Flawfinder version 2.0.10, (C) 2001-2019 David A. Wheeler. Number of rules (primarily dangerous function names) in C/C++ ruleset: 223 Examining data/ukui-menu-3.0.1/src/MainViewWidget/mainviewwidget.h Examining data/ukui-menu-3.0.1/src/MainViewWidget/mainviewwidget.cpp Examining data/ukui-menu-3.0.1/src/MainViewWidget/directorychangedthread.cpp Examining data/ukui-menu-3.0.1/src/MainViewWidget/directorychangedthread.h Examining data/ukui-menu-3.0.1/src/Style/style.h Examining data/ukui-menu-3.0.1/src/Style/style.cpp Examining data/ukui-menu-3.0.1/src/SearchResultWidget/searchresultwidget.h Examining data/ukui-menu-3.0.1/src/SearchResultWidget/fullsearchresultwidget.h Examining data/ukui-menu-3.0.1/src/SearchResultWidget/searchresultwidget.cpp Examining data/ukui-menu-3.0.1/src/SearchResultWidget/searchappthread.cpp Examining data/ukui-menu-3.0.1/src/SearchResultWidget/fullsearchresultwidget.cpp Examining data/ukui-menu-3.0.1/src/SearchResultWidget/searchappthread.h Examining data/ukui-menu-3.0.1/src/CommonUseWidget/fullcommonusewidget.cpp Examining data/ukui-menu-3.0.1/src/CommonUseWidget/commonusewidget.cpp Examining data/ukui-menu-3.0.1/src/CommonUseWidget/commonusewidget.h Examining data/ukui-menu-3.0.1/src/CommonUseWidget/fullcommonusewidget.h Examining data/ukui-menu-3.0.1/src/UtilityFunction/scrollarea.h Examining data/ukui-menu-3.0.1/src/UtilityFunction/itemdelegate.h Examining data/ukui-menu-3.0.1/src/UtilityFunction/letterclassifybutton.h Examining data/ukui-menu-3.0.1/src/UtilityFunction/fullitemdelegate.h Examining data/ukui-menu-3.0.1/src/UtilityFunction/classifyscrollarea.h Examining data/ukui-menu-3.0.1/src/UtilityFunction/pushbutton.cpp Examining data/ukui-menu-3.0.1/src/UtilityFunction/classifyscrollarea.cpp Examining data/ukui-menu-3.0.1/src/UtilityFunction/utility.cpp Examining data/ukui-menu-3.0.1/src/UtilityFunction/scrollarea.cpp Examining data/ukui-menu-3.0.1/src/UtilityFunction/functionclassifybutton.h Examining data/ukui-menu-3.0.1/src/UtilityFunction/fulllistview.cpp Examining data/ukui-menu-3.0.1/src/UtilityFunction/toolbutton.h Examining data/ukui-menu-3.0.1/src/UtilityFunction/listview.h Examining data/ukui-menu-3.0.1/src/UtilityFunction/utility.h Examining data/ukui-menu-3.0.1/src/UtilityFunction/listview.cpp Examining data/ukui-menu-3.0.1/src/UtilityFunction/fullitemdelegate.cpp Examining data/ukui-menu-3.0.1/src/UtilityFunction/letterclassifybutton.cpp Examining data/ukui-menu-3.0.1/src/UtilityFunction/toolbutton.cpp Examining data/ukui-menu-3.0.1/src/UtilityFunction/itemdelegate.cpp Examining data/ukui-menu-3.0.1/src/UtilityFunction/fulllistview.h Examining data/ukui-menu-3.0.1/src/UtilityFunction/pushbutton.h Examining data/ukui-menu-3.0.1/src/UtilityFunction/functionclassifybutton.cpp Examining data/ukui-menu-3.0.1/src/MainWindow/mainwindow.h Examining data/ukui-menu-3.0.1/src/MainWindow/mainwindow.cpp Examining data/ukui-menu-3.0.1/src/FunctionWidget/functionwidget.h Examining data/ukui-menu-3.0.1/src/FunctionWidget/fullfunctionwidget.h Examining data/ukui-menu-3.0.1/src/FunctionWidget/functionwidget.cpp Examining data/ukui-menu-3.0.1/src/FunctionWidget/functionbuttonwidget.h Examining data/ukui-menu-3.0.1/src/FunctionWidget/fullfunctionwidget.cpp Examining data/ukui-menu-3.0.1/src/FunctionWidget/functionbuttonwidget.cpp Examining data/ukui-menu-3.0.1/src/SideBarWidget/sidebarwidget.cpp Examining data/ukui-menu-3.0.1/src/SideBarWidget/sidebarwidget.h Examining data/ukui-menu-3.0.1/src/QtSingleApplication/qtsingleapplication.h Examining data/ukui-menu-3.0.1/src/QtSingleApplication/qtsinglecoreapplication.h Examining data/ukui-menu-3.0.1/src/QtSingleApplication/qtlockedfile_win.cpp Examining data/ukui-menu-3.0.1/src/QtSingleApplication/qtlocalpeer.h Examining data/ukui-menu-3.0.1/src/QtSingleApplication/qtlocalpeer.cpp Examining data/ukui-menu-3.0.1/src/QtSingleApplication/qtlockedfile.h Examining data/ukui-menu-3.0.1/src/QtSingleApplication/qtlockedfile.cpp Examining data/ukui-menu-3.0.1/src/QtSingleApplication/qtsingleapplication.cpp Examining data/ukui-menu-3.0.1/src/QtSingleApplication/qtsinglecoreapplication.cpp Examining data/ukui-menu-3.0.1/src/QtSingleApplication/qtlockedfile_unix.cpp Examining data/ukui-menu-3.0.1/src/LetterWidget/fullletterwidget.cpp Examining data/ukui-menu-3.0.1/src/LetterWidget/letterbuttonwidget.h Examining data/ukui-menu-3.0.1/src/LetterWidget/letterbuttonwidget.cpp Examining data/ukui-menu-3.0.1/src/LetterWidget/letterwidget.h Examining data/ukui-menu-3.0.1/src/LetterWidget/letterwidget.cpp Examining data/ukui-menu-3.0.1/src/LetterWidget/fullletterwidget.h Examining data/ukui-menu-3.0.1/src/RightClickMenu/rightclickmenu.cpp Examining data/ukui-menu-3.0.1/src/RightClickMenu/rightclickmenu.h Examining data/ukui-menu-3.0.1/src/XEventMonitor/xeventmonitor.cpp Examining data/ukui-menu-3.0.1/src/XEventMonitor/xeventmonitor.h Examining data/ukui-menu-3.0.1/src/Interface/ukuichineseletter.h Examining data/ukui-menu-3.0.1/src/Interface/ukuichineseletter.cpp Examining data/ukui-menu-3.0.1/src/Interface/ukuimenuinterface.h Examining data/ukui-menu-3.0.1/src/Interface/ukuimenuinterface.cpp Examining data/ukui-menu-3.0.1/main.cpp FINAL RESULTS: data/ukui-menu-3.0.1/src/LetterWidget/letterbuttonwidget.cpp:47:5: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. sprintf(btncolor,"QToolButton{background:transparent;color:#ffffff;padding-left:0px;}\ data/ukui-menu-3.0.1/src/MainViewWidget/mainviewwidget.cpp:144:5: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. sprintf(style, "QLineEdit{border:0px;background-color:%s;border-radius:4px;}",QueryLineEditBackground); data/ukui-menu-3.0.1/src/MainViewWidget/mainviewwidget.cpp:200:14: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. sprintf(style, "QLineEdit{border:1px solid %s;background-color:%s;border-radius:4px;color:#ffffff;}", data/ukui-menu-3.0.1/src/MainViewWidget/mainviewwidget.cpp:230:21: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. sprintf(style, "QLineEdit{border:0px;background-color:%s;border-radius:4px;}",QueryLineEditBackground); data/ukui-menu-3.0.1/src/MainViewWidget/mainviewwidget.cpp:244:17: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. sprintf(style, "QLineEdit{border:0px;background-color:%s;border-radius:4px;color:#ffffff;}", data/ukui-menu-3.0.1/src/MainViewWidget/mainviewwidget.cpp:823:5: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. sprintf(style, "QLineEdit{border:0px;background-color:%s;border-radius:2px;}",QueryLineEditBackground); data/ukui-menu-3.0.1/src/MainWindow/mainwindow.cpp:76:5: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. sprintf(linestyle, "background-color:%s;",LineBackground); data/ukui-menu-3.0.1/src/MainWindow/mainwindow.cpp:691:13: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. sprintf(style, "border:0px;background-color:%s;border-top-right-radius:6px;",m_defaultBackground.toLocal8Bit().data()); data/ukui-menu-3.0.1/src/MainWindow/mainwindow.cpp:702:13: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. sprintf(style, "border:0px;background-color:%s;border-bottom-right-radius:6px;",m_defaultBackground.toLocal8Bit().data()); data/ukui-menu-3.0.1/src/MainWindow/mainwindow.cpp:713:13: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. sprintf(style, "border:0px;background-color:%s;border-bottom-right-radius:6px;",m_defaultBackground.toLocal8Bit().data()); data/ukui-menu-3.0.1/src/MainWindow/mainwindow.cpp:724:13: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. sprintf(style, "border:0px;background-color:%s;border-bottom-left-radius:6px;",m_defaultBackground.toLocal8Bit().data()); data/ukui-menu-3.0.1/src/MainWindow/mainwindow.cpp:735:9: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. sprintf(style, "border:0px;background-color:%s;border-radius:0px;",m_defaultBackground.toLocal8Bit().data()); data/ukui-menu-3.0.1/src/RightClickMenu/rightclickmenu.cpp:171:9: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. sprintf(command,"chmod a+x %s",newname.toLocal8Bit().data()); data/ukui-menu-3.0.1/src/RightClickMenu/rightclickmenu.cpp:194:5: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. sprintf(command,"ubuntu-kylin-software-center -remove %s",packageName.toLocal8Bit().data()); data/ukui-menu-3.0.1/src/RightClickMenu/rightclickmenu.cpp:201:5: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. sprintf(command,"ukui-menu-attr %s",m_desktopfp.toLocal8Bit().data()); data/ukui-menu-3.0.1/src/SideBarWidget/sidebarwidget.cpp:84:5: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. sprintf(btncolor,"QToolButton{background:transparent;border:0px;padding-left:0px;border-radius:4px;}\ data/ukui-menu-3.0.1/src/SideBarWidget/sidebarwidget.cpp:205:5: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. sprintf(btncolor,"QPushButton{background:transparent;border:0px;padding-left:0;border-radius:4px;}\ data/ukui-menu-3.0.1/src/SideBarWidget/sidebarwidget.cpp:569:5: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. sprintf(btncolor,"QPushButton{background:transparent;border:0px;padding-left:0;border-radius:4px;}\ data/ukui-menu-3.0.1/src/SideBarWidget/sidebarwidget.cpp:575:5: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. sprintf(pressstyle,"QPushButton{background-color:%s;border:0px;padding-left:0;border-radius:4px;}",SBClassifyBtnSelectedBackground); data/ukui-menu-3.0.1/src/SideBarWidget/sidebarwidget.cpp:628:5: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. sprintf(pressstyle,"QPushButton{background-color:%s;border:0px;padding-left:0;border-radius:4px;}",SBClassifyBtnSelectedBackground); data/ukui-menu-3.0.1/src/SideBarWidget/sidebarwidget.cpp:631:5: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. sprintf(btncolor,"QPushButton{background:transparent;border:0px;padding-left:0;border-radius:4px;}\ data/ukui-menu-3.0.1/src/Style/style.cpp:134:31: [4] (shell) system: This causes a new program to execute and is difficult to use safely (CWE-78). try using a library call that implements the same functionality if available. QString locale = QLocale::system().name(); data/ukui-menu-3.0.1/src/UtilityFunction/functionclassifybutton.cpp:88:13: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. sprintf(style,"border:0px;border-radius:4px;padding-left:0px;background-color:%s;",hover); data/ukui-menu-3.0.1/src/UtilityFunction/pushbutton.cpp:40:5: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. sprintf(btnstyle,"QPushButton{background:transparent;border:0px;color:#ffffff;font-size:14px;padding-left:0px;text-align: left center;}\ data/ukui-menu-3.0.1/src/UtilityFunction/toolbutton.cpp:70:9: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. sprintf(style,"border:0px;padding-left:16px;background-color:%s;color:#ffffff;font-size:14px;",hover); data/ukui-menu-3.0.1/src/UtilityFunction/toolbutton.cpp:72:9: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. sprintf(style,"border:0px;padding-left:0px;background-color:%s;",hover); data/ukui-menu-3.0.1/src/UtilityFunction/toolbutton.cpp:125:9: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. sprintf(style,"border:0px;padding-left:16px;background-color:%s;color:#ffffff;font-size:14px;",pressed); data/ukui-menu-3.0.1/src/UtilityFunction/toolbutton.cpp:127:9: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. sprintf(style,"border:0px;padding-left:0px;background-color:%s;",pressed); data/ukui-menu-3.0.1/src/UtilityFunction/toolbutton.cpp:155:9: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. sprintf(style,"border:0px;padding-left:16px;background-color:%s;color:#ffffff;font-size:14px;",hover); data/ukui-menu-3.0.1/src/UtilityFunction/toolbutton.cpp:157:9: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. sprintf(style,"border:0px;padding-left:0px;background-color:%s;",hover); data/ukui-menu-3.0.1/src/LetterWidget/letterbuttonwidget.cpp:46:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char btncolor[400]; data/ukui-menu-3.0.1/src/MainViewWidget/mainviewwidget.cpp:143:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char style[100]; data/ukui-menu-3.0.1/src/MainViewWidget/mainviewwidget.cpp:199:14: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char style[200]; data/ukui-menu-3.0.1/src/MainViewWidget/mainviewwidget.cpp:229:21: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char style[100]; data/ukui-menu-3.0.1/src/MainViewWidget/mainviewwidget.cpp:243:17: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char style[100]; data/ukui-menu-3.0.1/src/MainViewWidget/mainviewwidget.cpp:822:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char style[100]; data/ukui-menu-3.0.1/src/MainWindow/mainwindow.cpp:75:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char linestyle[100]; data/ukui-menu-3.0.1/src/MainWindow/mainwindow.cpp:661:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char style[100]; data/ukui-menu-3.0.1/src/QtSingleApplication/qtlocalpeer.cpp:108:14: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). lockFile.open(QIODevice::ReadWrite); data/ukui-menu-3.0.1/src/QtSingleApplication/qtlockedfile.cpp:123:20: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). bool QtLockedFile::open(OpenMode mode) data/ukui-menu-3.0.1/src/QtSingleApplication/qtlockedfile.cpp:129:19: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). return QFile::open(mode); data/ukui-menu-3.0.1/src/QtSingleApplication/qtlockedfile.h:76:10: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). bool open(OpenMode mode); data/ukui-menu-3.0.1/src/RightClickMenu/rightclickmenu.cpp:170:9: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char command[200]; data/ukui-menu-3.0.1/src/RightClickMenu/rightclickmenu.cpp:193:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char command[100]; data/ukui-menu-3.0.1/src/RightClickMenu/rightclickmenu.cpp:200:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char command[100]; data/ukui-menu-3.0.1/src/SideBarWidget/sidebarwidget.cpp:83:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char btncolor[300]; data/ukui-menu-3.0.1/src/SideBarWidget/sidebarwidget.cpp:204:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char btncolor[300]; data/ukui-menu-3.0.1/src/SideBarWidget/sidebarwidget.cpp:568:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char btncolor[300]; data/ukui-menu-3.0.1/src/SideBarWidget/sidebarwidget.cpp:574:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char pressstyle[200]; data/ukui-menu-3.0.1/src/SideBarWidget/sidebarwidget.cpp:627:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char pressstyle[200]; data/ukui-menu-3.0.1/src/SideBarWidget/sidebarwidget.cpp:630:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char btncolor[300]; data/ukui-menu-3.0.1/src/UtilityFunction/fulllistview.cpp:44:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char style[500]; data/ukui-menu-3.0.1/src/UtilityFunction/fulllistview.cpp:45:5: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(style,"QListView{border:0px;}\ data/ukui-menu-3.0.1/src/UtilityFunction/functionclassifybutton.cpp:82:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char style[100]; data/ukui-menu-3.0.1/src/UtilityFunction/pushbutton.cpp:39:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char btnstyle[300]; data/ukui-menu-3.0.1/src/UtilityFunction/pushbutton.cpp:51:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char style[100]; data/ukui-menu-3.0.1/src/UtilityFunction/pushbutton.cpp:52:5: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(style,"color:#ffffff;"); data/ukui-menu-3.0.1/src/UtilityFunction/toolbutton.cpp:68:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char style[100]; data/ukui-menu-3.0.1/src/UtilityFunction/toolbutton.cpp:123:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char style[100]; data/ukui-menu-3.0.1/src/UtilityFunction/toolbutton.cpp:153:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char style[100]; data/ukui-menu-3.0.1/src/Interface/ukuimenuinterface.cpp:820:38: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). int len=static_cast<int>(strlen(appcategory)-6); data/ukui-menu-3.0.1/src/Interface/ukuimenuinterface.cpp:823:51: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). if(strncmp(appcategory+i,category,strlen(category))==0) data/ukui-menu-3.0.1/src/QtSingleApplication/qtlocalpeer.cpp:167:28: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). res &= (socket.read(qstrlen(ack)) == ack); ANALYSIS SUMMARY: Hits = 63 Lines analyzed = 18713 in approximately 0.44 seconds (42976 lines/second) Physical Source Lines of Code (SLOC) = 14101 Hits@level = [0] 11 [1] 3 [2] 30 [3] 0 [4] 30 [5] 0 Hits@level+ = [0+] 74 [1+] 63 [2+] 60 [3+] 30 [4+] 30 [5+] 0 Hits/KSLOC@level+ = [0+] 5.24785 [1+] 4.46777 [2+] 4.25502 [3+] 2.12751 [4+] 2.12751 [5+] 0 Dot directories skipped = 2 (--followdotdir overrides) Minimum risk level = 1 Not every hit is necessarily a security vulnerability. There may be other security vulnerabilities; review your code! See 'Secure Programming HOWTO' (https://dwheeler.com/secure-programs) for more information.