Flawfinder version 2.0.10, (C) 2001-2019 David A. Wheeler. Number of rules (primarily dangerous function names) in C/C++ ruleset: 223 Examining data/radare2-cutter-1.10.2/src/bindings/bindings.h Examining data/radare2-cutter-1.10.2/src/CutterApplication.h Examining data/radare2-cutter-1.10.2/src/core/CutterCommon.h Examining data/radare2-cutter-1.10.2/src/core/MainWindow.h Examining data/radare2-cutter-1.10.2/src/core/MainWindow.cpp Examining data/radare2-cutter-1.10.2/src/core/Cutter.h Examining data/radare2-cutter-1.10.2/src/core/Cutter.cpp Examining data/radare2-cutter-1.10.2/src/core/CutterDescriptions.h Examining data/radare2-cutter-1.10.2/src/CutterApplication.cpp Examining data/radare2-cutter-1.10.2/src/Main.cpp Examining data/radare2-cutter-1.10.2/src/dialogs/R2PluginsDialog.cpp Examining data/radare2-cutter-1.10.2/src/dialogs/AboutDialog.cpp Examining data/radare2-cutter-1.10.2/src/dialogs/TypesInteractionDialog.h Examining data/radare2-cutter-1.10.2/src/dialogs/VersionInfoDialog.cpp Examining data/radare2-cutter-1.10.2/src/dialogs/NewFileDialog.h Examining data/radare2-cutter-1.10.2/src/dialogs/R2TaskDialog.cpp Examining data/radare2-cutter-1.10.2/src/dialogs/R2PluginsDialog.h Examining data/radare2-cutter-1.10.2/src/dialogs/AttachProcDialog.cpp Examining data/radare2-cutter-1.10.2/src/dialogs/FlagDialog.h Examining data/radare2-cutter-1.10.2/src/dialogs/EditMethodDialog.h Examining data/radare2-cutter-1.10.2/src/dialogs/LinkTypeDialog.h Examining data/radare2-cutter-1.10.2/src/dialogs/SaveProjectDialog.cpp Examining data/radare2-cutter-1.10.2/src/dialogs/OpenFileDialog.cpp Examining data/radare2-cutter-1.10.2/src/dialogs/MultitypeFileSaveDialog.h Examining data/radare2-cutter-1.10.2/src/dialogs/R2TaskDialog.h Examining data/radare2-cutter-1.10.2/src/dialogs/RemoteDebugDialog.cpp Examining data/radare2-cutter-1.10.2/src/dialogs/MultitypeFileSaveDialog.cpp Examining data/radare2-cutter-1.10.2/src/dialogs/AsyncTaskDialog.cpp Examining data/radare2-cutter-1.10.2/src/dialogs/HexdumpRangeDialog.cpp Examining data/radare2-cutter-1.10.2/src/dialogs/EditStringDialog.cpp Examining data/radare2-cutter-1.10.2/src/dialogs/NewFileDialog.cpp Examining data/radare2-cutter-1.10.2/src/dialogs/RenameDialog.h Examining data/radare2-cutter-1.10.2/src/dialogs/OpenFileDialog.h Examining data/radare2-cutter-1.10.2/src/dialogs/RenameDialog.cpp Examining data/radare2-cutter-1.10.2/src/dialogs/CommentsDialog.cpp Examining data/radare2-cutter-1.10.2/src/dialogs/SaveProjectDialog.h Examining data/radare2-cutter-1.10.2/src/dialogs/TypesInteractionDialog.cpp Examining data/radare2-cutter-1.10.2/src/dialogs/WelcomeDialog.h Examining data/radare2-cutter-1.10.2/src/dialogs/NativeDebugDialog.h Examining data/radare2-cutter-1.10.2/src/dialogs/SetToDataDialog.h Examining data/radare2-cutter-1.10.2/src/dialogs/EditFunctionDialog.cpp Examining data/radare2-cutter-1.10.2/src/dialogs/AsyncTaskDialog.h Examining data/radare2-cutter-1.10.2/src/dialogs/EditFunctionDialog.h Examining data/radare2-cutter-1.10.2/src/dialogs/EditInstructionDialog.h Examining data/radare2-cutter-1.10.2/src/dialogs/EditStringDialog.h Examining data/radare2-cutter-1.10.2/src/dialogs/NativeDebugDialog.cpp Examining data/radare2-cutter-1.10.2/src/dialogs/XrefsDialog.cpp Examining data/radare2-cutter-1.10.2/src/dialogs/VersionInfoDialog.h Examining data/radare2-cutter-1.10.2/src/dialogs/WelcomeDialog.cpp Examining data/radare2-cutter-1.10.2/src/dialogs/CommentsDialog.h Examining data/radare2-cutter-1.10.2/src/dialogs/XrefsDialog.h Examining data/radare2-cutter-1.10.2/src/dialogs/AttachProcDialog.h Examining data/radare2-cutter-1.10.2/src/dialogs/EditInstructionDialog.cpp Examining data/radare2-cutter-1.10.2/src/dialogs/BreakpointsDialog.h Examining data/radare2-cutter-1.10.2/src/dialogs/EditMethodDialog.cpp Examining data/radare2-cutter-1.10.2/src/dialogs/RemoteDebugDialog.h Examining data/radare2-cutter-1.10.2/src/dialogs/BreakpointsDialog.cpp Examining data/radare2-cutter-1.10.2/src/dialogs/AboutDialog.h Examining data/radare2-cutter-1.10.2/src/dialogs/LinkTypeDialog.cpp Examining data/radare2-cutter-1.10.2/src/dialogs/EditVariablesDialog.h Examining data/radare2-cutter-1.10.2/src/dialogs/InitialOptionsDialog.cpp Examining data/radare2-cutter-1.10.2/src/dialogs/SetToDataDialog.cpp Examining data/radare2-cutter-1.10.2/src/dialogs/preferences/AppearanceOptionsWidget.h Examining data/radare2-cutter-1.10.2/src/dialogs/preferences/PluginsOptionsWidget.cpp Examining data/radare2-cutter-1.10.2/src/dialogs/preferences/AppearanceOptionsWidget.cpp Examining data/radare2-cutter-1.10.2/src/dialogs/preferences/AsmOptionsWidget.h Examining data/radare2-cutter-1.10.2/src/dialogs/preferences/GraphOptionsWidget.cpp Examining data/radare2-cutter-1.10.2/src/dialogs/preferences/PluginsOptionsWidget.h Examining data/radare2-cutter-1.10.2/src/dialogs/preferences/PreferenceCategory.h Examining data/radare2-cutter-1.10.2/src/dialogs/preferences/AsmOptionsWidget.cpp Examining data/radare2-cutter-1.10.2/src/dialogs/preferences/GraphOptionsWidget.h Examining data/radare2-cutter-1.10.2/src/dialogs/preferences/DebugOptionsWidget.cpp Examining data/radare2-cutter-1.10.2/src/dialogs/preferences/PreferencesDialog.cpp Examining data/radare2-cutter-1.10.2/src/dialogs/preferences/PreferenceCategory.cpp Examining data/radare2-cutter-1.10.2/src/dialogs/preferences/ColorThemeEditDialog.cpp Examining data/radare2-cutter-1.10.2/src/dialogs/preferences/ColorThemeEditDialog.h Examining data/radare2-cutter-1.10.2/src/dialogs/preferences/DebugOptionsWidget.h Examining data/radare2-cutter-1.10.2/src/dialogs/preferences/PreferencesDialog.h Examining data/radare2-cutter-1.10.2/src/dialogs/InitialOptionsDialog.h Examining data/radare2-cutter-1.10.2/src/dialogs/EditVariablesDialog.cpp Examining data/radare2-cutter-1.10.2/src/dialogs/FlagDialog.cpp Examining data/radare2-cutter-1.10.2/src/dialogs/HexdumpRangeDialog.h Examining data/radare2-cutter-1.10.2/src/widgets/ComboQuickFilterView.h Examining data/radare2-cutter-1.10.2/src/widgets/TypesWidget.h Examining data/radare2-cutter-1.10.2/src/widgets/ResourcesWidget.h Examining data/radare2-cutter-1.10.2/src/widgets/WidgetShortcuts.h Examining data/radare2-cutter-1.10.2/src/widgets/ProcessesWidget.cpp Examining data/radare2-cutter-1.10.2/src/widgets/RegistersWidget.cpp Examining data/radare2-cutter-1.10.2/src/widgets/ProcessesWidget.h Examining data/radare2-cutter-1.10.2/src/widgets/StackWidget.h Examining data/radare2-cutter-1.10.2/src/widgets/SymbolsWidget.cpp Examining data/radare2-cutter-1.10.2/src/widgets/RegisterRefsWidget.cpp Examining data/radare2-cutter-1.10.2/src/widgets/AddressableItemList.h Examining data/radare2-cutter-1.10.2/src/widgets/GraphWidget.cpp Examining data/radare2-cutter-1.10.2/src/widgets/ResourcesWidget.cpp Examining data/radare2-cutter-1.10.2/src/widgets/BoolToggleDelegate.h Examining data/radare2-cutter-1.10.2/src/widgets/DebugActions.cpp Examining data/radare2-cutter-1.10.2/src/widgets/RelocsWidget.h Examining data/radare2-cutter-1.10.2/src/widgets/OverviewView.cpp Examining data/radare2-cutter-1.10.2/src/widgets/VisualNavbar.h Examining data/radare2-cutter-1.10.2/src/widgets/CutterTreeView.h Examining data/radare2-cutter-1.10.2/src/widgets/CutterTreeWidget.cpp Examining data/radare2-cutter-1.10.2/src/widgets/ColorThemeListView.cpp Examining data/radare2-cutter-1.10.2/src/widgets/CommentsWidget.cpp Examining data/radare2-cutter-1.10.2/src/widgets/MemoryMapWidget.cpp Examining data/radare2-cutter-1.10.2/src/widgets/StringsWidget.h Examining data/radare2-cutter-1.10.2/src/widgets/ColorThemeComboBox.cpp Examining data/radare2-cutter-1.10.2/src/widgets/FlagsWidget.cpp Examining data/radare2-cutter-1.10.2/src/widgets/ZignaturesWidget.cpp Examining data/radare2-cutter-1.10.2/src/widgets/ConsoleWidget.h Examining data/radare2-cutter-1.10.2/src/widgets/GraphGridLayout.cpp Examining data/radare2-cutter-1.10.2/src/widgets/SectionsWidget.h Examining data/radare2-cutter-1.10.2/src/widgets/OverviewWidget.h Examining data/radare2-cutter-1.10.2/src/widgets/DecompilerWidget.h Examining data/radare2-cutter-1.10.2/src/widgets/SdbWidget.h Examining data/radare2-cutter-1.10.2/src/widgets/Dashboard.cpp Examining data/radare2-cutter-1.10.2/src/widgets/ColorThemeComboBox.h Examining data/radare2-cutter-1.10.2/src/widgets/DisassemblerGraphView.cpp Examining data/radare2-cutter-1.10.2/src/widgets/ListDockWidget.h Examining data/radare2-cutter-1.10.2/src/widgets/ImportsWidget.h Examining data/radare2-cutter-1.10.2/src/widgets/ThreadsWidget.cpp Examining data/radare2-cutter-1.10.2/src/widgets/RegisterRefsWidget.h Examining data/radare2-cutter-1.10.2/src/widgets/ClassesWidget.h Examining data/radare2-cutter-1.10.2/src/widgets/ComboQuickFilterView.cpp Examining data/radare2-cutter-1.10.2/src/widgets/BreakpointWidget.h Examining data/radare2-cutter-1.10.2/src/widgets/HexdumpWidget.cpp Examining data/radare2-cutter-1.10.2/src/widgets/DisassemblyWidget.h Examining data/radare2-cutter-1.10.2/src/widgets/BacktraceWidget.cpp Examining data/radare2-cutter-1.10.2/src/widgets/SearchWidget.h Examining data/radare2-cutter-1.10.2/src/widgets/OverviewWidget.cpp Examining data/radare2-cutter-1.10.2/src/widgets/SegmentsWidget.cpp Examining data/radare2-cutter-1.10.2/src/widgets/ExportsWidget.h Examining data/radare2-cutter-1.10.2/src/widgets/CutterTreeView.cpp Examining data/radare2-cutter-1.10.2/src/widgets/SymbolsWidget.h Examining data/radare2-cutter-1.10.2/src/widgets/BoolToggleDelegate.cpp Examining data/radare2-cutter-1.10.2/src/widgets/GraphvizLayout.cpp Examining data/radare2-cutter-1.10.2/src/widgets/StackWidget.cpp Examining data/radare2-cutter-1.10.2/src/widgets/FunctionsWidget.h Examining data/radare2-cutter-1.10.2/src/widgets/DisassemblyWidget.cpp Examining data/radare2-cutter-1.10.2/src/widgets/ZignaturesWidget.h Examining data/radare2-cutter-1.10.2/src/widgets/EntrypointWidget.cpp Examining data/radare2-cutter-1.10.2/src/widgets/HexdumpWidget.h Examining data/radare2-cutter-1.10.2/src/widgets/QuickFilterView.h Examining data/radare2-cutter-1.10.2/src/widgets/GraphView.h Examining data/radare2-cutter-1.10.2/src/widgets/HeadersWidget.h Examining data/radare2-cutter-1.10.2/src/widgets/ClassesWidget.cpp Examining data/radare2-cutter-1.10.2/src/widgets/CutterDockWidget.h Examining data/radare2-cutter-1.10.2/src/widgets/OverviewView.h Examining data/radare2-cutter-1.10.2/src/widgets/GraphWidget.h Examining data/radare2-cutter-1.10.2/src/widgets/CutterTreeWidget.h Examining data/radare2-cutter-1.10.2/src/widgets/SegmentsWidget.h Examining data/radare2-cutter-1.10.2/src/widgets/ImportsWidget.cpp Examining data/radare2-cutter-1.10.2/src/widgets/SearchWidget.cpp Examining data/radare2-cutter-1.10.2/src/widgets/CutterDockWidget.cpp Examining data/radare2-cutter-1.10.2/src/widgets/FlagsWidget.h Examining data/radare2-cutter-1.10.2/src/widgets/BacktraceWidget.h Examining data/radare2-cutter-1.10.2/src/widgets/MemoryDockWidget.cpp Examining data/radare2-cutter-1.10.2/src/widgets/Dashboard.h Examining data/radare2-cutter-1.10.2/src/widgets/Omnibar.h Examining data/radare2-cutter-1.10.2/src/widgets/GraphGridLayout.h Examining data/radare2-cutter-1.10.2/src/widgets/SectionsWidget.cpp Examining data/radare2-cutter-1.10.2/src/widgets/ColorPicker.cpp Examining data/radare2-cutter-1.10.2/src/widgets/VisualNavbar.cpp Examining data/radare2-cutter-1.10.2/src/widgets/EntrypointWidget.h Examining data/radare2-cutter-1.10.2/src/widgets/SdbWidget.cpp Examining data/radare2-cutter-1.10.2/src/widgets/HeadersWidget.cpp Examining data/radare2-cutter-1.10.2/src/widgets/StringsWidget.cpp Examining data/radare2-cutter-1.10.2/src/widgets/QuickFilterView.cpp Examining data/radare2-cutter-1.10.2/src/widgets/HexWidget.h Examining data/radare2-cutter-1.10.2/src/widgets/TypesWidget.cpp Examining data/radare2-cutter-1.10.2/src/widgets/DebugActions.h Examining data/radare2-cutter-1.10.2/src/widgets/ColorPicker.h Examining data/radare2-cutter-1.10.2/src/widgets/ExportsWidget.cpp Examining data/radare2-cutter-1.10.2/src/widgets/DisassemblerGraphView.h Examining data/radare2-cutter-1.10.2/src/widgets/ColorThemeListView.h Examining data/radare2-cutter-1.10.2/src/widgets/Omnibar.cpp Examining data/radare2-cutter-1.10.2/src/widgets/RelocsWidget.cpp Examining data/radare2-cutter-1.10.2/src/widgets/BreakpointWidget.cpp Examining data/radare2-cutter-1.10.2/src/widgets/HexWidget.cpp Examining data/radare2-cutter-1.10.2/src/widgets/ListDockWidget.cpp Examining data/radare2-cutter-1.10.2/src/widgets/ConsoleWidget.cpp Examining data/radare2-cutter-1.10.2/src/widgets/VTablesWidget.h Examining data/radare2-cutter-1.10.2/src/widgets/GraphvizLayout.h Examining data/radare2-cutter-1.10.2/src/widgets/FunctionsWidget.cpp Examining data/radare2-cutter-1.10.2/src/widgets/GraphLayout.h Examining data/radare2-cutter-1.10.2/src/widgets/CommentsWidget.h Examining data/radare2-cutter-1.10.2/src/widgets/RegistersWidget.h Examining data/radare2-cutter-1.10.2/src/widgets/MemoryDockWidget.h Examining data/radare2-cutter-1.10.2/src/widgets/ThreadsWidget.h Examining data/radare2-cutter-1.10.2/src/widgets/MemoryMapWidget.h Examining data/radare2-cutter-1.10.2/src/widgets/VTablesWidget.cpp Examining data/radare2-cutter-1.10.2/src/widgets/DecompilerWidget.cpp Examining data/radare2-cutter-1.10.2/src/widgets/GraphView.cpp Examining data/radare2-cutter-1.10.2/src/plugins/sample-cpp/CutterSamplePlugin.h Examining data/radare2-cutter-1.10.2/src/plugins/sample-cpp/CutterSamplePlugin.cpp Examining data/radare2-cutter-1.10.2/src/plugins/CutterPlugin.h Examining data/radare2-cutter-1.10.2/src/plugins/PluginManager.h Examining data/radare2-cutter-1.10.2/src/plugins/PluginManager.cpp Examining data/radare2-cutter-1.10.2/src/common/RunScriptTask.cpp Examining data/radare2-cutter-1.10.2/src/common/AsyncTask.h Examining data/radare2-cutter-1.10.2/src/common/RichTextPainter.cpp Examining data/radare2-cutter-1.10.2/src/common/Highlighter.cpp Examining data/radare2-cutter-1.10.2/src/common/HighDpiPixmap.h Examining data/radare2-cutter-1.10.2/src/common/ColorThemeWorker.cpp Examining data/radare2-cutter-1.10.2/src/common/CrashHandler.cpp Examining data/radare2-cutter-1.10.2/src/common/Colors.cpp Examining data/radare2-cutter-1.10.2/src/common/ColorThemeWorker.h Examining data/radare2-cutter-1.10.2/src/common/BasicInstructionHighlighter.h Examining data/radare2-cutter-1.10.2/src/common/CutterSeekable.cpp Examining data/radare2-cutter-1.10.2/src/common/QtResImporter.cpp Examining data/radare2-cutter-1.10.2/src/common/PythonManager.cpp Examining data/radare2-cutter-1.10.2/src/common/JsonTreeItem.cpp Examining data/radare2-cutter-1.10.2/src/common/CommandTask.h Examining data/radare2-cutter-1.10.2/src/common/StringsTask.h Examining data/radare2-cutter-1.10.2/src/common/R2Task.cpp Examining data/radare2-cutter-1.10.2/src/common/SvgIconEngine.h Examining data/radare2-cutter-1.10.2/src/common/UpdateWorker.h Examining data/radare2-cutter-1.10.2/src/common/CutterSeekable.h Examining data/radare2-cutter-1.10.2/src/common/DirectionalComboBox.cpp Examining data/radare2-cutter-1.10.2/src/common/PythonManager.h Examining data/radare2-cutter-1.10.2/src/common/AnalTask.h Examining data/radare2-cutter-1.10.2/src/common/MdHighlighter.h Examining data/radare2-cutter-1.10.2/src/common/Json.h Examining data/radare2-cutter-1.10.2/src/common/RunScriptTask.h Examining data/radare2-cutter-1.10.2/src/common/ProgressIndicator.cpp Examining data/radare2-cutter-1.10.2/src/common/SyntaxHighlighter.cpp Examining data/radare2-cutter-1.10.2/src/common/HexAsciiHighlighter.cpp Examining data/radare2-cutter-1.10.2/src/common/Highlighter.h Examining data/radare2-cutter-1.10.2/src/common/SvgIconEngine.cpp Examining data/radare2-cutter-1.10.2/src/common/HighDpiPixmap.cpp Examining data/radare2-cutter-1.10.2/src/common/SelectionHighlight.cpp Examining data/radare2-cutter-1.10.2/src/common/RichTextPainter.h Examining data/radare2-cutter-1.10.2/src/common/Configuration.cpp Examining data/radare2-cutter-1.10.2/src/common/SelectionHighlight.h Examining data/radare2-cutter-1.10.2/src/common/BasicInstructionHighlighter.cpp Examining data/radare2-cutter-1.10.2/src/common/AddressableItemModel.cpp Examining data/radare2-cutter-1.10.2/src/common/Decompiler.cpp Examining data/radare2-cutter-1.10.2/src/common/TempConfig.h Examining data/radare2-cutter-1.10.2/src/common/Configuration.h Examining data/radare2-cutter-1.10.2/src/common/AsyncTask.cpp Examining data/radare2-cutter-1.10.2/src/common/CachedFontMetrics.h Examining data/radare2-cutter-1.10.2/src/common/JsonModel.cpp Examining data/radare2-cutter-1.10.2/src/common/JsonModel.h Examining data/radare2-cutter-1.10.2/src/common/FunctionsTask.h Examining data/radare2-cutter-1.10.2/src/common/JsonTreeItem.h Examining data/radare2-cutter-1.10.2/src/common/DirectionalComboBox.h Examining data/radare2-cutter-1.10.2/src/common/Helpers.h Examining data/radare2-cutter-1.10.2/src/common/QtResImporter.h Examining data/radare2-cutter-1.10.2/src/common/Metrics.h Examining data/radare2-cutter-1.10.2/src/common/HexHighlighter.h Examining data/radare2-cutter-1.10.2/src/common/AnalTask.cpp Examining data/radare2-cutter-1.10.2/src/common/Helpers.cpp Examining data/radare2-cutter-1.10.2/src/common/CommandTask.cpp Examining data/radare2-cutter-1.10.2/src/common/PythonAPI.h Examining data/radare2-cutter-1.10.2/src/common/BasicBlockHighlighter.h Examining data/radare2-cutter-1.10.2/src/common/RefreshDeferrer.h Examining data/radare2-cutter-1.10.2/src/common/Decompiler.h Examining data/radare2-cutter-1.10.2/src/common/BugReporting.h Examining data/radare2-cutter-1.10.2/src/common/InitialOptions.h Examining data/radare2-cutter-1.10.2/src/common/AddressableItemModel.h Examining data/radare2-cutter-1.10.2/src/common/RefreshDeferrer.cpp Examining data/radare2-cutter-1.10.2/src/common/PythonAPI.cpp Examining data/radare2-cutter-1.10.2/src/common/CrashHandler.h Examining data/radare2-cutter-1.10.2/src/common/Colors.h Examining data/radare2-cutter-1.10.2/src/common/BugReporting.cpp Examining data/radare2-cutter-1.10.2/src/common/MdHighlighter.cpp Examining data/radare2-cutter-1.10.2/src/common/R2Task.h Examining data/radare2-cutter-1.10.2/src/common/HexHighlighter.cpp Examining data/radare2-cutter-1.10.2/src/common/BasicBlockHighlighter.cpp Examining data/radare2-cutter-1.10.2/src/common/SyntaxHighlighter.h Examining data/radare2-cutter-1.10.2/src/common/HexAsciiHighlighter.h Examining data/radare2-cutter-1.10.2/src/common/TempConfig.cpp Examining data/radare2-cutter-1.10.2/src/common/ProgressIndicator.h Examining data/radare2-cutter-1.10.2/src/common/UpdateWorker.cpp Examining data/radare2-cutter-1.10.2/src/menus/AddressableItemContextMenu.cpp Examining data/radare2-cutter-1.10.2/src/menus/DisassemblyContextMenu.cpp Examining data/radare2-cutter-1.10.2/src/menus/DisassemblyContextMenu.h Examining data/radare2-cutter-1.10.2/src/menus/AddressableItemContextMenu.h FINAL RESULTS: data/radare2-cutter-1.10.2/src/common/Configuration.cpp:238:40: [4] (shell) system: This causes a new program to execute and is difficult to use safely (CWE-78). try using a library call that implements the same functionality if available. return s.value("locale", QLocale().system()).toLocale(); data/radare2-cutter-1.10.2/src/menus/DisassemblyContextMenu.cpp:1044:23: [4] (format) sprintf: Potential format string problem (CWE-134). Make format string constant. stackSizeText.sprintf("%d", fcn->stack); data/radare2-cutter-1.10.2/src/common/ColorThemeWorker.cpp:118:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!fOut.open(QFile::WriteOnly | QFile::Truncate)) { data/radare2-cutter-1.10.2/src/common/ColorThemeWorker.cpp:194:18: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!src.open(QFile::ReadOnly)) { data/radare2-cutter-1.10.2/src/common/ColorThemeWorker.cpp:243:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!file.open(QFile::ReadOnly)) { data/radare2-cutter-1.10.2/src/common/ColorThemeWorker.cpp:308:12: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!f.open(QFile::ReadOnly)) { data/radare2-cutter-1.10.2/src/common/Configuration.cpp:294:11: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). f.open(QFile::ReadOnly | QFile::Text); data/radare2-cutter-1.10.2/src/common/Configuration.cpp:320:11: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). f.open(QFile::ReadOnly | QFile::Text); data/radare2-cutter-1.10.2/src/common/Configuration.cpp:339:11: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). f.open(QFile::ReadOnly | QFile::Text); data/radare2-cutter-1.10.2/src/common/Configuration.cpp:365:11: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). f.open(QFile::ReadOnly | QFile::Text); data/radare2-cutter-1.10.2/src/common/Helpers.cpp:207:10: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). file.open(QIODevice::ReadOnly); data/radare2-cutter-1.10.2/src/common/QtResImporter.cpp:26:16: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). moduleFile.open(QIODevice::ReadOnly); data/radare2-cutter-1.10.2/src/common/SvgIconEngine.cpp:13:10: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). file.open(QFile::ReadOnly); data/radare2-cutter-1.10.2/src/common/UpdateWorker.cpp:57:18: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). downloadFile.open(QIODevice::WriteOnly); data/radare2-cutter-1.10.2/src/core/MainWindow.cpp:1446:8: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). a->open(); data/radare2-cutter-1.10.2/src/core/MainWindow.cpp:1523:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!file.open(QIODevice::WriteOnly | QIODevice::Text)) { data/radare2-cutter-1.10.2/src/dialogs/HexdumpRangeDialog.cpp:67:26: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). void HexdumpRangeDialog::open(ut64 start) data/radare2-cutter-1.10.2/src/dialogs/HexdumpRangeDialog.h:24:13: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). void open(ut64 start); data/radare2-cutter-1.10.2/src/dialogs/NewFileDialog.cpp:182:8: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). a->open(); data/radare2-cutter-1.10.2/src/dialogs/TypesInteractionDialog.cpp:38:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!file.open(QIODevice::ReadOnly)) { data/radare2-cutter-1.10.2/src/dialogs/WelcomeDialog.cpp:91:8: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). a->open(); data/radare2-cutter-1.10.2/src/dialogs/preferences/AppearanceOptionsWidget.cpp:276:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!file.open(QIODevice::ReadOnly)) { data/radare2-cutter-1.10.2/src/widgets/ColorThemeListView.cpp:191:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!file.open(QIODevice::ReadOnly)) { data/radare2-cutter-1.10.2/src/widgets/ConsoleWidget.cpp:444:17: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). stdinFile = open(stdinFifoPath.toStdString().c_str(), O_RDWR | O_ASYNC); data/radare2-cutter-1.10.2/src/widgets/DisassemblerGraphView.cpp:1175:19: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!file.open(QIODevice::WriteOnly | QIODevice::Text)) { data/radare2-cutter-1.10.2/src/widgets/HexWidget.cpp:113:82: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). connect(actionSelectRange, &QAction::triggered, this, [this]() { rangeDialog.open(cursor.address); }); data/radare2-cutter-1.10.2/src/widgets/HexWidget.cpp:1101:5: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(&result, src, sizeof(T)); data/radare2-cutter-1.10.2/src/widgets/HexWidget.cpp:1113:5: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(&result, src, sizeof(T)); data/radare2-cutter-1.10.2/src/widgets/TypesWidget.cpp:270:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if (!file.open(QIODevice::WriteOnly)) { ANALYSIS SUMMARY: Hits = 29 Lines analyzed = 43232 in approximately 0.89 seconds (48489 lines/second) Physical Source Lines of Code (SLOC) = 33892 Hits@level = [0] 5 [1] 0 [2] 27 [3] 0 [4] 2 [5] 0 Hits@level+ = [0+] 34 [1+] 29 [2+] 29 [3+] 2 [4+] 2 [5+] 0 Hits/KSLOC@level+ = [0+] 1.00319 [1+] 0.855659 [2+] 0.855659 [3+] 0.059011 [4+] 0.059011 [5+] 0 Dot directories skipped = 2 (--followdotdir overrides) Minimum risk level = 1 Not every hit is necessarily a security vulnerability. There may be other security vulnerabilities; review your code! See 'Secure Programming HOWTO' (https://dwheeler.com/secure-programs) for more information.