Error: SHELLCHECK_WARNING (CWE-563): [#def1] /usr/lib64/dirsrv/bin/jemalloc-config:27:1: warning[SC2034]: prefix appears unused. Verify use (or export if used externally). # 25| } # 26| # 27|-> prefix="/usr" # 28| exec_prefix="/usr" # 29| Error: SHELLCHECK_WARNING (CWE-563): [#def2] /usr/lib64/dirsrv/bin/jemalloc-config:28:1: warning[SC2034]: exec_prefix appears unused. Verify use (or export if used externally). # 26| # 27| prefix="/usr" # 28|-> exec_prefix="/usr" # 29| # 30| case "$1" in Error: SHELLCHECK_WARNING (CWE-563): [#def3] /usr/lib64/dirsrv/bin/jemalloc.sh:3:1: warning[SC2034]: prefix appears unused. Verify use (or export if used externally). # 1| #!/usr/bin/sh # 2| # 3|-> prefix=/usr # 4| exec_prefix=/usr # 5| libdir=/usr/lib64/dirsrv/lib Error: SHELLCHECK_WARNING (CWE-563): [#def4] /usr/lib64/dirsrv/bin/jemalloc.sh:4:1: warning[SC2034]: exec_prefix appears unused. Verify use (or export if used externally). # 2| # 3| prefix=/usr # 4|-> exec_prefix=/usr # 5| libdir=/usr/lib64/dirsrv/lib # 6| Error: COMPILER_WARNING: [#def5] 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/plugins/acl/acl.c: scope_hint: In function 'acl__attr_cached_result' 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/plugins/acl/acl.c:3673:13: warning[-Wunused-but-set-variable=]: variable 'eval_read' set but not used # 3673 | int eval_read = 0; # | ^~~~~~~~~ # 3671| # 3672| if (attr == NULL) { # 3673|-> int eval_read = 0; # 3674| /* # 3675| ** Do I have access to at least one attribute, then I have Error: COMPILER_WARNING: [#def6] 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/plugins/collation/orfilter.c: scope_hint: In function 'or_filter_create' 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/plugins/collation/orfilter.c:513:13: warning[-Wunused-but-set-variable=]: variable 'reusable' set but not used # 513 | int reusable = MRF_ANY_TYPE; # | ^~~~~~~~ # 511| int op = SLAPI_OP_EQUAL; # 512| struct berval bv; # 513|-> int reusable = MRF_ANY_TYPE; # 514| # 515| slapi_log_err(SLAPI_LOG_FILTER, COLLATE_PLUGIN_SUBSYSTEM, Error: COMPILER_WARNING: [#def7] 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/plugins/cos/cos_cache.c: scope_hint: In function 'cos_cache_cmp_attr' 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/plugins/cos/cos_cache.c:3062:9: warning[-Wunused-but-set-variable=]: variable 'index' set but not used # 3062 | int index = 0; # | ^~~~~ # 3060| { # 3061| int ret = 0; # 3062|-> int index = 0; # 3063| cosAttrValue *pAttrVal = pAttr->pAttrValue; # 3064| char *the_cmp = (char *)slapi_value_get_string(test_this); Error: COMPILER_WARNING: [#def8] 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/plugins/cos/cos_cache.c: scope_hint: In function 'cos_cache_cos_2_slapi_valueset' 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/plugins/cos/cos_cache.c:3096:9: warning[-Wunused-but-set-variable=]: variable 'index' set but not used # 3096 | int index = 0; # | ^~~~~ # 3094| { # 3095| int ret = 0; # 3096|-> int index = 0; # 3097| cosAttrValue *pAttrVal = pAttr->pAttrValue; # 3098| int add_mode = 0; Error: CPPCHECK_WARNING (CWE-457): [#def9] 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/plugins/deref/deref.c:645: warning[uninitvar]: Uninitialized variable: sv # 643| idx = slapi_valueset_first_value(results, &sv); # 644| } # 645|-> for (; results && sv; idx = slapi_valueset_next_value(results, idx, &sv)) { # 646| const struct berval *bv = slapi_value_get_berval(sv); # 647| if (needattrvals) { Error: CPPCHECK_WARNING (CWE-457): [#def10] 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/plugins/deref/deref.c:747: warning[uninitvar]: Uninitialized variable: sv # 745| idx = slapi_valueset_first_value(results, &sv); # 746| } # 747|-> for (; results && sv; idx = slapi_valueset_next_value(results, idx, &sv)) { # 748| const char *derefdn = slapi_value_get_string(sv); # 749| Error: COMPILER_WARNING: [#def11] 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/plugins/memberof/memberof.c: scope_hint: In function 'merge_ancestors' 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/plugins/memberof/memberof.c:3280:9: warning[-Wunused-but-set-variable=]: variable 'merged_cnt' set but not used # 3280 | int merged_cnt = 0; # | ^~~~~~~~~~ # 3278| Slapi_ValueSet *v2_groupvals = *((memberof_get_groups_data *)v2)->groupvals; # 3279| Slapi_ValueSet *v2_group_norm_vals = *((memberof_get_groups_data *)v2)->group_norm_vals; # 3280|-> int merged_cnt = 0; # 3281| # 3282| #if MEMBEROF_CACHE_DEBUG Error: CPPCHECK_WARNING (CWE-476): [#def12] 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/plugins/replication/repl5_ruv.c:1025: warning[nullPointer]: Possible null pointer dereference: bv # 1023| ruvelem->csn == NULL ? "" : csn_as_string(ruvelem->csn, PR_FALSE, csnStr2)); # 1024| } else { # 1025|-> bv->bv_val = slapi_ch_smprintf(fmtstr, # 1026| prefix_ruvcsn, ruvelem->rid, # 1027| ruvelem->replica_purl == NULL ? "" : " ", Error: CPPCHECK_WARNING (CWE-476): [#def13] 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/plugins/replication/repl5_ruv.c:1033: warning[nullPointer]: Possible null pointer dereference: bv # 1031| ruvelem->csn == NULL ? "" : " ", # 1032| ruvelem->csn == NULL ? "" : csn_as_string(ruvelem->csn, PR_FALSE, csnStr2)); # 1033|-> bv->bv_len = strlen(bv->bv_val); # 1034| } # 1035| } Error: COMPILER_WARNING (CWE-704): [#def14] 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/plugins/replication/urp_tombstone.c: scope_hint: In function 'get_valid_parent_for_conflict' 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/plugins/replication/urp_tombstone.c:62:17: warning[-Wdiscarded-qualifiers]: assignment discards 'const' qualifier from pointer target type # 62 | validdn = strstr(replconflict, " (ADD) "); # | ^ # 60| # 61| if (replconflict) { # 62|-> validdn = strstr(replconflict, " (ADD) "); # 63| if (validdn) { # 64| validdn += 7; Error: COMPILER_WARNING (CWE-704): [#def15] 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/plugins/replication/urp_tombstone.c: scope_hint: In function 'conflict_to_tombstone' 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/plugins/replication/urp_tombstone.c:212:20: warning[-Wdiscarded-qualifiers]: assignment discards 'const' qualifier from pointer target type # 212 | conflictdn = strstr(replconflict, " (ADD) "); # | ^ # 210| # 211| if (replconflict) { # 212|-> conflictdn = strstr(replconflict, " (ADD) "); # 213| if (conflictdn == NULL) { # 214| /* error, wrong type of conflict */ Error: COMPILER_WARNING (CWE-704): [#def16] 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/plugins/replication/windows_protocol_util.c: scope_hint: In function 'extract_guid_from_tombstone_dn' 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/plugins/replication/windows_protocol_util.c:3374:23: warning[-Wdiscarded-qualifiers]: assignment discards 'const' qualifier from pointer target type # 3374 | if ((colon_offset = strchr(dn, ':'))) { # | ^ # 3372| # 3373| /* First find the 'DEL:' */ # 3374|-> if ((colon_offset = strchr(dn, ':'))) { # 3375| /* Then scan forward to the next ',' */ # 3376| comma_offset = strchr(colon_offset, ','); Error: COMPILER_WARNING (CWE-704): [#def17] 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/plugins/uiduniq/uid.c: scope_hint: In function 'preop_add' 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/plugins/uiduniq/uid.c:1033:28: warning[-Wdiscarded-qualifiers]: initialization discards 'const' qualifier from pointer target type # 1031| # 1032| for (i = 0; attrNames && attrNames[i]; i++) { # 1033|-> char *attr_match = strchr(attrNames[i], ':'); # 1034| if (attr_match != NULL) { # 1035| attr_match[0] = '\0'; Error: COMPILER_WARNING (CWE-704): [#def18] 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/plugins/uiduniq/uid.c: scope_hint: In function 'preop_modify' 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/plugins/uiduniq/uid.c:1181:32: warning[-Wdiscarded-qualifiers]: initialization discards 'const' qualifier from pointer target type # 1179| mod = *mods; # 1180| for (i = 0; attrNames && attrNames[i]; i++) { # 1181|-> char *attr_match = strchr(attrNames[i], ':'); # 1182| if (attr_match != NULL) { # 1183| attr_match[0] = '\0'; Error: GCC_ANALYZER_WARNING (CWE-126): [#def19] 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/slapd/accesslog.c: scope_hint: In function 'json_obj_add_str' 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/slapd/accesslog.c:30:9: warning[-Wanalyzer-out-of-bounds]: stack-based buffer over-read 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/slapd/accesslog.c: scope_hint: In function 'json_obj_add_str' 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/slapd/accesslog.c:30:9: note: read of 433 bytes from after the end of 'local_time' 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/slapd/accesslog.c:30:9: note: valid subscripts for 'local_time' are '[0]' to '[74]' # 28| if (strlen(value) > MAX_ELEMENT_SIZE) { # 29| /* we use -4 to leave room for the NULL terminator */ # 30|-> memcpy(&val_buffer, value, MAX_ELEMENT_SIZE-4); # 31| memcpy(&val_buffer[MAX_ELEMENT_SIZE-4], "...", 3); # 32| } else { Error: COMPILER_WARNING (CWE-704): [#def20] 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/slapd/attr.c: scope_hint: In function 'slapi_attr_init_locking_optional' 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/slapd/attr.c:329:29: warning[-Wdiscarded-qualifiers]: assignment discards 'const' qualifier from pointer target type # 329 | attroptions = strchr(type, ';'); # | ^ # 327| # 328| if (NULL != type) { # 329|-> attroptions = strchr(type, ';'); # 330| } # 331| Error: COMPILER_WARNING (CWE-704): [#def21] 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/slapd/attrsyntax.c: scope_hint: In function 'attr_syntax_exists' 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/slapd/attrsyntax.c:586:12: warning[-Wdiscarded-qualifiers]: assignment discards 'const' qualifier from pointer target type # 584| # 585| /* Ignore any attribute subtypes. */ # 586|-> if ((p = strchr(attr_name, ';'))) { # 587| int check_attr_len = p - attr_name + 1; # 588| Error: COMPILER_WARNING (CWE-1023): [#def22] 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/slapd/auth.c:424:5: warning[-Wswitch]: enumeration value ‘ssl_grp_ec_curve25519’ not handled in switch # 422| } # 423| /* Check that PQC keaGroup is KEM */ # 424|-> switch (sci->keaGroup) { # 425| case ssl_grp_kem_secp256r1mlkem768: # 426| case ssl_grp_kem_secp384r1mlkem1024: Error: COMPILER_WARNING (CWE-1023): [#def23] 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/slapd/auth.c:424:5: warning[-Wswitch]: enumeration value ‘ssl_grp_ec_secp160k1’ not handled in switch # 422| } # 423| /* Check that PQC keaGroup is KEM */ # 424|-> switch (sci->keaGroup) { # 425| case ssl_grp_kem_secp256r1mlkem768: # 426| case ssl_grp_kem_secp384r1mlkem1024: Error: COMPILER_WARNING (CWE-1023): [#def24] 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/slapd/auth.c:424:5: warning[-Wswitch]: enumeration value ‘ssl_grp_ec_secp160r1’ not handled in switch # 422| } # 423| /* Check that PQC keaGroup is KEM */ # 424|-> switch (sci->keaGroup) { # 425| case ssl_grp_kem_secp256r1mlkem768: # 426| case ssl_grp_kem_secp384r1mlkem1024: Error: COMPILER_WARNING (CWE-1023): [#def25] 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/slapd/auth.c:424:5: warning[-Wswitch]: enumeration value ‘ssl_grp_ec_secp160r2’ not handled in switch # 422| } # 423| /* Check that PQC keaGroup is KEM */ # 424|-> switch (sci->keaGroup) { # 425| case ssl_grp_kem_secp256r1mlkem768: # 426| case ssl_grp_kem_secp384r1mlkem1024: Error: COMPILER_WARNING (CWE-1023): [#def26] 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/slapd/auth.c:424:5: warning[-Wswitch]: enumeration value ‘ssl_grp_ec_secp192k1’ not handled in switch # 422| } # 423| /* Check that PQC keaGroup is KEM */ # 424|-> switch (sci->keaGroup) { # 425| case ssl_grp_kem_secp256r1mlkem768: # 426| case ssl_grp_kem_secp384r1mlkem1024: Error: COMPILER_WARNING (CWE-1023): [#def27] 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/slapd/auth.c:424:5: warning[-Wswitch]: enumeration value ‘ssl_grp_ec_secp192r1’ not handled in switch # 422| } # 423| /* Check that PQC keaGroup is KEM */ # 424|-> switch (sci->keaGroup) { # 425| case ssl_grp_kem_secp256r1mlkem768: # 426| case ssl_grp_kem_secp384r1mlkem1024: Error: COMPILER_WARNING (CWE-1023): [#def28] 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/slapd/auth.c:424:5: warning[-Wswitch]: enumeration value ‘ssl_grp_ec_secp224k1’ not handled in switch # 422| } # 423| /* Check that PQC keaGroup is KEM */ # 424|-> switch (sci->keaGroup) { # 425| case ssl_grp_kem_secp256r1mlkem768: # 426| case ssl_grp_kem_secp384r1mlkem1024: Error: COMPILER_WARNING (CWE-1023): [#def29] 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/slapd/auth.c:424:5: warning[-Wswitch]: enumeration value ‘ssl_grp_ec_secp224r1’ not handled in switch # 422| } # 423| /* Check that PQC keaGroup is KEM */ # 424|-> switch (sci->keaGroup) { # 425| case ssl_grp_kem_secp256r1mlkem768: # 426| case ssl_grp_kem_secp384r1mlkem1024: Error: COMPILER_WARNING (CWE-1023): [#def30] 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/slapd/auth.c:424:5: warning[-Wswitch]: enumeration value ‘ssl_grp_ec_secp256k1’ not handled in switch # 422| } # 423| /* Check that PQC keaGroup is KEM */ # 424|-> switch (sci->keaGroup) { # 425| case ssl_grp_kem_secp256r1mlkem768: # 426| case ssl_grp_kem_secp384r1mlkem1024: Error: COMPILER_WARNING (CWE-1023): [#def31] 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/slapd/auth.c:424:5: warning[-Wswitch]: enumeration value ‘ssl_grp_ec_secp256r1’ not handled in switch # 422| } # 423| /* Check that PQC keaGroup is KEM */ # 424|-> switch (sci->keaGroup) { # 425| case ssl_grp_kem_secp256r1mlkem768: # 426| case ssl_grp_kem_secp384r1mlkem1024: Error: COMPILER_WARNING (CWE-1023): [#def32] 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/slapd/auth.c:424:5: warning[-Wswitch]: enumeration value ‘ssl_grp_ec_secp384r1’ not handled in switch # 422| } # 423| /* Check that PQC keaGroup is KEM */ # 424|-> switch (sci->keaGroup) { # 425| case ssl_grp_kem_secp256r1mlkem768: # 426| case ssl_grp_kem_secp384r1mlkem1024: Error: COMPILER_WARNING (CWE-1023): [#def33] 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/slapd/auth.c:424:5: warning[-Wswitch]: enumeration value ‘ssl_grp_ec_secp521r1’ not handled in switch # 422| } # 423| /* Check that PQC keaGroup is KEM */ # 424|-> switch (sci->keaGroup) { # 425| case ssl_grp_kem_secp256r1mlkem768: # 426| case ssl_grp_kem_secp384r1mlkem1024: Error: COMPILER_WARNING (CWE-1023): [#def34] 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/slapd/auth.c: scope_hint: In function ‘check_pqc’ 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/slapd/auth.c:424:5: warning[-Wswitch]: enumeration value ‘ssl_grp_ec_sect163k1’ not handled in switch # 424 | switch (sci->keaGroup) { # | ^~~~~~ # 422| } # 423| /* Check that PQC keaGroup is KEM */ # 424|-> switch (sci->keaGroup) { # 425| case ssl_grp_kem_secp256r1mlkem768: # 426| case ssl_grp_kem_secp384r1mlkem1024: Error: COMPILER_WARNING (CWE-1023): [#def35] 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/slapd/auth.c:424:5: warning[-Wswitch]: enumeration value ‘ssl_grp_ec_sect163r1’ not handled in switch # 422| } # 423| /* Check that PQC keaGroup is KEM */ # 424|-> switch (sci->keaGroup) { # 425| case ssl_grp_kem_secp256r1mlkem768: # 426| case ssl_grp_kem_secp384r1mlkem1024: Error: COMPILER_WARNING (CWE-1023): [#def36] 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/slapd/auth.c:424:5: warning[-Wswitch]: enumeration value ‘ssl_grp_ec_sect163r2’ not handled in switch # 422| } # 423| /* Check that PQC keaGroup is KEM */ # 424|-> switch (sci->keaGroup) { # 425| case ssl_grp_kem_secp256r1mlkem768: # 426| case ssl_grp_kem_secp384r1mlkem1024: Error: COMPILER_WARNING (CWE-1023): [#def37] 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/slapd/auth.c:424:5: warning[-Wswitch]: enumeration value ‘ssl_grp_ec_sect193r1’ not handled in switch # 422| } # 423| /* Check that PQC keaGroup is KEM */ # 424|-> switch (sci->keaGroup) { # 425| case ssl_grp_kem_secp256r1mlkem768: # 426| case ssl_grp_kem_secp384r1mlkem1024: Error: COMPILER_WARNING (CWE-1023): [#def38] 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/slapd/auth.c:424:5: warning[-Wswitch]: enumeration value ‘ssl_grp_ec_sect193r2’ not handled in switch # 422| } # 423| /* Check that PQC keaGroup is KEM */ # 424|-> switch (sci->keaGroup) { # 425| case ssl_grp_kem_secp256r1mlkem768: # 426| case ssl_grp_kem_secp384r1mlkem1024: Error: COMPILER_WARNING (CWE-1023): [#def39] 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/slapd/auth.c:424:5: warning[-Wswitch]: enumeration value ‘ssl_grp_ec_sect233k1’ not handled in switch # 422| } # 423| /* Check that PQC keaGroup is KEM */ # 424|-> switch (sci->keaGroup) { # 425| case ssl_grp_kem_secp256r1mlkem768: # 426| case ssl_grp_kem_secp384r1mlkem1024: Error: COMPILER_WARNING (CWE-1023): [#def40] 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/slapd/auth.c:424:5: warning[-Wswitch]: enumeration value ‘ssl_grp_ec_sect233r1’ not handled in switch # 422| } # 423| /* Check that PQC keaGroup is KEM */ # 424|-> switch (sci->keaGroup) { # 425| case ssl_grp_kem_secp256r1mlkem768: # 426| case ssl_grp_kem_secp384r1mlkem1024: Error: COMPILER_WARNING (CWE-1023): [#def41] 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/slapd/auth.c:424:5: warning[-Wswitch]: enumeration value ‘ssl_grp_ec_sect239k1’ not handled in switch # 422| } # 423| /* Check that PQC keaGroup is KEM */ # 424|-> switch (sci->keaGroup) { # 425| case ssl_grp_kem_secp256r1mlkem768: # 426| case ssl_grp_kem_secp384r1mlkem1024: Error: COMPILER_WARNING (CWE-1023): [#def42] 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/slapd/auth.c:424:5: warning[-Wswitch]: enumeration value ‘ssl_grp_ec_sect283k1’ not handled in switch # 422| } # 423| /* Check that PQC keaGroup is KEM */ # 424|-> switch (sci->keaGroup) { # 425| case ssl_grp_kem_secp256r1mlkem768: # 426| case ssl_grp_kem_secp384r1mlkem1024: Error: COMPILER_WARNING (CWE-1023): [#def43] 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/slapd/auth.c:424:5: warning[-Wswitch]: enumeration value ‘ssl_grp_ec_sect283r1’ not handled in switch # 422| } # 423| /* Check that PQC keaGroup is KEM */ # 424|-> switch (sci->keaGroup) { # 425| case ssl_grp_kem_secp256r1mlkem768: # 426| case ssl_grp_kem_secp384r1mlkem1024: Error: COMPILER_WARNING (CWE-1023): [#def44] 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/slapd/auth.c:424:5: warning[-Wswitch]: enumeration value ‘ssl_grp_ec_sect409k1’ not handled in switch # 422| } # 423| /* Check that PQC keaGroup is KEM */ # 424|-> switch (sci->keaGroup) { # 425| case ssl_grp_kem_secp256r1mlkem768: # 426| case ssl_grp_kem_secp384r1mlkem1024: Error: COMPILER_WARNING (CWE-1023): [#def45] 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/slapd/auth.c:424:5: warning[-Wswitch]: enumeration value ‘ssl_grp_ec_sect409r1’ not handled in switch # 422| } # 423| /* Check that PQC keaGroup is KEM */ # 424|-> switch (sci->keaGroup) { # 425| case ssl_grp_kem_secp256r1mlkem768: # 426| case ssl_grp_kem_secp384r1mlkem1024: Error: COMPILER_WARNING (CWE-1023): [#def46] 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/slapd/auth.c:424:5: warning[-Wswitch]: enumeration value ‘ssl_grp_ec_sect571k1’ not handled in switch # 422| } # 423| /* Check that PQC keaGroup is KEM */ # 424|-> switch (sci->keaGroup) { # 425| case ssl_grp_kem_secp256r1mlkem768: # 426| case ssl_grp_kem_secp384r1mlkem1024: Error: COMPILER_WARNING (CWE-1023): [#def47] 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/slapd/auth.c:424:5: warning[-Wswitch]: enumeration value ‘ssl_grp_ec_sect571r1’ not handled in switch # 422| } # 423| /* Check that PQC keaGroup is KEM */ # 424|-> switch (sci->keaGroup) { # 425| case ssl_grp_kem_secp256r1mlkem768: # 426| case ssl_grp_kem_secp384r1mlkem1024: Error: COMPILER_WARNING (CWE-1023): [#def48] 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/slapd/auth.c:424:5: warning[-Wswitch]: enumeration value ‘ssl_grp_ffdhe_2048’ not handled in switch # 422| } # 423| /* Check that PQC keaGroup is KEM */ # 424|-> switch (sci->keaGroup) { # 425| case ssl_grp_kem_secp256r1mlkem768: # 426| case ssl_grp_kem_secp384r1mlkem1024: Error: COMPILER_WARNING (CWE-1023): [#def49] 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/slapd/auth.c:424:5: warning[-Wswitch]: enumeration value ‘ssl_grp_ffdhe_3072’ not handled in switch # 422| } # 423| /* Check that PQC keaGroup is KEM */ # 424|-> switch (sci->keaGroup) { # 425| case ssl_grp_kem_secp256r1mlkem768: # 426| case ssl_grp_kem_secp384r1mlkem1024: Error: COMPILER_WARNING (CWE-1023): [#def50] 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/slapd/auth.c:424:5: warning[-Wswitch]: enumeration value ‘ssl_grp_ffdhe_4096’ not handled in switch # 422| } # 423| /* Check that PQC keaGroup is KEM */ # 424|-> switch (sci->keaGroup) { # 425| case ssl_grp_kem_secp256r1mlkem768: # 426| case ssl_grp_kem_secp384r1mlkem1024: Error: COMPILER_WARNING (CWE-1023): [#def51] 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/slapd/auth.c:424:5: warning[-Wswitch]: enumeration value ‘ssl_grp_ffdhe_6144’ not handled in switch # 422| } # 423| /* Check that PQC keaGroup is KEM */ # 424|-> switch (sci->keaGroup) { # 425| case ssl_grp_kem_secp256r1mlkem768: # 426| case ssl_grp_kem_secp384r1mlkem1024: Error: COMPILER_WARNING (CWE-1023): [#def52] 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/slapd/auth.c:424:5: warning[-Wswitch]: enumeration value ‘ssl_grp_ffdhe_8192’ not handled in switch # 422| } # 423| /* Check that PQC keaGroup is KEM */ # 424|-> switch (sci->keaGroup) { # 425| case ssl_grp_kem_secp256r1mlkem768: # 426| case ssl_grp_kem_secp384r1mlkem1024: Error: COMPILER_WARNING (CWE-1023): [#def53] 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/slapd/auth.c:424:5: warning[-Wswitch]: enumeration value ‘ssl_grp_ffdhe_custom’ not handled in switch # 422| } # 423| /* Check that PQC keaGroup is KEM */ # 424|-> switch (sci->keaGroup) { # 425| case ssl_grp_kem_secp256r1mlkem768: # 426| case ssl_grp_kem_secp384r1mlkem1024: Error: COMPILER_WARNING (CWE-1023): [#def54] 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/slapd/auth.c:424:5: warning[-Wswitch]: enumeration value ‘ssl_grp_none’ not handled in switch # 422| } # 423| /* Check that PQC keaGroup is KEM */ # 424|-> switch (sci->keaGroup) { # 425| case ssl_grp_kem_secp256r1mlkem768: # 426| case ssl_grp_kem_secp384r1mlkem1024: Error: COMPILER_WARNING: [#def55] 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/slapd/back-ldbm/cache.c: scope_hint: In function 'dbgec_test_if_entry_pointer_is_valid.part.0' 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/slapd/back-ldbm/cache.c:585:20: warning[-Wstringop-overflow=]: writing 1 byte into a region of size 0 # 585 | *(char*)23 = 1; /* abort() somehow corrupt gdb stack backtrace so lets generate a SIGSEGV */ # | ^ lto1: note: destination object is likely at address zero # 583| #pragma GCC diagnostic ignored "-Warray-bounds=" # 584| #pragma GCC diagnostic ignored "-Wstringop-overflow=" # 585|-> *(char*)23 = 1; /* abort() somehow corrupt gdb stack backtrace so lets generate a SIGSEGV */ # 586| #pragma GCC diagnostic pop # 587| abort(); Error: COMPILER_WARNING (CWE-704): [#def56] 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/slapd/back-ldbm/db-bdb/bdb_layer.c: scope_hint: In function 'bdb_walk_dbfiles' 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/slapd/back-ldbm/db-bdb/bdb_layer.c:7313:16: warning[-Wdiscarded-qualifiers]: assignment discards 'const' qualifier from pointer target type # 7313 | pt = strrchr (direntry->name, *LDBM_FILENAME_SUFFIX); # | ^ # 7311| continue; # 7312| } # 7313|-> pt = strrchr (direntry->name, *LDBM_FILENAME_SUFFIX); # 7314| if (!pt || strcmp (pt, LDBM_FILENAME_SUFFIX)) { # 7315| continue; Error: CPPCHECK_WARNING (CWE-476): [#def57] 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/slapd/back-ldbm/db-bdb/bdb_ldif2db.c:410: error[ctunullpointer]: Null pointer dereference: include # 408| slapi_sdn_init(&sdn); # 409| /* for each subtree spec... */ # 410|-> for (i = 0; include[i]; i++) { # 411| IDList *idl = NULL; # 412| const char *suffix = slapi_sdn_get_ndn(slapi_be_getsuffix(be, 0)); Error: CPPCHECK_WARNING (CWE-476): [#def58] 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/slapd/back-ldbm/db-bdb/bdb_ldif2db.c:410: warning[nullPointer]: Possible null pointer dereference: include # 408| slapi_sdn_init(&sdn); # 409| /* for each subtree spec... */ # 410|-> for (i = 0; include[i]; i++) { # 411| IDList *idl = NULL; # 412| const char *suffix = slapi_sdn_get_ndn(slapi_be_getsuffix(be, 0)); Error: GCC_ANALYZER_WARNING (CWE-121): [#def59] 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/slapd/back-ldbm/db-bdb/bdb_verify.c: scope_hint: In function 'bdb_dbverify_ext' 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/slapd/back-ldbm/db-bdb/bdb_verify.c:150:16: warning[-Wanalyzer-out-of-bounds]: stack-based buffer overflow 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/slapd/csngen.h:20: included_from: Included from here. 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/slapd/slap.h:137: included_from: Included from here. 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/slapd/back-ldbm/back-ldbm.h:78: included_from: Included from here. 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/slapd/back-ldbm/db-bdb/bdb_layer.h:10: included_from: Included from here. 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/slapd/back-ldbm/db-bdb/bdb_verify.c:15: included_from: Included from here. 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/slapd/back-ldbm/db-bdb/bdb_verify.c:184:5: note: in expansion of macro 'slapi_log_err' /usr/include/features.h:540: included_from: Included from here. /usr/include/inttypes.h:25: included_from: Included from here. 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/slapd/slapi_pal.h:22: included_from: Included from here. 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/slapd/back-ldbm/back-ldbm.h:35: included_from: Included from here. 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/slapd/back-ldbm/db-bdb/bdb_verify.c:150:16: note: valid subscripts for 'dbdir' are '[0]' to '[4095]' # 148| } # 149| rval_main |= rval; # 150|-> *filep = '\0'; # 151| } # 152| PR_CloseDir(dirhandle); Error: COMPILER_WARNING: [#def60] 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/slapd/back-ldbm/filterindex.c: scope_hint: In function 'extensible_candidates' 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/slapd/back-ldbm/filterindex.c:492:24: warning[-Wunused-but-set-variable=]: variable 'n' set but not used # 492 | size_t n; # | ^ # 490| * Collect the resulting IDs in idl. # 491| */ # 492|-> size_t n; # 493| struct berval **val; # 494| mrTYPE = slapi_attr_basetype(mrTYPE, NULL, 0); Error: COMPILER_WARNING (CWE-704): [#def61] 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/slapd/configdse.c: scope_hint: In function 'postop_modify_config_dse' 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/slapd/configdse.c:518:19: warning[-Wdiscarded-qualifiers]: assignment discards 'const' qualifier from pointer target type # 516| /* Check if the server needs to be restarted */ # 517| for (j = 0; j < num_requires_restart; j++) { # 518|-> p = strchr(requires_restart[j], ':'); # 519| if (p == NULL) # 520| continue; Error: COMPILER_WARNING: [#def62] 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/slapd/connection.c: scope_hint: In function ‘connection_threadmain’ 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/slapd/connection.c:1724:10: warning[-Wunused-but-set-variable=]: variable ‘bypasspollcnt’ set but not used # 1724 | long bypasspollcnt = 0; # | ^~~~~~~~~~~~~ # 1722| int doshutdown = 0; # 1723| int maxthreads = 0; # 1724|-> long bypasspollcnt = 0; # 1725| bool is_busy = false; # 1726| Error: CPPCHECK_WARNING (CWE-476): [#def63] 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/slapd/dn.c:310: warning[nullPointer]: Possible null pointer dereference: L # 308| } /* if ( SEPARATOR( R[1] )) */ # 309| } /* for */ # 310|-> memmove(value, L, d - L + escape_skips); # 311| *d++ = '"'; /* closing quote */ # 312| } /* if (value_separator == dn) */ Error: COMPILER_WARNING (CWE-704): [#def64] 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/slapd/dn.c: scope_hint: In function 'slapi_dn_find_parent_ext' 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/slapd/dn.c:1592:22: warning[-Wdiscarded-qualifiers]: assignment discards 'const' qualifier from pointer target type # 1590| head = (char *)dn; # 1591| } else { # 1592|-> head = strchr(dn, ','); # 1593| if (head) { # 1594| head++; Error: COMPILER_WARNING: [#def65] 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/slapd/entry.c:191:9: warning[-Wunused-but-set-variable=]: variable 'nvals' set but not used # 191 | int nvals = 0; # | ^~~~~ # 189| const char *next; # 190| char *ptype = NULL; # 191|-> int nvals = 0; # 192| int del_nvals = 0; # 193| unsigned long attr_val_cnt = 0; Error: COMPILER_WARNING: [#def66] 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/slapd/entry.c: scope_hint: In function 'str2entry_fast' 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/slapd/entry.c:192:9: warning[-Wunused-but-set-variable=]: variable 'del_nvals' set but not used # 192 | int del_nvals = 0; # | ^~~~~~~~~ # 190| char *ptype = NULL; # 191| int nvals = 0; # 192|-> int del_nvals = 0; # 193| unsigned long attr_val_cnt = 0; # 194| CSN *attributedeletioncsn = NULL; /* Moved to this level so that the JCM csn_free call below gets useful */ Error: COMPILER_WARNING (CWE-563): [#def67] 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/slapd/haproxy.c: scope_hint: In function 'haproxy_parse_trusted_ips' 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/slapd/haproxy.c:660:13: warning[-Wunused-variable]: unused variable 'is_ipv6' # 660 | int is_ipv6; # | ^~~~~~~ # 658| char *slash_pos = strchr(ip_val, '/'); # 659| char ip_part[MAX_CIDR_STRING_LEN]; # 660|-> int is_ipv6; # 661| # 662| /* Store original for logging */ Error: COMPILER_WARNING (CWE-563): [#def68] 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/slapd/haproxy.c: scope_hint: In function 'haproxy_ip_matches_parsed' 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/slapd/haproxy.c:838:10: warning[-Wunused-variable]: unused variable 'ip_str' # 838 | char ip_str[INET6_ADDRSTRLEN]; # | ^~~~~~ # 836| size_t i; # 837| PRNetAddr normalized_ip; # 838|-> char ip_str[INET6_ADDRSTRLEN]; # 839| # 840| if (!entries || entry_count == 0 || !ip_addr) { Error: COMPILER_WARNING (CWE-704): [#def69] 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/slapd/ldaputil.c: scope_hint: In function 'slapi_ldap_url_parse' 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/slapd/ldaputil.c:253:19: warning[-Wdiscarded-qualifiers]: initialization discards 'const' qualifier from pointer target type # 253 | char *p = strstr(url, "://"); # | ^~~~~~ # 251| Go to the 3rd '/' or to the end of the string (convert only the host:port part) */ # 252| if (url) { # 253|-> char *p = strstr(url, "://"); # 254| if (p) { # 255| int foundspace = 0; Error: COMPILER_WARNING (CWE-704): [#def70] 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/slapd/ldaputil.c:276:21: warning[-Wdiscarded-qualifiers]: assignment discards 'const' qualifier from pointer target type # 276 | src = strstr(url, "://"); # | ^ # 274| dest = urlescaped; # 275| /* copy the scheme */ # 276|-> src = strstr(url, "://"); # 277| src += 3; # 278| memcpy(dest, url, src - url); Error: COMPILER_WARNING (CWE-704): [#def71] 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/slapd/log.c: scope_hint: In function 'log__fix_rotationinfof' 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/slapd/log.c:4997:23: warning[-Wdiscarded-qualifiers]: assignment discards 'const' qualifier from pointer target type # 4995| } # 4996| } else if (0 == strncmp(log_type, dirent->name, strlen(log_type)) && # 4997|-> (p = strchr(dirent->name, '.')) != NULL && # 4998| NULL != strchr(p, '-')) /* e.g., errors.20051123-165135 or errors.20051123-165135.gz */ # 4999| { Error: COMPILER_WARNING (CWE-704): [#def72] 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/slapd/log.c: scope_hint: In function 'log__check_prevlogs' 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/slapd/log.c:5177:16: warning[-Wdiscarded-qualifiers]: assignment discards 'const' qualifier from pointer target type # 5175| dirent = PR_ReadDir(dirptr, dirflags)) { # 5176| if (0 == strncmp(log_type, dirent->name, strlen(log_type)) && # 5177|-> (p = strchr(dirent->name, '.')) != NULL && # 5178| NULL != strchr(p, '-')) { /* e.g., errors.20051123-165135 or errors.20051123-165135.gz */ # 5179| PRBool is_compressed = PR_FALSE; Error: GCC_ANALYZER_WARNING (CWE-126): [#def73] 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/slapd/modutil.c: scope_hint: In function 'slapi_mods_add_modbvps.part.0' 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/slapd/modutil.c:272:35: warning[-Wanalyzer-out-of-bounds]: stack-based buffer over-read 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/slapd/modutil.c:272:35: note: read of 8 bytes from after the end of 'bvps' 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/slapd/modutil.c:272:35: note: valid subscripts for 'bvps' are '[0]' to '[1]' # 270| sizeof(struct berval *)); # 271| for (i = 0; i < num_values; i++) { # 272|-> mod->mod_bvalues[i] = ber_bvdup((struct berval *)bvps[i]); /* jcm had to cast away const */ # 273| } # 274| mod->mod_bvalues[num_values] = NULL; Error: CPPCHECK_WARNING (CWE-457): [#def74] 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/slapd/plugin.c:3159: warning[uninitvar]: Uninitialized variable: output # 3157| } # 3158| # 3159|-> return slapi_ch_strdup(output); # 3160| } # 3161| Error: COMPILER_WARNING: [#def75] 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/slapd/pw.c:988:9: warning[-Wunused-but-set-variable=]: variable 'digits' set but not used # 988 | int digits = 0; # | ^~~~~~ # 986| pw_max_class_repeats(const char *new, int32_t max_repeats) # 987| { # 988|-> int digits = 0; # 989| int uppers = 0; # 990| int lowers = 0; Error: COMPILER_WARNING: [#def76] 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/slapd/pw.c:989:9: warning[-Wunused-but-set-variable=]: variable 'uppers' set but not used # 989 | int uppers = 0; # | ^~~~~~ # 987| { # 988| int digits = 0; # 989|-> int uppers = 0; # 990| int lowers = 0; # 991| int others = 0; Error: COMPILER_WARNING: [#def77] 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/slapd/pw.c:990:9: warning[-Wunused-but-set-variable=]: variable 'lowers' set but not used # 990 | int lowers = 0; # | ^~~~~~ # 988| int digits = 0; # 989| int uppers = 0; # 990|-> int lowers = 0; # 991| int others = 0; # 992| int i; Error: COMPILER_WARNING: [#def78] 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/slapd/pw.c: scope_hint: In function 'pw_max_class_repeats' 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/slapd/pw.c:991:9: warning[-Wunused-but-set-variable=]: variable 'others' set but not used # 991 | int others = 0; # | ^~~~~~ # 989| int uppers = 0; # 990| int lowers = 0; # 991|-> int others = 0; # 992| int i; # 993| enum { NONE, DIGIT, UCASE, LCASE, OTHER } prevclass = NONE; Error: CPPCHECK_WARNING (CWE-457): [#def79] 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/slapd/slapd_plhash.c:43: error[uninitvar]: Uninitialized variable: *hep # 41| h >>= ht->shift; # 42| hep = &ht->buckets[h]; # 43|-> while ((he = *hep) != 0) { # 44| if (he->keyHash == keyHash && (*ht->keyCompare)(key, he->key)) { # 45| return hep; Error: COMPILER_WARNING: [#def80] 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/slapd/slapi-memberof.c: scope_hint: In function 'sm_merge_ancestors' 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/slapd/slapi-memberof.c:391:9: warning[-Wunused-but-set-variable=]: variable 'merged_cnt' set but not used # 391 | int merged_cnt = 0; # | ^~~~~~~~~~ # 389| Slapi_ValueSet *v1_nsuniqueidvals = *((sm_memberof_get_groups_data *) v1)->nsuniqueidvals; # 390| Slapi_ValueSet *v2_nsuniqueidvals = *((sm_memberof_get_groups_data *) v2)->nsuniqueidvals; # 391|-> int merged_cnt = 0; # 392| # 393| hint = slapi_valueset_first_value(v1_groupvals, &sval); Error: COMPILER_WARNING: [#def81] 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/slapd/ssl.c: scope_hint: In function 'slapd_nss_init' 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/slapd/ssl.c:1054:14: warning[-Wunused-but-set-variable=]: variable 'nssFlags' set but not used # 1054 | PRUint32 nssFlags = 0; # | ^~~~~~~~ # 1052| int len = 0; # 1053| int create_certdb = 0; # 1054|-> PRUint32 nssFlags = 0; # 1055| char *certdir; # 1056| char dmin[VERSION_STR_LENGTH], dmax[VERSION_STR_LENGTH]; Error: CPPCHECK_WARNING (CWE-401): [#def82] 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/slapd/tools/dbscan.c:787: error[memleakOnRealloc]: Common realloc mistake: 'buf' nulled but not freed upon failure # 785| if (buflen < tmpbuflen) { # 786| buflen = tmpbuflen; # 787|-> buf = (unsigned char *)realloc(buf, buflen); # 788| } # 789| if (!buf) { Error: GCC_ANALYZER_WARNING (CWE-688): [#def83] 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/slapd/tools/dbscan.c: scope_hint: In function ‘display_item’ 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/slapd/tools/dbscan.c:795:9: warning[-Wanalyzer-null-argument]: use of NULL where non-null expected <built-in>: note: argument 1 of ‘__builtin_puts’ must be non-null # 793| # 794| if (display_mode & RAWDATA) { # 795|-> printf("%s\n", format(key->data, key->size, buf, buflen)); # 796| printf("\t%s\n", format(data->data, data->size, buf, buflen)); # 797| } else { Error: GCC_ANALYZER_WARNING (CWE-401): [#def84] 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/slapd/tools/ldaptool-sasl.c: scope_hint: In function ‘get_new_value’ 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/slapd/tools/ldaptool-sasl.c:260:26: warning[-Wanalyzer-malloc-leak]: leak of ‘strdup(newvalue)’ # 258| free((void *)interact->result); # 259| } # 260|-> interact->result = strdup(newvalue); # 261| memset(newvalue, '\0', len); # 262| Error: COMPILER_WARNING (CWE-704): [#def85] 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/slapd/tools/ldclt/ldapfct.c: scope_hint: In function ‘ldclt_dirname’ 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/slapd/tools/ldclt/ldapfct.c:319:23: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type # 319 | if (path && ((ptr = strrchr(path, sep))) && *(ptr + 1)) { # | ^ # 317| char *ptr = NULL; # 318| char *ret = NULL; # 319|-> if (path && ((ptr = strrchr(path, sep))) && *(ptr + 1)) { # 320| ret = PL_strndup(path, ptr - path); # 321| } else { Error: GCC_ANALYZER_WARNING (CWE-688): [#def86] 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/slapd/tools/ldclt/ldapfct.c: scope_hint: In function ‘connectToLDAP’ 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/slapd/tools/ldclt/ldapfct.c:697:31: warning[-Wanalyzer-null-argument]: use of NULL ‘pwd’ where non-null expected 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/slapd/tools/ldclt/ldapfct.c:28: included_from: Included from here. /usr/include/string.h:439:15: note: argument 1 of ‘strlen’ must be non-null # 695| if (passwd) { # 696| cred.bv_val = (char *)pwd; # 697|-> cred.bv_len = strlen(pwd); # 698| } # 699| if (mode & VERY_VERBOSE) Error: CPPCHECK_WARNING (CWE-476): [#def87] 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/slapd/tools/ldclt/ldapfct.c:1204: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: p # 1202| ldcltExit(EXIT_RESSOURCE); /*JLS 18-12-00*/ # 1203| } /*JLS 06-03-00*/ # 1204|-> p[0] = str1; # 1205| p[1] = NULL; # 1206| return (p); Error: CPPCHECK_WARNING (CWE-476): [#def88] 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/slapd/tools/ldclt/ldapfct.c:1205: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: p # 1203| } /*JLS 06-03-00*/ # 1204| p[0] = str1; # 1205|-> p[1] = NULL; # 1206| return (p); # 1207| } Error: CPPCHECK_WARNING (CWE-119): [#def89] 389-ds-base-3.2.0.202603271733git5d35b94ef/ldap/servers/slapd/uuid.c:814: error[bufferAccessOutOfBounds]: Buffer is accessed out of bounds: hash # 812| * plus a few constants. */ # 813| # 814|-> memcpy(uuid, hash, sizeof(guid_t)); # 815| # 816| /* when migrating, we skip the ntohl in order to read in old, Error: CPPCHECK_WARNING (CWE-682): [#def90] 389-ds-base-3.2.0.202603271733git5d35b94ef/lib/ldaputil/dbconf.c:655: error[nullPointerArithmeticOutOfMemory]: If memory allocation fails: pointer addition with NULL pointer. # 653| # 654| dbnames = (char **)malloc(32 * 1024); # 655|-> heap = (char *)dbnames + 2 * 1024; # 656| # 657| if (!dbnames) { Error: CPPCHECK_WARNING (CWE-457): [#def91] 389-ds-base-3.2.0.202603271733git5d35b94ef/lib/libaccess/access_plhash.cpp:49: error[uninitvar]: Uninitialized variable: *hep # 47| h >>= ht->shift; # 48| hep = &ht->buckets[h]; # 49|-> while ((he = *hep) != 0) { # 50| if (he->keyHash == keyHash && (*ht->keyCompare)(key, he->key)) { # 51| return hep; Error: CPPCHECK_WARNING (CWE-457): [#def92] 389-ds-base-3.2.0.202603271733git5d35b94ef/lib/libaccess/acleval.cpp:95: warning[uninitvar]: Uninitialized variable: rv # 93| # 94| /* One more possibility if nothing found yet... */ # 95|-> if (rv) { # 96| rv = symTableFindSym(table, "*", 0, (void **)&sym); # 97| } Error: CPPCHECK_WARNING (CWE-476): [#def93] 389-ds-base-3.2.0.202603271733git5d35b94ef/lib/libsi18n/reshash.c:51: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: pvalue # 49| } # 50| pvalue = (ValueNode *)malloc(sizeof(ValueNode)); # 51|-> memset(pvalue, 0, sizeof(ValueNode)); # 52| # 53| prev->next = pvalue; Error: CPPCHECK_WARNING (CWE-476): [#def94] 389-ds-base-3.2.0.202603271733git5d35b94ef/lib/libsi18n/reshash.c:55: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: pvalue # 53| prev->next = pvalue; # 54| # 55|-> pvalue->language = strdup(language); # 56| pvalue->value = strdup(value); # 57| return 0; Error: CPPCHECK_WARNING (CWE-476): [#def95] 389-ds-base-3.2.0.202603271733git5d35b94ef/lib/libsi18n/reshash.c:56: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: pvalue # 54| # 55| pvalue->language = strdup(language); # 56|-> pvalue->value = strdup(value); # 57| return 0; # 58| } Error: CPPCHECK_WARNING (CWE-476): [#def96] 389-ds-base-3.2.0.202603271733git5d35b94ef/lib/libsi18n/reshash.c:152: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: node # 150| */ # 151| node = (TreeNode *)malloc(sizeof(TreeNode)); # 152|-> memset(node, 0, sizeof(TreeNode)); # 153| vnode = (ValueNode *)malloc(sizeof(ValueNode)); # 154| memset(vnode, 0, sizeof(ValueNode)); Error: CPPCHECK_WARNING (CWE-476): [#def97] 389-ds-base-3.2.0.202603271733git5d35b94ef/lib/libsi18n/reshash.c:154: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: vnode # 152| memset(node, 0, sizeof(TreeNode)); # 153| vnode = (ValueNode *)malloc(sizeof(ValueNode)); # 154|-> memset(vnode, 0, sizeof(ValueNode)); # 155| node->vlist = vnode; # 156| Error: GCC_ANALYZER_WARNING (CWE-688): [#def98] 389-ds-base-3.2.0.202603271733git5d35b94ef/lib/libsi18n/reshash.c: scope_hint: In function 'TreeAddItem' 389-ds-base-3.2.0.202603271733git5d35b94ef/lib/libsi18n/reshash.c:154:13: warning[-Wanalyzer-possible-null-argument]: use of possibly-NULL 'vnode' where non-null expected 389-ds-base-3.2.0.202603271733git5d35b94ef/lib/libsi18n/reshash.c:16: included_from: Included from here. /usr/include/string.h:65:14: note: argument 1 of 'memset' must be non-null # 152| memset(node, 0, sizeof(TreeNode)); # 153| vnode = (ValueNode *)malloc(sizeof(ValueNode)); # 154|-> memset(vnode, 0, sizeof(ValueNode)); # 155| node->vlist = vnode; # 156| Error: CPPCHECK_WARNING (CWE-476): [#def99] 389-ds-base-3.2.0.202603271733git5d35b94ef/lib/libsi18n/reshash.c:155: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: node # 153| vnode = (ValueNode *)malloc(sizeof(ValueNode)); # 154| memset(vnode, 0, sizeof(ValueNode)); # 155|-> node->vlist = vnode; # 156| # 157| res->right = node; Error: GCC_ANALYZER_WARNING (CWE-476): [#def100] 389-ds-base-3.2.0.202603271733git5d35b94ef/lib/libsi18n/reshash.c:155:25: warning[-Wanalyzer-possible-null-dereference]: dereference of possibly-NULL 'node' # 153| vnode = (ValueNode *)malloc(sizeof(ValueNode)); # 154| memset(vnode, 0, sizeof(ValueNode)); # 155|-> node->vlist = vnode; # 156| # 157| res->right = node; Error: CPPCHECK_WARNING (CWE-476): [#def101] 389-ds-base-3.2.0.202603271733git5d35b94ef/lib/libsi18n/reshash.c:160: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: node # 158| # 159| /* assign value to node */ # 160|-> node->key = strdup(key); # 161| if (language == NULL) # 162| node->value = strdup(value); Error: CPPCHECK_WARNING (CWE-476): [#def102] 389-ds-base-3.2.0.202603271733git5d35b94ef/lib/libsi18n/reshash.c:162: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: node # 160| node->key = strdup(key); # 161| if (language == NULL) # 162|-> node->value = strdup(value); # 163| else # 164| ValueAddLanguageItem(node->vlist, value, language); Error: CPPCHECK_WARNING (CWE-476): [#def103] 389-ds-base-3.2.0.202603271733git5d35b94ef/lib/libsi18n/reshash.c:164: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: node # 162| node->value = strdup(value); # 163| else # 164|-> ValueAddLanguageItem(node->vlist, value, language); # 165| } else { # 166| return TreeAddItem(res->right, key, value, language); Error: CPPCHECK_WARNING (CWE-476): [#def104] 389-ds-base-3.2.0.202603271733git5d35b94ef/lib/libsi18n/reshash.c:171: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: node # 169| if (res->left == NULL) { # 170| node = (TreeNode *)malloc(sizeof(TreeNode)); # 171|-> memset(node, 0, sizeof(TreeNode)); # 172| vnode = (ValueNode *)malloc(sizeof(ValueNode)); # 173| memset(vnode, 0, sizeof(ValueNode)); Error: CPPCHECK_WARNING (CWE-476): [#def105] 389-ds-base-3.2.0.202603271733git5d35b94ef/lib/libsi18n/reshash.c:173: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: vnode # 171| memset(node, 0, sizeof(TreeNode)); # 172| vnode = (ValueNode *)malloc(sizeof(ValueNode)); # 173|-> memset(vnode, 0, sizeof(ValueNode)); # 174| node->vlist = vnode; # 175| Error: CPPCHECK_WARNING (CWE-476): [#def106] 389-ds-base-3.2.0.202603271733git5d35b94ef/lib/libsi18n/reshash.c:174: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: node # 172| vnode = (ValueNode *)malloc(sizeof(ValueNode)); # 173| memset(vnode, 0, sizeof(ValueNode)); # 174|-> node->vlist = vnode; # 175| # 176| res->left = node; Error: CPPCHECK_WARNING (CWE-476): [#def107] 389-ds-base-3.2.0.202603271733git5d35b94ef/lib/libsi18n/reshash.c:179: warning[nullPointerOutOfMemory]: If memory allocation fails, then there is a possible null pointer dereference: node # 177| # 178| /* assign value to node */ # 179|-> node->key = strdup(key); # 180| if (language == NULL) # 181| node->value = strdup(value); Error: GCC_ANALYZER_WARNING (CWE-457): [#def108] jemalloc-5.3.0/include/jemalloc/internal/emap.h:340:35: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘*<unknown>.rtree_leaf’ jemalloc-5.3.0/src/tcache.c: scope_hint: In function ‘tcache_bin_flush_edatas_lookup’ jemalloc-5.3.0/src/tcache.c: scope_hint: In function ‘tcache_bin_flush_edatas_lookup’ jemalloc-5.3.0/src/tcache.c: scope_hint: In function ‘tcache_bin_flush_edatas_lookup’ jemalloc-5.3.0/include/jemalloc/internal/emap.h: scope_hint: In function ‘tcache_bin_flush_edatas_lookup’ jemalloc-5.3.0/include/jemalloc/internal/tsd.h:89:5: note: in expansion of macro ‘O’ jemalloc-5.3.0/include/jemalloc/internal/tsd.h:344:1: note: in expansion of macro ‘TSD_DATA_SLOW’ jemalloc-5.3.0/include/jemalloc/internal/tsd.h:89:5: note: in expansion of macro ‘O’ jemalloc-5.3.0/include/jemalloc/internal/tsd.h:323:1: note: in expansion of macro ‘TSD_DATA_SLOW’ jemalloc-5.3.0/src/tcache.c: scope_hint: In function ‘tcache_bin_flush_edatas_lookup’ jemalloc-5.3.0/src/tcache.c: scope_hint: In function ‘tcache_bin_flush_edatas_lookup’ jemalloc-5.3.0/src/tcache.c: scope_hint: In function ‘tcache_bin_flush_edatas_lookup’ jemalloc-5.3.0/include/jemalloc/internal/tcache_structs.h:4: included_from: Included from here. jemalloc-5.3.0/include/jemalloc/internal/tsd.h:14: included_from: Included from here. jemalloc-5.3.0/src/tcache.c:567:9: note: in expansion of macro ‘CACHE_BIN_PTR_ARRAY_DECLARE’ jemalloc-5.3.0/include/jemalloc/internal/jemalloc_internal_types.h:127:50: note: in definition of macro ‘VARIABLE_ARRAY’ jemalloc-5.3.0/include/jemalloc/internal/jemalloc_internal_types.h:127:50: note: in definition of macro ‘VARIABLE_ARRAY’ jemalloc-5.3.0/src/tcache.c: scope_hint: In function ‘tcache_bin_flush_edatas_lookup’ jemalloc-5.3.0/include/jemalloc/internal/emap.h: scope_hint: In function ‘tcache_bin_flush_edatas_lookup’ jemalloc-5.3.0/include/jemalloc/internal/tsd.h:89:5: note: in expansion of macro ‘O’ jemalloc-5.3.0/include/jemalloc/internal/tsd.h:344:1: note: in expansion of macro ‘TSD_DATA_SLOW’ jemalloc-5.3.0/include/jemalloc/internal/tsd.h:89:5: note: in expansion of macro ‘O’ jemalloc-5.3.0/include/jemalloc/internal/tsd.h:323:1: note: in expansion of macro ‘TSD_DATA_SLOW’ # 338| # 339| for (size_t i = 0; i < nptrs; i++) { # 340|-> rtree_leaf_elm_t *elm = result[i].rtree_leaf; # 341| rtree_contents_t contents = rtree_leaf_elm_read(tsd_tsdn(tsd), # 342| &emap->rtree, elm, /* dependent */ true); Error: GCC_ANALYZER_WARNING (CWE-476): [#def109] jemalloc-5.3.0/include/jemalloc/internal/prof_structs.h:8: included_from: Included from here. jemalloc-5.3.0/include/jemalloc/internal/jemalloc_internal_includes.h:51: included_from: Included from here. jemalloc-5.3.0/src/prof_data.c:2: included_from: Included from here. jemalloc-5.3.0/src/prof_data.c: scope_hint: In function ‘tctx_tree_remove’ jemalloc-5.3.0/include/jemalloc/internal/rb.h:874:21: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘nodep’ jemalloc-5.3.0/include/jemalloc/internal/rb.h:564:5: note: in expansion of macro ‘rb_gen_impl’ jemalloc-5.3.0/src/prof_data.c:88:1: note: in expansion of macro ‘rb_gen’ jemalloc-5.3.0/src/prof_data.c: scope_hint: In function ‘tctx_tree_remove’ jemalloc-5.3.0/src/prof_data.c: scope_hint: In function ‘tctx_tree_remove’ jemalloc-5.3.0/include/jemalloc/internal/rb.h:820:1: note: in definition of macro ‘rb_gen_impl’ jemalloc-5.3.0/src/prof_data.c:88:1: note: in expansion of macro ‘rb_gen’ jemalloc-5.3.0/include/jemalloc/internal/rb.h:564:5: note: in expansion of macro ‘rb_gen_impl’ jemalloc-5.3.0/src/prof_data.c:88:1: note: in expansion of macro ‘rb_gen’ jemalloc-5.3.0/include/jemalloc/internal/rb.h:860:21: note: in expansion of macro ‘rbtn_red_get’ jemalloc-5.3.0/include/jemalloc/internal/rb.h:564:5: note: in expansion of macro ‘rb_gen_impl’ jemalloc-5.3.0/src/prof_data.c:88:1: note: in expansion of macro ‘rb_gen’ jemalloc-5.3.0/include/jemalloc/internal/rb.h:564:5: note: in expansion of macro ‘rb_gen_impl’ jemalloc-5.3.0/src/prof_data.c:88:1: note: in expansion of macro ‘rb_gen’ # 872| /* The pruned leaf node's child pointers are never accessed */\ # 873| /* again, so don't bother setting them to nil. */\ # 874|-> nodep->node = pathp->node; \ # 875| pathp->node = node; \ # 876| if (nodep == path) { \ Error: CPPCHECK_WARNING (CWE-786): [#def110] jemalloc-5.3.0/include/jemalloc/internal/rtree.h:404: error[negativeIndex]: Array 'rtree_ctx->l2_cache[8]' accessed at index -1, which is out of bounds. # 402| } while (0) # 403| /* Check the first cache entry. */ # 404|-> RTREE_CACHE_CHECK_L2(0); # 405| /* Search the remaining cache elements. */ # 406| for (unsigned i = 1; i < RTREE_CTX_NCACHE_L2; i++) { Error: GCC_ANALYZER_WARNING (CWE-457): [#def111] jemalloc-5.3.0/src/hook.c:7: included_from: Included from here. jemalloc-5.3.0/src/hook.c: scope_hint: In function ‘seq_store_hooks’ jemalloc-5.3.0/include/jemalloc/internal/seq.h:30:17: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘buf[i]’ jemalloc-5.3.0/src/hook.c:15:1: note: in expansion of macro ‘seq_define’ jemalloc-5.3.0/src/hook.c:15:1: note: in expansion of macro ‘seq_define’ jemalloc-5.3.0/src/hook.c:15:1: note: in expansion of macro ‘seq_define’ jemalloc-5.3.0/include/jemalloc/internal/jemalloc_internal_decls.h:66: included_from: Included from here. jemalloc-5.3.0/include/jemalloc/internal/jemalloc_preamble.h:5: included_from: Included from here. jemalloc-5.3.0/src/hook.c:1: included_from: Included from here. jemalloc-5.3.0/src/hook.c:15:1: note: in expansion of macro ‘seq_define’ jemalloc-5.3.0/src/hook.c:15:1: note: in expansion of macro ‘seq_define’ jemalloc-5.3.0/src/hook.c:15:1: note: in expansion of macro ‘seq_define’ jemalloc-5.3.0/src/hook.c:15:1: note: in expansion of macro ‘seq_define’ jemalloc-5.3.0/src/hook.c:15:1: note: in expansion of macro ‘seq_define’ jemalloc-5.3.0/src/hook.c:15:1: note: in expansion of macro ‘seq_define’ # 28| atomic_fence(ATOMIC_RELEASE); \ # 29| for (size_t i = 0; i < sizeof(buf) / sizeof(size_t); i++) { \ # 30|-> atomic_store_zu(&dst->data[i], buf[i], ATOMIC_RELAXED); \ # 31| } \ # 32| atomic_store_zu(&dst->seq, old_seq + 2, ATOMIC_RELEASE); \ Error: GCC_ANALYZER_WARNING (CWE-476): [#def112] jemalloc-5.3.0/src/extent.c: scope_hint: In function ‘extent_try_coalesce_impl’ jemalloc-5.3.0/src/extent.c:869:28: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘coalesced’ jemalloc-5.3.0/src/extent.c: scope_hint: In function ‘extent_try_coalesce_impl’ # 867| # 868| if (ecache->delay_coalesce) { # 869|-> *coalesced = false; # 870| } # 871| return edata; Error: GCC_ANALYZER_WARNING (CWE-457): [#def113] jemalloc-5.3.0/src/hook.c: scope_hint: In function ‘hook_install_locked’ jemalloc-5.3.0/src/hook.c:34:36: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value ‘hooks_internal.in_use’ jemalloc-5.3.0/src/hook.c:6: included_from: Included from here. jemalloc-5.3.0/include/jemalloc/internal/mutex.h: scope_hint: In function ‘hook_install_locked’ jemalloc-5.3.0/src/hook.c:15:1: note: in expansion of macro ‘seq_define’ jemalloc-5.3.0/src/hook.c:15:1: note: in expansion of macro ‘seq_define’ jemalloc-5.3.0/src/hook.c:15:1: note: in expansion of macro ‘seq_define’ # 32| /* We hold mu; no concurrent access. */ # 33| assert(success); # 34|-> if (!hooks_internal.in_use) { # 35| hooks_internal.hooks = *to_install; # 36| hooks_internal.in_use = true; Error: CPPCHECK_WARNING (CWE-398): [#def114] jemalloc-5.3.0/src/jemalloc_cpp.cpp:102: error[throwInNoexceptFunction]: Unhandled exception thrown in function declared not to throw exceptions. # 100| return ptr; # 101| } # 102|-> return handleOOM(size, IsNoExcept); # 103| } # 104| Error: CPPCHECK_WARNING (CWE-476): [#def115] jemalloc-5.3.0/src/prof_data.c:70: error[ctunullpointer]: Null pointer dereference: a # 68| static int # 69| prof_tctx_comp(const prof_tctx_t *a, const prof_tctx_t *b) { # 70|-> uint64_t a_thr_uid = a->thr_uid; # 71| uint64_t b_thr_uid = b->thr_uid; # 72| int ret = (a_thr_uid > b_thr_uid) - (a_thr_uid < b_thr_uid); Error: CPPCHECK_WARNING (CWE-476): [#def116] jemalloc-5.3.0/src/prof_data.c:88: error[ctunullpointer]: Null pointer dereference: node # 86| } # 87| # 88|-> rb_gen(static UNUSED, tctx_tree_, prof_tctx_tree_t, prof_tctx_t, # 89| tctx_link, prof_tctx_comp) # 90| Error: CPPCHECK_WARNING (CWE-476): [#def117] jemalloc-5.3.0/src/prof_data.c:93: error[ctunullpointer]: Null pointer dereference: a # 91| static int # 92| prof_gctx_comp(const prof_gctx_t *a, const prof_gctx_t *b) { # 93|-> unsigned a_len = a->bt.len; # 94| unsigned b_len = b->bt.len; # 95| unsigned comp_len = (a_len < b_len) ? a_len : b_len; Error: CPPCHECK_WARNING (CWE-476): [#def118] jemalloc-5.3.0/src/prof_data.c:103: error[ctunullpointer]: Null pointer dereference: node # 101| } # 102| # 103|-> rb_gen(static UNUSED, gctx_tree_, prof_gctx_tree_t, prof_gctx_t, dump_link, # 104| prof_gctx_comp) # 105| Error: CPPCHECK_WARNING (CWE-476): [#def119] jemalloc-5.3.0/src/prof_data.c:109: error[ctunullpointer]: Null pointer dereference: a # 107| prof_tdata_comp(const prof_tdata_t *a, const prof_tdata_t *b) { # 108| int ret; # 109|-> uint64_t a_uid = a->thr_uid; # 110| uint64_t b_uid = b->thr_uid; # 111| Error: CPPCHECK_WARNING (CWE-476): [#def120] jemalloc-5.3.0/src/prof_data.c:122: error[ctunullpointer]: Null pointer dereference: node # 120| } # 121| # 122|-> rb_gen(static UNUSED, tdata_tree_, prof_tdata_tree_t, prof_tdata_t, tdata_link, # 123| prof_tdata_comp) # 124|
| analyzer-version-clippy | 1.94.0 |
| analyzer-version-cppcheck | 2.20.0 |
| analyzer-version-gcc | 16.0.1 |
| analyzer-version-gcc-analyzer | 16.0.1 |
| analyzer-version-shellcheck | 0.11.0 |
| analyzer-version-unicontrol | 0.0.2 |
| enabled-plugins | clippy, cppcheck, gcc, shellcheck, unicontrol |
| exit-code | 0 |
| host | ip-172-16-1-121.us-west-2.compute.internal |
| known-false-positives | /usr/share/csmock/known-false-positives.js |
| known-false-positives-rpm | known-false-positives-0.0.0.20260320.200800.gd35503f.main-1.el9.noarch |
| mock-config | fedora-rawhide-x86_64 |
| project-name | 389-ds-base-3.2.0.202603271733git5d35b94ef-pr7350 |
| store-results-to | /tmp/tmpff7wenhs/389-ds-base-3.2.0.202603271733git5d35b94ef-pr7350.tar.xz |
| time-created | 2026-03-27 18:04:43 |
| time-finished | 2026-03-27 18:18:28 |
| tool | csmock |
| tool-args | '/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'cppcheck,gcc,shellcheck,clippy,unicontrol' '-o' '/tmp/tmpff7wenhs/389-ds-base-3.2.0.202603271733git5d35b94ef-pr7350.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '/tmp/tmpff7wenhs/389-ds-base-3.2.0.202603271733git5d35b94ef-pr7350.src.rpm' |
| tool-version | csmock-3.8.4.20260302.153719.g8203630-1.el9 |