Fixed findings

List of Findings

Error: COMPILER_WARNING (CWE-1023): [#def1]
389-ds-base-3.2.0/ldap/servers/slapd/auth.c:424:5: warning[-Wswitch]: enumeration value ‘ssl_grp_ec_curve25519’ not handled in switch
#  422|       }
#  423|       /* Check that PQC keaGroup is KEM */
#  424|->     switch (sci->keaGroup) {
#  425|           case ssl_grp_kem_secp256r1mlkem768:
#  426|           case ssl_grp_kem_secp384r1mlkem1024:

Error: COMPILER_WARNING (CWE-1023): [#def2]
389-ds-base-3.2.0/ldap/servers/slapd/auth.c:424:5: warning[-Wswitch]: enumeration value ‘ssl_grp_ec_secp160k1’ not handled in switch
#  422|       }
#  423|       /* Check that PQC keaGroup is KEM */
#  424|->     switch (sci->keaGroup) {
#  425|           case ssl_grp_kem_secp256r1mlkem768:
#  426|           case ssl_grp_kem_secp384r1mlkem1024:

Error: COMPILER_WARNING (CWE-1023): [#def3]
389-ds-base-3.2.0/ldap/servers/slapd/auth.c:424:5: warning[-Wswitch]: enumeration value ‘ssl_grp_ec_secp160r1’ not handled in switch
#  422|       }
#  423|       /* Check that PQC keaGroup is KEM */
#  424|->     switch (sci->keaGroup) {
#  425|           case ssl_grp_kem_secp256r1mlkem768:
#  426|           case ssl_grp_kem_secp384r1mlkem1024:

Error: COMPILER_WARNING (CWE-1023): [#def4]
389-ds-base-3.2.0/ldap/servers/slapd/auth.c:424:5: warning[-Wswitch]: enumeration value ‘ssl_grp_ec_secp160r2’ not handled in switch
#  422|       }
#  423|       /* Check that PQC keaGroup is KEM */
#  424|->     switch (sci->keaGroup) {
#  425|           case ssl_grp_kem_secp256r1mlkem768:
#  426|           case ssl_grp_kem_secp384r1mlkem1024:

Error: COMPILER_WARNING (CWE-1023): [#def5]
389-ds-base-3.2.0/ldap/servers/slapd/auth.c:424:5: warning[-Wswitch]: enumeration value ‘ssl_grp_ec_secp192k1’ not handled in switch
#  422|       }
#  423|       /* Check that PQC keaGroup is KEM */
#  424|->     switch (sci->keaGroup) {
#  425|           case ssl_grp_kem_secp256r1mlkem768:
#  426|           case ssl_grp_kem_secp384r1mlkem1024:

Error: COMPILER_WARNING (CWE-1023): [#def6]
389-ds-base-3.2.0/ldap/servers/slapd/auth.c:424:5: warning[-Wswitch]: enumeration value ‘ssl_grp_ec_secp192r1’ not handled in switch
#  422|       }
#  423|       /* Check that PQC keaGroup is KEM */
#  424|->     switch (sci->keaGroup) {
#  425|           case ssl_grp_kem_secp256r1mlkem768:
#  426|           case ssl_grp_kem_secp384r1mlkem1024:

Error: COMPILER_WARNING (CWE-1023): [#def7]
389-ds-base-3.2.0/ldap/servers/slapd/auth.c:424:5: warning[-Wswitch]: enumeration value ‘ssl_grp_ec_secp224k1’ not handled in switch
#  422|       }
#  423|       /* Check that PQC keaGroup is KEM */
#  424|->     switch (sci->keaGroup) {
#  425|           case ssl_grp_kem_secp256r1mlkem768:
#  426|           case ssl_grp_kem_secp384r1mlkem1024:

Error: COMPILER_WARNING (CWE-1023): [#def8]
389-ds-base-3.2.0/ldap/servers/slapd/auth.c:424:5: warning[-Wswitch]: enumeration value ‘ssl_grp_ec_secp224r1’ not handled in switch
#  422|       }
#  423|       /* Check that PQC keaGroup is KEM */
#  424|->     switch (sci->keaGroup) {
#  425|           case ssl_grp_kem_secp256r1mlkem768:
#  426|           case ssl_grp_kem_secp384r1mlkem1024:

Error: COMPILER_WARNING (CWE-1023): [#def9]
389-ds-base-3.2.0/ldap/servers/slapd/auth.c:424:5: warning[-Wswitch]: enumeration value ‘ssl_grp_ec_secp256k1’ not handled in switch
#  422|       }
#  423|       /* Check that PQC keaGroup is KEM */
#  424|->     switch (sci->keaGroup) {
#  425|           case ssl_grp_kem_secp256r1mlkem768:
#  426|           case ssl_grp_kem_secp384r1mlkem1024:

Error: COMPILER_WARNING (CWE-1023): [#def10]
389-ds-base-3.2.0/ldap/servers/slapd/auth.c:424:5: warning[-Wswitch]: enumeration value ‘ssl_grp_ec_secp256r1’ not handled in switch
#  422|       }
#  423|       /* Check that PQC keaGroup is KEM */
#  424|->     switch (sci->keaGroup) {
#  425|           case ssl_grp_kem_secp256r1mlkem768:
#  426|           case ssl_grp_kem_secp384r1mlkem1024:

Error: COMPILER_WARNING (CWE-1023): [#def11]
389-ds-base-3.2.0/ldap/servers/slapd/auth.c:424:5: warning[-Wswitch]: enumeration value ‘ssl_grp_ec_secp384r1’ not handled in switch
#  422|       }
#  423|       /* Check that PQC keaGroup is KEM */
#  424|->     switch (sci->keaGroup) {
#  425|           case ssl_grp_kem_secp256r1mlkem768:
#  426|           case ssl_grp_kem_secp384r1mlkem1024:

Error: COMPILER_WARNING (CWE-1023): [#def12]
389-ds-base-3.2.0/ldap/servers/slapd/auth.c:424:5: warning[-Wswitch]: enumeration value ‘ssl_grp_ec_secp521r1’ not handled in switch
#  422|       }
#  423|       /* Check that PQC keaGroup is KEM */
#  424|->     switch (sci->keaGroup) {
#  425|           case ssl_grp_kem_secp256r1mlkem768:
#  426|           case ssl_grp_kem_secp384r1mlkem1024:

Error: COMPILER_WARNING (CWE-1023): [#def13]
389-ds-base-3.2.0/ldap/servers/slapd/auth.c: scope_hint: In function ‘check_pqc’
389-ds-base-3.2.0/ldap/servers/slapd/auth.c:424:5: warning[-Wswitch]: enumeration value ‘ssl_grp_ec_sect163k1’ not handled in switch
#  424 |     switch (sci->keaGroup) {
#      |     ^~~~~~
#  422|       }
#  423|       /* Check that PQC keaGroup is KEM */
#  424|->     switch (sci->keaGroup) {
#  425|           case ssl_grp_kem_secp256r1mlkem768:
#  426|           case ssl_grp_kem_secp384r1mlkem1024:

Error: COMPILER_WARNING (CWE-1023): [#def14]
389-ds-base-3.2.0/ldap/servers/slapd/auth.c:424:5: warning[-Wswitch]: enumeration value ‘ssl_grp_ec_sect163r1’ not handled in switch
#  422|       }
#  423|       /* Check that PQC keaGroup is KEM */
#  424|->     switch (sci->keaGroup) {
#  425|           case ssl_grp_kem_secp256r1mlkem768:
#  426|           case ssl_grp_kem_secp384r1mlkem1024:

Error: COMPILER_WARNING (CWE-1023): [#def15]
389-ds-base-3.2.0/ldap/servers/slapd/auth.c:424:5: warning[-Wswitch]: enumeration value ‘ssl_grp_ec_sect163r2’ not handled in switch
#  422|       }
#  423|       /* Check that PQC keaGroup is KEM */
#  424|->     switch (sci->keaGroup) {
#  425|           case ssl_grp_kem_secp256r1mlkem768:
#  426|           case ssl_grp_kem_secp384r1mlkem1024:

Error: COMPILER_WARNING (CWE-1023): [#def16]
389-ds-base-3.2.0/ldap/servers/slapd/auth.c:424:5: warning[-Wswitch]: enumeration value ‘ssl_grp_ec_sect193r1’ not handled in switch
#  422|       }
#  423|       /* Check that PQC keaGroup is KEM */
#  424|->     switch (sci->keaGroup) {
#  425|           case ssl_grp_kem_secp256r1mlkem768:
#  426|           case ssl_grp_kem_secp384r1mlkem1024:

Error: COMPILER_WARNING (CWE-1023): [#def17]
389-ds-base-3.2.0/ldap/servers/slapd/auth.c:424:5: warning[-Wswitch]: enumeration value ‘ssl_grp_ec_sect193r2’ not handled in switch
#  422|       }
#  423|       /* Check that PQC keaGroup is KEM */
#  424|->     switch (sci->keaGroup) {
#  425|           case ssl_grp_kem_secp256r1mlkem768:
#  426|           case ssl_grp_kem_secp384r1mlkem1024:

Error: COMPILER_WARNING (CWE-1023): [#def18]
389-ds-base-3.2.0/ldap/servers/slapd/auth.c:424:5: warning[-Wswitch]: enumeration value ‘ssl_grp_ec_sect233k1’ not handled in switch
#  422|       }
#  423|       /* Check that PQC keaGroup is KEM */
#  424|->     switch (sci->keaGroup) {
#  425|           case ssl_grp_kem_secp256r1mlkem768:
#  426|           case ssl_grp_kem_secp384r1mlkem1024:

Error: COMPILER_WARNING (CWE-1023): [#def19]
389-ds-base-3.2.0/ldap/servers/slapd/auth.c:424:5: warning[-Wswitch]: enumeration value ‘ssl_grp_ec_sect233r1’ not handled in switch
#  422|       }
#  423|       /* Check that PQC keaGroup is KEM */
#  424|->     switch (sci->keaGroup) {
#  425|           case ssl_grp_kem_secp256r1mlkem768:
#  426|           case ssl_grp_kem_secp384r1mlkem1024:

Error: COMPILER_WARNING (CWE-1023): [#def20]
389-ds-base-3.2.0/ldap/servers/slapd/auth.c:424:5: warning[-Wswitch]: enumeration value ‘ssl_grp_ec_sect239k1’ not handled in switch
#  422|       }
#  423|       /* Check that PQC keaGroup is KEM */
#  424|->     switch (sci->keaGroup) {
#  425|           case ssl_grp_kem_secp256r1mlkem768:
#  426|           case ssl_grp_kem_secp384r1mlkem1024:

Error: COMPILER_WARNING (CWE-1023): [#def21]
389-ds-base-3.2.0/ldap/servers/slapd/auth.c:424:5: warning[-Wswitch]: enumeration value ‘ssl_grp_ec_sect283k1’ not handled in switch
#  422|       }
#  423|       /* Check that PQC keaGroup is KEM */
#  424|->     switch (sci->keaGroup) {
#  425|           case ssl_grp_kem_secp256r1mlkem768:
#  426|           case ssl_grp_kem_secp384r1mlkem1024:

Error: COMPILER_WARNING (CWE-1023): [#def22]
389-ds-base-3.2.0/ldap/servers/slapd/auth.c:424:5: warning[-Wswitch]: enumeration value ‘ssl_grp_ec_sect283r1’ not handled in switch
#  422|       }
#  423|       /* Check that PQC keaGroup is KEM */
#  424|->     switch (sci->keaGroup) {
#  425|           case ssl_grp_kem_secp256r1mlkem768:
#  426|           case ssl_grp_kem_secp384r1mlkem1024:

Error: COMPILER_WARNING (CWE-1023): [#def23]
389-ds-base-3.2.0/ldap/servers/slapd/auth.c:424:5: warning[-Wswitch]: enumeration value ‘ssl_grp_ec_sect409k1’ not handled in switch
#  422|       }
#  423|       /* Check that PQC keaGroup is KEM */
#  424|->     switch (sci->keaGroup) {
#  425|           case ssl_grp_kem_secp256r1mlkem768:
#  426|           case ssl_grp_kem_secp384r1mlkem1024:

Error: COMPILER_WARNING (CWE-1023): [#def24]
389-ds-base-3.2.0/ldap/servers/slapd/auth.c:424:5: warning[-Wswitch]: enumeration value ‘ssl_grp_ec_sect409r1’ not handled in switch
#  422|       }
#  423|       /* Check that PQC keaGroup is KEM */
#  424|->     switch (sci->keaGroup) {
#  425|           case ssl_grp_kem_secp256r1mlkem768:
#  426|           case ssl_grp_kem_secp384r1mlkem1024:

Error: COMPILER_WARNING (CWE-1023): [#def25]
389-ds-base-3.2.0/ldap/servers/slapd/auth.c:424:5: warning[-Wswitch]: enumeration value ‘ssl_grp_ec_sect571k1’ not handled in switch
#  422|       }
#  423|       /* Check that PQC keaGroup is KEM */
#  424|->     switch (sci->keaGroup) {
#  425|           case ssl_grp_kem_secp256r1mlkem768:
#  426|           case ssl_grp_kem_secp384r1mlkem1024:

Error: COMPILER_WARNING (CWE-1023): [#def26]
389-ds-base-3.2.0/ldap/servers/slapd/auth.c:424:5: warning[-Wswitch]: enumeration value ‘ssl_grp_ec_sect571r1’ not handled in switch
#  422|       }
#  423|       /* Check that PQC keaGroup is KEM */
#  424|->     switch (sci->keaGroup) {
#  425|           case ssl_grp_kem_secp256r1mlkem768:
#  426|           case ssl_grp_kem_secp384r1mlkem1024:

Error: COMPILER_WARNING (CWE-1023): [#def27]
389-ds-base-3.2.0/ldap/servers/slapd/auth.c:424:5: warning[-Wswitch]: enumeration value ‘ssl_grp_ffdhe_2048’ not handled in switch
#  422|       }
#  423|       /* Check that PQC keaGroup is KEM */
#  424|->     switch (sci->keaGroup) {
#  425|           case ssl_grp_kem_secp256r1mlkem768:
#  426|           case ssl_grp_kem_secp384r1mlkem1024:

Error: COMPILER_WARNING (CWE-1023): [#def28]
389-ds-base-3.2.0/ldap/servers/slapd/auth.c:424:5: warning[-Wswitch]: enumeration value ‘ssl_grp_ffdhe_3072’ not handled in switch
#  422|       }
#  423|       /* Check that PQC keaGroup is KEM */
#  424|->     switch (sci->keaGroup) {
#  425|           case ssl_grp_kem_secp256r1mlkem768:
#  426|           case ssl_grp_kem_secp384r1mlkem1024:

Error: COMPILER_WARNING (CWE-1023): [#def29]
389-ds-base-3.2.0/ldap/servers/slapd/auth.c:424:5: warning[-Wswitch]: enumeration value ‘ssl_grp_ffdhe_4096’ not handled in switch
#  422|       }
#  423|       /* Check that PQC keaGroup is KEM */
#  424|->     switch (sci->keaGroup) {
#  425|           case ssl_grp_kem_secp256r1mlkem768:
#  426|           case ssl_grp_kem_secp384r1mlkem1024:

Error: COMPILER_WARNING (CWE-1023): [#def30]
389-ds-base-3.2.0/ldap/servers/slapd/auth.c:424:5: warning[-Wswitch]: enumeration value ‘ssl_grp_ffdhe_6144’ not handled in switch
#  422|       }
#  423|       /* Check that PQC keaGroup is KEM */
#  424|->     switch (sci->keaGroup) {
#  425|           case ssl_grp_kem_secp256r1mlkem768:
#  426|           case ssl_grp_kem_secp384r1mlkem1024:

Error: COMPILER_WARNING (CWE-1023): [#def31]
389-ds-base-3.2.0/ldap/servers/slapd/auth.c:424:5: warning[-Wswitch]: enumeration value ‘ssl_grp_ffdhe_8192’ not handled in switch
#  422|       }
#  423|       /* Check that PQC keaGroup is KEM */
#  424|->     switch (sci->keaGroup) {
#  425|           case ssl_grp_kem_secp256r1mlkem768:
#  426|           case ssl_grp_kem_secp384r1mlkem1024:

Error: COMPILER_WARNING (CWE-1023): [#def32]
389-ds-base-3.2.0/ldap/servers/slapd/auth.c:424:5: warning[-Wswitch]: enumeration value ‘ssl_grp_ffdhe_custom’ not handled in switch
#  422|       }
#  423|       /* Check that PQC keaGroup is KEM */
#  424|->     switch (sci->keaGroup) {
#  425|           case ssl_grp_kem_secp256r1mlkem768:
#  426|           case ssl_grp_kem_secp384r1mlkem1024:

Error: COMPILER_WARNING (CWE-1023): [#def33]
389-ds-base-3.2.0/ldap/servers/slapd/auth.c:424:5: warning[-Wswitch]: enumeration value ‘ssl_grp_none’ not handled in switch
#  422|       }
#  423|       /* Check that PQC keaGroup is KEM */
#  424|->     switch (sci->keaGroup) {
#  425|           case ssl_grp_kem_secp256r1mlkem768:
#  426|           case ssl_grp_kem_secp384r1mlkem1024:

Error: COMPILER_WARNING (CWE-563): [#def34]
389-ds-base-3.2.0/ldap/servers/slapd/haproxy.c: scope_hint: In function 'haproxy_parse_trusted_ips'
389-ds-base-3.2.0/ldap/servers/slapd/haproxy.c:660:13: warning[-Wunused-variable]: unused variable 'is_ipv6'
#  660 |         int is_ipv6;
#      |             ^~~~~~~
#  658|           char *slash_pos = strchr(ip_val, '/');
#  659|           char ip_part[MAX_CIDR_STRING_LEN];
#  660|->         int is_ipv6;
#  661|   
#  662|           /* Store original for logging */

Error: COMPILER_WARNING (CWE-563): [#def35]
389-ds-base-3.2.0/ldap/servers/slapd/haproxy.c: scope_hint: In function 'haproxy_ip_matches_parsed'
389-ds-base-3.2.0/ldap/servers/slapd/haproxy.c:838:10: warning[-Wunused-variable]: unused variable 'ip_str'
#  838 |     char ip_str[INET6_ADDRSTRLEN];
#      |          ^~~~~~
#  836|       size_t i;
#  837|       PRNetAddr normalized_ip;
#  838|->     char ip_str[INET6_ADDRSTRLEN];
#  839|   
#  840|       if (!entries || entry_count == 0 || !ip_addr) {

Scan Properties

analyzer-version-clippy1.95.0
analyzer-version-cppcheck2.20.0
analyzer-version-gcc16.1.1
analyzer-version-gcc-analyzer16.1.1
analyzer-version-shellcheck0.11.0
analyzer-version-unicontrol0.0.2
diffbase-analyzer-version-clippy1.95.0
diffbase-analyzer-version-cppcheck2.20.0
diffbase-analyzer-version-gcc16.1.1
diffbase-analyzer-version-gcc-analyzer16.1.1
diffbase-analyzer-version-shellcheck0.11.0
diffbase-analyzer-version-unicontrol0.0.2
diffbase-enabled-pluginsclippy, cppcheck, gcc, shellcheck, unicontrol
diffbase-exit-code0
diffbase-hostip-172-16-1-59.us-west-2.compute.internal
diffbase-known-false-positives/usr/share/csmock/known-false-positives.js
diffbase-known-false-positives-rpmknown-false-positives-0.0.0.20260524.213755.g3c6d0be.main-1.el9.noarch
diffbase-mock-configfedora-rawhide-x86_64
diffbase-project-name389-ds-base-3.2.1-1.fc45
diffbase-store-results-to/tmp/tmp0ca27us0/389-ds-base-3.2.1-1.fc45.tar.xz
diffbase-time-created2026-06-01 11:36:44
diffbase-time-finished2026-06-01 11:49:43
diffbase-toolcsmock
diffbase-tool-args'/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'shellcheck,cppcheck,clippy,unicontrol,gcc' '-o' '/tmp/tmp0ca27us0/389-ds-base-3.2.1-1.fc45.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--gcc-analyzer-bin=/usr/bin/gcc' '/tmp/tmp0ca27us0/389-ds-base-3.2.1-1.fc45.src.rpm'
diffbase-tool-versioncsmock-3.8.5.20260529.133039.g6f3b5c6-1.el9
enabled-pluginsclippy, cppcheck, gcc, shellcheck, unicontrol
exit-code0
hostip-172-16-1-59.us-west-2.compute.internal
known-false-positives/usr/share/csmock/known-false-positives.js
known-false-positives-rpmknown-false-positives-0.0.0.20260524.213755.g3c6d0be.main-1.el9.noarch
mock-configfedora-rawhide-x86_64
project-name389-ds-base-3.2.0-15.fc44
store-results-to/tmp/tmpj48wx3p0/389-ds-base-3.2.0-15.fc44.tar.xz
time-created2026-06-01 11:17:31
time-finished2026-06-01 11:36:17
titleFixed findings
toolcsmock
tool-args'/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'shellcheck,cppcheck,clippy,unicontrol,gcc' '-o' '/tmp/tmpj48wx3p0/389-ds-base-3.2.0-15.fc44.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--gcc-analyzer-bin=/usr/bin/gcc' '/tmp/tmpj48wx3p0/389-ds-base-3.2.0-15.fc44.src.rpm'
tool-versioncsmock-3.8.5.20260529.133039.g6f3b5c6-1.el9