Flawfinder version 2.0.10, (C) 2001-2019 David A. Wheeler.
Number of rules (primarily dangerous function names) in C/C++ ruleset: 223
Examining data/librostlab-1.0.20/lib/rostlab/aux_functions.h
Examining data/librostlab-1.0.20/lib/rostlab/blosum62.h
Examining data/librostlab-1.0.20/lib/rostlab/cwd_resource.h
Examining data/librostlab-1.0.20/lib/rostlab/cxxgrp.h
Examining data/librostlab-1.0.20/lib/rostlab/cxxpwd.h
Examining data/librostlab-1.0.20/lib/rostlab/euid_egid_resource.h
Examining data/librostlab-1.0.20/lib/rostlab/file_lock_resource.h
Examining data/librostlab-1.0.20/lib/rostlab/mapAA2int.h
Examining data/librostlab-1.0.20/lib/rostlab/readFasta.h
Examining data/librostlab-1.0.20/lib/rostlab/rostlab_stdexcept.h
Examining data/librostlab-1.0.20/lib/rostlab/rostlab_stdio.h
Examining data/librostlab-1.0.20/lib/rostlab/rostlab_stdlib.h
Examining data/librostlab-1.0.20/lib/rostlab/umask_resource.h
Examining data/librostlab-1.0.20/lib/blosum62.cpp
Examining data/librostlab-1.0.20/debian/examples/blosum62_test.cpp
FINAL RESULTS:
data/librostlab-1.0.20/lib/rostlab/rostlab_stdlib.h:43:19: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
inline int system( const char* __path, ... );
data/librostlab-1.0.20/lib/rostlab/rostlab_stdlib.h:44:19: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
inline int system( const std::vector<std::string>& __args );
data/librostlab-1.0.20/lib/rostlab/rostlab_stdlib.h:76:19: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
inline int system( const char* __path, ... )
data/librostlab-1.0.20/lib/rostlab/rostlab_stdlib.h:91:10: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
return system( argvec );
data/librostlab-1.0.20/lib/rostlab/rostlab_stdlib.h:94:19: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
inline int system( const std::vector<std::string>& __args )
data/librostlab-1.0.20/lib/rostlab/rostlab_stdlib.h:104:9: [4] (shell) execvp:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
if( execvp( argv[0], argv ) ) throw runtime_error( strerror( errno ) );
data/librostlab-1.0.20/lib/rostlab/blosum62.h:25:21: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
extern const signed char blosum62[27][27];
data/librostlab-1.0.20/lib/rostlab/cxxpwd.h:68:3: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char buf[buflen];
data/librostlab-1.0.20/lib/rostlab/cxxpwd.h:94:3: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char buf[buflen];
data/librostlab-1.0.20/lib/rostlab/file_lock_resource.h:67:13: [2] (misc) fopen:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
_fh = fopen( _filename.c_str(), __mode.c_str() );
data/librostlab-1.0.20/lib/rostlab/rostlab_stdio.h:60:14: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
uint16_t strlen; fread( strlen, __in);
data/librostlab-1.0.20/lib/rostlab/rostlab_stdio.h:60:29: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
uint16_t strlen; fread( strlen, __in);
data/librostlab-1.0.20/lib/rostlab/rostlab_stdio.h:61:10: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if( !strlen ){ __v = string(); return; }
data/librostlab-1.0.20/lib/rostlab/rostlab_stdio.h:63:60: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
string::value_type buf[ sizeof( string::value_type ) * strlen ];
data/librostlab-1.0.20/lib/rostlab/rostlab_stdio.h:64:74: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
size_t managed_to_read = ::fread( buf, sizeof( string::value_type ), strlen, __in );
data/librostlab-1.0.20/lib/rostlab/rostlab_stdio.h:65:28: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if( managed_to_read != strlen ) throw rostlab::runtime_error( strerror(errno) );
data/librostlab-1.0.20/lib/rostlab/umask_resource.h:36:68: [1] (access) umask:
Ensure that umask is given most restrictive possible setting (e.g., 066 or
077) (CWE-732).
umask_resource( mode_t __new_mode ) : _old_mode( umask( __new_mode ) ) {};
data/librostlab-1.0.20/lib/rostlab/umask_resource.h:37:38: [1] (access) umask:
Ensure that umask is given most restrictive possible setting (e.g., 066 or
077) (CWE-732).
virtual ~umask_resource(){ umask( _old_mode ); }
ANALYSIS SUMMARY:
Hits = 18
Lines analyzed = 1380 in approximately 0.10 seconds (13219 lines/second)
Physical Source Lines of Code (SLOC) = 838
Hits@level = [0] 10 [1] 8 [2] 4 [3] 0 [4] 6 [5] 0
Hits@level+ = [0+] 28 [1+] 18 [2+] 10 [3+] 6 [4+] 6 [5+] 0
Hits/KSLOC@level+ = [0+] 33.4129 [1+] 21.4797 [2+] 11.9332 [3+] 7.1599 [4+] 7.1599 [5+] 0
Dot directories skipped = 1 (--followdotdir overrides)
Minimum risk level = 1
Not every hit is necessarily a security vulnerability.
There may be other security vulnerabilities; review your code!
See 'Secure Programming HOWTO'
(https://dwheeler.com/secure-programs) for more information.