Flawfinder version 2.0.10, (C) 2001-2019 David A. Wheeler.
Number of rules (primarily dangerous function names) in C/C++ ruleset: 223
Examining data/qca2-2.3.1/examples/aes-cmac/aes-cmac.cpp
Examining data/qca2-2.3.1/examples/base64test/base64test.cpp
Examining data/qca2-2.3.1/examples/certtest/certtest.cpp
Examining data/qca2-2.3.1/examples/ciphertest/ciphertest.cpp
Examining data/qca2-2.3.1/examples/cms/cmsexample.cpp
Examining data/qca2-2.3.1/examples/cmssigner/certitem.cpp
Examining data/qca2-2.3.1/examples/cmssigner/certitem.h
Examining data/qca2-2.3.1/examples/cmssigner/certviewdlg.cpp
Examining data/qca2-2.3.1/examples/cmssigner/certviewdlg.h
Examining data/qca2-2.3.1/examples/cmssigner/keyselectdlg.cpp
Examining data/qca2-2.3.1/examples/cmssigner/keyselectdlg.h
Examining data/qca2-2.3.1/examples/cmssigner/main.cpp
Examining data/qca2-2.3.1/examples/cmssigner/pkcs11configdlg/pkcs11configdlg.cpp
Examining data/qca2-2.3.1/examples/cmssigner/pkcs11configdlg/pkcs11configdlg.h
Examining data/qca2-2.3.1/examples/cmssigner/prompter.cpp
Examining data/qca2-2.3.1/examples/cmssigner/prompter.h
Examining data/qca2-2.3.1/examples/eventhandlerdemo/eventhandlerdemo.cpp
Examining data/qca2-2.3.1/examples/hashtest/hashtest.cpp
Examining data/qca2-2.3.1/examples/hextest/hextest.cpp
Examining data/qca2-2.3.1/examples/keyloader/keyloader.cpp
Examining data/qca2-2.3.1/examples/mactest/mactest.cpp
Examining data/qca2-2.3.1/examples/md5crypt/md5crypt.cpp
Examining data/qca2-2.3.1/examples/providertest/providertest.cpp
Examining data/qca2-2.3.1/examples/publickeyexample/publickeyexample.cpp
Examining data/qca2-2.3.1/examples/randomtest/randomtest.cpp
Examining data/qca2-2.3.1/examples/rsatest/rsatest.cpp
Examining data/qca2-2.3.1/examples/saslclient/saslclient.cpp
Examining data/qca2-2.3.1/examples/saslserver/saslserver.cpp
Examining data/qca2-2.3.1/examples/sslservtest/sslservtest.cpp
Examining data/qca2-2.3.1/examples/ssltest/ssltest.cpp
Examining data/qca2-2.3.1/examples/tlssocket/main.cpp
Examining data/qca2-2.3.1/examples/tlssocket/tlssocket.cpp
Examining data/qca2-2.3.1/examples/tlssocket/tlssocket.h
Examining data/qca2-2.3.1/include/QtCrypto/qca.h
Examining data/qca2-2.3.1/include/QtCrypto/qca_basic.h
Examining data/qca2-2.3.1/include/QtCrypto/qca_cert.h
Examining data/qca2-2.3.1/include/QtCrypto/qca_core.h
Examining data/qca2-2.3.1/include/QtCrypto/qca_keystore.h
Examining data/qca2-2.3.1/include/QtCrypto/qca_publickey.h
Examining data/qca2-2.3.1/include/QtCrypto/qca_safetimer.h
Examining data/qca2-2.3.1/include/QtCrypto/qca_securelayer.h
Examining data/qca2-2.3.1/include/QtCrypto/qca_securemessage.h
Examining data/qca2-2.3.1/include/QtCrypto/qca_support.h
Examining data/qca2-2.3.1/include/QtCrypto/qca_textfilter.h
Examining data/qca2-2.3.1/include/QtCrypto/qca_tools.h
Examining data/qca2-2.3.1/include/QtCrypto/qcaprovider.h
Examining data/qca2-2.3.1/include/QtCrypto/qpipe.h
Examining data/qca2-2.3.1/include/QtCrypto/qca_export.h
Examining data/qca2-2.3.1/plugins/qca-botan/qca-botan.cpp
Examining data/qca2-2.3.1/plugins/qca-cyrus-sasl/qca-cyrus-sasl.cpp
Examining data/qca2-2.3.1/plugins/qca-gcrypt/pkcs5.c
Examining data/qca2-2.3.1/plugins/qca-gcrypt/qca-gcrypt.cpp
Examining data/qca2-2.3.1/plugins/qca-gnupg/gpgaction.cpp
Examining data/qca2-2.3.1/plugins/qca-gnupg/gpgaction.h
Examining data/qca2-2.3.1/plugins/qca-gnupg/gpgop.cpp
Examining data/qca2-2.3.1/plugins/qca-gnupg/gpgop.h
Examining data/qca2-2.3.1/plugins/qca-gnupg/gpgop_p.h
Examining data/qca2-2.3.1/plugins/qca-gnupg/gpgproc/gpgproc.cpp
Examining data/qca2-2.3.1/plugins/qca-gnupg/gpgproc/gpgproc.h
Examining data/qca2-2.3.1/plugins/qca-gnupg/gpgproc/gpgproc_p.h
Examining data/qca2-2.3.1/plugins/qca-gnupg/gpgproc/sprocess.cpp
Examining data/qca2-2.3.1/plugins/qca-gnupg/gpgproc/sprocess.h
Examining data/qca2-2.3.1/plugins/qca-gnupg/lineconverter.cpp
Examining data/qca2-2.3.1/plugins/qca-gnupg/lineconverter.h
Examining data/qca2-2.3.1/plugins/qca-gnupg/mykeystoreentry.cpp
Examining data/qca2-2.3.1/plugins/qca-gnupg/mykeystoreentry.h
Examining data/qca2-2.3.1/plugins/qca-gnupg/mykeystorelist.cpp
Examining data/qca2-2.3.1/plugins/qca-gnupg/mykeystorelist.h
Examining data/qca2-2.3.1/plugins/qca-gnupg/mymessagecontext.cpp
Examining data/qca2-2.3.1/plugins/qca-gnupg/mymessagecontext.h
Examining data/qca2-2.3.1/plugins/qca-gnupg/myopenpgpcontext.cpp
Examining data/qca2-2.3.1/plugins/qca-gnupg/myopenpgpcontext.h
Examining data/qca2-2.3.1/plugins/qca-gnupg/mypgpkeycontext.cpp
Examining data/qca2-2.3.1/plugins/qca-gnupg/mypgpkeycontext.h
Examining data/qca2-2.3.1/plugins/qca-gnupg/qca-gnupg.cpp
Examining data/qca2-2.3.1/plugins/qca-gnupg/ringwatch.cpp
Examining data/qca2-2.3.1/plugins/qca-gnupg/ringwatch.h
Examining data/qca2-2.3.1/plugins/qca-gnupg/utils.cpp
Examining data/qca2-2.3.1/plugins/qca-gnupg/utils.h
Examining data/qca2-2.3.1/plugins/qca-logger/qca-logger.cpp
Examining data/qca2-2.3.1/plugins/qca-nss/qca-nss.cpp
Examining data/qca2-2.3.1/plugins/qca-ossl/qca-ossl.cpp
Examining data/qca2-2.3.1/plugins/qca-pkcs11/qca-pkcs11.cpp
Examining data/qca2-2.3.1/plugins/qca-softstore/qca-softstore.cpp
Examining data/qca2-2.3.1/plugins/qca-test/qca-test.cpp
Examining data/qca2-2.3.1/plugins/qca-wincrypto/qca-wincrypto.cpp
Examining data/qca2-2.3.1/plugins/qca-wingss/qca-wingss.cpp
Examining data/qca2-2.3.1/src/botantools/botan/alloc_mmap/mmap_mem.h
Examining data/qca2-2.3.1/src/botantools/botan/alloc_mmap/mmap_mem.cpp
Examining data/qca2-2.3.1/src/botantools/botan/big_base.cpp
Examining data/qca2-2.3.1/src/botantools/botan/big_code.cpp
Examining data/qca2-2.3.1/src/botantools/botan/big_io.cpp
Examining data/qca2-2.3.1/src/botantools/botan/big_ops2.cpp
Examining data/qca2-2.3.1/src/botantools/botan/big_ops3.cpp
Examining data/qca2-2.3.1/src/botantools/botan/bit_ops.cpp
Examining data/qca2-2.3.1/src/botantools/botan/botan/allocate.h
Examining data/qca2-2.3.1/src/botantools/botan/botan/bigint.h
Examining data/qca2-2.3.1/src/botantools/botan/botan/bit_ops.h
Examining data/qca2-2.3.1/src/botantools/botan/botan/charset.h
Examining data/qca2-2.3.1/src/botantools/botan/botan/defalloc.h
Examining data/qca2-2.3.1/src/botantools/botan/botan/exceptn.h
Examining data/qca2-2.3.1/src/botantools/botan/botan/libstate.h
Examining data/qca2-2.3.1/src/botantools/botan/botan/mem_ops.h
Examining data/qca2-2.3.1/src/botantools/botan/botan/mem_pool.h
Examining data/qca2-2.3.1/src/botantools/botan/botan/mmap_mem.h
Examining data/qca2-2.3.1/src/botantools/botan/botan/modules.h
Examining data/qca2-2.3.1/src/botantools/botan/botan/mp_asm.h
Examining data/qca2-2.3.1/src/botantools/botan/botan/mp_asmi.h
Examining data/qca2-2.3.1/src/botantools/botan/botan/mp_core.h
Examining data/qca2-2.3.1/src/botantools/botan/botan/mp_types.h
Examining data/qca2-2.3.1/src/botantools/botan/botan/mutex.h
Examining data/qca2-2.3.1/src/botantools/botan/botan/mux_qt.h
Examining data/qca2-2.3.1/src/botantools/botan/botan/numthry.h
Examining data/qca2-2.3.1/src/botantools/botan/botan/parsing.h
Examining data/qca2-2.3.1/src/botantools/botan/botan/secmem.h
Examining data/qca2-2.3.1/src/botantools/botan/botan/stl_util.h
Examining data/qca2-2.3.1/src/botantools/botan/botan/types.h
Examining data/qca2-2.3.1/src/botantools/botan/botan/util.h
Examining data/qca2-2.3.1/src/botantools/botan/charset.cpp
Examining data/qca2-2.3.1/src/botantools/botan/defalloc.cpp
Examining data/qca2-2.3.1/src/botantools/botan/divide.cpp
Examining data/qca2-2.3.1/src/botantools/botan/exceptn.cpp
Examining data/qca2-2.3.1/src/botantools/botan/libstate.cpp
Examining data/qca2-2.3.1/src/botantools/botan/mem_pool.cpp
Examining data/qca2-2.3.1/src/botantools/botan/ml_unix/mlock.cpp
Examining data/qca2-2.3.1/src/botantools/botan/ml_win32/mlock.cpp
Examining data/qca2-2.3.1/src/botantools/botan/modules.cpp
Examining data/qca2-2.3.1/src/botantools/botan/mp_asm.cpp
Examining data/qca2-2.3.1/src/botantools/botan/mp_comba.cpp
Examining data/qca2-2.3.1/src/botantools/botan/mp_misc.cpp
Examining data/qca2-2.3.1/src/botantools/botan/mp_mul.cpp
Examining data/qca2-2.3.1/src/botantools/botan/mp_mulop.cpp
Examining data/qca2-2.3.1/src/botantools/botan/mp_shift.cpp
Examining data/qca2-2.3.1/src/botantools/botan/mutex.cpp
Examining data/qca2-2.3.1/src/botantools/botan/mux_qt/mux_qt.cpp
Examining data/qca2-2.3.1/src/botantools/botan/mux_qt/mux_qt.h
Examining data/qca2-2.3.1/src/botantools/botan/parsing.cpp
Examining data/qca2-2.3.1/src/botantools/botan/util.cpp
Examining data/qca2-2.3.1/src/botantools/botantools.h
Examining data/qca2-2.3.1/src/botantools/btest.cpp
Examining data/qca2-2.3.1/src/botantools/wrapns.c
Examining data/qca2-2.3.1/src/qca_basic.cpp
Examining data/qca2-2.3.1/src/qca_cert.cpp
Examining data/qca2-2.3.1/src/qca_core.cpp
Examining data/qca2-2.3.1/src/qca_default.cpp
Examining data/qca2-2.3.1/src/qca_keystore.cpp
Examining data/qca2-2.3.1/src/qca_plugin.cpp
Examining data/qca2-2.3.1/src/qca_plugin.h
Examining data/qca2-2.3.1/src/qca_publickey.cpp
Examining data/qca2-2.3.1/src/qca_safeobj.cpp
Examining data/qca2-2.3.1/src/qca_safeobj.h
Examining data/qca2-2.3.1/src/qca_safetimer.cpp
Examining data/qca2-2.3.1/src/qca_securelayer.cpp
Examining data/qca2-2.3.1/src/qca_securemessage.cpp
Examining data/qca2-2.3.1/src/qca_systemstore.h
Examining data/qca2-2.3.1/src/qca_systemstore_flatfile.cpp
Examining data/qca2-2.3.1/src/qca_systemstore_mac.cpp
Examining data/qca2-2.3.1/src/qca_systemstore_win.cpp
Examining data/qca2-2.3.1/src/qca_textfilter.cpp
Examining data/qca2-2.3.1/src/qca_tools.cpp
Examining data/qca2-2.3.1/src/support/console.cpp
Examining data/qca2-2.3.1/src/support/dirwatch.cpp
Examining data/qca2-2.3.1/src/support/logger.cpp
Examining data/qca2-2.3.1/src/support/qpipe.cpp
Examining data/qca2-2.3.1/src/support/synchronizer.cpp
Examining data/qca2-2.3.1/src/support/syncthread.cpp
Examining data/qca2-2.3.1/tools/mozcerts/main.cpp
Examining data/qca2-2.3.1/tools/qcatool/main.cpp
Examining data/qca2-2.3.1/unittest/base64unittest/base64unittest.cpp
Examining data/qca2-2.3.1/unittest/bigintunittest/bigintunittest.cpp
Examining data/qca2-2.3.1/unittest/certunittest/certunittest.cpp
Examining data/qca2-2.3.1/unittest/cipherunittest/cipherunittest.cpp
Examining data/qca2-2.3.1/unittest/cipherunittest/cipherunittest.h
Examining data/qca2-2.3.1/unittest/clientplugin/clientplugin.cpp
Examining data/qca2-2.3.1/unittest/clientplugin/clientplugin.h
Examining data/qca2-2.3.1/unittest/cms/cms.cpp
Examining data/qca2-2.3.1/unittest/dsaunittest/dsaunittest.cpp
Examining data/qca2-2.3.1/unittest/filewatchunittest/filewatchunittest.cpp
Examining data/qca2-2.3.1/unittest/filewatchunittest/filewatchunittest.h
Examining data/qca2-2.3.1/unittest/hashunittest/hashunittest.cpp
Examining data/qca2-2.3.1/unittest/hexunittest/hexunittest.cpp
Examining data/qca2-2.3.1/unittest/kdfunittest/kdfunittest.cpp
Examining data/qca2-2.3.1/unittest/keybundle/keybundle.cpp
Examining data/qca2-2.3.1/unittest/keygenunittest/keygenunittest.cpp
Examining data/qca2-2.3.1/unittest/keylengthunittest/keylengthunittest.cpp
Examining data/qca2-2.3.1/unittest/keystore/keystore.cpp
Examining data/qca2-2.3.1/unittest/logger/loggerunittest.cpp
Examining data/qca2-2.3.1/unittest/macunittest/macunittest.cpp
Examining data/qca2-2.3.1/unittest/metatype/metatype.cpp
Examining data/qca2-2.3.1/unittest/pgpunittest/pgpunittest.cpp
Examining data/qca2-2.3.1/unittest/pipeunittest/pipeunittest.cpp
Examining data/qca2-2.3.1/unittest/pkits/pkits.cpp
Examining data/qca2-2.3.1/unittest/rsaunittest/rsaunittest.cpp
Examining data/qca2-2.3.1/unittest/securearrayunittest/securearrayunittest.cpp
Examining data/qca2-2.3.1/unittest/staticunittest/staticunittest.cpp
Examining data/qca2-2.3.1/unittest/symmetrickeyunittest/symmetrickeyunittest.cpp
Examining data/qca2-2.3.1/unittest/tls/tlsunittest.cpp
Examining data/qca2-2.3.1/unittest/velox/veloxunittest.cpp
Examining data/qca2-2.3.1/debian/tests/ciphertest/ciphertest.cpp
FINAL RESULTS:
data/qca2-2.3.1/examples/cmssigner/main.cpp:800:10: [4] (format) sprintf:
Potential format string problem (CWE-134). Make format string constant.
verstr.sprintf("%d.%d.%d", maj, min, bug);
data/qca2-2.3.1/examples/cmssigner/pkcs11configdlg/pkcs11configdlg.cpp:122:31: [4] (format) sprintf:
Potential format string problem (CWE-134). Make format string constant.
QString prefix = QString().sprintf("provider_%02d_", n);
data/qca2-2.3.1/examples/cmssigner/pkcs11configdlg/pkcs11configdlg.cpp:152:31: [4] (format) sprintf:
Potential format string problem (CWE-134). Make format string constant.
QString prefix = QString().sprintf("provider_%02d_", n);
data/qca2-2.3.1/include/QtCrypto/qca_securemessage.h:383:37: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
SecureMessage(SecureMessageSystem *system);
data/qca2-2.3.1/plugins/qca-ossl/qca-ossl.cpp:3066:13: [4] (crypto) EVP_des_cbc:
DES only supports a 56-bit keysize, which is too small given today's
computers (CWE-327). Use a different patent-free encryption algorithm with
a larger keysize, such as 3DES or AES.
cipher = EVP_des_cbc();
data/qca2-2.3.1/plugins/qca-ossl/qca-ossl.cpp:3096:13: [4] (crypto) EVP_des_cbc:
DES only supports a 56-bit keysize, which is too small given today's
computers (CWE-327). Use a different patent-free encryption algorithm with
a larger keysize, such as 3DES or AES.
cipher = EVP_des_cbc();
data/qca2-2.3.1/plugins/qca-ossl/qca-ossl.cpp:6928:37: [4] (crypto) EVP_des_ecb:
DES only supports a 56-bit keysize, which is too small given today's
computers (CWE-327). Use a different patent-free encryption algorithm with
a larger keysize, such as 3DES or AES.
return new opensslCipherContext( EVP_des_ecb(), 0, this, type);
data/qca2-2.3.1/plugins/qca-ossl/qca-ossl.cpp:6930:37: [4] (crypto) EVP_des_ecb:
DES only supports a 56-bit keysize, which is too small given today's
computers (CWE-327). Use a different patent-free encryption algorithm with
a larger keysize, such as 3DES or AES.
return new opensslCipherContext( EVP_des_ecb(), 1, this, type);
data/qca2-2.3.1/plugins/qca-ossl/qca-ossl.cpp:6932:37: [4] (crypto) EVP_des_cbc:
DES only supports a 56-bit keysize, which is too small given today's
computers (CWE-327). Use a different patent-free encryption algorithm with
a larger keysize, such as 3DES or AES.
return new opensslCipherContext( EVP_des_cbc(), 0, this, type);
data/qca2-2.3.1/plugins/qca-ossl/qca-ossl.cpp:6934:37: [4] (crypto) EVP_des_cbc:
DES only supports a 56-bit keysize, which is too small given today's
computers (CWE-327). Use a different patent-free encryption algorithm with
a larger keysize, such as 3DES or AES.
return new opensslCipherContext( EVP_des_cbc(), 1, this, type);
data/qca2-2.3.1/plugins/qca-ossl/qca-ossl.cpp:6936:37: [4] (crypto) EVP_des_cfb:
DES only supports a 56-bit keysize, which is too small given today's
computers (CWE-327). Use a different patent-free encryption algorithm with
a larger keysize, such as 3DES or AES.
return new opensslCipherContext( EVP_des_cfb(), 0, this, type);
data/qca2-2.3.1/plugins/qca-ossl/qca-ossl.cpp:6938:37: [4] (crypto) EVP_des_ofb:
DES only supports a 56-bit keysize, which is too small given today's
computers (CWE-327). Use a different patent-free encryption algorithm with
a larger keysize, such as 3DES or AES.
return new opensslCipherContext( EVP_des_ofb(), 0, this, type);
data/qca2-2.3.1/plugins/qca-wingss/qca-wingss.cpp:112:34: [4] (access) ImpersonateSecurityContext:
If this call fails, the program could fail to drop heightened privileges
(CWE-250). Make sure the return value is checked, and do not continue if a
failure is reported.
IMPERSONATE_SECURITY_CONTEXT_FN ImpersonateSecurityContext;
data/qca2-2.3.1/plugins/qca-wingss/qca-wingss.cpp:267:19: [4] (format) sprintf:
Potential format string problem (CWE-134). Make format string constant.
return QString().sprintf("%p", p);
data/qca2-2.3.1/plugins/qca-wingss/qca-wingss.cpp:959:8: [4] (format) sprintf:
Potential format string problem (CWE-134). Make format string constant.
str.sprintf("%02x%02x%02x%02x",
data/qca2-2.3.1/plugins/qca-wingss/qca-wingss.cpp:1074:22: [4] (format) sprintf:
Potential format string problem (CWE-134). Make format string constant.
str += QString().sprintf("%02x", (unsigned int)obuf[n]);
data/qca2-2.3.1/src/botantools/botan/alloc_mmap/mmap_mem.cpp:106:18: [4] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused).
std::strcpy(filepath, path.c_str());
data/qca2-2.3.1/src/botantools/wrapns.c:177:2: [4] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf.
sprintf(str, "namespace %s { // WRAPNS_LINE\n", ns);
data/qca2-2.3.1/src/qca_securemessage.cpp:252:23: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
SecureMessageSystem *system;
data/qca2-2.3.1/src/qca_securemessage.cpp:386:51: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
SecureMessage::SecureMessage(SecureMessageSystem *system)
data/qca2-2.3.1/src/qca_securemessage.cpp:389:14: [4] (shell) system:
This causes a new program to execute and is difficult to use safely
(CWE-78). try using a library call that implements the same functionality
if available.
d->system = system;
data/qca2-2.3.1/examples/saslclient/saslclient.cpp:40:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char line[256];
data/qca2-2.3.1/examples/tlssocket/tlssocket.cpp:200:2: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(data, p, readsize);
data/qca2-2.3.1/plugins/qca-cyrus-sasl/qca-cyrus-sasl.cpp:183:3: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(p, cs.data(), len);
data/qca2-2.3.1/plugins/qca-cyrus-sasl/qca-cyrus-sasl.cpp:201:2: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(buf.data(), in, len);
data/qca2-2.3.1/plugins/qca-cyrus-sasl/qca-cyrus-sasl.cpp:559:4: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(out->data() + oldsize, outbuf, len);
data/qca2-2.3.1/plugins/qca-gcrypt/pkcs5.c:167:14: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char tmp[4];
data/qca2-2.3.1/plugins/qca-gcrypt/pkcs5.c:185:10: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy (U, p, hLen);
data/qca2-2.3.1/plugins/qca-gcrypt/qca-gcrypt.cpp:85:2: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy( a.data(), md, a.size() );
data/qca2-2.3.1/plugins/qca-gcrypt/qca-gcrypt.cpp:145:9: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy( sa.data(), md, sa.size() );
data/qca2-2.3.1/plugins/qca-gcrypt/qca-gcrypt.cpp:331:2: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy( a.data(), md, a.size() );
data/qca2-2.3.1/plugins/qca-gcrypt/qca-gcrypt.cpp:338:6: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy( a.data(), md, a.size() );
data/qca2-2.3.1/plugins/qca-gcrypt/qca-gcrypt.cpp:390:3: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy( a.data(), md, a.size() );
data/qca2-2.3.1/plugins/qca-gcrypt/qca-gcrypt.cpp:400:4: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy( a.data(), md, a.size() );
data/qca2-2.3.1/plugins/qca-gnupg/lineconverter.cpp:49:4: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(out.data() + 1, buf.data(), buf.size());
data/qca2-2.3.1/plugins/qca-gnupg/lineconverter.cpp:101:4: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(out.data() + oldsize, buf.data() + at, chunksize);
data/qca2-2.3.1/plugins/qca-gnupg/lineconverter.cpp:102:4: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(out.data() + oldsize + chunksize, "\r\n", 2);
data/qca2-2.3.1/plugins/qca-gnupg/lineconverter.cpp:115:4: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(out.data() + oldsize, buf.data() + at, chunksize);
data/qca2-2.3.1/plugins/qca-gnupg/mypgpkeycontext.cpp:57:13: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
if(!pubtmp.open())
data/qca2-2.3.1/plugins/qca-gnupg/mypgpkeycontext.cpp:61:13: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
if(!sectmp.open())
data/qca2-2.3.1/plugins/qca-gnupg/utils.cpp:62:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char szValue[256];
data/qca2-2.3.1/plugins/qca-logger/qca-logger.cpp:115:5: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
atoi (level.constData()),
data/qca2-2.3.1/plugins/qca-logger/qca-logger.cpp:190:23: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
success = _logFile.open (stderr, QIODevice::WriteOnly | QIODevice::Text | QIODevice::Unbuffered);
data/qca2-2.3.1/plugins/qca-logger/qca-logger.cpp:194:23: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
success = _logFile.open (QIODevice::Append | QIODevice::Text | QIODevice::Unbuffered);
data/qca2-2.3.1/plugins/qca-ossl/qca-ossl.cpp:118:2: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(out.data() + (size - len), buf.data(), len);
data/qca2-2.3.1/plugins/qca-ossl/qca-ossl.cpp:149:2: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(part_r.data(), in.data(), 20);
data/qca2-2.3.1/plugins/qca-ossl/qca-ossl.cpp:150:2: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(part_s.data(), in.data() + 20, 20);
data/qca2-2.3.1/plugins/qca-ossl/qca-ossl.cpp:978:3: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char psbuf[PEM_BUFSIZE];
data/qca2-2.3.1/plugins/qca-ossl/qca-ossl.cpp:2841:3: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(input.data(), from, input.size());
data/qca2-2.3.1/plugins/qca-ossl/qca-ossl.cpp:2846:4: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(to, output.data(), output.size());
data/qca2-2.3.1/plugins/qca-ossl/qca-ossl.cpp:6702:4: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char buf[128];
data/qca2-2.3.1/plugins/qca-pkcs11/qca-pkcs11.cpp:2968:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char buffer[2048];
data/qca2-2.3.1/plugins/qca-softstore/qca-softstore.cpp:361:21: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
while (!file.open (QIODevice::ReadOnly)) {
data/qca2-2.3.1/plugins/qca-softstore/qca-softstore.cpp:437:17: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
if (file.open (QIODevice::ReadOnly)) {
data/qca2-2.3.1/plugins/qca-wingss/qca-wingss.cpp:558:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(first_out_token.data(), outbuf.pvBuffer, outbuf.cbBuffer);
data/qca2-2.3.1/plugins/qca-wingss/qca-wingss.cpp:647:6: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(out->data(), outbuf.pvBuffer, outbuf.cbBuffer);
data/qca2-2.3.1/plugins/qca-wingss/qca-wingss.cpp:808:4: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(out->data(), buf[0].pvBuffer, buf[0].cbBuffer);
data/qca2-2.3.1/plugins/qca-wingss/qca-wingss.cpp:1140:4: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(sasl_out.data() + 4, kerb_out.data(), kerb_out.size());
data/qca2-2.3.1/src/botantools/botan/alloc_mmap/mmap_mem.cpp:109:18: [2] (tmpfile) mkstemp:
Potential for temporary file vulnerability in some circumstances. Some
older Unix-like systems create temp files with permission to write by all
by default, so be sure to set the umask to override this. Also, some older
Unix systems might fail to use O_EXCL when opening the file, so make sure
that O_EXCL is used by the library (CWE-377).
fd = mkstemp(filepath);
data/qca2-2.3.1/src/botantools/wrapns.c:32:6: [2] (misc) fopen:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
f = fopen(fname, "r");
data/qca2-2.3.1/src/botantools/wrapns.c:57:6: [2] (misc) fopen:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
f = fopen(fname, "w");
data/qca2-2.3.1/src/botantools/wrapns.c:72:2: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(buf + at, str, slen);
data/qca2-2.3.1/src/botantools/wrapns.c:92:2: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(sub, buf, len);
data/qca2-2.3.1/src/botantools/wrapns.c:172:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char str[256], str_end[256];
data/qca2-2.3.1/src/botantools/wrapns.c:180:2: [2] (buffer) sprintf:
Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or
vsnprintf. Risk is low because the source has a constant maximum length.
sprintf(str_end, "} // WRAPNS_LINE\n", ns);
data/qca2-2.3.1/src/qca_basic.cpp:159:2: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(&x, a.data(), a.size());
data/qca2-2.3.1/src/qca_basic.cpp:231:2: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
char buffer[1024];
data/qca2-2.3.1/src/qca_cert.cpp:2383:8: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
if(!f.open(QFile::WriteOnly))
data/qca2-2.3.1/src/qca_cert.cpp:2422:8: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
if(!f.open(QFile::ReadOnly))
data/qca2-2.3.1/src/qca_core.cpp:1417:23: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
static const unsigned char desWeakKeyTable[64][8] =
data/qca2-2.3.1/src/qca_default.cpp:311:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(xbuf, data, 64);
data/qca2-2.3.1/src/qca_default.cpp:463:2: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(pms->buf + offset, p, copy);
data/qca2-2.3.1/src/qca_default.cpp:477:2: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(pms->buf, p, left);
data/qca2-2.3.1/src/qca_default.cpp:575:11: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
unsigned char buffer[64]; // 64
data/qca2-2.3.1/src/qca_default.cpp:586:11: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
unsigned char c[64];
data/qca2-2.3.1/src/qca_default.cpp:658:44: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
void transform(quint32 state[5], unsigned char buffer[64])
data/qca2-2.3.1/src/qca_default.cpp:731:4: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(&context->buffer[j], data, (i = 64-j));
data/qca2-2.3.1/src/qca_default.cpp:739:4: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(&context->buffer[j], &data[i], len - i);
data/qca2-2.3.1/src/qca_default.cpp:743:27: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
void sha1_final(unsigned char digest[20], SHA1_CONTEXT* context)
data/qca2-2.3.1/src/qca_default.cpp:746:12: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
unsigned char finalcount[8];
data/qca2-2.3.1/src/qca_publickey.cpp:37:8: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
if(!f.open(QFile::WriteOnly))
data/qca2-2.3.1/src/qca_publickey.cpp:47:8: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
if(!f.open(QFile::ReadOnly))
data/qca2-2.3.1/src/qca_publickey.cpp:57:8: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
if(!f.open(QFile::WriteOnly))
data/qca2-2.3.1/src/qca_publickey.cpp:66:8: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
if(!f.open(QFile::ReadOnly))
data/qca2-2.3.1/src/qca_publickey.cpp:465:2: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(out.data() + at, hash_id.data(), hash_id.size());
data/qca2-2.3.1/src/qca_publickey.cpp:467:2: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(out.data() + at, digest.data(), digest.size());
data/qca2-2.3.1/src/qca_systemstore_flatfile.cpp:30:11: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
return f.open(QFile::ReadOnly);
data/qca2-2.3.1/src/qca_systemstore_win.cpp:63:3: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(der.data(), pc->pbCertEncoded, size);
data/qca2-2.3.1/src/qca_textfilter.cpp:470:2: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(s.data(), partial.data(), partial.size());
data/qca2-2.3.1/src/qca_textfilter.cpp:471:2: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(s.data() + partial.size(), in.data(), in.size() - eat);
data/qca2-2.3.1/src/qca_textfilter.cpp:474:2: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(partial.data(), in.data() + in.size() - eat, eat);
data/qca2-2.3.1/src/qca_tools.cpp:351:4: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(new_p, old_p, qMin(new_size, ai->size));
data/qca2-2.3.1/src/qca_tools.cpp:402:3: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(ai.data, from.data(), ai.size);
data/qca2-2.3.1/src/qca_tools.cpp:428:3: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(other.data, ai.data, ai.size);
data/qca2-2.3.1/src/qca_tools.cpp:489:3: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(buf.data(), d->ai.data, d->ai.size);
data/qca2-2.3.1/src/qca_tools.cpp:715:2: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(data() + oldsize, a.data(), a.size());
data/qca2-2.3.1/src/support/console.cpp:467:8: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
in = open("/dev/tty", O_RDONLY);
data/qca2-2.3.1/src/support/console.cpp:491:10: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
out = open("/dev/tty", O_WRONLY);
data/qca2-2.3.1/src/support/qpipe.cpp:1166:2: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(&dw, &d->pipe, sizeof(DWORD));
data/qca2-2.3.1/src/support/qpipe.cpp:1281:3: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(&data[0], &c, 1);
data/qca2-2.3.1/src/support/qpipe.cpp:1322:5: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(data + offset + at, out.data(), out.size());
data/qca2-2.3.1/src/support/qpipe.cpp:1637:4: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(a.data(), buf->data(), a.size());
data/qca2-2.3.1/src/support/qpipe.cpp:1662:4: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(a.data(), buf->data(), a.size());
data/qca2-2.3.1/src/support/qpipe.cpp:1824:4: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(sec_curWrite.data(), sec_buf.data(), sec_curWrite.size());
data/qca2-2.3.1/src/support/qpipe.cpp:1832:4: [2] (buffer) memcpy:
Does not check for buffer overflows when copying to destination (CWE-120).
Make sure destination can always hold the source data.
memcpy(curWrite.data(), buf.data(), curWrite.size());
data/qca2-2.3.1/tools/mozcerts/main.cpp:42:13: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
if(!infile.open(QFile::ReadOnly))
data/qca2-2.3.1/tools/mozcerts/main.cpp:49:14: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
if(!outfile.open(QFile::WriteOnly | QFile::Truncate))
data/qca2-2.3.1/tools/qcatool/main.cpp:799:8: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
if(!f.open(QFile::ReadOnly))
data/qca2-2.3.1/tools/qcatool/main.cpp:824:8: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
if(!f.open(QFile::ReadOnly))
data/qca2-2.3.1/tools/qcatool/main.cpp:839:8: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
if(!f.open(QFile::ReadOnly))
data/qca2-2.3.1/tools/qcatool/main.cpp:2821:12: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
logFile.open (QIODevice::Append | QIODevice::Text | QIODevice::Unbuffered);
data/qca2-2.3.1/unittest/certunittest/certunittest.cpp:440:23: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
QVERIFY(f.open(QFile::ReadOnly));
data/qca2-2.3.1/unittest/certunittest/certunittest.cpp:727:23: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
QVERIFY(f.open(QFile::ReadOnly));
data/qca2-2.3.1/unittest/filewatchunittest/filewatchunittest.cpp:54:15: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
tempFile->open();
data/qca2-2.3.1/unittest/filewatchunittest/filewatchunittest.cpp:64:15: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
tempFile->open();
data/qca2-2.3.1/unittest/filewatchunittest/filewatchunittest.cpp:75:15: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
tempFile->open();
data/qca2-2.3.1/unittest/hashunittest/hashunittest.cpp:223:18: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
QVERIFY( f1.open( QIODevice::ReadOnly ) );
data/qca2-2.3.1/unittest/hashunittest/hashunittest.cpp:232:18: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
QVERIFY( f2.open( QIODevice::ReadOnly ) );
data/qca2-2.3.1/unittest/hashunittest/hashunittest.cpp:242:18: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
QVERIFY( f3.open( QIODevice::ReadOnly ) );
data/qca2-2.3.1/unittest/hashunittest/hashunittest.cpp:372:18: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
QVERIFY( f1.open( QIODevice::ReadOnly ) );
data/qca2-2.3.1/unittest/hashunittest/hashunittest.cpp:381:18: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
QVERIFY( f2.open( QIODevice::ReadOnly ) );
data/qca2-2.3.1/unittest/hashunittest/hashunittest.cpp:390:18: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
QVERIFY( f3.open( QIODevice::ReadOnly ) );
data/qca2-2.3.1/unittest/keybundle/keybundle.cpp:181:24: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
QVERIFY( tempFile.open() );
data/qca2-2.3.1/unittest/pkits/pkits.cpp:91:14: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
certFile.open(QFile::ReadOnly);
data/qca2-2.3.1/unittest/pkits/pkits.cpp:101:13: [2] (misc) open:
Check when opening files - can an attacker redirect it (via symlinks),
force the opening of special file type (e.g., device files), move things
around to create a race condition, control its ancestors, or change its
contents? (CWE-362).
crlFile.open(QFile::ReadOnly);
data/qca2-2.3.1/examples/cms/cmsexample.cpp:88:33: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
QByteArray cipherText = msg.read();
data/qca2-2.3.1/examples/cms/cmsexample.cpp:137:45: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
QCA::SecureArray plainTextResult = msg2.read();
data/qca2-2.3.1/examples/publickeyexample/publickeyexample.cpp:95:39: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
QCA::SecureArray cipherText = msg.read();
data/qca2-2.3.1/examples/saslclient/saslclient.cpp:317:24: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
QByteArray a = sasl->read();
data/qca2-2.3.1/examples/saslserver/saslserver.cpp:275:24: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
QByteArray a = sasl->read();
data/qca2-2.3.1/examples/sslservtest/sslservtest.cpp:131:18: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
int num = sock->read(buf.data(), buf.size());
data/qca2-2.3.1/examples/sslservtest/sslservtest.cpp:199:7: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
ssl->read();
data/qca2-2.3.1/examples/ssltest/ssltest.cpp:265:23: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
QByteArray a = ssl->read();
data/qca2-2.3.1/examples/tlssocket/tlssocket.cpp:195:25: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
d->readbuf += d->tls->read();
data/qca2-2.3.1/include/QtCrypto/qca_securelayer.h:157:21: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
virtual QByteArray read() = 0;
data/qca2-2.3.1/include/QtCrypto/qca_securelayer.h:689:13: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
QByteArray read() override;
data/qca2-2.3.1/include/QtCrypto/qca_securelayer.h:1175:13: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
QByteArray read() override;
data/qca2-2.3.1/include/QtCrypto/qca_securemessage.h:649:13: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
QByteArray read();
data/qca2-2.3.1/include/QtCrypto/qca_support.h:749:13: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
QByteArray read(int bytes = -1);
data/qca2-2.3.1/include/QtCrypto/qcaprovider.h:2892:21: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
virtual QByteArray read() = 0;
data/qca2-2.3.1/include/QtCrypto/qpipe.h:171:6: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
int read(char *data, int maxsize);
data/qca2-2.3.1/include/QtCrypto/qpipe.h:362:13: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
QByteArray read(int bytes = -1);
data/qca2-2.3.1/plugins/qca-botan/qca-botan.cpp:512:39: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
const size_t bytes_read = m_crypter->read((Botan::byte*)result.data(), result.size());
data/qca2-2.3.1/plugins/qca-botan/qca-botan.cpp:523:39: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
const size_t bytes_read = m_crypter->read((Botan::byte*)result.data(), result.size());
data/qca2-2.3.1/plugins/qca-gnupg/gpgaction.cpp:545:23: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
QByteArray GpgAction::read()
data/qca2-2.3.1/plugins/qca-gnupg/gpgaction.h:86:13: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
QByteArray read();
data/qca2-2.3.1/plugins/qca-gnupg/gpgop.cpp:177:16: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
result = act->read();
data/qca2-2.3.1/plugins/qca-gnupg/gpgop.cpp:391:19: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
QByteArray GpgOp::read()
data/qca2-2.3.1/plugins/qca-gnupg/gpgop.cpp:395:18: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
return d->act->read();
data/qca2-2.3.1/plugins/qca-gnupg/gpgop.h:175:13: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
QByteArray read();
data/qca2-2.3.1/plugins/qca-gnupg/gpgproc/gpgproc.cpp:426:46: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
const QByteArray buf = pipeStatus.readEnd().read();
data/qca2-2.3.1/plugins/qca-gnupg/mymessagecontext.cpp:147:30: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
QByteArray MyMessageContext::read()
data/qca2-2.3.1/plugins/qca-gnupg/mymessagecontext.cpp:184:14: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
sig = gpg.read();
data/qca2-2.3.1/plugins/qca-gnupg/mymessagecontext.cpp:186:14: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
out = gpg.read();
data/qca2-2.3.1/plugins/qca-gnupg/mymessagecontext.h:66:13: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
QByteArray read() override;
data/qca2-2.3.1/plugins/qca-gnupg/mypgpkeycontext.cpp:42:14: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
return gpg.read();
data/qca2-2.3.1/plugins/qca-gnupg/mypgpkeycontext.cpp:148:26: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
cacheExportBinary = gpg.read();
data/qca2-2.3.1/plugins/qca-gnupg/mypgpkeycontext.cpp:160:48: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
cacheExportAscii = QString::fromLocal8Bit(gpg.read());
data/qca2-2.3.1/plugins/qca-gnupg/mypgpkeycontext.cpp:182:37: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
return QString::fromLocal8Bit(gpg.read());
data/qca2-2.3.1/plugins/qca-ossl/qca-ossl.cpp:5905:13: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
QByteArray read() override
data/qca2-2.3.1/src/botantools/botan/alloc_mmap/mmap_mem.cpp:108:32: [1] (access) umask:
Ensure that umask is given most restrictive possible setting (e.g., 066 or
077) (CWE-732).
mode_t old_umask = umask(077);
data/qca2-2.3.1/src/botantools/botan/alloc_mmap/mmap_mem.cpp:110:13: [1] (access) umask:
Ensure that umask is given most restrictive possible setting (e.g., 066 or
077) (CWE-732).
umask(old_umask);
data/qca2-2.3.1/src/botantools/wrapns.c:58:14: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
fwrite(buf, strlen(buf), 1, f);
data/qca2-2.3.1/src/botantools/wrapns.c:65:10: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
bsize = strlen(buf) + 1;
data/qca2-2.3.1/src/botantools/wrapns.c:66:9: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
slen = strlen(str);
data/qca2-2.3.1/src/botantools/wrapns.c:178:9: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
slen = strlen(str);
data/qca2-2.3.1/src/botantools/wrapns.c:181:13: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
slen_end = strlen(str_end);
data/qca2-2.3.1/src/botantools/wrapns.c:212:9: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
at = strlen(buf);
data/qca2-2.3.1/src/qca_basic.cpp:234:20: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
while ((len=file->read(reinterpret_cast<char*>(buffer), sizeof(buffer))) > 0)
data/qca2-2.3.1/src/qca_securelayer.cpp:1081:17: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
QByteArray TLS::read()
data/qca2-2.3.1/src/qca_securelayer.cpp:1960:18: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
QByteArray SASL::read()
data/qca2-2.3.1/src/qca_securemessage.cpp:328:28: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
const QByteArray a = c->read();
data/qca2-2.3.1/src/qca_securemessage.cpp:526:27: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
QByteArray SecureMessage::read()
data/qca2-2.3.1/src/qca_tools.cpp:440:61: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
:_secure(false), d(new Private(QByteArray::fromRawData(str, strlen(str)), false))
data/qca2-2.3.1/src/qca_tools.cpp:615:44: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
:MemoryRegion(QByteArray::fromRawData(str, strlen(str)), true)
data/qca2-2.3.1/src/support/console.cpp:107:16: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
in_left = in.read();
data/qca2-2.3.1/src/support/console.cpp:138:13: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
QByteArray read(int bytes = -1)
data/qca2-2.3.1/src/support/console.cpp:140:13: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
return in.read(bytes);
data/qca2-2.3.1/src/support/console.cpp:274:13: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
QByteArray read(int bytes = -1)
data/qca2-2.3.1/src/support/console.cpp:707:30: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
QByteArray ConsoleReference::read(int bytes)
data/qca2-2.3.1/src/support/console.cpp:709:20: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
return d->thread->read(bytes);
data/qca2-2.3.1/src/support/qpipe.cpp:218:12: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
int ret = read(pipe, data, max);
data/qca2-2.3.1/src/support/qpipe.cpp:1235:18: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
int QPipeDevice::read(char *data, int maxsize)
data/qca2-2.3.1/src/support/qpipe.cpp:1627:13: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
QByteArray read(QByteArray *buf, int bytes)
data/qca2-2.3.1/src/support/qpipe.cpp:1781:15: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
ret = pipe.read(a.data(), a.size());
data/qca2-2.3.1/src/support/qpipe.cpp:1792:15: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
ret = pipe.read(a.data(), a.size());
data/qca2-2.3.1/src/support/qpipe.cpp:1987:22: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
QByteArray QPipeEnd::read(int bytes)
data/qca2-2.3.1/src/support/qpipe.cpp:1989:12: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
return d->read(&d->buf, bytes);
data/qca2-2.3.1/tools/qcatool/main.cpp:3961:19: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
output = msg->read();
data/qca2-2.3.1/tools/qcatool/main.cpp:4065:29: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
QByteArray output = msg->read();
data/qca2-2.3.1/tools/qcatool/main.cpp:4158:29: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
QByteArray output = msg->read();
data/qca2-2.3.1/tools/qcatool/main.cpp:4304:19: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
output = msg->read();
data/qca2-2.3.1/tools/qcatool/main.cpp:4455:29: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
QByteArray output = msg->read();
data/qca2-2.3.1/unittest/cms/cms.cpp:110:40: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
QByteArray encryptedResult1 = msg.read();
data/qca2-2.3.1/unittest/cms/cms.cpp:122:40: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
QByteArray encryptedResult2 = msg.read();
data/qca2-2.3.1/unittest/cms/cms.cpp:143:41: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
QByteArray decryptedResult1 = msg2.read();
data/qca2-2.3.1/unittest/cms/cms.cpp:152:41: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
QByteArray decryptedResult2 = msg2.read();
data/qca2-2.3.1/unittest/cms/cms.cpp:350:38: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
QByteArray signedResult1 = msg2.read();
data/qca2-2.3.1/unittest/cms/cms.cpp:361:38: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
QByteArray signedResult2 = msg2.read();
data/qca2-2.3.1/unittest/cms/cms.cpp:468:38: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
QByteArray signedResult1 = msg2.read();
data/qca2-2.3.1/unittest/pgpunittest/pgpunittest.cpp:313:24: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
messageData = msg.read();
data/qca2-2.3.1/unittest/pgpunittest/pgpunittest.cpp:333:21: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
QCOMPARE( msg2.read(), plain );
data/qca2-2.3.1/unittest/pgpunittest/pgpunittest.cpp:444:28: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
clearsignedData = msg.read();
data/qca2-2.3.1/unittest/pgpunittest/pgpunittest.cpp:465:21: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
QCOMPARE( msg2.read().trimmed(), plain.trimmed() );
data/qca2-2.3.1/unittest/pgpunittest/pgpunittest.cpp:662:43: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
QByteArray nonExpiredKeySignature = msg.read();
data/qca2-2.3.1/unittest/pgpunittest/pgpunittest.cpp:673:34: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
QByteArray signedResult = msg1.read();
data/qca2-2.3.1/unittest/pgpunittest/pgpunittest.cpp:851:30: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
QByteArray encResult = msg.read();
data/qca2-2.3.1/unittest/pgpunittest/pgpunittest.cpp:862:31: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
QByteArray decResult = msg1.read();
data/qca2-2.3.1/unittest/pipeunittest/pipeunittest.cpp:114:39: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
QByteArray out1 = pipe1.readEnd().read(); // read all...
data/qca2-2.3.1/unittest/pipeunittest/pipeunittest.cpp:124:43: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
QByteArray thisRead = pipe1.readEnd().read(1);
data/qca2-2.3.1/unittest/pipeunittest/pipeunittest.cpp:126:32: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
thisRead = pipe1.readEnd().read(3);
data/qca2-2.3.1/unittest/pipeunittest/pipeunittest.cpp:128:32: [1] (buffer) read:
Check buffer boundaries if used in a loop including recursive loops
(CWE-120, CWE-20).
thisRead = pipe1.readEnd().read();
ANALYSIS SUMMARY:
Hits = 212
Lines analyzed = 93163 in approximately 2.28 seconds (40797 lines/second)
Physical Source Lines of Code (SLOC) = 60724
Hits@level = [0] 478 [1] 87 [2] 104 [3] 0 [4] 21 [5] 0
Hits@level+ = [0+] 690 [1+] 212 [2+] 125 [3+] 21 [4+] 21 [5+] 0
Hits/KSLOC@level+ = [0+] 11.3629 [1+] 3.49121 [2+] 2.05849 [3+] 0.345827 [4+] 0.345827 [5+] 0
Dot directories skipped = 1 (--followdotdir overrides)
Minimum risk level = 1
Not every hit is necessarily a security vulnerability.
There may be other security vulnerabilities; review your code!
See 'Secure Programming HOWTO'
(https://dwheeler.com/secure-programs) for more information.