# 389-ds-base-3.2.0.202603022128gitbc05c2774-pr7294

## List of Findings

    Error: SHELLCHECK_WARNING (CWE-563): [#def1]
    /usr/lib64/dirsrv/bin/jemalloc-config:27:1: warning[SC2034]: prefix appears unused. Verify use (or export if used externally).
    #   25|   }
    #   26|
    #   27|-> prefix="/usr"
    #   28|   exec_prefix="/usr"
    #   29|

    Error: SHELLCHECK_WARNING (CWE-563): [#def2]
    /usr/lib64/dirsrv/bin/jemalloc-config:28:1: warning[SC2034]: exec_prefix appears unused. Verify use (or export if used externally).
    #   26|
    #   27|   prefix="/usr"
    #   28|-> exec_prefix="/usr"
    #   29|
    #   30|   case "$1" in

    Error: SHELLCHECK_WARNING (CWE-563): [#def3]
    /usr/lib64/dirsrv/bin/jemalloc.sh:3:1: warning[SC2034]: prefix appears unused. Verify use (or export if used externally).
    #    1|   #!/usr/bin/sh
    #    2|
    #    3|-> prefix=/usr
    #    4|   exec_prefix=/usr
    #    5|   libdir=/usr/lib64/dirsrv/lib

    Error: SHELLCHECK_WARNING (CWE-563): [#def4]
    /usr/lib64/dirsrv/bin/jemalloc.sh:4:1: warning[SC2034]: exec_prefix appears unused. Verify use (or export if used externally).
    #    2|
    #    3|   prefix=/usr
    #    4|-> exec_prefix=/usr
    #    5|   libdir=/usr/lib64/dirsrv/lib
    #    6|

    Error: COMPILER_WARNING: [#def5]
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/plugins/acl/acl.c: scope_hint: In function 'acl__attr_cached_result'
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/plugins/acl/acl.c:3673:13: warning[-Wunused-but-set-variable=]: variable 'eval_read' set but not used
    # 3673 |         int eval_read = 0;
    #      |             ^~~~~~~~~
    # 3671|
    # 3672|       if (attr == NULL) {
    # 3673|->         int eval_read = 0;
    # 3674|           /*
    # 3675|           **  Do I have access to at least one attribute, then I have

    Error: COMPILER_WARNING: [#def6]
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/plugins/collation/orfilter.c: scope_hint: In function 'or_filter_create'
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/plugins/collation/orfilter.c:513:13: warning[-Wunused-but-set-variable=]: variable 'reusable' set but not used
    #  513 |         int reusable = MRF_ANY_TYPE;
    #      |             ^~~~~~~~
    #  511|           int op = SLAPI_OP_EQUAL;
    #  512|           struct berval bv;
    #  513|->         int reusable = MRF_ANY_TYPE;
    #  514|
    #  515|           slapi_log_err(SLAPI_LOG_FILTER, COLLATE_PLUGIN_SUBSYSTEM,

    Error: COMPILER_WARNING: [#def7]
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/plugins/cos/cos_cache.c: scope_hint: In function 'cos_cache_cmp_attr'
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/plugins/cos/cos_cache.c:3061:9: warning[-Wunused-but-set-variable=]: variable 'index' set but not used
    # 3061 |     int index = 0;
    #      |         ^~~~~
    # 3059|   {
    # 3060|       int ret = 0;
    # 3061|->     int index = 0;
    # 3062|       cosAttrValue *pAttrVal = pAttr->pAttrValue;
    # 3063|       char *the_cmp = (char *)slapi_value_get_string(test_this);

    Error: COMPILER_WARNING: [#def8]
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/plugins/cos/cos_cache.c: scope_hint: In function 'cos_cache_cos_2_slapi_valueset'
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/plugins/cos/cos_cache.c:3095:9: warning[-Wunused-but-set-variable=]: variable 'index' set but not used
    # 3095 |     int index = 0;
    #      |         ^~~~~
    # 3093|   {
    # 3094|       int ret = 0;
    # 3095|->     int index = 0;
    # 3096|       cosAttrValue *pAttrVal = pAttr->pAttrValue;
    # 3097|       int add_mode = 0;

    Error: CPPCHECK_WARNING (CWE-457): [#def9]
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/plugins/deref/deref.c:645: warning[uninitvar]: Uninitialized variable: sv
    #  643|                               idx = slapi_valueset_first_value(results, &sv);
    #  644|                           }
    #  645|->                         for (; results && sv; idx = slapi_valueset_next_value(results, idx, &sv)) {
    #  646|                               const struct berval *bv = slapi_value_get_berval(sv);
    #  647|                               if (needattrvals) {

    Error: CPPCHECK_WARNING (CWE-457): [#def10]
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/plugins/deref/deref.c:747: warning[uninitvar]: Uninitialized variable: sv
    #  745|               idx = slapi_valueset_first_value(results, &sv);
    #  746|           }
    #  747|->         for (; results && sv; idx = slapi_valueset_next_value(results, idx, &sv)) {
    #  748|               const char *derefdn = slapi_value_get_string(sv);
    #  749|

    Error: COMPILER_WARNING: [#def11]
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/plugins/memberof/memberof.c: scope_hint: In function 'merge_ancestors'
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/plugins/memberof/memberof.c:3279:9: warning[-Wunused-but-set-variable=]: variable 'merged_cnt' set but not used
    # 3279 |     int merged_cnt = 0;
    #      |         ^~~~~~~~~~
    # 3277|       Slapi_ValueSet *v2_groupvals = *((memberof_get_groups_data *)v2)->groupvals;
    # 3278|       Slapi_ValueSet *v2_group_norm_vals = *((memberof_get_groups_data *)v2)->group_norm_vals;
    # 3279|->     int merged_cnt = 0;
    # 3280|
    # 3281|   #if MEMBEROF_CACHE_DEBUG

    Error: CPPCHECK_WARNING (CWE-476): [#def12]
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/plugins/replication/repl5_ruv.c:1025: warning[nullPointer]: Possible null pointer dereference: bv
    # 1023|                       ruvelem->csn == NULL ? "" : csn_as_string(ruvelem->csn, PR_FALSE, csnStr2));
    # 1024|       } else {
    # 1025|->         bv->bv_val = slapi_ch_smprintf(fmtstr,
    # 1026|                                          prefix_ruvcsn, ruvelem->rid,
    # 1027|                                          ruvelem->replica_purl == NULL ? "" : " ",

    Error: CPPCHECK_WARNING (CWE-476): [#def13]
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/plugins/replication/repl5_ruv.c:1033: warning[nullPointer]: Possible null pointer dereference: bv
    # 1031|                                          ruvelem->csn == NULL ? "" : " ",
    # 1032|                                          ruvelem->csn == NULL ? "" : csn_as_string(ruvelem->csn, PR_FALSE, csnStr2));
    # 1033|->         bv->bv_len = strlen(bv->bv_val);
    # 1034|       }
    # 1035|   }

    Error: COMPILER_WARNING (CWE-704): [#def14]
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/plugins/replication/urp_tombstone.c: scope_hint: In function 'get_valid_parent_for_conflict'
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/plugins/replication/urp_tombstone.c:62:17: warning[-Wdiscarded-qualifiers]: assignment discards 'const' qualifier from pointer target type
    #   60|
    #   61|       if (replconflict) {
    #   62|->         validdn = strstr(replconflict, " (ADD) ");
    #   63|           if (validdn) {
    #   64|               validdn += 7;

    Error: COMPILER_WARNING (CWE-704): [#def15]
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/plugins/replication/urp_tombstone.c: scope_hint: In function 'conflict_to_tombstone'
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/plugins/replication/urp_tombstone.c:212:20: warning[-Wdiscarded-qualifiers]: assignment discards 'const' qualifier from pointer target type
    #  210|
    #  211|       if (replconflict) {
    #  212|->         conflictdn = strstr(replconflict, " (ADD) ");
    #  213|           if (conflictdn == NULL) {
    #  214|               /* error, wrong type of conflict */

    Error: COMPILER_WARNING (CWE-704): [#def16]
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/plugins/replication/windows_protocol_util.c: scope_hint: In function 'extract_guid_from_tombstone_dn'
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/plugins/replication/windows_protocol_util.c:3374:23: warning[-Wdiscarded-qualifiers]: assignment discards 'const' qualifier from pointer target type
    # 3372|
    # 3373|       /* First find the 'DEL:' */
    # 3374|->     if ((colon_offset = strchr(dn, ':'))) {
    # 3375|           /* Then scan forward to the next ',' */
    # 3376|           comma_offset = strchr(colon_offset, ',');

    Error: COMPILER_WARNING (CWE-704): [#def17]
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/plugins/uiduniq/uid.c: scope_hint: In function 'preop_add'
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/plugins/uiduniq/uid.c:1033:28: warning[-Wdiscarded-qualifiers]: initialization discards 'const' qualifier from pointer target type
    # 1031|
    # 1032|       for (i = 0; attrNames && attrNames[i]; i++) {
    # 1033|->         char *attr_match = strchr(attrNames[i], ':');
    # 1034|           if (attr_match != NULL) {
    # 1035|               attr_match[0] = '\0';

    Error: COMPILER_WARNING (CWE-704): [#def18]
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/plugins/uiduniq/uid.c: scope_hint: In function 'preop_modify'
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/plugins/uiduniq/uid.c:1181:32: warning[-Wdiscarded-qualifiers]: initialization discards 'const' qualifier from pointer target type
    # 1179|           mod = *mods;
    # 1180|           for (i = 0; attrNames && attrNames[i]; i++) {
    # 1181|->             char *attr_match = strchr(attrNames[i], ':');
    # 1182|               if (attr_match != NULL) {
    # 1183|                   attr_match[0] = '\0';

    Error: GCC_ANALYZER_WARNING (CWE-126): [#def19]
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/slapd/accesslog.c: scope_hint: In function 'json_obj_add_str'
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/slapd/accesslog.c:30:9: warning[-Wanalyzer-out-of-bounds]: stack-based buffer over-read
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/slapd/accesslog.c: scope_hint: In function 'json_obj_add_str'
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/slapd/accesslog.c:30:9: note: read of 433 bytes from after the end of 'local_time'
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/slapd/accesslog.c:30:9: note: valid subscripts for 'local_time' are '[0]' to '[74]'
    #   28|       if (strlen(value) > MAX_ELEMENT_SIZE) {
    #   29|           /* we use -4 to leave room for the NULL terminator */
    #   30|->         memcpy(&val_buffer, value, MAX_ELEMENT_SIZE-4);
    #   31|           memcpy(&val_buffer[MAX_ELEMENT_SIZE-4], "...", 3);
    #   32|       } else {

    Error: COMPILER_WARNING (CWE-704): [#def20]
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/slapd/attr.c: scope_hint: In function 'slapi_attr_init_locking_optional'
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/slapd/attr.c:329:29: warning[-Wdiscarded-qualifiers]: assignment discards 'const' qualifier from pointer target type
    #  329 |                 attroptions = strchr(type, ';');
    #      |                             ^
    #  327|
    #  328|               if (NULL != type) {
    #  329|->                 attroptions = strchr(type, ';');
    #  330|               }
    #  331|

    Error: COMPILER_WARNING (CWE-704): [#def21]
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/slapd/attrsyntax.c: scope_hint: In function 'attr_syntax_exists'
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/slapd/attrsyntax.c:586:12: warning[-Wdiscarded-qualifiers]: assignment discards 'const' qualifier from pointer target type
    #  584|
    #  585|       /* Ignore any attribute subtypes. */
    #  586|->     if ((p = strchr(attr_name, ';'))) {
    #  587|           int check_attr_len = p - attr_name + 1;
    #  588|

    Error: COMPILER_WARNING (CWE-1023): [#def22]
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/slapd/auth.c:424:5: warning[-Wswitch]: enumeration value ‘ssl_grp_ec_curve25519’ not handled in switch
    #  422|       }
    #  423|       /* Check that PQC keaGroup is KEM */
    #  424|->     switch (sci->keaGroup) {
    #  425|           case ssl_grp_kem_secp256r1mlkem768:
    #  426|           case ssl_grp_kem_secp384r1mlkem1024:

    Error: COMPILER_WARNING (CWE-1023): [#def23]
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/slapd/auth.c:424:5: warning[-Wswitch]: enumeration value ‘ssl_grp_ec_secp160k1’ not handled in switch
    #  422|       }
    #  423|       /* Check that PQC keaGroup is KEM */
    #  424|->     switch (sci->keaGroup) {
    #  425|           case ssl_grp_kem_secp256r1mlkem768:
    #  426|           case ssl_grp_kem_secp384r1mlkem1024:

    Error: COMPILER_WARNING (CWE-1023): [#def24]
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/slapd/auth.c:424:5: warning[-Wswitch]: enumeration value ‘ssl_grp_ec_secp160r1’ not handled in switch
    #  422|       }
    #  423|       /* Check that PQC keaGroup is KEM */
    #  424|->     switch (sci->keaGroup) {
    #  425|           case ssl_grp_kem_secp256r1mlkem768:
    #  426|           case ssl_grp_kem_secp384r1mlkem1024:

    Error: COMPILER_WARNING (CWE-1023): [#def25]
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/slapd/auth.c:424:5: warning[-Wswitch]: enumeration value ‘ssl_grp_ec_secp160r2’ not handled in switch
    #  422|       }
    #  423|       /* Check that PQC keaGroup is KEM */
    #  424|->     switch (sci->keaGroup) {
    #  425|           case ssl_grp_kem_secp256r1mlkem768:
    #  426|           case ssl_grp_kem_secp384r1mlkem1024:

    Error: COMPILER_WARNING (CWE-1023): [#def26]
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/slapd/auth.c:424:5: warning[-Wswitch]: enumeration value ‘ssl_grp_ec_secp192k1’ not handled in switch
    #  422|       }
    #  423|       /* Check that PQC keaGroup is KEM */
    #  424|->     switch (sci->keaGroup) {
    #  425|           case ssl_grp_kem_secp256r1mlkem768:
    #  426|           case ssl_grp_kem_secp384r1mlkem1024:

    Error: COMPILER_WARNING (CWE-1023): [#def27]
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/slapd/auth.c:424:5: warning[-Wswitch]: enumeration value ‘ssl_grp_ec_secp192r1’ not handled in switch
    #  422|       }
    #  423|       /* Check that PQC keaGroup is KEM */
    #  424|->     switch (sci->keaGroup) {
    #  425|           case ssl_grp_kem_secp256r1mlkem768:
    #  426|           case ssl_grp_kem_secp384r1mlkem1024:

    Error: COMPILER_WARNING (CWE-1023): [#def28]
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/slapd/auth.c:424:5: warning[-Wswitch]: enumeration value ‘ssl_grp_ec_secp224k1’ not handled in switch
    #  422|       }
    #  423|       /* Check that PQC keaGroup is KEM */
    #  424|->     switch (sci->keaGroup) {
    #  425|           case ssl_grp_kem_secp256r1mlkem768:
    #  426|           case ssl_grp_kem_secp384r1mlkem1024:

    Error: COMPILER_WARNING (CWE-1023): [#def29]
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/slapd/auth.c:424:5: warning[-Wswitch]: enumeration value ‘ssl_grp_ec_secp224r1’ not handled in switch
    #  422|       }
    #  423|       /* Check that PQC keaGroup is KEM */
    #  424|->     switch (sci->keaGroup) {
    #  425|           case ssl_grp_kem_secp256r1mlkem768:
    #  426|           case ssl_grp_kem_secp384r1mlkem1024:

    Error: COMPILER_WARNING (CWE-1023): [#def30]
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/slapd/auth.c:424:5: warning[-Wswitch]: enumeration value ‘ssl_grp_ec_secp256k1’ not handled in switch
    #  422|       }
    #  423|       /* Check that PQC keaGroup is KEM */
    #  424|->     switch (sci->keaGroup) {
    #  425|           case ssl_grp_kem_secp256r1mlkem768:
    #  426|           case ssl_grp_kem_secp384r1mlkem1024:

    Error: COMPILER_WARNING (CWE-1023): [#def31]
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/slapd/auth.c:424:5: warning[-Wswitch]: enumeration value ‘ssl_grp_ec_secp256r1’ not handled in switch
    #  422|       }
    #  423|       /* Check that PQC keaGroup is KEM */
    #  424|->     switch (sci->keaGroup) {
    #  425|           case ssl_grp_kem_secp256r1mlkem768:
    #  426|           case ssl_grp_kem_secp384r1mlkem1024:

    Error: COMPILER_WARNING (CWE-1023): [#def32]
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/slapd/auth.c:424:5: warning[-Wswitch]: enumeration value ‘ssl_grp_ec_secp384r1’ not handled in switch
    #  422|       }
    #  423|       /* Check that PQC keaGroup is KEM */
    #  424|->     switch (sci->keaGroup) {
    #  425|           case ssl_grp_kem_secp256r1mlkem768:
    #  426|           case ssl_grp_kem_secp384r1mlkem1024:

    Error: COMPILER_WARNING (CWE-1023): [#def33]
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/slapd/auth.c:424:5: warning[-Wswitch]: enumeration value ‘ssl_grp_ec_secp521r1’ not handled in switch
    #  422|       }
    #  423|       /* Check that PQC keaGroup is KEM */
    #  424|->     switch (sci->keaGroup) {
    #  425|           case ssl_grp_kem_secp256r1mlkem768:
    #  426|           case ssl_grp_kem_secp384r1mlkem1024:

    Error: COMPILER_WARNING (CWE-1023): [#def34]
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/slapd/auth.c: scope_hint: In function ‘check_pqc’
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/slapd/auth.c:424:5: warning[-Wswitch]: enumeration value ‘ssl_grp_ec_sect163k1’ not handled in switch
    #  424 |     switch (sci->keaGroup) {
    #      |     ^~~~~~
    #  422|       }
    #  423|       /* Check that PQC keaGroup is KEM */
    #  424|->     switch (sci->keaGroup) {
    #  425|           case ssl_grp_kem_secp256r1mlkem768:
    #  426|           case ssl_grp_kem_secp384r1mlkem1024:

    Error: COMPILER_WARNING (CWE-1023): [#def35]
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/slapd/auth.c:424:5: warning[-Wswitch]: enumeration value ‘ssl_grp_ec_sect163r1’ not handled in switch
    #  422|       }
    #  423|       /* Check that PQC keaGroup is KEM */
    #  424|->     switch (sci->keaGroup) {
    #  425|           case ssl_grp_kem_secp256r1mlkem768:
    #  426|           case ssl_grp_kem_secp384r1mlkem1024:

    Error: COMPILER_WARNING (CWE-1023): [#def36]
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/slapd/auth.c:424:5: warning[-Wswitch]: enumeration value ‘ssl_grp_ec_sect163r2’ not handled in switch
    #  422|       }
    #  423|       /* Check that PQC keaGroup is KEM */
    #  424|->     switch (sci->keaGroup) {
    #  425|           case ssl_grp_kem_secp256r1mlkem768:
    #  426|           case ssl_grp_kem_secp384r1mlkem1024:

    Error: COMPILER_WARNING (CWE-1023): [#def37]
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/slapd/auth.c:424:5: warning[-Wswitch]: enumeration value ‘ssl_grp_ec_sect193r1’ not handled in switch
    #  422|       }
    #  423|       /* Check that PQC keaGroup is KEM */
    #  424|->     switch (sci->keaGroup) {
    #  425|           case ssl_grp_kem_secp256r1mlkem768:
    #  426|           case ssl_grp_kem_secp384r1mlkem1024:

    Error: COMPILER_WARNING (CWE-1023): [#def38]
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/slapd/auth.c:424:5: warning[-Wswitch]: enumeration value ‘ssl_grp_ec_sect193r2’ not handled in switch
    #  422|       }
    #  423|       /* Check that PQC keaGroup is KEM */
    #  424|->     switch (sci->keaGroup) {
    #  425|           case ssl_grp_kem_secp256r1mlkem768:
    #  426|           case ssl_grp_kem_secp384r1mlkem1024:

    Error: COMPILER_WARNING (CWE-1023): [#def39]
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/slapd/auth.c:424:5: warning[-Wswitch]: enumeration value ‘ssl_grp_ec_sect233k1’ not handled in switch
    #  422|       }
    #  423|       /* Check that PQC keaGroup is KEM */
    #  424|->     switch (sci->keaGroup) {
    #  425|           case ssl_grp_kem_secp256r1mlkem768:
    #  426|           case ssl_grp_kem_secp384r1mlkem1024:

    Error: COMPILER_WARNING (CWE-1023): [#def40]
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/slapd/auth.c:424:5: warning[-Wswitch]: enumeration value ‘ssl_grp_ec_sect233r1’ not handled in switch
    #  422|       }
    #  423|       /* Check that PQC keaGroup is KEM */
    #  424|->     switch (sci->keaGroup) {
    #  425|           case ssl_grp_kem_secp256r1mlkem768:
    #  426|           case ssl_grp_kem_secp384r1mlkem1024:

    Error: COMPILER_WARNING (CWE-1023): [#def41]
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/slapd/auth.c:424:5: warning[-Wswitch]: enumeration value ‘ssl_grp_ec_sect239k1’ not handled in switch
    #  422|       }
    #  423|       /* Check that PQC keaGroup is KEM */
    #  424|->     switch (sci->keaGroup) {
    #  425|           case ssl_grp_kem_secp256r1mlkem768:
    #  426|           case ssl_grp_kem_secp384r1mlkem1024:

    Error: COMPILER_WARNING (CWE-1023): [#def42]
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/slapd/auth.c:424:5: warning[-Wswitch]: enumeration value ‘ssl_grp_ec_sect283k1’ not handled in switch
    #  422|       }
    #  423|       /* Check that PQC keaGroup is KEM */
    #  424|->     switch (sci->keaGroup) {
    #  425|           case ssl_grp_kem_secp256r1mlkem768:
    #  426|           case ssl_grp_kem_secp384r1mlkem1024:

    Error: COMPILER_WARNING (CWE-1023): [#def43]
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/slapd/auth.c:424:5: warning[-Wswitch]: enumeration value ‘ssl_grp_ec_sect283r1’ not handled in switch
    #  422|       }
    #  423|       /* Check that PQC keaGroup is KEM */
    #  424|->     switch (sci->keaGroup) {
    #  425|           case ssl_grp_kem_secp256r1mlkem768:
    #  426|           case ssl_grp_kem_secp384r1mlkem1024:

    Error: COMPILER_WARNING (CWE-1023): [#def44]
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/slapd/auth.c:424:5: warning[-Wswitch]: enumeration value ‘ssl_grp_ec_sect409k1’ not handled in switch
    #  422|       }
    #  423|       /* Check that PQC keaGroup is KEM */
    #  424|->     switch (sci->keaGroup) {
    #  425|           case ssl_grp_kem_secp256r1mlkem768:
    #  426|           case ssl_grp_kem_secp384r1mlkem1024:

    Error: COMPILER_WARNING (CWE-1023): [#def45]
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/slapd/auth.c:424:5: warning[-Wswitch]: enumeration value ‘ssl_grp_ec_sect409r1’ not handled in switch
    #  422|       }
    #  423|       /* Check that PQC keaGroup is KEM */
    #  424|->     switch (sci->keaGroup) {
    #  425|           case ssl_grp_kem_secp256r1mlkem768:
    #  426|           case ssl_grp_kem_secp384r1mlkem1024:

    Error: COMPILER_WARNING (CWE-1023): [#def46]
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/slapd/auth.c:424:5: warning[-Wswitch]: enumeration value ‘ssl_grp_ec_sect571k1’ not handled in switch
    #  422|       }
    #  423|       /* Check that PQC keaGroup is KEM */
    #  424|->     switch (sci->keaGroup) {
    #  425|           case ssl_grp_kem_secp256r1mlkem768:
    #  426|           case ssl_grp_kem_secp384r1mlkem1024:

    Error: COMPILER_WARNING (CWE-1023): [#def47]
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/slapd/auth.c:424:5: warning[-Wswitch]: enumeration value ‘ssl_grp_ec_sect571r1’ not handled in switch
    #  422|       }
    #  423|       /* Check that PQC keaGroup is KEM */
    #  424|->     switch (sci->keaGroup) {
    #  425|           case ssl_grp_kem_secp256r1mlkem768:
    #  426|           case ssl_grp_kem_secp384r1mlkem1024:

    Error: COMPILER_WARNING (CWE-1023): [#def48]
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/slapd/auth.c:424:5: warning[-Wswitch]: enumeration value ‘ssl_grp_ffdhe_2048’ not handled in switch
    #  422|       }
    #  423|       /* Check that PQC keaGroup is KEM */
    #  424|->     switch (sci->keaGroup) {
    #  425|           case ssl_grp_kem_secp256r1mlkem768:
    #  426|           case ssl_grp_kem_secp384r1mlkem1024:

    Error: COMPILER_WARNING (CWE-1023): [#def49]
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/slapd/auth.c:424:5: warning[-Wswitch]: enumeration value ‘ssl_grp_ffdhe_3072’ not handled in switch
    #  422|       }
    #  423|       /* Check that PQC keaGroup is KEM */
    #  424|->     switch (sci->keaGroup) {
    #  425|           case ssl_grp_kem_secp256r1mlkem768:
    #  426|           case ssl_grp_kem_secp384r1mlkem1024:

    Error: COMPILER_WARNING (CWE-1023): [#def50]
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/slapd/auth.c:424:5: warning[-Wswitch]: enumeration value ‘ssl_grp_ffdhe_4096’ not handled in switch
    #  422|       }
    #  423|       /* Check that PQC keaGroup is KEM */
    #  424|->     switch (sci->keaGroup) {
    #  425|           case ssl_grp_kem_secp256r1mlkem768:
    #  426|           case ssl_grp_kem_secp384r1mlkem1024:

    Error: COMPILER_WARNING (CWE-1023): [#def51]
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/slapd/auth.c:424:5: warning[-Wswitch]: enumeration value ‘ssl_grp_ffdhe_6144’ not handled in switch
    #  422|       }
    #  423|       /* Check that PQC keaGroup is KEM */
    #  424|->     switch (sci->keaGroup) {
    #  425|           case ssl_grp_kem_secp256r1mlkem768:
    #  426|           case ssl_grp_kem_secp384r1mlkem1024:

    Error: COMPILER_WARNING (CWE-1023): [#def52]
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/slapd/auth.c:424:5: warning[-Wswitch]: enumeration value ‘ssl_grp_ffdhe_8192’ not handled in switch
    #  422|       }
    #  423|       /* Check that PQC keaGroup is KEM */
    #  424|->     switch (sci->keaGroup) {
    #  425|           case ssl_grp_kem_secp256r1mlkem768:
    #  426|           case ssl_grp_kem_secp384r1mlkem1024:

    Error: COMPILER_WARNING (CWE-1023): [#def53]
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/slapd/auth.c:424:5: warning[-Wswitch]: enumeration value ‘ssl_grp_ffdhe_custom’ not handled in switch
    #  422|       }
    #  423|       /* Check that PQC keaGroup is KEM */
    #  424|->     switch (sci->keaGroup) {
    #  425|           case ssl_grp_kem_secp256r1mlkem768:
    #  426|           case ssl_grp_kem_secp384r1mlkem1024:

    Error: COMPILER_WARNING (CWE-1023): [#def54]
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/slapd/auth.c:424:5: warning[-Wswitch]: enumeration value ‘ssl_grp_none’ not handled in switch
    #  422|       }
    #  423|       /* Check that PQC keaGroup is KEM */
    #  424|->     switch (sci->keaGroup) {
    #  425|           case ssl_grp_kem_secp256r1mlkem768:
    #  426|           case ssl_grp_kem_secp384r1mlkem1024:

    Error: COMPILER_WARNING: [#def55]
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/slapd/back-ldbm/cache.c: scope_hint: In function 'dbgec_test_if_entry_pointer_is_valid.part.0'
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/slapd/back-ldbm/cache.c:585:20: warning[-Wstringop-overflow=]: writing 1 byte into a region of size 0
    #  585 |         *(char*)23 = 1;   /* abort() somehow corrupt gdb stack backtrace so lets generate a SIGSEGV */
    #      |                    ^
    lto1: note: destination object is likely at address zero
    #  583|   #pragma GCC diagnostic ignored "-Warray-bounds="
    #  584|   #pragma GCC diagnostic ignored "-Wstringop-overflow="
    #  585|->         *(char*)23 = 1;   /* abort() somehow corrupt gdb stack backtrace so lets generate a SIGSEGV */
    #  586|   #pragma GCC diagnostic pop
    #  587|           abort();

    Error: COMPILER_WARNING (CWE-704): [#def56]
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/slapd/back-ldbm/db-bdb/bdb_layer.c: scope_hint: In function 'bdb_walk_dbfiles'
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/slapd/back-ldbm/db-bdb/bdb_layer.c:7294:16: warning[-Wdiscarded-qualifiers]: assignment discards 'const' qualifier from pointer target type
    # 7292|                   continue;
    # 7293|               }
    # 7294|->             pt = strrchr (direntry->name, *LDBM_FILENAME_SUFFIX);
    # 7295|               if (!pt || strcmp (pt, LDBM_FILENAME_SUFFIX)) {
    # 7296|                   continue;

    Error: CPPCHECK_WARNING (CWE-476): [#def57]
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/slapd/back-ldbm/db-bdb/bdb_ldif2db.c:410: error[ctunullpointer]: Null pointer dereference: include
    #  408|       slapi_sdn_init(&sdn);
    #  409|       /* for each subtree spec... */
    #  410|->     for (i = 0; include[i]; i++) {
    #  411|           IDList *idl = NULL;
    #  412|           const char *suffix = slapi_sdn_get_ndn(slapi_be_getsuffix(be, 0));

    Error: CPPCHECK_WARNING (CWE-476): [#def58]
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/slapd/back-ldbm/db-bdb/bdb_ldif2db.c:410: warning[nullPointer]: Possible null pointer dereference: include
    #  408|       slapi_sdn_init(&sdn);
    #  409|       /* for each subtree spec... */
    #  410|->     for (i = 0; include[i]; i++) {
    #  411|           IDList *idl = NULL;
    #  412|           const char *suffix = slapi_sdn_get_ndn(slapi_be_getsuffix(be, 0));

    Error: GCC_ANALYZER_WARNING (CWE-121): [#def59]
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/slapd/back-ldbm/db-bdb/bdb_verify.c: scope_hint: In function 'bdb_dbverify_ext'
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/slapd/back-ldbm/db-bdb/bdb_verify.c:150:16: warning[-Wanalyzer-out-of-bounds]: stack-based buffer overflow
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/slapd/csngen.h:20: included_from: Included from here.
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/slapd/slap.h:135: included_from: Included from here.
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/slapd/back-ldbm/back-ldbm.h:78: included_from: Included from here.
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/slapd/back-ldbm/db-bdb/bdb_layer.h:10: included_from: Included from here.
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/slapd/back-ldbm/db-bdb/bdb_verify.c:15: included_from: Included from here.
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/slapd/back-ldbm/db-bdb/bdb_verify.c:184:5: note: in expansion of macro 'slapi_log_err'
    /usr/include/features.h:540: included_from: Included from here.
    /usr/include/inttypes.h:25: included_from: Included from here.
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/slapd/slapi_pal.h:22: included_from: Included from here.
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/slapd/back-ldbm/back-ldbm.h:35: included_from: Included from here.
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/slapd/back-ldbm/db-bdb/bdb_verify.c:150:16: note: valid subscripts for 'dbdir' are '[0]' to '[4095]'
    #  148|           }
    #  149|           rval_main |= rval;
    #  150|->         *filep = '\0';
    #  151|       }
    #  152|       PR_CloseDir(dirhandle);

    Error: COMPILER_WARNING: [#def60]
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/slapd/back-ldbm/filterindex.c: scope_hint: In function 'extensible_candidates'
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/slapd/back-ldbm/filterindex.c:492:24: warning[-Wunused-but-set-variable=]: variable 'n' set but not used
    #  492 |                 size_t n;
    #      |                        ^
    #  490|                    * Collect the resulting IDs in idl.
    #  491|                    */
    #  492|->                 size_t n;
    #  493|                   struct berval **val;
    #  494|                   mrTYPE = slapi_attr_basetype(mrTYPE, NULL, 0);

    Error: COMPILER_WARNING (CWE-704): [#def61]
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/slapd/configdse.c: scope_hint: In function 'postop_modify_config_dse'
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/slapd/configdse.c:518:19: warning[-Wdiscarded-qualifiers]: assignment discards 'const' qualifier from pointer target type
    #  516|               /* Check if the server needs to be restarted */
    #  517|               for (j = 0; j < num_requires_restart; j++) {
    #  518|->                 p = strchr(requires_restart[j], ':');
    #  519|                   if (p == NULL)
    #  520|                       continue;

    Error: COMPILER_WARNING: [#def62]
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/slapd/connection.c: scope_hint: In function ‘connection_threadmain’
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/slapd/connection.c:1741:10: warning[-Wunused-but-set-variable=]: variable ‘bypasspollcnt’ set but not used
    # 1741 |     long bypasspollcnt = 0;
    #      |          ^~~~~~~~~~~~~
    # 1739|       int doshutdown = 0;
    # 1740|       int maxthreads = 0;
    # 1741|->     long bypasspollcnt = 0;
    # 1742|
    # 1743|   #if defined(hpux)

    Error: CPPCHECK_WARNING (CWE-476): [#def63]
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/slapd/dn.c:310: warning[nullPointer]: Possible null pointer dereference: L
    #  308|                           } /* if ( SEPARATOR( R[1] )) */
    #  309|                       }     /* for */
    #  310|->                     memmove(value, L, d - L + escape_skips);
    #  311|                       *d++ = '"'; /* closing quote */
    #  312|                   }               /* if (value_separator == dn) */

    Error: COMPILER_WARNING (CWE-704): [#def64]
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/slapd/dn.c: scope_hint: In function 'slapi_dn_find_parent_ext'
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/slapd/dn.c:1583:22: warning[-Wdiscarded-qualifiers]: assignment discards 'const' qualifier from pointer target type
    # 1581|                   head = (char *)dn;
    # 1582|               } else {
    # 1583|->                 head = strchr(dn, ',');
    # 1584|                   if (head) {
    # 1585|                       head++;

    Error: COMPILER_WARNING: [#def65]
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/slapd/entry.c:191:9: warning[-Wunused-but-set-variable=]: variable 'nvals' set but not used
    #  191 |     int nvals = 0;
    #      |         ^~~~~
    #  189|       const char *next;
    #  190|       char *ptype = NULL;
    #  191|->     int nvals = 0;
    #  192|       int del_nvals = 0;
    #  193|       unsigned long attr_val_cnt = 0;

    Error: COMPILER_WARNING: [#def66]
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/slapd/entry.c: scope_hint: In function 'str2entry_fast'
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/slapd/entry.c:192:9: warning[-Wunused-but-set-variable=]: variable 'del_nvals' set but not used
    #  192 |     int del_nvals = 0;
    #      |         ^~~~~~~~~
    #  190|       char *ptype = NULL;
    #  191|       int nvals = 0;
    #  192|->     int del_nvals = 0;
    #  193|       unsigned long attr_val_cnt = 0;
    #  194|       CSN *attributedeletioncsn = NULL; /* Moved to this level so that the JCM csn_free call below gets useful */

    Error: COMPILER_WARNING (CWE-563): [#def67]
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/slapd/haproxy.c: scope_hint: In function 'haproxy_parse_trusted_ips'
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/slapd/haproxy.c:660:13: warning[-Wunused-variable]: unused variable 'is_ipv6'
    #  660 |         int is_ipv6;
    #      |             ^~~~~~~
    #  658|           char *slash_pos = strchr(ip_val, '/');
    #  659|           char ip_part[MAX_CIDR_STRING_LEN];
    #  660|->         int is_ipv6;
    #  661|
    #  662|           /* Store original for logging */

    Error: COMPILER_WARNING (CWE-563): [#def68]
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/slapd/haproxy.c: scope_hint: In function 'haproxy_ip_matches_parsed'
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/slapd/haproxy.c:838:10: warning[-Wunused-variable]: unused variable 'ip_str'
    #  838 |     char ip_str[INET6_ADDRSTRLEN];
    #      |          ^~~~~~
    #  836|       size_t i;
    #  837|       PRNetAddr normalized_ip;
    #  838|->     char ip_str[INET6_ADDRSTRLEN];
    #  839|
    #  840|       if (!entries || entry_count == 0 || !ip_addr) {

    Error: COMPILER_WARNING (CWE-704): [#def69]
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/slapd/ldaputil.c: scope_hint: In function 'slapi_ldap_url_parse'
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/slapd/ldaputil.c:253:19: warning[-Wdiscarded-qualifiers]: initialization discards 'const' qualifier from pointer target type
    #  251|          Go to the 3rd '/' or to the end of the string (convert only the host:port part) */
    #  252|       if (url) {
    #  253|->         char *p = strstr(url, "://");
    #  254|           if (p) {
    #  255|               int foundspace = 0;

    Error: COMPILER_WARNING (CWE-704): [#def70]
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/slapd/ldaputil.c:276:21: warning[-Wdiscarded-qualifiers]: assignment discards 'const' qualifier from pointer target type
    #  274|                   dest = urlescaped;
    #  275|                   /* copy the scheme */
    #  276|->                 src = strstr(url, "://");
    #  277|                   src += 3;
    #  278|                   memcpy(dest, url, src - url);

    Error: COMPILER_WARNING (CWE-704): [#def71]
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/slapd/log.c: scope_hint: In function 'log__fix_rotationinfof'
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/slapd/log.c:4997:23: warning[-Wdiscarded-qualifiers]: assignment discards 'const' qualifier from pointer target type
    # 4995|               }
    # 4996|           } else if (0 == strncmp(log_type, dirent->name, strlen(log_type)) &&
    # 4997|->                    (p = strchr(dirent->name, '.')) != NULL &&
    # 4998|                      NULL != strchr(p, '-')) /* e.g., errors.20051123-165135 or errors.20051123-165135.gz */
    # 4999|           {

    Error: COMPILER_WARNING (CWE-704): [#def72]
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/slapd/log.c: scope_hint: In function 'log__check_prevlogs'
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/slapd/log.c:5177:16: warning[-Wdiscarded-qualifiers]: assignment discards 'const' qualifier from pointer target type
    # 5175|            dirent = PR_ReadDir(dirptr, dirflags)) {
    # 5176|           if (0 == strncmp(log_type, dirent->name, strlen(log_type)) &&
    # 5177|->             (p = strchr(dirent->name, '.')) != NULL &&
    # 5178|               NULL != strchr(p, '-')) { /* e.g., errors.20051123-165135 or errors.20051123-165135.gz */
    # 5179|               PRBool is_compressed = PR_FALSE;

    Error: GCC_ANALYZER_WARNING (CWE-126): [#def73]
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/slapd/modutil.c: scope_hint: In function 'slapi_mods_add_modbvps.part.0'
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/slapd/modutil.c:272:35: warning[-Wanalyzer-out-of-bounds]: stack-based buffer over-read
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/slapd/modutil.c:272:35: note: read of 8 bytes from after the end of 'bvps'
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/slapd/modutil.c:272:35: note: valid subscripts for 'bvps' are '[0]' to '[1]'
    #  270|                                                                sizeof(struct berval *));
    #  271|           for (i = 0; i < num_values; i++) {
    #  272|->             mod->mod_bvalues[i] = ber_bvdup((struct berval *)bvps[i]); /* jcm had to cast away const */
    #  273|           }
    #  274|           mod->mod_bvalues[num_values] = NULL;

    Error: CPPCHECK_WARNING (CWE-457): [#def74]
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/slapd/plugin.c:3159: warning[uninitvar]: Uninitialized variable: output
    # 3157|       }
    # 3158|
    # 3159|->     return slapi_ch_strdup(output);
    # 3160|   }
    # 3161|

    Error: COMPILER_WARNING: [#def75]
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/slapd/pw.c:988:9: warning[-Wunused-but-set-variable=]: variable 'digits' set but not used
    #  988 |     int digits = 0;
    #      |         ^~~~~~
    #  986|   pw_max_class_repeats(const char *new, int32_t max_repeats)
    #  987|   {
    #  988|->     int digits = 0;
    #  989|       int uppers = 0;
    #  990|       int lowers = 0;

    Error: COMPILER_WARNING: [#def76]
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/slapd/pw.c:989:9: warning[-Wunused-but-set-variable=]: variable 'uppers' set but not used
    #  989 |     int uppers = 0;
    #      |         ^~~~~~
    #  987|   {
    #  988|       int digits = 0;
    #  989|->     int uppers = 0;
    #  990|       int lowers = 0;
    #  991|       int others = 0;

    Error: COMPILER_WARNING: [#def77]
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/slapd/pw.c:990:9: warning[-Wunused-but-set-variable=]: variable 'lowers' set but not used
    #  990 |     int lowers = 0;
    #      |         ^~~~~~
    #  988|       int digits = 0;
    #  989|       int uppers = 0;
    #  990|->     int lowers = 0;
    #  991|       int others = 0;
    #  992|       int i;

    Error: COMPILER_WARNING: [#def78]
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/slapd/pw.c: scope_hint: In function 'pw_max_class_repeats'
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/slapd/pw.c:991:9: warning[-Wunused-but-set-variable=]: variable 'others' set but not used
    #  991 |     int others = 0;
    #      |         ^~~~~~
    #  989|       int uppers = 0;
    #  990|       int lowers = 0;
    #  991|->     int others = 0;
    #  992|       int i;
    #  993|       enum { NONE, DIGIT, UCASE, LCASE, OTHER } prevclass = NONE;

    Error: CPPCHECK_WARNING (CWE-457): [#def79]
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/slapd/slapd_plhash.c:43: error[uninitvar]: Uninitialized variable: *hep
    #   41|       h >>= ht->shift;
    #   42|       hep = &ht->buckets[h];
    #   43|->     while ((he = *hep) != 0) {
    #   44|           if (he->keyHash == keyHash && (*ht->keyCompare)(key, he->key)) {
    #   45|               return hep;

    Error: COMPILER_WARNING: [#def80]
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/slapd/slapi-memberof.c: scope_hint: In function 'sm_merge_ancestors'
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/slapd/slapi-memberof.c:391:9: warning[-Wunused-but-set-variable=]: variable 'merged_cnt' set but not used
    #  391 |     int merged_cnt = 0;
    #      |         ^~~~~~~~~~
    #  389|       Slapi_ValueSet *v1_nsuniqueidvals = *((sm_memberof_get_groups_data *) v1)->nsuniqueidvals;
    #  390|       Slapi_ValueSet *v2_nsuniqueidvals = *((sm_memberof_get_groups_data *) v2)->nsuniqueidvals;
    #  391|->     int merged_cnt = 0;
    #  392|
    #  393|       hint = slapi_valueset_first_value(v1_groupvals, &sval);

    Error: COMPILER_WARNING: [#def81]
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/slapd/ssl.c: scope_hint: In function 'slapd_nss_init'
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/slapd/ssl.c:1054:14: warning[-Wunused-but-set-variable=]: variable 'nssFlags' set but not used
    # 1054 |     PRUint32 nssFlags = 0;
    #      |              ^~~~~~~~
    # 1052|       int len = 0;
    # 1053|       int create_certdb = 0;
    # 1054|->     PRUint32 nssFlags = 0;
    # 1055|       char *certdir;
    # 1056|       char dmin[VERSION_STR_LENGTH], dmax[VERSION_STR_LENGTH];

    Error: CPPCHECK_WARNING (CWE-401): [#def82]
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/slapd/tools/dbscan.c:787: error[memleakOnRealloc]: Common realloc mistake: 'buf' nulled but not freed upon failure
    #  785|       if (buflen < tmpbuflen) {
    #  786|           buflen = tmpbuflen;
    #  787|->         buf = (unsigned char *)realloc(buf, buflen);
    #  788|       }
    #  789|       if (!buf) {

    Error: GCC_ANALYZER_WARNING (CWE-688): [#def83]
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/slapd/tools/dbscan.c: scope_hint: In function ‘display_item’
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/slapd/tools/dbscan.c:795:9: warning[-Wanalyzer-null-argument]: use of NULL where non-null expected
    <built-in>: note: argument 1 of ‘__builtin_puts’ must be non-null
    #  793|
    #  794|       if (display_mode & RAWDATA) {
    #  795|->         printf("%s\n", format(key->data, key->size, buf, buflen));
    #  796|           printf("\t%s\n", format(data->data, data->size, buf, buflen));
    #  797|       } else {

    Error: GCC_ANALYZER_WARNING (CWE-401): [#def84]
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/slapd/tools/ldaptool-sasl.c: scope_hint: In function ‘get_new_value’
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/slapd/tools/ldaptool-sasl.c:260:26: warning[-Wanalyzer-malloc-leak]: leak of ‘strdup(newvalue)’
    #  258|               free((void *)interact->result);
    #  259|           }
    #  260|->         interact->result = strdup(newvalue);
    #  261|           memset(newvalue, '\0', len);
    #  262|

    Error: COMPILER_WARNING (CWE-704): [#def85]
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/slapd/tools/ldclt/ldapfct.c: scope_hint: In function ‘ldclt_dirname’
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/slapd/tools/ldclt/ldapfct.c:319:23: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
    #  319 |     if (path && ((ptr = strrchr(path, sep))) && *(ptr + 1)) {
    #      |                       ^
    #  317|       char *ptr = NULL;
    #  318|       char *ret = NULL;
    #  319|->     if (path && ((ptr = strrchr(path, sep))) && *(ptr + 1)) {
    #  320|           ret = PL_strndup(path, ptr - path);
    #  321|       } else {

    Error: GCC_ANALYZER_WARNING (CWE-688): [#def86]
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/slapd/tools/ldclt/ldapfct.c: scope_hint: In function ‘connectToLDAP’
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/slapd/tools/ldclt/ldapfct.c:697:31: warning[-Wanalyzer-null-argument]: use of NULL ‘pwd’ where non-null expected
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/slapd/tools/ldclt/ldapfct.c:28: included_from: Included from here.
    /usr/include/string.h:439:15: note: argument 1 of ‘strlen’ must be non-null
    #  695|               if (passwd) {
    #  696|                   cred.bv_val = (char *)pwd;
    #  697|->                 cred.bv_len = strlen(pwd);
    #  698|               }
    #  699|               if (mode & VERY_VERBOSE)

    Error: CPPCHECK_WARNING (CWE-476): [#def87]
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/slapd/tools/ldclt/ldapfct.c:1204: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: p
    # 1202|           ldcltExit(EXIT_RESSOURCE); /*JLS 18-12-00*/
    # 1203|       }                              /*JLS 06-03-00*/
    # 1204|->     p[0] = str1;
    # 1205|       p[1] = NULL;
    # 1206|       return (p);

    Error: CPPCHECK_WARNING (CWE-476): [#def88]
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/slapd/tools/ldclt/ldapfct.c:1205: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: p
    # 1203|       }                              /*JLS 06-03-00*/
    # 1204|       p[0] = str1;
    # 1205|->     p[1] = NULL;
    # 1206|       return (p);
    # 1207|   }

    Error: CPPCHECK_WARNING (CWE-119): [#def89]
    389-ds-base-3.2.0.202603022128gitbc05c2774/ldap/servers/slapd/uuid.c:814: error[bufferAccessOutOfBounds]: Buffer is accessed out of bounds: hash
    #  812|       * plus a few constants. */
    #  813|
    #  814|->     memcpy(uuid, hash, sizeof(guid_t));
    #  815|
    #  816|       /* when migrating, we skip the ntohl in order to read in old,

    Error: CPPCHECK_WARNING (CWE-682): [#def90]
    389-ds-base-3.2.0.202603022128gitbc05c2774/lib/ldaputil/dbconf.c:655: error[nullPointerArithmeticOutOfMemory]: If memory allocation fails: pointer addition with NULL pointer.
    #  653|
    #  654|       dbnames = (char **)malloc(32 * 1024);
    #  655|->     heap = (char *)dbnames + 2 * 1024;
    #  656|
    #  657|       if (!dbnames) {

    Error: CPPCHECK_WARNING (CWE-457): [#def91]
    389-ds-base-3.2.0.202603022128gitbc05c2774/lib/libaccess/access_plhash.cpp:49: error[uninitvar]: Uninitialized variable: *hep
    #   47|       h >>= ht->shift;
    #   48|       hep = &ht->buckets[h];
    #   49|->     while ((he = *hep) != 0) {
    #   50|           if (he->keyHash == keyHash && (*ht->keyCompare)(key, he->key)) {
    #   51|               return hep;

    Error: CPPCHECK_WARNING (CWE-457): [#def92]
    389-ds-base-3.2.0.202603022128gitbc05c2774/lib/libaccess/acleval.cpp:95: warning[uninitvar]: Uninitialized variable: rv
    #   93|
    #   94|       /* One more possibility if nothing found yet... */
    #   95|->     if (rv) {
    #   96|   	rv = symTableFindSym(table, "*", 0, (void **)&sym);
    #   97|       }

    Error: CPPCHECK_WARNING (CWE-476): [#def93]
    389-ds-base-3.2.0.202603022128gitbc05c2774/lib/libsi18n/reshash.c:51: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: pvalue
    #   49|       }
    #   50|       pvalue = (ValueNode *)malloc(sizeof(ValueNode));
    #   51|->     memset(pvalue, 0, sizeof(ValueNode));
    #   52|
    #   53|       prev->next = pvalue;

    Error: CPPCHECK_WARNING (CWE-476): [#def94]
    389-ds-base-3.2.0.202603022128gitbc05c2774/lib/libsi18n/reshash.c:55: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: pvalue
    #   53|       prev->next = pvalue;
    #   54|
    #   55|->     pvalue->language = strdup(language);
    #   56|       pvalue->value = strdup(value);
    #   57|       return 0;

    Error: CPPCHECK_WARNING (CWE-476): [#def95]
    389-ds-base-3.2.0.202603022128gitbc05c2774/lib/libsi18n/reshash.c:56: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: pvalue
    #   54|
    #   55|       pvalue->language = strdup(language);
    #   56|->     pvalue->value = strdup(value);
    #   57|       return 0;
    #   58|   }

    Error: CPPCHECK_WARNING (CWE-476): [#def96]
    389-ds-base-3.2.0.202603022128gitbc05c2774/lib/libsi18n/reshash.c:152: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: node
    #  150|                */
    #  151|               node = (TreeNode *)malloc(sizeof(TreeNode));
    #  152|->             memset(node, 0, sizeof(TreeNode));
    #  153|               vnode = (ValueNode *)malloc(sizeof(ValueNode));
    #  154|               memset(vnode, 0, sizeof(ValueNode));

    Error: CPPCHECK_WARNING (CWE-476): [#def97]
    389-ds-base-3.2.0.202603022128gitbc05c2774/lib/libsi18n/reshash.c:154: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: vnode
    #  152|               memset(node, 0, sizeof(TreeNode));
    #  153|               vnode = (ValueNode *)malloc(sizeof(ValueNode));
    #  154|->             memset(vnode, 0, sizeof(ValueNode));
    #  155|               node->vlist = vnode;
    #  156|

    Error: GCC_ANALYZER_WARNING (CWE-688): [#def98]
    389-ds-base-3.2.0.202603022128gitbc05c2774/lib/libsi18n/reshash.c: scope_hint: In function 'TreeAddItem'
    389-ds-base-3.2.0.202603022128gitbc05c2774/lib/libsi18n/reshash.c:154:13: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL 'vnode' where non-null expected
    389-ds-base-3.2.0.202603022128gitbc05c2774/lib/libsi18n/reshash.c:16: included_from: Included from here.
    /usr/include/string.h:65:14: note: argument 1 of 'memset' must be non-null
    #  152|               memset(node, 0, sizeof(TreeNode));
    #  153|               vnode = (ValueNode *)malloc(sizeof(ValueNode));
    #  154|->             memset(vnode, 0, sizeof(ValueNode));
    #  155|               node->vlist = vnode;
    #  156|

    Error: CPPCHECK_WARNING (CWE-476): [#def99]
    389-ds-base-3.2.0.202603022128gitbc05c2774/lib/libsi18n/reshash.c:155: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: node
    #  153|               vnode = (ValueNode *)malloc(sizeof(ValueNode));
    #  154|               memset(vnode, 0, sizeof(ValueNode));
    #  155|->             node->vlist = vnode;
    #  156|
    #  157|               res->right = node;

    Error: GCC_ANALYZER_WARNING (CWE-476): [#def100]
    389-ds-base-3.2.0.202603022128gitbc05c2774/lib/libsi18n/reshash.c:155:25: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL 'node'
    #  153|               vnode = (ValueNode *)malloc(sizeof(ValueNode));
    #  154|               memset(vnode, 0, sizeof(ValueNode));
    #  155|->             node->vlist = vnode;
    #  156|
    #  157|               res->right = node;

    Error: CPPCHECK_WARNING (CWE-476): [#def101]
    389-ds-base-3.2.0.202603022128gitbc05c2774/lib/libsi18n/reshash.c:160: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: node
    #  158|
    #  159|               /* assign value to node */
    #  160|->             node->key = strdup(key);
    #  161|               if (language == NULL)
    #  162|                   node->value = strdup(value);

    Error: CPPCHECK_WARNING (CWE-476): [#def102]
    389-ds-base-3.2.0.202603022128gitbc05c2774/lib/libsi18n/reshash.c:162: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: node
    #  160|               node->key = strdup(key);
    #  161|               if (language == NULL)
    #  162|->                 node->value = strdup(value);
    #  163|               else
    #  164|                   ValueAddLanguageItem(node->vlist, value, language);

    Error: CPPCHECK_WARNING (CWE-476): [#def103]
    389-ds-base-3.2.0.202603022128gitbc05c2774/lib/libsi18n/reshash.c:164: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: node
    #  162|                   node->value = strdup(value);
    #  163|               else
    #  164|->                 ValueAddLanguageItem(node->vlist, value, language);
    #  165|           } else {
    #  166|               return TreeAddItem(res->right, key, value, language);

    Error: CPPCHECK_WARNING (CWE-476): [#def104]
    389-ds-base-3.2.0.202603022128gitbc05c2774/lib/libsi18n/reshash.c:171: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: node
    #  169|           if (res->left == NULL) {
    #  170|               node = (TreeNode *)malloc(sizeof(TreeNode));
    #  171|->             memset(node, 0, sizeof(TreeNode));
    #  172|               vnode = (ValueNode *)malloc(sizeof(ValueNode));
    #  173|               memset(vnode, 0, sizeof(ValueNode));

    Error: CPPCHECK_WARNING (CWE-476): [#def105]
    389-ds-base-3.2.0.202603022128gitbc05c2774/lib/libsi18n/reshash.c:173: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: vnode
    #  171|               memset(node, 0, sizeof(TreeNode));
    #  172|               vnode = (ValueNode *)malloc(sizeof(ValueNode));
    #  173|->             memset(vnode, 0, sizeof(ValueNode));
    #  174|               node->vlist = vnode;
    #  175|

    Error: CPPCHECK_WARNING (CWE-476): [#def106]
    389-ds-base-3.2.0.202603022128gitbc05c2774/lib/libsi18n/reshash.c:174: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: node
    #  172|               vnode = (ValueNode *)malloc(sizeof(ValueNode));
    #  173|               memset(vnode, 0, sizeof(ValueNode));
    #  174|->             node->vlist = vnode;
    #  175|
    #  176|               res->left = node;

    Error: CPPCHECK_WARNING (CWE-476): [#def107]
    389-ds-base-3.2.0.202603022128gitbc05c2774/lib/libsi18n/reshash.c:179: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: node
    #  177|
    #  178|               /* assign value to node */
    #  179|->             node->key = strdup(key);
    #  180|               if (language == NULL)
    #  181|                   node->value = strdup(value);

    Error: GCC_ANALYZER_WARNING (CWE-457): [#def108]
    jemalloc-5.3.0/include/jemalloc/internal/emap.h:340:35: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘*<unknown>.rtree_leaf’
    jemalloc-5.3.0/src/tcache.c: scope_hint: In function ‘tcache_bin_flush_edatas_lookup’
    jemalloc-5.3.0/src/tcache.c: scope_hint: In function ‘tcache_bin_flush_edatas_lookup’
    jemalloc-5.3.0/src/tcache.c: scope_hint: In function ‘tcache_bin_flush_edatas_lookup’
    jemalloc-5.3.0/include/jemalloc/internal/emap.h: scope_hint: In function ‘tcache_bin_flush_edatas_lookup’
    jemalloc-5.3.0/include/jemalloc/internal/tsd.h:89:5: note: in expansion of macro ‘O’
    jemalloc-5.3.0/include/jemalloc/internal/tsd.h:344:1: note: in expansion of macro ‘TSD_DATA_SLOW’
    jemalloc-5.3.0/include/jemalloc/internal/tsd.h:89:5: note: in expansion of macro ‘O’
    jemalloc-5.3.0/include/jemalloc/internal/tsd.h:323:1: note: in expansion of macro ‘TSD_DATA_SLOW’
    jemalloc-5.3.0/src/tcache.c: scope_hint: In function ‘tcache_bin_flush_edatas_lookup’
    jemalloc-5.3.0/src/tcache.c: scope_hint: In function ‘tcache_bin_flush_edatas_lookup’
    jemalloc-5.3.0/src/tcache.c: scope_hint: In function ‘tcache_bin_flush_edatas_lookup’
    jemalloc-5.3.0/include/jemalloc/internal/tcache_structs.h:4: included_from: Included from here.
    jemalloc-5.3.0/include/jemalloc/internal/tsd.h:14: included_from: Included from here.
    jemalloc-5.3.0/src/tcache.c:567:9: note: in expansion of macro ‘CACHE_BIN_PTR_ARRAY_DECLARE’
    jemalloc-5.3.0/include/jemalloc/internal/jemalloc_internal_types.h:127:50: note: in definition of macro ‘VARIABLE_ARRAY’
    jemalloc-5.3.0/include/jemalloc/internal/jemalloc_internal_types.h:127:50: note: in definition of macro ‘VARIABLE_ARRAY’
    jemalloc-5.3.0/src/tcache.c: scope_hint: In function ‘tcache_bin_flush_edatas_lookup’
    jemalloc-5.3.0/include/jemalloc/internal/emap.h: scope_hint: In function ‘tcache_bin_flush_edatas_lookup’
    jemalloc-5.3.0/include/jemalloc/internal/tsd.h:89:5: note: in expansion of macro ‘O’
    jemalloc-5.3.0/include/jemalloc/internal/tsd.h:344:1: note: in expansion of macro ‘TSD_DATA_SLOW’
    jemalloc-5.3.0/include/jemalloc/internal/tsd.h:89:5: note: in expansion of macro ‘O’
    jemalloc-5.3.0/include/jemalloc/internal/tsd.h:323:1: note: in expansion of macro ‘TSD_DATA_SLOW’
    #  338|
    #  339|   	for (size_t i = 0; i < nptrs; i++) {
    #  340|-> 		rtree_leaf_elm_t *elm = result[i].rtree_leaf;
    #  341|   		rtree_contents_t contents = rtree_leaf_elm_read(tsd_tsdn(tsd),
    #  342|   		    &emap->rtree, elm, /* dependent */ true);

    Error: GCC_ANALYZER_WARNING (CWE-476): [#def109]
    jemalloc-5.3.0/include/jemalloc/internal/prof_structs.h:8: included_from: Included from here.
    jemalloc-5.3.0/include/jemalloc/internal/jemalloc_internal_includes.h:51: included_from: Included from here.
    jemalloc-5.3.0/src/prof_data.c:2: included_from: Included from here.
    jemalloc-5.3.0/src/prof_data.c: scope_hint: In function ‘tctx_tree_remove’
    jemalloc-5.3.0/include/jemalloc/internal/rb.h:874:21: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘nodep’
    jemalloc-5.3.0/include/jemalloc/internal/rb.h:564:5: note: in expansion of macro ‘rb_gen_impl’
    jemalloc-5.3.0/src/prof_data.c:88:1: note: in expansion of macro ‘rb_gen’
    jemalloc-5.3.0/src/prof_data.c: scope_hint: In function ‘tctx_tree_remove’
    jemalloc-5.3.0/src/prof_data.c: scope_hint: In function ‘tctx_tree_remove’
    jemalloc-5.3.0/include/jemalloc/internal/rb.h:820:1: note: in definition of macro ‘rb_gen_impl’
    jemalloc-5.3.0/src/prof_data.c:88:1: note: in expansion of macro ‘rb_gen’
    jemalloc-5.3.0/include/jemalloc/internal/rb.h:564:5: note: in expansion of macro ‘rb_gen_impl’
    jemalloc-5.3.0/src/prof_data.c:88:1: note: in expansion of macro ‘rb_gen’
    jemalloc-5.3.0/include/jemalloc/internal/rb.h:860:21: note: in expansion of macro ‘rbtn_red_get’
    jemalloc-5.3.0/include/jemalloc/internal/rb.h:564:5: note: in expansion of macro ‘rb_gen_impl’
    jemalloc-5.3.0/src/prof_data.c:88:1: note: in expansion of macro ‘rb_gen’
    jemalloc-5.3.0/include/jemalloc/internal/rb.h:564:5: note: in expansion of macro ‘rb_gen_impl’
    jemalloc-5.3.0/src/prof_data.c:88:1: note: in expansion of macro ‘rb_gen’
    #  872|   	/* The pruned leaf node's child pointers are never accessed   */\
    #  873|   	/* again, so don't bother setting them to nil.                */\
    #  874|-> 	nodep->node = pathp->node;					\
    #  875|   	pathp->node = node;						\
    #  876|   	if (nodep == path) {						\

    Error: CPPCHECK_WARNING (CWE-786): [#def110]
    jemalloc-5.3.0/include/jemalloc/internal/rtree.h:404: error[negativeIndex]: Array 'rtree_ctx->l2_cache[8]' accessed at index -1, which is out of bounds.
    #  402|   } while (0)
    #  403|   	/* Check the first cache entry. */
    #  404|-> 	RTREE_CACHE_CHECK_L2(0);
    #  405|   	/* Search the remaining cache elements. */
    #  406|   	for (unsigned i = 1; i < RTREE_CTX_NCACHE_L2; i++) {

    Error: GCC_ANALYZER_WARNING (CWE-457): [#def111]
    jemalloc-5.3.0/src/hook.c:7: included_from: Included from here.
    jemalloc-5.3.0/src/hook.c: scope_hint: In function ‘seq_store_hooks’
    jemalloc-5.3.0/include/jemalloc/internal/seq.h:30:17: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘buf[i]’
    jemalloc-5.3.0/src/hook.c:15:1: note: in expansion of macro ‘seq_define’
    jemalloc-5.3.0/src/hook.c:15:1: note: in expansion of macro ‘seq_define’
    jemalloc-5.3.0/src/hook.c:15:1: note: in expansion of macro ‘seq_define’
    jemalloc-5.3.0/include/jemalloc/internal/jemalloc_internal_decls.h:66: included_from: Included from here.
    jemalloc-5.3.0/include/jemalloc/internal/jemalloc_preamble.h:5: included_from: Included from here.
    jemalloc-5.3.0/src/hook.c:1: included_from: Included from here.
    jemalloc-5.3.0/src/hook.c:15:1: note: in expansion of macro ‘seq_define’
    jemalloc-5.3.0/src/hook.c:15:1: note: in expansion of macro ‘seq_define’
    jemalloc-5.3.0/src/hook.c:15:1: note: in expansion of macro ‘seq_define’
    jemalloc-5.3.0/src/hook.c:15:1: note: in expansion of macro ‘seq_define’
    jemalloc-5.3.0/src/hook.c:15:1: note: in expansion of macro ‘seq_define’
    jemalloc-5.3.0/src/hook.c:15:1: note: in expansion of macro ‘seq_define’
    #   28|   	atomic_fence(ATOMIC_RELEASE);					\
    #   29|   	for (size_t i = 0; i < sizeof(buf) / sizeof(size_t); i++) {	\
    #   30|-> 		atomic_store_zu(&dst->data[i], buf[i], ATOMIC_RELAXED);	\
    #   31|   	}								\
    #   32|   	atomic_store_zu(&dst->seq, old_seq + 2, ATOMIC_RELEASE);	\

    Error: GCC_ANALYZER_WARNING (CWE-476): [#def112]
    jemalloc-5.3.0/src/extent.c: scope_hint: In function ‘extent_try_coalesce_impl’
    jemalloc-5.3.0/src/extent.c:869:28: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘coalesced’
    jemalloc-5.3.0/src/extent.c: scope_hint: In function ‘extent_try_coalesce_impl’
    #  867|
    #  868|   	if (ecache->delay_coalesce) {
    #  869|-> 		*coalesced = false;
    #  870|   	}
    #  871|   	return edata;

    Error: GCC_ANALYZER_WARNING (CWE-457): [#def113]
    jemalloc-5.3.0/src/hook.c: scope_hint: In function ‘hook_install_locked’
    jemalloc-5.3.0/src/hook.c:34:36: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘hooks_internal.in_use’
    jemalloc-5.3.0/src/hook.c:6: included_from: Included from here.
    jemalloc-5.3.0/include/jemalloc/internal/mutex.h: scope_hint: In function ‘hook_install_locked’
    jemalloc-5.3.0/src/hook.c:15:1: note: in expansion of macro ‘seq_define’
    jemalloc-5.3.0/src/hook.c:15:1: note: in expansion of macro ‘seq_define’
    jemalloc-5.3.0/src/hook.c:15:1: note: in expansion of macro ‘seq_define’
    #   32|   		/* We hold mu; no concurrent access. */
    #   33|   		assert(success);
    #   34|-> 		if (!hooks_internal.in_use) {
    #   35|   			hooks_internal.hooks = *to_install;
    #   36|   			hooks_internal.in_use = true;

    Error: CPPCHECK_WARNING (CWE-398): [#def114]
    jemalloc-5.3.0/src/jemalloc_cpp.cpp:102: error[throwInNoexceptFunction]: Unhandled exception thrown in function declared not to throw exceptions.
    #  100|   		return ptr;
    #  101|   	}
    #  102|-> 	return handleOOM(size, IsNoExcept);
    #  103|   }
    #  104|

    Error: CPPCHECK_WARNING (CWE-476): [#def115]
    jemalloc-5.3.0/src/prof_data.c:70: error[ctunullpointer]: Null pointer dereference: a
    #   68|   static int
    #   69|   prof_tctx_comp(const prof_tctx_t *a, const prof_tctx_t *b) {
    #   70|-> 	uint64_t a_thr_uid = a->thr_uid;
    #   71|   	uint64_t b_thr_uid = b->thr_uid;
    #   72|   	int ret = (a_thr_uid > b_thr_uid) - (a_thr_uid < b_thr_uid);

    Error: CPPCHECK_WARNING (CWE-476): [#def116]
    jemalloc-5.3.0/src/prof_data.c:88: error[ctunullpointer]: Null pointer dereference: node
    #   86|   }
    #   87|
    #   88|-> rb_gen(static UNUSED, tctx_tree_, prof_tctx_tree_t, prof_tctx_t,
    #   89|       tctx_link, prof_tctx_comp)
    #   90|

    Error: CPPCHECK_WARNING (CWE-476): [#def117]
    jemalloc-5.3.0/src/prof_data.c:93: error[ctunullpointer]: Null pointer dereference: a
    #   91|   static int
    #   92|   prof_gctx_comp(const prof_gctx_t *a, const prof_gctx_t *b) {
    #   93|-> 	unsigned a_len = a->bt.len;
    #   94|   	unsigned b_len = b->bt.len;
    #   95|   	unsigned comp_len = (a_len < b_len) ? a_len : b_len;

    Error: CPPCHECK_WARNING (CWE-476): [#def118]
    jemalloc-5.3.0/src/prof_data.c:103: error[ctunullpointer]: Null pointer dereference: node
    #  101|   }
    #  102|
    #  103|-> rb_gen(static UNUSED, gctx_tree_, prof_gctx_tree_t, prof_gctx_t, dump_link,
    #  104|       prof_gctx_comp)
    #  105|

    Error: CPPCHECK_WARNING (CWE-476): [#def119]
    jemalloc-5.3.0/src/prof_data.c:109: error[ctunullpointer]: Null pointer dereference: a
    #  107|   prof_tdata_comp(const prof_tdata_t *a, const prof_tdata_t *b) {
    #  108|   	int ret;
    #  109|-> 	uint64_t a_uid = a->thr_uid;
    #  110|   	uint64_t b_uid = b->thr_uid;
    #  111|

    Error: CPPCHECK_WARNING (CWE-476): [#def120]
    jemalloc-5.3.0/src/prof_data.c:122: error[ctunullpointer]: Null pointer dereference: node
    #  120|   }
    #  121|
    #  122|-> rb_gen(static UNUSED, tdata_tree_, prof_tdata_tree_t, prof_tdata_t, tdata_link,
    #  123|       prof_tdata_comp)
    #  124|

## Scan Properties

analyzer-version-clippy | 1.93.1
analyzer-version-cppcheck | 2.19.1
analyzer-version-gcc | 16.0.1
analyzer-version-gcc-analyzer | 16.0.1
analyzer-version-shellcheck | 0.11.0
analyzer-version-unicontrol | 0.0.2
enabled-plugins | clippy, cppcheck, gcc, shellcheck, unicontrol
exit-code | 0
host | ip-172-16-1-79.us-west-2.compute.internal
known-false-positives | /usr/share/csmock/known-false-positives.js
known-false-positives-rpm | known-false-positives-0.0.0.20260225.110632.gf6ecc5a.main-1.el9.noarch
mock-config | fedora-rawhide-x86_64
project-name | 389-ds-base-3.2.0.202603022128gitbc05c2774-pr7294
store-results-to | /tmp/tmpg7c92toz/389-ds-base-3.2.0.202603022128gitbc05c2774-pr7294.tar.xz
time-created | 2026-03-02 21:59:25
time-finished | 2026-03-02 22:12:52
tool | csmock
tool-args | '/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'unicontrol,clippy,cppcheck,shellcheck,gcc' '-o' '/tmp/tmpg7c92toz/389-ds-base-3.2.0.202603022128gitbc05c2774-pr7294.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '/tmp/tmpg7c92toz/389-ds-base-3.2.0.202603022128gitbc05c2774-pr7294.src.rpm'
tool-version | csmock-3.8.4.20260302.153719.g8203630-1.el9