Flawfinder version 2.0.10, (C) 2001-2019 David A. Wheeler.
Number of rules (primarily dangerous function names) in C/C++ ruleset: 223
Examining data/mediainfo-20.09/Project/BCB/GUI/MediaInfo_GUI.cpp
Examining data/mediainfo-20.09/Project/BCB/GUI_New/GUI_New.cpp
Examining data/mediainfo-20.09/Project/BCB/PreRelease/PreRelease.cpp
Examining data/mediainfo-20.09/Source/Common/Core.cpp
Examining data/mediainfo-20.09/Source/Common/Utils.cpp
Examining data/mediainfo-20.09/Source/Common/Preferences.cpp
Examining data/mediainfo-20.09/Source/Common/Core.h
Examining data/mediainfo-20.09/Source/Common/Preferences.h
Examining data/mediainfo-20.09/Source/Common/Utilsx.cpp
Examining data/mediainfo-20.09/Source/Common/Utils.h
Examining data/mediainfo-20.09/Source/CLI/Config.h
Examining data/mediainfo-20.09/Source/CLI/CLI_Main.cpp
Examining data/mediainfo-20.09/Source/CLI/Help.h
Examining data/mediainfo-20.09/Source/CLI/CLI_Main.h
Examining data/mediainfo-20.09/Source/CLI/CommandLine_Parser.cpp
Examining data/mediainfo-20.09/Source/CLI/Help.cpp
Examining data/mediainfo-20.09/Source/CLI/CommandLine_Parser.h
Examining data/mediainfo-20.09/Source/PreRelease/WxWidgets/App.cpp
Examining data/mediainfo-20.09/Source/PreRelease/WxWidgets/App.h
Examining data/mediainfo-20.09/Source/PreRelease/WxWidgets/GUI_Main.h
Examining data/mediainfo-20.09/Source/PreRelease/WxWidgets/GUI_Main.cpp
Examining data/mediainfo-20.09/Source/PreRelease/Language_Others.h
Examining data/mediainfo-20.09/Source/PreRelease/Language_All.cpp
Examining data/mediainfo-20.09/Source/PreRelease/VCL/PreRelease_.h
Examining data/mediainfo-20.09/Source/PreRelease/VCL/PreRelease_.cpp
Examining data/mediainfo-20.09/Source/PreRelease/Language_Others.cpp
Examining data/mediainfo-20.09/Source/PreRelease/Language_All.h
Examining data/mediainfo-20.09/Source/GUI/Common/GUI_Main_Easy_Core.cpp
Examining data/mediainfo-20.09/Source/GUI/Common/GUI_Main_Common_Core.h
Examining data/mediainfo-20.09/Source/GUI/Common/GUI_Main_Common_Core.cpp
Examining data/mediainfo-20.09/Source/GUI/Common/GUI_Main_Easy_Box_Core.h
Examining data/mediainfo-20.09/Source/GUI/Common/GUI_Main_Easy_Box_Core.cpp
Examining data/mediainfo-20.09/Source/GUI/Common/GUI_Main_Easy_Core.h
Examining data/mediainfo-20.09/Source/GUI/VCL_New/GUI_Main_HTML.cpp
Examining data/mediainfo-20.09/Source/GUI/VCL_New/GUI_Main_Tree.cpp
Examining data/mediainfo-20.09/Source/GUI/VCL_New/GUI_Main_Tree.h
Examining data/mediainfo-20.09/Source/GUI/VCL_New/GUI_Main_Easy.cpp
Examining data/mediainfo-20.09/Source/GUI/VCL_New/GUI_Main_Easy.h
Examining data/mediainfo-20.09/Source/GUI/VCL_New/GUI_Main.cpp
Examining data/mediainfo-20.09/Source/GUI/VCL_New/GUI_Main_HTML.h
Examining data/mediainfo-20.09/Source/GUI/VCL_New/GUI_Main_Text.cpp
Examining data/mediainfo-20.09/Source/GUI/VCL_New/GUI_Main_Text.h
Examining data/mediainfo-20.09/Source/GUI/VCL_New/GUI_Main.h
Examining data/mediainfo-20.09/Source/GUI/WxWidgets/GUI_Main_Tree.h
Examining data/mediainfo-20.09/Source/GUI/WxWidgets/GUI_Main.h
Examining data/mediainfo-20.09/Source/GUI/WxWidgets/GUI_Main_Sheet.h
Examining data/mediainfo-20.09/Source/GUI/WxWidgets/GUI_Main_HTML.cpp
Examining data/mediainfo-20.09/Source/GUI/WxWidgets/GUI_Main_Easy.h
Examining data/mediainfo-20.09/Source/GUI/WxWidgets/App.cpp
Examining data/mediainfo-20.09/Source/GUI/WxWidgets/GUI_Main_FileDrop.h
Examining data/mediainfo-20.09/Source/GUI/WxWidgets/GUI_Main_Easy.cpp
Examining data/mediainfo-20.09/Source/GUI/WxWidgets/GUI_Main_Easy_Box.h
Examining data/mediainfo-20.09/Source/GUI/WxWidgets/GUI_Main_Tree.cpp
Examining data/mediainfo-20.09/Source/GUI/WxWidgets/GUI_Main_Text.h
Examining data/mediainfo-20.09/Source/GUI/WxWidgets/GUI_Main_FileDrop.cpp
Examining data/mediainfo-20.09/Source/GUI/WxWidgets/App.h
Examining data/mediainfo-20.09/Source/GUI/WxWidgets/GUI_Main_Easy_Box.cpp
Examining data/mediainfo-20.09/Source/GUI/WxWidgets/GUI_Main.cpp
Examining data/mediainfo-20.09/Source/GUI/WxWidgets/GUI_Main_Menu.cpp
Examining data/mediainfo-20.09/Source/GUI/WxWidgets/GUI_Main_HTML.h
Examining data/mediainfo-20.09/Source/GUI/WxWidgets/GUI_Main_Sheet.cpp
Examining data/mediainfo-20.09/Source/GUI/WxWidgets/GUI_Main_Text.cpp
Examining data/mediainfo-20.09/Source/GUI/Qt/editcustom.cpp
Examining data/mediainfo-20.09/Source/GUI/Qt/prefs.cpp
Examining data/mediainfo-20.09/Source/GUI/Qt/mainwindow.h
Examining data/mediainfo-20.09/Source/GUI/Qt/sheet.cpp
Examining data/mediainfo-20.09/Source/GUI/Qt/translate.cpp
Examining data/mediainfo-20.09/Source/GUI/Qt/export.h
Examining data/mediainfo-20.09/Source/GUI/Qt/editconfigtreetext.cpp
Examining data/mediainfo-20.09/Source/GUI/Qt/views.cpp
Examining data/mediainfo-20.09/Source/GUI/Qt/configtreetext.h
Examining data/mediainfo-20.09/Source/GUI/Qt/about.h
Examining data/mediainfo-20.09/Source/GUI/Qt/sheetview.cpp
Examining data/mediainfo-20.09/Source/GUI/Qt/editcustom.h
Examining data/mediainfo-20.09/Source/GUI/Qt/editsheet.h
Examining data/mediainfo-20.09/Source/GUI/Qt/configtreetext.cpp
Examining data/mediainfo-20.09/Source/GUI/Qt/columneditsheet.h
Examining data/mediainfo-20.09/Source/GUI/Qt/easyviewwidget.cpp
Examining data/mediainfo-20.09/Source/GUI/Qt/export.cpp
Examining data/mediainfo-20.09/Source/GUI/Qt/easyviewwidget.h
Examining data/mediainfo-20.09/Source/GUI/Qt/main.cpp
Examining data/mediainfo-20.09/Source/GUI/Qt/custom.h
Examining data/mediainfo-20.09/Source/GUI/Qt/sheet.h
Examining data/mediainfo-20.09/Source/GUI/Qt/views.h
Examining data/mediainfo-20.09/Source/GUI/Qt/translate.h
Examining data/mediainfo-20.09/Source/GUI/Qt/editsheet.cpp
Examining data/mediainfo-20.09/Source/GUI/Qt/custom.cpp
Examining data/mediainfo-20.09/Source/GUI/Qt/editconfigtreetext.h
Examining data/mediainfo-20.09/Source/GUI/Qt/sheetview.h
Examining data/mediainfo-20.09/Source/GUI/Qt/mainwindow.cpp
Examining data/mediainfo-20.09/Source/GUI/Qt/prefs.h
Examining data/mediainfo-20.09/Source/GUI/Qt/about.cpp
Examining data/mediainfo-20.09/Source/GUI/Qt/columneditsheet.cpp
Examining data/mediainfo-20.09/Source/GUI/VCL/GUI_Preferences_Custom.h
Examining data/mediainfo-20.09/Source/GUI/VCL/GUI_Main.cpp
Examining data/mediainfo-20.09/Source/GUI/VCL/GUI_Main.h
Examining data/mediainfo-20.09/Source/GUI/VCL/GUI_Preferences_Language.cpp
Examining data/mediainfo-20.09/Source/GUI/VCL/GUI_Preferences.cpp
Examining data/mediainfo-20.09/Source/GUI/VCL/GUI_Preferences_Output.cpp
Examining data/mediainfo-20.09/Source/GUI/VCL/GUI_Export.cpp
Examining data/mediainfo-20.09/Source/GUI/VCL/GUI_Preferences.h
Examining data/mediainfo-20.09/Source/GUI/VCL/GUI_Web.cpp
Examining data/mediainfo-20.09/Source/GUI/VCL/GUI_Preferences_Language.h
Examining data/mediainfo-20.09/Source/GUI/VCL/GUI_About.h
Examining data/mediainfo-20.09/Source/GUI/VCL/GUI_Export.h
Examining data/mediainfo-20.09/Source/GUI/VCL/GUI_Preferences_Sheet.h
Examining data/mediainfo-20.09/Source/GUI/VCL/GUI_Preferences_Output.h
Examining data/mediainfo-20.09/Source/GUI/VCL/GUI_Web.h
Examining data/mediainfo-20.09/Source/GUI/VCL/GUI_Preferences_Custom.cpp
Examining data/mediainfo-20.09/Source/GUI/VCL/GUI_Preferences_Sheet.cpp
Examining data/mediainfo-20.09/Source/GUI/VCL/GUI_About.cpp
Examining data/mediainfo-20.09/Source/GUI/UWP/MainPage.xaml.h
Examining data/mediainfo-20.09/Source/GUI/UWP/App.xaml.cpp
Examining data/mediainfo-20.09/Source/GUI/UWP/App.xaml.h
Examining data/mediainfo-20.09/Source/GUI/UWP/DataGrid.xaml.cpp
Examining data/mediainfo-20.09/Source/GUI/UWP/SheetViewHelpers.h
Examining data/mediainfo-20.09/Source/GUI/UWP/MainPage.xaml.cpp
Examining data/mediainfo-20.09/Source/GUI/UWP/AppCore.cpp
Examining data/mediainfo-20.09/Source/GUI/UWP/pch.cpp
Examining data/mediainfo-20.09/Source/GUI/UWP/Report.h
Examining data/mediainfo-20.09/Source/GUI/UWP/SheetView.xaml.h
Examining data/mediainfo-20.09/Source/GUI/UWP/HtmlView.xaml.cpp
Examining data/mediainfo-20.09/Source/GUI/UWP/ReportPage.xaml.h
Examining data/mediainfo-20.09/Source/GUI/UWP/AboutPage.xaml.cpp
Examining data/mediainfo-20.09/Source/GUI/UWP/EasyView.xaml.h
Examining data/mediainfo-20.09/Source/GUI/UWP/ReportPage.xaml.cpp
Examining data/mediainfo-20.09/Source/GUI/UWP/ReportViewModel.h
Examining data/mediainfo-20.09/Source/GUI/UWP/ReportDataSource.cpp
Examining data/mediainfo-20.09/Source/GUI/UWP/SheetEditFieldControl.xaml.h
Examining data/mediainfo-20.09/Source/GUI/UWP/AppCore.h
Examining data/mediainfo-20.09/Source/GUI/UWP/ReportViewModel.cpp
Examining data/mediainfo-20.09/Source/GUI/UWP/HtmlView.xaml.h
Examining data/mediainfo-20.09/Source/GUI/UWP/DataGrid.xaml.h
Examining data/mediainfo-20.09/Source/GUI/UWP/SheetView.xaml.cpp
Examining data/mediainfo-20.09/Source/GUI/UWP/ReportDataSource.h
Examining data/mediainfo-20.09/Source/GUI/UWP/pch.h
Examining data/mediainfo-20.09/Source/GUI/UWP/EasyView.xaml.cpp
Examining data/mediainfo-20.09/Source/GUI/UWP/AboutPage.xaml.h
Examining data/mediainfo-20.09/Source/GUI/UWP/SheetEditFieldControl.xaml.cpp
Examining data/mediainfo-20.09/Source/GUI/UWP/SheetEditDialog.xaml.h
Examining data/mediainfo-20.09/Source/GUI/UWP/Report.cpp
Examining data/mediainfo-20.09/Source/GUI/UWP/SheetEditDialog.xaml.cpp
Examining data/mediainfo-20.09/Source/GUI/iOS/MediaInfo/MediaInfoDLL_Static.h
Examining data/mediainfo-20.09/Source/GUI/Cocoa/easyStreamsTableDelegate.h
Examining data/mediainfo-20.09/Source/GUI/Cocoa/SubscribeWindowController.h
Examining data/mediainfo-20.09/Source/GUI/Cocoa/TreeOutline.h
Examining data/mediainfo-20.09/Source/GUI/Cocoa/PreferencesWindowController.h
Examining data/mediainfo-20.09/Source/GUI/Cocoa/NSString+wchar.h
Examining data/mediainfo-20.09/Source/GUI/Cocoa/oMediaInfoList.h
Examining data/mediainfo-20.09/Source/GUI/Cocoa/TreeOutlineDelegate.h
Examining data/mediainfo-20.09/Source/GUI/Cocoa/MediaInfoDLL/MediaInfoDLL_Static.h
Examining data/mediainfo-20.09/Source/GUI/Cocoa/CompareView.h
Examining data/mediainfo-20.09/Source/GUI/Cocoa/MediaInfoExporter.h
Examining data/mediainfo-20.09/Source/GUI/Cocoa/TreeView.h
Examining data/mediainfo-20.09/Source/GUI/Cocoa/HyperlinkButton.h
Examining data/mediainfo-20.09/Source/GUI/Cocoa/AppController.h
Examining data/mediainfo-20.09/Source/GUI/Cocoa/MyWindowController.h
Examining data/mediainfo-20.09/Source/GUI/Cocoa/SegmentedControlWithMenu.h
Examining data/mediainfo-20.09/Source/GUI/Cocoa/SubscriptionManager.h
Examining data/mediainfo-20.09/Source/GUI/Cocoa/AboutWindowController.h
Examining data/mediainfo-20.09/Source/GUI/Cocoa/SegmentedCellWithMenu.h
Examining data/mediainfo-20.09/Source/GUI/Cocoa/ProgressDialog.h
Examining data/mediainfo-20.09/Source/GUI/Cocoa/PurchaseReportController.h
Examining data/mediainfo-20.09/Source/GUI/Cocoa/DraggingFixView.h
FINAL RESULTS:
data/mediainfo-20.09/Source/Common/Preferences.cpp:451:26: [4] (shell) ShellExecute:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
case IDYES : ShellExecute(NULL, NULL, (Ztring(__T("http://mediaarea.net/"))+Prefs->Translate(__T(" Language_ISO639"))+__T("/MediaInfo?NewVersionRequested=true")).c_str(), NULL, NULL, SW_SHOWNORMAL);
data/mediainfo-20.09/Source/GUI/VCL/GUI_About.cpp:90:5: [4] (shell) ShellExecute:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
ShellExecute(NULL, NULL, MEDIAINFO_NEWVERSION, NULL, NULL, SW_SHOWNORMAL);
data/mediainfo-20.09/Source/GUI/VCL/GUI_About.cpp:96:5: [4] (shell) ShellExecute:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
ShellExecute(NULL, NULL, MEDIAINFO_DONATE, NULL, NULL, SW_SHOWNORMAL);
data/mediainfo-20.09/Source/GUI/VCL/GUI_About.cpp:102:5: [4] (shell) ShellExecute:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
ShellExecute(NULL, NULL, MEDIAINFO_MAILTO, NULL, NULL, SW_SHOWNORMAL);
data/mediainfo-20.09/Source/GUI/VCL/GUI_About.cpp:109:5: [4] (shell) ShellExecute:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
ShellExecute(NULL, NULL, Url.c_str(), NULL, NULL, SW_SHOWNORMAL);
data/mediainfo-20.09/Source/GUI/VCL/GUI_About.cpp:115:5: [4] (shell) ShellExecute:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
ShellExecute(NULL, NULL, MEDIAINFO_URL, NULL, NULL, SW_SHOWNORMAL);
data/mediainfo-20.09/Source/GUI/VCL/GUI_About.cpp:121:5: [4] (shell) ShellExecute:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
ShellExecute(NULL, NULL, Link.c_str(), NULL, NULL, SW_SHOWNORMAL);
data/mediainfo-20.09/Source/GUI/VCL/GUI_Main.cpp:1639:5: [4] (shell) ShellExecute:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
ShellExecute(NULL, __T("open"), Page_Sheet_X_Web_Url[KindOfStream].c_str(), NULL, NULL, 0);
data/mediainfo-20.09/Source/GUI/VCL/GUI_Main.cpp:1740:5: [4] (shell) ShellExecute:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
ShellExecute(NULL, NULL, __T("http://MediaArea.net/MediaInfo/de/Donate"), NULL, NULL, SW_SHOWNORMAL);
data/mediainfo-20.09/Source/GUI/VCL/GUI_Main.cpp:1746:5: [4] (shell) ShellExecute:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
ShellExecute(NULL, NULL, __T("http://MediaArea.net/MediaInfo/en/Donate"), NULL, NULL, SW_SHOWNORMAL);
data/mediainfo-20.09/Source/GUI/VCL/GUI_Main.cpp:1752:5: [4] (shell) ShellExecute:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
ShellExecute(NULL, NULL, __T("http://MediaArea.net/MediaInfo/es/Donate"), NULL, NULL, SW_SHOWNORMAL);
data/mediainfo-20.09/Source/GUI/VCL/GUI_Main.cpp:1758:5: [4] (shell) ShellExecute:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
ShellExecute(NULL, NULL, __T("http://MediaArea.net/MediaInfo/fr/Donate"), NULL, NULL, SW_SHOWNORMAL);
data/mediainfo-20.09/Source/GUI/VCL/GUI_Main.cpp:1764:5: [4] (shell) ShellExecute:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
ShellExecute(NULL, NULL, __T("http://MediaArea.net/MediaInfo/it/Donate"), NULL, NULL, SW_SHOWNORMAL);
data/mediainfo-20.09/Source/GUI/VCL/GUI_Main.cpp:1770:5: [4] (shell) ShellExecute:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
ShellExecute(NULL, NULL, __T("http://MediaArea.net/MediaInfo/ja/Donate"), NULL, NULL, SW_SHOWNORMAL);
data/mediainfo-20.09/Source/GUI/VCL/GUI_Main.cpp:1776:5: [4] (shell) ShellExecute:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
ShellExecute(NULL, NULL, __T("http://MediaArea.net/MediaInfo/pl/Donate"), NULL, NULL, SW_SHOWNORMAL);
data/mediainfo-20.09/Source/GUI/VCL/GUI_Main.cpp:1782:5: [4] (shell) ShellExecute:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
ShellExecute(NULL, NULL, __T("http://MediaArea.net/MediaInfo/zh_CN/Donate"), NULL, NULL, SW_SHOWNORMAL);
data/mediainfo-20.09/Source/GUI/VCL/GUI_Main.cpp:1788:5: [4] (shell) ShellExecute:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
ShellExecute(NULL, NULL, __T("http://MediaArea.net/MediaInfo/zh_TW/Donate"), NULL, NULL, SW_SHOWNORMAL);
data/mediainfo-20.09/Source/GUI/VCL/GUI_Main.cpp:1794:5: [4] (shell) ShellExecute:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
ShellExecute(NULL, NULL, (Ztring(__T("http://mediaarea.net/"))+Prefs->Translate(__T(" Language_ISO639"))+__T("MediaInfo/Donate")).c_str(), NULL, NULL, SW_SHOWNORMAL);
data/mediainfo-20.09/Source/GUI/VCL/GUI_Main.cpp:1800:5: [4] (shell) ShellExecute:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
ShellExecute(NULL, NULL, (Ztring(__T("http://mediaarea.net/"))+Prefs->Translate(__T(" Language_ISO639"))+__T("/MediaInfo/?NewVersionRequested=true")).c_str(), NULL, NULL, SW_SHOWNORMAL);
data/mediainfo-20.09/Source/GUI/VCL/GUI_Main.cpp:1806:5: [4] (shell) ShellExecute:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
ShellExecute(NULL, NULL, Prefs->Translate(__T("SponsorUrl")).c_str(), NULL, NULL, SW_SHOWNORMAL);
data/mediainfo-20.09/Source/GUI/WxWidgets/GUI_Main_Easy_Box.cpp:159:9: [4] (shell) ShellExecute:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
ShellExecute(NULL, __T("open"), Button_Click().c_str(), NULL, NULL, 0); //wxExecute(__T("cmd /C start ")+Button_Click());
data/mediainfo-20.09/Source/Common/Preferences.cpp:933:14: [3] (misc) LoadLibrary:
Ensure that the full path to the library is specified, or current directory
may be used (CWE-829, CWE-20). Use registry entry or GetWindowsDirectory to
find library path, if you aren't already.
Kernel32=LoadLibrary(__T("Kernel32.dll"));
data/mediainfo-20.09/Source/Common/Preferences.cpp:936:14: [3] (misc) LoadLibrary:
Ensure that the full path to the library is specified, or current directory
may be used (CWE-829, CWE-20). Use registry entry or GetWindowsDirectory to
find library path, if you aren't already.
AdvAPI32=LoadLibrary(__T("AdvAPI32.dll"));
data/mediainfo-20.09/Source/Common/Preferences.cpp:97:5: [2] (buffer) TCHAR:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
TCHAR szPath[MAX_PATH];
data/mediainfo-20.09/Source/Common/Preferences.cpp:247:9: [2] (buffer) TCHAR:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
TCHAR szPath[MAX_PATH];
data/mediainfo-20.09/Source/Common/Preferences.cpp:961:9: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char lpMsgBuf[1000];
data/mediainfo-20.09/Source/Common/Preferences.cpp:978:17: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char lpMsgBuf[1000];
data/mediainfo-20.09/Source/Common/Preferences.cpp:1003:17: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char lpMsgBuf[1000];
data/mediainfo-20.09/Source/Common/Preferences.cpp:1010:17: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char lpMsgBuf[1000];
data/mediainfo-20.09/Source/Common/Preferences.cpp:1029:17: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char lpMsgBuf[1000];
data/mediainfo-20.09/Source/Common/Preferences.cpp:1050:9: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char lpMsgBuf[1000];
data/mediainfo-20.09/Source/Common/Preferences.cpp:1085:17: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char lpMsgBuf[1000];
data/mediainfo-20.09/Source/Common/Preferences.cpp:1104:17: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char lpMsgBuf[1000];
data/mediainfo-20.09/Source/GUI/Qt/mainwindow.cpp:1062:18: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
if(!file.open(e.getOpenMode()))
ANALYSIS SUMMARY:
Hits = 34
Lines analyzed = 22369 in approximately 0.59 seconds (37595 lines/second)
Physical Source Lines of Code (SLOC) = 16011
Hits@level = [0] 6 [1] 0 [2] 11 [3] 2 [4] 21 [5] 0
Hits@level+ = [0+] 40 [1+] 34 [2+] 34 [3+] 23 [4+] 21 [5+] 0
Hits/KSLOC@level+ = [0+] 2.49828 [1+] 2.12354 [2+] 2.12354 [3+] 1.43651 [4+] 1.3116 [5+] 0
Dot directories skipped = 1 (--followdotdir overrides)
Minimum risk level = 1
Not every hit is necessarily a security vulnerability.
There may be other security vulnerabilities; review your code!
See 'Secure Programming HOWTO'
(https://dwheeler.com/secure-programs) for more information.