Flawfinder version 2.0.10, (C) 2001-2019 David A. Wheeler. Number of rules (primarily dangerous function names) in C/C++ ruleset: 223 Examining data/ultracopier-2.2.4.7/OptionDialog.h Examining data/ultracopier-2.2.4.7/HelpDialog.h Examining data/ultracopier-2.2.4.7/OptionDialog.cpp Examining data/ultracopier-2.2.4.7/PlatformMacro.h Examining data/ultracopier-2.2.4.7/libogg/bitwise.c Examining data/ultracopier-2.2.4.7/libogg/os_types.h Examining data/ultracopier-2.2.4.7/libogg/framing.c Examining data/ultracopier-2.2.4.7/libogg/ogg.h Examining data/ultracopier-2.2.4.7/OSSpecific.h Examining data/ultracopier-2.2.4.7/Core.h Examining data/ultracopier-2.2.4.7/Version.h Examining data/ultracopier-2.2.4.7/FacilityEngine.h Examining data/ultracopier-2.2.4.7/ProductKey.h Examining data/ultracopier-2.2.4.7/SystrayIcon.cpp Examining data/ultracopier-2.2.4.7/PluginsManager.h Examining data/ultracopier-2.2.4.7/CliParser.cpp Examining data/ultracopier-2.2.4.7/CliParser.h Examining data/ultracopier-2.2.4.7/CompilerInfo.h Examining data/ultracopier-2.2.4.7/CopyEngineManager.cpp Examining data/ultracopier-2.2.4.7/CopyEngineManager.h Examining data/ultracopier-2.2.4.7/CopyListener.cpp Examining data/ultracopier-2.2.4.7/CopyListener.h Examining data/ultracopier-2.2.4.7/ProductKey.cpp Examining data/ultracopier-2.2.4.7/cpp11addition.h Examining data/ultracopier-2.2.4.7/cpp11additionstringtointcpp.cpp Examining data/ultracopier-2.2.4.7/DebugEngine.h Examining data/ultracopier-2.2.4.7/DebugEngineMacro.h Examining data/ultracopier-2.2.4.7/DebugModel.cpp Examining data/ultracopier-2.2.4.7/Environment.h Examining data/ultracopier-2.2.4.7/EventDispatcher.h Examining data/ultracopier-2.2.4.7/ExtraSocket.cpp Examining data/ultracopier-2.2.4.7/ExtraSocket.h Examining data/ultracopier-2.2.4.7/SystrayIcon.h Examining data/ultracopier-2.2.4.7/FacilityEngineVersion.cpp Examining data/ultracopier-2.2.4.7/InternetUpdater.cpp Examining data/ultracopier-2.2.4.7/InternetUpdater.h Examining data/ultracopier-2.2.4.7/LanguagesManager.cpp Examining data/ultracopier-2.2.4.7/LanguagesManager.h Examining data/ultracopier-2.2.4.7/LocalListener.h Examining data/ultracopier-2.2.4.7/LocalPluginOptions.cpp Examining data/ultracopier-2.2.4.7/LocalPluginOptions.h Examining data/ultracopier-2.2.4.7/LogThread.cpp Examining data/ultracopier-2.2.4.7/LogThread.h Examining data/ultracopier-2.2.4.7/main.cpp Examining data/ultracopier-2.2.4.7/OptionEngine.cpp Examining data/ultracopier-2.2.4.7/OptionEngine.h Examining data/ultracopier-2.2.4.7/OSSpecific.cpp Examining data/ultracopier-2.2.4.7/PluginInformation.cpp Examining data/ultracopier-2.2.4.7/PluginInformation.h Examining data/ultracopier-2.2.4.7/PluginLoaderCore.cpp Examining data/ultracopier-2.2.4.7/PluginLoaderCore.h Examining data/ultracopier-2.2.4.7/PluginsManager.cpp Examining data/ultracopier-2.2.4.7/ResourcesManager.cpp Examining data/ultracopier-2.2.4.7/ResourcesManager.h Examining data/ultracopier-2.2.4.7/SessionLoader.cpp Examining data/ultracopier-2.2.4.7/SessionLoader.h Examining data/ultracopier-2.2.4.7/StructEnumDefinition.h Examining data/ultracopier-2.2.4.7/StructEnumDefinition_UltracopierSpecific.h Examining data/ultracopier-2.2.4.7/FacilityEngine.cpp Examining data/ultracopier-2.2.4.7/ThemesManager.cpp Examining data/ultracopier-2.2.4.7/ThemesManager.h Examining data/ultracopier-2.2.4.7/LocalListener.cpp Examining data/ultracopier-2.2.4.7/DebugEngine.cpp Examining data/ultracopier-2.2.4.7/HelpDialog.cpp Examining data/ultracopier-2.2.4.7/EventDispatcher.cpp Examining data/ultracopier-2.2.4.7/Core.cpp Examining data/ultracopier-2.2.4.7/cpp11addition.cpp Examining data/ultracopier-2.2.4.7/interface/PluginInterface_Listener.h Examining data/ultracopier-2.2.4.7/interface/PluginInterface_PluginLoader.h Examining data/ultracopier-2.2.4.7/interface/PluginInterface_SessionLoader.h Examining data/ultracopier-2.2.4.7/interface/OptionInterface.h Examining data/ultracopier-2.2.4.7/interface/PluginInterface_CopyEngine.h Examining data/ultracopier-2.2.4.7/interface/FacilityInterface.h Examining data/ultracopier-2.2.4.7/interface/PluginInterface_Themes.h Examining data/ultracopier-2.2.4.7/lib/qt-tar-xz/xz_dec_lzma2.c Examining data/ultracopier-2.2.4.7/lib/qt-tar-xz/xz_dec_stream.c Examining data/ultracopier-2.2.4.7/lib/qt-tar-xz/xz.h Examining data/ultracopier-2.2.4.7/lib/qt-tar-xz/xz_private.h Examining data/ultracopier-2.2.4.7/lib/qt-tar-xz/xz_stream.h Examining data/ultracopier-2.2.4.7/lib/qt-tar-xz/xz_lzma2.h Examining data/ultracopier-2.2.4.7/lib/qt-tar-xz/xz_crc32.c Examining data/ultracopier-2.2.4.7/lib/qt-tar-xz/QXzDecodeThread.h Examining data/ultracopier-2.2.4.7/lib/qt-tar-xz/QTarDecode.h Examining data/ultracopier-2.2.4.7/lib/qt-tar-xz/xz_config.h Examining data/ultracopier-2.2.4.7/lib/qt-tar-xz/xz_dec_bcj.c Examining data/ultracopier-2.2.4.7/lib/qt-tar-xz/QXzDecodeThread.cpp Examining data/ultracopier-2.2.4.7/lib/qt-tar-xz/QXzDecode.cpp Examining data/ultracopier-2.2.4.7/lib/qt-tar-xz/QTarDecode.cpp Examining data/ultracopier-2.2.4.7/lib/qt-tar-xz/QXzDecode.h Examining data/ultracopier-2.2.4.7/little/main-little.cpp Examining data/ultracopier-2.2.4.7/little/OptionsEngineLittle.h Examining data/ultracopier-2.2.4.7/little/OptionsEngineLittle.cpp Examining data/ultracopier-2.2.4.7/plugins-unmaintained/Listener/dbus/StructEnumDefinition.h Examining data/ultracopier-2.2.4.7/plugins-unmaintained/Listener/dbus/Environment.h Examining data/ultracopier-2.2.4.7/plugins-unmaintained/Listener/dbus/listener.cpp Examining data/ultracopier-2.2.4.7/plugins-unmaintained/Listener/dbus/Catchcopy.h Examining data/ultracopier-2.2.4.7/plugins-unmaintained/Listener/dbus/listener.h Examining data/ultracopier-2.2.4.7/plugins-unmaintained/Listener/dbus/DebugEngineMacro.h Examining data/ultracopier-2.2.4.7/plugins-unmaintained/Listener/dbus/Catchcopy.cpp Examining data/ultracopier-2.2.4.7/plugins-unmaintained/Listener/dbus/Variable.h Examining data/ultracopier-2.2.4.7/plugins-unmaintained/PluginLoader/keybinding/StructEnumDefinition.h Examining data/ultracopier-2.2.4.7/plugins-unmaintained/PluginLoader/keybinding/pluginLoader.cpp Examining data/ultracopier-2.2.4.7/plugins-unmaintained/PluginLoader/keybinding/PlatformMacro.h Examining data/ultracopier-2.2.4.7/plugins-unmaintained/PluginLoader/keybinding/DebugEngineMacro.h Examining data/ultracopier-2.2.4.7/plugins-unmaintained/PluginLoader/keybinding/OptionsWidget.cpp Examining data/ultracopier-2.2.4.7/plugins-unmaintained/PluginLoader/keybinding/Environment.h Examining data/ultracopier-2.2.4.7/plugins-unmaintained/PluginLoader/keybinding/OptionsWidget.h Examining data/ultracopier-2.2.4.7/plugins-unmaintained/PluginLoader/keybinding/KeyBind.h Examining data/ultracopier-2.2.4.7/plugins-unmaintained/PluginLoader/keybinding/KeyBind.cpp Examining data/ultracopier-2.2.4.7/plugins-unmaintained/PluginLoader/keybinding/pluginLoader.h Examining data/ultracopier-2.2.4.7/plugins-unmaintained/PluginLoader/keybinding/Variable.h Examining data/ultracopier-2.2.4.7/plugins-unmaintained/SessionLoader/KDE4/Environment.h Examining data/ultracopier-2.2.4.7/plugins-unmaintained/SessionLoader/KDE4/sessionLoader.cpp Examining data/ultracopier-2.2.4.7/plugins-unmaintained/SessionLoader/KDE4/DebugEngineMacro.h Examining data/ultracopier-2.2.4.7/plugins-unmaintained/SessionLoader/KDE4/StructEnumDefinition.h Examining data/ultracopier-2.2.4.7/plugins-unmaintained/SessionLoader/KDE4/sessionLoader.h Examining data/ultracopier-2.2.4.7/plugins-unmaintained/SessionLoader/KDE4/Variable.h Examining data/ultracopier-2.2.4.7/plugins-unmaintained/Themes/Clean/factory.h Examining data/ultracopier-2.2.4.7/plugins-unmaintained/Themes/Clean/interface.h Examining data/ultracopier-2.2.4.7/plugins-unmaintained/Themes/Clean/interface.cpp Examining data/ultracopier-2.2.4.7/plugins-unmaintained/Themes/Clean/factory.cpp Examining data/ultracopier-2.2.4.7/plugins-unmaintained/Themes/Clean/StructEnumDefinition.h Examining data/ultracopier-2.2.4.7/plugins-unmaintained/Themes/Teracopy/Environment.h Examining data/ultracopier-2.2.4.7/plugins-unmaintained/Themes/Teracopy/factory.h Examining data/ultracopier-2.2.4.7/plugins-unmaintained/Themes/Teracopy/factory.cpp Examining data/ultracopier-2.2.4.7/plugins-unmaintained/Themes/Teracopy/interface.h Examining data/ultracopier-2.2.4.7/plugins-unmaintained/Themes/Teracopy/interface.cpp Examining data/ultracopier-2.2.4.7/plugins-unmaintained/Themes/Teracopy/TransferModel.cpp Examining data/ultracopier-2.2.4.7/plugins-unmaintained/Themes/Teracopy/DebugEngineMacro.h Examining data/ultracopier-2.2.4.7/plugins-unmaintained/Themes/Teracopy/TransferModel.h Examining data/ultracopier-2.2.4.7/plugins-unmaintained/Themes/Teracopy/StructEnumDefinition.h Examining data/ultracopier-2.2.4.7/plugins-unmaintained/Themes/Teracopy/Variable.h Examining data/ultracopier-2.2.4.7/plugins-unmaintained/Themes/Windows/StructEnumDefinition.h Examining data/ultracopier-2.2.4.7/plugins-unmaintained/Themes/Windows/Environment.h Examining data/ultracopier-2.2.4.7/plugins-unmaintained/Themes/Windows/factory.h Examining data/ultracopier-2.2.4.7/plugins-unmaintained/Themes/Windows/factory.cpp Examining data/ultracopier-2.2.4.7/plugins-unmaintained/Themes/Windows/interface.h Examining data/ultracopier-2.2.4.7/plugins-unmaintained/Themes/Windows/interface.cpp Examining data/ultracopier-2.2.4.7/plugins-unmaintained/Themes/Windows/TransferModel.cpp Examining data/ultracopier-2.2.4.7/plugins-unmaintained/Themes/Windows/DebugEngineMacro.h Examining data/ultracopier-2.2.4.7/plugins-unmaintained/Themes/Windows/TransferModel.h Examining data/ultracopier-2.2.4.7/plugins-unmaintained/Themes/Windows/Variable.h Examining data/ultracopier-2.2.4.7/plugins-unmaintained/CopyEngine/Ultracopier-Qt/FilterRules.cpp Examining data/ultracopier-2.2.4.7/plugins-unmaintained/CopyEngine/Ultracopier-Qt/StructEnumDefinition_CopyEngine.h Examining data/ultracopier-2.2.4.7/plugins-unmaintained/CopyEngine/Ultracopier-Qt/CopyEngineFactory.h Examining data/ultracopier-2.2.4.7/plugins-unmaintained/CopyEngine/Ultracopier-Qt/FilterRules.h Examining data/ultracopier-2.2.4.7/plugins-unmaintained/CopyEngine/Ultracopier-Qt/ListThread_InodeAction.cpp Examining data/ultracopier-2.2.4.7/plugins-unmaintained/CopyEngine/Ultracopier-Qt/WriteThread.cpp Examining data/ultracopier-2.2.4.7/plugins-unmaintained/CopyEngine/Ultracopier-Qt/ListThread.cpp Examining data/ultracopier-2.2.4.7/plugins-unmaintained/CopyEngine/Ultracopier-Qt/MkPath.cpp Examining data/ultracopier-2.2.4.7/plugins-unmaintained/CopyEngine/Ultracopier-Qt/ReadThread.cpp Examining data/ultracopier-2.2.4.7/plugins-unmaintained/CopyEngine/Ultracopier-Qt/RenamingRules.h Examining data/ultracopier-2.2.4.7/plugins-unmaintained/CopyEngine/Ultracopier-Qt/FolderExistsDialog.h Examining data/ultracopier-2.2.4.7/plugins-unmaintained/CopyEngine/Ultracopier-Qt/FileIsSameDialog.h Examining data/ultracopier-2.2.4.7/plugins-unmaintained/CopyEngine/Ultracopier-Qt/TransferThread.cpp Examining data/ultracopier-2.2.4.7/plugins-unmaintained/CopyEngine/Ultracopier-Qt/DiskSpace.cpp Examining data/ultracopier-2.2.4.7/plugins-unmaintained/CopyEngine/Ultracopier-Qt/FileExistsDialog.cpp Examining data/ultracopier-2.2.4.7/plugins-unmaintained/CopyEngine/Ultracopier-Qt/CompilerInfo.h Examining data/ultracopier-2.2.4.7/plugins-unmaintained/CopyEngine/Ultracopier-Qt/FileExistsDialog.h Examining data/ultracopier-2.2.4.7/plugins-unmaintained/CopyEngine/Ultracopier-Qt/ListThread.h Examining data/ultracopier-2.2.4.7/plugins-unmaintained/CopyEngine/Ultracopier-Qt/ScanFileOrFolder.h Examining data/ultracopier-2.2.4.7/plugins-unmaintained/CopyEngine/Ultracopier-Qt/FileErrorDialog.cpp Examining data/ultracopier-2.2.4.7/plugins-unmaintained/CopyEngine/Ultracopier-Qt/WriteThread.h Examining data/ultracopier-2.2.4.7/plugins-unmaintained/CopyEngine/Ultracopier-Qt/DebugDialog.h Examining data/ultracopier-2.2.4.7/plugins-unmaintained/CopyEngine/Ultracopier-Qt/CopyEngineUltracopierVariable.h Examining data/ultracopier-2.2.4.7/plugins-unmaintained/CopyEngine/Ultracopier-Qt/DriveManagement.h Examining data/ultracopier-2.2.4.7/plugins-unmaintained/CopyEngine/Ultracopier-Qt/FileErrorDialog.h Examining data/ultracopier-2.2.4.7/plugins-unmaintained/CopyEngine/Ultracopier-Qt/TransferThread.h Examining data/ultracopier-2.2.4.7/plugins-unmaintained/CopyEngine/Ultracopier-Qt/ScanFileOrFolder.cpp Examining data/ultracopier-2.2.4.7/plugins-unmaintained/CopyEngine/Ultracopier-Qt/DiskSpace.h Examining data/ultracopier-2.2.4.7/plugins-unmaintained/CopyEngine/Ultracopier-Qt/RenamingRules.cpp Examining data/ultracopier-2.2.4.7/plugins-unmaintained/CopyEngine/Ultracopier-Qt/Filters.cpp Examining data/ultracopier-2.2.4.7/plugins-unmaintained/CopyEngine/Ultracopier-Qt/CopyEngineFactory.cpp Examining data/ultracopier-2.2.4.7/plugins-unmaintained/CopyEngine/Ultracopier-Qt/MkPath.h Examining data/ultracopier-2.2.4.7/plugins-unmaintained/CopyEngine/Ultracopier-Qt/FileIsSameDialog.cpp Examining data/ultracopier-2.2.4.7/plugins-unmaintained/CopyEngine/Ultracopier-Qt/CopyEngine.h Examining data/ultracopier-2.2.4.7/plugins-unmaintained/CopyEngine/Ultracopier-Qt/CopyEngine.cpp Examining data/ultracopier-2.2.4.7/plugins-unmaintained/CopyEngine/Ultracopier-Qt/CopyEngine-collision-and-error.cpp Examining data/ultracopier-2.2.4.7/plugins-unmaintained/CopyEngine/Ultracopier-Qt/FolderExistsDialog.cpp Examining data/ultracopier-2.2.4.7/plugins-unmaintained/CopyEngine/Ultracopier-Qt/AvancedQFile.cpp Examining data/ultracopier-2.2.4.7/plugins-unmaintained/CopyEngine/Ultracopier-Qt/ReadThread.h Examining data/ultracopier-2.2.4.7/plugins-unmaintained/CopyEngine/Ultracopier-Qt/Environment.h Examining data/ultracopier-2.2.4.7/plugins-unmaintained/CopyEngine/Ultracopier-Qt/Filters.h Examining data/ultracopier-2.2.4.7/plugins-unmaintained/CopyEngine/Ultracopier-Qt/DebugDialog.cpp Examining data/ultracopier-2.2.4.7/plugins-unmaintained/CopyEngine/Ultracopier-Qt/AvancedQFile.h Examining data/ultracopier-2.2.4.7/plugins-unmaintained/CopyEngine/Ultracopier-Qt/DriveManagement.cpp Examining data/ultracopier-2.2.4.7/plugins-unmaintained/CopyEngine/Ultracopier-Qt/StructEnumDefinition.h Examining data/ultracopier-2.2.4.7/plugins-unmaintained/CopyEngine/Ultracopier-Qt/DebugEngineMacro.h Examining data/ultracopier-2.2.4.7/plugins/CopyEngine/Ultracopier-Spec/ListThreadOptions.cpp Examining data/ultracopier-2.2.4.7/plugins/CopyEngine/Ultracopier-Spec/ListThreadActions.cpp Examining data/ultracopier-2.2.4.7/plugins/CopyEngine/Ultracopier-Spec/EventLoop.cpp Examining data/ultracopier-2.2.4.7/plugins/CopyEngine/Ultracopier-Spec/FolderExistsDialog.cpp Examining data/ultracopier-2.2.4.7/plugins/CopyEngine/Ultracopier-Spec/MkPath.cpp Examining data/ultracopier-2.2.4.7/plugins/CopyEngine/Ultracopier-Spec/CompilerInfo.h Examining data/ultracopier-2.2.4.7/plugins/CopyEngine/Ultracopier-Spec/DebugEngineMacro.h Examining data/ultracopier-2.2.4.7/plugins/CopyEngine/Ultracopier-Spec/FilterRules.cpp Examining data/ultracopier-2.2.4.7/plugins/CopyEngine/Ultracopier-Spec/FileExistsDialog.cpp Examining data/ultracopier-2.2.4.7/plugins/CopyEngine/Ultracopier-Spec/ListThreadMedia.cpp Examining data/ultracopier-2.2.4.7/plugins/CopyEngine/Ultracopier-Spec/DriveManagement.cpp Examining data/ultracopier-2.2.4.7/plugins/CopyEngine/Ultracopier-Spec/ListThreadStat.cpp Examining data/ultracopier-2.2.4.7/plugins/CopyEngine/Ultracopier-Spec/FileErrorDialog.h Examining data/ultracopier-2.2.4.7/plugins/CopyEngine/Ultracopier-Spec/CopyEngine-collision-and-error.cpp Examining data/ultracopier-2.2.4.7/plugins/CopyEngine/Ultracopier-Spec/ListThreadListChange.cpp Examining data/ultracopier-2.2.4.7/plugins/CopyEngine/Ultracopier-Spec/FolderExistsDialog.h Examining data/ultracopier-2.2.4.7/plugins/CopyEngine/Ultracopier-Spec/DiskSpace.h Examining data/ultracopier-2.2.4.7/plugins/CopyEngine/Ultracopier-Spec/RenamingRules.h Examining data/ultracopier-2.2.4.7/plugins/CopyEngine/Ultracopier-Spec/DebugDialog.h Examining data/ultracopier-2.2.4.7/plugins/CopyEngine/Ultracopier-Spec/DriveManagement.h Examining data/ultracopier-2.2.4.7/plugins/CopyEngine/Ultracopier-Spec/ScanFileOrFolder.h Examining data/ultracopier-2.2.4.7/plugins/CopyEngine/Ultracopier-Spec/CallBackEventLoop.h Examining data/ultracopier-2.2.4.7/plugins/CopyEngine/Ultracopier-Spec/EventLoop.h Examining data/ultracopier-2.2.4.7/plugins/CopyEngine/Ultracopier-Spec/FileExistsDialog.h Examining data/ultracopier-2.2.4.7/plugins/CopyEngine/Ultracopier-Spec/StructEnumDefinition.h Examining data/ultracopier-2.2.4.7/plugins/CopyEngine/Ultracopier-Spec/ListThread.h Examining data/ultracopier-2.2.4.7/plugins/CopyEngine/Ultracopier-Spec/MkPath.h Examining data/ultracopier-2.2.4.7/plugins/CopyEngine/Ultracopier-Spec/Environment.h Examining data/ultracopier-2.2.4.7/plugins/CopyEngine/Ultracopier-Spec/FileIsSameDialog.h Examining data/ultracopier-2.2.4.7/plugins/CopyEngine/Ultracopier-Spec/DebugDialog.cpp Examining data/ultracopier-2.2.4.7/plugins/CopyEngine/Ultracopier-Spec/Filters.cpp Examining data/ultracopier-2.2.4.7/plugins/CopyEngine/Ultracopier-Spec/FilterRules.h Examining data/ultracopier-2.2.4.7/plugins/CopyEngine/Ultracopier-Spec/DiskSpace.cpp Examining data/ultracopier-2.2.4.7/plugins/CopyEngine/Ultracopier-Spec/CopyEngineUltracopier-SpecVariable.h Examining data/ultracopier-2.2.4.7/plugins/CopyEngine/Ultracopier-Spec/TransferThread.h Examining data/ultracopier-2.2.4.7/plugins/CopyEngine/Ultracopier-Spec/FileIsSameDialog.cpp Examining data/ultracopier-2.2.4.7/plugins/CopyEngine/Ultracopier-Spec/ListThread_InodeAction.cpp Examining data/ultracopier-2.2.4.7/plugins/CopyEngine/Ultracopier-Spec/StructEnumDefinition_CopyEngine.h Examining data/ultracopier-2.2.4.7/plugins/CopyEngine/Ultracopier-Spec/ListThreadScan.cpp Examining data/ultracopier-2.2.4.7/plugins/CopyEngine/Ultracopier-Spec/RenamingRules.cpp Examining data/ultracopier-2.2.4.7/plugins/CopyEngine/Ultracopier-Spec/ports.h Examining data/ultracopier-2.2.4.7/plugins/CopyEngine/Ultracopier-Spec/FileErrorDialog.cpp Examining data/ultracopier-2.2.4.7/plugins/CopyEngine/Ultracopier-Spec/async/TransferThreadAsync.cpp Examining data/ultracopier-2.2.4.7/plugins/CopyEngine/Ultracopier-Spec/async/TransferThreadAsync.h Examining data/ultracopier-2.2.4.7/plugins/CopyEngine/Ultracopier-Spec/async/ReadThread.h Examining data/ultracopier-2.2.4.7/plugins/CopyEngine/Ultracopier-Spec/async/WriteThread.h Examining data/ultracopier-2.2.4.7/plugins/CopyEngine/Ultracopier-Spec/async/WriteThread.cpp Examining data/ultracopier-2.2.4.7/plugins/CopyEngine/Ultracopier-Spec/async/ReadThread.cpp Examining data/ultracopier-2.2.4.7/plugins/CopyEngine/Ultracopier-Spec/CopyEngineFactory.h Examining data/ultracopier-2.2.4.7/plugins/CopyEngine/Ultracopier-Spec/CopyEngine.h Examining data/ultracopier-2.2.4.7/plugins/CopyEngine/Ultracopier-Spec/TransferThread.cpp Examining data/ultracopier-2.2.4.7/plugins/CopyEngine/Ultracopier-Spec/CopyEngine.cpp Examining data/ultracopier-2.2.4.7/plugins/CopyEngine/Ultracopier-Spec/ListThreadNew.cpp Examining data/ultracopier-2.2.4.7/plugins/CopyEngine/Ultracopier-Spec/Filters.h Examining data/ultracopier-2.2.4.7/plugins/CopyEngine/Ultracopier-Spec/CopyEngineFactory.cpp Examining data/ultracopier-2.2.4.7/plugins/CopyEngine/Ultracopier-Spec/ListThread.cpp Examining data/ultracopier-2.2.4.7/plugins/CopyEngine/Ultracopier-Spec/ScanFileOrFolder.cpp Examining data/ultracopier-2.2.4.7/plugins/CopyEngine/Random/CopyEngineFactory.cpp Examining data/ultracopier-2.2.4.7/plugins/CopyEngine/Random/CopyEngineFactory.h Examining data/ultracopier-2.2.4.7/plugins/CopyEngine/Random/CopyEngine.h Examining data/ultracopier-2.2.4.7/plugins/CopyEngine/Random/CopyEngine.cpp Examining data/ultracopier-2.2.4.7/plugins/Listener/catchcopy-v0002/catchcopy-api-0002/ClientCatchcopy.cpp Examining data/ultracopier-2.2.4.7/plugins/Listener/catchcopy-v0002/catchcopy-api-0002/ExtraSocketCatchcopy.h Examining data/ultracopier-2.2.4.7/plugins/Listener/catchcopy-v0002/catchcopy-api-0002/ExtraSocketCatchcopy.cpp Examining data/ultracopier-2.2.4.7/plugins/Listener/catchcopy-v0002/catchcopy-api-0002/VariablesCatchcopy.h Examining data/ultracopier-2.2.4.7/plugins/Listener/catchcopy-v0002/catchcopy-api-0002/ServerCatchcopy.cpp Examining data/ultracopier-2.2.4.7/plugins/Listener/catchcopy-v0002/catchcopy-api-0002/ClientCatchcopy.h Examining data/ultracopier-2.2.4.7/plugins/Listener/catchcopy-v0002/catchcopy-api-0002/ServerCatchcopy.h Examining data/ultracopier-2.2.4.7/plugins/Listener/catchcopy-v0002/listener.cpp Examining data/ultracopier-2.2.4.7/plugins/Listener/catchcopy-v0002/listener.h Examining data/ultracopier-2.2.4.7/plugins/Listener/catchcopy-v0002/DebugEngineMacro.h Examining data/ultracopier-2.2.4.7/plugins/Listener/catchcopy-v0002/Environment.h Examining data/ultracopier-2.2.4.7/plugins/Listener/catchcopy-v0002/Listenercatchcopy-v0002Variable.h Examining data/ultracopier-2.2.4.7/plugins/Listener/catchcopy-v0002/StructEnumDefinition.h Examining data/ultracopier-2.2.4.7/plugins/PluginLoader/catchcopy-v0002/StructEnumDefinition.h Examining data/ultracopier-2.2.4.7/plugins/PluginLoader/catchcopy-v0002/OptionsWidget.h Examining data/ultracopier-2.2.4.7/plugins/PluginLoader/catchcopy-v0002/pluginLoader.h Examining data/ultracopier-2.2.4.7/plugins/PluginLoader/catchcopy-v0002/DebugEngineMacro.h Examining data/ultracopier-2.2.4.7/plugins/PluginLoader/catchcopy-v0002/pluginLoader.cpp Examining data/ultracopier-2.2.4.7/plugins/PluginLoader/catchcopy-v0002/PlatformMacro.h Examining data/ultracopier-2.2.4.7/plugins/PluginLoader/catchcopy-v0002/Environment.h Examining data/ultracopier-2.2.4.7/plugins/PluginLoader/catchcopy-v0002/PluginLoadercatchcopy-v0002Variable.h Examining data/ultracopier-2.2.4.7/plugins/PluginLoader/catchcopy-v0002/OptionsWidget.cpp Examining data/ultracopier-2.2.4.7/plugins/SessionLoader/Windows/sessionLoader.cpp Examining data/ultracopier-2.2.4.7/plugins/SessionLoader/Windows/SessionLoaderWindowsVariable.h Examining data/ultracopier-2.2.4.7/plugins/SessionLoader/Windows/Environment.h Examining data/ultracopier-2.2.4.7/plugins/SessionLoader/Windows/DebugEngineMacro.h Examining data/ultracopier-2.2.4.7/plugins/SessionLoader/Windows/sessionLoader.h Examining data/ultracopier-2.2.4.7/plugins/SessionLoader/Windows/StructEnumDefinition.h Examining data/ultracopier-2.2.4.7/plugins/Themes/Oxygen/StructEnumDefinition.h Examining data/ultracopier-2.2.4.7/plugins/Themes/Oxygen/DebugEngineMacro.h Examining data/ultracopier-2.2.4.7/plugins/Themes/Oxygen/interface.h Examining data/ultracopier-2.2.4.7/plugins/Themes/Oxygen/TransferModel.h Examining data/ultracopier-2.2.4.7/plugins/Themes/Oxygen/interface.cpp Examining data/ultracopier-2.2.4.7/plugins/Themes/Oxygen/ThemesFactory.h Examining data/ultracopier-2.2.4.7/plugins/Themes/Oxygen/ThemesFactory.cpp Examining data/ultracopier-2.2.4.7/plugins/Themes/Oxygen/Environment.h Examining data/ultracopier-2.2.4.7/plugins/Themes/Oxygen/OxygenVariable.h Examining data/ultracopier-2.2.4.7/plugins/Themes/Oxygen/TransferModel.cpp Examining data/ultracopier-2.2.4.7/plugins/Themes/Oxygen2/ProgressBarDark.h Examining data/ultracopier-2.2.4.7/plugins/Themes/Oxygen2/DebugEngineMacro.h Examining data/ultracopier-2.2.4.7/plugins/Themes/Oxygen2/interface.h Examining data/ultracopier-2.2.4.7/plugins/Themes/Oxygen2/Oxygen2Variable.h Examining data/ultracopier-2.2.4.7/plugins/Themes/Oxygen2/fileTree.cpp Examining data/ultracopier-2.2.4.7/plugins/Themes/Oxygen2/ThemesFactory.cpp Examining data/ultracopier-2.2.4.7/plugins/Themes/Oxygen2/VerticalLabel.cpp Examining data/ultracopier-2.2.4.7/plugins/Themes/Oxygen2/interface.cpp Examining data/ultracopier-2.2.4.7/plugins/Themes/Oxygen2/ThemesFactory.h Examining data/ultracopier-2.2.4.7/plugins/Themes/Oxygen2/fileTree.h Examining data/ultracopier-2.2.4.7/plugins/Themes/Oxygen2/ProgressBarDark.cpp Examining data/ultracopier-2.2.4.7/plugins/Themes/Oxygen2/DarkButton.h Examining data/ultracopier-2.2.4.7/plugins/Themes/Oxygen2/chartarea.cpp Examining data/ultracopier-2.2.4.7/plugins/Themes/Oxygen2/chartarea.h Examining data/ultracopier-2.2.4.7/plugins/Themes/Oxygen2/VerticalLabel.h Examining data/ultracopier-2.2.4.7/plugins/Themes/Oxygen2/TransferModel.h Examining data/ultracopier-2.2.4.7/plugins/Themes/Oxygen2/TransferModel.cpp Examining data/ultracopier-2.2.4.7/plugins/Themes/Oxygen2/Oxygen2Environment.h Examining data/ultracopier-2.2.4.7/plugins/Themes/Oxygen2/DarkButton.cpp Examining data/ultracopier-2.2.4.7/plugins/Themes/Oxygen2/radialMap/map.cpp Examining data/ultracopier-2.2.4.7/plugins/Themes/Oxygen2/radialMap/widgetEvents.cpp Examining data/ultracopier-2.2.4.7/plugins/Themes/Oxygen2/radialMap/labels.cpp Examining data/ultracopier-2.2.4.7/plugins/Themes/Oxygen2/radialMap/widget.cpp Examining data/ultracopier-2.2.4.7/plugins/Themes/Oxygen2/radialMap/map.h Examining data/ultracopier-2.2.4.7/plugins/Themes/Oxygen2/radialMap/radialMap.h Examining data/ultracopier-2.2.4.7/plugins/Themes/Oxygen2/radialMap/widget.h Examining data/ultracopier-2.2.4.7/plugins/Themes/Oxygen2/Environment.h Examining data/ultracopier-2.2.4.7/plugins/Themes/Oxygen2/StructEnumDefinition.h Examining data/ultracopier-2.2.4.7/opusfile/stream.c Examining data/ultracopier-2.2.4.7/opusfile/internal.c Examining data/ultracopier-2.2.4.7/opusfile/opusfile.h Examining data/ultracopier-2.2.4.7/opusfile/opusfile.c Examining data/ultracopier-2.2.4.7/opusfile/internal.h Examining data/ultracopier-2.2.4.7/opusfile/info.c Examining data/ultracopier-2.2.4.7/tools/unit-tester/copyEngine.cpp Examining data/ultracopier-2.2.4.7/tools/unit-tester/copyEngine.h Examining data/ultracopier-2.2.4.7/tools/unit-tester/main.cpp Examining data/ultracopier-2.2.4.7/tools/unit-tester/copyEngineUnitTester.cpp Examining data/ultracopier-2.2.4.7/tools/unit-tester/copyEngineUnitTester.h Examining data/ultracopier-2.2.4.7/test/chartarea/main.cpp Examining data/ultracopier-2.2.4.7/test/chartarea/widget.cpp Examining data/ultracopier-2.2.4.7/test/chartarea/MainWindow.h Examining data/ultracopier-2.2.4.7/test/chartarea/MainWindow.cpp Examining data/ultracopier-2.2.4.7/test/chartarea/widget.h Examining data/ultracopier-2.2.4.7/test/radialmap/Config.cpp Examining data/ultracopier-2.2.4.7/test/radialmap/main.cpp Examining data/ultracopier-2.2.4.7/test/radialmap/fileTree.h Examining data/ultracopier-2.2.4.7/test/radialmap/MainWindow.h Examining data/ultracopier-2.2.4.7/test/radialmap/MainWindow.cpp Examining data/ultracopier-2.2.4.7/test/radialmap/fileTree.cpp Examining data/ultracopier-2.2.4.7/test/radialmap/Config.h Examining data/ultracopier-2.2.4.7/test/radialmap/radialMap/labels.cpp Examining data/ultracopier-2.2.4.7/test/radialmap/radialMap/sincos.h Examining data/ultracopier-2.2.4.7/test/radialmap/radialMap/map.h Examining data/ultracopier-2.2.4.7/test/radialmap/radialMap/widget.cpp Examining data/ultracopier-2.2.4.7/test/radialmap/radialMap/map.cpp Examining data/ultracopier-2.2.4.7/test/radialmap/radialMap/radialMap.h Examining data/ultracopier-2.2.4.7/test/radialmap/radialMap/widgetEvents.cpp Examining data/ultracopier-2.2.4.7/test/radialmap/radialMap/widget.h Examining data/ultracopier-2.2.4.7/test/progressbardark/ProgressBarDark.cpp Examining data/ultracopier-2.2.4.7/test/progressbardark/ProgressBarDark.h Examining data/ultracopier-2.2.4.7/test/progressbardark/main.cpp Examining data/ultracopier-2.2.4.7/test/progressbardark/MainWindow.cpp Examining data/ultracopier-2.2.4.7/test/progressbardark/MainWindow.h Examining data/ultracopier-2.2.4.7/test/darkbutton/MainWindow.cpp Examining data/ultracopier-2.2.4.7/test/darkbutton/DarkButton.h Examining data/ultracopier-2.2.4.7/test/darkbutton/main.cpp Examining data/ultracopier-2.2.4.7/test/darkbutton/MainWindow.h Examining data/ultracopier-2.2.4.7/test/darkbutton/DarkButton.cpp Examining data/ultracopier-2.2.4.7/libfm-qt-ultracopier/utilities.h Examining data/ultracopier-2.2.4.7/libfm-qt-ultracopier/utilities.cpp Examining data/ultracopier-2.2.4.7/test-client-catchcopy/catchcopy-api-0002/ClientCatchcopy.cpp Examining data/ultracopier-2.2.4.7/test-client-catchcopy/catchcopy-api-0002/ServerCatchcopy.h Examining data/ultracopier-2.2.4.7/test-client-catchcopy/catchcopy-api-0002/ClientCatchcopy.h Examining data/ultracopier-2.2.4.7/test-client-catchcopy/catchcopy-api-0002/ExtraSocketCatchcopy.h Examining data/ultracopier-2.2.4.7/test-client-catchcopy/catchcopy-api-0002/ServerCatchcopy.cpp Examining data/ultracopier-2.2.4.7/test-client-catchcopy/catchcopy-api-0002/ExtraSocketCatchcopy.cpp Examining data/ultracopier-2.2.4.7/test-client-catchcopy/catchcopy-api-0002/VariablesCatchcopy.h Examining data/ultracopier-2.2.4.7/test-client-catchcopy/mainwindow.cpp Examining data/ultracopier-2.2.4.7/test-client-catchcopy/main.cpp Examining data/ultracopier-2.2.4.7/test-client-catchcopy/mainwindow.h Examining data/ultracopier-2.2.4.7/catchcopy-windows-explorer-plugin/Reg.h Examining data/ultracopier-2.2.4.7/catchcopy-windows-explorer-plugin/CatchCopy.cpp Examining data/ultracopier-2.2.4.7/catchcopy-windows-explorer-plugin/ClientCatchcopy.cpp Examining data/ultracopier-2.2.4.7/catchcopy-windows-explorer-plugin/ClientCatchcopy.h Examining data/ultracopier-2.2.4.7/catchcopy-windows-explorer-plugin/DDShellExt.h Examining data/ultracopier-2.2.4.7/catchcopy-windows-explorer-plugin/ClassFactory.h Examining data/ultracopier-2.2.4.7/catchcopy-windows-explorer-plugin/Deque.h Examining data/ultracopier-2.2.4.7/catchcopy-windows-explorer-plugin/resource.h Examining data/ultracopier-2.2.4.7/catchcopy-windows-explorer-plugin/DDShellExt.cpp Examining data/ultracopier-2.2.4.7/catchcopy-windows-explorer-plugin/ClassFactory.cpp Examining data/ultracopier-2.2.4.7/catchcopy-windows-explorer-plugin/Reg.cpp Examining data/ultracopier-2.2.4.7/catchcopy-windows-explorer-plugin/Deque.cpp Examining data/ultracopier-2.2.4.7/catchcopy-windows-explorer-plugin/Variable.h Examining data/ultracopier-2.2.4.7/Variable.h FINAL RESULTS: data/ultracopier-2.2.4.7/plugins/CopyEngine/Ultracopier-Spec/FileErrorDialog.cpp:99:24: [5] (race) readlink: This accepts filename arguments; if an attacker can move those files or change the link content, a race condition results. Also, it does not terminate with ASCII NUL. (CWE-362, CWE-20). Reconsider approach. if ((len = readlink(TransferThread::internalStringTostring(fileInfo).c_str(), buf, sizeof(buf)-1)) != -1) data/ultracopier-2.2.4.7/plugins/CopyEngine/Ultracopier-Spec/MkPath.cpp:345:16: [5] (race) chmod: This accepts filename arguments; if an attacker can move those files, a race condition results. (CWE-362). Use fchmod( ) instead. if(chmod(TransferThread::internalStringTostring(item.destination).c_str(), permissions.st_mode)!=0) data/ultracopier-2.2.4.7/plugins/CopyEngine/Ultracopier-Spec/MkPath.cpp:347:16: [5] (race) chown: This accepts filename arguments; if an attacker can move those files, a race condition results. (CWE-362). Use fchown( ) instead. if(chown(TransferThread::internalStringTostring(item.destination).c_str(), permissions.st_uid, permissions.st_gid)!=0) data/ultracopier-2.2.4.7/plugins/CopyEngine/Ultracopier-Spec/ScanFileOrFolder.cpp:338:14: [5] (race) readlink: This accepts filename arguments; if an attacker can move those files or change the link content, a race condition results. Also, it does not terminate with ASCII NUL. (CWE-362, CWE-20). Reconsider approach. nbytes=readlink(TransferThread::internalStringTostring(destination).c_str(), buf.data(), buf.size()); data/ultracopier-2.2.4.7/plugins/CopyEngine/Ultracopier-Spec/ScanFileOrFolder.cpp:359:18: [5] (race) readlink: This accepts filename arguments; if an attacker can move those files or change the link content, a race condition results. Also, it does not terminate with ASCII NUL. (CWE-362, CWE-20). Reconsider approach. nbytes=readlink(TransferThread::internalStringTostring(temp).c_str(), buf.data(), buf.size()); data/ultracopier-2.2.4.7/plugins/CopyEngine/Ultracopier-Spec/TransferThread.cpp:1122:8: [5] (race) chmod: This accepts filename arguments; if an attacker can move those files, a race condition results. (CWE-362). Use fchmod( ) instead. if(chmod(TransferThread::internalStringTostring(destination).c_str(), permissions.st_mode)!=0) data/ultracopier-2.2.4.7/plugins/CopyEngine/Ultracopier-Spec/TransferThread.cpp:1124:8: [5] (race) chown: This accepts filename arguments; if an attacker can move those files, a race condition results. (CWE-362). Use fchown( ) instead. if(chown(TransferThread::internalStringTostring(destination).c_str(), permissions.st_uid, permissions.st_gid)!=0) data/ultracopier-2.2.4.7/plugins/CopyEngine/Ultracopier-Spec/async/TransferThreadAsync.cpp:627:17: [5] (race) readlink: This accepts filename arguments; if an attacker can move those files or change the link content, a race condition results. Also, it does not terminate with ASCII NUL. (CWE-362, CWE-20). Reconsider approach. s=readlink(TransferThread::internalStringTostring(source).c_str(),buf.data(),buf.size()); data/ultracopier-2.2.4.7/FacilityEngine.cpp:214:5: [4] (shell) system: This causes a new program to execute and is difficult to use safely (CWE-78). try using a library call that implements the same functionality if available. system("shutdown /s /f /t 0"); data/ultracopier-2.2.4.7/LanguagesManager.cpp:79:132: [4] (shell) system: This causes a new program to execute and is difficult to use safely (CWE-78). try using a library call that implements the same functionality if available. ULTRACOPIER_DEBUGCONSOLE(Ultracopier::DebugLevel_Notice,"language auto-detection, QLocale::system().name(): "+QLocale::system().name().toStdString()+", QLocale::languageToString(QLocale::system().language()): "+QLocale::languageToString(QLocale::system().language()).toStdString()); data/ultracopier-2.2.4.7/LanguagesManager.cpp:79:259: [4] (shell) system: This causes a new program to execute and is difficult to use safely (CWE-78). try using a library call that implements the same functionality if available. ULTRACOPIER_DEBUGCONSOLE(Ultracopier::DebugLevel_Notice,"language auto-detection, QLocale::system().name(): "+QLocale::system().name().toStdString()+", QLocale::languageToString(QLocale::system().language()): "+QLocale::languageToString(QLocale::system().language()).toStdString()); data/ultracopier-2.2.4.7/LanguagesManager.cpp:80:90: [4] (shell) system: This causes a new program to execute and is difficult to use safely (CWE-78). try using a library call that implements the same functionality if available. std::string tempLanguage=getMainShortName(QLocale::languageToString(QLocale::system().language()).toStdString()); data/ultracopier-2.2.4.7/LanguagesManager.cpp:85:56: [4] (shell) system: This causes a new program to execute and is difficult to use safely (CWE-78). try using a library call that implements the same functionality if available. tempLanguage=getMainShortName(QLocale::system().name().toStdString()); data/ultracopier-2.2.4.7/LanguagesManager.cpp:90:211: [4] (shell) system: This causes a new program to execute and is difficult to use safely (CWE-78). try using a library call that implements the same functionality if available. ULTRACOPIER_DEBUGCONSOLE(Ultracopier::DebugLevel_Warning,"Autodetection of the language failed, QLocale::languageToString(QLocale::system().language()): "+QLocale::languageToString(QLocale::system().language()).toStdString()+", QLocale::system().name(): "+QLocale::system().name().toStdString()+", failing back to english"); data/ultracopier-2.2.4.7/LanguagesManager.cpp:90:286: [4] (shell) system: This causes a new program to execute and is difficult to use safely (CWE-78). try using a library call that implements the same functionality if available. ULTRACOPIER_DEBUGCONSOLE(Ultracopier::DebugLevel_Warning,"Autodetection of the language failed, QLocale::languageToString(QLocale::system().language()): "+QLocale::languageToString(QLocale::system().language()).toStdString()+", QLocale::system().name(): "+QLocale::system().name().toStdString()+", failing back to english"); data/ultracopier-2.2.4.7/LanguagesManager.cpp:222:124: [4] (shell) system: This causes a new program to execute and is difficult to use safely (CWE-78). try using a library call that implements the same functionality if available. ULTRACOPIER_DEBUGCONSOLE(Ultracopier::DebugLevel_Notice,"language auto-detection, QLocale::system().name(): "+QLocale::system().name().toStdString()+", QLocale::languageToString(QLocale::system().language()): "+QLocale::languageToString(QLocale::system().language()).toStdString()); data/ultracopier-2.2.4.7/LanguagesManager.cpp:222:251: [4] (shell) system: This causes a new program to execute and is difficult to use safely (CWE-78). try using a library call that implements the same functionality if available. ULTRACOPIER_DEBUGCONSOLE(Ultracopier::DebugLevel_Notice,"language auto-detection, QLocale::system().name(): "+QLocale::system().name().toStdString()+", QLocale::languageToString(QLocale::system().language()): "+QLocale::languageToString(QLocale::system().language()).toStdString()); data/ultracopier-2.2.4.7/LanguagesManager.cpp:223:82: [4] (shell) system: This causes a new program to execute and is difficult to use safely (CWE-78). try using a library call that implements the same functionality if available. std::string tempLanguage=getMainShortName(QLocale::languageToString(QLocale::system().language()).toStdString()); data/ultracopier-2.2.4.7/LanguagesManager.cpp:228:48: [4] (shell) system: This causes a new program to execute and is difficult to use safely (CWE-78). try using a library call that implements the same functionality if available. tempLanguage=getMainShortName(QLocale::system().name().toStdString()); data/ultracopier-2.2.4.7/catchcopy-windows-explorer-plugin/ClientCatchcopy.cpp:32:3: [4] (buffer) strcpy: Does not check for buffer overflows when copying to destination [MS-banned] (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy easily misused). strcpy(m_pipename, prefix); data/ultracopier-2.2.4.7/catchcopy-windows-explorer-plugin/ClientCatchcopy.cpp:33:3: [4] (buffer) strcat: Does not check for buffer overflows when concatenating to destination [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or snprintf (warning: strncat is easily misused). strcat(m_pipename, data); data/ultracopier-2.2.4.7/catchcopy-windows-explorer-plugin/ClientCatchcopy.cpp:104:3: [4] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. sprintf(temp_char_debug, "user name: %s, pipe name: %s",uname , m_pipename); data/ultracopier-2.2.4.7/catchcopy-windows-explorer-plugin/Deque.cpp:27:6: [4] (buffer) wcscpy: Does not check for buffer overflows when copying to destination [MS-banned] (CWE-120). Consider using a function version that stops copying at the end of the buffer. wcscpy(head->str, str); data/ultracopier-2.2.4.7/catchcopy-windows-explorer-plugin/Deque.cpp:37:7: [4] (buffer) wcscpy: Does not check for buffer overflows when copying to destination [MS-banned] (CWE-120). Consider using a function version that stops copying at the end of the buffer. wcscpy(temp->str, str); data/ultracopier-2.2.4.7/catchcopy-windows-explorer-plugin/Deque.cpp:55:6: [4] (buffer) wcscpy: Does not check for buffer overflows when copying to destination [MS-banned] (CWE-120). Consider using a function version that stops copying at the end of the buffer. wcscpy(head->str, str); data/ultracopier-2.2.4.7/catchcopy-windows-explorer-plugin/Deque.cpp:65:7: [4] (buffer) wcscpy: Does not check for buffer overflows when copying to destination [MS-banned] (CWE-120). Consider using a function version that stops copying at the end of the buffer. wcscpy(temp->str, str); data/ultracopier-2.2.4.7/plugins/CopyEngine/Ultracopier-Spec/TransferThread.cpp:688:5: [4] (buffer) wcscpy: Does not check for buffer overflows when copying to destination [MS-banned] (CWE-120). Consider using a function version that stops copying at the end of the buffer. wcscpy(pathCedit,pathC); data/ultracopier-2.2.4.7/plugins/CopyEngine/Ultracopier-Spec/TransferThread.cpp:726:9: [4] (buffer) wcscpy: Does not check for buffer overflows when copying to destination [MS-banned] (CWE-120). Consider using a function version that stops copying at the end of the buffer. wcscpy(pathCedit,pathC); data/ultracopier-2.2.4.7/plugins/CopyEngine/Ultracopier-Spec/TransferThread.cpp:1423:5: [4] (buffer) strcpy: Does not check for buffer overflows when copying to destination [MS-banned] (CWE-120). Consider using snprintf, strcpy_s, or strlcpy (warning: strncpy easily misused). strcpy(finalpath,path.c_str()); data/ultracopier-2.2.4.7/plugins/CopyEngine/Ultracopier-Spec/async/TransferThreadAsync.cpp:1424:3: [4] (buffer) wcscpy: Does not check for buffer overflows when copying to destination [MS-banned] (CWE-120). Consider using a function version that stops copying at the end of the buffer. wcscpy(ReparseBuffer.MountPointReparseBuffer.PathBuffer, szPath); data/ultracopier-2.2.4.7/plugins/PluginLoader/catchcopy-v0002/pluginLoader.cpp:408:13: [4] (buffer) wcscpy: Does not check for buffer overflows when copying to destination [MS-banned] (CWE-120). Consider using a function version that stops copying at the end of the buffer. wcscpy(arrayArg+size_lenght*sizeof(wchar_t),TEXT("\0")); data/ultracopier-2.2.4.7/plugins-unmaintained/CopyEngine/Ultracopier-Qt/MkPath.cpp:171:124: [3] (random) random: This function is not sufficiently random for security-related functions such as key and nonce creation (CWE-327). Use a more secure technique for acquiring random values. QFileInfo tempFolder=pathList.first().source.absolutePath()+QString::fromStdString(text_slash)+QString::number(random); data/ultracopier-2.2.4.7/plugins-unmaintained/CopyEngine/Ultracopier-Qt/MkPath.cpp:175:118: [3] (random) random: This function is not sufficiently random for security-related functions such as key and nonce creation (CWE-327). Use a more secure technique for acquiring random values. tempFolder=pathList.first().source.absolutePath()+QString::fromStdString(text_slash)+QString::number(random); data/ultracopier-2.2.4.7/plugins/CopyEngine/Ultracopier-Spec/MkPath.cpp:243:134: [3] (random) random: This function is not sufficiently random for security-related functions such as key and nonce creation (CWE-327). Use a more secure technique for acquiring random values. INTERNALTYPEPATH tempFolder=FSabsolutePath(item.source)+text_slash+TransferThread::stringToInternalString(std::to_string(random)); data/ultracopier-2.2.4.7/plugins/CopyEngine/Ultracopier-Spec/MkPath.cpp:247:121: [3] (random) random: This function is not sufficiently random for security-related functions such as key and nonce creation (CWE-327). Use a more secure technique for acquiring random values. tempFolder=FSabsolutePath(item.source)+text_slash+TransferThread::stringToInternalString(std::to_string(random)); data/ultracopier-2.2.4.7/plugins/PluginLoader/catchcopy-v0002/pluginLoader.cpp:43:16: [3] (buffer) getenv: Environment variables are untrustable input if they can be set by an attacker. They can have any content and length, and the same variable can be set more than once (CWE-807, CWE-20). Check environment variables carefully before using them. char *arch=getenv("windir"); data/ultracopier-2.2.4.7/tools/unit-tester/copyEngineUnitTester.cpp:15:5: [3] (random) srand: This function is not sufficiently random for security-related functions such as key and nonce creation (CWE-327). Use a more secure technique for acquiring random values. srand ( time(NULL) ); data/ultracopier-2.2.4.7/CliParser.cpp:79:29: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if(transferFile.open(QIODevice::ReadOnly)) data/ultracopier-2.2.4.7/DebugEngine.cpp:153:22: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if(!lockFile.open(QIODevice::WriteOnly|QIODevice::Truncate|QIODevice::Unbuffered)) data/ultracopier-2.2.4.7/DebugEngine.cpp:160:25: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if(!logFile.open(QIODevice::ReadWrite|QIODevice::Truncate|QIODevice::Unbuffered)) data/ultracopier-2.2.4.7/EventDispatcher.cpp:565:16: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if(xmlFile.open(QIODevice::ReadOnly)) data/ultracopier-2.2.4.7/ExtraSocket.cpp:55:9: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(p, "%.2x00", str[i]); data/ultracopier-2.2.4.7/FacilityEngine.cpp:296:12: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). buffer.open(QBuffer::ReadWrite); data/ultracopier-2.2.4.7/FacilityEngine.cpp:322:18: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. unsigned char out[120*48*2*2]; data/ultracopier-2.2.4.7/LogThread.cpp:114:17: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if(!log.open(QIODevice::WriteOnly|QIODevice::Unbuffered)) data/ultracopier-2.2.4.7/LogThread.cpp:124:17: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if(!log.open(QIODevice::WriteOnly)) data/ultracopier-2.2.4.7/OptionDialog.cpp:1050:14: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). file.open(QIODevice::ReadWrite); data/ultracopier-2.2.4.7/OptionDialog.cpp:1082:16: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). buffer.open(QIODevice::ReadWrite); data/ultracopier-2.2.4.7/PluginsManager.cpp:218:24: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if(xmlMetaData.open(QIODevice::ReadOnly)) data/ultracopier-2.2.4.7/PluginsManager.cpp:719:13: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if(temp.open(QIODevice::ReadOnly)) data/ultracopier-2.2.4.7/PluginsManager.cpp:749:9: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(cppdata.data(),data.data(),data.size()); data/ultracopier-2.2.4.7/PluginsManager.cpp:825:52: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if(currentFile.open(QIODevice::ReadWrite)) data/ultracopier-2.2.4.7/catchcopy-windows-explorer-plugin/CatchCopy.cpp:69:5: [2] (buffer) wchar_t: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. wchar_t szModule[MAX_PATH]; data/ultracopier-2.2.4.7/catchcopy-windows-explorer-plugin/CatchCopy.cpp:96:5: [2] (buffer) wchar_t: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. wchar_t szModule[MAX_PATH]; data/ultracopier-2.2.4.7/catchcopy-windows-explorer-plugin/ClientCatchcopy.cpp:19:2: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char uname[1024]; data/ultracopier-2.2.4.7/catchcopy-windows-explorer-plugin/ClientCatchcopy.cpp:80:4: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(p, "%.2x00", str[i]); data/ultracopier-2.2.4.7/catchcopy-windows-explorer-plugin/ClientCatchcopy.cpp:100:3: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char uname[1024]; data/ultracopier-2.2.4.7/catchcopy-windows-explorer-plugin/ClientCatchcopy.cpp:103:3: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char temp_char_debug[1024]; data/ultracopier-2.2.4.7/catchcopy-windows-explorer-plugin/ClientCatchcopy.cpp:166:6: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char error_str[1024]; data/ultracopier-2.2.4.7/catchcopy-windows-explorer-plugin/ClientCatchcopy.cpp:167:6: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(error_str, "SetNamedPipeHandleState failed. GLE=%d\n", ::GetLastError() ); data/ultracopier-2.2.4.7/catchcopy-windows-explorer-plugin/Deque.h:9:2: [2] (buffer) wchar_t: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. wchar_t str[MAX_STR_LEN]; data/ultracopier-2.2.4.7/catchcopy-windows-explorer-plugin/Reg.cpp:66:2: [2] (buffer) wchar_t: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. wchar_t szBuffer[MAX_PATH]; data/ultracopier-2.2.4.7/catchcopy-windows-explorer-plugin/Reg.cpp:173:5: [2] (buffer) wchar_t: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. wchar_t szCLSID[MAX_PATH]; data/ultracopier-2.2.4.7/catchcopy-windows-explorer-plugin/Reg.cpp:176:5: [2] (buffer) wchar_t: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. wchar_t szSubkey[MAX_PATH]; data/ultracopier-2.2.4.7/catchcopy-windows-explorer-plugin/Reg.cpp:232:5: [2] (buffer) wchar_t: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. wchar_t szCLSID[MAX_PATH]; data/ultracopier-2.2.4.7/catchcopy-windows-explorer-plugin/Reg.cpp:235:5: [2] (buffer) wchar_t: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. wchar_t szSubkey[MAX_PATH]; data/ultracopier-2.2.4.7/catchcopy-windows-explorer-plugin/Reg.cpp:297:5: [2] (buffer) wchar_t: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. wchar_t szCLSID[MAX_PATH]; data/ultracopier-2.2.4.7/catchcopy-windows-explorer-plugin/Reg.cpp:300:5: [2] (buffer) wchar_t: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. wchar_t szSubkey[MAX_PATH]; data/ultracopier-2.2.4.7/catchcopy-windows-explorer-plugin/Reg.cpp:307:9: [2] (buffer) wchar_t: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. wchar_t szDefaultVal[260]; data/ultracopier-2.2.4.7/catchcopy-windows-explorer-plugin/Reg.cpp:361:5: [2] (buffer) wchar_t: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. wchar_t szCLSID[MAX_PATH]; data/ultracopier-2.2.4.7/catchcopy-windows-explorer-plugin/Reg.cpp:364:5: [2] (buffer) wchar_t: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. wchar_t szSubkey[MAX_PATH]; data/ultracopier-2.2.4.7/catchcopy-windows-explorer-plugin/Reg.cpp:371:9: [2] (buffer) wchar_t: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. wchar_t szDefaultVal[260]; data/ultracopier-2.2.4.7/cpp11addition.cpp:360:5: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(data.data()+oldsize,add.data(),add.size()); data/ultracopier-2.2.4.7/cpp11addition.cpp:370:9: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(data.data(),add,addSize); data/ultracopier-2.2.4.7/cpp11addition.cpp:375:5: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(data.data()+oldsize,add,addSize); data/ultracopier-2.2.4.7/cpp11addition.cpp:384:14: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. unsigned char char_array_4[4], char_array_3[3]; data/ultracopier-2.2.4.7/lib/qt-tar-xz/QTarDecode.cpp:138:13: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(newdata.data(),data.data()+512+offset,finalSize); data/ultracopier-2.2.4.7/lib/qt-tar-xz/xz_dec_bcj.c:407:2: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(b->out + b->out_pos, s->temp.buf, copy_size); data/ultracopier-2.2.4.7/lib/qt-tar-xz/xz_dec_bcj.c:449:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(b->out + b->out_pos, s->temp.buf, s->temp.size); data/ultracopier-2.2.4.7/lib/qt-tar-xz/xz_dec_bcj.c:469:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(s->temp.buf, b->out + b->out_pos, s->temp.size); data/ultracopier-2.2.4.7/lib/qt-tar-xz/xz_dec_lzma2.c:392:9: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(dict->buf + dict->pos, b->in + b->in_pos, copy_size); data/ultracopier-2.2.4.7/lib/qt-tar-xz/xz_dec_lzma2.c:402:13: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(b->out + b->out_pos, b->in + b->in_pos, data/ultracopier-2.2.4.7/lib/qt-tar-xz/xz_dec_lzma2.c:427:9: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(b->out + b->out_pos, dict->buf + dict->start, data/ultracopier-2.2.4.7/lib/qt-tar-xz/xz_dec_lzma2.c:862:9: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(s->temp.buf + s->temp.size, b->in + b->in_pos, tmp); data/ultracopier-2.2.4.7/lib/qt-tar-xz/xz_dec_lzma2.c:922:9: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(s->temp.buf, b->in + b->in_pos, in_avail); data/ultracopier-2.2.4.7/lib/qt-tar-xz/xz_dec_stream.c:162:5: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(s->temp.buf + s->temp.pos, b->in + b->in_pos, copy_size); data/ultracopier-2.2.4.7/libfm-qt-ultracopier/utilities.cpp:43:5: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(&origMethod, &tmpPtr, sizeof(tmpPtr)); data/ultracopier-2.2.4.7/libogg/framing.c:355:5: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(os->body_data+os->body_fill, iov[i].iov_base, iov[i].iov_len); data/ultracopier-2.2.4.7/libogg/framing.c:445:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(os->header,"OggS",4); data/ultracopier-2.2.4.7/libogg/framing.c:706:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char chksum[4]; data/ultracopier-2.2.4.7/libogg/framing.c:709:5: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(chksum,page+22,4); data/ultracopier-2.2.4.7/libogg/framing.c:724:7: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(page+22,chksum,4); data/ultracopier-2.2.4.7/libogg/framing.c:895:5: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(os->body_data+os->body_fill,body,bodysize); data/ultracopier-2.2.4.7/libogg/framing.c:1145:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(temp,og->header,og->header_len); data/ultracopier-2.2.4.7/libogg/framing.c:1149:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(temp,og->body,og->body_len); data/ultracopier-2.2.4.7/libogg/framing.c:1597:13: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(next,og.header,byteskipcount-byteskip); data/ultracopier-2.2.4.7/libogg/framing.c:1604:13: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(next,og.body,byteskipcount-byteskip); data/ultracopier-2.2.4.7/libogg/framing.c:1881:9: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(ogg_sync_buffer(&oy,og[i].header_len),og[i].header, data/ultracopier-2.2.4.7/libogg/framing.c:1884:9: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(ogg_sync_buffer(&oy,og[i].body_len),og[i].body,og[i].body_len); data/ultracopier-2.2.4.7/libogg/framing.c:1930:9: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(ogg_sync_buffer(&oy,og[i].header_len),og[i].header, data/ultracopier-2.2.4.7/libogg/framing.c:1933:9: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(ogg_sync_buffer(&oy,og[i].body_len),og[i].body,og[i].body_len); data/ultracopier-2.2.4.7/libogg/framing.c:1983:7: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(ogg_sync_buffer(&oy,og[1].header_len),og[1].header, data/ultracopier-2.2.4.7/libogg/framing.c:1989:7: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(ogg_sync_buffer(&oy,og[1].header_len),og[1].header+3, data/ultracopier-2.2.4.7/libogg/framing.c:1995:7: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(ogg_sync_buffer(&oy,og[1].header_len),og[1].header+23, data/ultracopier-2.2.4.7/libogg/framing.c:2002:7: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(ogg_sync_buffer(&oy,og[1].header_len),og[1].header+28, data/ultracopier-2.2.4.7/libogg/framing.c:2007:7: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(ogg_sync_buffer(&oy,og[1].body_len),og[1].body,1000); data/ultracopier-2.2.4.7/libogg/framing.c:2011:7: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(ogg_sync_buffer(&oy,og[1].body_len),og[1].body+1000, data/ultracopier-2.2.4.7/libogg/framing.c:2025:7: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(ogg_sync_buffer(&oy,og[1].header_len),og[1].header, data/ultracopier-2.2.4.7/libogg/framing.c:2029:7: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(ogg_sync_buffer(&oy,og[1].body_len),og[1].body, data/ultracopier-2.2.4.7/libogg/framing.c:2033:7: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(ogg_sync_buffer(&oy,og[1].header_len),og[1].header, data/ultracopier-2.2.4.7/libogg/framing.c:2039:7: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(ogg_sync_buffer(&oy,og[1].header_len),og[1].header+20, data/ultracopier-2.2.4.7/libogg/framing.c:2042:7: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(ogg_sync_buffer(&oy,og[1].body_len),og[1].body, data/ultracopier-2.2.4.7/libogg/framing.c:2057:7: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(ogg_sync_buffer(&oy,og[1].body_len),og[1].body, data/ultracopier-2.2.4.7/libogg/framing.c:2061:7: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(ogg_sync_buffer(&oy,og[1].header_len),og[1].header, data/ultracopier-2.2.4.7/libogg/framing.c:2065:7: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(ogg_sync_buffer(&oy,og[1].body_len),og[1].body, data/ultracopier-2.2.4.7/libogg/framing.c:2069:7: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(ogg_sync_buffer(&oy,og[2].header_len),og[2].header, data/ultracopier-2.2.4.7/libogg/framing.c:2076:7: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(ogg_sync_buffer(&oy,og[2].header_len),og[2].header+20, data/ultracopier-2.2.4.7/libogg/framing.c:2079:7: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(ogg_sync_buffer(&oy,og[2].body_len),og[2].body, data/ultracopier-2.2.4.7/libogg/framing.c:2093:7: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(ogg_sync_buffer(&oy,og[1].header_len),og[1].header, data/ultracopier-2.2.4.7/libogg/framing.c:2097:7: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(ogg_sync_buffer(&oy,og[1].body_len),og[1].body, data/ultracopier-2.2.4.7/libogg/framing.c:2101:7: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(ogg_sync_buffer(&oy,og[2].header_len),og[2].header, data/ultracopier-2.2.4.7/libogg/framing.c:2105:7: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(ogg_sync_buffer(&oy,og[2].header_len),og[2].header, data/ultracopier-2.2.4.7/libogg/framing.c:2111:7: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(ogg_sync_buffer(&oy,og[2].body_len),og[2].body, data/ultracopier-2.2.4.7/libogg/framing.c:2115:7: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(ogg_sync_buffer(&oy,og[3].header_len),og[3].header, data/ultracopier-2.2.4.7/libogg/framing.c:2119:7: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(ogg_sync_buffer(&oy,og[3].body_len),og[3].body, data/ultracopier-2.2.4.7/libogg/ogg.h:69:12: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. unsigned char header[282]; /* working space for header encode */ data/ultracopier-2.2.4.7/opusfile/info.c:79:20: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. if(_head!=NULL)memcpy(_head->mapping,_data+21,head.channel_count); data/ultracopier-2.2.4.7/opusfile/info.c:86:18: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. if(_head!=NULL)memcpy(_head,&head,head.mapping-(unsigned char *)&head); data/ultracopier-2.2.4.7/opusfile/info.c:148:17: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. ret=(char *)memcpy(ret,_s,sizeof(*ret)*_len); data/ultracopier-2.2.4.7/opusfile/info.c:220:7: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(_tags->user_comments[ncomments],_data,len); data/ultracopier-2.2.4.7/opusfile/info.c:270:7: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(_dst->user_comments[ncomments],_src->user_comments[ncomments],len); data/ultracopier-2.2.4.7/opusfile/info.c:303:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(comment,_tag,sizeof(*comment)*tag_len); data/ultracopier-2.2.4.7/opusfile/info.c:305:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(comment+tag_len+1,_value,sizeof(*comment)*(value_len+1)); data/ultracopier-2.2.4.7/opusfile/info.c:341:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(binary_suffix_data,_data,_len); data/ultracopier-2.2.4.7/opusfile/info.c:625:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(mime_type,_buf+i,sizeof(*mime_type)*mime_type_length); data/ultracopier-2.2.4.7/opusfile/info.c:636:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(description,_buf+i,sizeof(*description)*description_length); data/ultracopier-2.2.4.7/opusfile/internal.h:227:12: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. unsigned char od_mapping[OP_NCHANNELS_MAX]; data/ultracopier-2.2.4.7/opusfile/opusfile.c:96:5: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(data,_initial_data,_initial_bytes); data/ultracopier-2.2.4.7/opusfile/opusfile.c:1375:5: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(_of->od_mapping,head->mapping,sizeof(*head->mapping)*channel_count); data/ultracopier-2.2.4.7/opusfile/opusfile.c:1443:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(op_start,_of->op,sizeof(*op_start)*start_op_count); data/ultracopier-2.2.4.7/opusfile/opusfile.c:1455:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(_of->op,op_start,sizeof(*_of->op)*start_op_count); data/ultracopier-2.2.4.7/opusfile/opusfile.c:1530:5: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(buffer,_initial_data,_initial_bytes*sizeof(*buffer)); data/ultracopier-2.2.4.7/opusfile/opusfile.c:2819:9: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(_pcm,_of->od_buffer+nchannels*od_buffer_pos, data/ultracopier-2.2.4.7/opusfile/opusfile.c:3032:20: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. if(_nchannels==2)memcpy(_dst,_src,_nsamples*2*sizeof(*_src)); data/ultracopier-2.2.4.7/opusfile/opusfile.c:3270:20: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. if(_nchannels==2)memcpy(_dst,_src,_nsamples*2*sizeof(*_src)); data/ultracopier-2.2.4.7/opusfile/opusfile.h:268:12: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. unsigned char mapping[OPUS_CHANNEL_COUNT_MAX]; data/ultracopier-2.2.4.7/opusfile/stream.c:235:6: [2] (misc) fopen: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). fp=fopen(_path,_mode); data/ultracopier-2.2.4.7/opusfile/stream.c:297:3: [2] (buffer) memcpy: Does not check for buffer overflows when copying to destination (CWE-120). Make sure destination can always hold the source data. memcpy(_ptr,stream->data+pos,_buf_size); data/ultracopier-2.2.4.7/plugins-unmaintained/CopyEngine/Ultracopier-Qt/AvancedQFile.cpp:125:20: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). bool AvancedQFile::open(OpenMode mode) data/ultracopier-2.2.4.7/plugins-unmaintained/CopyEngine/Ultracopier-Qt/AvancedQFile.h:28:10: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). bool open(OpenMode mode); data/ultracopier-2.2.4.7/plugins-unmaintained/CopyEngine/Ultracopier-Qt/ListThread.cpp:1444:21: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if(transferFile.open(QIODevice::WriteOnly|QIODevice::Truncate)) data/ultracopier-2.2.4.7/plugins-unmaintained/CopyEngine/Ultracopier-Qt/ListThread.cpp:1504:21: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if(transferFile.open(QIODevice::ReadOnly)) data/ultracopier-2.2.4.7/plugins-unmaintained/CopyEngine/Ultracopier-Qt/ListThread.cpp:2376:21: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if(transferFile.open(QIODevice::WriteOnly|QIODevice::Truncate)) data/ultracopier-2.2.4.7/plugins-unmaintained/CopyEngine/Ultracopier-Qt/MkPath.cpp:436:17: [2] (buffer) wchar_t: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. wchar_t filePath[65535]; data/ultracopier-2.2.4.7/plugins-unmaintained/CopyEngine/Ultracopier-Qt/MkPath.cpp:485:17: [2] (buffer) wchar_t: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. wchar_t filePath[65535]; data/ultracopier-2.2.4.7/plugins-unmaintained/CopyEngine/Ultracopier-Qt/ReadThread.cpp:54:18: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). void ReadThread::open(const QFileInfo &file, const Ultracopier::CopyMode &mode) data/ultracopier-2.2.4.7/plugins-unmaintained/CopyEngine/Ultracopier-Qt/ReadThread.cpp:284:13: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if(file.open(openMode)) data/ultracopier-2.2.4.7/plugins-unmaintained/CopyEngine/Ultracopier-Qt/ReadThread.h:32:10: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). void open(const QFileInfo &file, const Ultracopier::CopyMode &mode); data/ultracopier-2.2.4.7/plugins-unmaintained/CopyEngine/Ultracopier-Qt/TransferThread.cpp:412:24: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). readThread.open(source.absoluteFilePath(),mode); data/ultracopier-2.2.4.7/plugins-unmaintained/CopyEngine/Ultracopier-Qt/TransferThread.cpp:436:29: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). writeThread.open(destination.absoluteFilePath(),size,osBuffer && (!osBufferLimited || (osBufferLimited && size<osBufferLimit)),sequentialBuffer,true); data/ultracopier-2.2.4.7/plugins-unmaintained/CopyEngine/Ultracopier-Qt/TransferThread.cpp:438:29: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). writeThread.open(destination.absoluteFilePath(),size,osBuffer && (!osBufferLimited || (osBufferLimited && size<osBufferLimit)),parallelBuffer,false); data/ultracopier-2.2.4.7/plugins-unmaintained/CopyEngine/Ultracopier-Qt/TransferThread.cpp:1709:17: [2] (buffer) wchar_t: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. wchar_t filePath[65535]; data/ultracopier-2.2.4.7/plugins-unmaintained/CopyEngine/Ultracopier-Qt/TransferThread.cpp:1758:17: [2] (buffer) wchar_t: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. wchar_t filePath[65535]; data/ultracopier-2.2.4.7/plugins-unmaintained/CopyEngine/Ultracopier-Qt/WriteThread.cpp:164:13: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if(file.open(flags)) data/ultracopier-2.2.4.7/plugins-unmaintained/CopyEngine/Ultracopier-Qt/WriteThread.cpp:272:19: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). void WriteThread::open(const QFileInfo &file,const uint64_t &startSize,const bool &buffer,const int &numberOfBlock,const bool &sequential) data/ultracopier-2.2.4.7/plugins-unmaintained/CopyEngine/Ultracopier-Qt/WriteThread.h:33:10: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). void open(const QFileInfo &file,const uint64_t &startSize,const bool &buffer,const int &numberOfBlock,const bool &sequential); data/ultracopier-2.2.4.7/plugins-unmaintained/SessionLoader/KDE4/sessionLoader.cpp:22:17: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if(link.open(QIODevice::WriteOnly)) data/ultracopier-2.2.4.7/plugins/CopyEngine/Ultracopier-Spec/FileErrorDialog.cpp:97:13: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char buf[1024]; data/ultracopier-2.2.4.7/plugins/CopyEngine/Ultracopier-Spec/ListThreadListChange.cpp:194:21: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if(transferFile.open(QIODevice::WriteOnly|QIODevice::Truncate)) data/ultracopier-2.2.4.7/plugins/CopyEngine/Ultracopier-Spec/ListThreadListChange.cpp:263:21: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if(transferFile.open(QIODevice::ReadOnly)) data/ultracopier-2.2.4.7/plugins/CopyEngine/Ultracopier-Spec/ListThreadListChange.cpp:382:21: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if(transferFile.open(QIODevice::WriteOnly|QIODevice::Truncate)) data/ultracopier-2.2.4.7/plugins/CopyEngine/Ultracopier-Spec/MkPath.cpp:654:17: [2] (buffer) wchar_t: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. wchar_t filePath[65535]; data/ultracopier-2.2.4.7/plugins/CopyEngine/Ultracopier-Spec/TransferThread.cpp:687:5: [2] (buffer) wchar_t: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. wchar_t pathCedit[32000]; data/ultracopier-2.2.4.7/plugins/CopyEngine/Ultracopier-Spec/TransferThread.cpp:1422:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char finalpath[MAX_PATH]; data/ultracopier-2.2.4.7/plugins/CopyEngine/Ultracopier-Spec/TransferThread.cpp:1424:5: [2] (buffer) strcat: Does not check for buffer overflows when concatenating to destination [MS-banned] (CWE-120). Consider using strcat_s, strncat, strlcat, or snprintf (warning: strncat is easily misused). Risk is low because the source is a constant string. strcat(finalpath,"\\*"); data/ultracopier-2.2.4.7/plugins/CopyEngine/Ultracopier-Spec/async/ReadThread.cpp:271:14: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). from = ::open(TransferThread::internalStringTostring(file).c_str(), O_RDONLY); data/ultracopier-2.2.4.7/plugins/CopyEngine/Ultracopier-Spec/async/WriteThread.cpp:239:12: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). to = ::open(TransferThread::internalStringTostring(file).c_str(), O_WRONLY | O_CREAT, 0755); data/ultracopier-2.2.4.7/plugins/Listener/catchcopy-v0002/catchcopy-api-0002/ExtraSocketCatchcopy.cpp:15:5: [2] (buffer) char: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. char uname[1024]; data/ultracopier-2.2.4.7/plugins/Listener/catchcopy-v0002/catchcopy-api-0002/ExtraSocketCatchcopy.cpp:33:9: [2] (buffer) sprintf: Does not check for buffer overflows (CWE-120). Use sprintf_s, snprintf, or vsnprintf. Risk is low because the source has a constant maximum length. sprintf(p, "%.2x00", str[i]); data/ultracopier-2.2.4.7/plugins/PluginLoader/catchcopy-v0002/pluginLoader.cpp:405:13: [2] (buffer) wchar_t: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. wchar_t arrayArg[65535]; data/ultracopier-2.2.4.7/plugins/SessionLoader/Windows/sessionLoader.cpp:26:5: [2] (buffer) wchar_t: Statically-sized arrays can be improperly restricted, leading to potential overflows or other issues (CWE-119!/CWE-120). Perform bounds checking, use functions that limit length, or ensure that the size is larger than the maximum possible length. wchar_t windowsString[255]; data/ultracopier-2.2.4.7/tools/unit-tester/copyEngineUnitTester.cpp:54:13: [2] (misc) open: Check when opening files - can an attacker redirect it (via symlinks), force the opening of special file type (e.g., device files), move things around to create a race condition, control its ancestors, or change its contents? (CWE-362). if(file.open(QIODevice::WriteOnly)) data/ultracopier-2.2.4.7/ExtraSocket.cpp:51:10: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). len= strlen(str); data/ultracopier-2.2.4.7/catchcopy-windows-explorer-plugin/ClientCatchcopy.cpp:27:47: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). m_pipename = (char *) malloc(sizeof(prefix)+strlen(data)+2); data/ultracopier-2.2.4.7/catchcopy-windows-explorer-plugin/ClientCatchcopy.cpp:30:39: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). strcat_s(m_pipename, sizeof(prefix)+strlen(data)+2,data); data/ultracopier-2.2.4.7/catchcopy-windows-explorer-plugin/ClientCatchcopy.cpp:72:7: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). len= strlen(str); data/ultracopier-2.2.4.7/catchcopy-windows-explorer-plugin/ClientCatchcopy.cpp:271:41: [1] (buffer) wcslen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). data_size+=(int)sizeof(wchar_t)*(int)wcslen(order.at(i)); data/ultracopier-2.2.4.7/opusfile/info.c:250:42: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). _dst->vendor=op_strdup_with_len(vendor,strlen(vendor)); data/ultracopier-2.2.4.7/opusfile/info.c:296:11: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). tag_len=strlen(_tag); data/ultracopier-2.2.4.7/opusfile/info.c:297:13: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). value_len=strlen(_value); data/ultracopier-2.2.4.7/opusfile/info.c:320:20: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). comment_len=(int)strlen(_comment); data/ultracopier-2.2.4.7/opusfile/info.c:349:11: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). tag_len=strlen(_tag_name); data/ultracopier-2.2.4.7/opusfile/info.c:367:11: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). tag_len=strlen(_tag); data/ultracopier-2.2.4.7/opusfile/info.c:388:11: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). tag_len=strlen(_tag); data/ultracopier-2.2.4.7/opusfile/info.c:742:14: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). tag_length=strlen(_tag); data/ultracopier-2.2.4.7/opusfile/opusfile.c:151:32: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). nbytes=(int)(*_of->callbacks.read)(_of->stream,buffer,_nbytes); data/ultracopier-2.2.4.7/opusfile/opusfile.h:904:17: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). op_read_func read; data/ultracopier-2.2.4.7/opusfile/stream.c:142:7: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). len=strlen(_src); data/ultracopier-2.2.4.7/plugins-unmaintained/CopyEngine/Ultracopier-Qt/AvancedQFile.cpp:200:26: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). QByteArray AvancedQFile::read(qint64 maxlen) data/ultracopier-2.2.4.7/plugins-unmaintained/CopyEngine/Ultracopier-Qt/AvancedQFile.h:35:16: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). QByteArray read(qint64 maxlen); data/ultracopier-2.2.4.7/plugins-unmaintained/CopyEngine/Ultracopier-Qt/ReadThread.cpp:180:25: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). blockArray=file.read(blockSize); data/ultracopier-2.2.4.7/plugins-unmaintained/CopyEngine/Ultracopier-Qt/ReadThread.cpp:415:25: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). blockArray=file.read(blockSize); data/ultracopier-2.2.4.7/plugins-unmaintained/CopyEngine/Ultracopier-Qt/TransferThread.cpp:958:13: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). return (read && write); data/ultracopier-2.2.4.7/plugins-unmaintained/CopyEngine/Ultracopier-Qt/WriteThread.cpp:673:25: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). blockArray=file.read(blockSize); data/ultracopier-2.2.4.7/plugins/CopyEngine/Ultracopier-Spec/async/ReadThread.cpp:521:22: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). sizeReaden=::read(from,data,blockSize); data/ultracopier-2.2.4.7/plugins/CopyEngine/Ultracopier-Spec/async/TransferThreadAsync.cpp:1334:13: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). return (read && write); data/ultracopier-2.2.4.7/plugins/CopyEngine/Ultracopier-Spec/async/TransferThreadAsync.cpp:1420:13: [1] (buffer) wcslen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). int len = wcslen(szPath)+1; data/ultracopier-2.2.4.7/plugins/Listener/catchcopy-v0002/catchcopy-api-0002/ClientCatchcopy.cpp:164:32: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). data.append(socket.read(dataSize-data.size())); data/ultracopier-2.2.4.7/plugins/Listener/catchcopy-v0002/catchcopy-api-0002/ExtraSocketCatchcopy.cpp:29:10: [1] (buffer) strlen: Does not handle strings that are not \0-terminated; if given one it may perform an over-read (it could cause a crash if unprotected) (CWE-126). len= strlen(str); data/ultracopier-2.2.4.7/plugins/Listener/catchcopy-v0002/catchcopy-api-0002/ServerCatchcopy.cpp:290:59: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). clientList[index].data.append(socket->read(clientList.at(index).dataSize-clientList.at(index).data.size())); data/ultracopier-2.2.4.7/test-client-catchcopy/catchcopy-api-0002/ClientCatchcopy.cpp:165:32: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). data.append(socket.read(dataSize-data.size())); data/ultracopier-2.2.4.7/test-client-catchcopy/catchcopy-api-0002/ServerCatchcopy.cpp:248:44: [1] (buffer) read: Check buffer boundaries if used in a loop including recursive loops (CWE-120, CWE-20). ClientList[index].data.append(socket->read(ClientList.at(index).dataSize-ClientList.at(index).data.size())); ANALYSIS SUMMARY: Hits = 212 Lines analyzed = 84001 in approximately 2.14 seconds (39293 lines/second) Physical Source Lines of Code (SLOC) = 66482 Hits@level = [0] 145 [1] 30 [2] 145 [3] 6 [4] 23 [5] 8 Hits@level+ = [0+] 357 [1+] 212 [2+] 182 [3+] 37 [4+] 31 [5+] 8 Hits/KSLOC@level+ = [0+] 5.36987 [1+] 3.18883 [2+] 2.73758 [3+] 0.556542 [4+] 0.466292 [5+] 0.120333 Dot directories skipped = 1 (--followdotdir overrides) Minimum risk level = 1 Not every hit is necessarily a security vulnerability. There may be other security vulnerabilities; review your code! See 'Secure Programming HOWTO' (https://dwheeler.com/secure-programs) for more information.