Flawfinder version 2.0.10, (C) 2001-2019 David A. Wheeler. Number of rules (primarily dangerous function names) in C/C++ ruleset: 223 Examining data/r-cran-mets-1.2.8.1+dfsg/src/claytonoakes.cpp Examining data/r-cran-mets-1.2.8.1+dfsg/src/biprobit.cpp Examining data/r-cran-mets-1.2.8.1+dfsg/src/clusterindex.cpp Examining data/r-cran-mets-1.2.8.1+dfsg/src/apply.cpp Examining data/r-cran-mets-1.2.8.1+dfsg/src/prop-odd.cpp Examining data/r-cran-mets-1.2.8.1+dfsg/src/mvn.cpp Examining data/r-cran-mets-1.2.8.1+dfsg/src/init.c Examining data/r-cran-mets-1.2.8.1+dfsg/src/quadrule.h Examining data/r-cran-mets-1.2.8.1+dfsg/src/pch.cpp Examining data/r-cran-mets-1.2.8.1+dfsg/src/tools.cpp Examining data/r-cran-mets-1.2.8.1+dfsg/src/mvn.h Examining data/r-cran-mets-1.2.8.1+dfsg/src/cor.cpp Examining data/r-cran-mets-1.2.8.1+dfsg/src/tools.h Examining data/r-cran-mets-1.2.8.1+dfsg/src/fastcox.cpp Examining data/r-cran-mets-1.2.8.1+dfsg/src/randomF77.c Examining data/r-cran-mets-1.2.8.1+dfsg/src/rvpairs2dimrv.cpp Examining data/r-cran-mets-1.2.8.1+dfsg/src/fastcox.h Examining data/r-cran-mets-1.2.8.1+dfsg/src/binomial-twostage.cpp Examining data/r-cran-mets-1.2.8.1+dfsg/src/aalenfrailty.cpp Examining data/r-cran-mets-1.2.8.1+dfsg/src/twostage.h Examining data/r-cran-mets-1.2.8.1+dfsg/src/RcppExports.cpp Examining data/r-cran-mets-1.2.8.1+dfsg/src/survival-twostage.cpp Examining data/r-cran-mets-1.2.8.1+dfsg/inst/include/mets.h Examining data/r-cran-mets-1.2.8.1+dfsg/inst/include/mets_RcppExports.h FINAL RESULTS: data/r-cran-mets-1.2.8.1+dfsg/src/tools.cpp:259:18: [1] (buffer) equal: Function does not check the second iterator for over-read conditions (CWE-126). This function is often discouraged by most C++ coding standards in favor of its safer alternatives provided since C++14. Consider using a form of this function that checks the second iterator before potentially overflowing it. const SEXP equal, data/r-cran-mets-1.2.8.1+dfsg/src/tools.cpp:272:31: [1] (buffer) equal: Function does not check the second iterator for over-read conditions (CWE-126). This function is often discouraged by most C++ coding standards in favor of its safer alternatives provided since C++14. Consider using a form of this function that checks the second iterator before potentially overflowing it. bool Equal = Rcpp::as<bool>(equal); data/r-cran-mets-1.2.8.1+dfsg/src/tools.h:15:76: [1] (buffer) equal: Function does not check the second iterator for over-read conditions (CWE-126). This function is often discouraged by most C++ coding standards in favor of its safer alternatives provided since C++14. Consider using a form of this function that checks the second iterator before potentially overflowing it. RcppExport SEXP FastApprox(const SEXP time, const SEXP newtime, const SEXP equal, const SEXP type); ANALYSIS SUMMARY: Hits = 3 Lines analyzed = 11439 in approximately 0.33 seconds (34752 lines/second) Physical Source Lines of Code (SLOC) = 8080 Hits@level = [0] 0 [1] 3 [2] 0 [3] 0 [4] 0 [5] 0 Hits@level+ = [0+] 3 [1+] 3 [2+] 0 [3+] 0 [4+] 0 [5+] 0 Hits/KSLOC@level+ = [0+] 0.371287 [1+] 0.371287 [2+] 0 [3+] 0 [4+] 0 [5+] 0 Dot directories skipped = 1 (--followdotdir overrides) Minimum risk level = 1 Not every hit is necessarily a security vulnerability. There may be other security vulnerabilities; review your code! See 'Secure Programming HOWTO' (https://dwheeler.com/secure-programs) for more information.