Flawfinder version 2.0.10, (C) 2001-2019 David A. Wheeler.
Number of rules (primarily dangerous function names) in C/C++ ruleset: 223
Examining data/qrisk2-0.1.20150729/include/clinrisk/Q80_model_4_1.h
Examining data/qrisk2-0.1.20150729/include/clinrisk/utils.h
Examining data/qrisk2-0.1.20150729/include/clinrisk/Q80_model_4_0.h
Examining data/qrisk2-0.1.20150729/commandLine/Q80_model_4_0_commandLine.c
Examining data/qrisk2-0.1.20150729/commandLine/Q80_model_4_1_commandLine.c
Examining data/qrisk2-0.1.20150729/c/utils.c
Examining data/qrisk2-0.1.20150729/c/Q80_model_4_0.c
Examining data/qrisk2-0.1.20150729/c/Q80_model_4_1.c
FINAL RESULTS:
data/qrisk2-0.1.20150729/c/utils.c:60:17: [2] (buffer) strcpy:
Does not check for buffer overflows when copying to destination [MS-banned]
(CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy
easily misused). Risk is low because the source is a constant string.
strcpy(dst, "errorBuf has been truncated");
data/qrisk2-0.1.20150729/commandLine/Q80_model_4_0_commandLine.c:43:8: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
static char errorBuf[1024];
data/qrisk2-0.1.20150729/commandLine/Q80_model_4_0_commandLine.c:86:12: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
int age = atoi(argv[1]);
data/qrisk2-0.1.20150729/commandLine/Q80_model_4_0_commandLine.c:87:13: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
int b_AF = atoi(argv[2]);
data/qrisk2-0.1.20150729/commandLine/Q80_model_4_0_commandLine.c:88:13: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
int b_ra = atoi(argv[3]);
data/qrisk2-0.1.20150729/commandLine/Q80_model_4_0_commandLine.c:89:16: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
int b_renal = atoi(argv[4]);
data/qrisk2-0.1.20150729/commandLine/Q80_model_4_0_commandLine.c:90:21: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
int b_treatedhyp = atoi(argv[5]);
data/qrisk2-0.1.20150729/commandLine/Q80_model_4_0_commandLine.c:91:16: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
int b_type1 = atoi(argv[6]);
data/qrisk2-0.1.20150729/commandLine/Q80_model_4_0_commandLine.c:92:16: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
int b_type2 = atoi(argv[7]);
data/qrisk2-0.1.20150729/commandLine/Q80_model_4_0_commandLine.c:94:16: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
int ethrisk = atoi(argv[9]);
data/qrisk2-0.1.20150729/commandLine/Q80_model_4_0_commandLine.c:95:15: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
int fh_cvd = atoi(argv[10]);
data/qrisk2-0.1.20150729/commandLine/Q80_model_4_0_commandLine.c:98:18: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
int smoke_cat = atoi(argv[13]);
data/qrisk2-0.1.20150729/commandLine/Q80_model_4_0_commandLine.c:99:13: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
int surv = atoi(argv[14]);
data/qrisk2-0.1.20150729/commandLine/Q80_model_4_1_commandLine.c:43:8: [2] (buffer) char:
Statically-sized arrays can be improperly restricted, leading to potential
overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use
functions that limit length, or ensure that the size is larger than the
maximum possible length.
static char errorBuf[1024];
data/qrisk2-0.1.20150729/commandLine/Q80_model_4_1_commandLine.c:86:12: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
int age = atoi(argv[1]);
data/qrisk2-0.1.20150729/commandLine/Q80_model_4_1_commandLine.c:87:13: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
int b_AF = atoi(argv[2]);
data/qrisk2-0.1.20150729/commandLine/Q80_model_4_1_commandLine.c:88:13: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
int b_ra = atoi(argv[3]);
data/qrisk2-0.1.20150729/commandLine/Q80_model_4_1_commandLine.c:89:16: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
int b_renal = atoi(argv[4]);
data/qrisk2-0.1.20150729/commandLine/Q80_model_4_1_commandLine.c:90:21: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
int b_treatedhyp = atoi(argv[5]);
data/qrisk2-0.1.20150729/commandLine/Q80_model_4_1_commandLine.c:91:16: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
int b_type1 = atoi(argv[6]);
data/qrisk2-0.1.20150729/commandLine/Q80_model_4_1_commandLine.c:92:16: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
int b_type2 = atoi(argv[7]);
data/qrisk2-0.1.20150729/commandLine/Q80_model_4_1_commandLine.c:94:16: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
int ethrisk = atoi(argv[9]);
data/qrisk2-0.1.20150729/commandLine/Q80_model_4_1_commandLine.c:95:15: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
int fh_cvd = atoi(argv[10]);
data/qrisk2-0.1.20150729/commandLine/Q80_model_4_1_commandLine.c:98:18: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
int smoke_cat = atoi(argv[13]);
data/qrisk2-0.1.20150729/commandLine/Q80_model_4_1_commandLine.c:99:13: [2] (integer) atoi:
Unless checked, the resulting number can exceed the expected range
(CWE-190). If source untrusted, check both minimum and maximum, even if the
input had no minus sign (large numbers can roll over into negative number;
consider saving to an unsigned value if that is intended).
int surv = atoi(argv[14]);
data/qrisk2-0.1.20150729/c/utils.c:59:13: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if (strlen(src) + 1 > n - strlen(dst))
data/qrisk2-0.1.20150729/c/utils.c:59:35: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
if (strlen(src) + 1 > n - strlen(dst))
data/qrisk2-0.1.20150729/c/utils.c:61:15: [1] (buffer) strncat:
Easily used incorrectly (e.g., incorrectly computing the correct maximum
size to add) [MS-banned] (CWE-120). Consider strcat_s, strlcat, snprintf,
or automatically resizing strings.
(void)strncat(dst, src, n - strlen(dst) - 1);
data/qrisk2-0.1.20150729/c/utils.c:61:37: [1] (buffer) strlen:
Does not handle strings that are not \0-terminated; if given one it may
perform an over-read (it could cause a crash if unprotected) (CWE-126).
(void)strncat(dst, src, n - strlen(dst) - 1);
ANALYSIS SUMMARY:
Hits = 29
Lines analyzed = 907 in approximately 0.07 seconds (13486 lines/second)
Physical Source Lines of Code (SLOC) = 540
Hits@level = [0] 66 [1] 4 [2] 25 [3] 0 [4] 0 [5] 0
Hits@level+ = [0+] 95 [1+] 29 [2+] 25 [3+] 0 [4+] 0 [5+] 0
Hits/KSLOC@level+ = [0+] 175.926 [1+] 53.7037 [2+] 46.2963 [3+] 0 [4+] 0 [5+] 0
Dot directories skipped = 1 (--followdotdir overrides)
Minimum risk level = 1
Not every hit is necessarily a security vulnerability.
There may be other security vulnerabilities; review your code!
See 'Secure Programming HOWTO'
(https://dwheeler.com/secure-programs) for more information.