Flawfinder version 2.0.10, (C) 2001-2019 David A. Wheeler.
Number of rules (primarily dangerous function names) in C/C++ ruleset: 223
Examining data/powerdevil-5.19.5/daemon/actions/bundled/wirelesspowersavingconfig.cpp
Examining data/powerdevil-5.19.5/daemon/actions/bundled/dimdisplayconfig.h
Examining data/powerdevil-5.19.5/daemon/actions/bundled/brightnesscontrol.h
Examining data/powerdevil-5.19.5/daemon/actions/bundled/brightnesscontrolconfig.cpp
Examining data/powerdevil-5.19.5/daemon/actions/bundled/dimdisplay.cpp
Examining data/powerdevil-5.19.5/daemon/actions/bundled/handlebuttonevents.cpp
Examining data/powerdevil-5.19.5/daemon/actions/bundled/runscriptconfig.cpp
Examining data/powerdevil-5.19.5/daemon/actions/bundled/dimdisplay.h
Examining data/powerdevil-5.19.5/daemon/actions/bundled/runscriptconfig.h
Examining data/powerdevil-5.19.5/daemon/actions/bundled/handlebuttonevents.h
Examining data/powerdevil-5.19.5/daemon/actions/bundled/brightnesscontrolconfig.h
Examining data/powerdevil-5.19.5/daemon/actions/bundled/runscript.cpp
Examining data/powerdevil-5.19.5/daemon/actions/bundled/brightnesscontrol.cpp
Examining data/powerdevil-5.19.5/daemon/actions/bundled/wirelesspowersaving.h
Examining data/powerdevil-5.19.5/daemon/actions/bundled/suspendsessionconfig.cpp
Examining data/powerdevil-5.19.5/daemon/actions/bundled/suspendsessionconfig.h
Examining data/powerdevil-5.19.5/daemon/actions/bundled/dimdisplayconfig.cpp
Examining data/powerdevil-5.19.5/daemon/actions/bundled/handlebuttoneventsconfig.h
Examining data/powerdevil-5.19.5/daemon/actions/bundled/wirelesspowersaving.cpp
Examining data/powerdevil-5.19.5/daemon/actions/bundled/keyboardbrightnesscontrol.cpp
Examining data/powerdevil-5.19.5/daemon/actions/bundled/keyboardbrightnesscontrolconfig.h
Examining data/powerdevil-5.19.5/daemon/actions/bundled/handlebuttoneventsconfig.cpp
Examining data/powerdevil-5.19.5/daemon/actions/bundled/keyboardbrightnesscontrolconfig.cpp
Examining data/powerdevil-5.19.5/daemon/actions/bundled/runscript.h
Examining data/powerdevil-5.19.5/daemon/actions/bundled/suspendsession.h
Examining data/powerdevil-5.19.5/daemon/actions/bundled/keyboardbrightnesscontrol.h
Examining data/powerdevil-5.19.5/daemon/actions/bundled/wirelesspowersavingconfig.h
Examining data/powerdevil-5.19.5/daemon/actions/bundled/suspendsession.cpp
Examining data/powerdevil-5.19.5/daemon/actions/dpms/powerdevildpmsaction.cpp
Examining data/powerdevil-5.19.5/daemon/actions/dpms/waylanddpmshelper.cpp
Examining data/powerdevil-5.19.5/daemon/actions/dpms/abstractdpmshelper.cpp
Examining data/powerdevil-5.19.5/daemon/actions/dpms/powerdevildpmsaction.h
Examining data/powerdevil-5.19.5/daemon/actions/dpms/abstractdpmshelper.h
Examining data/powerdevil-5.19.5/daemon/actions/dpms/xcbdpmshelper.cpp
Examining data/powerdevil-5.19.5/daemon/actions/dpms/powerdevildpmsactionconfig.cpp
Examining data/powerdevil-5.19.5/daemon/actions/dpms/waylanddpmshelper.h
Examining data/powerdevil-5.19.5/daemon/actions/dpms/xcbdpmshelper.h
Examining data/powerdevil-5.19.5/daemon/actions/dpms/powerdevildpmsactionconfig.h
Examining data/powerdevil-5.19.5/daemon/powerdevilaction.h
Examining data/powerdevil-5.19.5/daemon/powerdevilkeyboardbrightnesslogic.h
Examining data/powerdevil-5.19.5/daemon/powerdevilscreenbrightnesslogic.cpp
Examining data/powerdevil-5.19.5/daemon/powerdevilpolicyagent.cpp
Examining data/powerdevil-5.19.5/daemon/powerdevilactionconfig.cpp
Examining data/powerdevil-5.19.5/daemon/powerdevilapp.cpp
Examining data/powerdevil-5.19.5/daemon/powerdevilbackendinterface.h
Examining data/powerdevil-5.19.5/daemon/kwinkscreenhelpereffect.cpp
Examining data/powerdevil-5.19.5/daemon/powerdevil_debug.h
Examining data/powerdevil-5.19.5/daemon/powerdevilpolicyagent.h
Examining data/powerdevil-5.19.5/daemon/powerdevilpowermanagement.cpp
Examining data/powerdevil-5.19.5/daemon/powerdevilactionconfig.h
Examining data/powerdevil-5.19.5/daemon/powerdevilpowermanagement.h
Examining data/powerdevil-5.19.5/daemon/kwinkscreenhelpereffect.h
Examining data/powerdevil-5.19.5/daemon/powerdevilbackendinterface.cpp
Examining data/powerdevil-5.19.5/daemon/powerdevilactionpool.h
Examining data/powerdevil-5.19.5/daemon/powerdevilfdoconnector.cpp
Examining data/powerdevil-5.19.5/daemon/powerdevilprofilegenerator.h
Examining data/powerdevil-5.19.5/daemon/backends/upower/ddcutilbrightness.cpp
Examining data/powerdevil-5.19.5/daemon/backends/upower/udevqtdevice.h
Examining data/powerdevil-5.19.5/daemon/backends/upower/login1suspendjob.cpp
Examining data/powerdevil-5.19.5/daemon/backends/upower/discretegpuhelper.h
Examining data/powerdevil-5.19.5/daemon/backends/upower/xrandrbrightness.cpp
Examining data/powerdevil-5.19.5/daemon/backends/upower/discretegpuhelper.cpp
Examining data/powerdevil-5.19.5/daemon/backends/upower/powerdevilupowerbackend.h
Examining data/powerdevil-5.19.5/daemon/backends/upower/powerdevilupowerbackend.cpp
Examining data/powerdevil-5.19.5/daemon/backends/upower/backlighthelper.cpp
Examining data/powerdevil-5.19.5/daemon/backends/upower/xrandrxcbhelper.h
Examining data/powerdevil-5.19.5/daemon/backends/upower/backlighthelper.h
Examining data/powerdevil-5.19.5/daemon/backends/upower/upowersuspendjob.h
Examining data/powerdevil-5.19.5/daemon/backends/upower/udevqtdevice.cpp
Examining data/powerdevil-5.19.5/daemon/backends/upower/xrandrxcbhelper.cpp
Examining data/powerdevil-5.19.5/daemon/backends/upower/udevqt_p.h
Examining data/powerdevil-5.19.5/daemon/backends/upower/udevqtclient.h
Examining data/powerdevil-5.19.5/daemon/backends/upower/login1suspendjob.h
Examining data/powerdevil-5.19.5/daemon/backends/upower/xrandrbrightness.h
Examining data/powerdevil-5.19.5/daemon/backends/upower/udevqtclient.cpp
Examining data/powerdevil-5.19.5/daemon/backends/upower/upowersuspendjob.cpp
Examining data/powerdevil-5.19.5/daemon/backends/upower/udevqt.h
Examining data/powerdevil-5.19.5/daemon/backends/upower/ddcutilbrightness.h
Examining data/powerdevil-5.19.5/daemon/powerdevilkeyboardbrightnesslogic.cpp
Examining data/powerdevil-5.19.5/daemon/powerdevilcore.h
Examining data/powerdevil-5.19.5/daemon/powerdevilfdoconnector.h
Examining data/powerdevil-5.19.5/daemon/powerdevilscreenbrightnesslogic.h
Examining data/powerdevil-5.19.5/daemon/powerdevilapp.h
Examining data/powerdevil-5.19.5/daemon/brightnessosdwidget.cpp
Examining data/powerdevil-5.19.5/daemon/powerdevilcore.cpp
Examining data/powerdevil-5.19.5/daemon/powerdevil_debug.cpp
Examining data/powerdevil-5.19.5/daemon/powerdevilactionpool.cpp
Examining data/powerdevil-5.19.5/daemon/powerdevilbrightnesslogic.cpp
Examining data/powerdevil-5.19.5/daemon/powerdevilaction.cpp
Examining data/powerdevil-5.19.5/daemon/powerdevilprofilegenerator.cpp
Examining data/powerdevil-5.19.5/daemon/brightnessosdwidget.h
Examining data/powerdevil-5.19.5/daemon/powerdevilbrightnesslogic.h
Examining data/powerdevil-5.19.5/kcmodule/activities/activitywidget.h
Examining data/powerdevil-5.19.5/kcmodule/activities/activitypage.h
Examining data/powerdevil-5.19.5/kcmodule/activities/activitywidget.cpp
Examining data/powerdevil-5.19.5/kcmodule/activities/activitypage.cpp
Examining data/powerdevil-5.19.5/kcmodule/profiles/EditPage.h
Examining data/powerdevil-5.19.5/kcmodule/profiles/EditPage.cpp
Examining data/powerdevil-5.19.5/kcmodule/common/actionconfigwidget.cpp
Examining data/powerdevil-5.19.5/kcmodule/common/actioneditwidget.cpp
Examining data/powerdevil-5.19.5/kcmodule/common/ErrorOverlay.h
Examining data/powerdevil-5.19.5/kcmodule/common/ErrorOverlay.cpp
Examining data/powerdevil-5.19.5/kcmodule/common/actionconfigwidget.h
Examining data/powerdevil-5.19.5/kcmodule/common/actioneditwidget.h
Examining data/powerdevil-5.19.5/kcmodule/global/GeneralPage.cpp
Examining data/powerdevil-5.19.5/kcmodule/global/GeneralPage.h
FINAL RESULTS:
data/powerdevil-5.19.5/daemon/backends/upower/backlighthelper.cpp:81:19: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
if (!file.open(QIODevice::ReadOnly | QIODevice::Text)) {
data/powerdevil-5.19.5/daemon/backends/upower/backlighthelper.cpp:203:15: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
if (!file.open(QIODevice::ReadOnly)) {
data/powerdevil-5.19.5/daemon/backends/upower/backlighthelper.cpp:261:15: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
if (!file.open(QIODevice::WriteOnly)) {
data/powerdevil-5.19.5/daemon/backends/upower/backlighthelper.cpp:314:15: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
if (!file.open(QIODevice::ReadOnly)) {
data/powerdevil-5.19.5/daemon/backends/upower/xrandrbrightness.cpp:58:31: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
xcb_intern_atom(c, 1, strlen("Backlight"), "Backlight"),
ANALYSIS SUMMARY:
Hits = 5
Lines analyzed = 14043 in approximately 0.43 seconds (32441 lines/second)
Physical Source Lines of Code (SLOC) = 8630
Hits@level = [0] 0 [1] 1 [2] 4 [3] 0 [4] 0 [5] 0
Hits@level+ = [0+] 5 [1+] 5 [2+] 4 [3+] 0 [4+] 0 [5+] 0
Hits/KSLOC@level+ = [0+] 0.579374 [1+] 0.579374 [2+] 0.463499 [3+] 0 [4+] 0 [5+] 0
Dot directories skipped = 1 (--followdotdir overrides)
Minimum risk level = 1
Not every hit is necessarily a security vulnerability.
There may be other security vulnerabilities; review your code!
See 'Secure Programming HOWTO'
(https://dwheeler.com/secure-programs) for more information.