Flawfinder version 2.0.10, (C) 2001-2019 David A. Wheeler.
Number of rules (primarily dangerous function names) in C/C++ ruleset: 223
Examining data/nmapsi4-0.5~alpha2/src/app/actionmanager.cpp
Examining data/nmapsi4-0.5~alpha2/src/app/actionmanager.h
Examining data/nmapsi4-0.5~alpha2/src/app/bookmarkmanager.cpp
Examining data/nmapsi4-0.5~alpha2/src/app/bookmarkmanager.h
Examining data/nmapsi4-0.5~alpha2/src/app/main.cpp
Examining data/nmapsi4-0.5~alpha2/src/app/mainwindow.cpp
Examining data/nmapsi4-0.5~alpha2/src/app/mainwindow.h
Examining data/nmapsi4-0.5~alpha2/src/app/preference/preferencesdialog.cpp
Examining data/nmapsi4-0.5~alpha2/src/app/preference/preferencesdialog.h
Examining data/nmapsi4-0.5~alpha2/src/app/profilehandler.cpp
Examining data/nmapsi4-0.5~alpha2/src/app/profilehandler.h
Examining data/nmapsi4-0.5~alpha2/src/app/profiler/profiler.cpp
Examining data/nmapsi4-0.5~alpha2/src/app/profiler/profiler.h
Examining data/nmapsi4-0.5~alpha2/src/app/profiler/profilermanager.cpp
Examining data/nmapsi4-0.5~alpha2/src/app/profiler/profilermanager.h
Examining data/nmapsi4-0.5~alpha2/src/app/qmlwelcome.cpp
Examining data/nmapsi4-0.5~alpha2/src/app/qmlwelcome.h
Examining data/nmapsi4-0.5~alpha2/src/common/debug.h
Examining data/nmapsi4-0.5~alpha2/src/common/hostutilities.h
Examining data/nmapsi4-0.5~alpha2/src/common/memorytools.h
Examining data/nmapsi4-0.5~alpha2/src/common/mouseeventfilter.cpp
Examining data/nmapsi4-0.5~alpha2/src/common/mouseeventfilter.h
Examining data/nmapsi4-0.5~alpha2/src/common/notify.cpp
Examining data/nmapsi4-0.5~alpha2/src/common/notify.h
Examining data/nmapsi4-0.5~alpha2/src/common/package.cpp
Examining data/nmapsi4-0.5~alpha2/src/common/package.h
Examining data/nmapsi4-0.5~alpha2/src/common/pobjects.cpp
Examining data/nmapsi4-0.5~alpha2/src/common/pobjects.h
Examining data/nmapsi4-0.5~alpha2/src/common/processthread.cpp
Examining data/nmapsi4-0.5~alpha2/src/common/processthread.h
Examining data/nmapsi4-0.5~alpha2/src/common/pushbuttonorientated.cpp
Examining data/nmapsi4-0.5~alpha2/src/common/pushbuttonorientated.h
Examining data/nmapsi4-0.5~alpha2/src/common/regularexpression.h
Examining data/nmapsi4-0.5~alpha2/src/common/style.h
Examining data/nmapsi4-0.5~alpha2/src/common/utilities.cpp
Examining data/nmapsi4-0.5~alpha2/src/common/utilities.h
Examining data/nmapsi4-0.5~alpha2/src/platform/about/about.cpp
Examining data/nmapsi4-0.5~alpha2/src/platform/about/about.h
Examining data/nmapsi4-0.5~alpha2/src/platform/addparameterstobookmark.cpp
Examining data/nmapsi4-0.5~alpha2/src/platform/addparameterstobookmark.h
Examining data/nmapsi4-0.5~alpha2/src/platform/addvulnerabilityurl.cpp
Examining data/nmapsi4-0.5~alpha2/src/platform/addvulnerabilityurl.h
Examining data/nmapsi4-0.5~alpha2/src/platform/digmanager.cpp
Examining data/nmapsi4-0.5~alpha2/src/platform/digmanager.h
Examining data/nmapsi4-0.5~alpha2/src/platform/discover.cpp
Examining data/nmapsi4-0.5~alpha2/src/platform/discover.h
Examining data/nmapsi4-0.5~alpha2/src/platform/discovermanager.cpp
Examining data/nmapsi4-0.5~alpha2/src/platform/discovermanager.h
Examining data/nmapsi4-0.5~alpha2/src/platform/history/history.cpp
Examining data/nmapsi4-0.5~alpha2/src/platform/history/history.h
Examining data/nmapsi4-0.5~alpha2/src/platform/logwriter/logwriter.cpp
Examining data/nmapsi4-0.5~alpha2/src/platform/logwriter/logwriter.h
Examining data/nmapsi4-0.5~alpha2/src/platform/logwriter/logwriterxml.cpp
Examining data/nmapsi4-0.5~alpha2/src/platform/logwriter/logwriterxml.h
Examining data/nmapsi4-0.5~alpha2/src/platform/lookupmanager.cpp
Examining data/nmapsi4-0.5~alpha2/src/platform/lookupmanager.h
Examining data/nmapsi4-0.5~alpha2/src/platform/monitor/monitor.cpp
Examining data/nmapsi4-0.5~alpha2/src/platform/monitor/monitor.h
Examining data/nmapsi4-0.5~alpha2/src/platform/monitor/monitorhostscandetails.cpp
Examining data/nmapsi4-0.5~alpha2/src/platform/monitor/monitorhostscandetails.h
Examining data/nmapsi4-0.5~alpha2/src/platform/nsemanager.cpp
Examining data/nmapsi4-0.5~alpha2/src/platform/nsemanager.h
Examining data/nmapsi4-0.5~alpha2/src/platform/parser/parsermanager.cpp
Examining data/nmapsi4-0.5~alpha2/src/platform/parser/parsermanager.h
Examining data/nmapsi4-0.5~alpha2/src/platform/selectprofiledialog.cpp
Examining data/nmapsi4-0.5~alpha2/src/platform/selectprofiledialog.h
Examining data/nmapsi4-0.5~alpha2/src/platform/vulnerability.cpp
Examining data/nmapsi4-0.5~alpha2/src/platform/vulnerability.h

FINAL RESULTS:

data/nmapsi4-0.5~alpha2/src/app/main.cpp:33:40:  [4] (shell) system:
  This causes a new program to execute and is difficult to use safely
  (CWE-78). try using a library call that implements the same functionality
  if available.
    qtTranslator.load("qt_" + QLocale::system().name(),
data/nmapsi4-0.5~alpha2/src/app/main.cpp:40:67:  [4] (shell) system:
  This causes a new program to execute and is difficult to use safely
  (CWE-78). try using a library call that implements the same functionality
  if available.
    bool translatorResult = translator.load("nmapsi4_" + QLocale::system().name(), translationsPath);
data/nmapsi4-0.5~alpha2/src/app/main.cpp:43:66:  [4] (shell) system:
  This causes a new program to execute and is difficult to use safely
  (CWE-78). try using a library call that implements the same functionality
  if available.
        translatorResult = translator.load("nmapsi4_" + QLocale::system().name(), QDir::currentPath());
data/nmapsi4-0.5~alpha2/src/app/mainwindow.cpp:948:22:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
    if (!targetFile->open(QIODevice::ReadOnly)) {
data/nmapsi4-0.5~alpha2/src/platform/logwriter/logwriter.cpp:86:19:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
    if (!filePtr->open(QIODevice::WriteOnly | QIODevice::Text)) {
data/nmapsi4-0.5~alpha2/src/platform/logwriter/logwriter.cpp:155:19:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
    if (!filePtr->open(QIODevice::WriteOnly | QIODevice::Text)) {
data/nmapsi4-0.5~alpha2/src/platform/logwriter/logwriter.cpp:174:19:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
    if (!filePtr->open(QIODevice::WriteOnly | QIODevice::Text)) {
data/nmapsi4-0.5~alpha2/src/platform/logwriter/logwriterxml.cpp:33:18:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
    if (!xmlFile.open(QFile::WriteOnly | QFile::Text)) {
data/nmapsi4-0.5~alpha2/src/platform/logwriter/logwriterxml.cpp:63:18:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
    if (!xmlFile.open(QFile::ReadOnly | QFile::Text)) {
data/nmapsi4-0.5~alpha2/src/platform/logwriter/logwriterxml.cpp:88:18:  [2] (misc) open:
  Check when opening files - can an attacker redirect it (via symlinks),
  force the opening of special file type (e.g., device files), move things
  around to create a race condition, control its ancestors, or change its
  contents? (CWE-362).
    if (!xmlFile.open(QFile::ReadOnly | QFile::Text)) {

ANALYSIS SUMMARY:

Hits = 10
Lines analyzed = 10682 in approximately 0.55 seconds (19542 lines/second)
Physical Source Lines of Code (SLOC) = 7197
Hits@level = [0]   0 [1]   0 [2]   7 [3]   0 [4]   3 [5]   0
Hits@level+ = [0+]  10 [1+]  10 [2+]  10 [3+]   3 [4+]   3 [5+]   0
Hits/KSLOC@level+ = [0+] 1.38947 [1+] 1.38947 [2+] 1.38947 [3+] 0.41684 [4+] 0.41684 [5+]   0
Dot directories skipped = 1 (--followdotdir overrides)
Minimum risk level = 1
Not every hit is necessarily a security vulnerability.
There may be other security vulnerabilities; review your code!
See 'Secure Programming HOWTO'
(https://dwheeler.com/secure-programs) for more information.