Fixed findings

List of Findings

Error: COMPILER_WARNING (CWE-704): [#def1]
curl-8.18.0/lib/cookie.c: scope_hint: In function 'bad_domain'
curl-8.18.0/lib/cookie.c:334:17: warning[-Wdiscarded-qualifiers]: initialization discards 'const' qualifier from pointer target type
#  334 |     char *dot = memchr(domain, '.', len);
#      |                 ^~~~~~
#  332|     else {
#  333|       /* there must be a dot present, but that dot must not be a trailing dot */
#  334|->     char *dot = memchr(domain, '.', len);
#  335|       if(dot) {
#  336|         size_t i = dot - domain;

Error: COMPILER_WARNING (CWE-704): [#def2]
curl-8.18.0/lib/cookie.c:334:17: warning[-Wdiscarded-qualifiers]: initialization discards 'const' qualifier from pointer target type
#  332|     else {
#  333|       /* there must be a dot present, but that dot must not be a trailing dot */
#  334|->     char *dot = memchr(domain, '.', len);
#  335|       if(dot) {
#  336|         size_t i = dot - domain;

Error: COMPILER_WARNING (CWE-704): [#def3]
curl-8.18.0/lib/doh.c: scope_hint: In function 'doh_req_encode'
curl-8.18.0/lib/doh.c:132:17: warning[-Wdiscarded-qualifiers]: initialization discards 'const' qualifier from pointer target type
#  132 |     char *dot = strchr(hostp, '.');
#      |                 ^~~~~~
#  130|     while(*hostp) {
#  131|       size_t labellen;
#  132|->     char *dot = strchr(hostp, '.');
#  133|       if(dot)
#  134|         labellen = dot - hostp;

Error: COMPILER_WARNING (CWE-704): [#def4]
curl-8.18.0/lib/doh.c:132:17: warning[-Wdiscarded-qualifiers]: initialization discards 'const' qualifier from pointer target type
#  130|     while(*hostp) {
#  131|       size_t labellen;
#  132|->     char *dot = strchr(hostp, '.');
#  133|       if(dot)
#  134|         labellen = dot - hostp;

Error: COMPILER_WARNING (CWE-704): [#def5]
curl-8.18.0/lib/http.c: scope_hint: In function 'verify_header'
curl-8.18.0/lib/http.c:3753:15: warning[-Wdiscarded-qualifiers]: initialization discards 'const' qualifier from pointer target type
# 3753 |   char *ptr = memchr(hd, 0x00, hdlen);
#      |               ^~~~~~
# 3751|   {
# 3752|     struct SingleRequest *k = &data->req;
# 3753|->   char *ptr = memchr(hd, 0x00, hdlen);
# 3754|     if(ptr) {
# 3755|       /* this is bad, bail out */

Error: COMPILER_WARNING (CWE-704): [#def6]
curl-8.18.0/lib/http.c:3753:15: warning[-Wdiscarded-qualifiers]: initialization discards 'const' qualifier from pointer target type
# 3751|   {
# 3752|     struct SingleRequest *k = &data->req;
# 3753|->   char *ptr = memchr(hd, 0x00, hdlen);
# 3754|     if(ptr) {
# 3755|       /* this is bad, bail out */

Error: COMPILER_WARNING (CWE-704): [#def7]
curl-8.18.0/lib/http.c:3766:9: warning[-Wdiscarded-qualifiers]: assignment discards 'const' qualifier from pointer target type
# 3766 |     ptr = memchr(hd, ':', hdlen);
#      |         ^
# 3764|       ;
# 3765|     else {
# 3766|->     ptr = memchr(hd, ':', hdlen);
# 3767|       if(!ptr) {
# 3768|         /* this is bad, bail out */

Error: COMPILER_WARNING (CWE-704): [#def8]
curl-8.18.0/lib/http.c:3766:9: warning[-Wdiscarded-qualifiers]: assignment discards 'const' qualifier from pointer target type
# 3764|       ;
# 3765|     else {
# 3766|->     ptr = memchr(hd, ':', hdlen);
# 3767|       if(!ptr) {
# 3768|         /* this is bad, bail out */

Error: COMPILER_WARNING (CWE-704): [#def9]
curl-8.18.0/lib/http.c: scope_hint: In function 'http_parse_headers'
curl-8.18.0/lib/http.c:4367:13: warning[-Wdiscarded-qualifiers]: assignment discards 'const' qualifier from pointer target type
# 4367 |     end_ptr = memchr(buf, '\n', blen);
#      |             ^
# 4365|       }
# 4366|   
# 4367|->     end_ptr = memchr(buf, '\n', blen);
# 4368|       if(!end_ptr) {
# 4369|         /* Not a complete header line within buffer, append the data to

Error: COMPILER_WARNING (CWE-704): [#def10]
curl-8.18.0/lib/http.c:4367:13: warning[-Wdiscarded-qualifiers]: assignment discards 'const' qualifier from pointer target type
# 4365|       }
# 4366|   
# 4367|->     end_ptr = memchr(buf, '\n', blen);
# 4368|       if(!end_ptr) {
# 4369|         /* Not a complete header line within buffer, append the data to

Error: GCC_ANALYZER_WARNING (CWE-476): [#def11]
curl-8.18.0/lib/http2.c:400:7: warning[-Wanalyzer-null-dereference]: dereference of NULL 'data'
curl-8.18.0/lib/http2.c:2361:17: enter_function: entry to 'cf_h2_send'
curl-8.18.0/lib/http2.c:2366:34: branch_false: following 'false' branch (when 'data' is NULL)...
curl-8.18.0/lib/http2.c:2366:25: branch_false: ...to here
curl-8.18.0/lib/http2.c:2366:25: release_memory: 'data' is NULL
curl-8.18.0/lib/http2.c:2373:5: branch_true: following 'true' branch...
curl-8.18.0/lib/http2.c:2374:14: branch_true: ...to here
curl-8.18.0/lib/http2.c:2374:14: call_function: calling 'h2_submit' from 'cf_h2_send'
#  398|       return CURLE_OUT_OF_MEMORY;
#  399|   
#  400|->   if(!Curl_uint32_hash_set(&ctx->streams, data->mid, stream)) {
#  401|       h2_stream_ctx_free(stream);
#  402|       return CURLE_OUT_OF_MEMORY;

Error: COMPILER_WARNING (CWE-704): [#def12]
curl-8.18.0/lib/http_digest.c: scope_hint: In function 'Curl_output_digest'
curl-8.18.0/lib/http_digest.c:142:9: warning[-Wdiscarded-qualifiers]: assignment discards 'const' qualifier from pointer target type
#  142 |     tmp = strchr((const char *)uripath, '?');
#      |         ^
#  140|   
#  141|     if(authp->iestyle) {
#  142|->     tmp = strchr((const char *)uripath, '?');
#  143|       if(tmp) {
#  144|         size_t urilen = tmp - (const char *)uripath;

Error: COMPILER_WARNING (CWE-704): [#def13]
curl-8.18.0/lib/http_digest.c:142:9: warning[-Wdiscarded-qualifiers]: assignment discards 'const' qualifier from pointer target type
#  140|   
#  141|     if(authp->iestyle) {
#  142|->     tmp = strchr((const char *)uripath, '?');
#  143|       if(tmp) {
#  144|         size_t urilen = tmp - (const char *)uripath;

Error: GCC_ANALYZER_WARNING (CWE-835): [#def14]
curl-8.18.0/lib/mime.c:985:9: warning[-Wanalyzer-infinite-loop]: infinite loop
#  983|     (void)size;  /* Always 1 */
#  984|   
#  985|->   while(nitems) {
#  986|       size_t sz = 0;
#  987|       curl_mimepart *part = mime->state.ptr;

Error: COMPILER_WARNING (CWE-704): [#def15]
curl-8.18.0/lib/netrc.c: scope_hint: In function 'parsenetrc'
curl-8.18.0/lib/netrc.c:331:12: warning[-Wdiscarded-qualifiers]: assignment discards 'const' qualifier from pointer target type
#  331 |         nl = strchr(tok, '\n');
#      |            ^
#  329|         char *nl = NULL;
#  330|         if(tok)
#  331|->         nl = strchr(tok, '\n');
#  332|         if(!nl)
#  333|           break;

Error: COMPILER_WARNING (CWE-704): [#def16]
curl-8.18.0/lib/netrc.c:331:12: warning[-Wdiscarded-qualifiers]: assignment discards 'const' qualifier from pointer target type
#  329|         char *nl = NULL;
#  330|         if(tok)
#  331|->         nl = strchr(tok, '\n');
#  332|         if(!nl)
#  333|           break;

Error: COMPILER_WARNING (CWE-704): [#def17]
curl-8.18.0/lib/noproxy.c: scope_hint: In function 'match_ip'
curl-8.18.0/lib/noproxy.c:163:9: warning[-Wdiscarded-qualifiers]: assignment discards 'const' qualifier from pointer target type
#  163 |   slash = strchr(check, '/');
#      |         ^
#  161|     check = checkip;
#  162|   
#  163|->   slash = strchr(check, '/');
#  164|     /* if the slash is part of this token, use it */
#  165|     if(slash) {

Error: COMPILER_WARNING (CWE-704): [#def18]
curl-8.18.0/lib/noproxy.c:163:9: warning[-Wdiscarded-qualifiers]: assignment discards 'const' qualifier from pointer target type
#  161|     check = checkip;
#  162|   
#  163|->   slash = strchr(check, '/');
#  164|     /* if the slash is part of this token, use it */
#  165|     if(slash) {

Error: COMPILER_WARNING (CWE-704): [#def19]
curl-8.18.0/lib/pop3.c: scope_hint: In function 'pop3_state_servergreet_resp'
curl-8.18.0/lib/pop3.c:823:8: warning[-Wdiscarded-qualifiers]: assignment discards 'const' qualifier from pointer target type
#  823 |     lt = memchr(line, '<', len);
#      |        ^
#  821|   
#  822|       /* Look for the APOP timestamp */
#  823|->     lt = memchr(line, '<', len);
#  824|       if(lt)
#  825|         /* search the remainder for '>' */

Error: COMPILER_WARNING (CWE-704): [#def20]
curl-8.18.0/lib/pop3.c:823:8: warning[-Wdiscarded-qualifiers]: assignment discards 'const' qualifier from pointer target type
#  821|   
#  822|       /* Look for the APOP timestamp */
#  823|->     lt = memchr(line, '<', len);
#  824|       if(lt)
#  825|         /* search the remainder for '>' */

Error: COMPILER_WARNING (CWE-704): [#def21]
curl-8.18.0/lib/url.c: scope_hint: In function 'parse_connect_to_string'
curl-8.18.0/lib/url.c:2971:24: warning[-Wdiscarded-qualifiers]: initialization discards 'const' qualifier from pointer target type
# 2971 |       char *ptr_next = strchr(ptr, ':');
#      |                        ^~~~~~
# 2969|       else {
# 2970|         /* check whether the URL's port matches */
# 2971|->       char *ptr_next = strchr(ptr, ':');
# 2972|         if(ptr_next) {
# 2973|           curl_off_t port_to_match;

Error: COMPILER_WARNING (CWE-704): [#def22]
curl-8.18.0/lib/url.c:2971:24: warning[-Wdiscarded-qualifiers]: initialization discards 'const' qualifier from pointer target type
# 2969|       else {
# 2970|         /* check whether the URL's port matches */
# 2971|->       char *ptr_next = strchr(ptr, ':');
# 2972|         if(ptr_next) {
# 2973|           curl_off_t port_to_match;

Error: COMPILER_WARNING (CWE-704): [#def23]
curl-8.18.0/lib/urlapi.c: scope_hint: In function 'parse_hostname_login'
curl-8.18.0/lib/urlapi.c:351:7: warning[-Wdiscarded-qualifiers]: assignment discards 'const' qualifier from pointer target type
#  351 |   ptr = memchr(login, '@', len);
#      |       ^
#  349|   
#  350|     *offset = 0;
#  351|->   ptr = memchr(login, '@', len);
#  352|     if(!ptr)
#  353|       goto out;

Error: COMPILER_WARNING (CWE-704): [#def24]
curl-8.18.0/lib/urlapi.c:351:7: warning[-Wdiscarded-qualifiers]: assignment discards 'const' qualifier from pointer target type
#  349|   
#  350|     *offset = 0;
#  351|->   ptr = memchr(login, '@', len);
#  352|     if(!ptr)
#  353|       goto out;

Error: COMPILER_WARNING (CWE-704): [#def25]
curl-8.18.0/lib/urlapi.c: scope_hint: In function 'urldecode_host'
curl-8.18.0/lib/urlapi.c:660:7: warning[-Wdiscarded-qualifiers]: assignment discards 'const' qualifier from pointer target type
#  660 |   per = strchr(hostname, '%');
#      |       ^
#  658|     char *per = NULL;
#  659|     const char *hostname = curlx_dyn_ptr(host);
#  660|->   per = strchr(hostname, '%');
#  661|     if(!per)
#  662|       /* nothing to decode */

Error: COMPILER_WARNING (CWE-704): [#def26]
curl-8.18.0/lib/urlapi.c:660:7: warning[-Wdiscarded-qualifiers]: assignment discards 'const' qualifier from pointer target type
#  658|     char *per = NULL;
#  659|     const char *hostname = curlx_dyn_ptr(host);
#  660|->   per = strchr(hostname, '%');
#  661|     if(!per)
#  662|       /* nothing to decode */

Error: COMPILER_WARNING (CWE-704): [#def27]
curl-8.18.0/lib/urlapi.c: scope_hint: In function 'parseurl'
curl-8.18.0/lib/urlapi.c:1143:12: warning[-Wdiscarded-qualifiers]: assignment discards 'const' qualifier from pointer target type
# 1143 |   fragment = strchr(path, '#');
#      |            ^
# 1141|     }
# 1142|   
# 1143|->   fragment = strchr(path, '#');
# 1144|     if(fragment) {
# 1145|       fraglen = pathlen - (fragment - path);

Error: COMPILER_WARNING (CWE-704): [#def28]
curl-8.18.0/lib/urlapi.c:1143:12: warning[-Wdiscarded-qualifiers]: assignment discards 'const' qualifier from pointer target type
# 1141|     }
# 1142|   
# 1143|->   fragment = strchr(path, '#');
# 1144|     if(fragment) {
# 1145|       fraglen = pathlen - (fragment - path);

Error: COMPILER_WARNING (CWE-704): [#def29]
curl-8.18.0/lib/urlapi.c:1169:9: warning[-Wdiscarded-qualifiers]: assignment discards 'const' qualifier from pointer target type
# 1169 |   query = memchr(path, '?', pathlen);
#      |         ^
# 1167|     }
# 1168|   
# 1169|->   query = memchr(path, '?', pathlen);
# 1170|     if(query) {
# 1171|       size_t qlen = fragment ? (size_t)(fragment - query) :

Error: COMPILER_WARNING (CWE-704): [#def30]
curl-8.18.0/lib/urlapi.c:1169:9: warning[-Wdiscarded-qualifiers]: assignment discards 'const' qualifier from pointer target type
# 1167|     }
# 1168|   
# 1169|->   query = memchr(path, '?', pathlen);
# 1170|     if(query) {
# 1171|       size_t qlen = fragment ? (size_t)(fragment - query) :

Error: COMPILER_WARNING (CWE-704): [#def31]
curl-8.18.0/lib/vauth/vauth.c: scope_hint: In function 'Curl_auth_user_contains_domain'
curl-8.18.0/lib/vauth/vauth.c:120:15: warning[-Wdiscarded-qualifiers]: initialization discards 'const' qualifier from pointer target type
#  120 |     char *p = strpbrk(user, "\\/@");
#      |               ^~~~~~~
#  118|     if(user && *user) {
#  119|       /* Check we have a domain name or UPN present */
#  120|->     char *p = strpbrk(user, "\\/@");
#  121|   
#  122|       valid = (p != NULL && p > user && p < user + strlen(user) - 1);

Error: COMPILER_WARNING (CWE-704): [#def32]
curl-8.18.0/lib/vauth/vauth.c:120:15: warning[-Wdiscarded-qualifiers]: initialization discards 'const' qualifier from pointer target type
#  118|     if(user && *user) {
#  119|       /* Check we have a domain name or UPN present */
#  120|->     char *p = strpbrk(user, "\\/@");
#  121|   
#  122|       valid = (p != NULL && p > user && p < user + strlen(user) - 1);

Error: COMPILER_WARNING (CWE-704): [#def33]
curl-8.18.0/lib/vtls/vtls.c: scope_hint: In function 'pubkey_pem_to_der'
curl-8.18.0/lib/vtls/vtls.c:703:13: warning[-Wdiscarded-qualifiers]: assignment discards 'const' qualifier from pointer target type
#  703 |   begin_pos = strstr(pem, "-----BEGIN PUBLIC KEY-----");
#      |             ^
#  701|     curlx_dyn_init(&pbuf, MAX_PINNED_PUBKEY_SIZE);
#  702|   
#  703|->   begin_pos = strstr(pem, "-----BEGIN PUBLIC KEY-----");
#  704|     if(!begin_pos)
#  705|       return CURLE_BAD_CONTENT_ENCODING;

Error: COMPILER_WARNING (CWE-704): [#def34]
curl-8.18.0/lib/vtls/vtls.c:703:13: warning[-Wdiscarded-qualifiers]: assignment discards 'const' qualifier from pointer target type
#  701|     curlx_dyn_init(&pbuf, MAX_PINNED_PUBKEY_SIZE);
#  702|   
#  703|->   begin_pos = strstr(pem, "-----BEGIN PUBLIC KEY-----");
#  704|     if(!begin_pos)
#  705|       return CURLE_BAD_CONTENT_ENCODING;

Error: COMPILER_WARNING (CWE-704): [#def35]
curl-8.18.0/lib/vtls/vtls.c:716:11: warning[-Wdiscarded-qualifiers]: assignment discards 'const' qualifier from pointer target type
#  716 |   end_pos = strstr(pem + pem_count, "\n-----END PUBLIC KEY-----");
#      |           ^
#  714|   
#  715|     /* Invalid if not directly following \n */
#  716|->   end_pos = strstr(pem + pem_count, "\n-----END PUBLIC KEY-----");
#  717|     if(!end_pos)
#  718|       return CURLE_BAD_CONTENT_ENCODING;

Error: COMPILER_WARNING (CWE-704): [#def36]
curl-8.18.0/lib/vtls/vtls.c:716:11: warning[-Wdiscarded-qualifiers]: assignment discards 'const' qualifier from pointer target type
#  714|   
#  715|     /* Invalid if not directly following \n */
#  716|->   end_pos = strstr(pem + pem_count, "\n-----END PUBLIC KEY-----");
#  717|     if(!end_pos)
#  718|       return CURLE_BAD_CONTENT_ENCODING;

Error: COMPILER_WARNING (CWE-704): [#def37]
curl-8.18.0/src/tool_getparam.c: scope_hint: In function 'parse_upload_flags'
curl-8.18.0/src/tool_getparam.c:1638:18: warning[-Wdiscarded-qualifiers]: initialization discards 'const' qualifier from pointer target type
# 1638 |     char *next = strchr(flag, ','); /* Find next comma or end */
#      |                  ^~~~~~
# 1636|       const struct flagmap *map;
# 1637|       size_t len;
# 1638|->     char *next = strchr(flag, ','); /* Find next comma or end */
# 1639|       if(next)
# 1640|         len = next - flag;

Error: COMPILER_WARNING (CWE-704): [#def38]
curl-8.18.0/src/tool_getparam.c:1638:18: warning[-Wdiscarded-qualifiers]: initialization discards 'const' qualifier from pointer target type
# 1636|       const struct flagmap *map;
# 1637|       size_t len;
# 1638|->     char *next = strchr(flag, ','); /* Find next comma or end */
# 1639|       if(next)
# 1640|         len = next - flag;

Error: COMPILER_WARNING (CWE-704): [#def39]
curl-8.18.0/src/tool_getparam.c: scope_hint: In function ‘parse_upload_flags’
curl-8.18.0/src/tool_getparam.c:1638:18: warning[-Wdiscarded-qualifiers]: initialization discards ‘const’ qualifier from pointer target type
# 1638 |     char *next = strchr(flag, ','); /* Find next comma or end */
#      |                  ^~~~~~
# 1636|       const struct flagmap *map;
# 1637|       size_t len;
# 1638|->     char *next = strchr(flag, ','); /* Find next comma or end */
# 1639|       if(next)
# 1640|         len = next - flag;

Error: COMPILER_WARNING (CWE-704): [#def40]
curl-8.18.0/src/tool_getparam.c:1638:18: warning[-Wdiscarded-qualifiers]: initialization discards ‘const’ qualifier from pointer target type
# 1636|       const struct flagmap *map;
# 1637|       size_t len;
# 1638|->     char *next = strchr(flag, ','); /* Find next comma or end */
# 1639|       if(next)
# 1640|         len = next - flag;

Error: COMPILER_WARNING (CWE-704): [#def41]
curl-8.18.0/src/tool_operhlp.c: scope_hint: In function 'add_file_name_to_url'
curl-8.18.0/src/tool_operhlp.c:119:21: warning[-Wdiscarded-qualifiers]: initialization discards 'const' qualifier from pointer target type
#  119 |       char *file2 = strrchr(filep ? filep : filename, '\\');
#      |                     ^~~~~~~
#  117|            side of the rightmost slash and backslash. */
#  118|         const char *filep = strrchr(filename, '/');
#  119|->       char *file2 = strrchr(filep ? filep : filename, '\\');
#  120|         char *encfile;
#  121|   

Error: COMPILER_WARNING (CWE-704): [#def42]
curl-8.18.0/src/tool_operhlp.c:119:21: warning[-Wdiscarded-qualifiers]: initialization discards 'const' qualifier from pointer target type
#  117|            side of the rightmost slash and backslash. */
#  118|         const char *filep = strrchr(filename, '/');
#  119|->       char *file2 = strrchr(filep ? filep : filename, '\\');
#  120|         char *encfile;
#  121|   

Error: COMPILER_WARNING (CWE-704): [#def43]
curl-8.18.0/src/tool_operhlp.c: scope_hint: In function ‘add_file_name_to_url’
curl-8.18.0/src/tool_operhlp.c:119:21: warning[-Wdiscarded-qualifiers]: initialization discards ‘const’ qualifier from pointer target type
#  119 |       char *file2 = strrchr(filep ? filep : filename, '\\');
#      |                     ^~~~~~~
#  117|            side of the rightmost slash and backslash. */
#  118|         const char *filep = strrchr(filename, '/');
#  119|->       char *file2 = strrchr(filep ? filep : filename, '\\');
#  120|         char *encfile;
#  121|   

Error: COMPILER_WARNING (CWE-704): [#def44]
curl-8.18.0/src/tool_operhlp.c:119:21: warning[-Wdiscarded-qualifiers]: initialization discards ‘const’ qualifier from pointer target type
#  117|            side of the rightmost slash and backslash. */
#  118|         const char *filep = strrchr(filename, '/');
#  119|->       char *file2 = strrchr(filep ? filep : filename, '\\');
#  120|         char *encfile;
#  121|   

Error: COMPILER_WARNING (CWE-704): [#def45]
curl-8.18.0/src/tool_urlglob.c: scope_hint: In function 'peek_ipv6'
curl-8.18.0/src/tool_urlglob.c:355:17: warning[-Wdiscarded-qualifiers]: initialization discards 'const' qualifier from pointer target type
#  355 |   char *endbr = strchr(str, ']');
#      |                 ^~~~~~
#  353|     char hostname[MAX_IP6LEN];
#  354|     CURLU *u;
#  355|->   char *endbr = strchr(str, ']');
#  356|     size_t hlen;
#  357|     CURLUcode rc;

Error: COMPILER_WARNING (CWE-704): [#def46]
curl-8.18.0/src/tool_urlglob.c:355:17: warning[-Wdiscarded-qualifiers]: initialization discards 'const' qualifier from pointer target type
#  353|     char hostname[MAX_IP6LEN];
#  354|     CURLU *u;
#  355|->   char *endbr = strchr(str, ']');
#  356|     size_t hlen;
#  357|     CURLUcode rc;

Error: COMPILER_WARNING (CWE-704): [#def47]
curl-8.18.0/src/tool_urlglob.c: scope_hint: In function ‘peek_ipv6’
curl-8.18.0/src/tool_urlglob.c:355:17: warning[-Wdiscarded-qualifiers]: initialization discards ‘const’ qualifier from pointer target type
#  355 |   char *endbr = strchr(str, ']');
#      |                 ^~~~~~
#  353|     char hostname[MAX_IP6LEN];
#  354|     CURLU *u;
#  355|->   char *endbr = strchr(str, ']');
#  356|     size_t hlen;
#  357|     CURLUcode rc;

Error: COMPILER_WARNING (CWE-704): [#def48]
curl-8.18.0/src/tool_urlglob.c:355:17: warning[-Wdiscarded-qualifiers]: initialization discards ‘const’ qualifier from pointer target type
#  353|     char hostname[MAX_IP6LEN];
#  354|     CURLU *u;
#  355|->   char *endbr = strchr(str, ']');
#  356|     size_t hlen;
#  357|     CURLUcode rc;

Error: COMPILER_WARNING (CWE-704): [#def49]
curl-8.18.0/src/tool_writeout.c: scope_hint: In function 'ourWriteOut'
curl-8.18.0/src/tool_writeout.c:751:15: warning[-Wdiscarded-qualifiers]: assignment discards 'const' qualifier from pointer target type
#  751 |           end = strchr(ptr, '}');
#      |               ^
#  749|             struct writeoutvar *wv = NULL;
#  750|             struct writeoutvar find = { 0 };
#  751|->           end = strchr(ptr, '}');
#  752|             ptr += 2; /* pass the % and the { */
#  753|             if(!end) {

Error: COMPILER_WARNING (CWE-704): [#def50]
curl-8.18.0/src/tool_writeout.c:751:15: warning[-Wdiscarded-qualifiers]: assignment discards 'const' qualifier from pointer target type
#  749|             struct writeoutvar *wv = NULL;
#  750|             struct writeoutvar find = { 0 };
#  751|->           end = strchr(ptr, '}');
#  752|             ptr += 2; /* pass the % and the { */
#  753|             if(!end) {

Error: COMPILER_WARNING (CWE-704): [#def51]
curl-8.18.0/src/tool_writeout.c: scope_hint: In function ‘ourWriteOut’
curl-8.18.0/src/tool_writeout.c:751:15: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
#  751 |           end = strchr(ptr, '}');
#      |               ^
#  749|             struct writeoutvar *wv = NULL;
#  750|             struct writeoutvar find = { 0 };
#  751|->           end = strchr(ptr, '}');
#  752|             ptr += 2; /* pass the % and the { */
#  753|             if(!end) {

Error: COMPILER_WARNING (CWE-704): [#def52]
curl-8.18.0/src/tool_writeout.c:751:15: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
#  749|             struct writeoutvar *wv = NULL;
#  750|             struct writeoutvar find = { 0 };
#  751|->           end = strchr(ptr, '}');
#  752|             ptr += 2; /* pass the % and the { */
#  753|             if(!end) {

Error: COMPILER_WARNING (CWE-704): [#def53]
curl-8.18.0/src/tool_writeout.c:762:16: warning[-Wdiscarded-qualifiers]: assignment discards 'const' qualifier from pointer target type
#  762 |             wv = bsearch(&find,
#      |                ^
#  760|             if(!curlx_dyn_addn(&name, ptr, vlen)) {
#  761|               find.name = curlx_dyn_ptr(&name);
#  762|->             wv = bsearch(&find,
#  763|                            variables, CURL_ARRAYSIZE(variables),
#  764|                            sizeof(variables[0]), matchvar);

Error: COMPILER_WARNING (CWE-704): [#def54]
curl-8.18.0/src/tool_writeout.c:762:16: warning[-Wdiscarded-qualifiers]: assignment discards 'const' qualifier from pointer target type
#  760|             if(!curlx_dyn_addn(&name, ptr, vlen)) {
#  761|               find.name = curlx_dyn_ptr(&name);
#  762|->             wv = bsearch(&find,
#  763|                            variables, CURL_ARRAYSIZE(variables),
#  764|                            sizeof(variables[0]), matchvar);

Error: COMPILER_WARNING (CWE-704): [#def55]
curl-8.18.0/src/tool_writeout.c:762:16: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
#  762 |             wv = bsearch(&find,
#      |                ^
#  760|             if(!curlx_dyn_addn(&name, ptr, vlen)) {
#  761|               find.name = curlx_dyn_ptr(&name);
#  762|->             wv = bsearch(&find,
#  763|                            variables, CURL_ARRAYSIZE(variables),
#  764|                            sizeof(variables[0]), matchvar);

Error: COMPILER_WARNING (CWE-704): [#def56]
curl-8.18.0/src/tool_writeout.c:762:16: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
#  760|             if(!curlx_dyn_addn(&name, ptr, vlen)) {
#  761|               find.name = curlx_dyn_ptr(&name);
#  762|->             wv = bsearch(&find,
#  763|                            variables, CURL_ARRAYSIZE(variables),
#  764|                            sizeof(variables[0]), matchvar);

Error: COMPILER_WARNING (CWE-704): [#def57]
curl-8.18.0/src/tool_writeout.c:821:15: warning[-Wdiscarded-qualifiers]: assignment discards 'const' qualifier from pointer target type
#  821 |           end = strchr(ptr, '}');
#      |               ^
#  819|               ptr += 2;
#  820|             }
#  821|->           end = strchr(ptr, '}');
#  822|             if(end) {
#  823|               char fname[512]; /* holds the longest filename */

Error: COMPILER_WARNING (CWE-704): [#def58]
curl-8.18.0/src/tool_writeout.c:821:15: warning[-Wdiscarded-qualifiers]: assignment discards 'const' qualifier from pointer target type
#  819|               ptr += 2;
#  820|             }
#  821|->           end = strchr(ptr, '}');
#  822|             if(end) {
#  823|               char fname[512]; /* holds the longest filename */

Error: COMPILER_WARNING (CWE-704): [#def59]
curl-8.18.0/src/tool_writeout.c:821:15: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
#  821 |           end = strchr(ptr, '}');
#      |               ^
#  819|               ptr += 2;
#  820|             }
#  821|->           end = strchr(ptr, '}');
#  822|             if(end) {
#  823|               char fname[512]; /* holds the longest filename */

Error: COMPILER_WARNING (CWE-704): [#def60]
curl-8.18.0/src/tool_writeout.c:821:15: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
#  819|               ptr += 2;
#  820|             }
#  821|->           end = strchr(ptr, '}');
#  822|             if(end) {
#  823|               char fname[512]; /* holds the longest filename */

Error: COMPILER_WARNING (CWE-704): [#def61]
curl-8.18.0/src/var.c: scope_hint: In function 'varexpand'
curl-8.18.0/src/var.c:216:10: warning[-Wdiscarded-qualifiers]: assignment discards 'const' qualifier from pointer target type
#  216 |     envp = strstr(line, "{{");
#      |          ^
#  214|     curlx_dyn_init(out, MAX_EXPAND_CONTENT);
#  215|     do {
#  216|->     envp = strstr(line, "{{");
#  217|       if((envp > line) && envp[-1] == '\\') {
#  218|         /* preceding backslash, we want this verbatim */

Error: COMPILER_WARNING (CWE-704): [#def62]
curl-8.18.0/src/var.c:216:10: warning[-Wdiscarded-qualifiers]: assignment discards 'const' qualifier from pointer target type
#  214|     curlx_dyn_init(out, MAX_EXPAND_CONTENT);
#  215|     do {
#  216|->     envp = strstr(line, "{{");
#  217|       if((envp > line) && envp[-1] == '\\') {
#  218|         /* preceding backslash, we want this verbatim */

Error: COMPILER_WARNING (CWE-704): [#def63]
curl-8.18.0/src/var.c: scope_hint: In function ‘varexpand’
curl-8.18.0/src/var.c:216:10: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
#  216 |     envp = strstr(line, "{{");
#      |          ^
#  214|     curlx_dyn_init(out, MAX_EXPAND_CONTENT);
#  215|     do {
#  216|->     envp = strstr(line, "{{");
#  217|       if((envp > line) && envp[-1] == '\\') {
#  218|         /* preceding backslash, we want this verbatim */

Error: COMPILER_WARNING (CWE-704): [#def64]
curl-8.18.0/src/var.c:216:10: warning[-Wdiscarded-qualifiers]: assignment discards ‘const’ qualifier from pointer target type
#  214|     curlx_dyn_init(out, MAX_EXPAND_CONTENT);
#  215|     do {
#  216|->     envp = strstr(line, "{{");
#  217|       if((envp > line) && envp[-1] == '\\') {
#  218|         /* preceding backslash, we want this verbatim */

Error: GCC_ANALYZER_WARNING (CWE-476): [#def65]
curl-8.18.0/src/var.c:217:25: warning[-Wanalyzer-null-dereference]: dereference of NULL 'envp'
curl-8.18.0/src/var.c:217:7: branch_true: following 'true' branch (when 'line < envp')...
curl-8.18.0/src/var.c:217:25: branch_true: ...to here
curl-8.18.0/src/var.c:217:25: danger: dereference of NULL 'envp'
#  215|     do {
#  216|       envp = strstr(line, "{{");
#  217|->     if((envp > line) && envp[-1] == '\\') {
#  218|         /* preceding backslash, we want this verbatim */
#  219|   

Error: GCC_ANALYZER_WARNING (CWE-476): [#def66]
curl-8.18.0/src/var.c:217:25: warning[-Wanalyzer-null-dereference]: dereference of NULL ‘envp’
curl-8.18.0/src/var.c:217:7: branch_true: following ‘true’ branch (when ‘line < envp’)...
curl-8.18.0/src/var.c:217:25: branch_true: ...to here
curl-8.18.0/src/var.c:217:25: danger: dereference of NULL ‘envp’
#  215|     do {
#  216|       envp = strstr(line, "{{");
#  217|->     if((envp > line) && envp[-1] == '\\') {
#  218|         /* preceding backslash, we want this verbatim */
#  219|

Scan Properties

analyzer-version-clippy1.95.0
analyzer-version-cppcheck2.20.0
analyzer-version-gcc16.1.1
analyzer-version-gcc-analyzer16.1.1
analyzer-version-shellcheck0.11.0
analyzer-version-unicontrol0.0.2
diffbase-analyzer-version-clippy1.95.0
diffbase-analyzer-version-cppcheck2.20.0
diffbase-analyzer-version-gcc16.1.1
diffbase-analyzer-version-gcc-analyzer16.1.1
diffbase-analyzer-version-shellcheck0.11.0
diffbase-analyzer-version-unicontrol0.0.2
diffbase-enabled-pluginsclippy, cppcheck, gcc, shellcheck, unicontrol
diffbase-exit-code0
diffbase-hostip-172-16-1-110.us-west-2.compute.internal
diffbase-known-false-positives/usr/share/csmock/known-false-positives.js
diffbase-known-false-positives-rpmknown-false-positives-0.0.0.20260524.213755.g3c6d0be.main-1.el9.noarch
diffbase-mock-configfedora-rawhide-x86_64
diffbase-project-namecurl-8.20.0-2.fc45
diffbase-store-results-to/tmp/tmpyqdx_2g2/curl-8.20.0-2.fc45.tar.xz
diffbase-time-created2026-06-01 11:48:49
diffbase-time-finished2026-06-01 11:54:12
diffbase-toolcsmock
diffbase-tool-args'/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'shellcheck,cppcheck,clippy,unicontrol,gcc' '-o' '/tmp/tmpyqdx_2g2/curl-8.20.0-2.fc45.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--gcc-analyzer-bin=/usr/bin/gcc' '/tmp/tmpyqdx_2g2/curl-8.20.0-2.fc45.src.rpm'
diffbase-tool-versioncsmock-3.8.5.20260529.133039.g6f3b5c6-1.el9
enabled-pluginsclippy, cppcheck, gcc, shellcheck, unicontrol
exit-code0
hostip-172-16-1-110.us-west-2.compute.internal
known-false-positives/usr/share/csmock/known-false-positives.js
known-false-positives-rpmknown-false-positives-0.0.0.20260524.213755.g3c6d0be.main-1.el9.noarch
mock-configfedora-rawhide-x86_64
project-namecurl-8.18.0-4.fc44
store-results-to/tmp/tmpww3wc0j3/curl-8.18.0-4.fc44.tar.xz
time-created2026-06-01 11:42:39
time-finished2026-06-01 11:48:22
titleFixed findings
toolcsmock
tool-args'/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'shellcheck,cppcheck,clippy,unicontrol,gcc' '-o' '/tmp/tmpww3wc0j3/curl-8.18.0-4.fc44.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '--gcc-analyzer-bin=/usr/bin/gcc' '/tmp/tmpww3wc0j3/curl-8.18.0-4.fc44.src.rpm'
tool-versioncsmock-3.8.5.20260529.133039.g6f3b5c6-1.el9