Flawfinder version 2.0.10, (C) 2001-2019 David A. Wheeler.
Number of rules (primarily dangerous function names) in C/C++ ruleset: 223
Examining data/pim-data-exporter-20.08.2/console/loginfile.cpp
Examining data/pim-data-exporter-20.08.2/console/loginfo.h
Examining data/pim-data-exporter-20.08.2/console/pimdataexporterconsole.h
Examining data/pim-data-exporter-20.08.2/console/autotests/loginfiletest.h
Examining data/pim-data-exporter-20.08.2/console/autotests/loginfiletest.cpp
Examining data/pim-data-exporter-20.08.2/console/pimdataexporterconsole.cpp
Examining data/pim-data-exporter-20.08.2/console/loginfo.cpp
Examining data/pim-data-exporter-20.08.2/console/main.cpp
Examining data/pim-data-exporter-20.08.2/console/importexportprogressindicatorconsole.cpp
Examining data/pim-data-exporter-20.08.2/console/importexportprogressindicatorconsole.h
Examining data/pim-data-exporter-20.08.2/console/loginfile.h
Examining data/pim-data-exporter-20.08.2/core/pimdatabackupthread.h
Examining data/pim-data-exporter-20.08.2/core/archivestorage.h
Examining data/pim-data-exporter-20.08.2/core/mail/importmailjobinterfaceimpl.cpp
Examining data/pim-data-exporter-20.08.2/core/mail/importexportmailutil.h
Examining data/pim-data-exporter-20.08.2/core/mail/exportmailjobinterfaceimpl.cpp
Examining data/pim-data-exporter-20.08.2/core/mail/smtpmailtransport.cpp
Examining data/pim-data-exporter-20.08.2/core/mail/importexportmailutil.cpp
Examining data/pim-data-exporter-20.08.2/core/mail/exportmailjobinterface.cpp
Examining data/pim-data-exporter-20.08.2/core/mail/exportmailjobinterface.h
Examining data/pim-data-exporter-20.08.2/core/mail/exportmailjobinterfaceimpl.h
Examining data/pim-data-exporter-20.08.2/core/mail/importmailjobinterface.h
Examining data/pim-data-exporter-20.08.2/core/mail/importmailjobinterfaceimpl.h
Examining data/pim-data-exporter-20.08.2/core/mail/importmailjobinterface.cpp
Examining data/pim-data-exporter-20.08.2/core/mail/smtpmailtransport.h
Examining data/pim-data-exporter-20.08.2/core/notes/importnotesjobinterface.cpp
Examining data/pim-data-exporter-20.08.2/core/notes/importnotesjobinterface.h
Examining data/pim-data-exporter-20.08.2/core/notes/exportnotesjobinterfaceimpl.h
Examining data/pim-data-exporter-20.08.2/core/notes/exportnotesjobinterface.h
Examining data/pim-data-exporter-20.08.2/core/notes/exportnotesjobinterface.cpp
Examining data/pim-data-exporter-20.08.2/core/notes/importnotesjobinterfaceimpl.h
Examining data/pim-data-exporter-20.08.2/core/notes/importnotesjobinterfaceimpl.cpp
Examining data/pim-data-exporter-20.08.2/core/notes/exportnotesjobinterfaceimpl.cpp
Examining data/pim-data-exporter-20.08.2/core/resourceconverterimpl.h
Examining data/pim-data-exporter-20.08.2/core/resourceconverterbase.cpp
Examining data/pim-data-exporter-20.08.2/core/pimdataexporterkernel.h
Examining data/pim-data-exporter-20.08.2/core/autotests/mail/importmailjobinterfacetestimpl.cpp
Examining data/pim-data-exporter-20.08.2/core/autotests/mail/exportmailjobinterfacetest.h
Examining data/pim-data-exporter-20.08.2/core/autotests/mail/exportmailjobinterfacetestimpl.cpp
Examining data/pim-data-exporter-20.08.2/core/autotests/mail/exportmailjobinterfacetestimpl.h
Examining data/pim-data-exporter-20.08.2/core/autotests/mail/exportmailjobinterfacetest.cpp
Examining data/pim-data-exporter-20.08.2/core/autotests/mail/importmailjobinterfacetest.cpp
Examining data/pim-data-exporter-20.08.2/core/autotests/mail/importmailjobinterfacetest.h
Examining data/pim-data-exporter-20.08.2/core/autotests/mail/importmailjobinterfacetestimpl.h
Examining data/pim-data-exporter-20.08.2/core/autotests/compareloggingfile.cpp
Examining data/pim-data-exporter-20.08.2/core/autotests/notes/importnotesjobinterfacetest.cpp
Examining data/pim-data-exporter-20.08.2/core/autotests/notes/exportnotesjobinterfacetest.cpp
Examining data/pim-data-exporter-20.08.2/core/autotests/notes/importnotesjobinterfacetestimpl.h
Examining data/pim-data-exporter-20.08.2/core/autotests/notes/exportnotesjobinterfacetest.h
Examining data/pim-data-exporter-20.08.2/core/autotests/notes/importnotesjobinterfacetest.h
Examining data/pim-data-exporter-20.08.2/core/autotests/notes/exportnotesjobinterfacetestimpl.h
Examining data/pim-data-exporter-20.08.2/core/autotests/notes/importnotesjobinterfacetestimpl.cpp
Examining data/pim-data-exporter-20.08.2/core/autotests/notes/exportnotesjobinterfacetestimpl.cpp
Examining data/pim-data-exporter-20.08.2/core/autotests/backupresourcefilejobimpltest.h
Examining data/pim-data-exporter-20.08.2/core/autotests/testimportfile.h
Examining data/pim-data-exporter-20.08.2/core/autotests/calendar/importcalendarjobinterfacetestimpl.cpp
Examining data/pim-data-exporter-20.08.2/core/autotests/calendar/exportcalendarsjobinterfacetestimpl.h
Examining data/pim-data-exporter-20.08.2/core/autotests/calendar/exportcalendarsjobinterfacetestimpl.cpp
Examining data/pim-data-exporter-20.08.2/core/autotests/calendar/exportcalendarsjobinterfacetest.cpp
Examining data/pim-data-exporter-20.08.2/core/autotests/calendar/exportcalendarsjobinterfacetest.h
Examining data/pim-data-exporter-20.08.2/core/autotests/calendar/importcalendarjobinterfacetest.cpp
Examining data/pim-data-exporter-20.08.2/core/autotests/calendar/importcalendarjobinterfacetestimpl.h
Examining data/pim-data-exporter-20.08.2/core/autotests/calendar/importcalendarjobinterfacetest.h
Examining data/pim-data-exporter-20.08.2/core/autotests/addressbook/exportaddressbookjobinterfacetestimpl.h
Examining data/pim-data-exporter-20.08.2/core/autotests/addressbook/importaddressbookjobinterfacetest.cpp
Examining data/pim-data-exporter-20.08.2/core/autotests/addressbook/exportaddressbookjobinterfacetest.h
Examining data/pim-data-exporter-20.08.2/core/autotests/addressbook/importaddressbookjobinterfacetestimpl.h
Examining data/pim-data-exporter-20.08.2/core/autotests/addressbook/importaddressbookjobinterfacetest.h
Examining data/pim-data-exporter-20.08.2/core/autotests/addressbook/exportaddressbookjobinterfacetestimpl.cpp
Examining data/pim-data-exporter-20.08.2/core/autotests/addressbook/importaddressbookjobinterfacetestimpl.cpp
Examining data/pim-data-exporter-20.08.2/core/autotests/addressbook/exportaddressbookjobinterfacetest.cpp
Examining data/pim-data-exporter-20.08.2/core/autotests/compareimportfile.h
Examining data/pim-data-exporter-20.08.2/core/autotests/saveresourceconfigtest.cpp
Examining data/pim-data-exporter-20.08.2/core/autotests/resourceconverterclasstest.cpp
Examining data/pim-data-exporter-20.08.2/core/autotests/logcreatingressource.h
Examining data/pim-data-exporter-20.08.2/core/autotests/importexportprogressindicatortest.cpp
Examining data/pim-data-exporter-20.08.2/core/autotests/comparefilehelper.h
Examining data/pim-data-exporter-20.08.2/core/autotests/importexportprogressindicatortest.h
Examining data/pim-data-exporter-20.08.2/core/autotests/logcreatingressource.cpp
Examining data/pim-data-exporter-20.08.2/core/autotests/generatelistfilefromarchive.cpp
Examining data/pim-data-exporter-20.08.2/core/autotests/compareloggingfile.h
Examining data/pim-data-exporter-20.08.2/core/autotests/akregator/exportakregatorjobinterfacetestimpl.cpp
Examining data/pim-data-exporter-20.08.2/core/autotests/akregator/exportakregatorjobinterfacetestimpl.h
Examining data/pim-data-exporter-20.08.2/core/autotests/akregator/importakregatorjobinterfacetestimpl.cpp
Examining data/pim-data-exporter-20.08.2/core/autotests/akregator/importakregatorjobinterfacetestimpl.h
Examining data/pim-data-exporter-20.08.2/core/autotests/akregator/importakregatorjobinterfacetest.cpp
Examining data/pim-data-exporter-20.08.2/core/autotests/akregator/exportakregatorjobinterfacetest.h
Examining data/pim-data-exporter-20.08.2/core/autotests/akregator/exportakregatorjobinterfacetest.cpp
Examining data/pim-data-exporter-20.08.2/core/autotests/akregator/importakregatorjobinterfacetest.h
Examining data/pim-data-exporter-20.08.2/core/autotests/testexportfile.cpp
Examining data/pim-data-exporter-20.08.2/core/autotests/compareexportfile.cpp
Examining data/pim-data-exporter-20.08.2/core/autotests/resourceconvertertest.h
Examining data/pim-data-exporter-20.08.2/core/autotests/backupresourcefilejobimpltest.cpp
Examining data/pim-data-exporter-20.08.2/core/autotests/utilstest.cpp
Examining data/pim-data-exporter-20.08.2/core/autotests/utilstest.h
Examining data/pim-data-exporter-20.08.2/core/autotests/generatelistfilefromarchive.h
Examining data/pim-data-exporter-20.08.2/core/autotests/alarm/exportalarmjobinterfacetestimpl.cpp
Examining data/pim-data-exporter-20.08.2/core/autotests/alarm/importalarmjobinterfacetest.cpp
Examining data/pim-data-exporter-20.08.2/core/autotests/alarm/importalarmjobinterfacetestimpl.cpp
Examining data/pim-data-exporter-20.08.2/core/autotests/alarm/exportalarmjobinterfacetest.h
Examining data/pim-data-exporter-20.08.2/core/autotests/alarm/importalarmjobinterfacetestimpl.h
Examining data/pim-data-exporter-20.08.2/core/autotests/alarm/exportalarmjobinterfacetest.cpp
Examining data/pim-data-exporter-20.08.2/core/autotests/alarm/importalarmjobinterfacetest.h
Examining data/pim-data-exporter-20.08.2/core/autotests/alarm/exportalarmjobinterfacetestimpl.h
Examining data/pim-data-exporter-20.08.2/core/autotests/compareexportfile.h
Examining data/pim-data-exporter-20.08.2/core/autotests/comparefilehelper.cpp
Examining data/pim-data-exporter-20.08.2/core/autotests/exportimportutil.h
Examining data/pim-data-exporter-20.08.2/core/autotests/loadlistfromfile.h
Examining data/pim-data-exporter-20.08.2/core/autotests/compareimportfile.cpp
Examining data/pim-data-exporter-20.08.2/core/autotests/exportimportutil.cpp
Examining data/pim-data-exporter-20.08.2/core/autotests/testbackupresourcefilejob.cpp
Examining data/pim-data-exporter-20.08.2/core/autotests/saveresourceconfigtest.h
Examining data/pim-data-exporter-20.08.2/core/autotests/loadlistfromfile.cpp
Examining data/pim-data-exporter-20.08.2/core/autotests/resourceconverterclasstest.h
Examining data/pim-data-exporter-20.08.2/core/autotests/testexportfile.h
Examining data/pim-data-exporter-20.08.2/core/autotests/testbackupresourcefilejob.h
Examining data/pim-data-exporter-20.08.2/core/autotests/testimportfile.cpp
Examining data/pim-data-exporter-20.08.2/core/autotests/resourceconvertertest.cpp
Examining data/pim-data-exporter-20.08.2/core/calendar/exportcalendarjobinterface.cpp
Examining data/pim-data-exporter-20.08.2/core/calendar/importcalendarjobinterface.h
Examining data/pim-data-exporter-20.08.2/core/calendar/importcalendarjobinterface.cpp
Examining data/pim-data-exporter-20.08.2/core/calendar/importcalendarjobinterfaceimpl.h
Examining data/pim-data-exporter-20.08.2/core/calendar/exportcalendarjobinterfaceimpl.cpp
Examining data/pim-data-exporter-20.08.2/core/calendar/exportcalendarjobinterface.h
Examining data/pim-data-exporter-20.08.2/core/calendar/importcalendarjobinterfaceimpl.cpp
Examining data/pim-data-exporter-20.08.2/core/calendar/exportcalendarjobinterfaceimpl.h
Examining data/pim-data-exporter-20.08.2/core/addressbook/exportaddressbookjobinterfaceimpl.cpp
Examining data/pim-data-exporter-20.08.2/core/addressbook/importaddressbookjobinterface.cpp
Examining data/pim-data-exporter-20.08.2/core/addressbook/exportaddressbookjobinterfaceimpl.h
Examining data/pim-data-exporter-20.08.2/core/addressbook/exportaddressbookjobinterface.h
Examining data/pim-data-exporter-20.08.2/core/addressbook/exportaddressbookjobinterface.cpp
Examining data/pim-data-exporter-20.08.2/core/addressbook/importaddressbookjobinterface.h
Examining data/pim-data-exporter-20.08.2/core/addressbook/importaddressbookjobinterfaceimpl.h
Examining data/pim-data-exporter-20.08.2/core/addressbook/importaddressbookjobinterfaceimpl.cpp
Examining data/pim-data-exporter-20.08.2/core/archivestorage.cpp
Examining data/pim-data-exporter-20.08.2/core/exportresourcearchivejob.h
Examining data/pim-data-exporter-20.08.2/core/pimdataexportercore_private_export.h
Examining data/pim-data-exporter-20.08.2/core/pimdatabackuprestore.h
Examining data/pim-data-exporter-20.08.2/core/backupresourcefilejobbase.cpp
Examining data/pim-data-exporter-20.08.2/core/exportresourcearchivejob.cpp
Examining data/pim-data-exporter-20.08.2/core/pimdataimportdatainfofile.h
Examining data/pim-data-exporter-20.08.2/core/importexportprogressindicatorbase.h
Examining data/pim-data-exporter-20.08.2/core/utils.h
Examining data/pim-data-exporter-20.08.2/core/pimdatabackupthread.cpp
Examining data/pim-data-exporter-20.08.2/core/akregator/importakregatorjobinterface.h
Examining data/pim-data-exporter-20.08.2/core/akregator/exportakregatorjobinterface.cpp
Examining data/pim-data-exporter-20.08.2/core/akregator/exportakregatorjobinterface.h
Examining data/pim-data-exporter-20.08.2/core/akregator/importakregatorjobinterface.cpp
Examining data/pim-data-exporter-20.08.2/core/resourceconverterbase.h
Examining data/pim-data-exporter-20.08.2/core/abstractimportexportjob.cpp
Examining data/pim-data-exporter-20.08.2/core/storeresourcejob.h
Examining data/pim-data-exporter-20.08.2/core/importexportprogressindicatorbase.cpp
Examining data/pim-data-exporter-20.08.2/core/utils.cpp
Examining data/pim-data-exporter-20.08.2/core/xml/templateselection.h
Examining data/pim-data-exporter-20.08.2/core/xml/templateselection.cpp
Examining data/pim-data-exporter-20.08.2/core/pimdataexporterkernel.cpp
Examining data/pim-data-exporter-20.08.2/core/alarm/importalarmjobinterface.cpp
Examining data/pim-data-exporter-20.08.2/core/alarm/exportalarmjobinterfaceimpl.h
Examining data/pim-data-exporter-20.08.2/core/alarm/importalarmjobinterface.h
Examining data/pim-data-exporter-20.08.2/core/alarm/exportalarmjobinterface.cpp
Examining data/pim-data-exporter-20.08.2/core/alarm/importalarmjobinterfaceimpl.cpp
Examining data/pim-data-exporter-20.08.2/core/alarm/exportalarmjobinterfaceimpl.cpp
Examining data/pim-data-exporter-20.08.2/core/alarm/exportalarmjobinterface.h
Examining data/pim-data-exporter-20.08.2/core/alarm/importalarmjobinterfaceimpl.h
Examining data/pim-data-exporter-20.08.2/core/storeresourcejob.cpp
Examining data/pim-data-exporter-20.08.2/core/abstractimportexportjob.h
Examining data/pim-data-exporter-20.08.2/core/synchronizeresourcejob.cpp
Examining data/pim-data-exporter-20.08.2/core/pimdatabackuprestore.cpp
Examining data/pim-data-exporter-20.08.2/core/backupresourcefilejobbase.h
Examining data/pim-data-exporter-20.08.2/core/resourceconverterimpl.cpp
Examining data/pim-data-exporter-20.08.2/core/backupresourcefilejobimpl.h
Examining data/pim-data-exporter-20.08.2/core/pimdataimportdatainfofile.cpp
Examining data/pim-data-exporter-20.08.2/core/synchronizeresourcejob.h
Examining data/pim-data-exporter-20.08.2/core/backupresourcefilejobimpl.cpp
Examining data/pim-data-exporter-20.08.2/gui/pimdatabackuprestoreui.cpp
Examining data/pim-data-exporter-20.08.2/gui/importexportprogressindicatorgui.cpp
Examining data/pim-data-exporter-20.08.2/gui/widgets/logwidget.cpp
Examining data/pim-data-exporter-20.08.2/gui/widgets/selectiontypetreewidget.h
Examining data/pim-data-exporter-20.08.2/gui/widgets/pimdataexporterconfigurewidget.h
Examining data/pim-data-exporter-20.08.2/gui/widgets/selectiontypetreewidget.cpp
Examining data/pim-data-exporter-20.08.2/gui/widgets/logwidget.h
Examining data/pim-data-exporter-20.08.2/gui/widgets/pimdataexporterconfigurewidget.cpp
Examining data/pim-data-exporter-20.08.2/gui/autotests/pimdataexporterconfigurewidgettest.h
Examining data/pim-data-exporter-20.08.2/gui/autotests/synchronizeresourcedialogtest.h
Examining data/pim-data-exporter-20.08.2/gui/autotests/selectiontypedialogtest.cpp
Examining data/pim-data-exporter-20.08.2/gui/autotests/selectiontypetreewidgettest.h
Examining data/pim-data-exporter-20.08.2/gui/autotests/pimdataexporterconfiguredialogtest.h
Examining data/pim-data-exporter-20.08.2/gui/autotests/selectiontypedialogtest.h
Examining data/pim-data-exporter-20.08.2/gui/autotests/pimdataexporterconfiguredialogtest.cpp
Examining data/pim-data-exporter-20.08.2/gui/autotests/synchronizeresourcedialogtest.cpp
Examining data/pim-data-exporter-20.08.2/gui/autotests/selectiontypetreewidgettest.cpp
Examining data/pim-data-exporter-20.08.2/gui/autotests/pimdataexporterconfigurewidgettest.cpp
Examining data/pim-data-exporter-20.08.2/gui/tests/selectiontreewidget_gui.cpp
Examining data/pim-data-exporter-20.08.2/gui/tests/showarchivestructuredialog_gui.cpp
Examining data/pim-data-exporter-20.08.2/gui/userfeedback/pimdataexporteduserfeedbackprovider.h
Examining data/pim-data-exporter-20.08.2/gui/userfeedback/userfeedbackmanager.h
Examining data/pim-data-exporter-20.08.2/gui/userfeedback/pimdataexporteduserfeedbackprovider.cpp
Examining data/pim-data-exporter-20.08.2/gui/userfeedback/userfeedbackmanager.cpp
Examining data/pim-data-exporter-20.08.2/gui/trayicon/pimdatatrayicon.cpp
Examining data/pim-data-exporter-20.08.2/gui/trayicon/pimdatatrayicon.h
Examining data/pim-data-exporter-20.08.2/gui/dialog/pimdataexporterconfiguredialog.h
Examining data/pim-data-exporter-20.08.2/gui/dialog/showarchivestructuredialog.cpp
Examining data/pim-data-exporter-20.08.2/gui/dialog/selectiontypedialog.h
Examining data/pim-data-exporter-20.08.2/gui/dialog/showarchivestructuredialog.h
Examining data/pim-data-exporter-20.08.2/gui/dialog/backupfilestructureinfodialog.h
Examining data/pim-data-exporter-20.08.2/gui/dialog/selectiontypedialog.cpp
Examining data/pim-data-exporter-20.08.2/gui/dialog/pimdataexporterconfiguredialog.cpp
Examining data/pim-data-exporter-20.08.2/gui/dialog/backupfilestructureinfodialog.cpp
Examining data/pim-data-exporter-20.08.2/gui/dialog/synchronizeresourcedialog.h
Examining data/pim-data-exporter-20.08.2/gui/dialog/synchronizeresourcedialog.cpp
Examining data/pim-data-exporter-20.08.2/gui/pimdatabackuprestoreui.h
Examining data/pim-data-exporter-20.08.2/gui/pimdatacommandlineoption.cpp
Examining data/pim-data-exporter-20.08.2/gui/job/fullsynchronizeresourcesjob.h
Examining data/pim-data-exporter-20.08.2/gui/job/fullsynchronizeresourcesjob.cpp
Examining data/pim-data-exporter-20.08.2/gui/main.cpp
Examining data/pim-data-exporter-20.08.2/gui/importexportprogressindicatorgui.h
Examining data/pim-data-exporter-20.08.2/gui/pimdataexporterwindow.h
Examining data/pim-data-exporter-20.08.2/gui/pimdataexporterwindow.cpp
Examining data/pim-data-exporter-20.08.2/gui/pimdatacommandlineoption.h
FINAL RESULTS:
data/pim-data-exporter-20.08.2/console/loginfile.cpp:49:25: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
if (!mFile->open(QIODevice::WriteOnly | QIODevice::Text)) {
data/pim-data-exporter-20.08.2/core/addressbook/exportaddressbookjobinterface.cpp:127:13: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
tmp.open();
data/pim-data-exporter-20.08.2/core/alarm/exportalarmjobinterface.cpp:128:13: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
tmp.open();
data/pim-data-exporter-20.08.2/core/archivestorage.cpp:54:35: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
const bool result = mArchive->open(write ? QIODevice::WriteOnly : QIODevice::ReadOnly);
data/pim-data-exporter-20.08.2/core/autotests/compareexportfile.cpp:57:31: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
const bool result = mZip->open(QIODevice::ReadOnly);
data/pim-data-exporter-20.08.2/core/autotests/compareexportfile.cpp:86:23: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
QVERIFY(f.open(QIODevice::WriteOnly));
data/pim-data-exporter-20.08.2/core/autotests/generatelistfilefromarchive.cpp:41:25: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
bool result = mZip->open(QIODevice::ReadOnly);
data/pim-data-exporter-20.08.2/core/autotests/loadlistfromfile.cpp:28:29: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
const bool openFile = f.open(QIODevice::ReadOnly);
data/pim-data-exporter-20.08.2/core/autotests/logcreatingressource.cpp:36:18: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
mTmpLogFile->open();
data/pim-data-exporter-20.08.2/core/calendar/exportcalendarjobinterface.cpp:130:13: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
tmp.open();
data/pim-data-exporter-20.08.2/core/calendar/exportcalendarjobinterface.cpp:165:13: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
tmp.open();
data/pim-data-exporter-20.08.2/core/mail/exportmailjobinterface.cpp:140:13: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
tmp.open();
data/pim-data-exporter-20.08.2/core/mail/exportmailjobinterface.cpp:220:13: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
tmp.open();
data/pim-data-exporter-20.08.2/core/mail/exportmailjobinterface.cpp:247:13: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
tmp.open();
data/pim-data-exporter-20.08.2/core/mail/exportmailjobinterface.cpp:280:13: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
tmp.open();
data/pim-data-exporter-20.08.2/core/mail/exportmailjobinterface.cpp:335:13: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
tmp.open();
data/pim-data-exporter-20.08.2/core/mail/exportmailjobinterface.cpp:519:13: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
tmp.open();
data/pim-data-exporter-20.08.2/core/mail/exportmailjobinterfaceimpl.cpp:147:13: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
tmp.open();
data/pim-data-exporter-20.08.2/core/notes/exportnotesjobinterface.cpp:104:13: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
tmp.open();
data/pim-data-exporter-20.08.2/core/pimdatabackupthread.cpp:45:9: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
tmp.open();
data/pim-data-exporter-20.08.2/core/pimdatabackupthread.cpp:48:32: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
bool result = archiveFile->open(QIODevice::WriteOnly);
data/pim-data-exporter-20.08.2/core/resourceconverterbase.cpp:187:9: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
tmp.open();
data/pim-data-exporter-20.08.2/core/utils.cpp:146:30: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
const bool result = zip->open(QIODevice::ReadOnly);
data/pim-data-exporter-20.08.2/core/utils.cpp:159:9: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
tmp.open();
data/pim-data-exporter-20.08.2/core/utils.cpp:169:9: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
tmp.open();
data/pim-data-exporter-20.08.2/core/xml/templateselection.cpp:69:15: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
if (!file.open(QIODevice::ReadOnly|QIODevice::Text)) {
data/pim-data-exporter-20.08.2/gui/dialog/backupfilestructureinfodialog.cpp:69:12: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
if (!f.open(QIODevice::ReadOnly)) {
data/pim-data-exporter-20.08.2/gui/dialog/showarchivestructuredialog.cpp:114:24: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
if (!f.open(QIODevice::WriteOnly)) {
data/pim-data-exporter-20.08.2/gui/dialog/showarchivestructuredialog.cpp:182:25: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
bool result = mZip->open(QIODevice::ReadOnly);
data/pim-data-exporter-20.08.2/gui/widgets/selectiontypetreewidget.cpp:341:9: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
tmp.open();
data/pim-data-exporter-20.08.2/core/autotests/compareexportfile.cpp:50:10: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
if (!equal) {
data/pim-data-exporter-20.08.2/core/autotests/compareexportfile.cpp:54:13: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
QVERIFY(equal);
data/pim-data-exporter-20.08.2/core/autotests/compareimportfile.cpp:42:10: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
if (!equal) {
data/pim-data-exporter-20.08.2/core/autotests/compareimportfile.cpp:46:13: [1] (buffer) equal:
Function does not check the second iterator for over-read conditions
(CWE-126). This function is often discouraged by most C++ coding standards
in favor of its safer alternatives provided since C++14. Consider using a
form of this function that checks the second iterator before potentially
overflowing it.
QVERIFY(equal);
ANALYSIS SUMMARY:
Hits = 34
Lines analyzed = 19367 in approximately 0.62 seconds (31346 lines/second)
Physical Source Lines of Code (SLOC) = 13002
Hits@level = [0] 0 [1] 4 [2] 30 [3] 0 [4] 0 [5] 0
Hits@level+ = [0+] 34 [1+] 34 [2+] 30 [3+] 0 [4+] 0 [5+] 0
Hits/KSLOC@level+ = [0+] 2.61498 [1+] 2.61498 [2+] 2.30734 [3+] 0 [4+] 0 [5+] 0
Dot directories skipped = 1 (--followdotdir overrides)
Minimum risk level = 1
Not every hit is necessarily a security vulnerability.
There may be other security vulnerabilities; review your code!
See 'Secure Programming HOWTO'
(https://dwheeler.com/secure-programs) for more information.