Fixed findings

List of Findings

Error: CLIPPY_WARNING: [#def1]
crates/goose/src/providers/utils.rs:580:17: warning: this `if` can be collapsed into the outer `match`
#      |
#  580 | /                 if closers.last() == Some(&c) {
#  581 | |                     closers.pop();
#  582 | |                 }
#      | |_________________^
#      |
#      = help: for further information visit https://rust-lang.github.io/rust-clippy/rust-1.96.0/index.html#collapsible_match
#  help: collapse nested if block
#      |
#  579 ~             '}' | ']'
#  580 ~                 if closers.last() == Some(&c) => {
#  581 |                     closers.pop();
#  582 ~                 }
#      |

Error: GCC_ANALYZER_WARNING (CWE-775): [#def2]
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/bio/connect.c: scope_hint: In function 'conn_state'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/bio/connect.c:181:15: warning[-Wanalyzer-fd-leak]: leak of file descriptor '*bio.num'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/include/openssl/base.h:34: included_from: Included from here.
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/include/openssl/bio.h:7: included_from: Included from here.
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/bio/connect.c:4: included_from: Included from here.
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:16:42: note: in definition of macro 'BORINGSSL_ADD_PREFIX_INNER'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:242:31: note: in expansion of macro 'BORINGSSL_ADD_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:242:52: note: in expansion of macro 'BORINGSSL_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/bio/connect.c:180:9: note: in expansion of macro 'BIO_clear_retry_flags'
#  179|   
#  180|           BIO_clear_retry_flags(bio);
#  181|->         ret = connect(bio->num, (struct sockaddr*) &c->them, c->them_length);
#  182|           if (ret < 0) {
#  183|             if (bio_socket_should_retry(ret)) {

Error: GCC_ANALYZER_WARNING (CWE-457): [#def3]
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/decrepit/cast/cast.c: scope_hint: In function 'aws_lc_0_41_0_CAST_set_key'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/decrepit/cast/cast.c:304:31: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value 'k[<unknown>]'
#  302|     for (i = 0; i < 16; i++) {
#  303|       key->data[i * 2] = k[i];
#  304|->     key->data[i * 2 + 1] = ((k[i + 16]) + 16) & 0x1f;
#  305|     }
#  306|   }

Error: GCC_ANALYZER_WARNING (CWE-457): [#def4]
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/dsa/dsa.c: scope_hint: In function 'aws_lc_0_41_0_dsa_internal_paramgen.part.0'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/dsa/dsa.c:265:12: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value 'buf[i]'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/include/openssl/base.h:34: included_from: Included from here.
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/include/openssl/dsa.h:8: included_from: Included from here.
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/dsa/dsa.c:5: included_from: Included from here.
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:16:42: note: in definition of macro 'BORINGSSL_ADD_PREFIX_INNER'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:3422:31: note: in expansion of macro 'BORINGSSL_ADD_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:3422:52: note: in expansion of macro 'BORINGSSL_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/dsa/dsa.c:184:5: note: in expansion of macro 'dsa_internal_paramgen'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:16:42: note: in definition of macro 'BORINGSSL_ADD_PREFIX_INNER'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:391:22: note: in expansion of macro 'BORINGSSL_ADD_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:391:43: note: in expansion of macro 'BORINGSSL_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/dsa/dsa.c:229:3: note: in expansion of macro 'BN_CTX_start'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/fipsmodule/bn/internal.h:24: included_from: Included from here.
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/dsa/dsa.c:23: included_from: Included from here.
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/internal.h:1330:15: note: in definition of macro 'AWS_LC_ENSURE'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/dsa/dsa.c:254:9: note: in expansion of macro 'AWSLC_ABORT_IF_NOT_ONE'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:15:36: note: in expansion of macro 'BORINGSSL_ADD_PREFIX_INNER'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:2070:20: note: in expansion of macro 'BORINGSSL_ADD_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:2070:41: note: in expansion of macro 'BORINGSSL_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/dsa/dsa.c:254:32: note: in expansion of macro 'RAND_bytes'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/internal.h:1356:35: note: in expansion of macro 'AWS_LC_ENSURE'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/dsa/dsa.c:254:9: note: in expansion of macro 'AWSLC_ABORT_IF_NOT_ONE'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/dsa/dsa.c: scope_hint: In function 'aws_lc_0_41_0_dsa_internal_paramgen.part.0'
#  263|         // precompute "SEED + 1" for step 7:
#  264|         for (size_t i = qsize - 1; i < qsize; i--) {
#  265|->         buf[i]++;
#  266|           if (buf[i] != 0) {
#  267|             break;

Error: GCC_ANALYZER_WARNING (CWE-476): [#def5]
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/evp_extra/evp_asn1.c: scope_hint: In function 'aws_lc_0_41_0_EVP_PKEY_asn1_find'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/evp_extra/evp_asn1.c:666:14: warning[-Wanalyzer-null-dereference]: dereference of NULL '0'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/include/openssl/base.h:34: included_from: Included from here.
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/include/openssl/evp.h:7: included_from: Included from here.
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/evp_extra/evp_asn1.c:4: included_from: Included from here.
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:16:42: note: in definition of macro 'BORINGSSL_ADD_PREFIX_INNER'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:1294:28: note: in expansion of macro 'BORINGSSL_ADD_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:1294:49: note: in expansion of macro 'BORINGSSL_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/evp_extra/evp_asn1.c:663:29: note: in expansion of macro 'EVP_PKEY_asn1_find'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:16:42: note: in definition of macro 'BORINGSSL_ADD_PREFIX_INNER'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:1296:28: note: in expansion of macro 'BORINGSSL_ADD_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:1296:49: note: in expansion of macro 'BORINGSSL_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/evp_extra/evp_asn1.c:665:41: note: in expansion of macro 'EVP_PKEY_asn1_get0'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:16:42: note: in definition of macro 'BORINGSSL_ADD_PREFIX_INNER'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:1296:28: note: in expansion of macro 'BORINGSSL_ADD_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:1296:49: note: in expansion of macro 'BORINGSSL_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/evp_extra/evp_asn1.c:665:41: note: in expansion of macro 'EVP_PKEY_asn1_get0'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:16:42: note: in definition of macro 'BORINGSSL_ADD_PREFIX_INNER'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:1296:28: note: in expansion of macro 'BORINGSSL_ADD_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:1296:49: note: in expansion of macro 'BORINGSSL_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/evp_extra/evp_asn1.c:656:29: note: in expansion of macro 'EVP_PKEY_asn1_get0'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:16:42: note: in definition of macro 'BORINGSSL_ADD_PREFIX_INNER'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:1298:33: note: in expansion of macro 'BORINGSSL_ADD_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:1298:54: note: in expansion of macro 'BORINGSSL_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/evp_extra/evp_asn1.c:657:25: note: in expansion of macro 'EVP_PKEY_asn1_get_count'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:16:42: note: in definition of macro 'BORINGSSL_ADD_PREFIX_INNER'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:1296:28: note: in expansion of macro 'BORINGSSL_ADD_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:1296:49: note: in expansion of macro 'BORINGSSL_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/evp_extra/evp_asn1.c:665:41: note: in expansion of macro 'EVP_PKEY_asn1_get0'
#  664|     for (size_t i = 0; i < (size_t)EVP_PKEY_asn1_get_count(); i++) {
#  665|       const EVP_PKEY_ASN1_METHOD *ameth = EVP_PKEY_asn1_get0(i);
#  666|->     if (ameth->pkey_id == type) {
#  667|         return ameth;
#  668|       }

Error: GCC_ANALYZER_WARNING (CWE-476): [#def6]
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/evp_extra/evp_asn1.c: scope_hint: In function 'aws_lc_0_41_0_EVP_PKEY_asn1_find_str'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/evp_extra/evp_asn1.c:685:30: warning[-Wanalyzer-null-dereference]: dereference of NULL '0'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:16:42: note: in definition of macro 'BORINGSSL_ADD_PREFIX_INNER'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:1295:32: note: in expansion of macro 'BORINGSSL_ADD_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:1295:53: note: in expansion of macro 'BORINGSSL_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/evp_extra/evp_asn1.c:673:29: note: in expansion of macro 'EVP_PKEY_asn1_find_str'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:16:42: note: in definition of macro 'BORINGSSL_ADD_PREFIX_INNER'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:1835:25: note: in expansion of macro 'BORINGSSL_ADD_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:1835:46: note: in expansion of macro 'BORINGSSL_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/evp_extra/evp_asn1.c:679:27: note: in expansion of macro 'OPENSSL_strnlen'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:16:42: note: in definition of macro 'BORINGSSL_ADD_PREFIX_INNER'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:1296:28: note: in expansion of macro 'BORINGSSL_ADD_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:1296:49: note: in expansion of macro 'BORINGSSL_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/evp_extra/evp_asn1.c:682:41: note: in expansion of macro 'EVP_PKEY_asn1_get0'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:16:42: note: in definition of macro 'BORINGSSL_ADD_PREFIX_INNER'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:1296:28: note: in expansion of macro 'BORINGSSL_ADD_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:1296:49: note: in expansion of macro 'BORINGSSL_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/evp_extra/evp_asn1.c:682:41: note: in expansion of macro 'EVP_PKEY_asn1_get0'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:16:42: note: in definition of macro 'BORINGSSL_ADD_PREFIX_INNER'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:1296:28: note: in expansion of macro 'BORINGSSL_ADD_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:1296:49: note: in expansion of macro 'BORINGSSL_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/evp_extra/evp_asn1.c:656:29: note: in expansion of macro 'EVP_PKEY_asn1_get0'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:16:42: note: in definition of macro 'BORINGSSL_ADD_PREFIX_INNER'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:1298:33: note: in expansion of macro 'BORINGSSL_ADD_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:1298:54: note: in expansion of macro 'BORINGSSL_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/evp_extra/evp_asn1.c:657:25: note: in expansion of macro 'EVP_PKEY_asn1_get_count'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:16:42: note: in definition of macro 'BORINGSSL_ADD_PREFIX_INNER'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:1296:28: note: in expansion of macro 'BORINGSSL_ADD_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:1296:49: note: in expansion of macro 'BORINGSSL_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/evp_extra/evp_asn1.c:682:41: note: in expansion of macro 'EVP_PKEY_asn1_get0'
#  683|   
#  684|       const size_t pem_str_len =
#  685|->         OPENSSL_strnlen(ameth->pem_str, MAX_PEM_STR_LEN);
#  686|   
#  687|       // OPENSSL_strncasecmp(a, b, n) compares up to index n-1

Error: GCC_ANALYZER_WARNING (CWE-457): [#def7]
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/pkcs8/pkcs8.c: scope_hint: In function 'aws_lc_0_41_0_pkcs12_key_gen.part.0'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/pkcs8/pkcs8.c:167:30: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value 'B[j]'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/include/openssl/base.h:34: included_from: Included from here.
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/include/openssl/pkcs8.h:9: included_from: Included from here.
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/pkcs8/pkcs8.c:5: included_from: Included from here.
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:16:42: note: in definition of macro 'BORINGSSL_ADD_PREFIX_INNER'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:3934:24: note: in expansion of macro 'BORINGSSL_ADD_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:3934:45: note: in expansion of macro 'BORINGSSL_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/pkcs8/pkcs8.c:57:5: note: in expansion of macro 'pkcs12_key_gen'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:16:42: note: in definition of macro 'BORINGSSL_ADD_PREFIX_INNER'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:1230:27: note: in expansion of macro 'BORINGSSL_ADD_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:1230:48: note: in expansion of macro 'BORINGSSL_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/pkcs8/pkcs8.c:81:23: note: in expansion of macro 'EVP_MD_block_size'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:16:42: note: in definition of macro 'BORINGSSL_ADD_PREFIX_INNER'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:1796:24: note: in expansion of macro 'BORINGSSL_ADD_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:1796:45: note: in expansion of macro 'BORINGSSL_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/pkcs8/pkcs8.c:111:7: note: in expansion of macro 'OPENSSL_malloc'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:16:42: note: in definition of macro 'BORINGSSL_ADD_PREFIX_INNER'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:1152:27: note: in expansion of macro 'BORINGSSL_ADD_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:1152:48: note: in expansion of macro 'BORINGSSL_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/pkcs8/pkcs8.c:131:10: note: in expansion of macro 'EVP_DigestInit_ex'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:16:42: note: in definition of macro 'BORINGSSL_ADD_PREFIX_INNER'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:1158:26: note: in expansion of macro 'BORINGSSL_ADD_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:1158:47: note: in expansion of macro 'BORINGSSL_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/pkcs8/pkcs8.c:132:10: note: in expansion of macro 'EVP_DigestUpdate'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:16:42: note: in definition of macro 'BORINGSSL_ADD_PREFIX_INNER'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:1158:26: note: in expansion of macro 'BORINGSSL_ADD_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:1158:47: note: in expansion of macro 'BORINGSSL_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/pkcs8/pkcs8.c:133:10: note: in expansion of macro 'EVP_DigestUpdate'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:16:42: note: in definition of macro 'BORINGSSL_ADD_PREFIX_INNER'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:1150:28: note: in expansion of macro 'BORINGSSL_ADD_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:1150:49: note: in expansion of macro 'BORINGSSL_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/pkcs8/pkcs8.c:134:10: note: in expansion of macro 'EVP_DigestFinal_ex'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/pkcs8/pkcs8.c: scope_hint: In function 'aws_lc_0_41_0_pkcs12_key_gen.part.0'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/internal.h:14: included_from: Included from here.
#  165|         unsigned carry = 1;
#  166|         for (size_t j = block_size - 1; j < block_size; j--) {
#  167|->         carry += I[i + j] + B[j];
#  168|           I[i + j] = (uint8_t)carry;
#  169|           carry >>= 8;

Error: GCC_ANALYZER_WARNING (CWE-775): [#def8]
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/rand_extra/urandom.c: scope_hint: In function 'init_try_urandom_once'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/rand_extra/urandom.c:269:6: warning[-Wanalyzer-fd-leak]: leak of file descriptor '<unknown>'
#  267|     } while (fd == -1 && errno == EINTR);
#  268|   
#  269|->   if (fd < 0) {
#  270|       perror("failed to open /dev/urandom");
#  271|       goto out;

Error: GCC_ANALYZER_WARNING (CWE-401): [#def9]
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/thread_pthread.c: scope_hint: In function 'aws_lc_0_41_0_CRYPTO_set_thread_local'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/thread_pthread.c:231:1: warning[-Wanalyzer-malloc-leak]: leak of 'pointers'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/include/openssl/base.h:34: included_from: Included from here.
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/include/openssl/crypto.h:7: included_from: Included from here.
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/internal.h:8: included_from: Included from here.
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/thread_pthread.c:8: included_from: Included from here.
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:16:42: note: in definition of macro 'BORINGSSL_ADD_PREFIX_INNER'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:760:33: note: in expansion of macro 'BORINGSSL_ADD_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:760:54: note: in expansion of macro 'BORINGSSL_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/thread_pthread.c:283:5: note: in expansion of macro 'CRYPTO_set_thread_local'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:16:42: note: in definition of macro 'BORINGSSL_ADD_PREFIX_INNER'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:736:21: note: in expansion of macro 'BORINGSSL_ADD_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:736:42: note: in expansion of macro 'BORINGSSL_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/thread_pthread.c:285:3: note: in expansion of macro 'CRYPTO_once'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:16:42: note: in definition of macro 'BORINGSSL_ADD_PREFIX_INNER'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:736:21: note: in expansion of macro 'BORINGSSL_ADD_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:736:42: note: in expansion of macro 'BORINGSSL_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/thread_pthread.c:227:6: note: in expansion of macro 'CRYPTO_once'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:16:42: note: in definition of macro 'BORINGSSL_ADD_PREFIX_INNER'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:736:21: note: in expansion of macro 'BORINGSSL_ADD_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:736:42: note: in expansion of macro 'BORINGSSL_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/thread_pthread.c:285:3: note: in expansion of macro 'CRYPTO_once'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/thread_pthread.c: scope_hint: In function 'aws_lc_0_41_0_CRYPTO_set_thread_local'
#  229|       abort();
#  230|     }
#  231|-> }
#  232|   
#  233|   static pthread_mutex_t g_destructors_lock = PTHREAD_MUTEX_INITIALIZER;

Error: GCC_ANALYZER_WARNING (CWE-131): [#def10]
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/x509/x509_lu.c: scope_hint: In function 'x509_object_cmp.part.0'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/x509/x509_lu.c:85:57: warning[-Wanalyzer-allocation-size]: allocated buffer size is not a multiple of the pointee's size
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:16:42: note: in definition of macro 'BORINGSSL_ADD_PREFIX_INNER'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:1826:26: note: in expansion of macro 'BORINGSSL_ADD_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:1826:47: note: in expansion of macro 'BORINGSSL_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/include/openssl/stack.h:419:21: note: in expansion of macro 'OPENSSL_sk_value'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/include/openssl/stack.h:44:3: note: in expansion of macro 'BORINGSSL_DEFINE_STACK_OF_IMPL'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/include/openssl/stack.h:51:31: note: in expansion of macro 'DEFINE_NAMED_STACK_OF'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/include/openssl/x509.h:2531:1: note: in expansion of macro 'DEFINE_STACK_OF'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/x509/x509_lu.c: scope_hint: In function 'x509_object_cmp.part.0'
#   83|     switch (a->type) {
#   84|       case X509_LU_X509:
#   85|->       return X509_subject_name_cmp(a->data.x509, b->data.x509);
#   86|       case X509_LU_CRL:
#   87|         return X509_CRL_cmp(a->data.crl, b->data.crl);

Error: GCC_ANALYZER_WARNING (CWE-476): [#def11]
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/x509/x509_trs.c: scope_hint: In function 'aws_lc_0_41_0_X509_check_trust'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/x509/x509_trs.c:52:12: warning[-Wanalyzer-null-dereference]: dereference of NULL '0'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/include/openssl/base.h:34: included_from: Included from here.
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/include/openssl/err.h:10: included_from: Included from here.
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/x509/x509_trs.c:8: included_from: Included from here.
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:16:42: note: in definition of macro 'BORINGSSL_ADD_PREFIX_INNER'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:2708:26: note: in expansion of macro 'BORINGSSL_ADD_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:2708:47: note: in expansion of macro 'BORINGSSL_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/x509/x509_trs.c:35:5: note: in expansion of macro 'X509_check_trust'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:16:42: note: in definition of macro 'BORINGSSL_ADD_PREFIX_INNER'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:2659:30: note: in expansion of macro 'BORINGSSL_ADD_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:2659:51: note: in expansion of macro 'BORINGSSL_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/x509/x509_trs.c:47:13: note: in expansion of macro 'X509_TRUST_get_by_id'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:16:42: note: in definition of macro 'BORINGSSL_ADD_PREFIX_INNER'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:2659:30: note: in expansion of macro 'BORINGSSL_ADD_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:2659:51: note: in expansion of macro 'BORINGSSL_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/x509/x509_trs.c:47:13: note: in expansion of macro 'X509_TRUST_get_by_id'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:16:42: note: in definition of macro 'BORINGSSL_ADD_PREFIX_INNER'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:2659:30: note: in expansion of macro 'BORINGSSL_ADD_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:2659:51: note: in expansion of macro 'BORINGSSL_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/x509/x509_trs.c:64:5: note: in expansion of macro 'X509_TRUST_get_by_id'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:16:42: note: in definition of macro 'BORINGSSL_ADD_PREFIX_INNER'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:2659:30: note: in expansion of macro 'BORINGSSL_ADD_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:2659:51: note: in expansion of macro 'BORINGSSL_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/x509/x509_trs.c:47:13: note: in expansion of macro 'X509_TRUST_get_by_id'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:16:42: note: in definition of macro 'BORINGSSL_ADD_PREFIX_INNER'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:2657:25: note: in expansion of macro 'BORINGSSL_ADD_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:2657:46: note: in expansion of macro 'BORINGSSL_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/x509/x509_trs.c:51:26: note: in expansion of macro 'X509_TRUST_get0'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:16:42: note: in definition of macro 'BORINGSSL_ADD_PREFIX_INNER'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:2657:25: note: in expansion of macro 'BORINGSSL_ADD_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:2657:46: note: in expansion of macro 'BORINGSSL_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/x509/x509_trs.c:51:26: note: in expansion of macro 'X509_TRUST_get0'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:16:42: note: in definition of macro 'BORINGSSL_ADD_PREFIX_INNER'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:2657:25: note: in expansion of macro 'BORINGSSL_ADD_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:2657:46: note: in expansion of macro 'BORINGSSL_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/x509/x509_trs.c:57:19: note: in expansion of macro 'X509_TRUST_get0'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:16:42: note: in definition of macro 'BORINGSSL_ADD_PREFIX_INNER'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:2657:25: note: in expansion of macro 'BORINGSSL_ADD_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:2657:46: note: in expansion of macro 'BORINGSSL_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/x509/x509_trs.c:51:26: note: in expansion of macro 'X509_TRUST_get0'
#   50|     }
#   51|     const X509_TRUST *pt = X509_TRUST_get0(idx);
#   52|->   return pt->check_trust(pt, x);
#   53|   }
#   54|   

Error: GCC_ANALYZER_WARNING (CWE-476): [#def12]
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/x509/x_x509a.c: scope_hint: In function 'aws_lc_0_41_0_X509_add1_trust_object'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/x509/x_x509a.c:107:10: warning[-Wanalyzer-null-dereference]: dereference of NULL '0'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/include/openssl/base.h:34: included_from: Included from here.
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/include/openssl/asn1t.h:8: included_from: Included from here.
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/x509/x_x509a.c:7: included_from: Included from here.
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:16:42: note: in definition of macro 'BORINGSSL_ADD_PREFIX_INNER'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:2694:32: note: in expansion of macro 'BORINGSSL_ADD_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:2694:53: note: in expansion of macro 'BORINGSSL_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/x509/x_x509a.c:101:5: note: in expansion of macro 'X509_add1_trust_object'
#  105|     }
#  106|     X509_CERT_AUX *aux = aux_get(x);
#  107|->   if (aux->trust == NULL) {
#  108|       aux->trust = sk_ASN1_OBJECT_new_null();
#  109|       if (aux->trust == NULL) {

Error: GCC_ANALYZER_WARNING (CWE-476): [#def13]
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/x509/x_x509a.c: scope_hint: In function 'aws_lc_0_41_0_X509_add1_reject_object'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/x509/x_x509a.c:129:10: warning[-Wanalyzer-null-dereference]: dereference of NULL '0'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:16:42: note: in definition of macro 'BORINGSSL_ADD_PREFIX_INNER'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:2693:33: note: in expansion of macro 'BORINGSSL_ADD_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/generated-include/openssl/boringssl_prefix_symbols.h:2693:54: note: in expansion of macro 'BORINGSSL_PREFIX'
goose-1.36.0/vendor/aws-lc-sys-0.41.0/aws-lc/crypto/x509/x_x509a.c:123:5: note: in expansion of macro 'X509_add1_reject_object'
#  127|     }
#  128|     X509_CERT_AUX *aux = aux_get(x);
#  129|->   if (aux->reject == NULL) {
#  130|       aux->reject = sk_ASN1_OBJECT_new_null();
#  131|       if (aux->reject == NULL) {

Scan Properties