Flawfinder version 2.0.10, (C) 2001-2019 David A. Wheeler. Number of rules (primarily dangerous function names) in C/C++ ruleset: 223 Examining data/subtitlecomposer-0.7.0/src/actions/kcodecactionext.cpp Examining data/subtitlecomposer-0.7.0/src/actions/kcodecactionext.h Examining data/subtitlecomposer-0.7.0/src/actions/krecentfilesactionext.cpp Examining data/subtitlecomposer-0.7.0/src/actions/krecentfilesactionext.h Examining data/subtitlecomposer-0.7.0/src/actions/useraction.cpp Examining data/subtitlecomposer-0.7.0/src/actions/useraction.h Examining data/subtitlecomposer-0.7.0/src/actions/useractionnames.h Examining data/subtitlecomposer-0.7.0/src/application.cpp Examining data/subtitlecomposer-0.7.0/src/application.h Examining data/subtitlecomposer-0.7.0/src/configs/configdialog.cpp Examining data/subtitlecomposer-0.7.0/src/configs/configdialog.h Examining data/subtitlecomposer-0.7.0/src/configs/errorsconfigwidget.cpp Examining data/subtitlecomposer-0.7.0/src/configs/errorsconfigwidget.h Examining data/subtitlecomposer-0.7.0/src/configs/generalconfigwidget.cpp Examining data/subtitlecomposer-0.7.0/src/configs/generalconfigwidget.h Examining data/subtitlecomposer-0.7.0/src/configs/playerconfigwidget.cpp Examining data/subtitlecomposer-0.7.0/src/configs/playerconfigwidget.h Examining data/subtitlecomposer-0.7.0/src/configs/waveformconfigwidget.cpp Examining data/subtitlecomposer-0.7.0/src/configs/waveformconfigwidget.h Examining data/subtitlecomposer-0.7.0/src/core/formatdata.h Examining data/subtitlecomposer-0.7.0/src/core/range.h Examining data/subtitlecomposer-0.7.0/src/core/rangelist.h Examining data/subtitlecomposer-0.7.0/src/core/sstring.cpp Examining data/subtitlecomposer-0.7.0/src/core/sstring.h Examining data/subtitlecomposer-0.7.0/src/core/subtitle.cpp Examining data/subtitlecomposer-0.7.0/src/core/subtitle.h Examining data/subtitlecomposer-0.7.0/src/core/subtitleactions.cpp Examining data/subtitlecomposer-0.7.0/src/core/subtitleactions.h Examining data/subtitlecomposer-0.7.0/src/core/subtitleiterator.cpp Examining data/subtitlecomposer-0.7.0/src/core/subtitleiterator.h Examining data/subtitlecomposer-0.7.0/src/core/subtitleline.cpp Examining data/subtitlecomposer-0.7.0/src/core/subtitleline.h Examining data/subtitlecomposer-0.7.0/src/core/subtitlelineactions.cpp Examining data/subtitlecomposer-0.7.0/src/core/subtitlelineactions.h Examining data/subtitlecomposer-0.7.0/src/core/tests/rangelisttest.cpp Examining data/subtitlecomposer-0.7.0/src/core/tests/rangelisttest.h Examining data/subtitlecomposer-0.7.0/src/core/tests/rangetest.cpp Examining data/subtitlecomposer-0.7.0/src/core/tests/rangetest.h Examining data/subtitlecomposer-0.7.0/src/core/tests/sstringtest.cpp Examining data/subtitlecomposer-0.7.0/src/core/tests/sstringtest.h Examining data/subtitlecomposer-0.7.0/src/core/tests/timetest.cpp Examining data/subtitlecomposer-0.7.0/src/core/tests/timetest.h Examining data/subtitlecomposer-0.7.0/src/core/time.cpp Examining data/subtitlecomposer-0.7.0/src/core/time.h Examining data/subtitlecomposer-0.7.0/src/core/undoaction.cpp Examining data/subtitlecomposer-0.7.0/src/core/undoaction.h Examining data/subtitlecomposer-0.7.0/src/currentlinewidget.cpp Examining data/subtitlecomposer-0.7.0/src/currentlinewidget.h Examining data/subtitlecomposer-0.7.0/src/dialogs/actiondialog.cpp Examining data/subtitlecomposer-0.7.0/src/dialogs/actiondialog.h Examining data/subtitlecomposer-0.7.0/src/dialogs/actionwitherrortargetsdialog.cpp Examining data/subtitlecomposer-0.7.0/src/dialogs/actionwitherrortargetsdialog.h Examining data/subtitlecomposer-0.7.0/src/dialogs/actionwithtargetdialog.cpp Examining data/subtitlecomposer-0.7.0/src/dialogs/actionwithtargetdialog.h Examining data/subtitlecomposer-0.7.0/src/dialogs/adjusttimesdialog.cpp Examining data/subtitlecomposer-0.7.0/src/dialogs/adjusttimesdialog.h Examining data/subtitlecomposer-0.7.0/src/dialogs/autodurationsdialog.cpp Examining data/subtitlecomposer-0.7.0/src/dialogs/autodurationsdialog.h Examining data/subtitlecomposer-0.7.0/src/dialogs/changeframeratedialog.cpp Examining data/subtitlecomposer-0.7.0/src/dialogs/changeframeratedialog.h Examining data/subtitlecomposer-0.7.0/src/dialogs/changetextscasedialog.cpp Examining data/subtitlecomposer-0.7.0/src/dialogs/changetextscasedialog.h Examining data/subtitlecomposer-0.7.0/src/dialogs/checkerrorsdialog.cpp Examining data/subtitlecomposer-0.7.0/src/dialogs/checkerrorsdialog.h Examining data/subtitlecomposer-0.7.0/src/dialogs/clearerrorsdialog.cpp Examining data/subtitlecomposer-0.7.0/src/dialogs/clearerrorsdialog.h Examining data/subtitlecomposer-0.7.0/src/dialogs/durationlimitsdialog.cpp Examining data/subtitlecomposer-0.7.0/src/dialogs/durationlimitsdialog.h Examining data/subtitlecomposer-0.7.0/src/dialogs/fixoverlappingtimesdialog.cpp Examining data/subtitlecomposer-0.7.0/src/dialogs/fixoverlappingtimesdialog.h Examining data/subtitlecomposer-0.7.0/src/dialogs/fixpunctuationdialog.cpp Examining data/subtitlecomposer-0.7.0/src/dialogs/fixpunctuationdialog.h Examining data/subtitlecomposer-0.7.0/src/dialogs/insertlinedialog.cpp Examining data/subtitlecomposer-0.7.0/src/dialogs/insertlinedialog.h Examining data/subtitlecomposer-0.7.0/src/dialogs/intinputdialog.cpp Examining data/subtitlecomposer-0.7.0/src/dialogs/intinputdialog.h Examining data/subtitlecomposer-0.7.0/src/dialogs/joinsubtitlesdialog.cpp Examining data/subtitlecomposer-0.7.0/src/dialogs/joinsubtitlesdialog.h Examining data/subtitlecomposer-0.7.0/src/dialogs/opensubtitledialog.cpp Examining data/subtitlecomposer-0.7.0/src/dialogs/opensubtitledialog.h Examining data/subtitlecomposer-0.7.0/src/dialogs/progressdialog.cpp Examining data/subtitlecomposer-0.7.0/src/dialogs/progressdialog.h Examining data/subtitlecomposer-0.7.0/src/dialogs/removelinesdialog.cpp Examining data/subtitlecomposer-0.7.0/src/dialogs/removelinesdialog.h Examining data/subtitlecomposer-0.7.0/src/dialogs/savesubtitledialog.cpp Examining data/subtitlecomposer-0.7.0/src/dialogs/savesubtitledialog.h Examining data/subtitlecomposer-0.7.0/src/dialogs/selectablesubtitledialog.cpp Examining data/subtitlecomposer-0.7.0/src/dialogs/selectablesubtitledialog.h Examining data/subtitlecomposer-0.7.0/src/dialogs/shifttimesdialog.cpp Examining data/subtitlecomposer-0.7.0/src/dialogs/shifttimesdialog.h Examining data/subtitlecomposer-0.7.0/src/dialogs/smarttextsadjustdialog.cpp Examining data/subtitlecomposer-0.7.0/src/dialogs/smarttextsadjustdialog.h Examining data/subtitlecomposer-0.7.0/src/dialogs/splitsubtitledialog.cpp Examining data/subtitlecomposer-0.7.0/src/dialogs/splitsubtitledialog.h Examining data/subtitlecomposer-0.7.0/src/dialogs/subtitlecolordialog.cpp Examining data/subtitlecomposer-0.7.0/src/dialogs/subtitlecolordialog.h Examining data/subtitlecomposer-0.7.0/src/dialogs/syncsubtitlesdialog.cpp Examining data/subtitlecomposer-0.7.0/src/dialogs/syncsubtitlesdialog.h Examining data/subtitlecomposer-0.7.0/src/dialogs/textinputdialog.cpp Examining data/subtitlecomposer-0.7.0/src/dialogs/textinputdialog.h Examining data/subtitlecomposer-0.7.0/src/dialogs/translatedialog.cpp Examining data/subtitlecomposer-0.7.0/src/dialogs/translatedialog.h Examining data/subtitlecomposer-0.7.0/src/formats/format.h Examining data/subtitlecomposer-0.7.0/src/formats/formatmanager.cpp Examining data/subtitlecomposer-0.7.0/src/formats/formatmanager.h Examining data/subtitlecomposer-0.7.0/src/formats/inputformat.h Examining data/subtitlecomposer-0.7.0/src/formats/microdvd/microdvdinputformat.h Examining data/subtitlecomposer-0.7.0/src/formats/microdvd/microdvdoutputformat.h Examining data/subtitlecomposer-0.7.0/src/formats/mplayer/mplayerinputformat.h Examining data/subtitlecomposer-0.7.0/src/formats/mplayer/mplayeroutputformat.h Examining data/subtitlecomposer-0.7.0/src/formats/mplayer2/mplayer2inputformat.h Examining data/subtitlecomposer-0.7.0/src/formats/mplayer2/mplayer2outputformat.h Examining data/subtitlecomposer-0.7.0/src/formats/outputformat.h Examining data/subtitlecomposer-0.7.0/src/formats/subrip/subripinputformat.h Examining data/subtitlecomposer-0.7.0/src/formats/subrip/subripoutputformat.h Examining data/subtitlecomposer-0.7.0/src/formats/substationalpha/substationalphainputformat.h Examining data/subtitlecomposer-0.7.0/src/formats/substationalpha/substationalphaoutputformat.h Examining data/subtitlecomposer-0.7.0/src/formats/subviewer1/subviewer1inputformat.h Examining data/subtitlecomposer-0.7.0/src/formats/subviewer1/subviewer1outputformat.h Examining data/subtitlecomposer-0.7.0/src/formats/subviewer2/subviewer2inputformat.h Examining data/subtitlecomposer-0.7.0/src/formats/subviewer2/subviewer2outputformat.h Examining data/subtitlecomposer-0.7.0/src/formats/textdemux/textdemux.cpp Examining data/subtitlecomposer-0.7.0/src/formats/textdemux/textdemux.h Examining data/subtitlecomposer-0.7.0/src/formats/tmplayer/tmplayerinputformat.h Examining data/subtitlecomposer-0.7.0/src/formats/tmplayer/tmplayeroutputformat.h Examining data/subtitlecomposer-0.7.0/src/formats/vobsub/vobsubinputformat.h Examining data/subtitlecomposer-0.7.0/src/formats/vobsub/vobsubinputinitdialog.cpp Examining data/subtitlecomposer-0.7.0/src/formats/vobsub/vobsubinputinitdialog.h Examining data/subtitlecomposer-0.7.0/src/formats/vobsub/vobsubinputprocessdialog.cpp Examining data/subtitlecomposer-0.7.0/src/formats/vobsub/vobsubinputprocessdialog.h Examining data/subtitlecomposer-0.7.0/src/formats/youtubecaptions/youtubecaptionsinputformat.h Examining data/subtitlecomposer-0.7.0/src/formats/youtubecaptions/youtubecaptionsoutputformat.h Examining data/subtitlecomposer-0.7.0/src/helpers/commondefs.cpp Examining data/subtitlecomposer-0.7.0/src/helpers/commondefs.h Examining data/subtitlecomposer-0.7.0/src/helpers/fileloadhelper.cpp Examining data/subtitlecomposer-0.7.0/src/helpers/fileloadhelper.h Examining data/subtitlecomposer-0.7.0/src/helpers/filesavehelper.cpp Examining data/subtitlecomposer-0.7.0/src/helpers/filesavehelper.h Examining data/subtitlecomposer-0.7.0/src/helpers/filetrasher.cpp Examining data/subtitlecomposer-0.7.0/src/helpers/filetrasher.h Examining data/subtitlecomposer-0.7.0/src/helpers/languagecode.cpp Examining data/subtitlecomposer-0.7.0/src/helpers/languagecode.h Examining data/subtitlecomposer-0.7.0/src/helpers/objectref.h Examining data/subtitlecomposer-0.7.0/src/lineswidget.cpp Examining data/subtitlecomposer-0.7.0/src/lineswidget.h Examining data/subtitlecomposer-0.7.0/src/main.cpp Examining data/subtitlecomposer-0.7.0/src/main_tests.h Examining data/subtitlecomposer-0.7.0/src/mainwindow.cpp Examining data/subtitlecomposer-0.7.0/src/mainwindow.h Examining data/subtitlecomposer-0.7.0/src/playerwidget.cpp Examining data/subtitlecomposer-0.7.0/src/playerwidget.h Examining data/subtitlecomposer-0.7.0/src/profiler.h Examining data/subtitlecomposer-0.7.0/src/scconfigdummy.cpp Examining data/subtitlecomposer-0.7.0/src/scconfigdummy.h Examining data/subtitlecomposer-0.7.0/src/scripting/scripting_list.cpp Examining data/subtitlecomposer-0.7.0/src/scripting/scripting_list.h Examining data/subtitlecomposer-0.7.0/src/scripting/scripting_range.cpp Examining data/subtitlecomposer-0.7.0/src/scripting/scripting_range.h Examining data/subtitlecomposer-0.7.0/src/scripting/scripting_rangelist.cpp Examining data/subtitlecomposer-0.7.0/src/scripting/scripting_rangelist.h Examining data/subtitlecomposer-0.7.0/src/scripting/scripting_rangesmodule.cpp Examining data/subtitlecomposer-0.7.0/src/scripting/scripting_rangesmodule.h Examining data/subtitlecomposer-0.7.0/src/scripting/scripting_sstring.cpp Examining data/subtitlecomposer-0.7.0/src/scripting/scripting_sstring.h Examining data/subtitlecomposer-0.7.0/src/scripting/scripting_stringsmodule.cpp Examining data/subtitlecomposer-0.7.0/src/scripting/scripting_stringsmodule.h Examining data/subtitlecomposer-0.7.0/src/scripting/scripting_subtitle.cpp Examining data/subtitlecomposer-0.7.0/src/scripting/scripting_subtitle.h Examining data/subtitlecomposer-0.7.0/src/scripting/scripting_subtitleline.cpp Examining data/subtitlecomposer-0.7.0/src/scripting/scripting_subtitleline.h Examining data/subtitlecomposer-0.7.0/src/scripting/scripting_subtitlelinemodule.cpp Examining data/subtitlecomposer-0.7.0/src/scripting/scripting_subtitlelinemodule.h Examining data/subtitlecomposer-0.7.0/src/scripting/scripting_subtitlemodule.cpp Examining data/subtitlecomposer-0.7.0/src/scripting/scripting_subtitlemodule.h Examining data/subtitlecomposer-0.7.0/src/scripting/scriptsmanager.cpp Examining data/subtitlecomposer-0.7.0/src/scripting/scriptsmanager.h Examining data/subtitlecomposer-0.7.0/src/speechplugins/pocketsphinx/pocketsphinxconfigwidget.cpp Examining data/subtitlecomposer-0.7.0/src/speechplugins/pocketsphinx/pocketsphinxconfigwidget.h Examining data/subtitlecomposer-0.7.0/src/speechplugins/pocketsphinx/pocketsphinxplugin.cpp Examining data/subtitlecomposer-0.7.0/src/speechplugins/pocketsphinx/pocketsphinxplugin.h Examining data/subtitlecomposer-0.7.0/src/speechprocessor/speechplugin.cpp Examining data/subtitlecomposer-0.7.0/src/speechprocessor/speechplugin.h Examining data/subtitlecomposer-0.7.0/src/speechprocessor/speechprocessor.cpp Examining data/subtitlecomposer-0.7.0/src/speechprocessor/speechprocessor.h Examining data/subtitlecomposer-0.7.0/src/streamprocessor/streamprocessor.cpp Examining data/subtitlecomposer-0.7.0/src/streamprocessor/streamprocessor.h Examining data/subtitlecomposer-0.7.0/src/utils/errorfinder.cpp Examining data/subtitlecomposer-0.7.0/src/utils/errorfinder.h Examining data/subtitlecomposer-0.7.0/src/utils/errortracker.cpp Examining data/subtitlecomposer-0.7.0/src/utils/errortracker.h Examining data/subtitlecomposer-0.7.0/src/utils/finder.cpp Examining data/subtitlecomposer-0.7.0/src/utils/finder.h Examining data/subtitlecomposer-0.7.0/src/utils/language.cpp Examining data/subtitlecomposer-0.7.0/src/utils/language.h Examining data/subtitlecomposer-0.7.0/src/utils/replacer.cpp Examining data/subtitlecomposer-0.7.0/src/utils/replacer.h Examining data/subtitlecomposer-0.7.0/src/utils/speller.cpp Examining data/subtitlecomposer-0.7.0/src/utils/speller.h Examining data/subtitlecomposer-0.7.0/src/utils/translator.cpp Examining data/subtitlecomposer-0.7.0/src/utils/translator.h Examining data/subtitlecomposer-0.7.0/src/videoplayer/playerbackend.cpp Examining data/subtitlecomposer-0.7.0/src/videoplayer/playerbackend.h Examining data/subtitlecomposer-0.7.0/src/videoplayer/videoplayer.cpp Examining data/subtitlecomposer-0.7.0/src/videoplayer/videoplayer.h Examining data/subtitlecomposer-0.7.0/src/videoplayer/videowidget.cpp Examining data/subtitlecomposer-0.7.0/src/videoplayer/videowidget.h Examining data/subtitlecomposer-0.7.0/src/videoplayer/waveformat.h Examining data/subtitlecomposer-0.7.0/src/videoplayerplugins/gstreamer/gstreamer.cpp Examining data/subtitlecomposer-0.7.0/src/videoplayerplugins/gstreamer/gstreamer.h Examining data/subtitlecomposer-0.7.0/src/videoplayerplugins/gstreamer/gstreamerconfigwidget.cpp Examining data/subtitlecomposer-0.7.0/src/videoplayerplugins/gstreamer/gstreamerconfigwidget.h Examining data/subtitlecomposer-0.7.0/src/videoplayerplugins/gstreamer/gstreamerplayerbackend.cpp Examining data/subtitlecomposer-0.7.0/src/videoplayerplugins/gstreamer/gstreamerplayerbackend.h Examining data/subtitlecomposer-0.7.0/src/videoplayerplugins/mplayer/mediadata.h Examining data/subtitlecomposer-0.7.0/src/videoplayerplugins/mplayer/mplayerconfigwidget.cpp Examining data/subtitlecomposer-0.7.0/src/videoplayerplugins/mplayer/mplayerconfigwidget.h Examining data/subtitlecomposer-0.7.0/src/videoplayerplugins/mplayer/mplayerplayerbackend.cpp Examining data/subtitlecomposer-0.7.0/src/videoplayerplugins/mplayer/mplayerplayerbackend.h Examining data/subtitlecomposer-0.7.0/src/videoplayerplugins/mplayer/mplayerplayerprocess.cpp Examining data/subtitlecomposer-0.7.0/src/videoplayerplugins/mplayer/mplayerplayerprocess.h Examining data/subtitlecomposer-0.7.0/src/videoplayerplugins/mpv/mpvbackend.cpp Examining data/subtitlecomposer-0.7.0/src/videoplayerplugins/mpv/mpvbackend.h Examining data/subtitlecomposer-0.7.0/src/videoplayerplugins/mpv/mpvconfigwidget.cpp Examining data/subtitlecomposer-0.7.0/src/videoplayerplugins/mpv/mpvconfigwidget.h Examining data/subtitlecomposer-0.7.0/src/videoplayerplugins/phonon/phononplayerbackend.cpp Examining data/subtitlecomposer-0.7.0/src/videoplayerplugins/phonon/phononplayerbackend.h Examining data/subtitlecomposer-0.7.0/src/videoplayerplugins/xine/xineconfigwidget.cpp Examining data/subtitlecomposer-0.7.0/src/videoplayerplugins/xine/xineconfigwidget.h Examining data/subtitlecomposer-0.7.0/src/videoplayerplugins/xine/xineplayerbackend.cpp Examining data/subtitlecomposer-0.7.0/src/videoplayerplugins/xine/xineplayerbackend.h Examining data/subtitlecomposer-0.7.0/src/videoplayerplugins/xine/xinevideolayerwidget.cpp Examining data/subtitlecomposer-0.7.0/src/videoplayerplugins/xine/xinevideolayerwidget.h Examining data/subtitlecomposer-0.7.0/src/waveformwidget.cpp Examining data/subtitlecomposer-0.7.0/src/waveformwidget.h Examining data/subtitlecomposer-0.7.0/src/widgets/attachablewidget.cpp Examining data/subtitlecomposer-0.7.0/src/widgets/attachablewidget.h Examining data/subtitlecomposer-0.7.0/src/widgets/layeredwidget.cpp Examining data/subtitlecomposer-0.7.0/src/widgets/layeredwidget.h Examining data/subtitlecomposer-0.7.0/src/widgets/pointingslider.cpp Examining data/subtitlecomposer-0.7.0/src/widgets/pointingslider.h Examining data/subtitlecomposer-0.7.0/src/widgets/simplerichtextedit.cpp Examining data/subtitlecomposer-0.7.0/src/widgets/simplerichtextedit.h Examining data/subtitlecomposer-0.7.0/src/widgets/textoverlaywidget.cpp Examining data/subtitlecomposer-0.7.0/src/widgets/textoverlaywidget.h Examining data/subtitlecomposer-0.7.0/src/widgets/timeedit.cpp Examining data/subtitlecomposer-0.7.0/src/widgets/timeedit.h Examining data/subtitlecomposer-0.7.0/src/widgets/timevalidator.cpp Examining data/subtitlecomposer-0.7.0/src/widgets/timevalidator.h Examining data/subtitlecomposer-0.7.0/src/widgets/treeview.cpp Examining data/subtitlecomposer-0.7.0/src/widgets/treeview.h FINAL RESULTS: data/subtitlecomposer-0.7.0/src/core/rangelist.h:380:24: [4] (format) sprintf: Potential format string problem (CWE-134). Make format string constant. ranges += QString().sprintf("[%d,%d]", m_ranges.at(index).m_start, m_ranges.at(index).m_end); data/subtitlecomposer-0.7.0/src/core/time.cpp:73:18: [4] (format) sprintf: Potential format string problem (CWE-134). Make format string constant. return builder.sprintf("%02d:%02d:%02d.%03d", hours, minutes, seconds, msec % 1000); data/subtitlecomposer-0.7.0/src/core/time.cpp:75:17: [4] (format) sprintf: Potential format string problem (CWE-134). Make format string constant. return builder.sprintf("%02d:%02d:%02d", hours, minutes, seconds); data/subtitlecomposer-0.7.0/src/formats/subrip/subripoutputformat.h:42:25: [4] (format) sprintf: Potential format string problem (CWE-134). Make format string constant. ret += m_timeBuilder.sprintf("%d\n%02d:%02d:%02d,%03d --> %02d:%02d:%02d,%03d\n", it.index() + 1, showTime.hours(), showTime.minutes(), showTime.seconds(), showTime.mseconds(), hideTime.hours(), hideTime.minutes(), hideTime.seconds(), hideTime.mseconds()); data/subtitlecomposer-0.7.0/src/formats/substationalpha/substationalphaoutputformat.h:118:16: [4] (format) sprintf: Potential format string problem (CWE-134). Make format string constant. showTimeArg.sprintf("%01d:%02d:%02d.%02d", data/subtitlecomposer-0.7.0/src/formats/substationalpha/substationalphaoutputformat.h:125:16: [4] (format) sprintf: Potential format string problem (CWE-134). Make format string constant. hideTimeArg.sprintf("%01d:%02d:%02d.%02d", data/subtitlecomposer-0.7.0/src/formats/subviewer1/subviewer1outputformat.h:41:21: [4] (format) sprintf: Potential format string problem (CWE-134). Make format string constant. ret += m_builder.sprintf("[%02d:%02d:%02d]\n", showTime.hours(), showTime.minutes(), showTime.seconds()); data/subtitlecomposer-0.7.0/src/formats/subviewer1/subviewer1outputformat.h:47:21: [4] (format) sprintf: Potential format string problem (CWE-134). Make format string constant. ret += m_builder.sprintf("\n[%02d:%02d:%02d]\n\n", hideTime.hours(), hideTime.minutes(), hideTime.seconds()); data/subtitlecomposer-0.7.0/src/formats/subviewer2/subviewer2outputformat.h:42:21: [4] (format) sprintf: Potential format string problem (CWE-134). Make format string constant. ret += m_builder.sprintf("%02d:%02d:%02d.%02d,%02d:%02d:%02d.%02d\n", showTime.hours(), showTime.minutes(), showTime.seconds(), (showTime.mseconds() + 5) / 10, hideTime.hours(), hideTime.minutes(), hideTime.seconds(), (hideTime.mseconds() + 5) / 10); data/subtitlecomposer-0.7.0/src/formats/tmplayer/tmplayeroutputformat.h:42:19: [4] (format) sprintf: Potential format string problem (CWE-134). Make format string constant. ret += builder.sprintf(m_timeFormat, showTime.hours(), showTime.minutes(), showTime.seconds()); data/subtitlecomposer-0.7.0/src/formats/tmplayer/tmplayeroutputformat.h:51:19: [4] (format) sprintf: Potential format string problem (CWE-134). Make format string constant. ret += builder.sprintf(m_timeFormat, hideTime.hours(), hideTime.minutes(), hideTime.seconds()); data/subtitlecomposer-0.7.0/src/formats/youtubecaptions/youtubecaptionsoutputformat.h:42:25: [4] (format) sprintf: Potential format string problem (CWE-134). Make format string constant. ret += m_timeBuilder.sprintf("%d\n%02d:%02d:%02d,%03d,%02d:%02d:%02d,%03d\n", data/subtitlecomposer-0.7.0/src/application.cpp:455:79: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). actionCollection->setDefaultShortcuts(openSubtitleAction, KStandardShortcut::open()); data/subtitlecomposer-0.7.0/src/core/sstring.cpp:42:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(data, &value, size); data/subtitlecomposer-0.7.0/src/core/sstring.cpp:70:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(m_styleFlags, sstring.m_styleFlags, length() * sizeof(*m_styleFlags)); data/subtitlecomposer-0.7.0/src/core/sstring.cpp:71:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(m_styleColors, sstring.m_styleColors, length() * sizeof(*m_styleColors)); data/subtitlecomposer-0.7.0/src/core/sstring.cpp:85:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(m_styleFlags, sstring.m_styleFlags, length() * sizeof(*m_styleFlags)); data/subtitlecomposer-0.7.0/src/core/sstring.cpp:86:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(m_styleColors, sstring.m_styleColors, length() * sizeof(*m_styleColors)); data/subtitlecomposer-0.7.0/src/core/sstring.cpp:417:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(m_styleFlags, oldStyleFlags, index * sizeof(*m_styleFlags)); data/subtitlecomposer-0.7.0/src/core/sstring.cpp:419:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(m_styleFlags + index + 1, oldStyleFlags + index, (length() - index - 1) * sizeof(*m_styleFlags)); data/subtitlecomposer-0.7.0/src/core/sstring.cpp:421:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(m_styleColors, oldStyleColors, index * sizeof(*m_styleColors)); data/subtitlecomposer-0.7.0/src/core/sstring.cpp:423:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(m_styleColors + index + 1, oldStyleColors + index, (length() - index - 1) * sizeof(*m_styleColors)); data/subtitlecomposer-0.7.0/src/core/sstring.cpp:458:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(m_styleFlags, oldStyleFlags, index * sizeof(*m_styleFlags)); data/subtitlecomposer-0.7.0/src/core/sstring.cpp:460:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(m_styleFlags + index + addedLength, oldStyleFlags + index, (length() - index - addedLength) * sizeof(*m_styleFlags)); data/subtitlecomposer-0.7.0/src/core/sstring.cpp:462:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(m_styleColors, oldStyleColors, index * sizeof(*m_styleColors)); data/subtitlecomposer-0.7.0/src/core/sstring.cpp:464:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(m_styleColors + index + addedLength, oldStyleColors + index, (length() - index - addedLength) * sizeof(*m_styleColors)); data/subtitlecomposer-0.7.0/src/core/sstring.cpp:487:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(m_styleFlags, oldStyleFlags, index * sizeof(*m_styleFlags)); data/subtitlecomposer-0.7.0/src/core/sstring.cpp:488:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(m_styleFlags + index, str.m_styleFlags, addedLength * sizeof(*m_styleFlags)); data/subtitlecomposer-0.7.0/src/core/sstring.cpp:489:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(m_styleFlags + index + addedLength, oldStyleFlags + index, (length() - index - addedLength) * sizeof(*m_styleFlags)); data/subtitlecomposer-0.7.0/src/core/sstring.cpp:491:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(m_styleColors, oldStyleColors, index * sizeof(*m_styleColors)); data/subtitlecomposer-0.7.0/src/core/sstring.cpp:492:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(m_styleColors + index, str.m_styleColors, addedLength * sizeof(*m_styleColors)); data/subtitlecomposer-0.7.0/src/core/sstring.cpp:493:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(m_styleColors + index + addedLength, oldStyleColors + index, (length() - index - addedLength) * sizeof(*m_styleColors)); data/subtitlecomposer-0.7.0/src/core/sstring.cpp:538:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(m_styleFlags, oldStyleFlags, index * sizeof(*m_styleFlags)); data/subtitlecomposer-0.7.0/src/core/sstring.cpp:540:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(m_styleFlags + index + replacement.length(), oldStyleFlags + index + len, (length() - index - replacement.length()) * sizeof(*m_styleFlags)); data/subtitlecomposer-0.7.0/src/core/sstring.cpp:542:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(m_styleColors, oldStyleColors, index * sizeof(*m_styleColors)); data/subtitlecomposer-0.7.0/src/core/sstring.cpp:544:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(m_styleColors + index + replacement.length(), oldStyleColors + index + len, (length() - index - replacement.length()) * sizeof(*m_styleColors)); data/subtitlecomposer-0.7.0/src/core/sstring.cpp:576:2: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(m_styleFlags, oldStyleFlags, index * sizeof(*m_styleFlags)); data/subtitlecomposer-0.7.0/src/core/sstring.cpp:577:2: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(m_styleFlags + index, replacement.m_styleFlags, replacement.length() * sizeof(*m_styleFlags)); data/subtitlecomposer-0.7.0/src/core/sstring.cpp:578:2: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(m_styleFlags + index + replacement.length(), oldStyleFlags + index + len, (length() - index - replacement.length()) * sizeof(*m_styleFlags)); data/subtitlecomposer-0.7.0/src/core/sstring.cpp:580:2: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(m_styleColors, oldStyleColors, index * sizeof(*m_styleColors)); data/subtitlecomposer-0.7.0/src/core/sstring.cpp:581:2: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(m_styleColors + index, replacement.m_styleColors, replacement.length() * sizeof(*m_styleColors)); data/subtitlecomposer-0.7.0/src/core/sstring.cpp:582:2: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(m_styleColors + index + replacement.length(), oldStyleColors + index + len, (length() - index - replacement.length()) * sizeof(*m_styleColors)); data/subtitlecomposer-0.7.0/src/core/sstring.cpp:632:4: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(m_styleFlags + newOffset, oldStyleFlags + oldOffset, unchangedLength * sizeof(*m_styleFlags)); data/subtitlecomposer-0.7.0/src/core/sstring.cpp:633:4: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(m_styleColors + newOffset, oldStyleColors + oldOffset, unchangedLength * sizeof(*m_styleColors)); data/subtitlecomposer-0.7.0/src/core/sstring.cpp:643:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(m_styleFlags + newOffset, oldStyleFlags + oldOffset, (oldLength - oldOffset) * sizeof(*m_styleFlags)); data/subtitlecomposer-0.7.0/src/core/sstring.cpp:644:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(m_styleColors + newOffset, oldStyleColors + oldOffset, (oldLength - oldOffset) * sizeof(*m_styleColors)); data/subtitlecomposer-0.7.0/src/core/sstring.cpp:691:4: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(m_styleFlags + newOffset, oldStyleFlags + oldOffset, unchangedLength * sizeof(*m_styleFlags)); data/subtitlecomposer-0.7.0/src/core/sstring.cpp:692:4: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(m_styleColors + newOffset, oldStyleColors + oldOffset, unchangedLength * sizeof(*m_styleColors)); data/subtitlecomposer-0.7.0/src/core/sstring.cpp:696:4: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(m_styleFlags + newOffset, after.m_styleFlags, afterLength * sizeof(*m_styleFlags)); data/subtitlecomposer-0.7.0/src/core/sstring.cpp:697:4: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(m_styleColors + newOffset, after.m_styleColors, afterLength * sizeof(*m_styleColors)); data/subtitlecomposer-0.7.0/src/core/sstring.cpp:702:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(m_styleFlags + newOffset, oldStyleFlags + oldOffset, oldLength - oldOffset * sizeof(*m_styleFlags)); data/subtitlecomposer-0.7.0/src/core/sstring.cpp:703:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(m_styleColors + newOffset, oldStyleColors + oldOffset, (oldLength - oldOffset) * sizeof(*m_styleColors)); data/subtitlecomposer-0.7.0/src/core/sstring.cpp:756:4: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(m_styleFlags + newOffset, oldStyleFlags + oldOffset, unchangedLength * sizeof(*m_styleFlags)); data/subtitlecomposer-0.7.0/src/core/sstring.cpp:757:4: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(m_styleColors + newOffset, oldStyleColors + oldOffset, unchangedLength * sizeof(*m_styleColors)); data/subtitlecomposer-0.7.0/src/core/sstring.cpp:767:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(m_styleFlags + newOffset, oldStyleFlags + oldOffset, oldLength - oldOffset * sizeof(*m_styleFlags)); data/subtitlecomposer-0.7.0/src/core/sstring.cpp:768:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(m_styleColors + newOffset, oldStyleColors + oldOffset, (oldLength - oldOffset) * sizeof(*m_styleColors)); data/subtitlecomposer-0.7.0/src/core/sstring.cpp:808:4: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(m_styleFlags + newOffset, oldStyleFlags + oldOffset, unchangedLength * sizeof(*m_styleFlags)); data/subtitlecomposer-0.7.0/src/core/sstring.cpp:809:4: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(m_styleColors + newOffset, oldStyleColors + oldOffset, unchangedLength * sizeof(*m_styleColors)); data/subtitlecomposer-0.7.0/src/core/sstring.cpp:813:4: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(m_styleFlags + newOffset, after.m_styleFlags, afterLength * sizeof(*m_styleFlags)); data/subtitlecomposer-0.7.0/src/core/sstring.cpp:814:4: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(m_styleColors + newOffset, after.m_styleColors, afterLength * sizeof(*m_styleColors)); data/subtitlecomposer-0.7.0/src/core/sstring.cpp:819:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(m_styleFlags + newOffset, oldStyleFlags + oldOffset, oldLength - oldOffset * sizeof(*m_styleFlags)); data/subtitlecomposer-0.7.0/src/core/sstring.cpp:820:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(m_styleColors + newOffset, oldStyleColors + oldOffset, (oldLength - oldOffset) * sizeof(*m_styleColors)); data/subtitlecomposer-0.7.0/src/core/sstring.cpp:899:4: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(m_styleFlags + newOffset, oldStyleFlags + oldOffset, unchangedLength * sizeof(*m_styleFlags)); data/subtitlecomposer-0.7.0/src/core/sstring.cpp:900:4: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(m_styleColors + newOffset, oldStyleColors + oldOffset, unchangedLength * sizeof(*m_styleColors)); data/subtitlecomposer-0.7.0/src/core/sstring.cpp:910:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(m_styleFlags + newOffset, oldStyleFlags + oldOffset, oldLength - oldOffset * sizeof(*m_styleFlags)); data/subtitlecomposer-0.7.0/src/core/sstring.cpp:911:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(m_styleColors + newOffset, oldStyleColors + oldOffset, (oldLength - oldOffset) * sizeof(*m_styleColors)); data/subtitlecomposer-0.7.0/src/core/sstring.cpp:1079:4: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(newData + newOff, copy.midRef(off, len).unicode(), len * sizeof(QChar)); data/subtitlecomposer-0.7.0/src/core/sstring.cpp:1080:4: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(m_styleFlags + newOff, oldStyleFlags + off, len * sizeof(*m_styleFlags)); data/subtitlecomposer-0.7.0/src/core/sstring.cpp:1081:4: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(m_styleColors + newOff, oldStyleColors + off, len * sizeof(*m_styleColors)); data/subtitlecomposer-0.7.0/src/core/sstring.cpp:1091:5: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(newData + newOff, replacement.midRef(repOff, repLen).unicode(), repLen * sizeof(QChar)); data/subtitlecomposer-0.7.0/src/core/sstring.cpp:1093:6: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(m_styleFlags + newOff, replacement.m_styleFlags + repOff, repLen * sizeof(*m_styleFlags)); data/subtitlecomposer-0.7.0/src/core/sstring.cpp:1094:6: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(m_styleColors + newOff, replacement.m_styleColors + repOff, repLen * sizeof(*m_styleColors)); data/subtitlecomposer-0.7.0/src/core/sstring.cpp:1180:2: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(ret.m_styleFlags, m_styleFlags, len * sizeof(*m_styleFlags)); data/subtitlecomposer-0.7.0/src/core/sstring.cpp:1181:2: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(ret.m_styleColors, m_styleColors, len * sizeof(*m_styleColors)); data/subtitlecomposer-0.7.0/src/core/sstring.cpp:1192:2: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(ret.m_styleFlags, m_styleFlags + length() - len, len * sizeof(*m_styleFlags)); data/subtitlecomposer-0.7.0/src/core/sstring.cpp:1193:2: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(ret.m_styleColors, m_styleColors + length() - len, len * sizeof(*m_styleColors)); data/subtitlecomposer-0.7.0/src/core/sstring.cpp:1213:2: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(ret.m_styleFlags, m_styleFlags + index, len * sizeof(*m_styleFlags)); data/subtitlecomposer-0.7.0/src/core/sstring.cpp:1214:2: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(ret.m_styleColors, m_styleColors + index, len * sizeof(*m_styleColors)); data/subtitlecomposer-0.7.0/src/formats/formatmanager.cpp:171:21: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if(!fileLoadHelper.open()) data/subtitlecomposer-0.7.0/src/formats/formatmanager.cpp:294:21: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if(!fileSaveHelper.open()) data/subtitlecomposer-0.7.0/src/formats/textdemux/textdemux.cpp:74:24: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if(m_streamProcessor->open(filename) && m_streamProcessor->initText(textStreamIndex)) data/subtitlecomposer-0.7.0/src/formats/vobsub/vobsubinputformat.h:45:12: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if(!proc.open(filename)) data/subtitlecomposer-0.7.0/src/formats/vobsub/vobsubinputprocessdialog.cpp:410:11: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if(!file.open(QIODevice::ReadOnly)) data/subtitlecomposer-0.7.0/src/formats/vobsub/vobsubinputprocessdialog.cpp:469:11: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if(!file.open(QIODevice::WriteOnly)) data/subtitlecomposer-0.7.0/src/helpers/fileloadhelper.cpp:54:17: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). FileLoadHelper::open() data/subtitlecomposer-0.7.0/src/helpers/fileloadhelper.cpp:65:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if(!m_file->open(QIODevice::ReadOnly)) { data/subtitlecomposer-0.7.0/src/helpers/fileloadhelper.h:43:7: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). bool open(); data/subtitlecomposer-0.7.0/src/helpers/filesavehelper.cpp:62:17: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). FileSaveHelper::open() data/subtitlecomposer-0.7.0/src/helpers/filesavehelper.cpp:72:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if(!m_file->open(QIODevice::WriteOnly | QIODevice::Truncate)) { data/subtitlecomposer-0.7.0/src/helpers/filesavehelper.cpp:80:46: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if(!static_cast<QTemporaryFile *>(m_file)->open()) { data/subtitlecomposer-0.7.0/src/helpers/filesavehelper.h:38:7: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). bool open(); data/subtitlecomposer-0.7.0/src/scripting/scriptsmanager.cpp:181:17: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if(!scriptFile.open(QIODevice::WriteOnly | QIODevice::Text)) { data/subtitlecomposer-0.7.0/src/scripting/scriptsmanager.cpp:259:21: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if(!fileLoadHelper.open()) { data/subtitlecomposer-0.7.0/src/scripting/scriptsmanager.cpp:265:11: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if(!dest.open(QIODevice::WriteOnly | QIODevice::Truncate) data/subtitlecomposer-0.7.0/src/speechprocessor/speechprocessor.cpp:179:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if(m_stream->open(mediaFile) && m_stream->initAudio(audioStream, waveFormat)) data/subtitlecomposer-0.7.0/src/streamprocessor/streamprocessor.cpp:58:18: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). StreamProcessor::open(const QString &filename) data/subtitlecomposer-0.7.0/src/streamprocessor/streamprocessor.cpp:76:2: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char errorText[1024]; data/subtitlecomposer-0.7.0/src/streamprocessor/streamprocessor.cpp:202:3: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char errorText[1024]; data/subtitlecomposer-0.7.0/src/streamprocessor/streamprocessor.cpp:307:4: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char errorText[1024]; data/subtitlecomposer-0.7.0/src/streamprocessor/streamprocessor.cpp:371:2: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char errorText[1024]; data/subtitlecomposer-0.7.0/src/streamprocessor/streamprocessor.cpp:498:2: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char errorText[1024]; data/subtitlecomposer-0.7.0/src/streamprocessor/streamprocessor.h:51:7: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). bool open(const QString &filename); data/subtitlecomposer-0.7.0/src/videoplayerplugins/xine/xineplayerbackend.cpp:290:3: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char lang[128]; data/subtitlecomposer-0.7.0/src/waveformwidget.cpp:420:15: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if(m_stream->open(mediaFile) && m_stream->initAudio(audioStream, waveFormat)) data/subtitlecomposer-0.7.0/src/formats/formatmanager.cpp:173:47: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). QByteArray byteData = fileLoadHelper.file()->read(1024 * 1024); ANALYSIS SUMMARY: Hits = 105 Lines analyzed = 43231 in approximately 0.99 seconds (43687 lines/second) Physical Source Lines of Code (SLOC) = 30042 Hits@level = [0] 0 [1] 1 [2] 92 [3] 0 [4] 12 [5] 0 Hits@level+ = [0+] 105 [1+] 105 [2+] 104 [3+] 12 [4+] 12 [5+] 0 Hits/KSLOC@level+ = [0+] 3.49511 [1+] 3.49511 [2+] 3.46182 [3+] 0.399441 [4+] 0.399441 [5+] 0 Dot directories skipped = 1 (--followdotdir overrides) Minimum risk level = 1 Not every hit is necessarily a security vulnerability. There may be other security vulnerabilities; review your code! See 'Secure Programming HOWTO' (https://dwheeler.com/secure-programs) for more information.