blog.cpp
Examining data/libkgapi-20.08.2/src/debug.h
Examining data/libkgapi-20.08.2/src/tasks/task.cpp
Examining data/libkgapi-20.08.2/src/tasks/taskfetchjob.cpp
Examining data/libkgapi-20.08.2/src/tasks/tasklist.cpp
Examining data/libkgapi-20.08.2/src/tasks/taskmodifyjob.cpp
Examining data/libkgapi-20.08.2/src/tasks/taskmodifyjob.h
Examining data/libkgapi-20.08.2/src/tasks/tasklistcreatejob.cpp
Examining data/libkgapi-20.08.2/src/tasks/tasksservice.h
Examining data/libkgapi-20.08.2/src/tasks/taskmovejob.h
Examining data/libkgapi-20.08.2/src/tasks/tasklistmodifyjob.cpp
Examining data/libkgapi-20.08.2/src/tasks/tasklistdeletejob.cpp
Examining data/libkgapi-20.08.2/src/tasks/taskfetchjob.h
Examining data/libkgapi-20.08.2/src/tasks/tasklistfetchjob.h
Examining data/libkgapi-20.08.2/src/tasks/taskcreatejob.h
Examining data/libkgapi-20.08.2/src/tasks/taskdeletejob.h
Examining data/libkgapi-20.08.2/src/tasks/tasksservice.cpp
Examining data/libkgapi-20.08.2/src/tasks/tasklistfetchjob.cpp
Examining data/libkgapi-20.08.2/src/tasks/task.h
Examining data/libkgapi-20.08.2/src/tasks/tasklistmodifyjob.h
Examining data/libkgapi-20.08.2/src/tasks/taskcreatejob.cpp
Examining data/libkgapi-20.08.2/src/tasks/tasklist.h
Examining data/libkgapi-20.08.2/src/tasks/tasklistcreatejob.h
Examining data/libkgapi-20.08.2/src/tasks/taskmovejob.cpp
Examining data/libkgapi-20.08.2/src/tasks/tasklistdeletejob.h
Examining data/libkgapi-20.08.2/src/tasks/taskdeletejob.cpp
Examining data/libkgapi-20.08.2/src/core/account.cpp
Examining data/libkgapi-20.08.2/src/core/accountmanager.h
Examining data/libkgapi-20.08.2/src/core/deletejob.cpp
Examining data/libkgapi-20.08.2/src/core/ui/authwidget.cpp
Examining data/libkgapi-20.08.2/src/core/ui/authwidget_p.h
Examining data/libkgapi-20.08.2/src/core/ui/authwidget.h
Examining data/libkgapi-20.08.2/src/core/ui/authwidgetfactory.cpp
Examining data/libkgapi-20.08.2/src/core/ui/authwidget_p.cpp
Examining data/libkgapi-20.08.2/src/core/ui/authwidgetfactory_p.h
Examining data/libkgapi-20.08.2/src/core/account.h
Examining data/libkgapi-20.08.2/src/core/deletejob.h
Examining data/libkgapi-20.08.2/src/core/accountstorage_p.h
Examining data/libkgapi-20.08.2/src/core/authjob.h
Examining data/libkgapi-20.08.2/src/core/utils.h
Examining data/libkgapi-20.08.2/src/core/object.h
Examining data/libkgapi-20.08.2/src/core/networkaccessmanagerfactory_p.h
Examining data/libkgapi-20.08.2/src/core/job.cpp
Examining data/libkgapi-20.08.2/src/core/modifyjob.h
Examining data/libkgapi-20.08.2/src/core/accountmanager.cpp
Examining data/libkgapi-20.08.2/src/core/fetchjob.cpp
Examining data/libkgapi-20.08.2/src/core/types.h
Examining data/libkgapi-20.08.2/src/core/utils.cpp
Examining data/libkgapi-20.08.2/src/core/fetchjob.h
Examining data/libkgapi-20.08.2/src/core/networkaccessmanagerfactory.cpp
Examining data/libkgapi-20.08.2/src/core/job_p.h
Examining data/libkgapi-20.08.2/src/core/createjob.h
Examining data/libkgapi-20.08.2/src/core/object.cpp
Examining data/libkgapi-20.08.2/src/core/private/queuehelper_p.h
Examining data/libkgapi-20.08.2/src/core/private/newtokensfetchjob_p.h
Examining data/libkgapi-20.08.2/src/core/private/newtokensfetchjob.cpp
Examining data/libkgapi-20.08.2/src/core/accountstorage_kwallet.cpp
Examining data/libkgapi-20.08.2/src/core/authjob.cpp
Examining data/libkgapi-20.08.2/src/core/utils_p.h
Examining data/libkgapi-20.08.2/src/core/accountinfo/accountinfo.h
Examining data/libkgapi-20.08.2/src/core/accountinfo/accountinfo.cpp
Examining data/libkgapi-20.08.2/src/core/accountinfo/accountinfofetchjob.h
Examining data/libkgapi-20.08.2/src/core/accountinfo/accountinfofetchjob.cpp
Examining data/libkgapi-20.08.2/src/core/modifyjob.cpp
Examining data/libkgapi-20.08.2/src/core/accountstorage_kwallet_p.h
Examining data/libkgapi-20.08.2/src/core/accountstorage.cpp
Examining data/libkgapi-20.08.2/src/core/createjob.cpp
Examining data/libkgapi-20.08.2/src/core/job.h
Examining data/libkgapi-20.08.2/src/debug.cpp
Examining data/libkgapi-20.08.2/src/staticmaps/staticmaptilefetchjob.cpp
Examining data/libkgapi-20.08.2/src/staticmaps/staticmapmarker.h
Examining data/libkgapi-20.08.2/src/staticmaps/staticmapurl.cpp
Examining data/libkgapi-20.08.2/src/staticmaps/staticmappath.h
Examining data/libkgapi-20.08.2/src/staticmaps/staticmapurl.h
Examining data/libkgapi-20.08.2/src/staticmaps/staticmaptilefetchjob.h
Examining data/libkgapi-20.08.2/src/staticmaps/staticmappath.cpp
Examining data/libkgapi-20.08.2/src/staticmaps/staticmapmarker.cpp
Examining data/libkgapi-20.08.2/src/saslplugin/config.h
Examining data/libkgapi-20.08.2/src/saslplugin/xoauth2plugin.c
Examining data/libkgapi-20.08.2/src/saslplugin/xoauth2plugin_init.c
Examining data/libkgapi-20.08.2/src/saslplugin/plugin_common.h
Examining data/libkgapi-20.08.2/src/saslplugin/plugin_common.c
Examining data/libkgapi-20.08.2/src/latitude/locationfetchjob.cpp
Examining data/libkgapi-20.08.2/src/latitude/latitudeservice.cpp
Examining data/libkgapi-20.08.2/src/latitude/locationdeletejob.h
Examining data/libkgapi-20.08.2/src/latitude/locationfetchhistoryjob.cpp
Examining data/libkgapi-20.08.2/src/latitude/location.h
Examining data/libkgapi-20.08.2/src/latitude/latitude.h
Examining data/libkgapi-20.08.2/src/latitude/locationfetchhistoryjob.h
Examining data/libkgapi-20.08.2/src/latitude/locationcreatejob.cpp
Examining data/libkgapi-20.08.2/src/latitude/locationdeletejob.cpp
Examining data/libkgapi-20.08.2/src/latitude/latitudeservice.h
Examining data/libkgapi-20.08.2/src/latitude/location.cpp
Examining data/libkgapi-20.08.2/src/latitude/locationcreatejob.h
Examining data/libkgapi-20.08.2/src/latitude/locationfetchjob.h
FINAL RESULTS:
data/libkgapi-20.08.2/src/saslplugin/plugin_common.c:281:5: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy((char *) *out, in);
data/libkgapi-20.08.2/src/saslplugin/plugin_common.c:821:5: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
strcpy(*fulluser, useronly);
data/libkgapi-20.08.2/src/saslplugin/plugin_common.c:823:5: [4] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused).
strcat(*fulluser, realm);
data/libkgapi-20.08.2/autotests/calendar/calendartestutils.cpp:16:18: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
VERIFY_RET(f.open(QIODevice::ReadOnly), {});
data/libkgapi-20.08.2/autotests/calendar/calendartestutils.cpp:26:18: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
VERIFY_RET(f.open(QIODevice::ReadOnly), {});
data/libkgapi-20.08.2/autotests/contacts/contactstestutils.cpp:16:18: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
VERIFY_RET(f.open(QIODevice::ReadOnly), {});
data/libkgapi-20.08.2/autotests/contacts/contactstestutils.cpp:26:18: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
VERIFY_RET(f.open(QIODevice::ReadOnly), {});
data/libkgapi-20.08.2/autotests/core/accountinfofetchjobtest.cpp:34:19: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
QVERIFY(f.open(QIODevice::ReadOnly));
data/libkgapi-20.08.2/autotests/drive/drivetestutils.cpp:20:18: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
VERIFY_RET(f.open(QIODevice::ReadOnly), {});
data/libkgapi-20.08.2/autotests/drive/drivetestutils.cpp:30:18: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
VERIFY_RET(f.open(QIODevice::ReadOnly), {});
data/libkgapi-20.08.2/autotests/drive/drivetestutils.cpp:40:18: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
VERIFY_RET(f.open(QIODevice::ReadOnly), {});
data/libkgapi-20.08.2/autotests/drive/drivetestutils.cpp:50:18: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
VERIFY_RET(f.open(QIODevice::ReadOnly), {});
data/libkgapi-20.08.2/autotests/drive/drivetestutils.cpp:60:18: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
VERIFY_RET(f.open(QIODevice::ReadOnly), {});
data/libkgapi-20.08.2/autotests/fakeaccountstorage.cpp:19:26: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
void FakeAccountStorage::open(const std::function<void (bool)> &callback)
data/libkgapi-20.08.2/autotests/fakeaccountstorage.h:19:10: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
void open(const std::function<void (bool)> &callback) override;
data/libkgapi-20.08.2/autotests/fakenetworkreply.cpp:33:13: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
mBuffer.open(QIODevice::ReadOnly);
data/libkgapi-20.08.2/autotests/fakenetworkreply.cpp:35:5: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
open(QIODevice::ReadOnly);
data/libkgapi-20.08.2/autotests/fakenetworkreply.cpp:47:5: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
open(QIODevice::ReadOnly);
data/libkgapi-20.08.2/autotests/tasks/taskstestutils.cpp:16:18: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
VERIFY_RET(f.open(QIODevice::ReadOnly), {});
data/libkgapi-20.08.2/autotests/tasks/taskstestutils.cpp:26:18: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
VERIFY_RET(f.open(QIODevice::ReadOnly), {});
data/libkgapi-20.08.2/autotests/testutils.cpp:30:24: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
VERIFY_RET(request.open(QIODevice::ReadOnly), {});
data/libkgapi-20.08.2/autotests/testutils.cpp:60:25: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
VERIFY_RET(response.open(QIODevice::ReadOnly), {});
data/libkgapi-20.08.2/autotests/testutils.cpp:113:15: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
tmpActual.open();
data/libkgapi-20.08.2/autotests/testutils.cpp:118:17: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
tmpExpected.open();
data/libkgapi-20.08.2/src/core/accountmanager.cpp:122:21: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
mStore->open(callback);
data/libkgapi-20.08.2/src/core/accountstorage_kwallet.cpp:48:22: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
void KWalletStorage::open(const std::function<void (bool)> &callback)
data/libkgapi-20.08.2/src/core/accountstorage_kwallet_p.h:31:10: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
void open(const std::function<void (bool)> &callback) override;
data/libkgapi-20.08.2/src/core/accountstorage_p.h:40:18: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
virtual void open(const std::function<void(bool)> &callback) = 0;
data/libkgapi-20.08.2/src/core/job.cpp:37:17: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
if (!mFile->open(QIODevice::WriteOnly | QIODevice::Truncate)) {
data/libkgapi-20.08.2/src/core/modifyjob.cpp:69:19: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
d->buffer.open(QIODevice::ReadOnly);
data/libkgapi-20.08.2/src/drive/fileabstractuploadjob.cpp:65:15: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
if (!file.open(QIODevice::ReadOnly)) {
data/libkgapi-20.08.2/src/saslplugin/config.h:517:5: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char __ss_pad2[_SS_PADSIZE];
data/libkgapi-20.08.2/src/saslplugin/plugin_common.c:122:5: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char hbuf[NI_MAXHOST];
data/libkgapi-20.08.2/src/saslplugin/plugin_common.c:164:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(&ss, ai->ai_addr, len);
data/libkgapi-20.08.2/src/saslplugin/plugin_common.c:172:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(out, &ss, len);
data/libkgapi-20.08.2/src/saslplugin/plugin_common.c:219:9: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(pos, vec[i].iov_base, vec[i].iov_len);
data/libkgapi-20.08.2/src/saslplugin/plugin_common.c:420:9: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy((*password)->data, prompt->result, prompt->len);
data/libkgapi-20.08.2/src/saslplugin/plugin_common.c:680:13: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(text->sizebuf + 4 - text->needsize, input, tocopy);
data/libkgapi-20.08.2/src/saslplugin/plugin_common.c:687:17: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(&(text->size), text->sizebuf, 4);
data/libkgapi-20.08.2/src/saslplugin/plugin_common.c:719:13: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(text->buffer + text->cursize, input, inputlen);
data/libkgapi-20.08.2/src/saslplugin/plugin_common.c:725:9: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(text->buffer + text->cursize, input, diff);
data/libkgapi-20.08.2/src/saslplugin/plugin_common.c:742:9: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(*output + *outputlen, tmp, tmplen);
data/libkgapi-20.08.2/src/saslplugin/plugin_common.h:164:5: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char sizebuf[4]; /* Buffer to accumulate the 4-byte size */
data/libkgapi-20.08.2/autotests/fakenetworkreply.cpp:91:20: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
return mBuffer.read(data, maxLen);
data/libkgapi-20.08.2/src/saslplugin/plugin_common.c:266:18: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
size_t len = strlen(in);
data/libkgapi-20.08.2/src/saslplugin/plugin_common.c:298:11: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
len = strlen(*str);
data/libkgapi-20.08.2/src/saslplugin/plugin_common.c:794:13: [1] (buffer) strncpy:
Easily used incorrectly; doesn't always \0-terminate or check for invalid
pointers [MS-banned] (CWE-120).
strncpy(*user, input, r - input + 1);
data/libkgapi-20.08.2/src/saslplugin/plugin_common.c:815:31: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
*fulluser = utils->malloc(strlen(useronly) + strlen(realm) + 2);
data/libkgapi-20.08.2/src/saslplugin/plugin_common.c:815:50: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
*fulluser = utils->malloc(strlen(useronly) + strlen(realm) + 2);
data/libkgapi-20.08.2/src/saslplugin/plugin_common.c:822:5: [1] (buffer) strcat:
Does not check for buffer overflows when concatenating to destination
[MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or
snprintf (warning: strncat is easily misused). Risk is low because the
source is a constant character.
strcat(*fulluser, "@");
data/libkgapi-20.08.2/src/saslplugin/xoauth2plugin.c:152:46: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
+ ((authid && *authid) ? strlen(authid) : 0) /* %s */
data/libkgapi-20.08.2/src/saslplugin/xoauth2plugin.c:155:44: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
+ ((token && *token) ? strlen(token) : 0) /* %s */
ANALYSIS SUMMARY:
Hits = 52
Lines analyzed = 51064 in approximately 1.25 seconds (40813 lines/second)
Physical Source Lines of Code (SLOC) = 32636
Hits@level = [0] 12 [1] 9 [2] 40 [3] 0 [4] 3 [5] 0
Hits@level+ = [0+] 64 [1+] 52 [2+] 43 [3+] 3 [4+] 3 [5+] 0
Hits/KSLOC@level+ = [0+] 1.96102 [1+] 1.59333 [2+] 1.31756 [3+] 0.091923 [4+] 0.091923 [5+] 0
Dot directories skipped = 1 (--followdotdir overrides)
Minimum risk level = 1
Not every hit is necessarily a security vulnerability.
There may be other security vulnerabilities; review your code!
See 'Secure Programming HOWTO'
(https://dwheeler.com/secure-programs) for more information.